last executing test programs: 2m32.774217037s ago: executing program 4 (id=294): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x402, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000500000000040000cd00000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r2}, 0x10) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000180)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000540)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @fda={0x66646185, 0x9, 0x0, 0x35}}, &(0x7f0000000200)={0x1a, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 2m31.809776328s ago: executing program 4 (id=300): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@private1, 0x0}, &(0x7f00000000c0)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000140)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x29, 0x8, 0x2, 0x5ffd7d55, 0xc, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x43}, 0x7, 0x8000, 0x13, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000002c0)={'syztnl0\x00', &(0x7f0000000240)={'ip6gre0\x00', 0x0, 0x2f, 0x5, 0x5, 0x7, 0x76, @local, @dev={0xfe, 0x80, '\x00', 0xd}, 0x40, 0x7, 0xb, 0x3}}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000300)={@dev, @rand_addr, 0x0}, &(0x7f0000000340)=0xc) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000400)={'ip_vti0\x00', &(0x7f0000000380)={'erspan0\x00', 0x0, 0x20, 0x1, 0x5, 0x561, {{0x10, 0x4, 0x3, 0x2d, 0x40, 0x65, 0x0, 0x2, 0x2f, 0x0, @local, @loopback, {[@timestamp_addr={0x44, 0x2c, 0xfd, 0x1, 0x8, [{@multicast1, 0x6}, {@multicast1, 0x6}, {@dev={0xac, 0x14, 0x14, 0x11}, 0x40}, {@rand_addr=0x64010101, 0x9}, {@empty, 0xffff}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'vxcan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000500)={'ip6_vti0\x00', &(0x7f0000000480)={'syztnl2\x00', 0x0, 0x2f, 0x8, 0x3, 0x4, 0x18, @dev={0xfe, 0x80, '\x00', 0x42}, @local, 0x8, 0x80, 0x9, 0xfff}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0x58, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000680)={'syztnl2\x00', &(0x7f0000000600)={'gre0\x00', 0x0, 0x7f00, 0x8000, 0xf, 0x3, {{0x9, 0x4, 0x2, 0x9, 0x24, 0x65, 0x0, 0x5, 0x4, 0x0, @loopback, @loopback, {[@ssrr={0x89, 0xf, 0x55, [@broadcast, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f00000006c0)={@rand_addr, 0x0}, &(0x7f0000000700)=0x14) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000980)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000940)={&(0x7f0000000740)={0x1e8, r1, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x80}, 0x44000) r13 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r13, 0x107, 0x5, &(0x7f00000009c0)=@req3={0x1, 0x6, 0x6, 0x4, 0x1b35f73, 0x7fff, 0x7}, 0x1c) r14 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c40)={&(0x7f0000000b80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4c, 0x4c, 0x4, [@enum={0x5, 0x6, 0x0, 0x6, 0x4, [{0x5, 0x7f}, {0x3, 0x9}, {0x6, 0xf}, {0x6, 0xe}, {0x9, 0x7}, {0x10, 0x8}]}, @int={0x8, 0x0, 0x0, 0x1, 0x0, 0x4a, 0x0, 0x0, 0x6}]}, {0x0, [0x2e, 0x0]}}, &(0x7f0000000c00)=""/16, 0x68, 0x10, 0x1, 0x2, 0x10000}, 0x28) r15 = openat2(0xffffffffffffffff, &(0x7f0000000d00)='./file0\x00', &(0x7f0000000d40)={0x82, 0x8}, 0x18) r16 = bpf$MAP_CREATE(0x0, &(0x7f0000000d80)=@bloom_filter={0x1e, 0x7ff, 0x7fffffff, 0x300bc28, 0x10800, 0x1, 0x5, '\x00', r10, 0xffffffffffffffff, 0x3, 0x0, 0x2, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000e80)={{0x1, 0xffffffffffffffff}, &(0x7f0000000e00), &(0x7f0000000e40)}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000f40)={0x6, 0x7, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x49, 0x0, 0x0, 0x0, 0x8000}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffc}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x1}]}, &(0x7f0000000a40)='syzkaller\x00', 0x7, 0xea, &(0x7f0000000a80)=""/234, 0x41000, 0x4, '\x00', r8, 0x25, r14, 0x8, &(0x7f0000000c80)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000cc0)={0x5, 0xe, 0x8000, 0x5}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000ec0)=[r15, r16, r17], &(0x7f0000000f00)=[{0x5, 0x4, 0xa, 0x9}, {0x5, 0x1, 0x6, 0xc}, {0x0, 0x2, 0x0, 0x6}, {0x2, 0x2, 0xd, 0xc}], 0x10, 0x1}, 0x94) capset(&(0x7f0000001000)={0x20080522}, &(0x7f0000001040)={0xb, 0x2, 0x8, 0x4, 0xfffffff7, 0x39601092}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000001080)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r15, 0x40082102, &(0x7f0000001100)=r18) bind$netlink(r15, &(0x7f0000001140)={0x10, 0x0, 0x25dfdbfb, 0x800}, 0xc) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001200)={{r16}, &(0x7f0000001180), &(0x7f00000011c0)='%pK \x00'}, 0x20) sendmsg$sock(r13, &(0x7f00000017c0)={&(0x7f0000001240)=@pppol2tpv3={0x18, 0x1, {0x0, r15, {0x2, 0x4e20, @remote}, 0x2, 0x3, 0x0, 0x2}}, 0x80, &(0x7f0000001680)=[{&(0x7f00000012c0)="34d615bcc3d6742bf160483906f074d075484ffa3c582b5c466780f007ba71807f084059b5f17bff9c6305e875e48f6172a53eb0f87b3e0435e7f3d1572352996ef3551c4247436fd14a231f4e22dc6439eeebe8dc0e206796e56f326ae9d3bab58cda9dff241982c4badb0e0b14113a57d7cca94d9d53fb2c337833a810482e5254ce50b230cd560630811eba18888e0472b0d074b18c085c311a44e47abbe82beb3f5f83b7864c96b8412c2356bacf27981c3e3248518b660b15399a8046d90c1e3ea3", 0xc4}, {&(0x7f00000013c0)="948cde9fb040e4cf9d16d466ad53fd775aaf2e0dfec9d32826b22a9ae1a5ed6c550e25987ce72b59f96410cbb5a0d930103cc42db4ee30ee5b18320ee9bd18369fc51ee83f6e618105eb74021d3ccbc14a207cbc9f80ac98a7b0457f5ad3b43a64b8b2f2", 0x64}, {&(0x7f0000001440)="2d28d49515ad16cfd2ddcb34ad4313f13c772aab87573b29ab4a7751260025fc32effb755eb78f618d3469c1e7895b916574d6271cc82750d7525476b8d0532a29d4e6e82f3d12bafcc1db97762ff61021426d307f69ddcc75963c65b58a9865728b4b73eb9945f359f7f0e1a4953a4ac74d3fd96331b7ce10e649b8377e4d9f09ec95e2f1a977c4a946183ec1f1303d289da236fc3ded94d3c0a59e3af8d017d0ad7c34df776cd731d6976d4d73bab4fd0a4fb63f9099851ee7aac5d564bce408ac3e36596f84c10df1857f3458299a7f155cbb4c14fa1bcebdff7f17f4a87500f1ecdf4dbac38e6cfb5334815ed1c383dbb4323b046624", 0xf8}, {&(0x7f0000001540)="cac21ae95f6960511e690194afff1a70a0394d4769e24e8428e4cc4ebab601ccfdf73638733c01213c331d8071b09e7e52be2a5beac167c61032218d048c7f95b2fbed7acf61dabd2522592053ac1dbad566bf8ac4aaa8dd2742e42f8eba9825e180ec13857293e7abe078e51cd0ab7d2f370daeeafee17fa0902de088622b421300f3b817ae013c2ac1403fd736a6ccb8eaa2672059bf786f80f1", 0x9b}, {&(0x7f0000001600)="6e00f34dcd05417880756fdf49da418f00f31dd1e209194622014b8592a73a2e3806198b078c4343017cff87b342258e7a18c50abade77cc33987d96dd260a0da3aac7ab57af", 0x46}], 0x5, &(0x7f0000001700)=[@txtime={{0x18, 0x1, 0x3d, 0x8}}, @mark={{0x14, 0x1, 0x24, 0x6}}, @mark={{0x14, 0x1, 0x24, 0x1530d27f}}, @mark={{0x14, 0x1, 0x24, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}, @mark={{0x14, 0x1, 0x24, 0x6}}, @mark={{0x14, 0x1, 0x24, 0x3ff}}], 0xc0}, 0x48011) r19 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001a00)=@bpf_ext={0x1c, 0x4, &(0x7f0000001800)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, [@ldst={0x3, 0x2, 0x2, 0x5, 0x2, 0x0, 0x1}]}, &(0x7f0000001840)='GPL\x00', 0x0, 0x6f, &(0x7f0000001880)=""/111, 0x41100, 0x42, '\x00', r3, 0x0, r14, 0x8, &(0x7f0000001900)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000001940)={0x4, 0x7, 0x0, 0x407c3a03}, 0x10, 0x3add, r15, 0x5, 0x0, &(0x7f0000001980)=[{0x0, 0x1, 0x2, 0x4}, {0x2, 0x2, 0xc, 0x2}, {0x3, 0x1, 0xa, 0x6}, {0x1, 0x5, 0x4, 0xe}, {0x0, 0x3, 0xc, 0xa}], 0x10, 0x4}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000001ac0)=r19, 0x4) socketpair(0x18, 0x4, 0x10, &(0x7f0000001b00)) 2m31.77326325s ago: executing program 4 (id=301): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ptrace$ARCH_GET_MAX_TAG_BITS(0x1e, r0, 0x0, 0x4003) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r4, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="a800000000010904000500000000000002000000240001801400018008000100e000000108000200ac1e01010c00028005000100000009002400028014000180080001000000010908000200ac1e00010c000280050001000000000044000f800800014000000006080003400000002b080003400000000808000240000000400800014000000000fb0001400000000708000140000044f10800034000000003080007"], 0xa8}}, 0x0) 2m30.418562468s ago: executing program 4 (id=308): lsetxattr$security_ima(0x0, 0x0, 0x0, 0x1009, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5457, &(0x7f0000000000)={0x0, 0x629, 0xffffffff, 0x0, 0x7, "7a58bea88a00"}) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/key-users\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x41fb}, 0x94) socket$can_raw(0x1d, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r4 = syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x880, &(0x7f00000001c0)=ANY=[@ANYBLOB='shortname=lower,iocharset=iso8859-1,fmask=00000000000000000000066,uni_xlate=1,uni_xlate=0,fmask=00000000000000000000003,uid=', @ANYRESHEX=0x0, @ANYBLOB=',uni_xlate=0,utf8=1,check=strict,nonumtail=0,rodir,errors=continue,shortname=lower,umaQk=00000000000000000000007,rodir,sys_immutable,\x00'], 0x4, 0x2dc, &(0x7f0000000bc0)="$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") r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000640)={'#! ', './file1'}, 0xb) sendfile(0xffffffffffffffff, r0, 0x0, 0x20000023893) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x35, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x88}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ioprio_get$pid(0x2, 0x0) socket$netlink(0x10, 0x3, 0x2) read$FUSE(r4, &(0x7f0000000ec0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) setreuid(0xee00, r6) syz_usb_connect(0x0, 0x8c6, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201500236e47e2082055c2955d4010203010902b408048006a00309047f0e01ff2dde700a24010100800201020824050503"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x2f, &(0x7f0000000100)=ANY=[@ANYBLOB="2f03bac6c75bef54b57901ce9c63dae3933f2b"]}]}) 2m27.112360289s ago: executing program 4 (id=342): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0x7, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x4, 0xc9, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80004, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xb, 0xb}, {0xa, 0xffeb}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x4008000) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r7, 0x0, 0x0, 0x40, &(0x7f00000001c0)={0x11, 0x86dd, r6, 0x1, 0x64, 0x6, @random="df000300"}, 0x14) 2m26.978418094s ago: executing program 4 (id=347): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x16, 0x0, 0x4, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r3}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000180)=""/82, 0x52}], 0x1}, 0x2100) sendmsg$inet(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000840)='J', 0x1}], 0x1}, 0x0) sendmsg(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="3c25bad07607ab4ff4e6ce192a46a569759c8398dd027638a46c2a04af3821b747f0630b61a8e8ff7f2b7cba4de93934fd1108cdd91e35e42b19ffcfd8490b95ff56ab083fde5c6cd97a5faa4fe9539909", 0x51}], 0x1}, 0x50) 2m26.948157385s ago: executing program 32 (id=347): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x16, 0x0, 0x4, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r3}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000180)=""/82, 0x52}], 0x1}, 0x2100) sendmsg$inet(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000840)='J', 0x1}], 0x1}, 0x0) sendmsg(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="3c25bad07607ab4ff4e6ce192a46a569759c8398dd027638a46c2a04af3821b747f0630b61a8e8ff7f2b7cba4de93934fd1108cdd91e35e42b19ffcfd8490b95ff56ab083fde5c6cd97a5faa4fe9539909", 0x51}], 0x1}, 0x50) 5.238444976s ago: executing program 1 (id=921): socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000ffffffff000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000d379)={&(0x7f0000000380)={0x18, 0x14, 0x609, 0x0, 0x0, {0x1e}, [@generic="c1"]}, 0x18}}, 0x8040) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000008c0)=ANY=[@ANYBLOB="38010000100013070000000000000000ac1e0001000000000000000000000000e000000100000000000000000000000000000000000000000a0000005e000000", @ANYRES32=0x0, @ANYBLOB="0c39468747b4a1afa704c6e6a3b025c649149691ecc5bca2578bb24d3965dbfbd50de7598a97b438cc8ebc48cdea14a9e4b03f550951a3b0f0bb606840e2c1f97d6849828cf573fadd65f04bf160aab2ca39fbac016122584ac0e412ecac08b304c573168eeb747a9b73e600f62f445a70843167ff2c11f79d30887dc919ed24b374a3a68e2d42f26f440ec9f7e4e498cc6276e7acb873c0e44625a2fae505000000000000001b2d36cdc200df83f3008b734111212e99c356c0c14d69baa7b5683326b5feb38926534b80a7bae688", @ANYBLOB="00000000000000000000000000000001000004d432000000ac141400000000000000000000000000fdffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000041057a00000000000000000000000000000000000000000000000000000000000002000000000000000000000000001000000000000000000000000000020000002abd70000000000002000400000000000000000048000200656362286369706865725f6e756c6c2900000000000600"/243], 0x138}, 0x1, 0x0, 0x0, 0x20000011}, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'team_slave_1\x00'}) 4.283935478s ago: executing program 2 (id=924): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="a800000000010904000500000000000002000000240001801400018008000100e000000108000200ac1e01010c00028005000100000009002400028014000180080001000000010908000200ac1e00010c000280050001000000000044000f800800014000000006080003400000002b080003400000000808000240000000400800014000000000fb0001400000000708000140000044f10800034000000003080007"], 0xa8}}, 0x0) 3.396192815s ago: executing program 1 (id=930): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r2}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8101, 0x6028d}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}, @IFLA_MTU={0x8, 0x4, 0x3}]}, 0x40}}, 0x20000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='cachefiles_mark_failed\x00', r0}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x30000c6, &(0x7f0000000240)={[{@grpquota}, {@lazytime}, {@mblk_io_submit}, {@noblock_validity}]}, 0x2, 0x553, &(0x7f0000001080)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000680)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 2.877815517s ago: executing program 2 (id=933): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000400000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000080)='sys_enter\x00', r0}, 0x18) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_destroy(r1) 2.773410771s ago: executing program 2 (id=934): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) sched_setscheduler(0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000580)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{}, &(0x7f0000001c00)=0x8000000, &(0x7f0000001c40)=r4}, 0x20) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x7000000) pipe2(&(0x7f00000000c0), 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8) r6 = fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CAP_SYNC_REGS(r6, 0x4068aea3, &(0x7f00000004c0)) r7 = socket$netlink(0x10, 0x3, 0x7) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="3900c99a958f0881ca8e596f64e800001300034700bb65e1c3e4ffffb61a84560001000000010000005600000025000000190004000400fffd0706d411ef", 0xfffffffffffffddf}, {&(0x7f0000000040)="8ca053fcfdc2d5d3bd76b12b3dfd99e89a7db80ac1f92749f0fa4b32"}], 0x1) writev(r7, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @loopback, @multicast2}, 0xc) 2.302428341s ago: executing program 1 (id=936): r0 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r0, &(0x7f0000004200)='t', 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="638730c77df479bf235609cd91b94acb93991600aec044be3b0229185fe1236e0ad14c04", @ANYRESDEC, @ANYRES64=0x0], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) (async, rerun: 32) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, 0x0, &(0x7f0000000380)}, 0x20) (async, rerun: 32) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$netlink(0x10, 0x3, 0x0) (async) clock_nanosleep(0x3, 0x1, &(0x7f0000000080)={0x77359400}, &(0x7f00000002c0)) (async, rerun: 32) socket$packet(0x11, 0x2, 0x300) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000ce34000000000000000000850000002f00000095"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) (async) setsockopt$packet_int(r4, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) (async) syz_emit_ethernet(0x3a, &(0x7f0000000080)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x26, 0x2c, 0x0, 0x0, 0x0, 0x5, 0x0, @dev, @private=0xa010100, {[@generic={0x7, 0x2}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) (async, rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000340)='sched_kthread_stop_ret\x00', r2}, 0x10) (async, rerun: 32) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00b8"], 0x40}}, 0x0) 2.192154136s ago: executing program 1 (id=938): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x50) ftruncate(0xffffffffffffffff, 0x472e) bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x1d}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x11, 0x0, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x3, 0x28, 0x0, 0x0, 0x8, 0x6, 0x0, @remote, @local}, {{0x4e23, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x8000, 0x0, 0xfffc}}}}}}, 0x0) 2.167291217s ago: executing program 1 (id=939): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x14, 0x453, 0x10, 0x70bd29, 0x25dfdbfd, '\x00P.'}, 0x14}, 0x1, 0x0, 0x0, 0x20004001}, 0x40880) 2.10341309s ago: executing program 1 (id=940): bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$pppl2tp(0x18, 0x1, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000b00)={0xa, 0xfdfe, 0x100007, @remote, 0xa}, 0x1c) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) connect$pppl2tp(r0, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x5, 0x0, {0xa, 0x0, 0xf9d, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}}}, 0x32) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newtaction={0x48, 0x32, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x34, 0x1, [@m_skbedit={0x30, 0x1, 0x0, 0x0, {{0xc}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x48}}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5ac, 0x22b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}}}]}}]}}, 0x0) syz_usb_control_io(r9, 0x0, 0x0) syz_usb_control_io$hid(r9, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x2, {[@main=@item_012={0x1, 0x0, 0x7, "a4"}]}}, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000000c0)='kmem_cache_free\x00', r8}, 0x18) socket$key(0xf, 0x3, 0x2) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000001040)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67}, {@in6=@remote, 0x0, 0x32}, @in6=@mcast1, {0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}, 0x1, 0xe, 0x0, 0x4000}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r5}, 0x10) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000039c0)=ANY=[@ANYBLOB="b702000006000000bfa300000000000007030000407effff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca7ebfcd0cd00006ed3d09a6175037958e271b60dedf8937f02008b6d83923dd29c034055d47dafe6c8dc3d5d78c07f34e4d5b3185b310efd4989147a00000000f110026e6d2ef831ab7ea0c34f17e3adeef3bb622003b538dfd8e012e71f6420b90adddff61b5b0a341a2d7cbdb90000bdb2ca76050000003a14817ac61e4dd11183a13477bf7e060e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132658555cf476619f28d9961b626c57c2691208171656d60a17e3c1c4b751ca532e6ea09c346df3d7cb4ebd31a08b32808980200000000000000334d83239d0c2e9ff10ff2d27080e71113610e10c358e8327e7050b6c860dac12233f9a1fb9c2aec61ce63a38d316ef49b66d6e42fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a5f3d74ca891c4594e8a4399e01eadd3964663e88535c133f7130856f75643619f567d2e24f29e5dad9326edb697a6ea0182babc18cae2ed4b4390af9a9ceefd07e002cab5ebfcaad34732181feb215139f15eafddcb0c7cbe31fbae7c34d5ac5e7e64c21add9191eadd6e1795ad6a0f7f8cd3fccbdc3dec04b25dfc17975238345d4f71af35910b158e56657b7218baaa7cbf781c0a99bd50499ccff0f000000000000c7beba3da8223fe5308e4e2833baace04f4087c4f0da0d9a88f9dbb593ddeb3f0932a4d0175b889b8eccf707882042e716df9b57b290c661d4e85031086e97bcc5ca0e221a0e34323c129102b7b7a643e82e88a1940b3c02ed9c92d6f64b1282dc519b00159830d7617001154c46bd3ca96318c570f0721fc7aa2a58090000000000000094f22cdf550ef091a78098534f0d973058594000000000000000c12346e47ad97f4ead7cf754a52e4b2d0f22d428bd705414888700a30e2366c6a06b3367a389ca3905689a1f3db9c24db65c1e0001581d573dab18fd0600885f1ea8f2fd299fc3cdafda323e9c7080397bc49d70c060d57bc88fbe09baa058b040360ab9261503d2f363fb099408885afc2bf9a4f8c3506b669e889f5e4be1b8e0d634ebc1057b7e98186fc5141bd670dba6f43279f73db9dec75070cd9ab0fd969169ef6d2857b6bf955012cf7fe50d133da86c0477e42b98a6cc999dc21c3ef408e633dfa35f14d6e734837d365e63845f3c1092f8dd4fc7ea0000af3904ea0f3698cd9492794b8212a350d726bff873339c4cad4ead1348474250eda2c8067ab730c1d82a5687f2ed690000522a0b7426000000000000000000000000000000000000000093fc7a82b98f99d9dedf7ba17f5f0b6d15e552fbd21f7eecff10243a43af03eea84c4304a5d3f93c3fc74c00000000000043e1ed82b9aa0ae92a499984a009000000937523f5292d12659906005cde64f903c3415c458a2b32c2318f0858f19c6def80e1481e8e1c0098fc3f38b7a57211adb15d824cfdcf229628c0de49860e44286fe0e257cfa4ce50f3d10763d442824414a73c06837fe08de62f8710ca977960b74d0000ce73da6022a8671d1a3575b4e18c28c73203bf134686dd65808452cb6b76fcb134252c78de9b240de7b4cd015a77f76bb6470c05fc980b3d8f3f964f432a4bf6cddd6222c2da006b6fdb9c8468ae1d986a893b9519444d16a6dfa92c04331a6698507048fab5ae402acd05fe621f22712dfd09004770b4278fa14547d8ce3c21188e5e4e2baacd98e8e451d6aaaf090000006ed1d9018000008dd952595d78e9583bf4ea5de36099e3cd32941a815e3f3ceafe3065b9594fdcb24ebb6eddb9e87c9ecec7a42c0000abe1c6ea55887dfa18d0aea1b6eca5a883702b0bf3aefcb225895db90e237157a34e9f447237ea5b391bddd1290f7ce987a0e36b8e71b1779bbe95ffa9c3c0f6ba66e4d48e75253e3d633811e4b3220616aafbe7a3a18375ae593eb58fd500426286472466823cb8e1800aaaa0d9463c0c4ea5541a55df6eeffec0b66482228816cdfccb98374c644eea45de7867a0efbad0ab2bc33b350440a90b791b2b33f74a112a3b91b40bed8db2df8633207f8387e04ca52ab0f3f7b058b13523b896800b992972d9609551c27a5916ea16069c5b0300000026d3c27e7945b29996e5cefbc9f857bc1332d200194f658b930780603134ae6b7f5092772bd5d880dbe21b790c475b14b7fe4fe002dffd651faa79bb0cee0cdac2bc3218f2ddaa6f7ba04b696a30d313bed30ba8f35569a9b07ee7308da09c01a4b827aa1784d927aca9b8540534c5c49a0300cfbc2213fc1572b0204dd456b11a454d1f3f14179974aae624ea59500f5e048b2780666de81a040663c57f49af25be909984ae4e679107a14bbb24851f6199eaf9a1b81f33426f86b4b941c08dfe2bc8ec246ec1aae120c42405e428923f3a83d9ba5c373f5e8a54120b451e2806370f1ed60c9fd5d9af4d16cb0f413c324da52d4bd2e01d3ac2d578d72e2d63322dfc9245ce3e3a097fb82f4e3b61a55594616020f72f1c55ee3d325c7496a7c2f10cfeae16ae436751227378f0b1ee78bd33c50206700dd90b96a330f92bff736c83ca53e7f02b734d1a9292337e2be3896f7e7f244bfab4946c7042e88206f641eafcc5b4ba7a7880533cde00995d1caf6936f356ecf07a0084e7adc2dc12417997b03087c7b3b44b06f6158a2a18ce0e56ffbeb22f40521dd9972583d413098aa80db98ef324a2bfb6961c07b47521973cf0bb6f5530f6216b047b35d6e06b72b22b29de42bb1bc8ce0a0e3500000000000000000000000000b92eb197e4149627920000008000000000801792756f90b37f0858efc387f559203f314a4b0ed750fa72e5948ac3fe5921c14ef578d420e7b2a9e2f87f7b44949fe14c00000000000f47030c09f62d444b4981db81799776eeb4448278de519705fa8b56779bc8cc927b308c8e50815c4c3b27487996c09121caf47f76158362c74904f89cbc588aae84567a83571ff72bb65c082b5a8dedc05a3167d84205d5af86553c21e1f023a51c0e179fccfbc201982ebddcaa45613899d19082453b180ca0c525b8d3cfaf7d0bcddeb5d5c7166038f276a92941393ba5e51f77172822bd903d9f8b436656771774ed88daab0d0cfdd1bffc30ab566e1a4cb3ad66d830e10f7c1de13218aea21e7def613204c2b7c1ad48b01c20024032e9b3bba7d6ceca38d3e96db049b92fc32ee34fe7b8419c8fbf03d61c159dc5864e030000a2c55b614d622b8de966c97e1940026f96db3c78ca18c9f08d1c47edf1a4d7298109f31b6078711ee72eacab61213bf50000000000e1000000000000000000001217887d0452aa6d26e4614d511710abeec84b78c027c160ba3759fa55249b832ce4dfb91122193d514ed992c07f8cd6d897b314907e15642da228dbc03429e6e0e7ac118ed351c3b0c44bf5d8b58be5732f29eed98d5b3688d80f7c66f8333aa8cc2ec5b5e305b3dee2562d415b4b9ed530797f55f9fe8510423409629a09000000000000009a35d9ca93e4b4591679547b8de8af1782451f7b8e1de508f1e9e525210d62bb850f8035040ad9e57abe58797515b737bfb21d35ac560f99dbd18dad5e6345a464955e8141d75b6177e4fa176a020b0000000000006e76f0294fee7d19a0f327f8796d77b6e24b8df4bb438b527d10e657d49b844198ea9f93c4fd6fd2daa9bd87fd1e02ecc8075dca1280c201043257e9bd3c9a7aa150eb1711632b76d4dc053e64bfcfd057980136d6e9faca03b24fa300ef90bfe4ad364256937796f941c2fead94785f48777941f0cd3dba54ab6a5d5e91e90ac9ae994c3d4108b2fe7eca9413ac9bc138c74800487eb19c48db3f79be964808d409b5e36fc7fdd40080361427b6b9c118e5c9a0a1d5ca24886eb8a78796540635ac3530b9025d8bad0533a7f81b2188ec75a5fc9302e3815bdcc9ab11201ef940569c995c21eeaefe2e8fc02e0433dc7371d1f72124bad23e554c30fdd7cd8c2da1e8706417da9ad8916551a1182fac08603dfc2f2279ba161c13984cd753b54a85e6f3018c7d48c4b6c2f6910975e9ff51318b09fa13e2d38ce013aab41524c298c3719e31bcb1f102eaeee69a19e006bcdb1acc2664efa949a1a07bb3d7848d5e1381fbe63c522053a3bb32eb6345e10f7a12bf84e0e196a00833f464dd2f6547f14ebf137fce33efeb813211f31ff24d7dbb00f2574ccda59b3ea068fc2a18c37ee579f5a9ecc47da73684bcadd209ae5bbb7147df745ae7a4e446ca16d027d8d0adcdb54182c9de8053fc8b1b9d19c16c53d34db6e26f6a88d449f6abf378ca2e577e206a758a3d46e45e7949c5b5069103009693a798a330a1ccb32d49772e80862df36dc0156b3f72cd85083f8e96ca1697457ec722766bd46ee2424975a38149bd57e5c0eb4087fc243e7e51b0aca9f0ab0668d7f2ee9ad9f267d8804417aa7e36a64d489bb84a1483fd3c3ecb024060002858cbb1f7708f5b41fca2fee7c03b1f862ce88dc313d913e041dd7583a1ac41c466757c5dd07ea2c5d62a000b84b11308b6636b735b3c654cbc0000000000000019a4e9a9c2cbc906f97fd6eb00b18d09a5df123ebbdb2827b43aed6a29e9942e402c1ae52e9cb98f3019d364fc21ea02023db91ced3c2f06550cef8a79ed39091e4776001187d0ab2f82478431d36470cc008d745ce8fd64c9aa64da230bb080945a557081b767beb75b1ea856a55c71b8fda672289aa6085100d48ac8039f19fec3acbcc5944a4e6fd44af8f10110db730a8d0d41b4ea36f9510f843a471963bd4621b9e43f08d341bb69df430ac4bf5c06c6398c1b28bdd3f4c2353c330d8457cf728294e8ea1861ce50c367498945285f73c94d91210652eb4f3077cab6be2a3512eddbcb63d091d69fb1b26c8ada9a99d747d38ef5042053299b8e95decc637a022a49664742606cfdb2a3258498a6a0a82369d70177433e52b851ac396163ca09e6c22ad796a565cf23d87ae9be7235553aa6b8ab74842d3d4ba738b3fa997f079d225335f2af55644478e514aed8ba202805ad458d9ae6ab8d156f11f3cfe7def690f2bbbb463063664625223d23386540e0db96d8eb1755ad49ae817683de97a6dd32d584391302e65594b12bb2e6630217401031c8a1b964ca32f735421bbf64c9f1f9329e5cfda139ea79619e1d00a9a3ab49993362f30d191aa3387101feaa3e326190804eae2114437f8f4b27480900dd6511844a643886588fbdee7f8863a8dfdd75a9e128c6c15166a5f92d3c2d4952e5d07c59bfce0724a02600094c3369be3024edf451ff76a59855fd90353a0de907834bb77a059c56e92eed2f1415b3d8178453c7aecd8fbd161e2ffd66bcf2be175e45184f06bafd1c1c4fd7006a6c90d8afd126f1c51ee0f724ffbbed25a286c95d17c8b4297f8bba8efd565ecb157f0be244fb9657f737354b20e3a5012abb36052eec7a4fe9bc5b5283581b208d90d28d78f1c5422c3bcad67278e8bb88d7e6ccf72dd61319b44aa617d667000000000000a5edbd3e8605225681090853fc66a20e30fb9938e5886ae748236f5e071278763e070b2b75ce0a9e6870033d25dd19733152b01b507d812216e0f7fc89bbe200806f079e9515dd886a781a46ebe3da4c8307885b535109bb1678d08eeef3717bea30f64282ee844b6d64ec51b1221d175b59c1537089dfa803275ab6dcd40b1fe4e851597c1993a477c225201087b7b0977be62a71927bb01b705267aabe967add451795dfd5114726193415cc3e0784a37db8ab8b97a171bc4ad9593f7c750ad440a26b93d24ee8f080de0f2a16cbd5cd1f370bc1235d88d5cbd25acf91daa392731dab4c9c15015de2fded6332b6ebccf6e1588f3f1a5a3e853587a6843ee1a3f3c270e3ab4462bcff01c70b03e8f8c9d816d7d69e4040155e9f999ce4e366a816c6e7224f41df7eead6d6d214ed98708e1d269f4b469af2e2a2559258439758f4fded2780e736568c7eea209c5ed54a1beaf06013bb4b330d39518528a46d68b277faf926672650cad335ae285aeb0b0130a9c7016580a857722b9c51a5a37a856ccb9b6673f58ebfa66f1db4d041741e104cdd91efa4b3248ebecff3568f31b547b19a939708c3b4b45f46377b4a345248489ddef4bc87426717971de1c0049006d2fb99c311fa91c364749917ee81ea8fd51365449d568eadbad6aead6101b7e6582e793670492d814d58e4a9faa8a4a3027b230e8f5b2349fb3ff3c4365df6bd85aa7f76c388ef94f0155c81b04863624fb4708f83ebf93a51d1438d7761d4b1b929d9aa8faef691676834a2591b75205ede2e4a709c3a9899d06c5cb5a571159402e429c5cf839f49957aed76dc7db43f9fdc754e40d7c662ad7939a09bfdbc31deb0d327895afae1eca61820e09abc2c0ed5ce083aceb89c8e24ad45483d3128f0547869970dc84c8787a06046bf79f28a7678b03baeff239ce600d91a07236e255ff7ea441ff0602bb38d7aaa1c414a94c4e143ea2cca9d14a01bb70ff93057a03288bd71c45b025731765ca5250b162f08be1a29460a53f213bfb88a8e80e4c46dbfa5936894a95d27c4e90c151748f8ee457c29cb7e21deb805a9c5c6abf373a4bad5e1"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffffe8}, 0x48) socket$inet_udplite(0x2, 0x2, 0x88) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r11, 0x18000000000002a0, 0x38, 0x0, &(0x7f0000000140)="b9ff0300600d698cff9e14f086dd", 0x0, 0x63, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) 1.858359121s ago: executing program 2 (id=945): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r4, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="a800000000010904000500000000000002000000240001801400018008000100e000000108000200ac1e01010c00028005000100000009002400028014000180080001000000010908000200ac1e00010c000280050001000000000044000f800800014000000006080003400000002b080003400000000808000240000000400800014000000000fb0001400000000708000140000044f10800034000000003080007"], 0xa8}}, 0x0) 1.377081691s ago: executing program 3 (id=950): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) ftruncate(r2, 0x472e) bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x1d}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x11, 0x0, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x3, 0x28, 0x0, 0x0, 0x8, 0x6, 0x0, @remote, @local}, {{0x4e23, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x8000, 0x0, 0xfffc}}}}}}, 0x0) 1.331753513s ago: executing program 5 (id=952): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000008c50000000f000000850000009e00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x9) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [], {0x14}}, 0x2e}}, 0x0) 1.328294223s ago: executing program 3 (id=953): r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x7, 0x0, &(0x7f0000000000)=0x18) 1.274157015s ago: executing program 3 (id=954): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$exfat(&(0x7f0000000100), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000600)=ANY=[], 0x2, 0x1509, &(0x7f0000001c40)="$eJzs3Au0jtXWOPA511oPm8Sb5L7mmg9vclkkSS4JiSRJjiS5JSRJkoTEJrckJCH3JPeQ3EJyv99yT5IjSZKQkGT9h079nXM63+l83znn842z52+MZ+w19/vO+c5nz733+zxrjL2/7jCoSr2qleowM/xT8E8fUgEgBQD6AkAWAIgAoGTWklkBh0IGjan/3IuIf60Hpl7pDsSVJPNP22T+aZvMP22T+adtMv+0Teaftsn80zaZvxBp2dZpua6RI+0e/3v7/yD7///nyPv/f5DDRUd/vr7odR3/Gyky/7RN5p+2yfzTNpl/2ibzT9tk/v/hIoCKf+dhmX/aJvMXIi270vvPclzZ40p//wkhhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGESBvOhcsMAPy6vtJ9CSGEEEIIIYQQ4l8npP/zKN2Va0QIIYQQQgghhBD/RggKNBiIIB2khxTIABnhKsgEV0NmyAIJuAaywrWQDa6D7JADckIuyA15IC9YIHDAEEM+yA9JuB4KwA1QEApBYSgCHopCMbgRisNNUAJuhpJwC5SCW6E0lIGyUA5ug/JwO1SAilAJ7oDKcCdUgapwF1SDu6E63AM14F6oCfdBLbgfasMfoA48AHXhQagHD0F9eBgaQENoBI2hyf8o/3noAi9AV+gGqdAdesCL0BN6QW/oA33hJegHL0N/eAUGwEAYBK/CYHgNhsDrMBSGwXB4A0bASBgFo2EMjIVx8CaMh7dgArwNE2ESTIYpMBWmwXR4B2bATJgF78JseA/mwFyYB/NhAbwPC2ERLIYPYAl8CEthGSyHFbASVsFqWANrYR2shw2wETbBZtgCW+Ej2AbbYQfshF2wG/bAx7AXPoF98Cnsh8/+Oj/L388/+1f5HREQUKFCgwbTYTpMwRTMiBkxE2bCzJgZE5jArJgVs2E2zI7ZMSfmxNyYG/NiXiQkZGTMh/kwiUksgAWwIBbEwlgYPXoshsWwON6EJbAElsSSWApLYWksg2WwHJbD8lgeK2AFrISVsDJWxipYBe/Cu/BurI7VsQbWwJpYE2thLayNtbEO1sG6WBfrYT2sj/WxATbARtgIm2ATbIpNsRk2wxbYAltiS2yFrbA1tsY22AbbYltsh+2wPbbHDtgBO2In7ITP4/P4Ar6A3bCy6o49sAf2xJ7YG/tgH3wJ++HL+DK+ggNwIA7CV/FVfA2H4BkcisNwOA7H8mokjsLRyGosjsNxOB7H4wScgBNxEk7CKTgVp+F0nI4zcCbOxHdxNr6H7+FcnIvzcQEuwIW4CBfjYlyCZ3EpLsPluAJX4ipciWtwLa7B9bgB1+Mm3IRbcAt+hB/hdtyOO3En7sbd+DF+jJ/gJzgA9+N+PIAH8CAexEN4CA/jYTyCR/AoHsVjeAyP43E8gSfxFJ7E03gaz+BZPIfn8Dyexwv4bO4v6+4utG4AqEuMMiqdSqdSVIrKqDKqTCqTyqwyq4RKqKwqq8qmsqnsKrvKqXKq3Cq3yqvyKlKkWMUqn8qnkiqpCqgCqqAqqAqrwsorr4qpYqq4Kq5KqBKqpLpFlVK3qtKqjGruy6lyqrxq4SuoiqqSqqQqqztVFVVVVVXVVDVVXVVXNVQNVVPVVLXU/aq26o698QF1aTL11ECsrwZhA9VQNVKN1Wv4iGqqhmAz1Vy1UI+pYTgUW6mmvrV6UrVRo7CtelqNxmdUezUWO6jnVEfVSXVWz6suqpnv+ut2p5qCPVUv1Vv1UTPwTnVpYlXUK2qAGqgGqVfVfHxNDVGvq6FqmBqu3lAj1Eg1So1WY9RYNU69qcart9QE9baaqCapyWqKmqqmqenqHTVDzVSz1LtqtnpPzVFz1Tw1Xy1Q76uFapFarD5QS9SHaqlapparFWqlWqVWqzVqrVqn1qsNaqPapDarLWqr+khtU9vVDrVT7VK71R71sdqrPlH71Kdqv/pMHVB/VAfV5+qQ+kIdVl+qI+ordVR9rY6pb9Rx9a06oU6qU+o7dVp9r86os+qc+kGdVz+qC+ondVEFBRq10lobHel0Or1O0Rl0Rn2VBn21zqyz6IS+RmfV1+ps+jqdXefQOXUunVvn0Xm11aSdZh3rfDq/TurrdQF9gy6oC+nCuoj2uqgupm/UxfVNuoS+WZfUt+hS+lZdWpfRZXU5fZsur2/XFXRFXUnfoSvrO3UVXVXfpavpu3V1fY+uoe/VNfV9upa+X9fWf9B19AO6rn5Q19MP6fr6Yd1AN9SNdGPdRD+im+pHdTPdXLfQj+mW+nHdSj+hW+sndRv9lG6rn9bt9DO6vX5Wd9DP6Y66k+6sf9IXddBddTedqrvrHvpF3VP30r11H91Xv6T76Zd1f/2KHqAH6kH6VT1Yv6aH6Nf1UD1MD9dv6BF6pB6lR+sxeqwep9/U4/VbeoJ+W0/Uk/RkPUVP1dN0718qzfoH8t/6G/n9f371LXqr/khv09v1Dr1T79K79R69R+/Ve/U+vU/v1/v1AX1AH9QH9SF9SB/Wh/URfUQf1Uf1MX1MH9fH9Ql9Uv+gv9On9ff6jD6rz+of9Hl9Xl/45WsABo0y2hgTmXQmvUkxGUxGc5XJZK42mU0WkzDXmKzmWpPNXGeymxwmp8llcps8Jq+xhowzbGKTz+Q3SXO9KWBuMAVNIVPYFDHeFDXFzI3/dP7v9dfENDFNTVPTzDQzLUwL09K0NK1MK9PatDZtTBvT1rQ17Uw70960Nx1MB9PRdDSdTWfTxXQxXU1Xk2pSTQ/zoulpepnepo/pa14y/Uw/09/0NwPMADPIDDKDzWAzxAwxQ81QM9wMNyPMCDPKjDJjzBgzzowz4814M8FMMBPNRDPZTDZTzVQz3Uw3M8wMM8vMMrPNbDPHzDHzzDyzwCwwC81Cs9gsNkvMErPULDPLzAqzwqwyq8was8asM+vMBrPBbDKbzFKz1Ww128w2s8PsMLvMLrPH7DF7zV6zz+wz+81+c8AcMAfNQXPIHDKHzWFzxBwxR81Rc8wcM8fNcXPCnDCnzClz2pw2Z8wZc86cM+fNeXPBXDAXzcVLl32RilRkIhOli9JFKVFKlDHKGGWKMkWZo8xRIkpEWaOsUbbouih7lCPKGeWKckd5olSwEUUu4iiO8kX5o2R0fVQguiEqGBWKCkdFIh8VjYpFN0bFo5uiEtHNUcnolqhUdGtUOioTlY3KRbdF5aPbowpRxahSdEdUObozqhJVje6KqkV3R9Wje6Ia0b1Rzei+qFZ0f1Q7+kNUJ3ogqhs9GNWLHorqRw9HDaKGUaOocdTkX1o/hDM5HvVdbTebarvbHvZF29P2sr1tH9vXvmT72Zdtf/uKHWAH2kH2VTvYvmaH2NftUDvMDrdv2BF2pB1lR9sxdqwdZ9+04+1bdoJ92060k+xkO8VOtdPsdPuOnWFn2ln2XTvbvmfn2Ll2np1vF9j37UK7yC62H9gl9kO71C6zy+0Ku9KusqvtGrvWrrPr7Qa70W6ym+0Wu9V+ZLfZ7XaH3Wl32d12j/3Y7rWf2H32U7vffmYP2D/ag/Zze8h+YQ/bL+0R+5U9ar+2x+w39rj91p6wJ+0p+509bb+3Z+xZe87+YM/bH+0F+5O9aMOli/tLb+9kyFA6SkcplEIZKSNlokyUmTJTghKUlbJSNspG2Sk75aSclJtyU17KS5cwMeWjfJSkJBWgAlSQClJhKkyePBWjYlScilMJKkElqSSVolJUmkpTWSpLt9FtdDvdThWpIt1Bd9CddCdVpapUjapRdapONagG1aSaVItqUW2qTXWoDtWlulSP6lF9qk8NqAE1okbUhJpQU2pKzagZtaAW1JJaUitqRa2pNbWhNtSW2lI7akftqT11oA7UkTpSZ+pMXagLdaWulEqp1IN6UE/qSb2pN/WlvtSP+lF/6k8DaAANokE0mAbTEBpCQ2kYDac3aASNpFE0msbQWBpH42g8jacJNIEm0kSaTJNpKk2l6TSdZtAMmkWzaDbNpjk0h+bRPFpAC2ghLaTFtJiW0BJaSktpOS2nlbSSVtNqWktraT2tp420kTbTZtpKW2kbbaMdtIN20S7aQ3toL+2lfbSP9tN+OkAH6CAdpEN0iA7TYTpCR+goHaVjdIyO03E6QSfoFJ2i03SaztAZOkfn6Dz9SBfoJ7pIgVKcgozuKpfJXe0yuywuxWVwl+IIAC7FOV0ul9vlcXmdddldjr+IyTlX0BVyhV0R511RV8zd+Ju4tCvjyrpy7jZX3t3uKvwmrubudtXdPa6Gu9dVdXf9RVzT3edquYdcbfewq+MaurqusavnHnL13cOugWvoGrnGrqV73LVyT7jW7knXxj31m3ihW+TWunVuvdvg9rpP3Dn3gzvqvnbn3Y+uq+vm+rqXXD/3suvvXnED3MDfxMPdG26EG+lGudFujBv7m3iym+KmumluunvHzXAzfxMvcO+72W6xm+Pmunlu/s/xpZ4Wuw/cEvehW+qWueVuhVvpVrnVbs3/73WF2+Q2uy1uj/vYbXPb3Q630+1yu3+OL53HPvep2+8+c0fcV+6g+9wdcsfcYfflz/Gl8zvmvnHH3bfuhDvpTrnv3Gn3vTvjzv58/pfO/Tv3k7voggNGVqzZcMTpOD2ncAbOyFdxJr6aM3MWTvA1nJWv5Wx8HWfnHJyTc3FuzsN52TKxY+aY83F+TvL1XIBv4IJciAtzEfZclIvxjVycb+ISfDOX5Fu4FN/KpbkMl+VyfBuX59u5AlfkSnwHVw6Bq3BVvour8d1cne/hGnwv1+T7uBbfz7X5D1yHH+C6/CDX44e4Pj/MDbghN+LG3IQf4ab8KDfj5tyCH+OW/Di34ie4NT/JbfgpbstPczt+htvzs9yBn+OO3Ik78/PchV/grtyNU7k79+AXuSf34t7ch/vyS9yPX+b+/AoP4IE8iF/lwfwaD+HXeSgP4+H8Bo/gkTyKR/MYHsvj+E0ez2/xBH6bJ/IknsxTeCpP4+n8Ds/gmTyL3+XZ/B7P4bk8j+fzAn6fF/IiXswf8BL+kJfyMl7OK3glr+LVvIbX8jpezxt4I2/izbyFt/JHvI238w7eybt4N+/hj3kvf8L7+FPez5/xAf4jH+TP+RB/wYf5Sz7CX/FR/pqP8Td8nL/lE3yST/F3fJq/5zN8ls/xD3yef+QL/BNf5MAQY6xiHZs4itPF6eOUOEOcMb4qzhRfHWeOs8SJ+Jo4a3xtnC2+Ls4e54hzxrni3HGeOG9sY4pdzHEc54vzx8n4+rhAfENcMC4UF46LxD4uGheLb4yLxzfFJeKb45LxLXGp+NYYUsvED91bLr4tLh/fHleIK8aV4jviyvGdcZW4anxXXC2+O64e3xPXiO+NS8T3xbXi++Pa8R/iOvEDcd34wbhe/FBcP344bhA3jBvFjeMm8SNx0/jRuFncPG4RPxa3jB+PW8VPxK3jJ+M28VO/+3hq3D3uEb8YvxiHcI/65T4xuTC5KLk4+UFySfLD5NLksuTy5IrkyuSq5OrkmuTa5Lrk+uSG5MbkpuTm5JZkCFXTg0evvPbGRz6dT+9TfAaf0V/lM/mrfWafxSf8NT6rv9Zn89f57D6Hz+lz+dw+j8/rrSfvPPvY5/P5fdJf7wv4G3xBX8gX9kW890V9Md/YN/FNfFP/qG/mm/sW/jH/mH/cP+6f8E/4J30b/5Rv65/27fwzvr1/1j/rn/MdfSff2T/vu/gXfFffzaf6VN/D9/A9fU/f2/f2fX1f38/38/19fz/AD/CD/CA/2A/2Q/wQP9QP9cP9cD/Cj/Cj/Cg/xo/x4/w4P96P9xP8BD/RT/ST/WQ/1U/10/10P8PP8LP8LD+74Gw/x8/x8/w8v8Av8Av9Qr/YL/ZL/BK/1C/1y/1yv9Kv9Kv9ar/Wr/Xr/Xq/0W/0m/1mv9Vv9dv8Nr/D7/C7/C6/x+/xe/1ev8/v8/v9fn/AH/AH/UF/yH/hD/sv/RH/lT/qv/bH/Df+uP/Wn/An/Sn/nT/tv/dn/Fl/zv/gz/sf/QX/k7/ogx+XeDMxPvFWYkLi7cTExKTE5MSUxNTEtMT0xDuJGYmZiVmJdxOzE+8l5iTmJuYl5icWJN5PLEwsSixOfJBYkvgwsTSxLLE8sSKxMrEqEUKebXHIF/KHZLg+FAg3hIKhUCgcigQfioZi4cZQPNwUSoSbQ8lwSygVbg2lQ5lQNjwcGoSGoVFoHJqER0LT8GhoFpqHFuGx0DI8HlqFJ0Lr8GRoE54KbcPToV14JrQPz4YO4bnQMXQKncPzoUt4IXQN3UJq6B56hBdDz9Ar9A59Qt/wUugXXg79wythQBgYBoVXw+DwWhgSXg9Dw7AwPLwRRoSRYVQYHcaEsWFceDOMD2+FCeHtMDFMCpPDlDA1TAvTwzthRpgZZoV3w+zwXpgT5oZ5YX5YEN4PC8OisDh8EJaED8PSsCwsDyvCyrAqrA5rwtqwLqwPG8LGsClsDlvC1vBR2Ba2hx1hZ9gVdoc94eOwN3wS9oVPw/7wWTgQ/hgOhs/DofBFOBy+DEfCV+Fo+DocC9+E4+HbcCKcDKfCd+F0+D6cCWfDufBDOB9+DBfCT+Gi/M2aEEIIIcQ/RP/O493/xufSAcCvt0Q9AODq7bkO/3XNjdn/tO6lcrdMAMCT3To88OtRuXJqauovz12qIco/FwASf1n/13gZtIDHoTU0h+J/s79eqtN5/p36yVsAMv5ZTgpcji/Xv+m/qP/IY8MXlorPZf079ecCFMx/OScDXI4v1y/xX9TP0fR3+s/w+TiAZn+Wkwkux5frF4NH4Slo/RfPFEIIIYQQQggh/qSXKtvu9+6fL92f5zaXc9LD5fj37s+FEEIIIYQQQghx5T3TqfMTj7Ru3bzdP7bAX/YF/ntZspDFf84iwy8/Ov9X+vk3La7kbyUhhBBCCCHEv8Pli/4r3YkQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCJF2/W/8O7ErfY5CCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCHElfb/AgAA//+wBDLo") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) 1.199950779s ago: executing program 5 (id=956): bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x41000, 0x24, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000000000000000000000000085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r0}, 0x10) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r1 = syz_open_procfs(0x0, &(0x7f00000007c0)='map_files\x00') getdents64(r1, &(0x7f0000001f80)=""/4094, 0xffe) 1.184586519s ago: executing program 5 (id=957): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) 1.130417201s ago: executing program 3 (id=959): bpf$BPF_PROG_QUERY(0x10, &(0x7f0000002140)={@fallback, 0x10, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) inotify_rm_watch(0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000200)={'wg1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000003c0)={'sit0\x00', &(0x7f0000000600)={'erspan0\x00', r2, 0x70f, 0x0, 0x0, 0xfffffffd, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x29, 0x0, @private}}}}) r3 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="689e90943da0ef04", 0x8}], 0x1}, 0x24008004) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r7 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r7, 0x0, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r8}, 0x10) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000180), 0x2004000, &(0x7f0000000880)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB=',access=', @ANYRESDEC]) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r9 = socket$vsock_stream(0x28, 0x1, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$vsock_stream(r9, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r11}, 0x18) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r9, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) listen(r0, 0x0) 1.104567373s ago: executing program 5 (id=960): syz_mount_image$ext4(0x0, &(0x7f0000000580)='./file0\x00', 0x19560c0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r3 = socket$inet6(0xa, 0x3, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x62], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) r4 = socket$inet6(0xa, 0x3, 0x3c) socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000000040)='./file4\x00', 0xa18c14, &(0x7f00000000c0)=ANY=[@ANYBLOB="64656275672c696f636861727365743d6b6f69382d72752c757466383d302c636f6465706167653d313235352c757466383d302c732c73686f72746e616d653d77696e39352c6e6f6e756d7461696c3d302c77686f72746e616d653d6c6f7765722c756e695f786c6174653d302c726f6469722c74696d655f6f7a667365743d3078303030303030303030303030303065342c73686f72746e616d653d77690063a19e000000f5ffffffffffffff00000000"], 0x89, 0x29b, &(0x7f0000000180)="$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") connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback, 0x7}, 0x1c) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000100)="88", 0xfdef}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff, 0x0, 0x0, 0x41100}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x18) r6 = dup(r1) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) 1.030221436s ago: executing program 0 (id=961): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x10) r2 = timerfd_create(0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_BT_VOICE(r6, 0x112, 0xb, 0x0, &(0x7f0000000080)) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000380)=ANY=[@ANYBLOB="010000000000000022000040"]) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000540)={r0, 0x58, &(0x7f00000003c0)}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="02000000040000000800000008d4000000010080", @ANYRES8=r2, @ANYBLOB="100000000000000000002253e07cbeefa1d45e73", @ANYBLOB="d76f8da70917c7d11b1f121252b97f0fbae56d103756620e791d4d951cd646ed94ecb7f55095bc1c0b88e634c3ad5478076c965fd5e38d59afb7727b9b2eb446a098de1242022b25e410690d14ba9b86bbca731bca54dee70b853e4e84233cfcbf2e34b65be445f887731a6e3e0c75b3fb4ad224535f81da473dd41ad71ba8b82c6c1c0dce7cc83a7432f7ac54dad52df0d05ebfaa1cb4f63b7741e5abaabbcdb0808e6baf5e097a0f701e12d0ee44cf0f9b756780ef0071999addde209182826ac97af2d417ed71feead339f4f0f6b1ce911800"/226, @ANYRES32, @ANYRES8=r4], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r10}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x5, [@var={0xe, 0x0, 0x0, 0xe, 0x5, 0x1}, @union={0x8, 0x2, 0x0, 0x5, 0x1, 0x698418f8, [{0x1, 0x1, 0x2}, {0x0, 0x4, 0x7}]}]}, {0x0, [0x2e, 0x0, 0x30]}}, &(0x7f0000000440)=""/211, 0x51, 0xd3, 0x1, 0x3}, 0x28) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r12}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 960.080609ms ago: executing program 2 (id=962): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000cc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f00000007c0)='T', 0x1}], 0x1, &(0x7f0000000800)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r4}, 0x18) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r5}, 0x18) io_uring_setup(0x1de0, &(0x7f00000000c0)={0x0, 0x45d6, 0x0, 0x4, 0x4, 0x0, r5}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f0000000000)={0x1, 'veth0_virt_wifi\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) recvmsg$unix(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/230, 0xe6}], 0x1}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r8 = dup(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x7, 0x8, 0x10000, r2, 0x8, '\x00', r7, 0xffffffffffffffff, 0x3, 0x0, 0x2, 0x0, @void, @value, @value=r8}, 0x50) 918.52161ms ago: executing program 2 (id=963): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a) ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f00000000c0)=""/177) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10c4, 0xea90, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000000)={[{0x20005, 0x4, 0xc2, 0x4f, 0x40, 0x2, 0x5, 0x1, 0x3, 0x44, 0x8, 0x9, 0x100000000009}, {0xb, 0xa6f2, 0x6, 0x28, 0x9, 0xff, 0x4, 0x3, 0xa, 0x13, 0x7, 0x6, 0x1}, {0x1ff, 0x7, 0xd, 0x10, 0x25, 0x9, 0x0, 0xf6, 0x4, 0x15, 0x0, 0x2, 0x4}], 0x5}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x67a, 0x6, 0xf3bc, 0x0, 0x1000, 0x400, 0x4002004c4, 0x1000, 0x0, 0x97, 0x10, 0x0, 0x3, 0x4], 0x100000, 0x400}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000040)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="400008000000f542ed080c392cdaab1802"], 0x0, 0x0, 0x0, 0x0}, 0x0) 629.184463ms ago: executing program 0 (id=964): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) ftruncate(r2, 0x472e) bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x1d}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x11, 0x0, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x3, 0x28, 0x0, 0x0, 0x8, 0x6, 0x0, @remote, @local}, {{0x4e23, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x8000, 0x0, 0xfffc}}}}}}, 0x0) 588.639255ms ago: executing program 3 (id=965): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)='9', 0x1, 0xfffffffffffffffc) keyctl$chown(0x4, r2, 0xee00, 0xffffffffffffffff) keyctl$chown(0x4, r2, 0x0, 0x0) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000380)={'dummy0\x00', &(0x7f0000000300)=@ethtool_perm_addr={0x4b, 0x1b, "43488172070000800000476f60940acfbe50880594c1ff03000000"}}) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r7, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r8 = dup(r7) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000ff0095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='mmap_lock_acquire_returned\x00', r9}, 0x10) mremap(&(0x7f0000c0c000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f000076b000/0x3000)=nil) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r8]) write$FUSE_BMAP(r8, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) 574.006086ms ago: executing program 0 (id=966): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000008c50000000f000000850000009e00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x9) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [], {0x14}}, 0x2e}}, 0x0) 527.168537ms ago: executing program 0 (id=967): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xf, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7b3020000000000a9f7a6d858bf66008500000085000000b70000000000000095e73fd664102714045b0d53f512019120daec4cf1a6117d62cdd198fc3ecf1aee25764f49280d5e0b3e708af3ac27fdc3869406bb3750e9"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001004900000001"], 0x48) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000015c0)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32, @ANYBLOB="00f8fffffffffcffff00000000001c00000000005727d4d65fe434373cb5cf0d8253a79ea9a39cbb150a6f15418153f972ff99e22e5fa13ca2d747894a7565ed8d84ff6b2734968ec80b221922bf464b838bc6c51f6e47398b0358153a3234ab5416340622e6fe18c462f0ba00"/120, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) connect$inet6(r3, &(0x7f00000003c0)={0xa, 0x4e21, 0x6, @ipv4={'\x00', '\xff\xff', @local}, 0x6}, 0x1c) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000005c0)={r4, &(0x7f0000000580)}, 0x20) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r3, 0xc0185879, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000002100000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r9}, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r10, 0x3a9, 0x6, 0x0, {{}, {@val={0x8, 0x140}, @void}}}, 0x1c}}, 0x4004050) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = dup(r11) writev(r12, &(0x7f0000001540)=[{&(0x7f0000000300)="5d1b72799ce84b64a8d251a116e20eda4fe07c9d97d223fcabfec942e9097e1287759fc5480a62b8a8964c711bdb3263cfee", 0x32}, {&(0x7f0000000400)="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", 0x1000}, {&(0x7f0000000380)='n', 0x1}, {&(0x7f0000001400)="32976972962d506ff3ae340876a5a370c6d3cfa620bf71be8a505611a3529530c18cd25febff0fe8add074c152beace5d6ecd1427906b1f22cb1a54c6c6670f9ca94b679db2e84154410eb87d2fc84669c00c3244daa4a21d31824be", 0x5c}, {&(0x7f00000021c0)="b50b7735e866de8118f56a84a221d657412ab1195299ab1ff2df646c71c12a6689acbeda7f7acbc2f18ef19bc76edac9bd8ddc8cbbcebbbbce3fadc729e9a9ecd347ac8ab607400c735a22eefd4b3190f00ce804b93c53c8f51b6bb6957a828729cea973f7a4c4ed6ff07bae19f76981c4bd80e7ad0960039590ac0eeadda48a8fef0d0548f77531f49356579ce933566fddb1ad0f8e4839d1bc1d30d5e41ec32c0688c37bf8166e6bb555f37d8846e32cd27c218f68508d13701761dcf453ddf4bd6590c5c1ac1c1c8544a2448c8c18a37e7c30cdb234709cfeecc3129ca07af517a8e87fe10ef301f8daf7ac1dcae84704269130999ee766427f54e26773b2cfdf3d0f15de12cb9fe9634b4a0acbf5ef0c3b974dd094876f613707f5fa713324bcb7b7ea50910071522ef80d5e50d63c2a293fa65fdec67f779979d0355a0ccbbdadf40348bd1e03fbe54e0606a9dfbe1ec19d2272952a14a0e8d416fa8e6b664a26c4af9b68ed91e0b44d4e123d8f8ffd3d0533d59979964dc643a868b8074593b546aec6aff20097c582157316a9d9a543945315dbbc550a361fa21aa9dfe35506ff6aeb06b40255c5d4fe3662f106611a0ed3b8a47395f27b0991137516f8059e86287731fe51bbd5aa7843e053b306cae24f433b2a67547049df63e726581de02b02f2e3c520f8c0ede315b81bf8db5292ec41dbc9282135dc66681f271bdf6e99285eea0eda157687cb880ae379a2afe430d44fd156f03f75ee9da0fbb67bdf9a824cdf7d3540d5f85ab4a7570a108efa30f002842c22f87b6474ce49a0d1e0a21ad5e4f40a8f62214bccb9c1a9cb80d142ad92def11b20a3e3a9185feb3553a90301f4ae1f7e258af5ed51d0961864795d5aba5accf54d260e7978c73b4dd8bc80fe978a0787e98db2823275952120701469817e32ad5fef6cbf60eaf1862ffa9b93224f1778f8336bd4aa99eccc5ac03bbdb3fccf6d0b5b4f81be8cbfafd411b297a5146410a19401fb9539d378ec4b90897ac68efdcabf881dcd7042c00c12d9c57430bebeab0d3313ba56030acbf0b94b2bb4823d2895d202d9e521819fcd8b02af477f7d14b265ac4c4bf99801fe0278ebfd7ef276527b1e65ffa0df3275a6ddf16c569b9383017ab5437a33acac4cb7bd7c7b2103e895fa2f9d6eb3f90edc3fe4047d071aa4992e5d164ec762113cb9bc4b3689e44589be7f88a1e7db95b0547932c855676baeae9e076c26cca1799888630f56861b856721768d4ed04ec9ef5b2cadfbed5a845e4fb5f1648d7e1b5ec41702a101b9c30d8ffd33421523b8d287847a18fc65f5169e1e08b224526d30be36efff4c0f2df93f11e31390095ba4aa44dc84ba5a6e8c104e89fcb407e74c113b622a544afdb903dacd88bf9b113f7b7b5e547fdf339ec6a71586545f28b581ca3af4de4e27dcf29dab0a0935dbc0ff2e09481227cc35f3df463c8f72863075443afa87a6c6dac34450971f297533763db9539def955c7118056bc282b8e10759c0c7e472e7e8a10e615a5fae9e307dde753c0fe7fd4e152879c046e54fb7080c26b2e3810db85578f6bd608b7027c79760ad10afcd93a2f92a50cb0b6aff25cf2308cb55084ea955824bc04fee5916bea3e54fe0d02cbe2b871c48013fcc74884fa57751cf52a8ef86d107a7540053cfa664c34d867cce38c8b31358d04bb179a09abcdf0f0d7589545c5b275361deddb5158942fc7fcad629478cee6416fe773929aac9d3e6534b9c62b834067fd719c34bb806cd2f2f98fbedf8d40592bdae28bd43ec9e9388b82e4480f0f34b04984232284922d276de6905ca45f38ebccf9b15a361a88bc2b28e1a4d420a2b44d954dc8f88a25b1496bd3de3afb3f0fa053b8413250c63ccb3d9127e9b472c12c6176cd41885a13ea4182c4a18facae5ff1c9dd2e2e9d63336a9188ed1e8fefe88893b65492e59034f11f7bb62045c244689d7ff8bce339243d85dc571e85c6c7c6ab68bccd0be9224892ef80d06abd691e0a6cee5daffc92dde802a244023d0f190694a10802c69f6b6e9e34360114b89588ba94c0b05056f1fa449c3ad4a7e79ce07066a8ead14e1b021fdd5c0dcc4ee343b300eaa1df55724f99556dec042ac7327842e27239c45b029e1d493cb96d9bbc5057b135c2c62da1111b1a68d1737c6252338023db2916a5297ed20b181f4978f42564262e359f2fa0f26e99ed39953567011eeb9d94caf4221358f1b67a604a8268c42a536e21e7cd9f4ef2e6b585abb6346c3d30ae13a2e72a751c9f74cbbf5bafbf5783feaae226225d9f9f9ef472ec59f18dcb57a72398a14025e43398211e12b23f19e54e7302131967a99de9926c795e83f4b98ae9adf7e53f0b52d444f2973b572cdf37ee8dd973d84894bceef8dcb33f02742ee24667adc482ff6a374eb57c8d6a55fb31774536a28a8ab37693b77dfaeff2fc0ebafb4c3d21aa182995d0fb93803972d7070ec2fd69a68d4831b003a69487c736dfad52352489251ea785381cf132216b7d035d4e69a3d3d7e128bf8e294f516ed6ae2fc5806b7d28204324677c707eec67aea4eff8f360920d13ed50c380da17ee8743ce8160dc2fd1f44f8410575ae677728b466352bf1bcaff3bc713d32d01751de87acdd93159da702da4c8b3926ba1e65f255613a7fe43edcce6b57a9f0796855b495c89504eb906e2ada8e4494c07c944046389715129a848738875b91cadfd4219080d462ad4cd3f9b4f325aa2d3627ab65b6cc991868ae15f416e520c801d7622283a5e9a0d277a26627d05a7cf64f78dbd0b93108bd19b1cc25b6566f7a78af8f6e328336f509aa72f1d88d865d97112f4f85580d662ece4b5c8cc6257e779705687a0fa268f6ff049627fd9d923af8f343d8fb9cfaf97febc6ca0bfafb31462070f3c8e7ca1e91fd51b49960b1172c7ad2d5bfd9ed93e05b597728ec9c3ac613eec372392e7c5bcb645d0736d5c6347f948934462c47679487b59e903c0af34b3ff0f0f738c34fe8d41744e1c9f76b9fe4a3b938d6a9408ddef68bbda83e177349f8c9c13a813fb1c449a3009f51f4872f1bec75fc7e2704263e86b6f60bb0a8ec3c403b9fdc29bd1aa6d86bbece038ce8db90c6f310a704962e531cd487f0a2b272c254145d2754dfc50882eedad15b12cbd4ae3fea5358e09a0ae591f8adbb1453cb1334e10b50200de677a010f3496e07594accdd49f60ba0726d04b087c65c94d481811ca09b3fda75a4bdbbfb2151366a9d6e9ce62746844b64186e8327eae64ce7f3c3cf244a79e1804d6659efcba75c045faacc902c12a0481574ea461c546f1ce8a6cbe4f286e898d8cc10607cc2478d3969e5a448d7ca010bf8187d11e673ad9aae177ab69d6d6fc511f08d887d6e028230a5e4ddea05aec3c5507257b726bd6a1c210794ccbd05a7f73ea6aa52199bff0f8e77bf65c88c74db3a0a94f1190cb9f5c02c7ad5a5fedeaa71e5d4def8f02f5b4d66efeabe2949467be020fd7837c9ce5c333dbce87182c6dc52dc31560031e2c87efed03e70d7a2709af116b6641d6ac5e29c755a867ad23fe55329666597bb1992acb2d7c64cc1a1741ed1b4a51ec5923d1bb6cda994af163e92f6ac3d309611b7815fa3777c1fde7ec63ad63d1411020ef8a10142b3904954e11bef0a01a590f5dba0e85cf8fdf6c7224fdd510d091dbd68ba98fde026a439cb7462d54ab6f22870b9ac660f6fd278db8b65b084396d7bcb46755c3c04ec5b550d826ea61a99dd45c29869a10c31608051643920142df798774ab7c5ef402247169113514b777a7fbcb85a406e0a2c691c8b48175bdbf2d5c69c9d52a85bcf93c9384653218947e21965e208d2f6b0d6c4d531b37e43217e33cc8721b5e56083d9364ee10a5b3b2ac87a90b0993a264ba6f3908270948dc7a1d0ddc2cb2a9fb5dd8cb3e3446fec20232c51912a7b2b2194650541c1793439841e96954f4e894fae98a8b5c5c9286b6fd3a1318552c8b1554bc19a57ebf07c89e191524d7bf04a9be916286769e3a80287933a604c5ea8ac2f24eb0cf5b102c218896deb4665cf7b9aaa2f57ff295ddb279cad68ec01cea0f5e3f2eb513102e65e69220a9023ae4628d44c6b60b40017aa8dcbc02cd642a2f47632753ee3572642e5d0fbfcfd07dd55c3e3eda45a0938c05f2caf365c76b63379ba1d2f6a016855902650cf87efb0aac5b2fdff23ca9fc8a8956b266cb50676d2f46a9c40e550892bf4f9607e2e45c758615963210c84e18f4d71273c18aa97a16b0212f007e7ce2287ef40e5786441f2a010e854f38f2d45b9fcd5bf91cfe945a8a371e9c1c6210bfc03104f0a1a8494608e27681ff8ae67dc112f6f87c7e6627612f906e554e056680ed72efa07557ca463d5eac0bbfab934c3e76c0701000681ed4a0659038801667946a0870e11c6df049ea164d989644b0e6065378420b86fc1951bdf2b85bc4cc4a77ff87bdd257a03a2d290a65dda890189575e85833ce54e79585602595e1e15140df132acf51cc26b1a8440833be3c6c21e4de52e63cd01aa0d14a236a085d0e902d1d88c7e30ac45a024aece6400f8c9ab1255602ffe1f79ca6a40fc05ac81c77b7a38751cec8e47e1037db92a37255ae0d0927ee86c8e51fc99563ba67f8d946e53a9bde9ece37d91adbf410e91921ca90203ad594d7b03bd1a902c80ee14cc6988c9153c6632eb530226a92addf2b3e613e04b3813a4b0a69ceb7fcf1cc272b349bd16c76cd24d23cf5fe491efa23422d4ed98d7ec39f19c8b9199bc855f639d4994b5e34bf0d96b2985541a2be1a56734ed1452885939d82682701fb39998af13cf2cd67e38e9008ab3ccb6419e8d58d4433c787d66f41e5c7238b02804f2d3f2479baba44f32215add9594bf6b73bdba2156980111736ddc9cc9f027292c9299e78f5ebacd2a08e83b3ee40972d2b7a2c7bc7e6982dd48868217f16f901c78f13b29ac9a5ed479e214cdc7c5d8580a1e6fafa7922b719f0845638925342362be255662d511e85b3559b66756b5ea0a25862377061b4d7ffa0250685f60190b5aacc95f564d9fcd5ce238c2eb1481816ffe9b0aa70273d0a38c529d233d71e22bda39ad9276c6bc2b7e7acc4144ff8a5de05e82ca7fc2540b9d826c802f88ac8716e038e8d58de42cb9d652b95b1ff46d32d95e87bcd99b314b91501d3c30b082b98175e1afc158d0d4e94d30e3091f77f932a3e8773fce546b0934c418cc875f2abfe1db5250b5da562b6d731070fad5f24e1d99ef558c24e3defc0e050cfbcbcce8369ca0b3d847660114fe878f6316ba9fff1f4fe809336df78ba8b0f1ca3280ec37820b556eeee45ca0f3f9e87afd74780ffb13b62a7c3b73ecdddae6493ccb65cb6afd45f6df8b804650e8527047ed8824637f1efcfd6bfa3c383fb7bbe3b10453244bbb722dc9675061280b2c60bbdcc77fcf18090d59e7e544b290fcbae51b8898efe4764e5db68ac27d1e4174aac2a53be4725f136625f95ad5b252341bca4b65471070144dac13ff9dd98ab0346f2db4eb92a8745939c46785c4a7bd826f40907210dcc2da756e42d1224491cef2941991565e4450a4060fa39652dd8ec19e76359b0e2e39fdf8d7f93ba174f702ac1bccefdc467313b1ccd6adba8e8ad6990d735a7f1179fd0addb46d41e8df1e708fd679da5ab785b5ad9636a23343901e37085073bc002438293509c60d6ff86a9d762ab1e1269484a5e5cddac199201c5e2e35100811d032575097a06b936367ddde6b2292a8", 0xffffff67}, {&(0x7f0000001500)="f75a82a0306ed5019342"}], 0x5) setsockopt(r12, 0x1, 0x20, &(0x7f0000000340)="b5057018", 0x4) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r13 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r13}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000380)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) 474.68088ms ago: executing program 5 (id=968): bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x41000, 0x24, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r0}, 0x10) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r1 = syz_open_procfs(0x0, &(0x7f00000007c0)='map_files\x00') getdents64(r1, &(0x7f0000001f80)=""/4094, 0xffe) 474.15094ms ago: executing program 5 (id=969): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$exfat(&(0x7f0000000100), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000600)=ANY=[], 0x2, 0x1509, &(0x7f0000001c40)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) 422.348942ms ago: executing program 3 (id=970): syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000000000)='./file1\x00', 0xa18c14, &(0x7f0000000080)={[{@utf8no}, {@iocharset={'iocharset', 0x3d, 'koi8-ru'}}, {@shortname_winnt}, {@fat=@codepage={'codepage', 0x3d, '865'}}, {@shortname_lower}, {@uni_xlateno}, {@shortname_mixed}, {@shortname_win95}, {@shortname_lower}, {@uni_xlate}, {@shortname_lower}, {@rodir}, {@utf8no}]}, 0x81, 0x2ab, &(0x7f0000000840)="$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") r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x62], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4ea3, 0x0, @loopback, 0x3}, 0x1c) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x9521, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) (fail_nth: 4) 20.572929ms ago: executing program 0 (id=971): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, 0x0, &(0x7f0000000200)='GPL\x00', 0x4, 0x8d, &(0x7f0000000240)=""/141}, 0x94) (async) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) (async) setuid(0x0) recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0) (async) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) (async) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f00000000c0)={[{@quota}, {@bsdgroups}, {@nouid32}, {@errors_remount}, {@jqfmt_vfsv1}, {@oldalloc}, {@bsdgroups}]}, 0x2, 0x46b, &(0x7f0000000580)="$eJzs3M1vFOUfAPDvzLbw+/HWivgColaJsfGlpQWVgxeNJh4wmugB9VTbQgiFGloTIUSqMXgxMSR6Vo8m/gXevBj1ZGLiSe+GhCgX0FPNzM5Ad9ltt3TZrd3PJxl4nn2e7TzfPvPMPDPPbgPoWUPZP0nEtoj4LSIGqtnaCkPV/65dOTf595Vzk0ksLr72Z5LXu3rl3GRZtXzf1iIznEakHyXFTmrNnTl7YmJmZvp0kR+dP/nO6NyZs08ePzlxbPrY9KnxQ4cOHhh75unxp9oSZxbX1T3vz+7d/dIbF1+ePHLx7R+/ydq7rShfGsct2XTzS0NZ4H8t5urLHon/r2l36832Jemkr4sNYVUqEZF1V38+/geiEjc6byBe/LCrjQNuq+zatLl58cIisIEl0e0WAN1RXuiz+99y69DUY124/Fz1BiiL+1qxVUv6Ii3q9Nfd37bTUEQcWfjni2yLdjyHAABYwSeTnx+OJxrN/9K4e0m9HcUaymBE3BEROyPizojYFRF3ReR174mIe1e5//qloZvnP+mlWwqsRdn879libat2/lfO/mKwUuS25/H3J0ePz0zvL34nw9G/OcuPLbOP71745dNmZUvnf9mW7b+cCxbtuNRX94BuamJ+Ip+UtsHlDyL29DWKP7m+EpBExO6I2LO6H72jTBx/7Ou9zSqtHP8y2rDOtPhVxKPV/l+IuvhLyfLrk6P/i5np/aPlUXGzn36+8Gqz/a8p/jbI+n9L7fFflHx5pkgMvrV0vXYuVr1yeeH3j5ve09zq8b8peT0/H5XLru9NzM+fHovYlBzO8zWvj994b5kv62fxD+9rPP53Fu/J+v++iMgO4vsj4oGIeLBo+0MR8XBE7Fsm/h+eb162Hvp/quH57/rxP5jU9P/qE5UT33/bbP+t9f/BPDVcvJKf/1bQagPX8rsDAACA/4o0/wx8ko5cT6fpyEj1M/y7Yks6Mzs3//jR2XdPTVU/Kz8Y/Wn5pGtgyfPQsWSh+InV/HjxrLgsP1A8N/6sEnl+ZHJ2ZqrLsUOv29pk/Gf+qHS7dcBt12gdbbzBF9qAjad+/Ke12fOvdLIxQEf5vjb0rhXGf9qpdgCd5/oPvavR+D9fl7cWABuT6z/0LuMfepfxD72rbvxX4tdutQTooLV8r1+ilxORrotmtJRo/e9B3O7Em+ujGS0kun1mAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAaI9/AwAA//9sbvBf") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x18) (async) syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') 0s ago: executing program 0 (id=972): close(0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x4, 0xf7, 0xc9, 0xff, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x44}, 0x7800, 0x8000, 0x8, 0x3ff}}) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./file1\x00', 0x2008042, &(0x7f00000000c0), 0x1, 0x571, &(0x7f0000000780)="$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") quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x0}, 0x94) r2 = socket$unix(0x1, 0x5, 0x0) bind$unix(r2, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000080)={[], [{@measure}, {@subj_role={'subj_role', 0x3d, ']'}}]}, 0xff, 0x275, &(0x7f00000006c0)="$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") mount(0x0, 0x0, 0x0, 0x2200020, &(0x7f0000000000)) kernel console output (not intermixed with test programs): ll=202 compat=0 ip=0x7fecdb6b6749 code=0x7ffc0000 [ 157.142127][ T30] audit: type=1326 audit(1763896711.832:3466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2076 comm="syz.2.510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fecdb6b6749 code=0x7ffc0000 [ 157.166004][ T30] audit: type=1326 audit(1763896711.832:3467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2076 comm="syz.2.510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecdb6b6749 code=0x7ffc0000 [ 158.383867][ T30] audit: type=1326 audit(1763896711.832:3468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2076 comm="syz.2.510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecdb6b6749 code=0x7ffc0000 [ 158.410050][ T2071] EXT4-fs (loop5): mounted filesystem without journal. Opts: dioread_nolock,norecovery,min_batch_time=0x0000000000000001,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,nodelalloc,errors=remount-ro,acl,auto_da_alloc=0x0000000000000343,jqfmt=vfsold,barrier=0x00000000000000. Quota mode: none. [ 158.524861][ T2088] loop0: detected capacity change from 0 to 256 [ 158.621764][ T2088] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 158.632571][ T2088] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 158.654264][ T2088] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 159.276761][ T601] usb 2-1: USB disconnect, device number 4 [ 159.315876][ T30] audit: type=1326 audit(1763896711.832:3469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2076 comm="syz.2.510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fecdb6b6749 code=0x7ffc0000 [ 159.368663][ T2092] loop3: detected capacity change from 0 to 4096 [ 159.394636][ T2094] loop1: detected capacity change from 0 to 4096 [ 159.428428][ T2092] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 159.477913][ T2094] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 159.559253][ T2099] loop0: detected capacity change from 0 to 512 [ 159.594797][ T26] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 159.603988][ T2101] loop5: detected capacity change from 0 to 1024 [ 159.623963][ T2099] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 159.635242][ T2099] ext4 filesystem being mounted at /102/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 159.668179][ T2099] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1054: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 159.683076][ T2099] EXT4-fs error (device loop0): ext4_do_update_inode:5249: inode #2: comm syz.0.516: corrupted inode contents [ 160.226542][ T2097] netlink: 24 bytes leftover after parsing attributes in process `syz.3.513'. [ 160.237424][ T2106] netlink: 24 bytes leftover after parsing attributes in process `syz.1.514'. [ 160.251172][ T2099] EXT4-fs error (device loop0): ext4_dirty_inode:6085: inode #2: comm syz.0.516: mark_inode_dirty error [ 160.544473][ T26] usb 3-1: Using ep0 maxpacket: 16 [ 160.559919][ T2099] EXT4-fs error (device loop0): ext4_do_update_inode:5249: inode #2: comm syz.0.516: corrupted inode contents [ 160.580725][ T2101] EXT4-fs (loop5): mounted filesystem without journal. Opts: usrquota,data_err=ignore,,errors=continue. Quota mode: writeback. [ 160.583098][ T2099] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #2: comm syz.0.516: mark_inode_dirty error [ 160.685355][ T26] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 160.694450][ T26] usb 3-1: config 1 has no interface number 1 [ 160.700731][ T26] usb 3-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 160.711321][ T26] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 160.724325][ T26] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 160.857116][ T2119] loop3: detected capacity change from 0 to 512 [ 160.902711][ T2121] loop0: detected capacity change from 0 to 4096 [ 160.912182][ T26] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 160.942140][ T2121] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 160.976658][ T26] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.012721][ T2119] EXT4-fs (loop3): 1 orphan inode deleted [ 161.027463][ T26] usb 3-1: Product: syz [ 161.031915][ T26] usb 3-1: Manufacturer: syz [ 161.037513][ T2119] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,,errors=continue. Quota mode: writeback. [ 161.049312][ T26] usb 3-1: SerialNumber: syz [ 161.073339][ T2119] ext4 filesystem being mounted at /112/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 161.163476][ T2119] EXT4-fs (loop3): re-mounted. Opts: (null). Quota mode: writeback. [ 161.258655][ T2130] netlink: 24 bytes leftover after parsing attributes in process `syz.0.520'. [ 161.272512][ T601] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 161.442241][ T26] usb 3-1: 2:1 : format type 0 is detected, processed as PCM [ 161.512148][ T26] usb 3-1: 2:1: cannot set freq 9338507 to ep 0x82 [ 161.518770][ T601] usb 2-1: Using ep0 maxpacket: 8 [ 161.545705][ T26] usb 3-1: USB disconnect, device number 9 [ 161.642189][ T601] usb 2-1: config 32 has an invalid descriptor of length 0, skipping remainder of the config [ 161.662141][ T601] usb 2-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 161.683857][ T601] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.795509][ T1681] udevd[1681]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 161.865077][ T601] hub 2-1:32.0: bad descriptor, ignoring hub [ 161.871317][ T601] hub: probe of 2-1:32.0 failed with error -5 [ 161.918577][ T2134] loop5: detected capacity change from 0 to 256 [ 161.974222][ T2134] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 161.985078][ T2134] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 162.010564][ T2134] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 162.108047][ T601] usb 2-1: USB disconnect, device number 5 [ 162.919780][ T2136] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=2136 comm=syz.0.523 [ 162.972152][ T601] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 162.979960][ T2136] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=2136 comm=syz.0.523 [ 163.050989][ T2140] netlink: 'syz.0.526': attribute type 13 has an invalid length. [ 163.101836][ T30] kauditd_printk_skb: 54 callbacks suppressed [ 163.101853][ T30] audit: type=1400 audit(1763896717.922:3524): avc: denied { block_suspend } for pid=2139 comm="syz.0.526" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 163.126549][ T2142] loop5: detected capacity change from 0 to 4096 [ 163.147599][ T2142] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 163.202796][ T30] audit: type=1400 audit(1763896718.032:3525): avc: denied { name_bind } for pid=2146 comm="syz.3.527" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 163.254371][ T30] audit: type=1400 audit(1763896718.062:3526): avc: denied { create } for pid=2145 comm="syz.0.529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 163.274228][ T30] audit: type=1400 audit(1763896718.062:3527): avc: denied { ioctl } for pid=2145 comm="syz.0.529" path="socket:[22981]" dev="sockfs" ino=22981 ioctlcmd=0x9367 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 163.299035][ T601] usb 2-1: Using ep0 maxpacket: 8 [ 163.415935][ T2155] netlink: 24 bytes leftover after parsing attributes in process `syz.5.525'. [ 163.462558][ T601] usb 2-1: config 32 has an invalid descriptor of length 0, skipping remainder of the config [ 163.511826][ T601] usb 2-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 163.596151][ T601] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.727998][ T601] hub 2-1:32.0: bad descriptor, ignoring hub [ 163.756771][ T601] hub: probe of 2-1:32.0 failed with error -5 [ 164.202359][ T6] usb 2-1: USB disconnect, device number 6 [ 164.283530][ T2164] netlink: 72 bytes leftover after parsing attributes in process `syz.1.530'. [ 164.306731][ T2161] loop5: detected capacity change from 0 to 256 [ 164.403522][ T2159] netlink: 4 bytes leftover after parsing attributes in process `syz.3.532'. [ 164.467873][ T2161] FAT-fs (loop5): Directory bread(block 64) failed [ 164.610396][ T2161] FAT-fs (loop5): Directory bread(block 65) failed [ 164.719415][ T2161] FAT-fs (loop5): Directory bread(block 66) failed [ 164.818358][ T2161] FAT-fs (loop5): Directory bread(block 67) failed [ 164.926101][ T2161] FAT-fs (loop5): Directory bread(block 68) failed [ 165.362188][ T2161] FAT-fs (loop5): Directory bread(block 69) failed [ 165.372704][ T2161] FAT-fs (loop5): Directory bread(block 70) failed [ 165.379358][ T2161] FAT-fs (loop5): Directory bread(block 71) failed [ 165.458691][ T30] audit: type=1400 audit(1763896720.282:3528): avc: denied { read } for pid=2170 comm="syz.3.534" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 165.474116][ T2161] FAT-fs (loop5): Directory bread(block 72) failed [ 165.488336][ T2161] FAT-fs (loop5): Directory bread(block 73) failed [ 165.513578][ T2171] Restarting kernel threads ... done. [ 165.529615][ T30] audit: type=1400 audit(1763896720.322:3529): avc: denied { open } for pid=2170 comm="syz.3.534" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 165.667258][ T30] audit: type=1400 audit(1763896720.342:3530): avc: denied { ioctl } for pid=2170 comm="syz.3.534" path="/dev/snapshot" dev="devtmpfs" ino=90 ioctlcmd=0x3305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 165.692529][ T30] audit: type=1400 audit(1763896720.492:3531): avc: denied { write } for pid=2174 comm="syz.3.536" name="ppp" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 165.774731][ T2177] netlink: 24 bytes leftover after parsing attributes in process `syz.2.533'. [ 165.792346][ T2005] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 166.194387][ T30] audit: type=1400 audit(1763896721.022:3532): avc: denied { create } for pid=2180 comm="syz.2.539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 166.202513][ T2181] xt_hashlimit: size too large, truncated to 1048576 [ 166.240354][ T30] audit: type=1400 audit(1763896721.022:3533): avc: denied { connect } for pid=2180 comm="syz.2.539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 166.432153][ T2005] usb 2-1: Using ep0 maxpacket: 16 [ 166.872552][ T2194] loop5: detected capacity change from 0 to 256 [ 166.879400][ T400] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 167.022370][ T2005] usb 2-1: unable to get BOS descriptor or descriptor too short [ 167.362497][ T2005] usb 2-1: config 1 has an invalid interface number: 206 but max is 0 [ 167.381051][ T2005] usb 2-1: config 1 has no interface number 0 [ 167.396358][ T2200] loop5: detected capacity change from 0 to 256 [ 167.407908][ T2005] usb 2-1: config 1 interface 206 altsetting 0 has an invalid endpoint with address 0x32, skipping [ 167.476087][ T2203] loop0: detected capacity change from 0 to 512 [ 167.495437][ T2204] loop3: detected capacity change from 0 to 256 [ 167.552291][ T400] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 167.563739][ T400] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 167.573187][ T2203] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 167.585043][ T400] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 167.598176][ T400] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 167.607539][ T400] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.616709][ T400] usb 3-1: config 0 descriptor?? [ 167.627722][ T2203] ext4 filesystem being mounted at /109/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 167.650739][ T2204] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 167.663252][ T2005] usb 2-1: string descriptor 0 read error: -22 [ 167.663320][ T2005] usb 2-1: New USB device found, idVendor=152d, idProduct=0310, bcdDevice=3b.0a [ 167.685591][ T2203] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1054: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 167.687319][ T2005] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.710795][ T2203] EXT4-fs error (device loop0): ext4_do_update_inode:5249: inode #2: comm syz.0.544: corrupted inode contents [ 167.711744][ T2200] netlink: 8 bytes leftover after parsing attributes in process `syz.5.543'. [ 167.762993][ T2203] EXT4-fs error (device loop0): ext4_dirty_inode:6085: inode #2: comm syz.0.544: mark_inode_dirty error [ 167.786192][ T2203] EXT4-fs error (device loop0): ext4_do_update_inode:5249: inode #2: comm syz.0.544: corrupted inode contents [ 167.804461][ T2203] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #2: comm syz.0.544: mark_inode_dirty error [ 168.047107][ T2005] usb 2-1: USB disconnect, device number 7 [ 168.147715][ T2219] loop5: detected capacity change from 0 to 256 [ 168.185260][ T2219] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 168.196321][ T2219] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 168.221104][ T2219] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 168.310866][ T400] plantronics 0003:047F:FFFF.0007: unknown main item tag 0xd [ 168.369145][ T400] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 170.073621][ T400] plantronics 0003:047F:FFFF.0007: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 170.147016][ T2226] loop5: detected capacity change from 0 to 512 [ 170.163573][ T400] usb 3-1: USB disconnect, device number 10 [ 170.186922][ T2228] loop1: detected capacity change from 0 to 512 [ 170.194547][ T2226] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 170.293391][ T2229] fido_id[2229]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 170.317549][ T2226] EXT4-fs warning (device loop5): ext4_update_dynamic_rev:1054: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 170.339136][ T2228] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 170.380600][ T2228] ext4 filesystem being mounted at /122/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 170.394239][ T2226] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.550: bg 0: block 248: padding at end of block bitmap is not set [ 170.422759][ T2237] loop0: detected capacity change from 0 to 512 [ 170.477088][ T2226] __quota_error: 6 callbacks suppressed [ 170.477107][ T2226] Quota error (device loop5): write_blk: dquota write failed [ 170.505720][ T2226] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 170.520760][ T2226] EXT4-fs error (device loop5): ext4_acquire_dquot:6200: comm syz.5.550: Failed to acquire dquot type 1 [ 170.533260][ T2226] EXT4-fs (loop5): 1 truncate cleaned up [ 170.539055][ T2226] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 170.892156][ T30] audit: type=1400 audit(1763896725.692:3540): avc: denied { write } for pid=2227 comm="syz.1.551" path="/122/file1/bus" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 170.952419][ T2237] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 171.048806][ T2237] ext4 filesystem being mounted at /112/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 171.272970][ T30] audit: type=1400 audit(1763896726.102:3541): avc: denied { bind } for pid=2251 comm="syz.0.556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 171.305169][ T2248] mmap: syz.1.554 (2248): VmData 14143488 exceed data ulimit 8. Update limits or use boot option ignore_rlimit_data. [ 171.345628][ T2254] loop5: detected capacity change from 0 to 4096 [ 171.373013][ T30] audit: type=1400 audit(1763896726.202:3542): avc: denied { name_bind } for pid=2251 comm="syz.0.556" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 171.398263][ T2254] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 171.502437][ T39] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 171.569587][ T2260] netlink: 24 bytes leftover after parsing attributes in process `syz.5.557'. [ 171.672180][ T397] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 171.882311][ T39] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 171.892647][ T39] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 171.922609][ T30] audit: type=1400 audit(1763896726.752:3543): avc: denied { read } for pid=2278 comm="syz.3.564" path="socket:[23227]" dev="sockfs" ino=23227 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 171.982233][ T39] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 171.991367][ T39] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 171.999487][ T39] usb 3-1: SerialNumber: syz [ 172.062164][ T397] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 172.073328][ T397] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 172.083452][ T397] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 172.092550][ T397] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.101191][ T397] usb 2-1: config 0 descriptor?? [ 172.126026][ T2283] loop0: detected capacity change from 0 to 4096 [ 172.198379][ T2283] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 172.322880][ T39] usb 3-1: 0:2 : does not exist [ 172.333144][ T39] usb 3-1: USB disconnect, device number 11 [ 172.397946][ T2291] netlink: 24 bytes leftover after parsing attributes in process `syz.0.565'. [ 172.614900][ T1680] udevd[1680]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 172.653058][ T2290] netlink: 'syz.5.567': attribute type 3 has an invalid length. [ 172.661023][ T2290] netlink: 'syz.5.567': attribute type 1 has an invalid length. [ 172.863865][ T397] cp2112 0003:10C4:EA90.0008: item fetching failed at offset 0/7 [ 172.872323][ T397] cp2112 0003:10C4:EA90.0008: parse failed [ 172.882389][ T397] cp2112: probe of 0003:10C4:EA90.0008 failed with error -22 [ 173.093894][ T2300] bridge: RTM_NEWNEIGH with invalid ether address [ 173.095519][ T2304] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=528 sclass=netlink_route_socket pid=2304 comm=syz.5.572 [ 173.161933][ T400] usb 2-1: USB disconnect, device number 8 [ 173.169513][ T2300] syz.2.570 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 173.510018][ T30] audit: type=1400 audit(1763896728.332:3544): avc: denied { write } for pid=2316 comm="syz.5.574" name="001" dev="devtmpfs" ino=184 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 173.585965][ T2319] SELinux: ebitmap: truncated map [ 173.597860][ T2319] SELinux: failed to load policy [ 173.638540][ T2326] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=2326 comm=syz.2.577 [ 173.651204][ T2326] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=2326 comm=syz.2.577 [ 173.676329][ T30] audit: type=1400 audit(1763896728.502:3545): avc: denied { ioctl } for pid=2327 comm="syz.2.578" path="/dev/vhost-vsock" dev="devtmpfs" ino=264 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 173.737011][ T2331] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 173.782516][ T2333] kvm: MWAIT instruction emulated as NOP! [ 173.812127][ T6] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 173.831833][ T2336] loop1: detected capacity change from 0 to 512 [ 173.902753][ T2336] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 173.914100][ T2336] ext4 filesystem being mounted at /125/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 173.933749][ T30] audit: type=1400 audit(1763896728.762:3546): avc: denied { read } for pid=2335 comm="syz.1.581" path="/125/file1/cgroup.controllers" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 173.992417][ T2344] loop0: detected capacity change from 0 to 256 [ 174.084156][ T2347] loop1: detected capacity change from 0 to 4096 [ 174.100259][ T2347] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 174.117298][ T30] audit: type=1326 audit(1763896728.942:3547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2343 comm="syz.0.583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc5a5df749 code=0x7ffc0000 [ 174.150814][ T2350] loop0: detected capacity change from 0 to 256 [ 174.182168][ T6] usb 6-1: config 252 has an invalid interface number: 73 but max is 0 [ 174.236161][ T2350] exfat: Unknown parameter '' [ 174.242473][ T6] usb 6-1: config 252 has no interface number 0 [ 174.248791][ T6] usb 6-1: config 252 interface 73 altsetting 122 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 174.260296][ T6] usb 6-1: config 252 interface 73 has no altsetting 0 [ 174.351981][ T2355] netlink: 24 bytes leftover after parsing attributes in process `syz.1.584'. [ 174.682173][ T6] usb 6-1: New USB device found, idVendor=110a, idProduct=1150, bcdDevice=b8.e5 [ 174.694532][ T6] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.707141][ T6] usb 6-1: Product: syz [ 174.713610][ T6] usb 6-1: Manufacturer: syz [ 174.721484][ T6] usb 6-1: SerialNumber: syz [ 174.935899][ T2366] loop0: detected capacity change from 0 to 256 [ 174.981585][ T2366] FAT-fs (loop0): Directory bread(block 64) failed [ 174.988538][ T2366] FAT-fs (loop0): Directory bread(block 65) failed [ 174.995550][ T2366] FAT-fs (loop0): Directory bread(block 66) failed [ 175.002158][ T2366] FAT-fs (loop0): Directory bread(block 67) failed [ 175.008836][ T2366] FAT-fs (loop0): Directory bread(block 68) failed [ 175.017629][ T6] usb 6-1: USB disconnect, device number 4 [ 175.023578][ T2366] FAT-fs (loop0): Directory bread(block 69) failed [ 175.033354][ T2366] FAT-fs (loop0): Directory bread(block 70) failed [ 175.040294][ T2366] FAT-fs (loop0): Directory bread(block 71) failed [ 175.047120][ T2366] FAT-fs (loop0): Directory bread(block 72) failed [ 175.053791][ T2366] FAT-fs (loop0): Directory bread(block 73) failed [ 175.242114][ T20] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 175.560613][ T2375] loop0: detected capacity change from 0 to 40427 [ 175.594013][ T2375] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 175.601395][ T2375] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 175.612456][ T2375] F2FS-fs (loop0): Unrecognized mount option "÷ w›ìĈí@IE8˘ß•ñKç€âÁ/VÌġŸġ×]êfR"ÉCŭHcéϛ¨NiËô6a ğÂ.”ż/ĦÛŝƒH{LöË1éÒi•GĥJï‚ÙV ‰ [ 175.612456][ T2375] ŞHŻ§Ĵôş'MşZ7Á/×Ğ‚ÎŬލNV||¸ċôğĈĈQdÀ³tħ|U_œÈÑzÚÛzD~Ž£q=n/Ö8J(m™AR>Óŝû2Íe’/!ŜLs4eq˘Ézb‚²-}góŸÖ`°Ġ½Ë‚úxj<÷K$Í" or missing value [ 175.662118][ T20] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 175.670111][ T20] usb 2-1: can't read configurations, error -71 [ 175.788896][ T2382] ------------[ cut here ]------------ [ 175.812158][ T39] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 175.822092][ T2382] WARNING: CPU: 0 PID: 2382 at mm/page_alloc.c:5783 __alloc_pages+0x376/0x440 [ 175.831346][ T2382] Modules linked in: [ 175.835501][ T2382] CPU: 0 PID: 2382 Comm: syz.2.593 Not tainted syzkaller #0 [ 175.849033][ T2382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 175.866758][ T2382] RIP: 0010:__alloc_pages+0x376/0x440 [ 175.880361][ T2382] Code: ff e8 6e 01 01 03 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c 75 fd ff ff 41 89 ff 4c 89 e7 e8 f2 c1 04 00 44 89 ff e9 62 fd ff ff <0f> 0b e9 1f ff ff ff 65 8b 05 94 92 5f 7e 89 44 24 08 c1 e8 06 48 [ 175.901864][ T2382] RSP: 0018:ffffc90000bd78e0 EFLAGS: 00010246 [ 175.922111][ T2382] RAX: ffffc90000bd7940 RBX: 000000000000000f RCX: 0000000000000000 [ 175.930145][ T2382] RDX: 0000000000000018 RSI: 0000000000000000 RDI: ffffc90000bd7958 [ 175.943593][ T2382] RBP: ffffc90000bd79c8 R08: dffffc0000000000 R09: ffffc90000bd7940 [ 175.951842][ T2382] R10: fffff5200017af2b R11: 1ffff9200017af28 R12: ffffc90000bd7920 [ 175.982085][ T2382] R13: dffffc0000000000 R14: 1ffff9200017af20 R15: 0000000000000000 [ 175.990121][ T2382] FS: 00007fecda11e6c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 176.012184][ T2382] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 176.018964][ T2382] CR2: 0000200000bbdffc CR3: 000000010f589000 CR4: 00000000003506b0 [ 176.027670][ T2382] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 176.036172][ T2382] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 176.044557][ T2382] Call Trace: [ 176.048249][ T2382] [ 176.055806][ T2382] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 176.062450][ T2382] ? prep_new_page+0x110/0x110 [ 176.067506][ T2382] kmalloc_order+0x4c/0x160 [ 176.072613][ T2382] kmalloc_order_trace+0x18/0xb0 [ 176.082211][ T2382] __kmalloc+0x199/0x2c0 [ 176.087082][ T2382] incfs_realloc_mount_info+0x99/0x440 [ 176.096206][ T2382] incfs_alloc_mount_info+0x476/0x540 [ 176.101750][ T2382] incfs_mount_fs+0x3c6/0x880 [ 176.111253][ T30] kauditd_printk_skb: 56 callbacks suppressed [ 176.111271][ T30] audit: type=1400 audit(1763896730.932:3604): avc: denied { getopt } for pid=2391 comm="syz.1.597" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 176.114022][ T2382] ? incfs_unlink+0x90/0x90 [ 176.143656][ T2382] ? selinux_sb_eat_lsm_opts+0xa6b/0xbf0 [ 176.149378][ T2382] legacy_get_tree+0xed/0x190 [ 176.150922][ T2390] netlink: 'syz.3.596': attribute type 4 has an invalid length. [ 176.154668][ T2382] ? incfs_unlink+0x90/0x90 [ 176.166814][ T2382] vfs_get_tree+0x89/0x260 [ 176.171345][ T2382] do_new_mount+0x25a/0xa20 [ 176.172125][ T2390] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.596'. [ 176.176315][ T2382] path_mount+0x675/0x1020 [ 176.190174][ T2382] ? user_path_at_empty+0x161/0x1c0 [ 176.195791][ T39] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 176.207183][ T2382] __se_sys_mount+0x318/0x380 [ 176.211977][ T2382] ? __x64_sys_mount+0xd0/0xd0 [ 176.217151][ T39] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 176.227334][ T2382] ? __kasan_check_write+0x14/0x20 [ 176.232758][ T2382] __x64_sys_mount+0xbf/0xd0 [ 176.237575][ T39] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 176.253029][ T2382] x64_sys_call+0x6bf/0x9a0 [ 176.264554][ T39] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.273109][ T2396] loop1: detected capacity change from 0 to 256 [ 176.282736][ T2382] do_syscall_64+0x4c/0xa0 [ 176.287311][ T2382] ? clear_bhb_loop+0x50/0xa0 [ 176.293303][ T2382] ? clear_bhb_loop+0x50/0xa0 [ 176.298139][ T2382] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 176.304715][ T2382] RIP: 0033:0x7fecdb6b6749 [ 176.309262][ T2382] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 176.325860][ T39] usb 6-1: config 0 descriptor?? [ 176.334771][ T2382] RSP: 002b:00007fecda11e038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 176.343564][ T2382] RAX: ffffffffffffffda RBX: 00007fecdb90cfa0 RCX: 00007fecdb6b6749 [ 176.351978][ T2382] RDX: 0000200000000500 RSI: 0000200000000040 RDI: 0000200000000000 [ 176.357595][ T2396] FAT-fs (loop1): Directory bread(block 64) failed [ 176.368991][ T2396] FAT-fs (loop1): Directory bread(block 65) failed [ 176.375784][ T2396] FAT-fs (loop1): Directory bread(block 66) failed [ 176.376393][ T2382] RBP: 00007fecdb73af91 R08: 00002000000001c0 R09: 0000000000000000 [ 176.382748][ T2396] FAT-fs (loop1): Directory bread(block 67) failed [ 176.390525][ T2382] R10: 000000000000c802 R11: 0000000000000246 R12: 0000000000000000 [ 176.397295][ T2396] FAT-fs (loop1): Directory bread(block 68) failed [ 176.405341][ T2382] R13: 00007fecdb90d038 R14: 00007fecdb90cfa0 R15: 00007ffe5ea59f08 [ 176.412345][ T2396] FAT-fs (loop1): Directory bread(block 69) failed [ 176.420644][ T2382] [ 176.429831][ T2382] ---[ end trace c9405773d9079c16 ]--- [ 176.435983][ T2382] incfs: Error allocating mount info. -12 [ 176.443122][ T2382] incfs: mount failed -12 [ 176.448128][ T2396] FAT-fs (loop1): Directory bread(block 70) failed [ 176.454862][ T2396] FAT-fs (loop1): Directory bread(block 71) failed [ 176.461754][ T2396] FAT-fs (loop1): Directory bread(block 72) failed [ 176.540544][ T2396] FAT-fs (loop1): Directory bread(block 73) failed [ 176.675141][ T30] audit: type=1400 audit(1763896731.502:3605): avc: denied { read append } for pid=2404 comm="syz.3.601" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 176.708943][ T30] audit: type=1400 audit(1763896731.522:3606): avc: denied { open } for pid=2404 comm="syz.3.601" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 176.736073][ T30] audit: type=1400 audit(1763896731.522:3607): avc: denied { ioctl } for pid=2404 comm="syz.3.601" path="/dev/binderfs/binder0" dev="binder" ino=13 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 176.772906][ T30] audit: type=1400 audit(1763896731.522:3608): avc: denied { set_context_mgr } for pid=2404 comm="syz.3.601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 176.813368][ T30] audit: type=1400 audit(1763896731.532:3609): avc: denied { map } for pid=2404 comm="syz.3.601" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 176.814609][ T2403] fuse: Unknown parameter 'rootmo$e' [ 176.839326][ T30] audit: type=1400 audit(1763896731.532:3610): avc: denied { call } for pid=2404 comm="syz.3.601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 176.896206][ T2411] loop0: detected capacity change from 0 to 512 [ 176.942931][ T39] cp2112 0003:10C4:EA90.0009: item fetching failed at offset 0/7 [ 176.950033][ T2411] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 176.957787][ T39] cp2112 0003:10C4:EA90.0009: parse failed [ 176.968697][ T2411] ext4 filesystem being mounted at /121/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 177.062226][ T601] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 177.075751][ T39] cp2112: probe of 0003:10C4:EA90.0009 failed with error -22 [ 177.117564][ T30] audit: type=1400 audit(1763896731.942:3611): avc: denied { mount } for pid=2417 comm="syz.1.605" name="/" dev="ramfs" ino=24765 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 177.244268][ T39] usb 6-1: USB disconnect, device number 5 [ 177.382296][ T601] usb 4-1: device descriptor read/64, error -71 [ 177.822134][ T601] usb 4-1: device descriptor read/64, error -71 [ 177.883407][ T2430] loop5: detected capacity change from 0 to 4096 [ 177.917217][ T2430] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 177.966613][ T30] audit: type=1400 audit(1763896732.792:3612): avc: denied { setopt } for pid=2434 comm="syz.1.610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 178.002195][ T30] audit: type=1400 audit(1763896732.792:3613): avc: denied { connect } for pid=2434 comm="syz.1.610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 178.142190][ T601] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 178.192820][ T2440] netlink: 24 bytes leftover after parsing attributes in process `syz.5.608'. [ 178.612178][ T601] usb 4-1: device descriptor read/64, error -71 [ 178.733999][ T2437] netlink: 24 bytes leftover after parsing attributes in process `syz.2.609'. [ 178.797265][ T2444] loop5: detected capacity change from 0 to 1024 [ 178.856303][ T2444] EXT4-fs (loop5): mounted filesystem without journal. Opts: journal_dev=0x0000000000000008,,errors=continue. Quota mode: writeback. [ 179.022114][ T601] usb 4-1: device descriptor read/64, error -71 [ 179.152122][ T601] usb usb4-port1: attempt power cycle [ 179.165839][ T2450] xt_NFQUEUE: number of queues (8) out of range (got 65537) [ 179.425069][ T2456] loop5: detected capacity change from 0 to 256 [ 179.611004][ T2456] FAT-fs (loop5): Directory bread(block 64) failed [ 179.622149][ T601] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 179.633144][ T2456] FAT-fs (loop5): Directory bread(block 65) failed [ 179.644307][ T2456] FAT-fs (loop5): Directory bread(block 66) failed [ 179.657699][ T2456] FAT-fs (loop5): Directory bread(block 67) failed [ 179.665291][ T2456] FAT-fs (loop5): Directory bread(block 68) failed [ 179.671964][ T2456] FAT-fs (loop5): Directory bread(block 69) failed [ 179.679547][ T2456] FAT-fs (loop5): Directory bread(block 70) failed [ 179.686347][ T2456] FAT-fs (loop5): Directory bread(block 71) failed [ 179.693528][ T2456] FAT-fs (loop5): Directory bread(block 72) failed [ 179.700225][ T2456] FAT-fs (loop5): Directory bread(block 73) failed [ 179.792135][ T601] usb 4-1: device descriptor read/8, error -71 [ 179.846082][ T2470] xt_hashlimit: size too large, truncated to 1048576 [ 180.022288][ T601] usb 4-1: device descriptor read/8, error -71 [ 180.132116][ T39] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 180.142117][ T397] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 180.176771][ T2480] device bridge0 entered promiscuous mode [ 180.183361][ T2480] bridge0: port 3(vlan2) entered blocking state [ 180.189674][ T2480] bridge0: port 3(vlan2) entered disabled state [ 180.198053][ T2480] device bridge0 left promiscuous mode [ 180.942480][ T39] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 180.993541][ T2490] loop1: detected capacity change from 0 to 1024 [ 181.001451][ T39] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 181.009476][ T2489] netlink: 12 bytes leftover after parsing attributes in process `syz.3.627'. [ 181.011761][ T39] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 181.029978][ T39] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.039171][ T39] usb 1-1: config 0 descriptor?? [ 181.068134][ T2490] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 181.079388][ T2490] ext4 filesystem being mounted at /134/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 181.121070][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 181.121089][ T30] audit: type=1400 audit(1763896735.942:3639): avc: denied { read write } for pid=2487 comm="syz.1.628" name="file2" dev="loop1" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 181.182232][ T397] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 181.189870][ T30] audit: type=1400 audit(1763896735.972:3640): avc: denied { open } for pid=2487 comm="syz.1.628" path="/134/file1/file2" dev="loop1" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 181.212093][ T397] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 181.243335][ T397] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 181.276689][ T397] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 181.340251][ T397] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.360082][ T397] usb 3-1: config 0 descriptor?? [ 181.456641][ T30] audit: type=1400 audit(1763896736.262:3641): avc: denied { create } for pid=2499 comm="syz.5.630" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 181.637998][ T39] cp2112 0003:10C4:EA90.000A: item fetching failed at offset 0/7 [ 181.678300][ T30] audit: type=1400 audit(1763896736.492:3642): avc: denied { map } for pid=2508 comm="syz.3.632" path="socket:[25720]" dev="sockfs" ino=25720 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 181.701470][ T30] audit: type=1400 audit(1763896736.492:3643): avc: denied { read } for pid=2508 comm="syz.3.632" path="socket:[25720]" dev="sockfs" ino=25720 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 181.711008][ T39] cp2112 0003:10C4:EA90.000A: parse failed [ 181.732461][ T30] audit: type=1401 audit(1763896736.502:3644): op=setxattr invalid_context="system_u:object_r:fsadm_exec_t:s0" [ 181.744256][ T39] cp2112: probe of 0003:10C4:EA90.000A failed with error -22 [ 181.789658][ T8] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 181.805127][ T8] EXT4-fs (loop1): Delayed block allocation failed for inode 16 at logical offset 36 with max blocks 2048 with error 28 [ 181.818233][ T8] EXT4-fs (loop1): This should not happen!! Data will be lost [ 181.818233][ T8] [ 181.829688][ T8] EXT4-fs (loop1): Total free blocks count 0 [ 181.835888][ T8] EXT4-fs (loop1): Free/Dirty block details [ 181.841796][ T8] EXT4-fs (loop1): free_blocks=4293918720 [ 181.847604][ T8] EXT4-fs (loop1): dirty_blocks=8128 [ 181.857054][ T8] EXT4-fs (loop1): Block reservation details [ 181.873831][ T20] usb 1-1: USB disconnect, device number 9 [ 181.880720][ T8] EXT4-fs (loop1): i_reserved_data_blocks=508 [ 181.912607][ T2241] EXT4-fs (loop1): Delayed block allocation failed for inode 16 at logical offset 2088 with max blocks 2048 with error 28 [ 181.925976][ T2241] EXT4-fs (loop1): This should not happen!! Data will be lost [ 181.925976][ T2241] [ 181.983598][ T397] plantronics 0003:047F:FFFF.000B: unknown main item tag 0xd [ 181.995622][ T397] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving [ 182.007258][ T397] plantronics 0003:047F:FFFF.000B: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 183.427323][ T2526] syz.5.637[2526] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 183.428441][ T2526] syz.5.637[2526] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 184.103728][ T2526] loop5: detected capacity change from 0 to 512 [ 184.244478][ T2526] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 184.324593][ T39] usb 3-1: USB disconnect, device number 12 [ 184.401188][ T2526] EXT4-fs (loop5): 1 truncate cleaned up [ 184.407072][ T2526] EXT4-fs (loop5): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,quota,. Quota mode: writeback. [ 185.129733][ T2535] netlink: 4 bytes leftover after parsing attributes in process `syz.0.640'. [ 185.139903][ T2535] netlink: 12 bytes leftover after parsing attributes in process `syz.0.640'. [ 185.465016][ T2536] netlink: 24 bytes leftover after parsing attributes in process `syz.3.638'. [ 186.023643][ T2537] netlink: 24 bytes leftover after parsing attributes in process `syz.2.639'. [ 186.499352][ T2547] netlink: 44 bytes leftover after parsing attributes in process `syz.0.644'. [ 186.523043][ T2543] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 186.575473][ T2546] loop5: detected capacity change from 0 to 512 [ 186.581953][ T307] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 187.497968][ T2546] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 187.510707][ T2546] ext4 filesystem being mounted at /54/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 187.623993][ T2565] loop1: detected capacity change from 0 to 256 [ 189.532279][ T2529] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:476: comm ext4lazyinit: Invalid block bitmap block 60000 in block_group 0 [ 189.822255][ T601] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 190.063598][ T2579] loop5: detected capacity change from 0 to 128 [ 190.085954][ T30] audit: type=1400 audit(1763896744.912:3645): avc: denied { ioctl } for pid=2578 comm="syz.5.653" path="socket:[25828]" dev="sockfs" ino=25828 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 190.138853][ T2582] loop5: detected capacity change from 0 to 4096 [ 190.167089][ T2582] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 190.252195][ T601] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 190.263587][ T601] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 190.323763][ T2586] netlink: 24 bytes leftover after parsing attributes in process `syz.5.654'. [ 190.352900][ T411] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 190.360640][ T601] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 190.369874][ T601] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.378648][ T601] usb 3-1: config 0 descriptor?? [ 190.592223][ T411] usb 1-1: Using ep0 maxpacket: 8 [ 190.863177][ T601] cp2112 0003:10C4:EA90.000C: item fetching failed at offset 0/7 [ 190.871854][ T601] cp2112 0003:10C4:EA90.000C: parse failed [ 190.877920][ T411] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 190.887720][ T601] cp2112: probe of 0003:10C4:EA90.000C failed with error -22 [ 190.895658][ T411] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.905888][ T411] usb 1-1: Product: syz [ 190.910293][ T411] usb 1-1: Manufacturer: syz [ 190.920622][ T411] usb 1-1: SerialNumber: syz [ 191.085109][ T333] usb 3-1: USB disconnect, device number 13 [ 191.162086][ T307] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 191.203042][ T411] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 10 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 191.224351][ T411] usb 1-1: USB disconnect, device number 10 [ 191.235480][ T411] usblp0: removed [ 191.332104][ T601] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 191.402110][ T307] usb 4-1: Using ep0 maxpacket: 32 [ 191.522248][ T307] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 81, changing to 10 [ 191.533541][ T307] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 191.543439][ T307] usb 4-1: config 0 interface 0 has no altsetting 0 [ 191.550359][ T307] usb 4-1: New USB device found, idVendor=07c0, idProduct=1125, bcdDevice= 0.00 [ 191.559844][ T307] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.572150][ T601] usb 6-1: Using ep0 maxpacket: 32 [ 191.579026][ T307] usb 4-1: config 0 descriptor?? [ 191.732164][ T601] usb 6-1: unable to get BOS descriptor or descriptor too short [ 191.834009][ T30] audit: type=1400 audit(1763896746.662:3646): avc: denied { nlmsg_read } for pid=2588 comm="syz.3.655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 191.852158][ T601] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 191.891635][ T601] usb 6-1: config 0 has no interfaces? [ 191.951130][ T2605] device bridge0 entered promiscuous mode [ 191.958793][ T2605] bridge0: port 3(vlan2) entered blocking state [ 191.965646][ T2605] bridge0: port 3(vlan2) entered disabled state [ 191.983230][ T2605] device bridge0 left promiscuous mode [ 192.084008][ T30] audit: type=1400 audit(1763896746.912:3647): avc: denied { connect } for pid=2597 comm="syz.2.657" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 192.104226][ T30] audit: type=1400 audit(1763896746.912:3648): avc: denied { write } for pid=2597 comm="syz.2.657" path="socket:[25157]" dev="sockfs" ino=25157 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 192.128486][ T30] audit: type=1400 audit(1763896746.912:3649): avc: denied { remount } for pid=2597 comm="syz.2.657" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 192.149302][ T601] usb 6-1: language id specifier not provided by device, defaulting to English [ 192.272193][ T601] usb 6-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 192.281507][ T601] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.289913][ T601] usb 6-1: Product: syz [ 192.294468][ T601] usb 6-1: Manufacturer: syz [ 192.299451][ T601] usb 6-1: SerialNumber: syz [ 192.308048][ T601] usb 6-1: config 0 descriptor?? [ 192.322113][ T6] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 192.692138][ T6] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 192.700447][ T6] usb 1-1: config 179 has no interface number 0 [ 192.722120][ T6] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 1029, setting to 64 [ 192.742095][ T6] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 192.762115][ T6] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 192.782094][ T6] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 192.802093][ T6] usb 1-1: config 179 interface 65 has no altsetting 0 [ 192.809015][ T6] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 192.832092][ T6] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.872181][ T2608] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 192.893854][ T6] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input19 [ 192.923165][ T30] audit: type=1400 audit(1763896747.752:3650): avc: denied { read } for pid=86 comm="acpid" name="event3" dev="devtmpfs" ino=1103 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 192.970739][ T30] audit: type=1400 audit(1763896747.752:3651): avc: denied { open } for pid=86 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=1103 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 193.108451][ T2608] netlink: 32 bytes leftover after parsing attributes in process `syz.0.661'. [ 193.188347][ T20] usb 1-1: USB disconnect, device number 11 [ 193.194361][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 193.204286][ T20] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 193.291946][ T2618] netlink: 24 bytes leftover after parsing attributes in process `syz.2.663'. [ 193.797377][ T30] audit: type=1400 audit(1763896748.622:3652): avc: denied { getopt } for pid=2619 comm="syz.0.664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 193.831627][ T2622] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 193.843578][ T2622] SELinux: failed to load policy [ 193.870273][ T2624] loop0: detected capacity change from 0 to 512 [ 193.892107][ T2624] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 193.918374][ T2624] ext4 filesystem being mounted at /133/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 193.932251][ T307] usbhid 4-1:0.0: can't add hid device: -71 [ 193.938398][ T307] usbhid: probe of 4-1:0.0 failed with error -71 [ 193.999922][ T307] usb 4-1: USB disconnect, device number 11 [ 195.637693][ T30] audit: type=1400 audit(1763896750.152:3653): avc: denied { mounton } for pid=2623 comm="syz.0.666" path="/133/file1" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 195.689688][ T20] usb 6-1: USB disconnect, device number 6 [ 195.887149][ T333] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 196.332456][ T333] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 196.413409][ T333] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 196.437254][ T333] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 196.448076][ T333] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.483219][ T333] usb 3-1: config 0 descriptor?? [ 197.091636][ T30] audit: type=1400 audit(1763896751.912:3654): avc: denied { ioctl } for pid=2663 comm="syz.3.678" path="socket:[25980]" dev="sockfs" ino=25980 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 197.102294][ T333] usbhid 3-1:0.0: can't add hid device: -71 [ 197.122698][ T333] usbhid: probe of 3-1:0.0 failed with error -71 [ 197.122810][ T30] audit: type=1400 audit(1763896751.952:3655): avc: denied { bind } for pid=2663 comm="syz.3.678" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 197.134008][ T333] usb 3-1: USB disconnect, device number 14 [ 197.148983][ T20] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 197.219418][ T2666] tmpfs: Bad value for 'nr_blocks' [ 197.223234][ T2667] tmpfs: Bad value for 'nr_blocks' [ 197.231924][ T30] audit: type=1400 audit(1763896752.052:3657): avc: denied { setopt } for pid=2663 comm="syz.3.678" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 197.251941][ T30] audit: type=1400 audit(1763896752.052:3656): avc: denied { setopt } for pid=2663 comm="syz.3.678" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 197.324564][ T2671] loop0: detected capacity change from 0 to 4096 [ 197.347548][ T2671] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 197.564984][ T2675] netlink: 24 bytes leftover after parsing attributes in process `syz.0.680'. [ 197.732195][ T20] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid maxpacket 65535, setting to 64 [ 197.883191][ T30] audit: type=1400 audit(1763896752.712:3658): avc: denied { unmount } for pid=282 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 197.904839][ T20] usb 6-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9 [ 197.914713][ T20] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.923185][ T20] usb 6-1: Product: syz [ 197.927585][ T20] usb 6-1: Manufacturer: syz [ 197.932618][ T20] usb 6-1: SerialNumber: syz [ 197.938552][ T20] usb 6-1: config 0 descriptor?? [ 197.946340][ T2681] SELinux: policydb magic number 0x84 does not match expected magic number 0xf97cff8c [ 197.956656][ T2681] SELinux: failed to load policy [ 197.962181][ T2642] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 198.013346][ T20] input: KB Gear Tablet as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input20 [ 198.024285][ T30] audit: type=1400 audit(1763896752.852:3659): avc: denied { ioctl } for pid=86 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=1117 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 198.181344][ T2685] SELinux: Context system_u:object_r:audisp_exec_t:s0 is not valid (left unmapped). [ 198.267529][ T30] audit: type=1400 audit(1763896753.002:3660): avc: denied { relabelfrom } for pid=2682 comm="syz.2.684" name="" dev="pipefs" ino=26001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 198.401620][ T333] usb 6-1: USB disconnect, device number 7 [ 198.417135][ T30] audit: type=1400 audit(1763896753.022:3661): avc: denied { relabelto } for pid=2682 comm="syz.2.684" name="" dev="pipefs" ino=26001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:object_r:audisp_exec_t:s0" [ 198.457592][ T20] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 198.472121][ T30] audit: type=1400 audit(1763896753.282:3662): avc: denied { read write } for pid=2687 comm="syz.3.685" name="uhid" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 198.496520][ T20] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 198.647348][ T2697] netlink: 24 bytes leftover after parsing attributes in process `syz.2.688'. [ 198.672601][ T2700] SELinux: security_context_str_to_sid(ħ¸­šġï˙3ÏlŜù‡Ĉ‘h.ù‡ĉ’h.ù‡ĉ’h.ù‡ĉ’h.ù‡ĉ’hóù) failed for (dev ?, type ?) errno=-22 [ 198.686567][ T2700] incfs: Backing dir is not set, filesystem can't be mounted. [ 198.694774][ T2700] incfs: mount failed -2 [ 199.123591][ T2707] netlink: 112 bytes leftover after parsing attributes in process `syz.5.690'. [ 199.602622][ T2709] device bridge0 entered promiscuous mode [ 199.609239][ T2709] bridge0: port 3(vlan2) entered blocking state [ 199.615907][ T2709] bridge0: port 3(vlan2) entered disabled state [ 199.623617][ T2709] device bridge0 left promiscuous mode [ 199.775635][ T2715] device bridge0 entered promiscuous mode [ 199.786854][ T2715] bridge0: port 3(vlan2) entered blocking state [ 199.793526][ T2715] bridge0: port 3(vlan2) entered disabled state [ 199.800965][ T2715] device bridge0 left promiscuous mode [ 199.812151][ T601] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 199.872830][ T2719] block device autoloading is deprecated and will be removed. [ 200.005986][ T2724] netlink: 'syz.5.696': attribute type 13 has an invalid length. [ 200.018214][ T2724] gretap0: refused to change device tx_queue_len [ 200.025253][ T2724] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 200.052166][ T397] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 200.222114][ T20] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 200.312090][ T397] usb 2-1: Using ep0 maxpacket: 16 [ 200.492266][ T397] usb 2-1: unable to get BOS descriptor or descriptor too short [ 200.572275][ T20] usb 3-1: Using ep0 maxpacket: 8 [ 200.592602][ T397] usb 2-1: config 1 has an invalid interface number: 206 but max is 0 [ 200.610986][ T397] usb 2-1: config 1 has no interface number 0 [ 200.643637][ T397] usb 2-1: config 1 interface 206 altsetting 0 has an invalid endpoint with address 0x32, skipping [ 200.799038][ T20] usb 3-1: unable to get BOS descriptor or descriptor too short [ 200.892209][ T20] usb 3-1: config 59 has an invalid interface number: 140 but max is 0 [ 200.910907][ T20] usb 3-1: config 59 has no interface number 0 [ 200.917841][ T20] usb 3-1: config 59 interface 140 has no altsetting 0 [ 200.944853][ T2729] SELinux: ebitmap: truncated map [ 200.964750][ T2729] SELinux: failed to load policy [ 201.002187][ T397] usb 2-1: string descriptor 0 read error: -22 [ 201.008526][ T397] usb 2-1: New USB device found, idVendor=152d, idProduct=0310, bcdDevice=3b.0a [ 201.067874][ T397] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.141099][ T2735] netlink: 72 bytes leftover after parsing attributes in process `syz.3.699'. [ 201.222404][ T601] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 201.234077][ T601] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 201.250162][ T601] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 201.260509][ T601] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.293957][ T601] usb 1-1: config 0 descriptor?? [ 201.442178][ T333] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 201.692468][ T601] usbhid 1-1:0.0: can't add hid device: -71 [ 201.699409][ T601] usbhid: probe of 1-1:0.0 failed with error -71 [ 201.755689][ T601] usb 1-1: USB disconnect, device number 12 [ 201.832392][ T333] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 202.281374][ T333] usb 6-1: New USB device found, idVendor=0925, idProduct=8866, bcdDevice= 0.00 [ 202.291234][ T333] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.316256][ T333] usb 6-1: config 0 descriptor?? [ 202.342166][ T20] usb 3-1: New USB device found, idVendor=05ab, idProduct=0060, bcdDevice=e6.71 [ 202.351442][ T20] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.360026][ T20] usb 3-1: Product: syz [ 202.365307][ T20] usb 3-1: Manufacturer: syz [ 202.369944][ T20] usb 3-1: SerialNumber: syz [ 202.555079][ T2739] loop0: detected capacity change from 0 to 512 [ 202.702150][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 202.702178][ T30] audit: type=1400 audit(1763896757.502:3664): avc: denied { create } for pid=2732 comm="syz.5.700" dev="anon_inodefs" ino=25356 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 202.937030][ T2739] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 202.950187][ T2739] ext4 filesystem being mounted at /139/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 203.066619][ T333] smartjoyplus 0003:0925:8866.000E: item fetching failed at offset 3/7 [ 203.159006][ T333] smartjoyplus 0003:0925:8866.000E: parse failed [ 203.333855][ T30] audit: type=1400 audit(1763896757.512:3665): avc: denied { ioctl } for pid=2732 comm="syz.5.700" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=25356 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 203.378284][ T333] smartjoyplus: probe of 0003:0925:8866.000E failed with error -22 [ 203.434349][ T333] usb 2-1: USB disconnect, device number 12 [ 203.441198][ T2749] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2749 comm=syz.2.695 [ 203.683032][ T20] usb 3-1: USB disconnect, device number 15 [ 203.926598][ T2755] loop0: detected capacity change from 0 to 512 [ 204.031569][ T2755] EXT4-fs (loop0): 1 orphan inode deleted [ 204.048708][ T2755] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpid,,errors=continue. Quota mode: writeback. [ 204.161937][ T2755] ext4 filesystem being mounted at /140/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 204.304987][ T2755] EXT4-fs (loop0): re-mounted. Opts: (null). Quota mode: writeback. [ 204.391952][ T20] usb 6-1: USB disconnect, device number 8 [ 204.591583][ T2781] netlink: 72 bytes leftover after parsing attributes in process `syz.2.712'. [ 204.844556][ T30] audit: type=1400 audit(1763896759.672:3666): avc: denied { ioctl } for pid=2782 comm="syz.3.713" path="/dev/input/event2" dev="devtmpfs" ino=270 ioctlcmd=0x45a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 206.088725][ T2793] SELinux: ebitmap: truncated map [ 206.092108][ T601] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 206.154798][ T2793] SELinux: failed to load policy [ 206.227674][ T2797] SELinux: ebitmap: truncated map [ 206.242111][ T20] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 206.246074][ T2797] SELinux: failed to load policy [ 206.290186][ T30] audit: type=1400 audit(1763896761.112:3667): avc: denied { connect } for pid=2798 comm="syz.3.720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 206.330231][ T30] audit: type=1400 audit(1763896761.142:3668): avc: denied { getopt } for pid=2798 comm="syz.3.720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 206.472165][ T601] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 206.480296][ T601] usb 2-1: config 0 has no interface number 0 [ 206.502158][ T601] usb 2-1: config 0 interface 2 altsetting 2 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 206.522254][ T601] usb 2-1: config 0 interface 2 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 206.542085][ T601] usb 2-1: config 0 interface 2 altsetting 2 endpoint 0x82 has invalid maxpacket 192, setting to 64 [ 206.562100][ T601] usb 2-1: config 0 interface 2 has no altsetting 0 [ 206.612098][ T6] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 206.641277][ T2802] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 206.650207][ T2802] overlayfs: missing 'lowerdir' [ 206.662155][ T20] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 206.673202][ T20] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 206.683691][ T20] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 206.692921][ T20] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.709230][ T20] usb 6-1: config 0 descriptor?? [ 206.742538][ T601] usb 2-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 206.751839][ T601] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.760266][ T601] usb 2-1: Product: syz [ 206.767373][ T601] usb 2-1: Manufacturer: syz [ 206.772247][ T601] usb 2-1: SerialNumber: syz [ 206.777453][ T601] usb 2-1: config 0 descriptor?? [ 206.812183][ T2787] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 206.819257][ T2787] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 206.852140][ T6] usb 4-1: Using ep0 maxpacket: 16 [ 206.862971][ T2808] device bridge0 entered promiscuous mode [ 206.869204][ T2808] bridge0: port 3(vlan2) entered blocking state [ 206.875758][ T2808] bridge0: port 3(vlan2) entered disabled state [ 206.883273][ T2808] device bridge0 left promiscuous mode [ 206.957708][ T2810] loop0: detected capacity change from 0 to 4096 [ 206.984865][ T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 206.995915][ T6] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 207.009651][ T6] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 207.019644][ T6] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.037918][ T2810] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 207.076011][ T6] usb 4-1: config 0 descriptor?? [ 207.154555][ T601] usb 2-1: USB disconnect, device number 13 [ 207.253275][ T2817] netlink: 24 bytes leftover after parsing attributes in process `syz.0.725'. [ 207.329772][ T30] audit: type=1400 audit(1763896762.152:3669): avc: denied { read } for pid=2800 comm="syz.3.721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 207.457890][ T1678] udevd[1678]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 207.493090][ T20] cp2112 0003:10C4:EA90.000F: item fetching failed at offset 0/7 [ 207.501049][ T20] cp2112 0003:10C4:EA90.000F: parse failed [ 207.507224][ T20] cp2112: probe of 0003:10C4:EA90.000F failed with error -22 [ 207.532137][ T20] usb 6-1: USB disconnect, device number 9 [ 207.652125][ T307] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 207.744972][ T2821] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 207.806125][ T2825] SELinux: ebitmap: truncated map [ 207.822145][ T6] usbhid 4-1:0.0: can't add hid device: -71 [ 207.828228][ T6] usbhid: probe of 4-1:0.0 failed with error -71 [ 207.840331][ T2825] SELinux: failed to load policy [ 207.856430][ T6] usb 4-1: USB disconnect, device number 12 [ 207.892146][ T307] usb 3-1: Using ep0 maxpacket: 16 [ 208.366124][ T2830] FAULT_INJECTION: forcing a failure. [ 208.366124][ T2830] name failslab, interval 1, probability 0, space 0, times 0 [ 208.379075][ T2830] CPU: 0 PID: 2830 Comm: syz.1.732 Tainted: G W syzkaller #0 [ 208.387765][ T2830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 208.397837][ T2830] Call Trace: [ 208.401126][ T2830] [ 208.404076][ T2830] __dump_stack+0x21/0x30 [ 208.408430][ T2830] dump_stack_lvl+0xee/0x150 [ 208.413046][ T2830] ? show_regs_print_info+0x20/0x20 [ 208.418291][ T2830] ? __kasan_check_write+0x14/0x20 [ 208.423534][ T2830] ? rwsem_read_trylock+0x29a/0x620 [ 208.428784][ T2830] dump_stack+0x15/0x20 [ 208.432965][ T2830] should_fail+0x3c1/0x510 [ 208.437403][ T2830] __should_failslab+0xa4/0xe0 [ 208.442188][ T2830] should_failslab+0x9/0x20 [ 208.446795][ T2830] slab_pre_alloc_hook+0x3b/0xe0 [ 208.451745][ T2830] __kmalloc+0x6d/0x2c0 [ 208.455911][ T2830] ? crypto_create_tfm_node+0x77/0x350 [ 208.461392][ T2830] crypto_create_tfm_node+0x77/0x350 [ 208.466687][ T2830] ? crypto_alg_mod_lookup+0x4ac/0x710 [ 208.472377][ T2830] crypto_alloc_tfm_node+0x165/0x350 [ 208.477691][ T2830] crypto_alloc_aead+0x30/0x40 [ 208.482473][ T2830] macsec_validate_attr+0x17b/0x9e0 [ 208.487793][ T2830] ? macsec_setup+0x1a0/0x1a0 [ 208.492619][ T2830] rtnl_newlink+0x984/0x17b0 [ 208.497230][ T2830] ? rtnl_newlink+0x861/0x17b0 [ 208.502027][ T2830] ? rtnl_setlink+0x400/0x400 [ 208.506769][ T2830] ? native_send_call_func_single_ipi+0x5e/0x70 [ 208.513052][ T2830] ? cpumask_next+0x7c/0xa0 [ 208.517586][ T2830] ? smp_call_function_many_cond+0x8bf/0x9f0 [ 208.523763][ T2830] ? smp_call_function_many_cond+0x96f/0x9f0 [ 208.529859][ T2830] ? __kernel_text_address+0xa0/0x100 [ 208.535243][ T2830] ? memcpy+0x56/0x70 [ 208.539372][ T2830] ? 0xffffffffa00167f0 [ 208.543547][ T2830] ? __kasan_check_write+0x14/0x20 [ 208.548678][ T2830] ? wait_for_completion_killable_timeout+0x10/0x10 [ 208.555283][ T2830] ? ns_capable+0x8c/0xf0 [ 208.559630][ T2830] ? netlink_net_capable+0x125/0x160 [ 208.564935][ T2830] ? rtnl_setlink+0x400/0x400 [ 208.569641][ T2830] rtnetlink_rcv_msg+0x9e4/0xb90 [ 208.574692][ T2830] ? rtnetlink_bind+0x80/0x80 [ 208.579397][ T2830] ? memcpy+0x56/0x70 [ 208.583399][ T2830] ? avc_has_perm_noaudit+0x2f4/0x460 [ 208.588783][ T2830] ? arch_stack_walk+0xee/0x140 [ 208.593679][ T2830] ? avc_denied+0x1b0/0x1b0 [ 208.598208][ T2830] ? stack_trace_save+0x98/0xe0 [ 208.603072][ T2830] ? avc_has_perm+0x158/0x240 [ 208.607765][ T2830] ? avc_has_perm_noaudit+0x460/0x460 [ 208.613146][ T2830] ? x64_sys_call+0x4b/0x9a0 [ 208.617749][ T2830] ? selinux_nlmsg_lookup+0x400/0x4c0 [ 208.623140][ T2830] netlink_rcv_skb+0x1e0/0x430 [ 208.627920][ T2830] ? rtnetlink_bind+0x80/0x80 [ 208.632610][ T2830] ? netlink_ack+0xb60/0xb60 [ 208.637306][ T2830] ? __netlink_lookup+0x387/0x3b0 [ 208.642344][ T2830] rtnetlink_rcv+0x1c/0x20 [ 208.646776][ T2830] netlink_unicast+0x876/0xa40 [ 208.651569][ T2830] netlink_sendmsg+0x86a/0xb70 [ 208.656518][ T2830] ? netlink_getsockopt+0x530/0x530 [ 208.661733][ T2830] ? security_socket_sendmsg+0x82/0xa0 [ 208.667205][ T2830] ? netlink_getsockopt+0x530/0x530 [ 208.672425][ T2830] ____sys_sendmsg+0x5a2/0x8c0 [ 208.677207][ T2830] ? __sys_sendmsg_sock+0x40/0x40 [ 208.682240][ T2830] ? import_iovec+0x7c/0xb0 [ 208.686747][ T2830] ___sys_sendmsg+0x1f0/0x260 [ 208.691519][ T2830] ? __sys_sendmsg+0x250/0x250 [ 208.696554][ T2830] ? __fdget+0x1a1/0x230 [ 208.700798][ T2830] __x64_sys_sendmsg+0x1e2/0x2a0 [ 208.705740][ T2830] ? ___sys_sendmsg+0x260/0x260 [ 208.710595][ T2830] ? ksys_write+0x1eb/0x240 [ 208.715191][ T2830] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 208.721356][ T2830] x64_sys_call+0x4b/0x9a0 [ 208.725864][ T2830] do_syscall_64+0x4c/0xa0 [ 208.730370][ T2830] ? clear_bhb_loop+0x50/0xa0 [ 208.735046][ T2830] ? clear_bhb_loop+0x50/0xa0 [ 208.739732][ T2830] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 208.745629][ T2830] RIP: 0033:0x7ffb0eaaf749 [ 208.750143][ T2830] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 208.769769][ T2830] RSP: 002b:00007ffb0d4f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 208.778208][ T2830] RAX: ffffffffffffffda RBX: 00007ffb0ed06090 RCX: 00007ffb0eaaf749 [ 208.786183][ T2830] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 208.794152][ T2830] RBP: 00007ffb0d4f6090 R08: 0000000000000000 R09: 0000000000000000 [ 208.802121][ T2830] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 208.810185][ T2830] R13: 00007ffb0ed06128 R14: 00007ffb0ed06090 R15: 00007ffd7e486a68 [ 208.818161][ T2830] [ 208.862154][ T307] usb 3-1: unable to get BOS descriptor or descriptor too short [ 208.905856][ T30] audit: type=1400 audit(1763896763.732:3670): avc: denied { create } for pid=2838 comm="syz.0.735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 208.952257][ T30] audit: type=1400 audit(1763896763.772:3671): avc: denied { read } for pid=2838 comm="syz.0.735" path="socket:[25557]" dev="sockfs" ino=25557 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 208.982691][ T307] usb 3-1: config 1 has an invalid interface number: 206 but max is 0 [ 208.990989][ T307] usb 3-1: config 1 has no interface number 0 [ 209.027798][ T307] usb 3-1: config 1 interface 206 altsetting 0 has an invalid endpoint with address 0x32, skipping [ 209.038973][ T30] audit: type=1400 audit(1763896763.782:3672): avc: denied { unmount } for pid=281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 209.072569][ T2846] loop0: detected capacity change from 0 to 4096 [ 209.102961][ T2846] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 209.229311][ T2848] netlink: 28 bytes leftover after parsing attributes in process `syz.5.739'. [ 209.324679][ T307] usb 3-1: string descriptor 0 read error: -22 [ 209.332981][ T2859] netlink: 24 bytes leftover after parsing attributes in process `syz.0.737'. [ 209.356730][ T307] usb 3-1: New USB device found, idVendor=152d, idProduct=0310, bcdDevice=3b.0a [ 209.379955][ T307] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.419761][ T2864] 9pnet: Insufficient options for proto=fd [ 209.461281][ T2863] SELinux: ebitmap: truncated map [ 209.480409][ T2863] SELinux: failed to load policy [ 209.483602][ T2861] 9pnet: Insufficient options for proto=fd [ 209.490367][ T2844] 9pnet: Insufficient options for proto=fd [ 209.492299][ T30] audit: type=1400 audit(1763896764.312:3673): avc: denied { watch watch_reads } for pid=2841 comm="syz.3.736" path="/167/bus" dev="tmpfs" ino=950 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 209.497874][ T2844] overlayfs: missing 'lowerdir' [ 209.534792][ T30] audit: type=1400 audit(1763896764.362:3674): avc: denied { remount } for pid=2841 comm="syz.3.736" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 209.593725][ T30] audit: type=1326 audit(1763896764.422:3675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2870 comm="syz.1.746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb0eaaf749 code=0x7ffc0000 [ 209.621385][ T30] audit: type=1326 audit(1763896764.452:3676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2870 comm="syz.1.746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7ffb0eaaf749 code=0x7ffc0000 [ 209.645236][ T30] audit: type=1326 audit(1763896764.452:3677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2870 comm="syz.1.746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb0eaaf749 code=0x7ffc0000 [ 209.658018][ T2871] loop1: detected capacity change from 0 to 4096 [ 209.675546][ T30] audit: type=1326 audit(1763896764.452:3678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2870 comm="syz.1.746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=6 compat=0 ip=0x7ffb0eaaf749 code=0x7ffc0000 [ 209.706234][ T2871] EXT4-fs (loop1): Ignoring removed bh option [ 209.719643][ T30] audit: type=1326 audit(1763896764.452:3679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2870 comm="syz.1.746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb0eaaf749 code=0x7ffc0000 [ 209.743428][ T2871] EXT4-fs (loop1): Test dummy encryption mode enabled [ 209.758716][ T2871] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 209.767312][ T2871] System zones: 0-5 [ 209.776802][ T307] usb 3-1: USB disconnect, device number 16 [ 209.783510][ T2871] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug,delalloc,bh,test_dummy_encryption,nodiscard,min_batch_time=0x0000000000000004,acl,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 209.819088][ T2871] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 209.832259][ T2871] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 209.957018][ T601] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 210.579769][ T2896] netlink: 20 bytes leftover after parsing attributes in process `syz.0.752'. [ 210.594777][ T2896] loop0: detected capacity change from 0 to 512 [ 210.812672][ T601] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 210.903613][ T601] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 210.940104][ T601] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 210.950754][ T601] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.993033][ T601] usb 6-1: config 0 descriptor?? [ 211.112225][ T333] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 211.432145][ T333] usb 1-1: Using ep0 maxpacket: 8 [ 211.572288][ T333] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 211.630960][ T333] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 211.812144][ T397] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 211.862171][ T333] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 211.871277][ T333] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.879530][ T333] usb 1-1: Product: syz [ 211.883967][ T333] usb 1-1: Manufacturer: syz [ 211.888575][ T333] usb 1-1: SerialNumber: syz [ 211.903209][ T601] cp2112 0003:10C4:EA90.0010: item fetching failed at offset 0/7 [ 211.911470][ T601] cp2112 0003:10C4:EA90.0010: parse failed [ 211.917737][ T601] cp2112: probe of 0003:10C4:EA90.0010 failed with error -22 [ 212.119216][ T601] usb 6-1: USB disconnect, device number 10 [ 212.182133][ T397] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 212.192555][ T397] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 212.201913][ T397] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 212.382221][ T397] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 212.391648][ T397] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.400103][ T397] usb 2-1: Product: syz [ 212.404585][ T397] usb 2-1: Manufacturer: syz [ 212.409235][ T397] usb 2-1: SerialNumber: syz [ 212.684646][ T2914] loop5: detected capacity change from 0 to 4096 [ 212.751768][ T2914] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 212.802609][ T397] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 212.809928][ T397] cdc_ncm 2-1:1.0: bind() failure [ 212.820850][ T2914] netlink: 24 bytes leftover after parsing attributes in process `syz.5.759'. [ 212.863082][ T397] usb 2-1: USB disconnect, device number 14 [ 212.924192][ T2924] netlink: 'syz.5.761': attribute type 29 has an invalid length. [ 212.932264][ T2924] netlink: 8 bytes leftover after parsing attributes in process `syz.5.761'. [ 212.943942][ T2924] netlink: 'syz.5.761': attribute type 29 has an invalid length. [ 212.951770][ T2924] netlink: 8 bytes leftover after parsing attributes in process `syz.5.761'. [ 212.981287][ T2924] loop5: detected capacity change from 0 to 512 [ 213.025960][ T2924] EXT4-fs (loop5): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 213.040510][ T2924] ext4 filesystem being mounted at /68/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 213.128706][ T2933] loop5: detected capacity change from 0 to 4096 [ 213.177111][ T2933] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 213.342442][ T333] usb 1-1: 0:2 : does not exist [ 213.358237][ T333] usb 1-1: USB disconnect, device number 13 [ 213.373551][ T2943] netlink: 24 bytes leftover after parsing attributes in process `syz.5.764'. [ 213.750852][ T2746] udevd[2746]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 213.768899][ T397] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 213.883142][ T2939] SELinux: ebitmap: truncated map [ 214.377049][ T2939] SELinux: failed to load policy [ 214.385437][ T2950] loop0: detected capacity change from 0 to 4096 [ 214.400632][ T2954] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=2954 comm=syz.2.772 [ 214.413883][ T2954] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=2954 comm=syz.2.772 [ 214.473536][ T2950] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 214.512093][ T397] usb 4-1: Using ep0 maxpacket: 16 [ 214.570535][ T2950] netlink: 24 bytes leftover after parsing attributes in process `syz.0.771'. [ 214.618947][ T601] kernel write not supported for file /vcsu (pid: 601 comm: kworker/1:6) [ 214.645364][ T2948] loop1: detected capacity change from 0 to 40427 [ 214.704269][ T2948] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 214.724041][ T2948] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 214.754553][ T2948] F2FS-fs (loop1): invalid crc value [ 214.763912][ T2948] F2FS-fs (loop1): Found nat_bits in checkpoint [ 214.808556][ T2948] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 214.816894][ T2948] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 214.822371][ T397] usb 4-1: unable to get BOS descriptor or descriptor too short [ 214.919702][ T30] kauditd_printk_skb: 79 callbacks suppressed [ 214.919719][ T30] audit: type=1400 audit(1763896769.742:3759): avc: denied { create } for pid=2947 comm="syz.1.769" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 214.922202][ T397] usb 4-1: config 1 has an invalid interface number: 206 but max is 0 [ 215.946364][ T2962] netlink: 4 bytes leftover after parsing attributes in process `syz.2.775'. [ 215.955404][ T2962] device bridge_slave_1 left promiscuous mode [ 215.961868][ T2962] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.964967][ T397] usb 4-1: config 1 has no interface number 0 [ 215.977971][ T397] usb 4-1: config 1 interface 206 altsetting 0 has an invalid endpoint with address 0x32, skipping [ 215.981812][ T2962] device bridge_slave_0 left promiscuous mode [ 216.028906][ T2962] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.086886][ T30] audit: type=1326 audit(1763896770.912:3760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2979 comm="syz.0.777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc5a5df749 code=0x7ffc0000 [ 216.147324][ T397] usb 4-1: string descriptor 0 read error: -71 [ 216.163775][ T397] usb 4-1: New USB device found, idVendor=152d, idProduct=0310, bcdDevice=3b.0a [ 216.181162][ T30] audit: type=1326 audit(1763896770.942:3761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2979 comm="syz.0.777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7fbc5a5df749 code=0x7ffc0000 [ 216.199512][ T397] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.225657][ T30] audit: type=1326 audit(1763896770.942:3762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2979 comm="syz.0.777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc5a5df749 code=0x7ffc0000 [ 216.250808][ T30] audit: type=1326 audit(1763896770.952:3763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2979 comm="syz.0.777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7fbc5a5df749 code=0x7ffc0000 [ 216.287700][ T397] usb 4-1: can't set config #1, error -71 [ 216.304062][ T397] usb 4-1: USB disconnect, device number 13 [ 216.372557][ T30] audit: type=1326 audit(1763896770.952:3764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2979 comm="syz.0.777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc5a5df749 code=0x7ffc0000 [ 216.682213][ T30] audit: type=1326 audit(1763896770.952:3765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2979 comm="syz.0.777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7fbc5a5df749 code=0x7ffc0000 [ 216.838832][ T2994] netlink: 24 bytes leftover after parsing attributes in process `syz.2.780'. [ 216.892131][ T30] audit: type=1326 audit(1763896770.952:3766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2979 comm="syz.0.777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc5a5df749 code=0x7ffc0000 [ 216.996184][ T2998] loop0: detected capacity change from 0 to 8192 [ 217.043142][ T30] audit: type=1326 audit(1763896770.952:3767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2979 comm="syz.0.777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc5a5df749 code=0x7ffc0000 [ 217.080897][ T30] audit: type=1326 audit(1763896770.952:3768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2979 comm="syz.0.777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fbc5a5df749 code=0x7ffc0000 [ 217.118201][ T2983] loop5: detected capacity change from 0 to 40427 [ 217.182107][ T2983] F2FS-fs (loop5): Mismatch start address, segment0(0) cp_blkaddr(512) [ 217.195443][ T2983] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 217.218977][ T2983] F2FS-fs (loop5): Unrecognized mount option "checkpointç<=disable" or missing value [ 217.233465][ T3004] netlink: 24 bytes leftover after parsing attributes in process `syz.3.786'. [ 217.254258][ T3004] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3004 comm=syz.3.786 [ 217.484380][ T3014] netlink: 24 bytes leftover after parsing attributes in process `syz.2.785'. [ 217.760256][ T2974] netlink: 4 bytes leftover after parsing attributes in process `syz.5.776'. [ 217.769424][ T2974] device bridge_slave_1 left promiscuous mode [ 217.780219][ T2974] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.799300][ T3021] loop1: detected capacity change from 0 to 16 [ 217.806684][ T2974] device bridge_slave_0 left promiscuous mode [ 217.816630][ T3021] erofs: (device loop1): mounted with root inode @ nid 36. [ 217.820823][ T2974] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.894104][ T3035] loop5: detected capacity change from 0 to 4096 [ 219.356366][ T3035] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 219.415427][ T3041] device bridge0 entered promiscuous mode [ 219.421862][ T3041] bridge0: port 3(vlan2) entered blocking state [ 219.428244][ T3041] bridge0: port 3(vlan2) entered disabled state [ 219.435851][ T3041] device bridge0 left promiscuous mode [ 219.556607][ T3044] netlink: 24 bytes leftover after parsing attributes in process `syz.5.796'. [ 219.923408][ T3026] loop1: detected capacity change from 0 to 40427 [ 219.932768][ T3046] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=3046 comm=syz.3.798 [ 219.945979][ T3046] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=3046 comm=syz.3.798 [ 219.968752][ T3026] F2FS-fs (loop1): Small segment_count (9 < 1 * 24) [ 219.980348][ T3048] loop0: detected capacity change from 0 to 4096 [ 219.990534][ T30] kauditd_printk_skb: 52 callbacks suppressed [ 219.990551][ T30] audit: type=1400 audit(1763896774.822:3821): avc: denied { read } for pid=3051 comm="syz.5.800" name="usbmon7" dev="devtmpfs" ino=176 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 219.994174][ T3026] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 220.022562][ T30] audit: type=1400 audit(1763896774.822:3822): avc: denied { open } for pid=3051 comm="syz.5.800" path="/dev/usbmon7" dev="devtmpfs" ino=176 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 220.052967][ T30] audit: type=1400 audit(1763896774.822:3823): avc: denied { ioctl } for pid=3051 comm="syz.5.800" path="/dev/usbmon7" dev="devtmpfs" ino=176 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 220.079321][ T3026] F2FS-fs (loop1): Found nat_bits in checkpoint [ 220.138109][ T30] audit: type=1400 audit(1763896774.922:3824): avc: denied { append } for pid=3051 comm="syz.5.800" name="001" dev="devtmpfs" ino=178 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 220.173943][ T3048] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 220.192497][ T3026] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 220.199665][ T3026] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 220.353869][ T30] audit: type=1400 audit(1763896775.182:3825): avc: denied { map } for pid=3024 comm="syz.1.792" path="/161/file2/blkio.bfq.io_merged_recursive" dev="loop1" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 220.578101][ T3075] netlink: 24 bytes leftover after parsing attributes in process `syz.0.799'. [ 221.610887][ T283] attempt to access beyond end of device [ 221.610887][ T283] loop1: rw=2049, want=45112, limit=40427 [ 221.727229][ T30] audit: type=1326 audit(1763896776.542:3826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3079 comm="syz.2.809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fecdb6b6749 code=0x7ffc0000 [ 221.752180][ T39] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 221.855341][ T30] audit: type=1326 audit(1763896776.542:3827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3079 comm="syz.2.809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fecdb6b6749 code=0x7ffc0000 [ 221.880685][ T30] audit: type=1326 audit(1763896776.542:3828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3079 comm="syz.2.809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fecdb6b6749 code=0x7ffc0000 [ 221.975810][ T30] audit: type=1326 audit(1763896776.542:3829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3079 comm="syz.2.809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fecdb6b6749 code=0x7ffc0000 [ 222.001942][ T30] audit: type=1326 audit(1763896776.552:3830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3079 comm="syz.2.809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fecdb6b6749 code=0x7ffc0000 [ 222.232890][ T39] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 222.381549][ T39] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 222.604685][ T39] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 222.617840][ T3090] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=3090 comm=syz.2.812 [ 222.650757][ T39] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.692658][ T3090] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=3090 comm=syz.2.812 [ 222.708998][ T39] usb 6-1: config 0 descriptor?? [ 223.604750][ T3098] netlink: 24 bytes leftover after parsing attributes in process `syz.3.811'. [ 223.912430][ T3105] netlink: 44 bytes leftover after parsing attributes in process `syz.2.814'. [ 223.921556][ T3105] netlink: 'syz.2.814': attribute type 6 has an invalid length. [ 223.929371][ T3105] netlink: 'syz.2.814': attribute type 5 has an invalid length. [ 223.937107][ T3105] netlink: 'syz.2.814': attribute type 4 has an invalid length. [ 224.412443][ T3113] netlink: 4 bytes leftover after parsing attributes in process `syz.5.818'. [ 224.422517][ T39] usbhid 6-1:0.0: can't add hid device: -71 [ 224.428578][ T39] usbhid: probe of 6-1:0.0 failed with error -71 [ 224.436119][ T39] usb 6-1: USB disconnect, device number 11 [ 224.867163][ T397] usb 3-1: new low-speed USB device number 17 using dummy_hcd [ 225.025049][ T3130] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=3130 comm=syz.0.823 [ 225.037996][ T3130] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=3130 comm=syz.0.823 [ 225.051125][ T39] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 225.244227][ T397] usb 3-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 225.256311][ T397] usb 3-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 225.268318][ T397] usb 3-1: config 0 interface 0 has no altsetting 0 [ 225.278128][ T397] usb 3-1: New USB device found, idVendor=05ac, idProduct=8242, bcdDevice= 0.00 [ 225.288306][ T397] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.492827][ T39] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 225.592363][ T39] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 225.602102][ T39] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 225.611428][ T39] usb 4-1: SerialNumber: syz [ 225.662450][ T3128] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 225.802150][ T411] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 225.984948][ T3115] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 226.102080][ T411] usb 6-1: Using ep0 maxpacket: 16 [ 226.147206][ T397] usb 3-1: config 0 descriptor?? [ 226.160685][ T3140] loop0: detected capacity change from 0 to 4096 [ 226.197660][ T3140] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 226.282141][ T411] usb 6-1: unable to get BOS descriptor or descriptor too short [ 226.358420][ T3144] netlink: 24 bytes leftover after parsing attributes in process `syz.0.827'. [ 226.370867][ T411] usb 6-1: config 1 has an invalid interface number: 206 but max is 0 [ 226.379203][ T411] usb 6-1: config 1 has no interface number 0 [ 226.386900][ T411] usb 6-1: config 1 interface 206 altsetting 0 has an invalid endpoint with address 0x32, skipping [ 226.466355][ T3111] UDC core: couldn't find an available UDC or it's busy: -16 [ 226.474610][ T3111] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 226.702189][ T411] usb 6-1: string descriptor 0 read error: -22 [ 226.708606][ T411] usb 6-1: New USB device found, idVendor=152d, idProduct=0310, bcdDevice=3b.0a [ 226.718084][ T411] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.723090][ T397] appleir 0003:05AC:8242.0011: item fetching failed at offset 5/7 [ 226.734425][ T397] appleir 0003:05AC:8242.0011: parse failed [ 226.740461][ T397] appleir: probe of 0003:05AC:8242.0011 failed with error -22 [ 226.935903][ T397] usb 3-1: USB disconnect, device number 17 [ 227.036928][ T411] usb 6-1: USB disconnect, device number 12 [ 227.052679][ T3147] device syzkaller0 entered promiscuous mode [ 227.482768][ T3154] device syzkaller0 entered promiscuous mode [ 227.572326][ T39] cdc_ether: probe of 4-1:1.0 failed with error -71 [ 227.582930][ T39] usb 4-1: USB disconnect, device number 14 [ 227.598880][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 227.598898][ T30] audit: type=1400 audit(1763896782.422:3860): avc: denied { shutdown } for pid=3162 comm="syz.5.834" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 227.654550][ T30] audit: type=1400 audit(1763896782.462:3861): avc: denied { connect } for pid=3162 comm="syz.5.834" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 227.738775][ T30] audit: type=1400 audit(1763896782.462:3862): avc: denied { sys_module } for pid=3162 comm="syz.5.834" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 228.323731][ T3179] loop0: detected capacity change from 0 to 4096 [ 228.370786][ T3179] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 228.509406][ T39] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 228.545411][ T3184] netlink: 24 bytes leftover after parsing attributes in process `syz.0.839'. [ 228.961506][ T3194] netlink: 8 bytes leftover after parsing attributes in process `syz.2.845'. [ 229.002182][ T39] usb 4-1: Using ep0 maxpacket: 16 [ 229.178055][ T39] usb 4-1: unable to get BOS descriptor or descriptor too short [ 229.202156][ T307] usb 6-1: new low-speed USB device number 13 using dummy_hcd [ 229.262272][ T39] usb 4-1: config 1 has an invalid interface number: 206 but max is 0 [ 229.270621][ T39] usb 4-1: config 1 has no interface number 0 [ 229.277035][ T39] usb 4-1: config 1 interface 206 altsetting 0 has an invalid endpoint with address 0x32, skipping [ 229.522108][ T400] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 229.532966][ T39] usb 4-1: string descriptor 0 read error: -22 [ 229.539615][ T39] usb 4-1: New USB device found, idVendor=152d, idProduct=0310, bcdDevice=3b.0a [ 229.550216][ T39] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.642280][ T307] usb 6-1: unable to get BOS descriptor or descriptor too short [ 229.742252][ T307] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 229.751556][ T307] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 159, changing to 4 [ 229.762084][ T400] usb 2-1: Using ep0 maxpacket: 16 [ 229.762596][ T307] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1024, setting to 0 [ 229.778494][ T307] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 32, setting to 0 [ 229.789374][ T307] usb 6-1: config 1 interface 1 has no altsetting 0 [ 229.855592][ T3208] usb 4-1: USB disconnect, device number 15 [ 229.882212][ T400] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 229.892791][ T400] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 230.062158][ T400] usb 2-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 230.081790][ T400] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.088580][ T307] usb 6-1: string descriptor 0 read error: -22 [ 230.096704][ T307] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 230.101670][ T400] usb 2-1: Product: syz [ 230.105918][ T307] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.119071][ T400] usb 2-1: Manufacturer: syz [ 230.126249][ T3215] binder: BINDER_SET_CONTEXT_MGR already set [ 230.132559][ T400] usb 2-1: SerialNumber: syz [ 230.137344][ T3215] binder: 3214:3215 ioctl 4018620d 200000004a80 returned -16 [ 230.146932][ T400] usb 2-1: config 0 descriptor?? [ 230.164915][ T307] usb 6-1: low speed audio streaming not supported [ 230.291660][ T3222] netlink: 96 bytes leftover after parsing attributes in process `syz.0.854'. [ 230.334844][ T3225] device bridge0 entered promiscuous mode [ 230.341003][ T3225] bridge0: port 3(vlan2) entered blocking state [ 230.347330][ T3225] bridge0: port 3(vlan2) entered disabled state [ 230.354761][ T3225] device bridge0 left promiscuous mode [ 230.393491][ T39] usb 6-1: USB disconnect, device number 13 [ 230.450684][ T3205] loop1: detected capacity change from 0 to 512 [ 230.489429][ T3235] loop0: detected capacity change from 0 to 4096 [ 230.503293][ T3205] EXT4-fs warning (device loop1): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 230.515443][ T3205] EXT4-fs warning (device loop1): dx_probe:881: Enable large directory feature to access it [ 230.525594][ T3205] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.850: Corrupt directory, running e2fsck is recommended [ 230.544376][ T3205] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 230.553453][ T3205] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2229: inode #15: comm syz.1.850: corrupted in-inode xattr [ 230.578082][ T3235] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 230.817746][ T3205] EXT4-fs (loop1): Remounting filesystem read-only [ 230.845438][ T3205] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.850: couldn't read orphan inode 15 (err -117) [ 230.874044][ T3205] EXT4-fs (loop1): Remounting filesystem read-only [ 230.896145][ T3205] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,noinit_itable,discard,auto_da_alloc,grpjquota=.mb_optimize_scan=0x0000000000000000,errors=remount-ro,jqfmt=vfsv1,grpid,,. Quota mode: writeback. [ 231.846356][ T39] usb 2-1: USB disconnect, device number 15 [ 232.003118][ T30] audit: type=1400 audit(1763896786.822:3863): avc: denied { mounton } for pid=3261 comm="syz.0.866" path="/177/file0" dev="tmpfs" ino=1006 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 232.164195][ T3271] loop5: detected capacity change from 0 to 512 [ 232.246722][ T3271] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 232.266418][ T3271] ext4 filesystem being mounted at /86/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 232.280829][ T3276] netlink: 24 bytes leftover after parsing attributes in process `syz.3.867'. [ 232.300439][ T3271] EXT4-fs warning (device loop5): ext4_update_dynamic_rev:1054: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 232.322181][ T3271] EXT4-fs error (device loop5): ext4_do_update_inode:5249: inode #2: comm syz.5.871: corrupted inode contents [ 232.340843][ T3271] EXT4-fs error (device loop5): ext4_dirty_inode:6085: inode #2: comm syz.5.871: mark_inode_dirty error [ 232.402500][ T3271] EXT4-fs error (device loop5): ext4_do_update_inode:5249: inode #2: comm syz.5.871: corrupted inode contents [ 232.415275][ T3271] EXT4-fs error (device loop5): __ext4_ext_dirty:183: inode #2: comm syz.5.871: mark_inode_dirty error [ 232.774110][ T30] audit: type=1400 audit(1763896787.532:3864): avc: denied { mounton } for pid=3277 comm="syz.2.873" path="/180/file0" dev="incremental-fs" ino=1001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 232.903767][ T30] audit: type=1400 audit(1763896787.542:3865): avc: denied { write } for pid=3277 comm="syz.2.873" path="/180/file0/file0" dev="incremental-fs" ino=1002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 234.079280][ T397] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 234.244393][ T3297] device bridge0 entered promiscuous mode [ 234.245035][ T3293] loop5: detected capacity change from 0 to 4096 [ 234.250971][ T3297] bridge0: port 3(vlan2) entered blocking state [ 234.264757][ T3297] bridge0: port 3(vlan2) entered disabled state [ 234.272601][ T3297] device bridge0 left promiscuous mode [ 234.275401][ T3299] syz.3.882[3299] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 234.278249][ T3299] syz.3.882[3299] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 234.300247][ T3293] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 234.352117][ T397] usb 1-1: Using ep0 maxpacket: 16 [ 234.421645][ T3302] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=3302 comm=syz.1.883 [ 234.434346][ T3302] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=3302 comm=syz.1.883 [ 234.902174][ T397] usb 1-1: unable to get BOS descriptor or descriptor too short [ 234.932083][ T686] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 234.982118][ T397] usb 1-1: config 1 has an invalid interface number: 206 but max is 0 [ 234.992099][ T397] usb 1-1: config 1 has no interface number 0 [ 234.992116][ T3308] loop1: detected capacity change from 0 to 512 [ 235.010874][ T397] usb 1-1: config 1 interface 206 altsetting 0 has an invalid endpoint with address 0x32, skipping [ 235.092214][ T3308] EXT4-fs (loop1): 1 orphan inode deleted [ 235.098386][ T3308] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,,errors=continue. Quota mode: writeback. [ 235.110116][ T3308] ext4 filesystem being mounted at /178/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 235.183097][ T397] usb 1-1: string descriptor 0 read error: -71 [ 235.192962][ T397] usb 1-1: New USB device found, idVendor=152d, idProduct=0310, bcdDevice=3b.0a [ 235.204937][ T3308] EXT4-fs (loop1): re-mounted. Opts: (null). Quota mode: writeback. [ 235.222482][ T397] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.262149][ T397] usb 1-1: can't set config #1, error -71 [ 235.305202][ T3317] netlink: 104 bytes leftover after parsing attributes in process `syz.5.885'. [ 235.317492][ T397] usb 1-1: USB disconnect, device number 14 [ 235.348387][ T686] usb 4-1: config 127 has an invalid interface number: 163 but max is 0 [ 235.357112][ T686] usb 4-1: config 127 has no interface number 0 [ 235.364045][ T686] usb 4-1: New USB device found, idVendor=0411, idProduct=0012, bcdDevice=6d.d9 [ 235.381546][ T686] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.432842][ T686] rtl8150 4-1:127.163: couldn't find required endpoints [ 235.455480][ T686] rtl8150: probe of 4-1:127.163 failed with error -5 [ 235.495353][ T3315] loop0: detected capacity change from 0 to 40427 [ 235.526836][ T3315] F2FS-fs (loop0): fault_injection options not supported [ 235.620203][ T3315] F2FS-fs (loop0): fault_type options not supported [ 235.644104][ T3315] F2FS-fs (loop0): invalid crc value [ 235.700409][ T397] usb 4-1: USB disconnect, device number 16 [ 235.709107][ T3315] F2FS-fs (loop0): Found nat_bits in checkpoint [ 235.916879][ T3315] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 236.468182][ T3331] attempt to access beyond end of device [ 236.468182][ T3331] loop0: rw=2049, want=45104, limit=40427 [ 236.494930][ T3331] incfs: Can't find or create .index dir in ./file0 [ 236.501841][ T3331] incfs: mount failed -5 [ 237.009821][ T3333] loop5: detected capacity change from 0 to 4096 [ 237.062376][ T3333] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 237.194453][ T3348] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=3348 comm=syz.2.894 [ 237.252170][ T3348] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=3348 comm=syz.2.894 [ 237.493718][ T3357] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 237.505968][ T3355] netlink: 24 bytes leftover after parsing attributes in process `syz.3.895'. [ 237.867042][ T3359] netlink: 24 bytes leftover after parsing attributes in process `syz.5.892'. [ 237.972096][ T3208] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 238.232102][ T3208] usb 1-1: Using ep0 maxpacket: 16 [ 238.262200][ T6] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 238.314510][ T3369] netlink: 'syz.3.903': attribute type 3 has an invalid length. [ 238.362194][ T3208] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 238.373023][ T3208] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 238.385342][ T3208] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 238.444937][ T3378] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=3378 comm=syz.5.906 [ 238.457782][ T30] audit: type=1326 audit(1763896793.282:3866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3379 comm="syz.3.907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ec0235749 code=0x7ffc0000 [ 238.457793][ T3378] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=3378 comm=syz.5.906 [ 238.503340][ T30] audit: type=1326 audit(1763896793.282:3867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3379 comm="syz.3.907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ec0235749 code=0x7ffc0000 [ 238.572134][ T6] usb 2-1: Using ep0 maxpacket: 16 [ 238.578324][ T30] audit: type=1326 audit(1763896793.332:3868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3379 comm="syz.3.907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6ec0235749 code=0x7ffc0000 [ 238.602394][ T30] audit: type=1326 audit(1763896793.332:3869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3379 comm="syz.3.907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ec0235749 code=0x7ffc0000 [ 238.626187][ T30] audit: type=1326 audit(1763896793.332:3870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3379 comm="syz.3.907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ec0235749 code=0x7ffc0000 [ 238.651906][ T30] audit: type=1326 audit(1763896793.362:3871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3379 comm="syz.3.907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6ec0235749 code=0x7ffc0000 [ 238.675930][ T30] audit: type=1326 audit(1763896793.362:3872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3379 comm="syz.3.907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ec0235749 code=0x7ffc0000 [ 238.682262][ T3208] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 238.709524][ T686] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 238.713131][ T30] audit: type=1326 audit(1763896793.362:3873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3379 comm="syz.3.907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ec0235749 code=0x7ffc0000 [ 238.779853][ T3386] device vlan2 entered promiscuous mode [ 238.785591][ T3386] device bridge0 entered promiscuous mode [ 238.871489][ T30] audit: type=1326 audit(1763896793.362:3874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3379 comm="syz.3.907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6ec0235749 code=0x7ffc0000 [ 238.948776][ T3384] loop5: detected capacity change from 0 to 512 [ 239.003735][ T30] audit: type=1326 audit(1763896793.362:3875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3379 comm="syz.3.907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ec0235749 code=0x7ffc0000 [ 239.071578][ T3384] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 239.080399][ T3208] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.084410][ T3384] ext4 filesystem being mounted at /94/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 239.128346][ T3384] EXT4-fs warning (device loop5): ext4_update_dynamic_rev:1054: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 239.128734][ T6] usb 2-1: unable to get BOS descriptor or descriptor too short [ 239.143242][ T3384] EXT4-fs error (device loop5): ext4_do_update_inode:5249: inode #2: comm syz.5.909: corrupted inode contents [ 239.150966][ T3208] usb 1-1: Product: syz [ 239.163319][ T3384] EXT4-fs error (device loop5): ext4_dirty_inode:6085: inode #2: comm syz.5.909: mark_inode_dirty error [ 239.166953][ T3208] usb 1-1: Manufacturer: syz [ 239.178580][ T3384] EXT4-fs error (device loop5): ext4_do_update_inode:5249: inode #2: comm syz.5.909: corrupted inode contents [ 239.182927][ T3208] usb 1-1: SerialNumber: syz [ 239.194939][ T3384] EXT4-fs error (device loop5): __ext4_ext_dirty:183: inode #2: comm syz.5.909: mark_inode_dirty error [ 239.272158][ T6] usb 2-1: config 1 has an invalid interface number: 206 but max is 0 [ 239.280503][ T6] usb 2-1: config 1 has no interface number 0 [ 239.286701][ T6] usb 2-1: config 1 interface 206 altsetting 0 has an invalid endpoint with address 0x32, skipping [ 239.397450][ T3393] bridge0: port 3(vlan3) entered blocking state [ 239.404015][ T3393] bridge0: port 3(vlan3) entered disabled state [ 239.450085][ T3351] loop0: detected capacity change from 0 to 512 [ 239.494065][ T3351] EXT4-fs (loop0): too many log groups per flexible block group [ 239.502161][ T686] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 239.512249][ T3351] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 239.514743][ T686] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 239.520322][ T3351] EXT4-fs (loop0): mount failed [ 239.534772][ T686] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 239.544376][ T686] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.559938][ T686] usb 3-1: config 0 descriptor?? [ 239.565498][ T6] usb 2-1: string descriptor 0 read error: -22 [ 239.573350][ T6] usb 2-1: New USB device found, idVendor=152d, idProduct=0310, bcdDevice=3b.0a [ 239.582677][ T6] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.703872][ T3399] netlink: 24 bytes leftover after parsing attributes in process `syz.3.912'. [ 239.833428][ T3208] usb-storage 1-1:1.2: USB Mass Storage device detected [ 239.929105][ T411] usb 2-1: USB disconnect, device number 16 [ 239.955413][ T3208] usb 1-1: USB disconnect, device number 15 [ 240.241556][ T3404] loop0: detected capacity change from 0 to 4096 [ 240.292149][ T686] usbhid 3-1:0.0: can't add hid device: -71 [ 240.298335][ T686] usbhid: probe of 3-1:0.0 failed with error -71 [ 240.327611][ T3404] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 240.334512][ T686] usb 3-1: USB disconnect, device number 18 [ 240.569447][ T3412] netlink: 24 bytes leftover after parsing attributes in process `syz.0.913'. [ 241.152984][ T3413] netlink: 24 bytes leftover after parsing attributes in process `syz.3.914'. [ 241.231782][ T3418] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=3418 comm=syz.1.918 [ 241.244338][ T3418] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=3418 comm=syz.1.918 [ 242.637369][ T3435] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=52512 sclass=netlink_route_socket pid=3435 comm=syz.0.922 [ 243.143932][ T3447] loop0: detected capacity change from 0 to 4096 [ 243.182114][ T3208] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 243.222980][ T3447] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 243.239852][ T3452] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=3452 comm=syz.3.929 [ 243.272378][ T3452] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=3452 comm=syz.3.929 [ 243.347706][ T3454] loop1: detected capacity change from 0 to 1024 [ 243.464173][ T3459] netlink: 24 bytes leftover after parsing attributes in process `syz.0.928'. [ 243.483686][ T3455] netlink: 24 bytes leftover after parsing attributes in process `syz.2.924'. [ 243.535620][ T3454] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 243.659739][ T3454] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,lazytime,mblk_io_submit,noblock_validity,,errors=continue. Quota mode: writeback. [ 243.782205][ T3208] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 243.793342][ T3208] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 243.803444][ T3208] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 243.812646][ T3208] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.821373][ T3208] usb 6-1: config 0 descriptor?? [ 243.996775][ T3471] device bridge0 entered promiscuous mode [ 244.003243][ T3471] bridge0: port 3(vlan2) entered blocking state [ 244.009836][ T3471] bridge0: port 3(vlan2) entered disabled state [ 244.019502][ T3471] device bridge0 left promiscuous mode [ 244.322584][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 244.322600][ T30] audit: type=1400 audit(1763896799.142:3907): avc: denied { unlink } for pid=283 comm="syz-executor" name="file0" dev="loop1" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 244.355363][ T30] audit: type=1400 audit(1763896799.152:3908): avc: denied { unlink } for pid=283 comm="syz-executor" name="file1" dev="loop1" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 244.378278][ T30] audit: type=1400 audit(1763896799.182:3909): avc: denied { rmdir } for pid=283 comm="syz-executor" name="work" dev="loop1" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 244.466117][ T3483] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 244.493350][ T30] audit: type=1107 audit(1763896799.322:3910): pid=3484 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 244.513315][ T3208] cp2112 0003:10C4:EA90.0012: item fetching failed at offset 0/7 [ 244.526385][ T3208] cp2112 0003:10C4:EA90.0012: parse failed [ 244.532526][ T3208] cp2112: probe of 0003:10C4:EA90.0012 failed with error -22 [ 244.558302][ T3489] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=3489 comm=syz.3.941 [ 244.570757][ T3489] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=3489 comm=syz.3.941 [ 244.597235][ T30] audit: type=1400 audit(1763896799.422:3911): avc: denied { setattr } for pid=3490 comm="syz.3.942" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 244.797072][ T3208] usb 6-1: USB disconnect, device number 14 [ 244.823586][ T400] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 244.918017][ T3504] bridge0: port 3(vlan3) entered blocking state [ 244.924617][ T3504] bridge0: port 3(vlan3) entered disabled state [ 245.015816][ T3505] netlink: 24 bytes leftover after parsing attributes in process `syz.2.945'. [ 245.212254][ T400] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 245.213118][ T30] audit: type=1400 audit(1763896800.042:3912): avc: denied { mount } for pid=3506 comm="syz.3.949" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 245.224522][ T400] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 245.255930][ T400] usb 2-1: New USB device found, idVendor=05ac, idProduct=022b, bcdDevice= 0.00 [ 245.265534][ T400] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.293898][ T3509] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 245.311301][ T400] usb 2-1: config 0 descriptor?? [ 245.323163][ T3511] tipc: Enabling of bearer rejected, failed to enable media [ 245.342870][ T3511] 9pnet: Insufficient options for proto=fd [ 245.401884][ T3517] ip6tnl0: Caught tx_queue_len zero misconfig [ 245.417519][ T3520] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=3520 comm=syz.5.952 [ 245.430745][ T3520] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=3520 comm=syz.5.952 [ 245.487028][ T30] audit: type=1326 audit(1763896800.312:3913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3525 comm="syz.5.957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a0e0c1749 code=0x7ffc0000 [ 245.521442][ T30] audit: type=1326 audit(1763896800.342:3914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3525 comm="syz.5.957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a0e0c1749 code=0x7ffc0000 [ 245.551646][ T3532] xt_hashlimit: size too large, truncated to 1048576 [ 245.610528][ T3535] loop5: detected capacity change from 0 to 256 [ 245.776256][ T400] apple 0003:05AC:022B.0013: unknown main item tag 0x7 [ 245.832669][ T400] apple 0003:05AC:022B.0013: hidraw0: USB HID v0.00 Device [HID 05ac:022b] on usb-dummy_hcd.1-1/input0 [ 245.907769][ T30] audit: type=1400 audit(1763896800.732:3915): avc: denied { bind } for pid=3529 comm="syz.3.959" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 246.042575][ T6] usb 2-1: USB disconnect, device number 17 [ 246.056239][ T30] audit: type=1400 audit(1763896800.752:3916): avc: denied { connect } for pid=3529 comm="syz.3.959" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 246.078181][ T3551] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=3551 comm=syz.0.966 [ 246.112091][ T400] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 246.201587][ T3560] xt_hashlimit: size too large, truncated to 1048576 [ 246.252832][ T3562] FAULT_INJECTION: forcing a failure. [ 246.252832][ T3562] name failslab, interval 1, probability 0, space 0, times 0 [ 246.272141][ T3562] CPU: 0 PID: 3562 Comm: syz.3.970 Tainted: G W syzkaller #0 [ 246.280875][ T3562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 246.291042][ T3562] Call Trace: [ 246.294417][ T3562] [ 246.297357][ T3562] __dump_stack+0x21/0x30 [ 246.301715][ T3562] dump_stack_lvl+0xee/0x150 [ 246.306312][ T3562] ? show_regs_print_info+0x20/0x20 [ 246.311514][ T3562] dump_stack+0x15/0x20 [ 246.315689][ T3562] should_fail+0x3c1/0x510 [ 246.320125][ T3562] ? __ip6_append_data+0x25f6/0x37e0 [ 246.325419][ T3562] __should_failslab+0xa4/0xe0 [ 246.330296][ T3562] should_failslab+0x9/0x20 [ 246.334813][ T3562] slab_pre_alloc_hook+0x3b/0xe0 [ 246.339760][ T3562] ? __ip6_append_data+0x25f6/0x37e0 [ 246.345067][ T3562] ? __ip6_append_data+0x25f6/0x37e0 [ 246.350352][ T3562] __kmalloc_track_caller+0x6c/0x2c0 [ 246.355817][ T3562] ? __ip6_append_data+0x25f6/0x37e0 [ 246.361190][ T3562] ? __ip6_append_data+0x25f6/0x37e0 [ 246.366926][ T3562] __alloc_skb+0x21a/0x740 [ 246.371463][ T3562] __ip6_append_data+0x25f6/0x37e0 [ 246.376579][ T3562] ? __local_bh_enable_ip+0x58/0x80 [ 246.381782][ T3562] ? __kasan_check_write+0x14/0x20 [ 246.386913][ T3562] ? _raw_spin_lock_bh+0x8e/0xe0 [ 246.391850][ T3562] ? ip6_setup_cork+0x1290/0x1290 [ 246.396872][ T3562] ? __kasan_check_read+0x11/0x20 [ 246.401896][ T3562] ? ip6_setup_cork+0xd10/0x1290 [ 246.406841][ T3562] ip6_append_data+0x1d0/0x330 [ 246.411605][ T3562] ? rawv6_send_hdrinc+0x1070/0x1070 [ 246.416888][ T3562] ? rawv6_send_hdrinc+0x1070/0x1070 [ 246.422178][ T3562] rawv6_sendmsg+0x11d6/0x16d0 [ 246.427011][ T3562] ? avc_has_perm+0x158/0x240 [ 246.431693][ T3562] ? compat_rawv6_ioctl+0x10/0x10 [ 246.436717][ T3562] ? unwind_get_return_address+0x4d/0x90 [ 246.442353][ T3562] ? stack_trace_save+0x98/0xe0 [ 246.447394][ T3562] ? inet_send_prepare+0x60/0x4c0 [ 246.452419][ T3562] inet_sendmsg+0xa5/0xc0 [ 246.456766][ T3562] ? inet_send_prepare+0x4c0/0x4c0 [ 246.461877][ T3562] ____sys_sendmsg+0x5a2/0x8c0 [ 246.466649][ T3562] ? __sys_sendmsg_sock+0x40/0x40 [ 246.471674][ T3562] ? import_iovec+0x7c/0xb0 [ 246.476181][ T3562] ___sys_sendmsg+0x1f0/0x260 [ 246.481127][ T3562] ? __sys_sendmsg+0x250/0x250 [ 246.485896][ T3562] ? __fdget+0x1a1/0x230 [ 246.490145][ T3562] __x64_sys_sendmsg+0x1e2/0x2a0 [ 246.495169][ T3562] ? ___sys_sendmsg+0x260/0x260 [ 246.500021][ T3562] ? ksys_write+0x1eb/0x240 [ 246.504522][ T3562] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 246.510588][ T3562] x64_sys_call+0x4b/0x9a0 [ 246.515002][ T3562] do_syscall_64+0x4c/0xa0 [ 246.519419][ T3562] ? clear_bhb_loop+0x50/0xa0 [ 246.524092][ T3562] ? clear_bhb_loop+0x50/0xa0 [ 246.528772][ T3562] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 246.534665][ T3562] RIP: 0033:0x7f6ec0235749 [ 246.539076][ T3562] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 246.558853][ T3562] RSP: 002b:00007f6ebec7c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 246.567270][ T3562] RAX: ffffffffffffffda RBX: 00007f6ec048c090 RCX: 00007f6ec0235749 [ 246.575243][ T3562] RDX: 0000000000044004 RSI: 00002000000000c0 RDI: 0000000000000004 [ 246.583211][ T3562] RBP: 00007f6ebec7c090 R08: 0000000000000000 R09: 0000000000000000 [ 246.591257][ T3562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 246.599225][ T3562] R13: 00007f6ec048c128 R14: 00007f6ec048c090 R15: 00007ffd56d1be98 [ 246.607393][ T3562] [ 246.679674][ T3570] loop0: detected capacity change from 0 to 512 [ 246.691239][ T3558] loop5: detected capacity change from 0 to 256 [ 246.708696][ T3570] ================================================================== [ 246.716811][ T3570] BUG: KASAN: use-after-free in __ext4_iget+0x2b8/0x3e40 [ 246.723871][ T3570] Read of size 8 at addr ffff88812b9c7228 by task syz.0.972/3570 [ 246.731612][ T3570] [ 246.733964][ T3570] CPU: 1 PID: 3570 Comm: syz.0.972 Tainted: G W syzkaller #0 [ 246.742657][ T3570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 246.752821][ T3570] Call Trace: [ 246.756116][ T3570] [ 246.759071][ T3570] __dump_stack+0x21/0x30 [ 246.763435][ T3570] dump_stack_lvl+0xee/0x150 [ 246.768064][ T3570] ? show_regs_print_info+0x20/0x20 [ 246.773286][ T3570] ? load_image+0x3a0/0x3a0 [ 246.777809][ T3570] ? _raw_spin_lock+0x8e/0xe0 [ 246.782508][ T3570] print_address_description+0x7f/0x2c0 [ 246.788198][ T3570] ? __ext4_iget+0x2b8/0x3e40 [ 246.792993][ T3570] kasan_report+0xf1/0x140 [ 246.797414][ T3570] ? __ext4_iget+0x2b8/0x3e40 [ 246.802101][ T3570] __asan_report_load8_noabort+0x14/0x20 [ 246.807742][ T3570] __ext4_iget+0x2b8/0x3e40 [ 246.812251][ T3570] ? ext4_init_orphan_info+0x155/0xfa0 [ 246.817717][ T3570] ? _raw_write_lock+0x8e/0xe0 [ 246.822527][ T3570] ? __proc_create+0x564/0x8d0 [ 246.827294][ T3570] ? __kasan_check_write+0x14/0x20 [ 246.832410][ T3570] ? ext4_get_projid+0x140/0x140 [ 246.837351][ T3570] ? _raw_write_unlock+0x2b/0x60 [ 246.842303][ T3570] ? ext4_orphan_file_block_trigger+0x400/0x400 [ 246.848558][ T3570] ext4_enable_quotas+0x33b/0x6d0 [ 246.853690][ T3570] ext4_fill_super+0x87c3/0x9090 [ 246.858633][ T3570] ? ext4_mount+0x40/0x40 [ 246.862962][ T3570] ? set_blocksize+0x1fc/0x380 [ 246.867726][ T3570] ? sb_set_blocksize+0xaa/0xf0 [ 246.872582][ T3570] ? ext4_mount+0x40/0x40 [ 246.876918][ T3570] mount_bdev+0x2ae/0x3e0 [ 246.881249][ T3570] ? ext4_mount+0x40/0x40 [ 246.885576][ T3570] ext4_mount+0x34/0x40 [ 246.889730][ T3570] legacy_get_tree+0xed/0x190 [ 246.894407][ T3570] ? ext4_errno_to_code+0x160/0x160 [ 246.899616][ T3570] vfs_get_tree+0x89/0x260 [ 246.904121][ T3570] do_new_mount+0x25a/0xa20 [ 246.908636][ T3570] path_mount+0x675/0x1020 [ 246.913231][ T3570] ? user_path_at_empty+0x161/0x1c0 [ 246.918430][ T3570] __se_sys_mount+0x318/0x380 [ 246.923107][ T3570] ? __x64_sys_mount+0xd0/0xd0 [ 246.927975][ T3570] __x64_sys_mount+0xbf/0xd0 [ 246.932562][ T3570] x64_sys_call+0x6bf/0x9a0 [ 246.937237][ T3570] do_syscall_64+0x4c/0xa0 [ 246.941664][ T3570] ? clear_bhb_loop+0x50/0xa0 [ 246.946425][ T3570] ? clear_bhb_loop+0x50/0xa0 [ 246.951099][ T3570] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 246.957085][ T3570] RIP: 0033:0x7fbc5a5e0eea [ 246.961499][ T3570] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 246.981288][ T3570] RSP: 002b:00007fbc59046e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 246.989708][ T3570] RAX: ffffffffffffffda RBX: 00007fbc59046ef0 RCX: 00007fbc5a5e0eea [ 246.997682][ T3570] RDX: 0000200000000080 RSI: 00002000000002c0 RDI: 00007fbc59046eb0 [ 247.005738][ T3570] RBP: 0000200000000080 R08: 00007fbc59046ef0 R09: 0000000002008042 [ 247.013884][ T3570] R10: 0000000002008042 R11: 0000000000000246 R12: 00002000000002c0 [ 247.022462][ T3570] R13: 00007fbc59046eb0 R14: 0000000000000571 R15: 00002000000000c0 [ 247.030525][ T3570] [ 247.033540][ T3570] [ 247.035859][ T3570] Allocated by task 1001: [ 247.040188][ T3570] __kasan_slab_alloc+0xbd/0xf0 [ 247.045053][ T3570] slab_post_alloc_hook+0x4f/0x2b0 [ 247.050201][ T3570] kmem_cache_alloc+0xf7/0x260 [ 247.054972][ T3570] f2fs_alloc_inode+0x26/0x330 [ 247.059736][ T3570] iget_locked+0x16c/0x7e0 [ 247.064260][ T3570] f2fs_iget+0x55/0x5230 [ 247.068504][ T3570] f2fs_fill_super+0x3a20/0x6d10 [ 247.073435][ T3570] mount_bdev+0x2ae/0x3e0 [ 247.077896][ T3570] f2fs_mount+0x34/0x40 [ 247.082046][ T3570] legacy_get_tree+0xed/0x190 [ 247.086720][ T3570] vfs_get_tree+0x89/0x260 [ 247.091133][ T3570] do_new_mount+0x25a/0xa20 [ 247.095640][ T3570] path_mount+0x675/0x1020 [ 247.100063][ T3570] __se_sys_mount+0x318/0x380 [ 247.104828][ T3570] __x64_sys_mount+0xbf/0xd0 [ 247.109511][ T3570] x64_sys_call+0x6bf/0x9a0 [ 247.114028][ T3570] do_syscall_64+0x4c/0xa0 [ 247.118530][ T3570] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 247.124422][ T3570] [ 247.126741][ T3570] Last potentially related work creation: [ 247.132534][ T3570] kasan_save_stack+0x3a/0x60 [ 247.137215][ T3570] __kasan_record_aux_stack+0xd2/0x100 [ 247.142696][ T3570] kasan_record_aux_stack_noalloc+0xb/0x10 [ 247.148592][ T3570] call_rcu+0x105/0xfe0 [ 247.152742][ T3570] evict+0x7da/0x870 [ 247.156633][ T3570] iput+0x635/0x7c0 [ 247.160438][ T3570] f2fs_put_super+0x684/0xc00 [ 247.165110][ T3570] generic_shutdown_super+0x151/0x330 [ 247.170569][ T3570] kill_block_super+0x7f/0xf0 [ 247.175240][ T3570] kill_f2fs_super+0x2e7/0x390 [ 247.180028][ T3570] deactivate_locked_super+0xa0/0x100 [ 247.185398][ T3570] deactivate_super+0xaf/0xe0 [ 247.190067][ T3570] cleanup_mnt+0x446/0x500 [ 247.194590][ T3570] __cleanup_mnt+0x19/0x20 [ 247.199026][ T3570] task_work_run+0x127/0x190 [ 247.203615][ T3570] exit_to_user_mode_loop+0xd0/0xe0 [ 247.208900][ T3570] exit_to_user_mode_prepare+0x87/0xd0 [ 247.214539][ T3570] syscall_exit_to_user_mode+0x1a/0x30 [ 247.219994][ T3570] do_syscall_64+0x58/0xa0 [ 247.224405][ T3570] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 247.230394][ T3570] [ 247.232728][ T3570] The buggy address belongs to the object at ffff88812b9c6d20 [ 247.232728][ T3570] which belongs to the cache f2fs_inode_cache of size 1424 [ 247.247396][ T3570] The buggy address is located 1288 bytes inside of [ 247.247396][ T3570] 1424-byte region [ffff88812b9c6d20, ffff88812b9c72b0) [ 247.261008][ T3570] The buggy address belongs to the page: [ 247.266632][ T3570] page:ffffea0004ae7000 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88812b9c2a70 pfn:0x12b9c0 [ 247.278258][ T3570] head:ffffea0004ae7000 order:3 compound_mapcount:0 compound_pincount:0 [ 247.286663][ T3570] flags: 0x4000000000010200(slab|head|zone=1) [ 247.292737][ T3570] raw: 4000000000010200 0000000000000000 dead000000000122 ffff8881081f4300 [ 247.301316][ T3570] raw: ffff88812b9c2a70 000000008015000e 00000001ffffffff 0000000000000000 [ 247.309886][ T3570] page dumped because: kasan: bad access detected [ 247.316287][ T3570] page_owner tracks the page as allocated [ 247.321994][ T3570] page last allocated via order 3, migratetype Reclaimable, gfp_mask 0x1d2050(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL|__GFP_RECLAIMABLE), pid 702, ts 60385447862, free_ts 43962252882 [ 247.343358][ T3570] post_alloc_hook+0x192/0x1b0 [ 247.348213][ T3570] prep_new_page+0x1c/0x110 [ 247.352718][ T3570] get_page_from_freelist+0x2cc5/0x2d50 [ 247.358280][ T3570] __alloc_pages+0x18f/0x440 [ 247.362888][ T3570] new_slab+0xa1/0x4d0 [ 247.366975][ T3570] ___slab_alloc+0x381/0x810 [ 247.371661][ T3570] __slab_alloc+0x49/0x90 [ 247.375990][ T3570] kmem_cache_alloc+0x138/0x260 [ 247.380856][ T3570] f2fs_alloc_inode+0x26/0x330 [ 247.385617][ T3570] iget_locked+0x16c/0x7e0 [ 247.390035][ T3570] f2fs_iget+0x55/0x5230 [ 247.394275][ T3570] f2fs_fill_super+0x45c7/0x6d10 [ 247.399209][ T3570] mount_bdev+0x2ae/0x3e0 [ 247.403648][ T3570] f2fs_mount+0x34/0x40 [ 247.407811][ T3570] legacy_get_tree+0xed/0x190 [ 247.412483][ T3570] vfs_get_tree+0x89/0x260 [ 247.416893][ T3570] page last free stack trace: [ 247.421559][ T3570] __free_pages_ok+0x91a/0x9e0 [ 247.426321][ T3570] __free_pages+0xf6/0x100 [ 247.430732][ T3570] free_nonslab_page+0x86/0xc0 [ 247.435582][ T3570] kfree+0x19a/0x270 [ 247.439473][ T3570] htab_elem_free_rcu+0xf0/0x1b0 [ 247.444406][ T3570] rcu_do_batch+0x51d/0xba0 [ 247.449339][ T3570] rcu_core+0x5e4/0xf80 [ 247.453491][ T3570] rcu_core_si+0x9/0x10 [ 247.457640][ T3570] handle_softirqs+0x250/0x560 [ 247.462403][ T3570] __irq_exit_rcu+0x52/0xf0 [ 247.466904][ T3570] irq_exit_rcu+0x9/0x10 [ 247.471148][ T3570] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 247.476867][ T3570] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 247.482848][ T3570] [ 247.485169][ T3570] Memory state around the buggy address: [ 247.490876][ T3570] ffff88812b9c7100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 247.498933][ T3570] ffff88812b9c7180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 247.507075][ T3570] >ffff88812b9c7200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 247.515127][ T3570] ^ [ 247.520595][ T3570] ffff88812b9c7280: fb fb fb fb fb fb fc fc fc fc fc fc fc fc fc fc [ 247.528655][ T3570] ffff88812b9c7300: fc fc fc fc fc fc 00 00 00 00 00 00 00 00 00 00 [ 247.536706][ T3570] ================================================================== [ 247.544846][ T3570] Disabling lock debugging due to kernel taint [ 247.551416][ T3570] EXT4-fs warning (device loop0): ext4_enable_quotas:6452: Failed to enable quota tracking (type=0, err=-13, ino=3). Please run e2fsck to fix. [ 247.572430][ T3570] EXT4-fs (loop0): mount failed [ 247.585649][ T3558] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 247.596734][ T3558] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 247.607045][ T3558] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 247.662173][ T400] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 247.674030][ T400] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 247.684594][ T400] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 247.693792][ T400] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.705357][ T400] usb 3-1: config 0 descriptor?? [ 248.172907][ T400] cp2112 0003:10C4:EA90.0014: item fetching failed at offset 0/7 [ 248.180960][ T400] cp2112 0003:10C4:EA90.0014: parse failed [ 248.186866][ T400] cp2112: probe of 0003:10C4:EA90.0014 failed with error -22 [ 248.376770][ T400] usb 3-1: USB disconnect, device number 19