last executing test programs: 2m7.76164585s ago: executing program 1 (id=1105): syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', 0x2008408, &(0x7f0000000000)=ANY=[@ANYRES32=0x0], 0x41, 0x24c, &(0x7f00000007c0)="$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") syz_open_procfs(0x0, &(0x7f0000000300)='net/ip6_flowlabel\x00') syz_clone(0x1081000, &(0x7f0000001f80)="d857dc52c560b797e41e040d8178c9ec86b72cb4313bd785fa7111d399de5725a7499ad7794c3dccd1faff4e68e56410714993feef849aee08e6585d2eaff55fe9782f0fc74ff5e95a3c63967348ad8488fd360ff613f0b8d19550d0a8d93ae4000676f1d9a391c5b9119093a63b817373aba5f00dd19311a5886c1af09f244ead5218ba166d68784333bf8d1a08903586907b9ef03f086a6024ada299dfd81a26bd9be5e14552a8d4904b2e6f43cb32aa17171effff1849907751e0165ec8d23664061a65144845e48cc6140fdf749f6769d3217b38492c1b0f0bf9f8b42729c3ae452e8cac0b02674c966f3810029709727d996859832c491f3da06b4c9997fa1e7ece1915be718108038299fb00f0ee61508bbb646d302db23fd75f279b561d36be0b54cceba4a96ba443e638eb2c501a57a486d568e2818bf93d530ac1c9151b707fe18ae9a2668f53c61289b9a3924bd07d4195bbc08233b3132ec448299100922155dc09cc8ac5ef23c31e0b72fee299c6a6ddafc779bec9f0979ad1972c3eb766b301f744ca323e5aab3fe2966101e38bea49c2cfc3435b768ed9689e392687932d7bdcd183b2133305661dd945055f1ff337d9724bdee78151bf51f56bc28802e071355ae27322614a67184b20967a61b5c7f635067964bea4571427b9b410fc57c772b72b088bf240efdc1b23478f9c986377e39333c938ac867938d2d90d0ce97bc8e260518165f15b3bc00760d29f20a6c41147d346b7c57349bd7c370586927a7f21a6ea861ee8cf0dcb33625a8bfe64fedfdf93f76e6013f53bbc9dd5bf7487a574130e6f77c144f04a64762e452eeabff7428f8450171d8192fa6e9e95ddf92c9fde8741348bf7b1cfe0beb5c35d2d61043e9c9989021a44b2bb99ba1212e3a980c1790c32d6fbab42e1bf3da6eb4ef0ff2b228f6c09a19fcc0e9111aadadf321c0b26d9cebe3b5ef09b70357ea71d33ae66d483bb0c3f4b1ddfbbf738c385fd9284db718ebdd232c4a010b396d37382dbe24f8d13016fb5c69d385090ce1d403969c6067fc6348d9ab73452003c5f31d3dbd8ab24d2190902d8bf2d70e2eb0b4b74de62397c77b92350e9f70c0b01c5585ab23297c4b92e72250e7b38b469eca99d0de755973912b1264f5981bfdca69b31b2e47ed30ff9d07a7991e6370967652c76022f7e62abfead39373e18f7b3ef9351afdac45adceb68e245485bec5b41ff45111e4c170d6ff34bf959fa4b2959511e5fa15b274dce069fc90a9049d10b6fe2e080c1ed4795cd133e40e77bc62b0cbbb6603d97c5c05e523f1e31d5f0568f7ee9a1f5c3453118de0e533f95a0b550bf3a07930765eff12d918b5ab1eabe7356f846d917b1490078829d15724c76514dcc09288f6a5f0358776698cab74d0d21a93952e40517c880c43bd991ed037cc43c95582ed2c6c03fc8807b1831b586ee0bb08beff24e0837de20a8bb5d56295b60b3f9cd6d24e6d8ecd77e415ca7cb7d147cfedd044e089f703000aa9ff22302cc8badab61cb65364cb0483293d2a4bca5256eb02a1c1809152a4aafedfa98f5afafb5f79b7dd7ba4521bae0da144114b6a036ff1be34c3b8265ee20fea21445fdd69196d48aa7f9d18cd37a6cd044d83d477069f28131612ac86f8e28b19e67514093b6280333a2d2b2c78df0d9397b3278a42de229378c976e09f0cc33e513ce00bf7755409fb674ec4c6c347f3c92f4c5fe44d746ada6f1efb8bcb5285a0ddffa611eca6de3ba8b9481bff20ef05e7fa304d3d14c1f40fe63b488cae2709d8db2dbf1b014a8d92b9e1a0caef92a5593fad0b61f6e37f6be709eaec6978909a918f0d60cd20aff6fa1a5a64ee1329bea1e862c910e35996fbf4a011c3ff6589015ebb3a3a287592f3e4e40e408b82a8192c03b4518ffb83788107a066fab4fe1773e78b202dc457af71655fa61d9fa2f2b276e1beb67cfc751227f3835c773ac7b59657140f2c77336cedac99cb0fc9b9410a347fbd9007b91697a159d832856105669396cfac34861d1d6f45427a096cfa33fb5d63d6ae1ebaa7b7d832be856f6d280194a0b7cd5f35b6432cb78f7321b18cde6498b990f6e3776c6869d9b334fed4c13dde577b182388ac7250b3b8da0e7a8b3988121fa731047eaffc9a6bebd3aca942f9e5e5f2f38a5df5960593e83762023c8f3b72c6b34bbc1ffb8645d260236a6109cc8811921886c3aee82508330a2200d4b8c9d8513f11da02fffa412adf18b9566ad00088a024e2a60a092e3f9f1ca6c234c9408d03c4461cdf5bfd9c193010658c739b2a1412f8c5db6006c6630c7bb39ba6522b373ac24bd3aae29f8949301c453a645937e2604b2dbefab585eb47adf62f773e16dcdec9e7d88493f716ead3226b1c3c3fd4cba5a284dc5c18086527610ee9210bfd18c4ad6504cc73ebc8d90838b9bcc848fbe98e2898df6ed6465858ee1c3135907471175cec3b1ed578e425d26e3e8a4470a5edae2a4b9dfcd453e0f3f2010613b668c5c7b215610ace63b54d3c2000021247afc1e63eb1cf3cbbc36cd682005d8c56d2f5afefacb61c37e67a379d7693afe91ac2a5b6ad97c53b78eb83ad5d7b1c747cd7cb1a2fb0f04c7d6211e4406ff0dfeafa2a9e57f3daad56410b49054e5bec7ed536ed5aa0573464eebaf157f356fb760ef908fe00238fd1637d76168d9b99607cff0437303d2bba95b0bc80255dfc0a75834558aa2c99a3312f146afbe1d5d43f0db5efc003cd30ea146b4c67686161f0f4884858a6e6669aec23dc96cf70a3b9f8b3e74826297f00804e80b21ab877a0177bbe229245c57d5ae1a04ba5731455de2f2682e562cf9c4b09edcf6b843ad0adf67f9e8308fbdee8f5efe42ca32b5eb390df34cc808877111f705b66306232c1f600be6e9511c3f7e3d7d844c0dd1f3f1e30467fe47912928cd53d051bc9f4b73cbe115ec5c8ed5dbf09df0d89ac5fc17a87db761ca6810f0c49dfcbd02d56e645a55939125c24931662e05c9b3bd6cdd7379aedc093594495a6fad46180670c98ef872f82a73ba1f6ad67eeed41486f2c635f19e017e2f5960cda2c73be78bff9264804e5e582e6ffde6a284df65ba0526e01f08769a3b9cf394d91ebeef26eacc2968248868177182f827437bd6f8d0db868ce3369f1b50046d56caae0aa805bc052fbc1dfd12bb789530dfe535a3fa0b4fe4ee77029d682d41096d3221f0b541a6e20db9246da61e6cc99435ccf64951d6a61a564081b28dabb89cf37f7bacb99445c2d8f71982d0c891013a566ff35e1d98776dddb70b02cd3b1d2f965ee9df4869ed8c29553c82d59be2c68a63fc60226f584a8372be8037a74eb27d69b5f776c2f67109882152000389197ef6c574073ccee5f9854a32875280c5d22057fa66446b12d69eb54e33341b7573046a95f0bbf15fceec9188a4d4109afe70f1cb4289a92cbab805301295ea95b8992dfaa268482580777376fcf3a034810e9f84648bf56d874fccf1d853a10b115dfb94d29dae7373172cf1b768dfa36b6688b1ddbf89f96d777cb8dd27edd27efaec79bfd7eb657909dbbdce74f0873d6af884ad187f228af3e317eb5e66b023fc4fb242e3b61c5a6a216c94f3e0b445147acfdb440d840503bf7bf9a3c3d8920bb9203cf7ddb2e0fc018ef273197b3cce2bd68841f5cf428cd110bd246d628c7851520d9f96e651daf419788edf8fd06acaf54953fe153813d1bcc202da049db677a9433ecb7de21a7f2608640aac469e56d15bf08eea2577c2c8b6d46052b8c3045b62658cfc3cff6c091f84f1bac0e6cf4baadc188035aadc2f797c6fd69716186f82a454113daa7da32dcf97bf041cf3838e338d0b6fb2dda17bc6a75ea05f82193340942a02d0aa3b9f1e6ba77cdaecf307cac8212d9281036fa53cf42a5d2dbea37cc10729c7d84a5ba562d45d7e8d50f90e364394e806c160535456414390d9a3b68f1a5e27e778f10a1d55d70dc9791b666b1e34cced1a94d76eb6ac16f0005bbe7aac9f55072dd2c452cd8098c7be50f814dac59c7596bed1584e1f36d97aba76b9f76caab913192a578e5242baf8341b58ba54f7f861e30dc4ab851abba19c64a93f97eaa07c755ef5597f4a700cee0617c39664eb48b7099e611b39fc746ad25e6ca2307a9003d303f6b0a2a24cc54ff2b552798141a4014b7b1ebd46f2bb02269bf2f42a13d7c72fec404d0d8f3279155e9a5efc7ea7b6e916b6c991fac05c198790b9e464f4fc8b797ef75ae95e9e536bc8b71edd70ba94deace670dcaff82a960ebf1b26d880403a641c296f474ca97bc02ef8eadf453b1a6d8a7930b84234b7ba075e02b40187d664e1c7f464992416692a18c0cb92152eb3d2a29b16c9dade3661bda482737bda1d35c8cec0e4b8e8241c0ee554bf96d0c86d1287963b5e8ee3a15a440baf5996b918ba8792399843eb4fc1a5727fdb7a8ba2f4fcdbeb37b22575638c54c3c109bf00ea96e6a9e8af4357669a2038378865396aac04cbb9f8bf98f2ddbcd185da2f470f84b55fa1a0f8734137b571368f6f02f4afec5b3643904693facf83901ce6e9b39045b9185faec4b1ed16b2cccda2b8f651cefef6f7781a8405e2b2622fb40d9aeceb4e473eff53819b39554e443c8253bc4eea9b906a35c03d61617555c57c321bb9c7786041eaef94a34756d8507d8cac139b5ee6263ed225ba77053f37610d0763464da36998a9dac85c5f2835e7fafb35f9c326e71466b8de373a91099fc6a966deeb0771b7642d4abe67a6374af36b4a81ece1b0fc66698ab694f34e55bd0b96cd7ff277e962ba975f059ad949f25e3e2253f66bd2c7b3af8fd5b288551b0f62460a6c7f1290f864c27a6e20af014555605688054a84385e7206b8202cf8bba518a67f95352eb1af141fa41009c1c9fb6f570d4ab2875b620c0088d229fa29cb44168a3b88a77607942e1636a18a50f4eff9b04a4f40264c0b0c4c1712c4e557e5c18c5c64633c0e80137e69b08105be49bbe96e79e3856e3c4bffe6dfcf180c40a0ed09eb76653facdd93130b6eed1de0636b546cfec75cd23397265e0cbe2529f9f94423bc79dca48ebc09c85bce647dcedd5d4efd9ed654d5dd208fd0589989658cde05f1d7727316e678797c75a19075f9c78cde3cad8bf9ccc361b93bb7f3fcad10a8e746afc5d1027ec785764eca843afad5ec17bb1f356a7ca13e57f86238bd2184929345c5bd89842af132d93c2540cd3cb7126be09c97a4e87ec12a0e497ba4132fd8f8f542ce2533b48ef603a78a20ef793a6108aad8bdcb91540293b3425d0c57f9db3d878b2bc725d61403f73b009e15fb3ac99ded17213870fadd9f3c07b0e9605f8393718582bec8b011de81244f421f0d945a43c57935376460e9b35db0b199f7a4ccba01da8fbc74438430339de646e8cfc8c37cc69cb4a73640112f05591479299fd54f1cafdbbd1b207214c9289e2b3ed442c9a4b4471dabbbcd31dee936f324981260734c1f433419cfc19f435338e7c9db63ab95363d1af1b6e4b621818404644a4a4f0ecdd615da22ebe3cea2beb50508648ccfe9bd9b6dedd2a3b0b5731b476b52779c7350bb881fd1873c71ca8057c6284bd35710c54496f8326a02d0d387d4e19753c84317f0fa780b7dba8f8de99123e23f4a5b75f61e7482aa119a67a38422af2acf76568a1e1524bf0788b0ef10e146d7881c1f6f774e90967abeb438be9d18678dd15165a4878be948d3653bb49e7d3d64e1579073b75301f1342d386b4d874230a6bb6e", 0x1000, &(0x7f0000000100), &(0x7f0000000180), &(0x7f0000000200)="a5f72d9fe3fb035a018acdbfb9db13eeda16e6") add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="18008b3b64845f4aed000000000000000000000000140018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x94) r3 = syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102) ioctl$int_in(r3, 0x5452, &(0x7f0000001840)=0x5d4) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_DISALLOCATE(r4, 0x5608) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x18) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) fdatasync(r7) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60242, 0x0) 2m6.163721926s ago: executing program 1 (id=1111): r0 = io_uring_setup(0x4822, &(0x7f0000000180)={0x0, 0x0, 0x40}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES8=r4], 0x20}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd, 0xd, 0x2, [@datasec={0x6, 0x0, 0x0, 0xf, 0x1, [], "8f"}]}}, 0x0, 0x2a}, 0x28) sendmsg$nl_route(r5, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x60, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}]}}}]}, 0x60}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000ff9000/0x4000)=nil) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x420}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) ioctl$FS_IOC_RESVSP(r8, 0x40305828, &(0x7f0000000380)={0x0, 0x2, 0x7ff, 0x2}) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xae, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r10 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x40600, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r10, 0x89f1, &(0x7f0000000340)={'sit0\x00', &(0x7f0000000300)={'erspan0\x00', 0x0, 0x8, 0x8000, 0x3, 0x10000, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x66, 0x0, 0xa1, 0x4, 0x0, @remote, @remote}}}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r1, &(0x7f0000000140), &(0x7f0000000040)=@tcp6=r2}, 0x20) recvmmsg(r2, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000780)=""/71, 0x47}], 0x1}}], 0x2, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2m5.874341814s ago: executing program 1 (id=1113): add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000002000000851000000600000018020000", @ANYRES32, @ANYBLOB="000000000000000066000200000000001800"/30], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x2, 0x0, @empty}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) faccessat2(0xffffffffffffff9c, 0x0, 0x0, 0x300) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x8840, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) fdatasync(r2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) read$FUSE(r1, &(0x7f0000003540)={0x2020}, 0xfe38) listen(r0, 0x2) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f00000007c0)=ANY=[@ANYRES16=r1, @ANYRES32=0x0], 0x0, 0x80000000}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r3}, 0x10) timer_create(0x8, 0x0, &(0x7f0000000000)=0x0) timer_delete(r4) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r5, 0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet(r6, &(0x7f0000000380)={&(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000040)="6b1690bb8dc095ebae95baccdce177a97389ae7df65487e3996df64c35efa6e159bd2f2180", 0xfdef}], 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaac14140000000000160000000000000000001086070000009404000000020000"], 0x38}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000240)="c4", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0xffff, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6253}, 0x1c) 2m5.562016824s ago: executing program 1 (id=1119): getsockname$packet(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@nombcache}, {@dioread_lock}, {@debug}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") mount$incfs(&(0x7f0000000200)='./file0\x00', &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x0, 0x0) unlink(&(0x7f0000000080)='./file0/file0\x00') 2m4.58610227s ago: executing program 1 (id=1125): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfe, 0x0, 0x7ffc9ffe}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002300000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c40000000000109022472510000000009040000120701030009050102000000000009058202", @ANYRESDEC], 0x0) syz_usb_disconnect(r0) 2m4.111019196s ago: executing program 1 (id=1132): r0 = io_uring_setup(0x4822, &(0x7f0000000180)={0x0, 0x0, 0x40}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES8=r4], 0x20}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd, 0xd, 0x2, [@datasec={0x6, 0x0, 0x0, 0xf, 0x1, [], "8f"}]}}, 0x0, 0x2a}, 0x28) sendmsg$nl_route(r5, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x64, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x64}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000ff9000/0x4000)=nil) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x420}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) ioctl$FS_IOC_RESVSP(r8, 0x40305828, &(0x7f0000000380)={0x0, 0x2, 0x7ff, 0x2}) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xae, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r10 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x40600, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r10, 0x89f1, &(0x7f0000000340)={'sit0\x00', &(0x7f0000000300)={'erspan0\x00', 0x0, 0x8, 0x8000, 0x3, 0x10000, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x66, 0x0, 0xa1, 0x4, 0x0, @remote, @remote}}}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r1, &(0x7f0000000140), &(0x7f0000000040)=@tcp6=r2}, 0x20) recvmmsg(r2, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000780)=""/71, 0x47}], 0x1}}], 0x2, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2m4.093106868s ago: executing program 32 (id=1132): r0 = io_uring_setup(0x4822, &(0x7f0000000180)={0x0, 0x0, 0x40}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES8=r4], 0x20}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd, 0xd, 0x2, [@datasec={0x6, 0x0, 0x0, 0xf, 0x1, [], "8f"}]}}, 0x0, 0x2a}, 0x28) sendmsg$nl_route(r5, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x64, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x64}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000ff9000/0x4000)=nil) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x420}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) ioctl$FS_IOC_RESVSP(r8, 0x40305828, &(0x7f0000000380)={0x0, 0x2, 0x7ff, 0x2}) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xae, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r10 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x40600, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r10, 0x89f1, &(0x7f0000000340)={'sit0\x00', &(0x7f0000000300)={'erspan0\x00', 0x0, 0x8, 0x8000, 0x3, 0x10000, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x66, 0x0, 0xa1, 0x4, 0x0, @remote, @remote}}}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r1, &(0x7f0000000140), &(0x7f0000000040)=@tcp6=r2}, 0x20) recvmmsg(r2, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000780)=""/71, 0x47}], 0x1}}], 0x2, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 31.831767775s ago: executing program 4 (id=2003): syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', 0x2008408, &(0x7f0000000000)=ANY=[@ANYRES32=0x0], 0x41, 0x24c, &(0x7f00000007c0)="$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") syz_open_procfs(0x0, &(0x7f0000000300)='net/ip6_flowlabel\x00') syz_clone(0x1081000, &(0x7f0000001f80), 0x0, &(0x7f0000000100), &(0x7f0000000180), &(0x7f0000000200)="a5f72d9fe3fb035a018acdbfb9db13eeda16e6") add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="18008b3b64845f4aed000000000000000000000000140018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x94) r4 = syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102) ioctl$int_in(r4, 0x5452, &(0x7f0000001840)=0x5d4) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_DISALLOCATE(r5, 0x5608) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x18) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) fdatasync(r8) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60242, 0x0) 29.510417372s ago: executing program 4 (id=2012): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x25c, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfc, 0x0, 0x7ffc0002}]}) futimesat(0xffffffffffffff9c, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x66) 29.404408663s ago: executing program 4 (id=2013): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x111) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x40900, 0x0) r1 = openat$incfs(r0, &(0x7f0000000080)='.log\x00', 0x0, 0x1e1) preadv(r1, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000680)=""/156, 0x9c}], 0x2, 0x1, 0x801) 29.403262462s ago: executing program 4 (id=2014): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000008000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000850000005000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'wg1\x00', 0x0}) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000000)=0xf41, 0x4) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000004c0)=@nat={'nat\x00', 0x670, 0x5, 0x4e8, 0x2c0, 0x0, 0xffffffff, 0x3a8, 0x2c0, 0x450, 0x450, 0xffffffff, 0x450, 0x450, 0x5, 0x0, {[{{@uncond, 0x0, 0x1f0, 0x228, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0x4, 'kmp\x00', "0d01d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@dev={0xfe, 0x80, '\x00', 0x10}, [0xffffff00, 0xff000000, 0x0, 0xffffff00], @ipv4=@dev={0xac, 0x14, 0x14, 0x29}, [0x0, 0xffffff00, 0xff000000, 0xffffffff], @ipv6=@local, [0xff000000, 0xff, 0x0, 0xff], @ipv4=@broadcast, [0xffffffff, 0xffffff00, 0xff], 0x3ff, 0x1, 0x5c, 0x4e20, 0x4e22, 0x4e24, 0x4e24, 0x804, 0x20c0}, 0x80, 0x2}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x801, {0x0, @broadcast, @multicast2, @port=0x1, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ip={@multicast2, @broadcast, 0x0, 0x0, 'virt_wifi0\x00', 'veth1_vlan\x00'}, 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@addrtype={{0x30}, {0x890, 0x218, 0x1, 0x1}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0xe, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @icmp_id=0x65, @port=0x4e21}}}, {{@ip={@private=0xa010100, @rand_addr, 0x0, 0x0, 'nicvf0\x00', 'nr0\x00'}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @icmp_id, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x548) sendto$packet(r2, &(0x7f0000000240)='\x00', 0x1, 0x800, &(0x7f0000000080)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xfc}}, 0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'vxcan0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000400)={'tunl0\x00', &(0x7f0000000380)={'syztnl0\x00', 0x0, 0x8000, 0x7800, 0x3ff, 0x9, {{0x14, 0x4, 0x1, 0x26, 0x50, 0x64, 0x0, 0x4, 0x5e, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, {[@ssrr={0x89, 0xf, 0x61, [@dev={0xac, 0x14, 0x14, 0xc}, @multicast1, @remote]}, @lsrr={0x83, 0x17, 0x36, [@empty, @multicast1, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2]}, @ssrr={0x89, 0x13, 0xc5, [@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @multicast2, @remote]}]}}}}}) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, 0x0) sendmsg$nl_route(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x1, 0x470bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x64e10, 0x7da23}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MCAST_EHT_HOSTS_LIMIT={0x8, 0x25, 0x2}, @IFLA_BRPORT_MULTICAST_ROUTER={0x5}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400c880}, 0x4008002) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000000), 0xc, &(0x7f0000000580)={&(0x7f0000000b00)=ANY=[@ANYBLOB="5c010000", @ANYRES16=r0, @ANYBLOB="20002bbd7000fbdbdf25190000000c00018008000100", @ANYRES32=r1, @ANYBLOB="7800018008000100", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="0800030003000000080003000100000014000200697036677265746170300000000000001400020070696d7265673100000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="14000200776c616e31000000000000000000000008000300020000004800018008000300000000000800030007000000080003000100000008000100", @ANYRES32=r8, @ANYBLOB="3e4a08000100", @ANYRES32, @ANYBLOB="1400020070696d7265673000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="64000180080003002f0d0c6d140002007866726d3000000000000000000000001400020073797a6b616c6c65723000000000000014000200626f6e64300000000000000000000000140002007866726d3000000000000000000000000800030001000000180001801400020067"], 0x15c}, 0x1, 0x0, 0x0, 0x20040000}, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000800000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000780)='sys_enter\x00'}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) futex(&(0x7f0000004000), 0x5, 0x0, 0x0, &(0x7f0000004000), 0xb0024000) 29.281443424s ago: executing program 4 (id=2016): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x31, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92F\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x140070, 0x0) fspick(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x1) fsopen(0x0, 0x1) 29.215888871s ago: executing program 3 (id=2017): syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', 0x2008408, &(0x7f0000000000)=ANY=[@ANYRES32=0x0], 0x41, 0x24c, &(0x7f00000007c0)="$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") syz_open_procfs(0x0, &(0x7f0000000300)='net/ip6_flowlabel\x00') syz_clone(0x1081000, 0x0, 0x0, &(0x7f0000000100), &(0x7f0000000180), &(0x7f0000000200)="a5f72d9fe3fb035a018acdbfb9db13eeda16e6") add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="18008b3b64845f4aed000000000000000000000000140018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x94) r4 = syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102) ioctl$int_in(r4, 0x5452, &(0x7f0000001840)=0x5d4) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_DISALLOCATE(r5, 0x5608) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x18) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) fdatasync(r8) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60242, 0x0) 29.070743715s ago: executing program 4 (id=2022): r0 = io_uring_setup(0x4822, &(0x7f0000000180)={0x0, 0x0, 0x40}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES8=r4], 0x20}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd, 0xd, 0x2, [@datasec={0x6, 0x0, 0x0, 0xf, 0x1, [], "8f"}]}}, 0x0, 0x2a}, 0x28) sendmsg$nl_route(r5, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x64, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x64}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000ff9000/0x4000)=nil) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x420}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) ioctl$FS_IOC_RESVSP(r8, 0x40305828, &(0x7f0000000380)={0x0, 0x2, 0x7ff, 0x2}) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001800", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xae, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r10 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x40600, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r10, 0x89f1, &(0x7f0000000340)={'sit0\x00', &(0x7f0000000300)={'erspan0\x00', 0x0, 0x8, 0x8000, 0x3, 0x10000, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x66, 0x0, 0xa1, 0x4, 0x0, @remote, @remote}}}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r1, &(0x7f0000000140), &(0x7f0000000040)=@tcp6=r2}, 0x20) recvmmsg(r2, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000780)=""/71, 0x47}], 0x1}}], 0x2, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 27.924267357s ago: executing program 3 (id=2029): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) fchmodat(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x0) 27.906734589s ago: executing program 3 (id=2030): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000280)={{0x0, 0x4, 0x0, 0x9}, 'syz1\x00', 0x46}) ioctl$UI_DEV_CREATE(r1, 0x5501) 27.768823862s ago: executing program 3 (id=2031): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000540)={r2, &(0x7f00000005c0)="14d0c310e3db6f4099f90e09896d8c99c98ac7d50d190c938e87dc66a3d3d9a88139605a488f0043ec4496ecc9aaeeaff9789d18c43a0800ef1e336c8d2170b523", &(0x7f0000000500)=""/12, 0x4}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r3, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 27.768409972s ago: executing program 3 (id=2032): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x31, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92F\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x140070, 0x0) fspick(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x1) fsopen(0x0, 0x1) 27.490847839s ago: executing program 3 (id=2033): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) 13.215040021s ago: executing program 33 (id=2022): r0 = io_uring_setup(0x4822, &(0x7f0000000180)={0x0, 0x0, 0x40}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES8=r4], 0x20}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd, 0xd, 0x2, [@datasec={0x6, 0x0, 0x0, 0xf, 0x1, [], "8f"}]}}, 0x0, 0x2a}, 0x28) sendmsg$nl_route(r5, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x64, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x64}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000ff9000/0x4000)=nil) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x420}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) ioctl$FS_IOC_RESVSP(r8, 0x40305828, &(0x7f0000000380)={0x0, 0x2, 0x7ff, 0x2}) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001800", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xae, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r10 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x40600, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r10, 0x89f1, &(0x7f0000000340)={'sit0\x00', &(0x7f0000000300)={'erspan0\x00', 0x0, 0x8, 0x8000, 0x3, 0x10000, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x66, 0x0, 0xa1, 0x4, 0x0, @remote, @remote}}}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r1, &(0x7f0000000140), &(0x7f0000000040)=@tcp6=r2}, 0x20) recvmmsg(r2, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000780)=""/71, 0x47}], 0x1}}], 0x2, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 12.334991177s ago: executing program 34 (id=2033): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) 6.892586208s ago: executing program 5 (id=2180): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0900000004000000dd0000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000700000018150000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001d0000001801000020786c2500000000902020207b1af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000060000000000000000000000850000009e00000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="b4000000000000006910a30000000000040000000000000095000000000000009f229e9f7553b4e514a15ca7585499828407b2667d0b30efddcfc35816674273632c79a5675b11cae2a1131d6b3794c249ccda53425da4b0e9a804d6c33d0573589e292f32148e3e8fbc2d55cb0f129f0f4d47471172e1953ec8084d517fe857df83eab4b2dda8940e77a53c1cd3815e1ffb0387659211a3f3cdd94a6b1b20d504012ab4cc13548b937ed62e677192"], &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) 6.575384329s ago: executing program 5 (id=2182): mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$incfs(&(0x7f00000007c0)='./bus\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) renameat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00') 6.570718359s ago: executing program 5 (id=2184): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000500000000040000090000"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c0000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000180100002020702500000000002020207b1af8ff00000000bfa1000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000480)='./file0\x00', 0x2000000, &(0x7f0000000880)=ANY=[@ANYRESHEX, @ANYRES8, @ANYRESOCT, @ANYBLOB="ac82fa3da8cb64cc9eacb70c5918a0fd0f53ab333860bfb7988f9b8200a0d9b5f31f4d5b386152286170eda7f0291b03bafde1116c6f4799c9f36b7247c9664cfa9b290a30352b971c", @ANYRESHEX], 0x8, 0x2f8, &(0x7f0000000ac0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) r4 = eventfd2(0x3, 0x80800) read$eventfd(r4, &(0x7f0000000280), 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x20f42, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000140)={'nr0\x00', 0x6132}) write$cgroup_subtree(r7, &(0x7f0000000000), 0xfe3a) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000380)={'syz0\x00', {0xff, 0x6, 0x7fff, 0x8d5}, 0x2, [0x10000, 0xeba, 0x7, 0x9, 0x8, 0x1, 0x6, 0x7ff, 0x54, 0x7fffdfff, 0x7, 0xc, 0x8, 0x9, 0x9, 0xfffffff7, 0x7, 0x40000, 0x842, 0x26, 0x2, 0x0, 0x3ff, 0xfffffff4, 0x1, 0xda6, 0x3, 0xa7, 0x4, 0x2, 0x9, 0x76c9, 0x200, 0x1, 0x1, 0x1, 0x7, 0x80009, 0x1000f, 0xb, 0x9, 0x7ffffffc, 0x9, 0xb50, 0x0, 0x800, 0x3, 0x0, 0x7, 0xfffffffe, 0xfffffffa, 0x8, 0x24, 0x7fff, 0x8, 0x1, 0x4, 0x0, 0x0, 0x7f, 0x964e, 0x2d5, 0x949, 0x1], [0x266ac, 0xfffffff9, 0x439ea01d, 0x3, 0x8e, 0x7, 0x80000001, 0x9, 0x4, 0x9, 0x0, 0x7, 0x6, 0x8001, 0x6, 0x8, 0x2, 0x5, 0xb, 0x7ff, 0x7ff, 0x5, 0x9, 0xc00, 0x89, 0x2, 0x0, 0x1, 0x10000, 0x9, 0x9, 0x4d26, 0x10000, 0x8, 0x1, 0x7, 0xfffffffc, 0x4, 0x4c, 0x9, 0x8, 0x5, 0xe66, 0x8, 0x2, 0x81, 0x4b, 0x7d, 0x6, 0xb, 0x4, 0x9, 0x1, 0x8d1, 0x100008fd, 0x1, 0xe0, 0x8e, 0x10001, 0x4, 0x401, 0xade, 0x7f, 0x9], [0x8396, 0x7, 0x10000, 0x9, 0x8000, 0x1, 0x9, 0xe, 0x8, 0xff, 0x0, 0x400, 0x1000, 0x9, 0x6e, 0x8001, 0x7, 0x3, 0x6, 0x5, 0x80000002, 0xcb, 0x2, 0x3, 0x0, 0x2, 0x8001, 0xc, 0x5, 0xb0f, 0x1e, 0x1, 0x800, 0x80008, 0x9, 0x3, 0x200, 0xfc, 0x4, 0xe, 0x464b, 0x6, 0x2e7, 0x7ff, 0x1ff, 0x6, 0x7f, 0x2, 0x7fffffff, 0xffffffff, 0x4, 0xffff, 0xd5d, 0xa0c787d, 0xffffff4e, 0x9, 0x4, 0x40, 0x3, 0x0, 0x1fc1, 0x9, 0x1, 0x6], [0x10000010, 0x7, 0xad95, 0x80000000, 0xa5e, 0xfe, 0xff, 0x6, 0x80000000, 0x0, 0xe, 0x2, 0x4, 0x7, 0x7, 0x0, 0xfffffffd, 0x7ff, 0xdaa, 0x4, 0x3, 0x103, 0x6, 0xcc, 0x6, 0x4000400, 0xffffffff, 0xfffffffb, 0x40, 0x80000000, 0x4, 0x7, 0xfff, 0x4, 0x9, 0x0, 0x9, 0x1, 0x0, 0x7, 0x8ac1, 0x3, 0x1, 0x4, 0x80040002, 0xff, 0x6, 0x3, 0xfffff801, 0xffefffff, 0x37d, 0xfffffff8, 0xd, 0x7, 0x8, 0x8, 0x6eaf, 0x0, 0x8, 0x5e02, 0x2, 0x3, 0x5, 0x400]}, 0x45c) r8 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 4.302222911s ago: executing program 5 (id=2197): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x2, 0x4, 0x8, 0x9}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0x1, 0x0, r0}, 0x50) close(r0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1}, &(0x7f0000000840), &(0x7f0000000880)=r0}, 0x20) 4.221138498s ago: executing program 7 (id=2199): r0 = socket(0x2, 0x2, 0x1) bind$unix(r0, &(0x7f0000000000)=@abs, 0x6e) r1 = socket(0x2, 0x2, 0x1) bind$unix(r1, &(0x7f0000000000)=@abs, 0x6e) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00') preadv(r2, &(0x7f0000000680)=[{&(0x7f00000003c0)=""/174, 0xae}, {&(0x7f0000000280)=""/186, 0xba}], 0x2, 0x9, 0x2080) 4.200596021s ago: executing program 5 (id=2202): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000100)={{0x1}, 'syz1\x00'}) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0xc) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x9) ioctl$UI_DEV_CREATE(r0, 0x5501) 4.177635733s ago: executing program 7 (id=2204): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x9) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') preadv(r3, &(0x7f00000000c0)=[{&(0x7f0000000640)=""/4112, 0x1010}], 0x1, 0x4000, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000000000000b704000008"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_mreq(r5, 0x29, 0x8, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r6, 0x26, &(0x7f00000001c0)={0x1, 0x1, 0x10000000000000a, 0x10000}) fcntl$lock(r6, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x2f, 0x9}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x182800, 0x0) ioctl$RTC_AIE_ON(r7, 0x7001) ioctl$RTC_UIE_ON(r7, 0x7003) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={0xffffffffffffffff, 0xffff0000, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r8, 0x0, 0x2a, &(0x7f00000006c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r8, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="020000000000000002000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000"], 0x110) ioctl$RTC_AIE_OFF(r7, 0x7002) 4.139722157s ago: executing program 0 (id=2206): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000080)=0x1, 0x4) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x28040041, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="1f", 0x1}], 0x1}, 0x8c0) recvmmsg(r0, &(0x7f0000000140)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x0, 0x0) 4.106023669s ago: executing program 5 (id=2208): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b0240"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000240)={0x40, 0xa, 0x6, "6ef1989edd08"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="20131d00000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000009c0)={0x84, &(0x7f00000003c0)={0x0, 0x13, 0x22, "ad69bcfd7dc8d77acad40a2c92f6ceff94d6dfbbe7242be6bd9b1ce5ab9389429744"}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={0x40, 0x7, 0x2, 0x6455}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)={0x40, 0x1a, 0x2}, &(0x7f0000000900)={0x40, 0x1c, 0x1, 0x7}, 0x0, 0x0}) 3.263558082s ago: executing program 7 (id=2211): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x800, 0x2, 0x4}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000100)="09000000e700140000007e7bfbf7", 0xe, 0x24000801, &(0x7f0000000300)={0x11, 0x8100, r2, 0x1, 0x8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}, 0x14) 3.215114307s ago: executing program 0 (id=2212): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x9) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') preadv(r3, &(0x7f00000000c0)=[{&(0x7f0000000640)=""/4112, 0x1010}], 0x1, 0x4000, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000000000000b704000008"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_mreq(r5, 0x29, 0x8, 0x0, &(0x7f0000000800)) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r6, 0x26, &(0x7f00000001c0)={0x1, 0x1, 0x10000000000000a, 0x10000}) fcntl$lock(r6, 0x26, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x182800, 0x0) ioctl$RTC_AIE_ON(r7, 0x7001) ioctl$RTC_UIE_ON(r7, 0x7003) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={0xffffffffffffffff, 0xffff0000, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r8, 0x0, 0x2a, &(0x7f00000006c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r8, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="020000000000000002000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000"], 0x110) ioctl$RTC_AIE_OFF(r7, 0x7002) 3.214465736s ago: executing program 7 (id=2213): add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000002000000851000000600000018020000", @ANYRES32, @ANYBLOB="000000000000000066000200000000001800"/30], &(0x7f0000000000)='GPL\x00', 0x2}, 0x94) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x2, 0x0, @empty}, 0x1c) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000202300800000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x93, &(0x7f00000003c0)=""/147}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) faccessat2(0xffffffffffffff9c, 0x0, 0x0, 0x300) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x8840, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="b022fd84099290ab8ebe39cfc17f80bc2926131e9437a1dea9ca1756900531c14b67f7a9edd0d80c7c73649053153a8d8db6d3c0d3b3fa951f57d14071b61a27d968a0ae7bd580d2d9fd9034451c3ecffae80b234e72fb11e3a60c1208bd5262c5009e3e45582ed4203850292ed682fc5e26f5c2af47718ee5b4f2ed68f0b21b813ec22c4c61d3f22f5a01ebea6c484d8ef4ca90180b4587e0bee2f782fef574aa1e0ebc5d9e42452910d03c12feff7848f72ac5430476b9dc2457a09efdc6f181c408abe7b30cccd2c8fb85389e1cacd4f4b29a3d4a55941bf1bb416203732d6712d5a89470876ae6daec66f3fe1b39982c2781b115e20af7ce0a0c7c77db1073adc6e11597bd9f540f90f60b92dc84a5c764379c0b9426ff4f547182502633aa754dcfc63e46c7cef8e3a0c29bf5184ac150e90d884c59cba3dae7c531fb114534292629d8532c0f67ee37f2c349ea8f28199aff2aa335df5db411287a73adfbfff212cf7b6d277a361c55af160d98b5c3db84da37d80e07269c33f60f111ec3c09d8843e1f5499e71de9b48882b9415d45b20393888ec49f307d535580947b5a5b40b465382aa4a579f317d91792f8ed70e9401863bc0a21d7e15f828ae8f13c673a30cba6f10f89c8a018cc8bbe7072ffe1c5d4ef11f0f82cf967faef8608f8b289245f87607917b0c2578dbbe5186ac78b8cd9a5aff567aebe8a73dd547fdc503885a2df4953f3497688b7b1ede6a2e529b25ecc246a7bcb00077059d7e0100aa20cb4d1dbac6eec0a9f803601c799eddb9b271f0530842291167abffb982fe47a496e884ee3c17850f970cb3ac3342b832b8b984e2eb4836afb7727f7310a347add2a1094cfff7b44516593bbf15f3a9e0e2a788e99bdec6706ae9a39b4f8983ae38d4cdf866d9670de91036ea86646f195ec4b4ce462ea624b8875825262a301f9235496b935506109287bbcf4754e3fa637428a2e39a80cd07ffafd756839abddc721421754fcae705ab432fcdd6f3c004dfad9e6bfa87746dd41649dcd2bf1728a3d6d2ddf27a52957422a27f9e478530873d9f1861b71f2378540648b171bcbd44533723ae1a89e56e2f570c0571eb3c66fac65e3abad003a828f2d21cc990e57b80dd3762fe1204eb320591d6a93f9052b80494b2f52ad89d6374cf33040e2484c3384946450bb65835d65bebb4a91c0f82e598e5aa7ff9ba79f27bbd46240287721d2759fa24cec97658d8f17b3f424293f7253b74dae4b966c8089c546936953d8ce63463c26f1e296f56e17e7f890b6001ed5d9f739036842e989b40c02d3fe5227b1fb08a98f1b1f0c336346698e70171e74e40c5304a356b29c947672f8a0535b7ce3a66b276d09ca3d9fff030e41598649a310875f5b5801c471182c1f617c907f06b5f36a1f9294b0f4a95d0fc98682b1e38f2f94fb08f20c5e5c7afaa9fbbd84734a98dd9b33188f6b79334b09ca8e2de56457242f904b114a2c313b193fe421d7fa97da5ab77f363e83b4698bf903022d13826ded79a905f07f97dc0fc4cc290b969ee37075a4a80a0d86d0696eeea2048ebd1a97f8319b3342e515ae5c9e25ee933d926ae0f31af55aeb07da6508756ac9549ba8bbc0095a17cb647df12f926e595a531d7208ef75cfd6239f65a0584121c75e00f7c77990b90e6350b1a84eba4430979bb726ab02050573af29156bed8e243527593dc0c6de41d0b6775818a96ee97d153826a217e8d7e88c6c44baa781a495afeba3882a06f5b1a87b1e8ee1edf404ac3ade6f5af1f6cd22c01506b5f84befb55c86f79b56e4d5754be8f564f57852f991c2275cbf55937666e022c2b2f0d020156152377859b345f74fe66791421e5571a7900df89c9bef5c3cb19113fae5d524ae2edea5ca91baf096c02e1e860c9b5a97882da598ef1e39fcb61d83f997675a772ac37c0fbe65a9d379b9204a915fdb6a7c7cdbd14c0893cd5e8cfd56f4021756d6c6a25b258a69922a41f3c7bc43b69f46293b381a27ae5a3cfcf2526f8eadcb540ec87d6009d6a2939882140f9a447c5be4328a0681aa3002f6a9dfd836b362fb1d423d7c9571aeb50e2a6acb9ab4e85574baf27b1028db0f6647aa7fe995c1fbf8ab422bb15acf9ae6de73972c9549cb601297bbb1c740e8761af16c4785c4827b5dc5e52f4a82000f6f87670ec19fea4e04e564fc83c0ccf1b7fa2bb9ac3e56addfa7f5f6d1d3d3c92dea5de9fa42f1414a769b0cdc40e306fee0ad66573628b83a07fe087fcb3377848e1a7869e592c83bb594284da28a4f5db381059d56e5d4989042dadbbe6000b66184ca8fe9d293f6c70988f3d7b8ee00546a21aaeca498ae06fa7becc5a55914c7a1ab714d955a8b0bd72e8d6bbf4dd451b525fcbc9fb5c10747dee3c755d39be5c2d52345c56185a8d6cee878b72255acabf7dbefafaed94838532fd01ea6244c4ac929de6846084a07d19de7098e62b613775abe326d402f707c4fbb3968b0aac7f1f27537cbdecee19151b310bcbe2c848ef41eea747e85f87d5a160b2cb6b28d137e30c69770c1651e44a66f8e3394bec03c8256b89fd59bec449c6a2bdb351f53d05e463f75b834624b8c7b557dc38a398d726d0846fc2f062b5b32d10af38ce844c6811aaef73ace1d86813bc37433670f6180f9bd112ae00133077fc7a0bd12d7b4b3a53a3c16a9cb0e8112f18691aa3bd2215afdaa1d00c8ea4f4a302ea9ebc94afaad2549f646a8ae66b953fa9cd649a02c4b152cc6c7b55d99ddc3d0fd1fcd84da355eb02581dba9e4d9dd235d2d4c4e094161440e70926221d76ce70c8762485c8b801550cc208e5d1bfd184e622ff0950a912dd47163c838fd562f09ca1690e76da55a471ec67cb83bbb103975bd4683f0393ec8b843f55ba2c0bdc6c90b50031cfe751792bd5d0cb50c8ee93086794e18c4ed66d6bd09b499f8ff2f63a8920701ab0af5b4b75402b1d65b1eb515dc46e181a1699f21e67349c904f02f8358e28faff2ade65703d14dc2774b02acc731eee0941675502d95e0c32a7304f6e9af85ef220daea0de24cf79e35a59412e62835d3032f88d9ed7befd4f708bfd2d236bd188b6f951bbe13e3add84f111e20324a523426611ec15fb376e7306cbec6867f0b945047a4facf78154e68a66a36972d5a18af1403baa9b4b51fddd072ee1f0087add02485b40323bd708b76406e10a927a913d91c5d771d3aeb3cfafb54b1016785c61ed13060d5f1b550676a656b874fd392ae61c5044218df55cbb72b819990ffdb130fb17a14f7cb5a2a8aafedc6526d83762dbf320f15758030eeecf5652dccf04cdc68827400c768a21daff47212b87357ff0bcb36cae4d113a5d9815b07332cb42329321664d93e43e6dcd6115987007fc623088004f8ac943736eb2a045a25b1bbfbbc97571eabf875d924f6b7b0e524b1afa0ff499473aa7976de83b91928e84f8e445728778fe0e5a356a57f09ed254848cec31b7c5c9c7a2fca21befe15ffc9317e96f7ad582684ce625791b99563781bf64983e77be4f1a5893beec4b560fc15e9c21dd0c29bf2879dfaa257ba5ec97957050d5b2c1f25eb4064488c139dbf88f3b7c70850d6fdbf0603cdd4011bf76e0d9ee5c2b128b50dba5689a8f04d4caf62d777eab31aab4b4195da780901352d284885bf417eb05367ee1b5f2f8c5cfe7f0394fb977f3a3f96084375e22ccf6c3ee4659d68d2b1948a4a1783a4db2282c67d39613fa67be4dd144793b76c09dd563ef3d169f34318acbd62d3b2d64f9173d16e9801132918c3390172c6f64d049b4c894d593419e5f4d5a513fc5a64ddcd05b034e6d16fe88ff89a520c464f842ad5a62a6fc46f0e9d56d05d6f5e625d25f537cca62910981dd463255318d8273db13d27fdc6c17c2c54776ba3a246c413957f297b8ecb1adb5c3f1d4d8e4d7705bdb9268f956d2845b68511edd51cdc5d05de5d6d4b3f573592986fed325f1f3c6a9ef7740f9d843e11981d1ca515c7e722ec4d691c5e4d3a146e39bcf407f66418f754bb2508cb4cc843aa9d8eb63850e5b9103682ecc1fc8f972f394be9d31cb9efd0f693d4ec41fe8d0993b45d2f422f9ab604d3371c1bda1daa3206a027c4de5c8f2cf6d1fc7e6d1423a6c71e84f24e0a4dfbf4a331deff2ae649df9681a08846efc9f0001e7ef106f1bfa25ee2799b13f1f076e30e58078d186afb65301497e982478babf143972cc7072f70829b8faee46e56a1451ff7ddd0dd35816bfa29eee361de60fbc3222e89d70f1495be94d0e82072a0e572e3055c905552e6c45d2af3d4f505a99d947667059c1c92ce2d3549077539c4cec4c07337361eeb9f78813bf9e77b0a79f391ae6eb663deb53317f61ef8ddffdbd0ca2d8095c10c106b0968325bc1e88829d92399b809f1b881e9b9f0aeada5c5ee20fd0866070e3d5d41e62f5b6d2d25441babcdf9d3dc8ae3c140a6f352daf00ed38e248b236acd27f24bdebae0f272a5820ef77fb603fe3cc910a9d842129259e61d25dcf546cd770e4cccab470b20fa5f5972a6dd15853483de6e032f9726c166e81e8e0f9db4df397cc4a10b6e58708a31f48d7d2bae4ef92828c37088068b2ae433110dc7c08e6017d8b26e4e0382ca8fa62dc6f53c4cc2f0f78af72335c494f57f2414afe247e2291c395895bb18f701b6f4331feb759110c543dd94a238e782ad552047677558a50e7683d71a9e222fd19a9343e1d64528640a8099dedd19e4c747dda18ff25b15bddf750a54533b6ecfc75ad4a2909485f7fd759d45c74727b2e7300eae71a8784f5dd7f25b4b000ed3254264131cbbae316fb3a3bfbeb309dd2d18104629db354f447791eb882bf0333a520b8dba745b673d071b07e1de3e02fe751a1cf5908435b1a38edbd60483abdb15452c868844ceb96c449ab72999a55c79f9ce7405797142ef7095b4caf99d7bbe51cd4e963e4ffbbd2648761abd3894b5420a0add261ff9c0eff61aafd1ac5195ff15cadb5b0c7ce34d4d2d68146f3dae677e833b8be0f8a876153bb65398def38e4bf539d3a00047b19c483062fc1c2547b7d4f7d99b7035212ccfffeeb21ed7bbd6165ac7fbafbca3cef86fff655305706dd0baa607c50543bb0d66f0f4dbdd9c365fdb7b875dc5e7ee59afccc321ad1e31cc84687afda71231bb2e4dc3ce79ff3ce4bbafed8821a5b71bbf3844f110e2dd9557b596ac792d97506d22c0410bce435e20fa2e2d435361b5b6ac85f44763769723a7b629258f45e10578f70bef2e9c05af8032e357697dfcd30de9b3e953a36d6cb7a03ce69288b663f692793904dd8fb4ab6dc31ddf7f6942ef84c1e68c78bf9974f830ee2fccca84113cee98b47ed41a87fe610c5348dc38d4ada19862772317a70754870347ad87dbbb4c52349b0261aa8e108fcf387b24d4e2a77ba76e8472fd74ab6fa021277a24ef7a48d395b0fd1f9c0cf83bac56b433ffbfe5984a362e337969febf259988162c2b4842bd2fc0b230fee93a085003e615088abfe41889f7b5e0f380ffe55b66c1f7419993c3dd4aac5891494a183ddca2e415e1749489c925715f3c44d94b90d2d735f2b923bdbbbf1646580ab135356a9ee29bc19e73ded9a33798a69d248574e0c9e9f40a1c1ba52bc66a578d08b75f271a9e9f447efede09d6b3b57e0aa6322c18fd6f5e1c9d2753e0a6513cc04124ab89802eb9c504f0e5550868ab597629d7cc7447ed1b01b2ff4cf511aa098710b208b5aa0f595039a2f0e7294c5fe3b0c3e6c40000000000000000000000000000000002588beb10115f4b22f4ac997c86c49201ee9dceb2142ae61555bbbc4ef8cdd468a8ffbe6cbfc8877dd87292c70e10669bc99d8d5710f7719cc2cffc86cd529b6da2511d07aef4a1d9533ab58a76f80ad7fe91a17397d3c83481", @ANYBLOB="fe2ecf20a9a17bd2ed7e803f830375c150a1f848f604c2c1f932d2b7163be4b2b9a5bd521d185cfbee555b27608594beba6325923aaf5db74cff01000053db92c6c5fcbba0abd975fc76bea49b00513afc856ed89d3fadeda307ca587354322803b0983cc65725ae7f45fb95e7cdb28c6b886959b7dde2c87c73f6008cf6eed7861f24b7423704b95f3d05b92d3d7ff9d392833ecd02443320b60131a350360fcc1d659e2a03cb469caf0498bacae0735a161345b3d71a55f14ef636b6f832c7a6071fce83904dfd871b6d8e03648dbaa3a039eb5673792cae80335732030f9aeabaf3bb3cc4ca5fe75271d69b2e78beb2b81fc3cf3a18a7ae93a3cdbe6599b99408275e2b4b4477c6fcf4806134e839e13533ec000000000000006a1c000000000000000000000000000000000000000000000000000069c3288311b7414705e975eb3f1b77a120", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) fdatasync(r3) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) read$FUSE(r2, &(0x7f0000003540)={0x2020}, 0xfe38) listen(r0, 0x2) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f00000007c0)=ANY=[@ANYRES16=r2, @ANYRES32=0x0], 0x0, 0x80000000}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r4}, 0x10) timer_create(0x8, 0x0, &(0x7f0000000000)=0x0) timer_delete(r5) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r6, 0x0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet(r7, &(0x7f0000000380)={&(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000040)="6b1690bb8dc095ebae95baccdce177a97389ae7df65487e3996df64c35efa6e159bd2f2180", 0xfdef}], 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaac14140000000000160000000000000000001086070000009404000000020000"], 0x38}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000240)="c4", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0xffff, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6253}, 0x1c) 2.693946807s ago: executing program 7 (id=2216): r0 = io_uring_setup(0x4822, &(0x7f0000000180)={0x0, 0x0, 0x40}) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES8=r3], 0x20}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd, 0xd, 0x2, [@datasec={0x6, 0x0, 0x0, 0xf, 0x1, [], "8f"}]}}, 0x0, 0x2a}, 0x28) sendmsg$nl_route(r4, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x64, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x64}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000ff9000/0x4000)=nil) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x420}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000380)={0x0, 0x2, 0x7ff, 0x2}) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xae, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x40600, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000340)={'sit0\x00', &(0x7f0000000300)={'erspan0\x00', 0x0, 0x8, 0x8000, 0x3, 0x10000, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x66, 0x0, 0xa1, 0x4, 0x0, @remote, @remote}}}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000780)=""/71, 0x47}], 0x1}}], 0x2, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.470584379s ago: executing program 7 (id=2221): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="1201000000000010ac054b02000000000001090224000100003000090400000103e6000009210000000122450009058103"], 0x0) move_mount(0xffffffffffffffff, &(0x7f0000008080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x152) syz_usb_control_io(r0, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) syz_usb_control_io(r0, &(0x7f0000000a40)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="40064500000045240d1adaa3cae546e2c5f437298fe78dc19175aa7b8d6afe2ef6b196de1aaab99b60f44276ce4c9bd640b78c7fb5f66b7397692465"], 0x0, 0x0, 0x0, 0x0}, 0x0) 2.385311717s ago: executing program 0 (id=2223): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x9) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') preadv(r3, &(0x7f00000000c0)=[{&(0x7f0000000640)=""/4112, 0x1010}], 0x1, 0x4000, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000000000000b704000008"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_mreq(r5, 0x29, 0x8, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r6, 0x26, &(0x7f00000001c0)={0x1, 0x1, 0x10000000000000a, 0x10000}) fcntl$lock(r6, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x2f, 0x9}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x182800, 0x0) ioctl$RTC_AIE_ON(r7, 0x7001) ioctl$RTC_UIE_ON(r7, 0x7003) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={0xffffffffffffffff, 0xffff0000, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r8, 0x0, 0x2a, &(0x7f00000006c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r8, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="020000000000000002000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000"], 0x110) ioctl$RTC_AIE_OFF(r7, 0x7002) 2.341599252s ago: executing program 6 (id=2226): add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000002000000851000000600000018020000", @ANYRES32, @ANYBLOB="000000000000000066000200000000001800"/30], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000202300800000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x93, &(0x7f00000003c0)=""/147}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) faccessat2(0xffffffffffffff9c, 0x0, 0x0, 0x300) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x8840, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="fe2ecf20a9a17bd2ed7e803f830375c150a1f848f604c2c1f932d2b7163be4b2b9a5bd521d185cfbee555b27608594beba6325923aaf5db74cff01000053db92c6c5fcbba0abd975fc76bea49b00513afc856ed89d3fadeda307ca587354322803b0983cc65725ae7f45fb95e7cdb28c6b886959b7dde2c87c73f6008cf6eed7861f24b7423704b95f3d05b92d3d7ff9d392833ecd02443320b60131a350360fcc1d659e2a03cb469caf0498bacae0735a161345b3d71a55f14ef636b6f832c7a6071fce83904dfd871b6d8e03648dbaa3a039eb5673792cae80335732030f9aeabaf3bb3cc4ca5fe75271d69b2e78beb2b81fc3cf3a18a7ae93a3cdbe6599b99408275e2b4b4477c6fcf4806134e839e13533ec000000000000006a1c000000000000000000000000000000000000000000000000000069c3288311b7414705e975eb3f1b77a120", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) fdatasync(r3) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) read$FUSE(r2, &(0x7f0000003540)={0x2020}, 0xfe38) listen(r0, 0x2) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f00000007c0)=ANY=[@ANYRES16=r2, @ANYRES32=0x0], 0x0, 0x80000000}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r4}, 0x10) timer_create(0x8, 0x0, &(0x7f0000000000)=0x0) timer_delete(r5) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r6, 0x0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet(r7, &(0x7f0000000380)={&(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000040)="6b1690bb8dc095ebae95baccdce177a97389ae7df65487e3996df64c35efa6e159bd2f2180", 0xfdef}], 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaac14140000000000160000000000000000001086070000009404000000020000"], 0x38}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000240)="c4", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0xffff, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6253}, 0x1c) 1.403070893s ago: executing program 0 (id=2227): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') pread64(r0, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) 1.359246558s ago: executing program 2 (id=2228): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000880)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r2}, 0x10) times(0x0) 1.358845508s ago: executing program 2 (id=2229): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000500)='hrtimer_start\x00', r1}, 0x10) timer_create(0x0, 0x0, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) 1.342407319s ago: executing program 2 (id=2230): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000200100000102"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) 1.216726181s ago: executing program 2 (id=2231): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000a40)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000800000095000000000000009500a5050000000077d8f3b423cdac8d8000000000000020e16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f68a7d06d10bfe150a7487535f7866907dc6751dfb261a0e3ccae669e173a649c1cfd6587d452d46b7c57d77578f4c35235138d5521f9453559c3421eed73d5661cfeecf9c66c54c3b3ffe1b4ce25d7c983c044c03bf3ff03fe3e26e7a23129d6606fd28a7f9105f82317874b33d96b39fa4e045469989d552af6200000003a00000000000000abecc2f4a3799af2551ce935b0f327cb3f011a7d06602e2fd5234712596b696418f1623ed38ae89d24e14b40234756ddcebfba2f87925bfacba83109753f543ad027edd68149ee99eebc6f7d6dd4aed4afe1f44ccb19e810879b70a70900000000000000000000d7900a820b6327944e9a217b9800e02a92895614cd50cbf83a1ed25268816b004519c9c5cff097d8000000000009d27d753a30a147b24a48435bd8a568669596e9e08679b3ce48e90defb6670c3d6209000000c773713a66b223fa8b148871c8d31d24000025449f106b99893ed20fa7a050fbbef90327e827e513e9606800000000e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e69ee52b59d13182e1f24ed208ada12f7a1525320e71666f472a972d5eb1affb87ba55b2d72078e9f40b4ae7dc3b2aeb0d11cd22c35d32940f19dff00ffffffff080000ff003853e59de7621e348955735264f34b1046a1813668297a7edad187ef106ae7fcbb25090f17d0baadeb8ae190a1fb5a315f8347fb0379659500000000000000000000000000000000000000002fdf0193ec79c90ed210ebc2fbed6d4216770c1b0dec886b388d138c2b69c6aacb714e7264093061c660a5100b7cc165889eb94c8d7c77b6fa06f1a4d8e4a6b6cb37e319c5c22f276b03cae853f42b07ca0b03b1eb32a6b1a81cd511fd0b59d57a11c6a3ebf9731464ad21f07f618efc31023ac60007426162b57e803519954d7c952197b0a508c0e16fda392fa84be38e937d36af1c35138e05a9e8d6dc0272de72c41500000000304402e22af23437126f330f8eb4075daaeae3134ece35cd86d95bd9836bd186c4b6565e967a4e3e86f299b7400994ba136b4eccf3b0f001a266c0d160b3ce1182001d64b52a5ce7f506295d59eea6903b84ffbabf5a5b91c1d6ecce8728a224aec66c610e3becd60a35e848c224f8251947eed20e2b612cb099bfe8924d33ba7f0691fed04a43e9c64b7a1e3165e86cdb9871c678a6bbb14821f441c6c14d1bd78d8ffdfea12c19ea04264335d60b6b7a7da6fb83f33101db32f6ab137d943dd3c1e8db9f3e1263573dc721ae82fe0bc63598751a5092c9f7dbfc39d564834e3703492c2a651643d8ce5c36d97a4812cf73fc8ea0d6"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0xb) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r2, 0x0) write$selinux_load(r1, &(0x7f0000000000)=ANY=[], 0x44f0) 1.213224602s ago: executing program 6 (id=2232): r0 = io_uring_setup(0x4822, &(0x7f0000000180)={0x0, 0x0, 0x40}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES8=r4], 0x20}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd, 0xd, 0x2, [@datasec={0x6, 0x0, 0x0, 0xf, 0x1, [], "8f"}]}}, 0x0, 0x2a}, 0x28) sendmsg$nl_route(r5, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x64, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x64}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000ff9000/0x4000)=nil) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x420}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) ioctl$FS_IOC_RESVSP(r8, 0x40305828, &(0x7f0000000380)={0x0, 0x2, 0x7ff, 0x2}) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xae, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r10 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x40600, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r10, 0x89f1, &(0x7f0000000340)={'sit0\x00', &(0x7f0000000300)={'erspan0\x00', 0x0, 0x8, 0x8000, 0x3, 0x10000, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x66, 0x0, 0xa1, 0x4, 0x0, @remote, @remote}}}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r1, &(0x7f0000000140), &(0x7f0000000040)=@tcp6=r2}, 0x20) recvmmsg(r2, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000b40)=[{0x0}], 0x1}}], 0x2, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.151074528s ago: executing program 0 (id=2233): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x9) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') preadv(r3, &(0x7f00000000c0)=[{&(0x7f0000000640)=""/4112, 0x1010}], 0x1, 0x4000, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000000000000b704000008"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_mreq(r5, 0x29, 0x8, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r6, 0x26, &(0x7f00000001c0)={0x1, 0x1, 0x10000000000000a, 0x10000}) fcntl$lock(r6, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x2f, 0x9}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x182800, 0x0) ioctl$RTC_AIE_ON(r7, 0x7001) ioctl$RTC_UIE_ON(r7, 0x7003) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={0xffffffffffffffff, 0xffff0000, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r8, 0x0, 0x2a, &(0x7f00000006c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r8, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="020000000000000002000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000"], 0x110) ioctl$RTC_AIE_OFF(r7, 0x7002) 1.150711658s ago: executing program 2 (id=2234): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x9) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') preadv(r3, &(0x7f00000000c0)=[{&(0x7f0000000640)=""/4112, 0x1010}], 0x1, 0x4000, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000000000000b704000008"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_mreq(r5, 0x29, 0x8, 0x0, &(0x7f0000000800)) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r6, 0x26, &(0x7f00000001c0)={0x1, 0x1, 0x10000000000000a, 0x10000}) fcntl$lock(r6, 0x26, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x182800, 0x0) ioctl$RTC_AIE_ON(r7, 0x7001) ioctl$RTC_UIE_ON(r7, 0x7003) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={0xffffffffffffffff, 0xffff0000, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r8, 0x0, 0x2a, &(0x7f00000006c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r8, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="020000000000000002000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000"], 0x110) ioctl$RTC_AIE_OFF(r7, 0x7002) 1.147296238s ago: executing program 6 (id=2235): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x5031, 0xffffffffffffffff, 0xc2dcc000) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) 357.525075ms ago: executing program 6 (id=2236): writev(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="b9ff03076844268cb89e14f005dd1be0ffff00fe3a21632f77fbac14141de007031762079f4b4d2f87e5feca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0x8, 0x60000000}, 0x1e) 329.591018ms ago: executing program 0 (id=2237): bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x314, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0x0, [{{0x9, 0x4, 0x0, 0x9, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x0, 0x0, 0x62}}}}}]}}]}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000580)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r1}, 0x10) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000400)=ANY=[@ANYBLOB="00030201"], 0x0, 0x0, 0x0, 0x0}, 0x0) 301.789341ms ago: executing program 6 (id=2238): r0 = io_uring_setup(0x4822, &(0x7f0000000180)={0x0, 0x0, 0x40}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES8=r4], 0x20}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd, 0xd, 0x2, [@datasec={0x6, 0x0, 0x0, 0xf, 0x1, [], "8f"}]}}, 0x0, 0x2a}, 0x28) sendmsg$nl_route(r5, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x64, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x64}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000ff9000/0x4000)=nil) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x420}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) ioctl$FS_IOC_RESVSP(r8, 0x40305828, &(0x7f0000000380)={0x0, 0x2, 0x7ff, 0x2}) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xae, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x40600, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000340)={'sit0\x00', &(0x7f0000000300)={'erspan0\x00', 0x0, 0x8, 0x8000, 0x3, 0x10000, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x66, 0x0, 0xa1, 0x4, 0x0, @remote, @remote}}}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r1, &(0x7f0000000140), &(0x7f0000000040)=@tcp6=r2}, 0x20) recvmmsg(r2, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000780)=""/71, 0x47}], 0x1}}], 0x2, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 300.75179ms ago: executing program 2 (id=2239): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x9) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') preadv(r3, &(0x7f00000000c0)=[{&(0x7f0000000640)=""/4112, 0x1010}], 0x1, 0x4000, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000000000000b704000008"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_mreq(r5, 0x29, 0x8, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r6, 0x26, &(0x7f00000001c0)={0x1, 0x1, 0x10000000000000a, 0x10000}) fcntl$lock(r6, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x2f, 0x9}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x182800, 0x0) ioctl$RTC_AIE_ON(r7, 0x7001) ioctl$RTC_UIE_ON(r7, 0x7003) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={0xffffffffffffffff, 0xffff0000, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r8, 0x0, 0x2a, &(0x7f00000006c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r8, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="020000000000000002000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000"], 0x110) ioctl$RTC_AIE_OFF(r7, 0x7002) 0s ago: executing program 6 (id=2240): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x9) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') preadv(r3, &(0x7f00000000c0)=[{&(0x7f0000000640)=""/4112, 0x1010}], 0x1, 0x4000, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="0000000000000000b704000008"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_mreq(r4, 0x29, 0x8, 0x0, &(0x7f0000000800)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r5, 0x26, &(0x7f00000001c0)={0x1, 0x1, 0x10000000000000a, 0x10000}) fcntl$lock(r5, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x2f, 0x9}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x182800, 0x0) ioctl$RTC_AIE_ON(r6, 0x7001) ioctl$RTC_UIE_ON(r6, 0x7003) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={0xffffffffffffffff, 0xffff0000, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, &(0x7f00000006c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r7, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="020000000000000002000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000"], 0x110) ioctl$RTC_AIE_OFF(r6, 0x7002) kernel console output (not intermixed with test programs): 58.624659][ T292] usb 1-1: SerialNumber: syz [ 158.634511][ T292] usb 1-1: config 0 descriptor?? [ 158.682829][ T292] smsc75xx v1.0.0 [ 158.942644][ T20] usb 6-1: config index 0 descriptor too short (expected 39, got 27) [ 158.959529][ T20] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 159.094764][ T3877] loop3: detected capacity change from 0 to 128 [ 159.162464][ T20] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 159.171724][ T20] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 159.180151][ T20] usb 6-1: Product: syz [ 159.184742][ T20] usb 6-1: Manufacturer: syz [ 159.189473][ T20] usb 6-1: SerialNumber: syz [ 159.198528][ T20] usb 6-1: config 0 descriptor?? [ 159.242820][ T20] hub 6-1:0.0: bad descriptor, ignoring hub [ 159.249049][ T20] hub: probe of 6-1:0.0 failed with error -5 [ 159.263425][ T20] snd-usb-audio: probe of 6-1:0.0 failed with error -22 [ 159.267045][ T3880] futex_wake_op: syz.3.1264 tries to shift op by 36; fix this program [ 159.291996][ T3882] futex_wake_op: syz.3.1265 tries to shift op by 36; fix this program [ 159.343138][ T3888] loop4: detected capacity change from 0 to 128 [ 159.351627][ T3890] loop3: detected capacity change from 0 to 128 [ 159.518726][ T3897] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 159.546761][ T3897] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 159.571971][ T3903] loop4: detected capacity change from 0 to 128 [ 159.572495][ T292] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 159.589138][ T292] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 159.612491][ T292] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 159.622658][ T39] usb 6-1: USB disconnect, device number 5 [ 159.623726][ T292] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 159.642298][ T292] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 159.659090][ T292] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 159.668794][ T292] smsc75xx: probe of 1-1:0.184 failed with error -71 [ 159.682430][ T3907] binfmt_misc: register: failed to install interpreter file ./file0 [ 159.690520][ T292] usb 1-1: USB disconnect, device number 10 [ 159.727934][ T3909] futex_wake_op: syz.3.1276 tries to shift op by 36; fix this program [ 159.764310][ T30] audit: type=1326 audit(1761162883.652:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3913 comm="syz.3.1278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f870683ffc9 code=0x7ffc0000 [ 159.795058][ T30] audit: type=1326 audit(1761162883.652:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3913 comm="syz.3.1278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7f870683ffc9 code=0x7ffc0000 [ 159.822532][ T30] audit: type=1326 audit(1761162883.652:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3913 comm="syz.3.1278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f870683ffc9 code=0x7ffc0000 [ 159.846523][ T30] audit: type=1326 audit(1761162883.672:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3913 comm="syz.3.1278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f870683ffc9 code=0x7ffc0000 [ 159.870287][ T388] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 159.879130][ T3918] loop4: detected capacity change from 0 to 128 [ 159.891411][ T30] audit: type=1400 audit(1761162883.772:318): avc: denied { mount } for pid=3919 comm="syz.3.1281" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 159.913619][ T30] audit: type=1400 audit(1761162883.772:319): avc: denied { remount } for pid=3919 comm="syz.3.1281" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 159.933900][ T30] audit: type=1400 audit(1761162883.802:320): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 160.252710][ T388] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 160.322255][ T388] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 160.356860][ T388] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 160.367402][ T388] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.376305][ T388] usb 3-1: config 0 descriptor?? [ 160.400280][ T3933] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1286'. [ 160.409420][ T3933] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1286'. [ 160.418986][ T388] hub 3-1:0.0: USB hub found [ 160.722579][ T388] hub 3-1:0.0: 1 port detected [ 160.802542][ T3948] loop3: detected capacity change from 0 to 512 [ 160.803173][ T30] audit: type=1400 audit(1761162884.682:321): avc: denied { connect } for pid=3945 comm="syz.0.1291" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 160.962424][ T292] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 161.122417][ T20] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 161.153565][ T388] usb 3-1: USB disconnect, device number 13 [ 161.212433][ T292] usb 5-1: Using ep0 maxpacket: 8 [ 161.292671][ T30] audit: type=1326 audit(1761162885.182:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3968 comm="syz.3.1301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f870683ffc9 code=0x7ffc0000 [ 161.316326][ T30] audit: type=1326 audit(1761162885.182:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3968 comm="syz.3.1301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7f870683ffc9 code=0x7ffc0000 [ 161.340182][ T292] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 161.351481][ T292] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 161.361538][ T292] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 161.374756][ T292] usb 5-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00 [ 161.383996][ T20] usb 1-1: Using ep0 maxpacket: 16 [ 161.389368][ T292] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.398417][ T292] usb 5-1: config 0 descriptor?? [ 161.507976][ T20] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 161.519609][ T20] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 161.530080][ T20] usb 1-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 161.539364][ T20] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.570382][ T20] usb 1-1: config 0 descriptor?? [ 161.736470][ T3979] loop2: detected capacity change from 0 to 512 [ 161.873314][ T292] logitech 0003:046D:C293.001D: unknown main item tag 0x0 [ 161.880684][ T292] logitech 0003:046D:C293.001D: unknown main item tag 0x0 [ 161.888152][ T292] logitech 0003:046D:C293.001D: unknown main item tag 0x0 [ 162.152729][ T20] hid-picolcd 0003:04D8:F002.001E: unknown main item tag 0x0 [ 162.160305][ T292] logitech 0003:046D:C293.001D: unknown main item tag 0x0 [ 162.167785][ T20] hid-picolcd 0003:04D8:F002.001E: unknown main item tag 0x0 [ 162.175677][ T20] hid-picolcd 0003:04D8:F002.001E: unknown main item tag 0x0 [ 162.183306][ T292] logitech 0003:046D:C293.001D: hidraw0: USB HID v0.00 Device [HID 046d:c293] on usb-dummy_hcd.4-1/input0 [ 162.194679][ T20] hid-picolcd 0003:04D8:F002.001E: unknown main item tag 0x0 [ 162.202088][ T292] logitech 0003:046D:C293.001D: no inputs found [ 162.208428][ T20] hid-picolcd 0003:04D8:F002.001E: unknown main item tag 0x0 [ 162.216023][ T20] hid-picolcd 0003:04D8:F002.001E: unknown main item tag 0x0 [ 162.237720][ T292] usb 5-1: USB disconnect, device number 10 [ 162.246380][ T20] hid-picolcd 0003:04D8:F002.001E: unknown main item tag 0x0 [ 162.254500][ T20] hid-picolcd 0003:04D8:F002.001E: unknown main item tag 0x0 [ 162.261903][ T20] hid-picolcd 0003:04D8:F002.001E: unknown main item tag 0x0 [ 162.269410][ T20] hid-picolcd 0003:04D8:F002.001E: unknown main item tag 0x0 [ 162.277541][ T20] hid-picolcd 0003:04D8:F002.001E: unknown main item tag 0x0 [ 162.352482][ T20] hid-picolcd 0003:04D8:F002.001E: No report with id 0xf3 found [ 162.360605][ T20] hid-picolcd 0003:04D8:F002.001E: No report with id 0xf4 found [ 162.387822][ T20] usb 1-1: USB disconnect, device number 11 [ 162.439254][ T3990] fido_id[3990]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 162.473455][ T39] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 162.821993][ T3994] loop2: detected capacity change from 0 to 128 [ 162.824844][ T3996] loop4: detected capacity change from 0 to 512 [ 162.837673][ T3996] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 162.846799][ T3996] EXT4-fs (loop4): invalid journal inode [ 162.852556][ T3996] EXT4-fs (loop4): can't get journal size [ 162.858912][ T3996] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 162.866950][ T3996] System zones: 1-12, 13-13 [ 162.872863][ T3996] EXT4-fs (loop4): 1 truncate cleaned up [ 162.878632][ T3996] EXT4-fs (loop4): mounted filesystem without journal. Opts: norecovery,init_itable=0x0000000000000006,debug,errors=continue,,errors=continue. Quota mode: none. [ 162.915355][ T3994] handle_bad_sector: 13157 callbacks suppressed [ 162.915371][ T3994] attempt to access beyond end of device [ 162.915371][ T3994] loop2: rw=2049, want=1041, limit=128 [ 162.938460][ T3994] attempt to access beyond end of device [ 162.938460][ T3994] loop2: rw=524288, want=369, limit=128 [ 162.953270][ T4000] loop4: detected capacity change from 0 to 512 [ 162.960591][ T3994] attempt to access beyond end of device [ 162.960591][ T3994] loop2: rw=0, want=153, limit=128 [ 162.971590][ T3994] attempt to access beyond end of device [ 162.971590][ T3994] loop2: rw=0, want=153, limit=128 [ 162.982313][ T3994] attempt to access beyond end of device [ 162.982313][ T3994] loop2: rw=0, want=153, limit=128 [ 162.993815][ T3994] attempt to access beyond end of device [ 162.993815][ T3994] loop2: rw=0, want=153, limit=128 [ 163.005151][ T3994] attempt to access beyond end of device [ 163.005151][ T3994] loop2: rw=0, want=153, limit=128 [ 163.005205][ T3994] attempt to access beyond end of device [ 163.005205][ T3994] loop2: rw=0, want=153, limit=128 [ 163.005250][ T3994] attempt to access beyond end of device [ 163.005250][ T3994] loop2: rw=0, want=153, limit=128 [ 163.005295][ T3994] attempt to access beyond end of device [ 163.005295][ T3994] loop2: rw=0, want=153, limit=128 [ 163.034033][ T4000] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 163.034120][ T4000] ext4 filesystem being mounted at /280/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 163.037052][ T4000] EXT4-fs (loop4): re-mounted. Opts: (null). Quota mode: writeback. [ 163.037739][ T4005] futex_wake_op: syz.0.1312 tries to shift op by 36; fix this program [ 163.072457][ T39] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 163.072484][ T39] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 163.130210][ T4009] loop0: detected capacity change from 0 to 128 [ 163.230172][ T4013] loop2: detected capacity change from 0 to 128 [ 163.232570][ T39] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 163.245756][ T39] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.258679][ T39] usb 6-1: Product: syz [ 163.263039][ T39] usb 6-1: Manufacturer: syz [ 163.267659][ T39] usb 6-1: SerialNumber: syz [ 163.342499][ T20] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 163.450543][ T4020] futex_wake_op: syz.0.1318 tries to shift op by 36; fix this program [ 163.462531][ T292] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 163.703657][ T20] usb 5-1: config index 0 descriptor too short (expected 39, got 27) [ 163.711853][ T20] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 163.732599][ T388] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 163.742541][ T39] usb 6-1: 0:2 : does not exist [ 163.842479][ T292] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 163.853689][ T292] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 163.863464][ T292] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 163.872432][ T438] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 163.872651][ T20] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 163.889107][ T292] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.897434][ T20] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 163.905883][ T292] usb 4-1: config 0 descriptor?? [ 163.910904][ T20] usb 5-1: Product: syz [ 163.915195][ T20] usb 5-1: Manufacturer: syz [ 163.919810][ T20] usb 5-1: SerialNumber: syz [ 163.925556][ T20] usb 5-1: config 0 descriptor?? [ 163.943115][ T292] hub 4-1:0.0: USB hub found [ 163.962886][ T20] hub 5-1:0.0: bad descriptor, ignoring hub [ 163.968896][ T20] hub: probe of 5-1:0.0 failed with error -5 [ 163.975027][ T388] usb 3-1: Using ep0 maxpacket: 16 [ 163.980833][ T20] snd-usb-audio: probe of 5-1:0.0 failed with error -22 [ 164.092483][ T388] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 164.100760][ T388] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 164.111126][ T388] usb 3-1: config 0 has no interface number 0 [ 164.157156][ T20] usb 6-1: USB disconnect, device number 6 [ 164.163214][ T292] hub 4-1:0.0: 1 port detected [ 164.272514][ T438] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 164.272543][ T388] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 164.282660][ T438] usb 1-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 164.291757][ T388] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.300765][ T438] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.309029][ T388] usb 3-1: Product: syz [ 164.321098][ T388] usb 3-1: Manufacturer: syz [ 164.321341][ T438] usb 1-1: config 0 descriptor?? [ 164.325910][ T388] usb 3-1: SerialNumber: syz [ 164.331052][ T39] usb 5-1: USB disconnect, device number 11 [ 164.336799][ T388] usb 3-1: config 0 descriptor?? [ 164.603342][ T292] usb 4-1: USB disconnect, device number 15 [ 164.622451][ T388] usb 3-1: Found UVC 0.00 device syz (046d:08f3) [ 164.628817][ T388] usb 3-1: No valid video chain found. [ 164.635933][ T388] usb 3-1: USB disconnect, device number 14 [ 164.712571][ T4033] futex_wake_op: syz.5.1323 tries to shift op by 36; fix this program [ 164.743626][ T4037] futex_wake_op: syz.5.1326 tries to shift op by 36; fix this program [ 165.042644][ T438] zydacron 0003:13EC:0006.001F: unknown main item tag 0x0 [ 165.050580][ T438] zydacron 0003:13EC:0006.001F: hidraw0: USB HID v0.01 Device [HID 13ec:0006] on usb-dummy_hcd.0-1/input0 [ 165.063540][ T438] usb 1-1: USB disconnect, device number 12 [ 165.076047][ T4042] loop5: detected capacity change from 0 to 128 [ 165.099284][ T4044] fido_id[4044]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 165.150227][ T4046] loop2: detected capacity change from 0 to 128 [ 165.166103][ T4048] loop3: detected capacity change from 0 to 512 [ 165.389127][ T4064] futex_wake_op: syz.2.1336 tries to shift op by 36; fix this program [ 165.892521][ T438] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 165.902105][ T4081] loop0: detected capacity change from 0 to 512 [ 165.921595][ T4083] loop4: detected capacity change from 0 to 512 [ 166.238303][ T4092] futex_wake_op: syz.3.1348 tries to shift op by 36; fix this program [ 166.295615][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 166.295630][ T30] audit: type=1400 audit(1761162890.182:334): avc: denied { map } for pid=4100 comm="syz.2.1351" path="socket:[28681]" dev="sockfs" ino=28681 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 166.352489][ T438] usb 6-1: Using ep0 maxpacket: 32 [ 166.370345][ T30] audit: type=1400 audit(1761162890.212:335): avc: denied { read } for pid=4100 comm="syz.2.1351" path="socket:[28681]" dev="sockfs" ino=28681 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 166.417595][ T4111] loop0: detected capacity change from 0 to 512 [ 166.439631][ T4113] loop3: detected capacity change from 0 to 512 [ 166.526508][ T4121] loop4: detected capacity change from 0 to 128 [ 166.532503][ T438] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 166.544621][ T4113] EXT4-fs (loop3): Test dummy encryption mode enabled [ 166.551436][ T438] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 166.564679][ T4113] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 166.571116][ T438] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 166.584451][ T438] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.595869][ T4113] EXT4-fs (loop3): 1 truncate cleaned up [ 166.601571][ T4113] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption=v1,resgid=0x0000000000000000,,errors=continue. Quota mode: none. [ 166.617806][ T4125] futex_wake_op: syz.2.1360 tries to shift op by 36; fix this program [ 166.621548][ T438] usb 6-1: config 0 descriptor?? [ 166.665304][ T438] hub 6-1:0.0: USB hub found [ 166.691613][ T4129] loop3: detected capacity change from 0 to 128 [ 166.846412][ T4133] loop4: detected capacity change from 0 to 512 [ 166.860003][ T4135] loop3: detected capacity change from 0 to 1024 [ 166.882474][ T438] hub 6-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 166.948605][ T4135] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 166.959576][ T4135] ext4 filesystem being mounted at /304/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 166.965191][ T26] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 166.981225][ T4135] EXT4-fs (loop3): Online resizing not supported with bigalloc [ 167.086949][ T4147] futex_wake_op: syz.4.1367 tries to shift op by 36; fix this program [ 167.115415][ T4150] loop4: detected capacity change from 0 to 128 [ 167.143665][ T4156] futex_wake_op: syz.3.1372 tries to shift op by 36; fix this program [ 167.188468][ T4160] loop3: detected capacity change from 0 to 128 [ 167.305977][ T4163] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1375'. [ 167.325450][ T438] hid-generic 0003:046D:C31C.0020: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.5-1/input0 [ 167.362527][ T26] usb 3-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 167.371797][ T4167] loop0: detected capacity change from 0 to 512 [ 167.385787][ T26] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 167.738741][ T4178] futex_wake_op: syz.4.1380 tries to shift op by 36; fix this program [ 167.820963][ T4180] futex_wake_op: syz.4.1381 tries to shift op by 36; fix this program [ 167.876353][ T4187] futex_wake_op: syz.4.1384 tries to shift op by 36; fix this program [ 167.884750][ T292] usb 6-1: USB disconnect, device number 7 [ 167.907535][ T4189] loop4: detected capacity change from 0 to 128 [ 167.912441][ T388] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 167.932515][ T26] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 167.941670][ T26] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.950260][ T26] usb 3-1: Product: syz [ 167.954244][ T4189] FAT-fs (loop4): Unrecognized mount option "0xffffffffffffffff01777777777777777777777=d̞ YS38`" or missing value [ 167.957826][ T26] usb 3-1: Manufacturer: syz [ 167.973005][ T26] usb 3-1: SerialNumber: syz [ 168.519445][ T4197] loop5: detected capacity change from 0 to 128 [ 168.552764][ T26] usb 3-1: 0:2 : does not exist [ 168.644212][ T4197] handle_bad_sector: 17340 callbacks suppressed [ 168.644231][ T4197] attempt to access beyond end of device [ 168.644231][ T4197] loop5: rw=2049, want=1041, limit=128 [ 168.668097][ T4197] attempt to access beyond end of device [ 168.668097][ T4197] loop5: rw=524288, want=369, limit=128 [ 168.679651][ T4197] attempt to access beyond end of device [ 168.679651][ T4197] loop5: rw=0, want=153, limit=128 [ 168.690363][ T4197] attempt to access beyond end of device [ 168.690363][ T4197] loop5: rw=0, want=153, limit=128 [ 168.701107][ T4197] attempt to access beyond end of device [ 168.701107][ T4197] loop5: rw=0, want=153, limit=128 [ 168.712047][ T4197] attempt to access beyond end of device [ 168.712047][ T4197] loop5: rw=0, want=153, limit=128 [ 168.723092][ T4197] attempt to access beyond end of device [ 168.723092][ T4197] loop5: rw=0, want=153, limit=128 [ 168.734063][ T4197] attempt to access beyond end of device [ 168.734063][ T4197] loop5: rw=0, want=153, limit=128 [ 168.745011][ T4197] attempt to access beyond end of device [ 168.745011][ T4197] loop5: rw=0, want=153, limit=128 [ 168.745116][ T4197] attempt to access beyond end of device [ 168.745116][ T4197] loop5: rw=0, want=153, limit=128 [ 168.762494][ T388] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.786001][ T388] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 168.800526][ T388] usb 1-1: New USB device found, idVendor=09da, idProduct=0006, bcdDevice= 0.00 [ 168.810034][ T388] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.822090][ T388] usb 1-1: config 0 descriptor?? [ 169.193151][ T26] usb 3-1: USB disconnect, device number 15 [ 169.265397][ T4219] loop4: detected capacity change from 0 to 128 [ 169.303377][ T388] a4tech 0003:09DA:0006.0021: unknown main item tag 0x0 [ 169.310469][ T388] a4tech 0003:09DA:0006.0021: unexpected long global item [ 169.318432][ T388] a4tech 0003:09DA:0006.0021: parse failed [ 169.330573][ T388] a4tech: probe of 0003:09DA:0006.0021 failed with error -22 [ 169.402806][ T378] udevd[378]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 169.505837][ T388] usb 1-1: USB disconnect, device number 13 [ 171.456057][ T4232] loop3: detected capacity change from 0 to 128 [ 171.483684][ T4232] FAT-fs (loop3): Unrecognized mount option "0xffffffffffffffff01777777777777777777777=d̞ YS38`" or missing value [ 171.487673][ T4231] loop4: detected capacity change from 0 to 128 [ 171.521306][ T4236] futex_atomic_op_inuser: 3 callbacks suppressed [ 171.521325][ T4236] futex_wake_op: syz.5.1404 tries to shift op by 36; fix this program [ 171.551321][ T4239] futex_wake_op: syz.5.1405 tries to shift op by 36; fix this program [ 171.586077][ T4241] futex_wake_op: syz.5.1406 tries to shift op by 36; fix this program [ 171.693999][ T4248] loop0: detected capacity change from 0 to 128 [ 172.204743][ T4260] loop0: detected capacity change from 0 to 512 [ 173.036728][ T4269] futex_wake_op: syz.4.1415 tries to shift op by 36; fix this program [ 173.044466][ T4267] loop2: detected capacity change from 0 to 128 [ 173.049390][ T4271] futex_wake_op: syz.5.1416 tries to shift op by 36; fix this program [ 173.118942][ T30] audit: type=1326 audit(1761162896.972:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4273 comm="syz.5.1417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff197aa1fc9 code=0x7ffc0000 [ 173.162443][ T30] audit: type=1326 audit(1761162896.972:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4273 comm="syz.5.1417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=109 compat=0 ip=0x7ff197aa1fc9 code=0x7ffc0000 [ 173.222408][ T30] audit: type=1326 audit(1761162896.972:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4273 comm="syz.5.1417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff197aa1fc9 code=0x7ffc0000 [ 173.278776][ T4286] syz.3.1421[4286] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 173.278859][ T4286] syz.3.1421[4286] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 173.291855][ T30] audit: type=1326 audit(1761162897.132:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4282 comm="syz.3.1420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f870683ffc9 code=0x7ffc0000 [ 173.345813][ T30] audit: type=1326 audit(1761162897.132:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4282 comm="syz.3.1420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f870683ffc9 code=0x7ffc0000 [ 173.373582][ T4289] loop3: detected capacity change from 0 to 128 [ 173.398283][ T30] audit: type=1326 audit(1761162897.132:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4282 comm="syz.3.1420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f870683ffc9 code=0x7ffc0000 [ 173.422890][ T30] audit: type=1326 audit(1761162897.132:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4282 comm="syz.3.1420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f870683ffc9 code=0x7ffc0000 [ 173.484307][ T30] audit: type=1326 audit(1761162897.132:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4282 comm="syz.3.1420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f870683ffc9 code=0x7ffc0000 [ 173.526783][ T4295] loop3: detected capacity change from 0 to 1024 [ 173.540087][ T4277] syz.4.1418 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 173.601630][ T4295] EXT4-fs (loop3): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,delalloc,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none. [ 173.669173][ T4295] ext4 filesystem being mounted at /320/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 173.791576][ T4306] loop0: detected capacity change from 0 to 128 [ 173.793370][ T4307] futex_wake_op: syz.2.1428 tries to shift op by 36; fix this program [ 174.163902][ T4306] handle_bad_sector: 5850 callbacks suppressed [ 174.163922][ T4306] attempt to access beyond end of device [ 174.163922][ T4306] loop0: rw=2049, want=481, limit=128 [ 174.185278][ T4306] attempt to access beyond end of device [ 174.185278][ T4306] loop0: rw=524288, want=369, limit=128 [ 174.198599][ T4306] attempt to access beyond end of device [ 174.198599][ T4306] loop0: rw=0, want=153, limit=128 [ 174.201087][ T4315] loop2: detected capacity change from 0 to 128 [ 174.211006][ T4306] attempt to access beyond end of device [ 174.211006][ T4306] loop0: rw=0, want=153, limit=128 [ 174.229058][ T4306] attempt to access beyond end of device [ 174.229058][ T4306] loop0: rw=0, want=153, limit=128 [ 174.240210][ T4306] attempt to access beyond end of device [ 174.240210][ T4306] loop0: rw=0, want=153, limit=128 [ 174.251215][ T4312] attempt to access beyond end of device [ 174.251215][ T4312] loop0: rw=0, want=153, limit=128 [ 174.262823][ T4306] attempt to access beyond end of device [ 174.262823][ T4306] loop0: rw=0, want=153, limit=128 [ 174.264000][ T4315] attempt to access beyond end of device [ 174.264000][ T4315] loop2: rw=2049, want=1041, limit=128 [ 174.274048][ T4312] attempt to access beyond end of device [ 174.274048][ T4312] loop0: rw=0, want=153, limit=128 [ 174.372029][ T4320] loop5: detected capacity change from 0 to 128 [ 174.448548][ T4330] loop2: detected capacity change from 0 to 128 [ 174.618384][ T4338] loop5: detected capacity change from 0 to 512 [ 174.648661][ T4341] loop4: detected capacity change from 0 to 512 [ 174.716651][ T26] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 174.974724][ T4363] loop0: detected capacity change from 0 to 512 [ 175.002419][ T26] usb 4-1: Using ep0 maxpacket: 32 [ 175.104223][ T4363] EXT4-fs (loop0): mounted filesystem without journal. Opts: resuid=0x0000000000000000,delalloc,bsdgroups,,errors=continue. Quota mode: writeback. [ 175.122435][ T26] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 175.142703][ T26] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 175.152771][ T26] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 175.162113][ T26] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.164642][ T4363] ext4 filesystem being mounted at /304/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 175.205679][ T26] usb 4-1: config 0 descriptor?? [ 175.263004][ T26] hub 4-1:0.0: USB hub found [ 175.305470][ T4363] EXT4-fs (loop0): shut down requested (2) [ 175.426001][ T30] audit: type=1326 audit(1761162899.312:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4367 comm="syz.0.1447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd998185fc9 code=0x7ffc0000 [ 175.482596][ T26] hub 4-1:0.0: 1 port detected [ 175.511326][ T30] audit: type=1326 audit(1761162899.352:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4367 comm="syz.0.1447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd998185fc9 code=0x7ffc0000 [ 175.637379][ T4379] loop4: detected capacity change from 0 to 128 [ 175.647534][ T4381] loop2: detected capacity change from 0 to 128 [ 175.782542][ T20] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 176.065541][ T26] usb 4-1: USB disconnect, device number 16 [ 176.192484][ T20] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 176.202936][ T20] usb 1-1: config 0 has no interfaces? [ 176.208761][ T20] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 176.219463][ T20] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.245000][ T20] usb 1-1: config 0 descriptor?? [ 176.333441][ T4400] loop2: detected capacity change from 0 to 128 [ 176.680716][ T4411] loop3: detected capacity change from 0 to 512 [ 176.802435][ T39] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 176.844689][ T4419] loop2: detected capacity change from 0 to 512 [ 179.418478][ T438] usb 1-1: USB disconnect, device number 14 [ 179.440263][ T4432] loop4: detected capacity change from 0 to 128 [ 179.442390][ T39] usb 6-1: Using ep0 maxpacket: 32 [ 179.512821][ T4432] handle_bad_sector: 6770 callbacks suppressed [ 179.512849][ T4432] attempt to access beyond end of device [ 179.512849][ T4432] loop4: rw=2049, want=1041, limit=128 [ 180.128115][ T4441] attempt to access beyond end of device [ 180.128115][ T4441] loop4: rw=524288, want=369, limit=128 [ 180.287986][ T4432] attempt to access beyond end of device [ 180.287986][ T4432] loop4: rw=0, want=153, limit=128 [ 180.304775][ T4432] attempt to access beyond end of device [ 180.304775][ T4432] loop4: rw=0, want=153, limit=128 [ 180.322283][ T4441] attempt to access beyond end of device [ 180.322283][ T4441] loop4: rw=0, want=153, limit=128 [ 180.333147][ T39] usb 6-1: unable to read config index 0 descriptor/all [ 180.340390][ T39] usb 6-1: can't read configurations, error -71 [ 180.359676][ T4432] attempt to access beyond end of device [ 180.359676][ T4432] loop4: rw=0, want=153, limit=128 [ 180.542232][ T4450] loop4: detected capacity change from 0 to 32768 [ 180.567349][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 180.567364][ T30] audit: type=1400 audit(1761162904.452:352): avc: denied { bind } for pid=4462 comm="syz.3.1479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 180.578286][ T4465] loop0: detected capacity change from 0 to 512 [ 180.752429][ T39] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 180.762497][ T20] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 182.191518][ T4484] loop0: detected capacity change from 0 to 128 [ 182.210063][ T4486] loop4: detected capacity change from 0 to 512 [ 182.222299][ T4484] attempt to access beyond end of device [ 182.222299][ T4484] loop0: rw=2049, want=1041, limit=128 [ 182.242213][ T4484] attempt to access beyond end of device [ 182.242213][ T4484] loop0: rw=524288, want=369, limit=128 [ 182.383923][ T4484] attempt to access beyond end of device [ 182.383923][ T4484] loop0: rw=0, want=153, limit=128 [ 182.426125][ T39] usb 6-1: Using ep0 maxpacket: 32 [ 182.895227][ T20] usb 3-1: Using ep0 maxpacket: 16 [ 182.930257][ T4493] attempt to access beyond end of device [ 182.930257][ T4493] loop0: rw=0, want=153, limit=128 [ 183.088697][ T20] usb 3-1: config 0 has no interfaces? [ 183.094293][ T20] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 183.125193][ T20] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.146493][ T20] usb 3-1: config 0 descriptor?? [ 183.182640][ T39] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 183.199376][ T39] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 183.207458][ T4500] loop0: detected capacity change from 0 to 1024 [ 183.210070][ T39] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 183.225968][ T39] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.235205][ T39] usb 6-1: config 0 descriptor?? [ 183.252481][ T39] usb 6-1: can't set config #0, error -71 [ 183.264433][ T4503] loop5: detected capacity change from 0 to 128 [ 183.272047][ T39] usb 6-1: USB disconnect, device number 9 [ 183.290939][ T4500] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 183.363059][ T4513] loop4: detected capacity change from 0 to 512 [ 183.390221][ T4456] UDC core: couldn't find an available UDC or it's busy: -16 [ 183.399877][ T4456] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 183.410834][ T20] usb 3-1: USB disconnect, device number 16 [ 183.438200][ T292] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 183.500450][ T4520] futex_wake_op: syz.5.1494 tries to shift op by 36; fix this program [ 184.228355][ T4532] loop4: detected capacity change from 0 to 512 [ 184.272594][ T292] usb 4-1: unable to get BOS descriptor or descriptor too short [ 184.292456][ T388] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 184.322715][ T292] usb 4-1: not running at top speed; connect to a high speed hub [ 184.350839][ T4534] loop0: detected capacity change from 0 to 128 [ 184.462538][ T4538] loop5: detected capacity change from 0 to 128 [ 184.473209][ T30] audit: type=1326 audit(1761162908.362:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4542 comm="syz.2.1503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97ef13cfc9 code=0x7ffc0000 [ 184.496690][ T30] audit: type=1326 audit(1761162908.362:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4542 comm="syz.2.1503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7f97ef13cfc9 code=0x7ffc0000 [ 184.520547][ T30] audit: type=1326 audit(1761162908.362:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4542 comm="syz.2.1503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97ef13cfc9 code=0x7ffc0000 [ 184.543911][ T4534] handle_bad_sector: 3151 callbacks suppressed [ 184.543931][ T4534] attempt to access beyond end of device [ 184.543931][ T4534] loop0: rw=0, want=153, limit=128 [ 184.543975][ T4534] attempt to access beyond end of device [ 184.543975][ T4534] loop0: rw=0, want=153, limit=128 [ 184.544017][ T4534] attempt to access beyond end of device [ 184.544017][ T4534] loop0: rw=0, want=153, limit=128 [ 184.544067][ T4534] attempt to access beyond end of device [ 184.544067][ T4534] loop0: rw=0, want=153, limit=128 [ 184.561345][ T30] audit: type=1326 audit(1761162908.362:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4542 comm="syz.2.1503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97ef13cfc9 code=0x7ffc0000 [ 184.589824][ T4534] attempt to access beyond end of device [ 184.589824][ T4534] loop0: rw=0, want=153, limit=128 [ 184.595974][ T4546] loop2: detected capacity change from 0 to 512 [ 184.665640][ T4538] attempt to access beyond end of device [ 184.665640][ T4538] loop5: rw=2049, want=1041, limit=128 [ 184.674103][ T4538] attempt to access beyond end of device [ 184.674103][ T4538] loop5: rw=524288, want=369, limit=128 [ 184.674347][ T4538] attempt to access beyond end of device [ 184.674347][ T4538] loop5: rw=0, want=153, limit=128 [ 184.674406][ T4538] attempt to access beyond end of device [ 184.674406][ T4538] loop5: rw=0, want=153, limit=128 [ 184.674451][ T4538] attempt to access beyond end of device [ 184.674451][ T4538] loop5: rw=0, want=153, limit=128 [ 184.812464][ T292] usb 4-1: New USB device found, idVendor=1235, idProduct=4661, bcdDevice=ae.13 [ 184.824077][ T292] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.832187][ T292] usb 4-1: Product: syz [ 184.836417][ T292] usb 4-1: Manufacturer: syz [ 184.841023][ T292] usb 4-1: SerialNumber: syz [ 184.874324][ T4552] loop4: detected capacity change from 0 to 128 [ 184.951861][ T4558] loop5: detected capacity change from 0 to 512 [ 185.134733][ T292] snd-usb-audio: probe of 4-1:8.0 failed with error -2 [ 185.265642][ T292] usb 4-1: USB disconnect, device number 17 [ 185.363252][ T4566] loop0: detected capacity change from 0 to 256 [ 185.432940][ T4566] exfat: Bad value for 'uid' [ 185.952974][ T4574] binfmt_misc: register: failed to install interpreter file ./file0 [ 185.979861][ T4566] loop0: detected capacity change from 0 to 8192 [ 186.004959][ T30] audit: type=1400 audit(1761162909.892:357): avc: denied { write } for pid=4577 comm="syz.4.1514" name="file0" dev="tmpfs" ino=1799 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 186.377762][ T30] audit: type=1400 audit(1761162909.892:358): avc: denied { ioctl } for pid=4577 comm="syz.4.1514" path="/328/file0" dev="tmpfs" ino=1799 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 186.386252][ T4585] loop3: detected capacity change from 0 to 512 [ 186.418254][ T4589] loop4: detected capacity change from 0 to 512 [ 186.426756][ T30] audit: type=1400 audit(1761162910.302:359): avc: denied { mounton } for pid=4590 comm="syz.5.1519" path="/proc/164" dev="proc" ino=29562 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 186.462150][ T4593] futex_wake_op: syz.5.1521 tries to shift op by 36; fix this program [ 186.504070][ T4596] futex_wake_op: syz.0.1520 tries to shift op by 36; fix this program [ 186.514334][ T4598] loop5: detected capacity change from 0 to 512 [ 186.536998][ T4600] loop0: detected capacity change from 0 to 128 [ 187.982578][ T4609] futex_wake_op: syz.3.1524 tries to shift op by 36; fix this program [ 188.000954][ T4614] loop2: detected capacity change from 0 to 128 [ 188.023970][ T4612] loop4: detected capacity change from 0 to 128 [ 188.043777][ T4614] FAT-fs (loop2): Unrecognized mount option "0xffffffffffffffff01777777777777777777777=d̞ YS38`" or missing value [ 188.621756][ T4627] loop3: detected capacity change from 0 to 256 [ 188.689764][ T30] audit: type=1326 audit(1761162912.572:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4630 comm="syz.5.1532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff197aa1fc9 code=0x7ffc0000 [ 188.723611][ T4627] exfat: Bad value for 'uid' [ 188.728766][ T30] audit: type=1326 audit(1761162912.602:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4630 comm="syz.5.1532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff197aa1fc9 code=0x7ffc0000 [ 188.753376][ T30] audit: type=1326 audit(1761162912.602:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4630 comm="syz.5.1532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff197aa1fc9 code=0x7ffc0000 [ 188.777369][ T30] audit: type=1326 audit(1761162912.602:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4630 comm="syz.5.1532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff197aa1fc9 code=0x7ffc0000 [ 188.801382][ T30] audit: type=1326 audit(1761162912.602:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4630 comm="syz.5.1532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff197aa1fc9 code=0x7ffc0000 [ 188.828120][ T30] audit: type=1326 audit(1761162912.602:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4630 comm="syz.5.1532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff197aa1fc9 code=0x7ffc0000 [ 188.852644][ T30] audit: type=1326 audit(1761162912.602:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4630 comm="syz.5.1532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff197aa1fc9 code=0x7ffc0000 [ 188.965270][ T292] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 189.094515][ T292] hid-generic 0000:0000:0000.0022: hidraw0: HID v0.00 Device [syz1] on syz0 [ 189.313771][ T4627] loop3: detected capacity change from 0 to 8192 [ 189.463241][ T4648] loop3: detected capacity change from 0 to 512 [ 189.491637][ T4650] futex_wake_op: syz.0.1538 tries to shift op by 36; fix this program [ 189.568416][ T4653] loop0: detected capacity change from 0 to 128 [ 189.619201][ T4653] handle_bad_sector: 6431 callbacks suppressed [ 189.619223][ T4653] attempt to access beyond end of device [ 189.619223][ T4653] loop0: rw=2049, want=1041, limit=128 [ 189.664741][ T4653] attempt to access beyond end of device [ 189.664741][ T4653] loop0: rw=524288, want=369, limit=128 [ 189.697580][ T4653] attempt to access beyond end of device [ 189.697580][ T4653] loop0: rw=0, want=153, limit=128 [ 189.697639][ T4653] attempt to access beyond end of device [ 189.697639][ T4653] loop0: rw=0, want=153, limit=128 [ 189.697689][ T4653] attempt to access beyond end of device [ 189.697689][ T4653] loop0: rw=0, want=153, limit=128 [ 189.697737][ T4653] attempt to access beyond end of device [ 189.697737][ T4653] loop0: rw=0, want=153, limit=128 [ 189.697786][ T4653] attempt to access beyond end of device [ 189.697786][ T4653] loop0: rw=0, want=153, limit=128 [ 189.697845][ T4653] attempt to access beyond end of device [ 189.697845][ T4653] loop0: rw=0, want=153, limit=128 [ 189.697892][ T4653] attempt to access beyond end of device [ 189.697892][ T4653] loop0: rw=0, want=153, limit=128 [ 189.697939][ T4653] attempt to access beyond end of device [ 189.697939][ T4653] loop0: rw=0, want=153, limit=128 [ 190.265780][ T4681] loop0: detected capacity change from 0 to 128 [ 190.300662][ T4683] loop4: detected capacity change from 0 to 512 [ 190.313531][ T4681] FAT-fs (loop0): Unrecognized mount option "0xffffffffffffffff01777777777777777777777=d̞ YS38`" or missing value [ 190.331433][ T4685] loop3: detected capacity change from 0 to 512 [ 192.104828][ T4703] syz.2.1557[4703] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 192.104911][ T4703] syz.2.1557[4703] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 192.484258][ T4716] loop0: detected capacity change from 0 to 128 [ 192.554230][ T4718] loop2: detected capacity change from 0 to 512 [ 192.749471][ T4723] loop3: detected capacity change from 0 to 128 [ 192.813384][ T4723] FAT-fs (loop3): Unrecognized mount option "0xffffffffffffffff01777777777777777777777=d̞ YS38`" or missing value [ 193.253430][ T26] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 194.241990][ T4744] loop4: detected capacity change from 0 to 128 [ 194.311884][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 194.311900][ T30] audit: type=1400 audit(1761162918.192:382): avc: denied { mounton } for pid=4746 comm="syz.5.1571" path="/71/file0" dev="incremental-fs" ino=407 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 194.342141][ T4747] incfs: iterate_incfs_dir / -22 [ 194.372477][ T4747] incfs: iterate_incfs_dir / -22 [ 194.384606][ T4749] loop3: detected capacity change from 0 to 512 [ 194.411470][ T4751] loop2: detected capacity change from 0 to 512 [ 194.413483][ T4749] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 194.451153][ T4749] EXT4-fs (loop3): 1 truncate cleaned up [ 194.462509][ T26] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 194.474499][ T4749] EXT4-fs (loop3): mounted filesystem without journal. Opts: quota,,errors=continue. Quota mode: writeback. [ 194.475199][ T4753] loop5: detected capacity change from 0 to 128 [ 194.492421][ T26] usb 1-1: New USB device found, idVendor=0566, idProduct=3004, bcdDevice= 0.00 [ 194.501603][ T30] audit: type=1400 audit(1761162918.382:383): avc: denied { read write open } for pid=4748 comm="syz.3.1572" path="/343/bus/bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 194.501687][ T26] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.534353][ T26] usb 1-1: config 0 descriptor?? [ 194.552542][ T4732] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 194.591891][ T4761] input: syz1 as /devices/virtual/input/input27 [ 194.627181][ T4753] handle_bad_sector: 3624 callbacks suppressed [ 194.627202][ T4753] attempt to access beyond end of device [ 194.627202][ T4753] loop5: rw=524288, want=369, limit=128 [ 194.629455][ T4761] input: failed to attach handler leds to device input27, error: -6 [ 194.662501][ T4753] attempt to access beyond end of device [ 194.662501][ T4753] loop5: rw=0, want=153, limit=128 [ 194.680866][ T4763] loop4: detected capacity change from 0 to 128 [ 194.687600][ T4753] attempt to access beyond end of device [ 194.687600][ T4753] loop5: rw=0, want=153, limit=128 [ 194.708335][ T4764] attempt to access beyond end of device [ 194.708335][ T4764] loop5: rw=0, want=153, limit=128 [ 194.721165][ T4753] attempt to access beyond end of device [ 194.721165][ T4753] loop5: rw=0, want=153, limit=128 [ 194.749491][ T4764] attempt to access beyond end of device [ 194.749491][ T4764] loop5: rw=0, want=153, limit=128 [ 194.749545][ T4766] loop3: detected capacity change from 0 to 128 [ 194.764089][ T4763] attempt to access beyond end of device [ 194.764089][ T4763] loop4: rw=2049, want=1041, limit=128 [ 194.767505][ T4753] attempt to access beyond end of device [ 194.767505][ T4753] loop5: rw=0, want=153, limit=128 [ 194.833875][ T4766] attempt to access beyond end of device [ 194.833875][ T4766] loop3: rw=2049, want=1041, limit=128 [ 194.905791][ T4763] attempt to access beyond end of device [ 194.905791][ T4763] loop4: rw=524288, want=369, limit=128 [ 195.309388][ T26] monterey 0003:0566:3004.0023: unknown main item tag 0x0 [ 195.332403][ T26] monterey 0003:0566:3004.0023: item fetching failed at offset 3/5 [ 195.340655][ T26] monterey: probe of 0003:0566:3004.0023 failed with error -22 [ 195.364864][ T26] usb 1-1: USB disconnect, device number 15 [ 196.811472][ T30] audit: type=1400 audit(1761162920.692:384): avc: denied { audit_write } for pid=4798 comm="syz.3.1588" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 196.832843][ T30] audit: type=1107 audit(1761162920.692:385): pid=4798 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 196.902415][ T292] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 196.931061][ T4807] loop4: detected capacity change from 0 to 128 [ 196.993446][ T4805] loop3: detected capacity change from 0 to 32768 [ 197.121867][ T4816] loop3: detected capacity change from 0 to 128 [ 197.292769][ T292] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 197.358618][ T292] usb 3-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x7F, skipping [ 197.667359][ T292] usb 3-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 197.814413][ T4831] loop5: detected capacity change from 0 to 128 [ 197.828419][ T30] audit: type=1326 audit(1761162921.712:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4832 comm="syz.3.1600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f870683ffc9 code=0x7ffc0000 [ 197.865308][ T30] audit: type=1326 audit(1761162921.712:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4832 comm="syz.3.1600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f870683ffc9 code=0x7ffc0000 [ 197.930581][ T30] audit: type=1326 audit(1761162921.722:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4832 comm="syz.3.1600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f870683ffc9 code=0x7ffc0000 [ 197.959656][ T30] audit: type=1326 audit(1761162921.722:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4832 comm="syz.3.1600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f870683ffc9 code=0x7ffc0000 [ 197.962539][ T292] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 197.983401][ T30] audit: type=1326 audit(1761162921.722:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4832 comm="syz.3.1600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f870683ffc9 code=0x7ffc0000 [ 198.017991][ T292] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.043913][ T30] audit: type=1326 audit(1761162921.722:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4832 comm="syz.3.1600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f870683ffc9 code=0x7ffc0000 [ 198.045745][ T292] usb 3-1: Product: syz [ 198.095018][ T292] usb 3-1: Manufacturer: syz [ 198.099676][ T292] usb 3-1: SerialNumber: syz [ 198.576297][ T4855] loop4: detected capacity change from 0 to 128 [ 198.611473][ T4859] futex_wake_op: syz.3.1611 tries to shift op by 36; fix this program [ 198.655666][ T4861] loop3: detected capacity change from 0 to 128 [ 198.881644][ T4877] loop4: detected capacity change from 0 to 128 [ 198.889966][ T4874] loop3: detected capacity change from 0 to 128 [ 199.225060][ T4882] loop5: detected capacity change from 0 to 40427 [ 199.236819][ T292] cdc_ncm 3-1:1.0: bind() failure [ 199.246608][ T4893] loop4: detected capacity change from 0 to 512 [ 199.254531][ T4892] futex_wake_op: syz.3.1622 tries to shift op by 36; fix this program [ 199.265559][ T4882] F2FS-fs (loop5): fault_injection options not supported [ 199.272835][ T292] cdc_ncm: probe of 3-1:1.1 failed with error -71 [ 199.280410][ T4882] F2FS-fs (loop5): invalid crc value [ 199.288049][ T4882] F2FS-fs (loop5): Found nat_bits in checkpoint [ 199.292539][ T292] cdc_mbim: probe of 3-1:1.1 failed with error -71 [ 199.308046][ T292] usb 3-1: USB disconnect, device number 18 [ 199.329203][ T4882] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 199.602474][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 199.602555][ T30] audit: type=1400 audit(1761162923.402:418): avc: denied { append } for pid=4881 comm="syz.5.1619" path="/80/file1/net_prio.prioidx" dev="loop5" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 199.698464][ T3456] handle_bad_sector: 11983 callbacks suppressed [ 199.698485][ T3456] attempt to access beyond end of device [ 199.698485][ T3456] loop5: rw=2049, want=45104, limit=40427 [ 200.011789][ T4923] futex_wake_op: syz.5.1628 tries to shift op by 36; fix this program [ 200.139253][ T4925] loop5: detected capacity change from 0 to 128 [ 200.287981][ T4925] attempt to access beyond end of device [ 200.287981][ T4925] loop5: rw=2049, want=1041, limit=128 [ 200.315307][ T4925] attempt to access beyond end of device [ 200.315307][ T4925] loop5: rw=524288, want=369, limit=128 [ 200.326833][ T4925] attempt to access beyond end of device [ 200.326833][ T4925] loop5: rw=0, want=153, limit=128 [ 200.339316][ T4925] attempt to access beyond end of device [ 200.339316][ T4925] loop5: rw=0, want=153, limit=128 [ 200.350360][ T4925] attempt to access beyond end of device [ 200.350360][ T4925] loop5: rw=0, want=153, limit=128 [ 200.361654][ T4925] attempt to access beyond end of device [ 200.361654][ T4925] loop5: rw=0, want=153, limit=128 [ 200.373064][ T4925] attempt to access beyond end of device [ 200.373064][ T4925] loop5: rw=0, want=153, limit=128 [ 200.392928][ T4931] attempt to access beyond end of device [ 200.392928][ T4931] loop5: rw=0, want=153, limit=128 [ 200.412589][ T4933] futex_wake_op: syz.3.1635 tries to shift op by 36; fix this program [ 200.421426][ T4925] attempt to access beyond end of device [ 200.421426][ T4925] loop5: rw=0, want=153, limit=128 [ 200.463961][ T4937] loop3: detected capacity change from 0 to 128 [ 200.774953][ T4951] futex_wake_op: syz.2.1642 tries to shift op by 36; fix this program [ 200.799230][ T4953] loop3: detected capacity change from 0 to 128 [ 201.132256][ T4967] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 201.211274][ T4968] futex_wake_op: syz.0.1647 tries to shift op by 36; fix this program [ 201.232978][ T30] audit: type=1400 audit(1761162925.122:419): avc: denied { mount } for pid=4969 comm="syz.0.1649" name="/" dev="ramfs" ino=31927 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 202.168661][ T4981] loop2: detected capacity change from 0 to 128 [ 202.180372][ T4983] futex_wake_op: syz.5.1653 tries to shift op by 36; fix this program [ 202.299496][ T4989] loop4: detected capacity change from 0 to 512 [ 202.305945][ T20] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 202.323516][ T4990] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1655'. [ 202.416141][ T4996] futex_wake_op: syz.0.1659 tries to shift op by 36; fix this program [ 202.445210][ T30] audit: type=1400 audit(1761162926.332:420): avc: denied { bind } for pid=4997 comm="syz.0.1660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 202.510775][ T30] audit: type=1400 audit(1761162926.382:421): avc: denied { unlink } for pid=5003 comm="syz.0.1661" name="#1" dev="tmpfs" ino=1918 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 203.182528][ T20] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 203.331682][ T20] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 203.379854][ T5014] loop4: detected capacity change from 0 to 512 [ 203.409530][ T20] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 203.419509][ T20] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.428424][ T20] usb 4-1: config 0 descriptor?? [ 203.455307][ T5014] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 203.493062][ T5014] ext4 filesystem being mounted at /356/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 203.646349][ T5014] EXT4-fs error (device loop4): ext4_do_update_inode:5235: inode #2: comm syz.4.1665: corrupted inode contents [ 203.735961][ T5014] EXT4-fs error (device loop4): ext4_dirty_inode:6071: inode #2: comm syz.4.1665: mark_inode_dirty error [ 203.750708][ T5014] EXT4-fs error (device loop4): ext4_do_update_inode:5235: inode #2: comm syz.4.1665: corrupted inode contents [ 203.764394][ T5014] EXT4-fs error (device loop4): __ext4_ext_dirty:183: inode #2: comm syz.4.1665: mark_inode_dirty error [ 203.778255][ T30] audit: type=1400 audit(1761162927.662:422): avc: denied { write } for pid=5013 comm="syz.4.1665" name="file1" dev="loop4" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 203.800345][ T30] audit: type=1400 audit(1761162927.662:423): avc: denied { add_name } for pid=5013 comm="syz.4.1665" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 203.821185][ T30] audit: type=1400 audit(1761162927.662:424): avc: denied { reparent } for pid=5013 comm="syz.4.1665" name="file0" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 203.843613][ T30] audit: type=1400 audit(1761162927.662:425): avc: denied { remove_name } for pid=5013 comm="syz.4.1665" name="file2" dev="loop4" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 203.866006][ T30] audit: type=1400 audit(1761162927.662:426): avc: denied { unlink } for pid=5013 comm="syz.4.1665" name="file2" dev="loop4" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 203.888055][ T30] audit: type=1400 audit(1761162927.662:427): avc: denied { rename } for pid=5013 comm="syz.4.1665" name="file2" dev="loop4" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 203.899455][ T5041] loop4: detected capacity change from 0 to 512 [ 203.943423][ T20] lua 0003:1E7D:2C2E.0024: unknown main item tag 0x0 [ 203.952531][ T20] lua 0003:1E7D:2C2E.0024: unknown main item tag 0x0 [ 203.959284][ T20] lua 0003:1E7D:2C2E.0024: unknown main item tag 0x0 [ 203.975579][ T20] lua 0003:1E7D:2C2E.0024: unknown main item tag 0x0 [ 203.982709][ T20] lua 0003:1E7D:2C2E.0024: unknown main item tag 0x0 [ 203.990306][ T20] lua 0003:1E7D:2C2E.0024: hidraw0: USB HID v0.00 Device [HID 1e7d:2c2e] on usb-dummy_hcd.3-1/input0 [ 204.115129][ T5058] loop5: detected capacity change from 0 to 256 [ 204.134791][ T5058] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 204.145838][ T5058] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 204.158275][ T20] usb 4-1: USB disconnect, device number 18 [ 204.159261][ T5058] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 204.355766][ T5068] input: syz1 as /devices/virtual/input/input28 [ 204.830049][ T5086] incfs: Options parsing error. -22 [ 204.835831][ T5086] incfs: mount failed -22 [ 205.348961][ T5115] futex_wake_op: syz.3.1699 tries to shift op by 36; fix this program [ 205.359080][ T5118] loop5: detected capacity change from 0 to 128 [ 205.448358][ T5118] handle_bad_sector: 4024 callbacks suppressed [ 205.448376][ T5118] attempt to access beyond end of device [ 205.448376][ T5118] loop5: rw=2049, want=1041, limit=128 [ 205.462432][ T26] Bluetooth: hci0: command 0x1003 tx timeout [ 205.471804][ T5027] Bluetooth: hci0: sending frame failed (-49) [ 205.474243][ T5118] attempt to access beyond end of device [ 205.474243][ T5118] loop5: rw=524288, want=369, limit=128 [ 205.489389][ T5118] attempt to access beyond end of device [ 205.489389][ T5118] loop5: rw=0, want=153, limit=128 [ 205.500640][ T5118] attempt to access beyond end of device [ 205.500640][ T5118] loop5: rw=0, want=153, limit=128 [ 205.511557][ T5118] attempt to access beyond end of device [ 205.511557][ T5118] loop5: rw=0, want=153, limit=128 [ 205.522486][ T5118] attempt to access beyond end of device [ 205.522486][ T5118] loop5: rw=0, want=153, limit=128 [ 205.533649][ T5118] attempt to access beyond end of device [ 205.533649][ T5118] loop5: rw=0, want=153, limit=128 [ 205.555155][ T5123] attempt to access beyond end of device [ 205.555155][ T5123] loop5: rw=0, want=153, limit=128 [ 205.566141][ T5118] attempt to access beyond end of device [ 205.566141][ T5118] loop5: rw=0, want=153, limit=128 [ 205.577670][ T5123] attempt to access beyond end of device [ 205.577670][ T5123] loop5: rw=0, want=153, limit=128 [ 205.652390][ T438] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 205.674948][ T5126] loop5: detected capacity change from 0 to 128 [ 205.712824][ T5126] FAT-fs (loop5): Unrecognized mount option "0xffffffffffffffff01777777777777777777777=d̞ YS38`" or missing value [ 206.092666][ T438] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 206.109632][ T438] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 206.119113][ T438] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.131931][ T438] usb 4-1: config 0 descriptor?? [ 206.172458][ T5120] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 206.908431][ T438] hid-generic 0003:04F3:0755.0025: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.3-1/input0 [ 206.926657][ T438] usb 4-1: USB disconnect, device number 19 [ 206.951226][ T5151] fido_id[5151]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 207.061525][ T5156] futex_wake_op: syz.0.1712 tries to shift op by 36; fix this program [ 207.352444][ T20] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 207.544493][ T26] Bluetooth: hci0: command 0x1001 tx timeout [ 207.550555][ T5027] Bluetooth: hci0: sending frame failed (-49) [ 207.712779][ T20] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 207.767545][ T20] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 207.799102][ T5186] futex_wake_op: syz.3.1725 tries to shift op by 36; fix this program [ 207.807463][ T20] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 207.854152][ T20] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 207.858887][ T438] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 207.877022][ T20] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.886678][ T20] usb 6-1: config 0 descriptor?? [ 208.343640][ T20] plantronics 0003:047F:FFFF.0026: No inputs registered, leaving [ 208.353449][ T20] plantronics 0003:047F:FFFF.0026: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 208.396353][ T5193] futex_wake_op: syz.4.1727 tries to shift op by 36; fix this program [ 208.413101][ T438] usb 1-1: config index 0 descriptor too short (expected 45, got 36) [ 208.422962][ T438] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 208.434648][ T438] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 208.446087][ T438] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 208.459521][ T438] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 208.468974][ T438] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.470509][ T5195] loop4: detected capacity change from 0 to 128 [ 208.478541][ T438] usb 1-1: config 0 descriptor?? [ 208.502477][ T5173] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 208.613176][ T26] usb 6-1: USB disconnect, device number 10 [ 209.014976][ T438] plantronics 0003:047F:FFFF.0027: unknown main item tag 0xd [ 209.023687][ T438] plantronics 0003:047F:FFFF.0027: No inputs registered, leaving [ 209.032934][ T438] plantronics 0003:047F:FFFF.0027: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 209.092402][ T39] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 209.136780][ T5209] syz.5.1733[5209] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 209.136838][ T5209] syz.5.1733[5209] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 209.149845][ T5209] tipc: Started in network mode [ 209.166697][ T5209] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 209.175687][ T5209] tipc: Enabling of bearer rejected, failed to enable media [ 209.196241][ T5211] loop5: detected capacity change from 0 to 512 [ 209.243011][ T438] usb 1-1: USB disconnect, device number 16 [ 209.370960][ T39] usb 5-1: Using ep0 maxpacket: 8 [ 209.652100][ T438] Bluetooth: hci0: command 0x1009 tx timeout [ 209.763800][ T5217] futex_wake_op: syz.3.1736 tries to shift op by 36; fix this program [ 209.864477][ T5223] futex_wake_op: syz.0.1738 tries to shift op by 36; fix this program [ 209.882428][ T39] usb 5-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice=d9.40 [ 209.891795][ T39] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.899984][ T39] usb 5-1: Product: syz [ 209.904954][ T39] usb 5-1: Manufacturer: syz [ 209.909690][ T39] usb 5-1: SerialNumber: syz [ 209.915238][ T39] usb 5-1: config 0 descriptor?? [ 210.267144][ T39] usb 5-1: USB disconnect, device number 12 [ 210.582371][ T5028] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 210.744503][ T5249] loop3: detected capacity change from 0 to 512 [ 210.752928][ T378] udevd[378]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 210.774617][ T5249] EXT4-fs (loop3): Test dummy encryption mode enabled [ 210.781614][ T5249] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 210.801258][ T5249] EXT4-fs (loop3): 1 truncate cleaned up [ 210.807070][ T5249] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsv0,nojournal_checksum,barrier,barrier,test_dummy_encryption,nomblk_io_submit,,errors=continue. Quota mode: none. [ 210.942423][ T5028] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 210.953534][ T5028] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 210.963522][ T5028] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 210.976865][ T5028] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 210.986283][ T5028] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.995831][ T5028] usb 1-1: config 0 descriptor?? [ 211.063650][ T5261] loop4: detected capacity change from 0 to 512 [ 211.152425][ T2939] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 211.225202][ T5271] loop5: detected capacity change from 0 to 512 [ 211.513362][ T5028] plantronics 0003:047F:FFFF.0028: No inputs registered, leaving [ 211.522178][ T5028] plantronics 0003:047F:FFFF.0028: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 211.993873][ T2939] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 212.004950][ T2939] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 212.015838][ T2939] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 212.026952][ T2939] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 212.049825][ T5277] loop4: detected capacity change from 0 to 512 [ 212.113264][ T5028] usb 1-1: USB disconnect, device number 17 [ 212.135047][ T30] kauditd_printk_skb: 46 callbacks suppressed [ 212.135063][ T30] audit: type=1400 audit(1761162936.022:474): avc: denied { remount } for pid=5282 comm="syz.5.1760" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 212.135118][ T5283] tmpfs: Too few inodes for current use [ 212.175662][ T30] audit: type=1400 audit(1761162936.062:475): avc: denied { unmount } for pid=3456 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 212.195758][ T2939] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 212.210411][ T2939] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.218622][ T2939] usb 4-1: Product: syz [ 212.222934][ T2939] usb 4-1: Manufacturer: syz [ 212.227621][ T2939] usb 4-1: SerialNumber: syz [ 212.262475][ T5249] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 212.283593][ T2939] cdc_mbim 4-1:1.0: skipping garbage [ 212.692434][ T2939] cdc_mbim 4-1:1.0: bind() failure [ 212.698501][ T2939] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 212.708137][ T5295] xt_hashlimit: max too large, truncated to 1048576 [ 212.712440][ T2939] cdc_ncm 4-1:1.1: bind() failure [ 212.721235][ T2939] usb 4-1: USB disconnect, device number 20 [ 212.796648][ T5303] loop5: detected capacity change from 0 to 512 [ 212.805676][ T30] audit: type=1326 audit(1761162936.692:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5304 comm="syz.0.1768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd998185fc9 code=0x7ffc0000 [ 212.829719][ T30] audit: type=1326 audit(1761162936.712:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5304 comm="syz.0.1768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd998185fc9 code=0x7ffc0000 [ 212.853638][ T30] audit: type=1326 audit(1761162936.712:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5304 comm="syz.0.1768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=195 compat=0 ip=0x7fd998185fc9 code=0x7ffc0000 [ 212.877912][ T30] audit: type=1326 audit(1761162936.712:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5304 comm="syz.0.1768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd998185fc9 code=0x7ffc0000 [ 212.910255][ T30] audit: type=1326 audit(1761162936.742:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5304 comm="syz.0.1768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd998185fc9 code=0x7ffc0000 [ 212.940937][ T30] audit: type=1400 audit(1761162936.742:481): avc: denied { create } for pid=5306 comm="syz.0.1770" dev="anon_inodefs" ino=32853 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 212.970444][ T30] audit: type=1400 audit(1761162936.742:482): avc: denied { ioctl } for pid=5306 comm="syz.0.1770" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=32854 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 213.067570][ T30] audit: type=1326 audit(1761162936.952:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5310 comm="syz.0.1772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd998185fc9 code=0x7ffc0000 [ 213.112561][ T5322] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1777'. [ 213.339188][ T5326] futex_wake_op: syz.3.1778 tries to shift op by 36; fix this program [ 213.521910][ T5337] loop3: detected capacity change from 0 to 512 [ 213.579545][ T5351] futex_wake_op: syz.4.1789 tries to shift op by 36; fix this program [ 213.688612][ T5356] futex_wake_op: syz.5.1792 tries to shift op by 36; fix this program [ 213.987016][ T5362] loop4: detected capacity change from 0 to 512 [ 215.980475][ T5398] netlink: 'syz.0.1803': attribute type 12 has an invalid length. [ 215.993369][ T5395] loop2: detected capacity change from 0 to 128 [ 216.050469][ T5395] handle_bad_sector: 2890 callbacks suppressed [ 216.050491][ T5395] attempt to access beyond end of device [ 216.050491][ T5395] loop2: rw=2049, want=1041, limit=128 [ 216.059902][ T5404] loop3: detected capacity change from 0 to 512 [ 216.504559][ T5409] attempt to access beyond end of device [ 216.504559][ T5409] loop2: rw=524288, want=369, limit=128 [ 216.527429][ T5409] attempt to access beyond end of device [ 216.527429][ T5409] loop2: rw=0, want=153, limit=128 [ 216.538621][ T5409] attempt to access beyond end of device [ 216.538621][ T5409] loop2: rw=0, want=153, limit=128 [ 216.563044][ T5409] attempt to access beyond end of device [ 216.563044][ T5409] loop2: rw=0, want=153, limit=128 [ 216.587161][ T5409] attempt to access beyond end of device [ 216.587161][ T5409] loop2: rw=0, want=153, limit=128 [ 216.598172][ T5409] attempt to access beyond end of device [ 216.598172][ T5409] loop2: rw=0, want=153, limit=128 [ 216.608895][ T5409] attempt to access beyond end of device [ 216.608895][ T5409] loop2: rw=0, want=153, limit=128 [ 216.621938][ T5409] attempt to access beyond end of device [ 216.621938][ T5409] loop2: rw=0, want=153, limit=128 [ 216.646773][ T5395] attempt to access beyond end of device [ 216.646773][ T5395] loop2: rw=0, want=153, limit=128 [ 217.861902][ T5438] loop4: detected capacity change from 0 to 128 [ 217.870552][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 217.870568][ T30] audit: type=1326 audit(1761162941.752:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5441 comm="syz.5.1816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff197aa1fc9 code=0x7ffc0000 [ 217.924423][ T30] audit: type=1326 audit(1761162941.792:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5441 comm="syz.5.1816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff197aa1fc9 code=0x7ffc0000 [ 217.951224][ T30] audit: type=1326 audit(1761162941.792:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5441 comm="syz.5.1816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7ff197aa1fc9 code=0x7ffc0000 [ 217.995761][ T30] audit: type=1326 audit(1761162941.792:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5441 comm="syz.5.1816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff197aa1fc9 code=0x7ffc0000 [ 218.022751][ T30] audit: type=1326 audit(1761162941.792:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5441 comm="syz.5.1816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff197aa1fc9 code=0x7ffc0000 [ 218.071501][ T30] audit: type=1326 audit(1761162941.952:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5446 comm="syz.5.1818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff197aa1fc9 code=0x7ffc0000 [ 218.138900][ T30] audit: type=1326 audit(1761162941.952:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5446 comm="syz.5.1818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff197aa1fc9 code=0x7ffc0000 [ 218.180587][ T5454] loop3: detected capacity change from 0 to 128 [ 218.188621][ T5456] loop5: detected capacity change from 0 to 128 [ 218.196187][ T30] audit: type=1326 audit(1761162942.012:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5446 comm="syz.5.1818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff197aa1fc9 code=0x7ffc0000 [ 218.224357][ T30] audit: type=1326 audit(1761162942.012:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5446 comm="syz.5.1818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff197aa1fc9 code=0x7ffc0000 [ 218.248692][ T30] audit: type=1326 audit(1761162942.012:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5446 comm="syz.5.1818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff197aa1fc9 code=0x7ffc0000 [ 218.291141][ T5461] loop4: detected capacity change from 0 to 512 [ 218.745559][ T39] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 218.940083][ T5479] loop3: detected capacity change from 0 to 512 [ 218.988834][ T5485] loop4: detected capacity change from 0 to 512 [ 219.029867][ T5490] loop5: detected capacity change from 0 to 128 [ 219.682701][ T39] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 219.866677][ T39] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 219.918848][ T39] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 219.972399][ T39] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 219.981602][ T39] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.997419][ T39] usb 3-1: config 0 descriptor?? [ 220.004848][ T5501] loop5: detected capacity change from 0 to 128 [ 220.491439][ T5513] loop5: detected capacity change from 0 to 512 [ 220.622049][ T5520] loop3: detected capacity change from 0 to 128 [ 220.638531][ T39] plantronics 0003:047F:FFFF.0029: unknown main item tag 0xe [ 220.646256][ T39] plantronics 0003:047F:FFFF.0029: unknown main item tag 0x0 [ 220.654971][ T39] plantronics 0003:047F:FFFF.0029: No inputs registered, leaving [ 220.664925][ T39] plantronics 0003:047F:FFFF.0029: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 221.673852][ T5520] handle_bad_sector: 4899 callbacks suppressed [ 221.673872][ T5520] attempt to access beyond end of device [ 221.673872][ T5520] loop3: rw=0, want=153, limit=128 [ 221.683219][ T39] usb 3-1: USB disconnect, device number 19 [ 221.719076][ T5536] loop4: detected capacity change from 0 to 512 [ 221.727483][ T5528] attempt to access beyond end of device [ 221.727483][ T5528] loop3: rw=0, want=153, limit=128 [ 221.740748][ T2939] kernel write not supported for file /uhid (pid: 2939 comm: kworker/0:4) [ 221.756768][ T5540] loop2: detected capacity change from 0 to 128 [ 221.812172][ T5540] attempt to access beyond end of device [ 221.812172][ T5540] loop2: rw=2049, want=1041, limit=128 [ 221.824991][ T5542] loop5: detected capacity change from 0 to 128 [ 221.855475][ T5540] attempt to access beyond end of device [ 221.855475][ T5540] loop2: rw=524288, want=369, limit=128 [ 221.867308][ T5540] attempt to access beyond end of device [ 221.867308][ T5540] loop2: rw=0, want=153, limit=128 [ 221.878562][ T5540] attempt to access beyond end of device [ 221.878562][ T5540] loop2: rw=0, want=153, limit=128 [ 221.892428][ T5540] attempt to access beyond end of device [ 221.892428][ T5540] loop2: rw=0, want=153, limit=128 [ 221.906454][ T5540] attempt to access beyond end of device [ 221.906454][ T5540] loop2: rw=0, want=153, limit=128 [ 221.920734][ T5546] attempt to access beyond end of device [ 221.920734][ T5546] loop2: rw=0, want=153, limit=128 [ 221.944713][ T5542] FAT-fs (loop5): Unrecognized mount option "0xffffffffffffffff01777777777777777777777=d̞ YS38`" or missing value [ 223.443090][ T5557] incfs: Options parsing error. -22 [ 223.448385][ T5557] incfs: mount failed -22 [ 223.540312][ T5561] loop2: detected capacity change from 0 to 512 [ 223.547664][ T5569] loop4: detected capacity change from 0 to 16 [ 223.564769][ T5573] loop3: detected capacity change from 0 to 512 [ 223.580785][ T5575] loop5: detected capacity change from 0 to 512 [ 223.595645][ T5569] erofs: (device loop4): mounted with root inode @ nid 36. [ 223.623573][ T285] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 46 [ 223.678777][ T5573] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 223.703827][ T5573] ext4 filesystem being mounted at /405/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 224.369011][ T285] erofs: (device loop4): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 224.491216][ T285] erofs: (device loop4): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 225.130185][ T2939] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 225.502172][ T5612] futex_wake_op: syz.5.1867 tries to shift op by 36; fix this program [ 225.562467][ T2939] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 225.578926][ T2939] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 225.768397][ T2939] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 225.791255][ T2939] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.830967][ T2939] usb 3-1: Product: syz [ 225.851427][ T2939] usb 3-1: Manufacturer: syz [ 225.951225][ T2939] usb 3-1: SerialNumber: syz [ 226.048856][ T5633] incfs: Error accessing: ./file0. [ 226.054175][ T5633] incfs: mount failed -20 [ 226.075329][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 226.075342][ T30] audit: type=1400 audit(1761162949.962:511): avc: denied { remount } for pid=5634 comm="syz.5.1877" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 226.134620][ T5640] futex_wake_op: syz.5.1879 tries to shift op by 36; fix this program [ 226.164564][ T5645] loop5: detected capacity change from 0 to 128 [ 226.182058][ T30] audit: type=1400 audit(1761162950.062:512): avc: denied { load_policy } for pid=5642 comm="syz.3.1881" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 226.182314][ T5643] SELinux: failed to load policy [ 226.207333][ T5645] attempt to access beyond end of device [ 226.207333][ T5645] loop5: rw=2049, want=1041, limit=128 [ 226.702002][ T2939] usb 3-1: 0:2 : does not exist [ 226.744038][ T2939] usb 3-1: USB disconnect, device number 20 [ 226.764025][ T5666] futex_wake_op: syz.0.1889 tries to shift op by 36; fix this program [ 226.906207][ T5679] SELinux: failed to load policy [ 226.933350][ T5688] futex_wake_op: syz.5.1898 tries to shift op by 36; fix this program [ 226.966793][ T5686] loop3: detected capacity change from 0 to 128 [ 226.984051][ T378] udevd[378]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 227.021982][ T5686] handle_bad_sector: 1427 callbacks suppressed [ 227.022004][ T5686] attempt to access beyond end of device [ 227.022004][ T5686] loop3: rw=2049, want=1041, limit=128 [ 227.049988][ T5686] attempt to access beyond end of device [ 227.049988][ T5686] loop3: rw=524288, want=369, limit=128 [ 227.061508][ T5686] attempt to access beyond end of device [ 227.061508][ T5686] loop3: rw=0, want=153, limit=128 [ 227.073321][ T5686] attempt to access beyond end of device [ 227.073321][ T5686] loop3: rw=0, want=153, limit=128 [ 227.084357][ T5686] attempt to access beyond end of device [ 227.084357][ T5686] loop3: rw=0, want=153, limit=128 [ 227.095410][ T5686] attempt to access beyond end of device [ 227.095410][ T5686] loop3: rw=0, want=153, limit=128 [ 228.386417][ T5686] attempt to access beyond end of device [ 228.386417][ T5686] loop3: rw=0, want=153, limit=128 [ 228.386474][ T5686] attempt to access beyond end of device [ 228.386474][ T5686] loop3: rw=0, want=153, limit=128 [ 228.386518][ T5686] attempt to access beyond end of device [ 228.386518][ T5686] loop3: rw=0, want=153, limit=128 [ 228.386562][ T5686] attempt to access beyond end of device [ 228.386562][ T5686] loop3: rw=0, want=153, limit=128 [ 228.463722][ T5704] futex_wake_op: syz.2.1902 tries to shift op by 36; fix this program [ 228.531555][ T30] audit: type=1400 audit(1761162952.412:513): avc: denied { bind } for pid=5712 comm="syz.2.1904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 228.567961][ T30] audit: type=1326 audit(1761162952.442:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5715 comm="syz.0.1908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd998185fc9 code=0x7ffc0000 [ 228.594449][ T30] audit: type=1326 audit(1761162952.442:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5715 comm="syz.0.1908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd998184810 code=0x7ffc0000 [ 228.624783][ T30] audit: type=1326 audit(1761162952.442:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5715 comm="syz.0.1908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd998184810 code=0x7ffc0000 [ 228.655424][ T5721] futex_wake_op: syz.2.1909 tries to shift op by 36; fix this program [ 228.658562][ T30] audit: type=1326 audit(1761162952.442:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5715 comm="syz.0.1908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd998185fc9 code=0x7ffc0000 [ 228.688787][ T30] audit: type=1326 audit(1761162952.442:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5715 comm="syz.0.1908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=264 compat=0 ip=0x7fd998185fc9 code=0x7ffc0000 [ 228.719575][ T30] audit: type=1326 audit(1761162952.452:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5715 comm="syz.0.1908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd998185fc9 code=0x7ffc0000 [ 228.764683][ T30] audit: type=1326 audit(1761162952.652:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5730 comm="syz.2.1914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97ef13cfc9 code=0x7ffc0000 [ 228.810496][ T5737] loop2: detected capacity change from 0 to 512 [ 228.814330][ T5735] loop5: detected capacity change from 0 to 512 [ 229.858355][ T5762] loop3: detected capacity change from 0 to 128 [ 229.875592][ T5763] futex_wake_op: syz.4.1925 tries to shift op by 36; fix this program [ 230.011326][ T5769] loop4: detected capacity change from 0 to 128 [ 230.032123][ T5770] loop2: detected capacity change from 0 to 128 [ 230.379491][ T5784] syz.5.1933[5784] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 230.379577][ T5784] syz.5.1933[5784] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 230.393638][ T5786] futex_wake_op: syz.2.1931 tries to shift op by 36; fix this program [ 230.471142][ T5796] loop4: detected capacity change from 0 to 128 [ 230.866084][ T5805] loop3: detected capacity change from 0 to 512 [ 230.893874][ T5805] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 230.899155][ T5807] loop4: detected capacity change from 0 to 512 [ 230.939852][ T5805] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 230.955043][ T5805] EXT4-fs (loop3): 1 truncate cleaned up [ 230.960831][ T5805] EXT4-fs (loop3): mounted filesystem without journal. Opts: noload,resuid=0x000000000000ee01,debug_want_extra_isize=0x000000000000002e,lazytime,quota,sysvgroups,,errors=continue. Quota mode: writeback. [ 231.450356][ T30] kauditd_printk_skb: 51 callbacks suppressed [ 231.450372][ T30] audit: type=1326 audit(1761162955.332:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5832 comm="syz.3.1949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f870683ffc9 code=0x7ffc0000 [ 231.845461][ T30] audit: type=1326 audit(1761162955.362:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5832 comm="syz.3.1949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f870683ffc9 code=0x7ffc0000 [ 231.870103][ T30] audit: type=1326 audit(1761162955.462:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5832 comm="syz.3.1949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f870683ffc9 code=0x7ffc0000 [ 231.903962][ T30] audit: type=1326 audit(1761162955.462:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5832 comm="syz.3.1949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f870683ffc9 code=0x7ffc0000 [ 231.927730][ T30] audit: type=1326 audit(1761162955.472:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5832 comm="syz.3.1949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f870683ffc9 code=0x7ffc0000 [ 232.309802][ T30] audit: type=1326 audit(1761162955.472:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5832 comm="syz.3.1949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f870683ffc9 code=0x7ffc0000 [ 232.337720][ T30] audit: type=1326 audit(1761162955.472:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5832 comm="syz.3.1949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f870683ffc9 code=0x7ffc0000 [ 232.401933][ T5860] loop3: detected capacity change from 0 to 256 [ 232.420184][ T30] audit: type=1326 audit(1761162955.482:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5832 comm="syz.3.1949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f870683ffc9 code=0x7ffc0000 [ 232.448478][ T5860] exFAT-fs (loop3): failed to load upcase table (idx : 0x000106cd, chksum : 0x3aeaf2c0, utbl_chksum : 0xe619d30d) [ 232.475354][ T30] audit: type=1326 audit(1761162955.482:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5832 comm="syz.3.1949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f870683ffc9 code=0x7ffc0000 [ 232.517658][ T30] audit: type=1326 audit(1761162955.482:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5832 comm="syz.3.1949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f870683ffc9 code=0x7ffc0000 [ 232.601933][ T5873] loop5: detected capacity change from 0 to 1024 [ 232.610907][ T5875] loop3: detected capacity change from 0 to 128 [ 232.647975][ T5875] handle_bad_sector: 5458 callbacks suppressed [ 232.647999][ T5875] attempt to access beyond end of device [ 232.647999][ T5875] loop3: rw=2049, want=1041, limit=128 [ 232.688478][ T5875] attempt to access beyond end of device [ 232.688478][ T5875] loop3: rw=524288, want=369, limit=128 [ 232.696480][ T10] Bluetooth: hci0: Frame reassembly failed (-84) [ 232.701694][ T5875] attempt to access beyond end of device [ 232.701694][ T5875] loop3: rw=0, want=153, limit=128 [ 232.717896][ T5875] attempt to access beyond end of device [ 232.717896][ T5875] loop3: rw=0, want=153, limit=128 [ 232.722253][ T5873] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 232.730288][ T5875] attempt to access beyond end of device [ 232.730288][ T5875] loop3: rw=0, want=153, limit=128 [ 232.756005][ T5875] attempt to access beyond end of device [ 232.756005][ T5875] loop3: rw=0, want=153, limit=128 [ 232.767326][ T5875] attempt to access beyond end of device [ 232.767326][ T5875] loop3: rw=0, want=153, limit=128 [ 232.772166][ T5873] EXT4-fs error (device loop5): mb_free_blocks:1860: group 0, inode 18: block 113:freeing already freed block (bit 7); block bitmap corrupt. [ 232.778529][ T5875] attempt to access beyond end of device [ 232.778529][ T5875] loop3: rw=0, want=153, limit=128 [ 232.804171][ T5875] attempt to access beyond end of device [ 232.804171][ T5875] loop3: rw=0, want=153, limit=128 [ 232.814989][ T5875] attempt to access beyond end of device [ 232.814989][ T5875] loop3: rw=0, want=153, limit=128 [ 232.913688][ T5893] loop4: detected capacity change from 0 to 128 [ 233.938861][ T5916] loop5: detected capacity change from 0 to 256 [ 234.032147][ T5918] loop3: detected capacity change from 0 to 128 [ 234.054320][ T5920] loop2: detected capacity change from 0 to 16 [ 234.106087][ T5920] erofs: (device loop2): mounted with root inode @ nid 36. [ 234.157205][ T5916] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 234.198705][ T5916] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 234.234042][ T5916] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 234.262646][ T5936] futex_wake_op: syz.3.1986 tries to shift op by 36; fix this program [ 234.288116][ T5938] syz.2.1988[5938] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 234.288219][ T5938] syz.2.1988[5938] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 235.644837][ T438] Bluetooth: hci0: command 0x1003 tx timeout [ 235.739771][ T5027] Bluetooth: hci0: sending frame failed (-49) [ 235.763561][ T5955] futex_wake_op: syz.2.1993 tries to shift op by 36; fix this program [ 235.774473][ T5958] loop3: detected capacity change from 0 to 128 [ 235.784203][ T5961] loop5: detected capacity change from 0 to 512 [ 235.793156][ T5959] loop4: detected capacity change from 0 to 128 [ 235.800454][ T5963] futex_wake_op: syz.2.1997 tries to shift op by 36; fix this program [ 236.014731][ T5977] futex_wake_op: syz.2.2002 tries to shift op by 36; fix this program [ 236.054480][ T5983] loop4: detected capacity change from 0 to 512 [ 237.756194][ T5996] futex_wake_op: syz.5.2007 tries to shift op by 36; fix this program [ 237.782374][ T20] Bluetooth: hci0: command 0x1001 tx timeout [ 237.844240][ T5027] Bluetooth: hci0: sending frame failed (-49) [ 237.858596][ T5999] loop3: detected capacity change from 0 to 128 [ 237.904118][ T5999] handle_bad_sector: 8242 callbacks suppressed [ 237.904135][ T5999] attempt to access beyond end of device [ 237.904135][ T5999] loop3: rw=2049, want=1041, limit=128 [ 238.307539][ T6007] attempt to access beyond end of device [ 238.307539][ T6007] loop3: rw=524288, want=369, limit=128 [ 238.329385][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 238.329400][ T30] audit: type=1326 audit(2000000006.420:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6008 comm="syz.4.2012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a8ca29fc9 code=0x7ffc0000 [ 238.338748][ T6007] attempt to access beyond end of device [ 238.338748][ T6007] loop3: rw=0, want=153, limit=128 [ 238.379461][ T6007] attempt to access beyond end of device [ 238.379461][ T6007] loop3: rw=0, want=153, limit=128 [ 238.389737][ T30] audit: type=1326 audit(2000000006.460:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6008 comm="syz.4.2012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7f7a8ca29fc9 code=0x7ffc0000 [ 238.390945][ T6007] attempt to access beyond end of device [ 238.390945][ T6007] loop3: rw=0, want=153, limit=128 [ 238.414518][ T30] audit: type=1326 audit(2000000006.460:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6008 comm="syz.4.2012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a8ca29fc9 code=0x7ffc0000 [ 238.426114][ T6007] attempt to access beyond end of device [ 238.426114][ T6007] loop3: rw=0, want=153, limit=128 [ 238.461364][ T5999] attempt to access beyond end of device [ 238.461364][ T5999] loop3: rw=0, want=153, limit=128 [ 238.474398][ T30] audit: type=1326 audit(2000000006.460:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6008 comm="syz.4.2012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f7a8ca29fc9 code=0x7ffc0000 [ 238.499994][ T6007] attempt to access beyond end of device [ 238.499994][ T6007] loop3: rw=0, want=153, limit=128 [ 238.505579][ T6016] futex_wake_op: syz.4.2014 tries to shift op by 36; fix this program [ 238.513031][ T30] audit: type=1326 audit(2000000006.460:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6008 comm="syz.4.2012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a8ca29fc9 code=0x7ffc0000 [ 238.554866][ T30] audit: type=1400 audit(2000000006.650:605): avc: denied { remount } for pid=6019 comm="syz.4.2016" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 238.643490][ T30] audit: type=1400 audit(2000000006.740:606): avc: denied { unmount } for pid=6023 comm="syz.2.2018" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 238.686469][ T6028] loop5: detected capacity change from 0 to 128 [ 238.718269][ T6032] loop3: detected capacity change from 0 to 512 [ 238.738009][ T30] audit: type=1400 audit(2000000006.830:607): avc: denied { unmount } for pid=285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 238.798983][ T6028] attempt to access beyond end of device [ 238.798983][ T6028] loop5: rw=2049, want=1041, limit=128 [ 238.818554][ T6028] attempt to access beyond end of device [ 238.818554][ T6028] loop5: rw=524288, want=369, limit=128 [ 239.289618][ T30] audit: type=1326 audit(2000000007.380:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6043 comm="syz.2.2025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97ef13cfc9 code=0x7ffc0000 [ 239.341015][ T6046] loop5: detected capacity change from 0 to 128 [ 239.346440][ T30] audit: type=1326 audit(2000000007.380:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6043 comm="syz.2.2025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7f97ef13cfc9 code=0x7ffc0000 [ 239.867358][ T20] Bluetooth: hci0: command 0x1009 tx timeout [ 239.949924][ T6059] input: syz1 as /devices/virtual/input/input31 [ 240.617762][ T6068] loop2: detected capacity change from 0 to 512 [ 241.163412][ T6073] loop5: detected capacity change from 0 to 128 [ 241.580850][ T6083] loop5: detected capacity change from 0 to 128 [ 242.222410][ T20] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 242.472377][ T20] usb 6-1: Using ep0 maxpacket: 32 [ 242.592429][ T20] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 242.609727][ T20] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 242.662492][ T20] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 242.671631][ T20] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.687738][ T20] usb 6-1: config 0 descriptor?? [ 242.737717][ T20] hub 6-1:0.0: USB hub found [ 242.943129][ T20] hub 6-1:0.0: 1 port detected [ 243.514465][ T6109] loop2: detected capacity change from 0 to 512 [ 243.602449][ T20] hub 6-1:0.0: activate --> -90 [ 244.192537][ T438] usb 6-1: USB disconnect, device number 11 [ 244.199285][ T20] usb 6-1-port1: config error [ 244.205760][ T20] usb 6-1-port1: attempt power cycle [ 244.643249][ T6123] loop2: detected capacity change from 0 to 512 [ 246.607643][ T6142] futex_wake_op: syz.0.2058 tries to shift op by 36; fix this program [ 246.745359][ T6151] loop2: detected capacity change from 0 to 512 [ 247.635706][ T6172] netlink: 'syz.2.2069': attribute type 298 has an invalid length. [ 247.715269][ T6177] loop2: detected capacity change from 0 to 128 [ 247.774179][ T6177] FAT-fs (loop2): Unrecognized mount option "0xffffffffffffffff01777777777777777777777=d̞ YS38`" or missing value [ 247.892387][ T20] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 248.435379][ T6185] futex_wake_op: syz.0.2073 tries to shift op by 36; fix this program [ 248.462400][ T20] usb 6-1: Using ep0 maxpacket: 8 [ 248.605263][ T20] usb 6-1: config 0 has no interfaces? [ 248.610816][ T20] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 248.633401][ T20] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.595088][ T20] usb 6-1: config 0 descriptor?? [ 249.837621][ T438] usb 6-1: USB disconnect, device number 16 [ 250.035386][ T6210] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2081'. [ 250.370441][ T6216] loop5: detected capacity change from 0 to 256 [ 250.409491][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 250.409507][ T30] audit: type=1400 audit(2000000018.500:622): avc: denied { watch watch_reads } for pid=6215 comm="syz.5.2084" path="/201/file0/file2" dev="loop5" ino=1048991 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1 [ 250.441097][ T6216] FAT-fs (loop5): error, fat_free_clusters: deleting FAT entry beyond EOF [ 250.502381][ T20] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 250.752437][ T20] usb 1-1: Using ep0 maxpacket: 32 [ 250.872706][ T20] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 250.923057][ T20] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 250.987277][ T20] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 251.006925][ T20] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.032792][ T20] usb 1-1: config 0 descriptor?? [ 251.083288][ T20] hub 1-1:0.0: USB hub found [ 251.302469][ T20] hub 1-1:0.0: 1 port detected [ 251.385040][ T6229] loop2: detected capacity change from 0 to 512 [ 251.992563][ T20] hub 1-1:0.0: activate --> -90 [ 252.168264][ T6244] syz.5.2094[6244] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 252.168354][ T6244] syz.5.2094[6244] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 252.494065][ T2939] usb 1-1: USB disconnect, device number 18 [ 252.700676][ T6257] loop2: detected capacity change from 0 to 128 [ 252.752404][ T20] usb 1-1-port1: config error [ 252.784120][ T6257] handle_bad_sector: 5491 callbacks suppressed [ 252.784144][ T6257] attempt to access beyond end of device [ 252.784144][ T6257] loop2: rw=2049, want=1041, limit=128 [ 252.833571][ T6257] attempt to access beyond end of device [ 252.833571][ T6257] loop2: rw=524288, want=369, limit=128 [ 252.862620][ T6257] attempt to access beyond end of device [ 252.862620][ T6257] loop2: rw=0, want=153, limit=128 [ 252.882419][ T6257] attempt to access beyond end of device [ 252.882419][ T6257] loop2: rw=0, want=153, limit=128 [ 252.893680][ T6257] attempt to access beyond end of device [ 252.893680][ T6257] loop2: rw=0, want=153, limit=128 [ 252.904731][ T6258] attempt to access beyond end of device [ 252.904731][ T6258] loop2: rw=0, want=153, limit=128 [ 252.916017][ T6257] attempt to access beyond end of device [ 252.916017][ T6257] loop2: rw=0, want=153, limit=128 [ 252.926959][ T6258] attempt to access beyond end of device [ 252.926959][ T6258] loop2: rw=0, want=153, limit=128 [ 252.937905][ T6257] attempt to access beyond end of device [ 252.937905][ T6257] loop2: rw=0, want=153, limit=128 [ 252.962564][ T6258] attempt to access beyond end of device [ 252.962564][ T6258] loop2: rw=0, want=153, limit=128 [ 254.819559][ T6305] futex_wake_op: syz.5.2118 tries to shift op by 36; fix this program [ 255.114769][ T6301] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.121854][ T6301] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.214823][ T6301] device bridge_slave_0 entered promiscuous mode [ 255.327108][ T6301] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.390758][ T6319] loop2: detected capacity change from 0 to 512 [ 255.431122][ T6301] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.449352][ T6301] device bridge_slave_1 entered promiscuous mode [ 256.054863][ T347] device bridge_slave_1 left promiscuous mode [ 256.061078][ T347] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.069230][ T347] device bridge_slave_0 left promiscuous mode [ 256.075918][ T347] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.970421][ T6366] loop2: detected capacity change from 0 to 512 [ 257.002794][ T6366] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 257.016581][ T6327] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.023917][ T6366] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 257.030099][ T6360] kvm [6359]: vcpu0, guest rIP: 0x9114 disabled perfctr wrmsr: 0xc2 data 0x9d00 [ 257.041332][ T6327] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.042691][ T6360] kvm [6359]: vcpu0, guest rIP: 0x9114 disabled perfctr wrmsr: 0xc1 data 0x9d00 [ 257.058643][ T6327] device bridge_slave_0 entered promiscuous mode [ 257.063267][ T6360] APIC base relocation is unsupported by KVM [ 257.071511][ T6366] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended [ 257.089453][ T6327] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.093178][ T6366] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 257.102369][ T6327] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.113452][ T6327] device bridge_slave_1 entered promiscuous mode [ 257.122059][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 257.124982][ T6366] System zones: 0-2, 18-18, 34-34 [ 257.135223][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 257.149856][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 257.158590][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 257.167208][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.174313][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 257.182031][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 257.191751][ T6366] EXT4-fs error (device loop2): ext4_orphan_get:1401: inode #15: comm syz.2.2133: iget: bad i_size value: 360287970189639680 [ 257.205271][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 257.214037][ T6366] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.2133: couldn't read orphan inode 15 (err -117) [ 257.234408][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.241592][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 257.249293][ T6366] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 257.249377][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 257.268166][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 257.276480][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 257.632480][ T610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 257.640721][ T610] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 257.677643][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 257.689167][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 257.696078][ T6382] input: syz0 as /devices/virtual/input/input32 [ 257.697739][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 257.712977][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 257.732462][ T6301] device veth0_vlan entered promiscuous mode [ 257.740990][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 257.748644][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 257.777350][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 257.789276][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 257.819029][ T6301] device veth1_macvtap entered promiscuous mode [ 257.844464][ T610] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 257.853933][ T610] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 257.863776][ T610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 258.415630][ T610] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 258.424751][ T610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 258.450338][ T30] audit: type=1400 audit(2000000026.540:623): avc: denied { mount } for pid=6301 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 258.489373][ T6406] futex_wake_op: syz.5.2144 tries to shift op by 36; fix this program [ 258.501117][ T610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 258.512721][ T610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 258.553512][ T6409] tipc: New replicast peer: 255.255.255.83 [ 258.559608][ T6409] tipc: Enabled bearer , priority 10 [ 258.597131][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 258.608765][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 258.617963][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.625079][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 258.633233][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 259.092848][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 259.101184][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.108267][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 259.116946][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 259.189256][ T6416] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.191652][ T6426] loop2: detected capacity change from 0 to 1024 [ 259.196582][ T6416] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.226931][ T6426] EXT4-fs (loop2): mounted filesystem without journal. Opts: acl,barrier,barrier=0x0000000000000000,sysvgroups,debug_want_extra_isize=0x0000000000000080,resuid=0x0000000000000000,nodelalloc,acl,noinit_itable,,errors=continue. Quota mode: none. [ 259.259516][ T6426] EXT4-fs (loop2): re-mounted. Opts: . Quota mode: none. [ 259.275645][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 259.285830][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 259.295626][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 259.318030][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 259.338562][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 259.347891][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 259.361662][ T6327] device veth0_vlan entered promiscuous mode [ 259.368533][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 259.377677][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 259.419225][ T6327] device veth1_macvtap entered promiscuous mode [ 259.430481][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 259.439707][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 259.448020][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 259.467689][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 259.476453][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 259.488636][ T6442] netlink: 'syz.6.2156': attribute type 2 has an invalid length. [ 259.513976][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 259.526097][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 259.526343][ T30] audit: type=1326 audit(2000000027.620:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6444 comm="syz.5.2157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff197aa1fc9 code=0x7ffc0000 [ 259.558270][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 259.568133][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 259.623477][ T30] audit: type=1326 audit(2000000027.620:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6444 comm="syz.5.2157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff197aa1fc9 code=0x7ffc0000 [ 259.658276][ T30] audit: type=1326 audit(2000000027.630:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6444 comm="syz.5.2157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff197aa1fc9 code=0x7ffc0000 [ 259.672411][ T20] tipc: Node number set to 1 [ 259.703813][ T347] device bridge_slave_1 left promiscuous mode [ 259.751049][ T6457] loop7: detected capacity change from 0 to 128 [ 259.790116][ T347] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.830521][ T347] device bridge_slave_0 left promiscuous mode [ 259.841173][ T30] audit: type=1326 audit(2000000027.630:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6444 comm="syz.5.2157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff197aa1fc9 code=0x7ffc0000 [ 259.867284][ T347] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.908156][ T30] audit: type=1326 audit(2000000027.630:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6444 comm="syz.5.2157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff197aa1fc9 code=0x7ffc0000 [ 259.954308][ T6461] handle_bad_sector: 128 callbacks suppressed [ 259.954333][ T6461] attempt to access beyond end of device [ 259.954333][ T6461] loop7: rw=2049, want=761, limit=128 [ 259.990865][ T6463] loop5: detected capacity change from 0 to 512 [ 260.022439][ T30] audit: type=1326 audit(2000000027.630:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6444 comm="syz.5.2157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff197aa1fc9 code=0x7ffc0000 [ 260.052052][ T6457] attempt to access beyond end of device [ 260.052052][ T6457] loop7: rw=524288, want=369, limit=128 [ 260.116227][ T30] audit: type=1326 audit(2000000027.670:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6444 comm="syz.5.2157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff197aa1fc9 code=0x7ffc0000 [ 260.126983][ T6457] attempt to access beyond end of device [ 260.126983][ T6457] loop7: rw=0, want=153, limit=128 [ 260.146133][ T6468] SELinux: failed to load policy [ 260.164586][ T6461] attempt to access beyond end of device [ 260.164586][ T6461] loop7: rw=0, want=153, limit=128 [ 260.420449][ T30] audit: type=1326 audit(2000000027.680:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6444 comm="syz.5.2157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff197aa1fc9 code=0x7ffc0000 [ 260.522274][ T30] audit: type=1326 audit(2000000027.700:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6444 comm="syz.5.2157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff197aa1fc9 code=0x7ffc0000 [ 260.609757][ T6480] loop6: detected capacity change from 0 to 16 [ 260.669002][ T6480] erofs: (device loop6): mounted with root inode @ nid 36. [ 260.771914][ T6301] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 46 [ 260.781959][ T6301] erofs: (device loop6): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 260.791060][ T6301] erofs: (device loop6): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 261.148910][ T6505] loop6: detected capacity change from 0 to 128 [ 261.277840][ T6513] loop5: detected capacity change from 0 to 128 [ 261.294259][ T6505] attempt to access beyond end of device [ 261.294259][ T6505] loop6: rw=2049, want=1041, limit=128 [ 261.320988][ T6517] incfs: Error accessing: ./file0. [ 261.326278][ T6517] incfs: mount failed -2 [ 261.342176][ T6505] attempt to access beyond end of device [ 261.342176][ T6505] loop6: rw=524288, want=369, limit=128 [ 261.343310][ T6513] FAT-fs (loop5): Unrecognized mount option "0xffffffffffffffff01777777777777777777777=d̞ YS38`" or missing value [ 261.388785][ T6505] attempt to access beyond end of device [ 261.388785][ T6505] loop6: rw=0, want=153, limit=128 [ 261.406956][ T6505] attempt to access beyond end of device [ 261.406956][ T6505] loop6: rw=0, want=153, limit=128 [ 261.417954][ T6505] attempt to access beyond end of device [ 261.417954][ T6505] loop6: rw=0, want=153, limit=128 [ 261.431044][ T6521] loop2: detected capacity change from 0 to 512 [ 261.438008][ T6522] attempt to access beyond end of device [ 261.438008][ T6522] loop6: rw=0, want=153, limit=128 [ 263.525587][ T6544] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2194'. [ 263.555184][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 263.555199][ T30] audit: type=1326 audit(2000000031.650:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6552 comm="syz.2.2198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97ef13cfc9 code=0x7ffc0000 [ 263.594361][ T30] audit: type=1326 audit(2000000031.680:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6552 comm="syz.2.2198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f97ef13cfc9 code=0x7ffc0000 [ 263.656529][ T6561] input: syz1 as /devices/virtual/input/input33 [ 263.679295][ T30] audit: type=1326 audit(2000000031.680:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6552 comm="syz.2.2198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97ef13cfc9 code=0x7ffc0000 [ 263.709822][ T30] audit: type=1326 audit(2000000031.680:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6552 comm="syz.2.2198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f97ef13cfc9 code=0x7ffc0000 [ 263.723967][ T6572] loop2: detected capacity change from 0 to 128 [ 263.741129][ T30] audit: type=1326 audit(2000000031.680:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6552 comm="syz.2.2198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97ef13cfc9 code=0x7ffc0000 [ 263.767445][ T30] audit: type=1326 audit(2000000031.680:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6552 comm="syz.2.2198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=264 compat=0 ip=0x7f97ef13cfc9 code=0x7ffc0000 [ 263.791797][ T30] audit: type=1326 audit(2000000031.680:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6552 comm="syz.2.2198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97ef13cfc9 code=0x7ffc0000 [ 263.855040][ T6572] FAT-fs (loop2): Unrecognized mount option "0xffffffffffffffff01777777777777777777777=d̞ YS38`" or missing value [ 264.222363][ T20] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 264.366463][ T6582] loop6: detected capacity change from 0 to 40427 [ 264.481365][ T6582] F2FS-fs (loop6): invalid crc value [ 264.571014][ T6582] F2FS-fs (loop6): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 264.613659][ T6593] loop7: detected capacity change from 0 to 128 [ 264.847478][ T6597] loop2: detected capacity change from 0 to 128 [ 264.893168][ T6582] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 264.922668][ T20] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 264.964155][ T6593] handle_bad_sector: 66 callbacks suppressed [ 264.964175][ T6593] attempt to access beyond end of device [ 264.964175][ T6593] loop7: rw=0, want=153, limit=128 [ 264.965948][ T20] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 264.981018][ T6593] attempt to access beyond end of device [ 264.981018][ T6593] loop7: rw=0, want=153, limit=128 [ 265.004271][ T6593] attempt to access beyond end of device [ 265.004271][ T6593] loop7: rw=0, want=153, limit=128 [ 265.004401][ T6597] attempt to access beyond end of device [ 265.004401][ T6597] loop2: rw=2049, want=1041, limit=128 [ 265.015922][ T6593] attempt to access beyond end of device [ 265.015922][ T6593] loop7: rw=0, want=153, limit=128 [ 265.037330][ T6598] attempt to access beyond end of device [ 265.037330][ T6598] loop7: rw=0, want=153, limit=128 [ 265.048621][ T6593] attempt to access beyond end of device [ 265.048621][ T6593] loop7: rw=0, want=153, limit=128 [ 265.050151][ T6597] attempt to access beyond end of device [ 265.050151][ T6597] loop2: rw=524288, want=369, limit=128 [ 265.059828][ T6598] attempt to access beyond end of device [ 265.059828][ T6598] loop7: rw=0, want=153, limit=128 [ 265.081685][ T6593] attempt to access beyond end of device [ 265.081685][ T6593] loop7: rw=0, want=153, limit=128 [ 265.162447][ T20] usb 6-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 265.179537][ T30] audit: type=1400 audit(2000000033.270:661): avc: denied { sys_module } for pid=6602 comm="syz.2.2215" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 265.223345][ T20] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.239510][ T20] usb 6-1: Product: syz [ 265.247697][ T6607] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.254973][ T6607] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.255694][ T20] usb 6-1: Manufacturer: syz [ 265.267574][ T20] usb 6-1: SerialNumber: syz [ 265.279124][ T20] usb 6-1: config 0 descriptor?? [ 265.281868][ T6611] loop6: detected capacity change from 0 to 1024 [ 265.302493][ T6577] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 265.309801][ T6577] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 265.324260][ T6611] EXT4-fs (loop6): Ignoring removed bh option [ 265.333956][ T6609] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2218'. [ 265.370263][ T6611] EXT4-fs (loop6): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,abort,user_xattr,bh,errors=remount-ro,. Quota mode: writeback. [ 265.406832][ T6611] EXT4-fs error (device loop6): mb_free_blocks:1860: group 0, inode 15: block 273:freeing already freed block (bit 17); block bitmap corrupt. [ 265.421611][ T6611] EXT4-fs (loop6): Remounting filesystem read-only [ 265.465390][ T6625] loop2: detected capacity change from 0 to 512 [ 265.527248][ T6577] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 265.709039][ T6577] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 265.934599][ T39] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 266.419734][ T6637] loop6: detected capacity change from 0 to 128 [ 266.504880][ T30] audit: type=1326 audit(2000000034.600:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6644 comm="syz.2.2230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97ef13cfc9 code=0x7ffc0000 [ 266.548640][ T30] audit: type=1326 audit(2000000034.600:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6644 comm="syz.2.2230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=429 compat=0 ip=0x7f97ef13cfc9 code=0x7ffc0000 [ 266.592425][ T39] usb 8-1: Using ep0 maxpacket: 16 [ 266.640125][ T6648] SELinux: ebitmap: truncated map [ 266.652848][ T6648] SELinux: failed to load policy [ 267.457423][ T39] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 267.476170][ T39] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 267.486040][ T39] usb 8-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 267.496694][ T39] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.512089][ T39] usb 8-1: config 0 descriptor?? [ 267.762443][ T5028] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 268.053111][ T20] dm9601 6-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 268.074991][ T20] dm9601 6-1:0.0 eth1: register 'dm9601' at usb-dummy_hcd.5-1, Davicom DM96xx USB 10/100 Ethernet, 6e:f1:98:9e:dd:08 [ 268.120093][ T20] usb 6-1: USB disconnect, device number 17 [ 268.128411][ T20] dm9601 6-1:0.0 eth1: unregister 'dm9601' usb-dummy_hcd.5-1, Davicom DM96xx USB 10/100 Ethernet [ 268.142822][ T5028] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 268.149766][ T39] apple 0003:05AC:024B.002A: unknown global tag 0xe [ 268.160599][ T39] apple 0003:05AC:024B.002A: item 0 1 1 14 parsing failed [ 268.163635][ T5028] usb 1-1: config 0 interface 0 has no altsetting 0 [ 268.168403][ T39] apple 0003:05AC:024B.002A: parse failed [ 268.174635][ T5028] usb 1-1: New USB device found, idVendor=056a, idProduct=0314, bcdDevice= 0.00 [ 268.180399][ T39] apple: probe of 0003:05AC:024B.002A failed with error -22 [ 268.194834][ T5028] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.202591][ T39] usb 8-1: USB disconnect, device number 2 [ 268.213057][ T2939] ================================================================== [ 268.221167][ T2939] BUG: KASAN: use-after-free in worker_thread+0xa2e/0x1200 [ 268.228462][ T2939] Read of size 8 at addr ffff88810f5f2c60 by task kworker/0:4/2939 [ 268.236358][ T2939] [ 268.238688][ T2939] CPU: 0 PID: 2939 Comm: kworker/0:4 Not tainted syzkaller #0 [ 268.246148][ T2939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 268.256215][ T2939] Workqueue: 0x0 (mm_percpu_wq) [ 268.261188][ T2939] Call Trace: [ 268.264487][ T2939] [ 268.267414][ T2939] __dump_stack+0x21/0x30 [ 268.271761][ T2939] dump_stack_lvl+0xee/0x150 [ 268.276358][ T2939] ? show_regs_print_info+0x20/0x20 [ 268.281564][ T2939] ? load_image+0x3a0/0x3a0 [ 268.286070][ T2939] ? __schedule+0xb76/0x14c0 [ 268.290759][ T2939] print_address_description+0x7f/0x2c0 [ 268.296322][ T2939] ? worker_thread+0xa2e/0x1200 [ 268.301182][ T2939] kasan_report+0xf1/0x140 [ 268.305600][ T2939] ? worker_thread+0xa2e/0x1200 [ 268.310469][ T2939] __asan_report_load8_noabort+0x14/0x20 [ 268.316102][ T2939] worker_thread+0xa2e/0x1200 [ 268.320781][ T2939] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 268.326247][ T2939] kthread+0x411/0x500 [ 268.330343][ T2939] ? worker_clr_flags+0x190/0x190 [ 268.335386][ T2939] ? kthread_blkcg+0xd0/0xd0 [ 268.339995][ T2939] ret_from_fork+0x1f/0x30 [ 268.344417][ T2939] [ 268.347431][ T2939] [ 268.349764][ T2939] Allocated by task 20: [ 268.353919][ T2939] __kasan_kmalloc+0xda/0x110 [ 268.358602][ T2939] __kmalloc+0x13d/0x2c0 [ 268.362844][ T2939] kvmalloc_node+0x206/0x300 [ 268.367535][ T2939] alloc_netdev_mqs+0x8d/0xc90 [ 268.372413][ T2939] alloc_etherdev_mqs+0x34/0x40 [ 268.377295][ T2939] usbnet_probe+0x219/0x2860 [ 268.381914][ T2939] usb_probe_interface+0x5ff/0xae0 [ 268.387253][ T2939] really_probe+0x285/0x970 [ 268.391889][ T2939] __driver_probe_device+0x198/0x280 [ 268.397339][ T2939] driver_probe_device+0x54/0x3e0 [ 268.402371][ T2939] __device_attach_driver+0x2a6/0x460 [ 268.407737][ T2939] bus_for_each_drv+0x175/0x200 [ 268.412592][ T2939] __device_attach+0x2a2/0x400 [ 268.417443][ T2939] device_initial_probe+0x1a/0x20 [ 268.422474][ T2939] bus_probe_device+0xc0/0x1e0 [ 268.427268][ T2939] device_add+0xb31/0xed0 [ 268.431601][ T2939] usb_set_configuration+0x19c2/0x1f10 [ 268.437071][ T2939] usb_generic_driver_probe+0x91/0x150 [ 268.442537][ T2939] usb_probe_device+0x148/0x260 [ 268.447526][ T2939] really_probe+0x285/0x970 [ 268.452032][ T2939] __driver_probe_device+0x198/0x280 [ 268.457455][ T2939] driver_probe_device+0x54/0x3e0 [ 268.462484][ T2939] __device_attach_driver+0x2a6/0x460 [ 268.467852][ T2939] bus_for_each_drv+0x175/0x200 [ 268.472708][ T2939] __device_attach+0x2a2/0x400 [ 268.477483][ T2939] device_initial_probe+0x1a/0x20 [ 268.482512][ T2939] bus_probe_device+0xc0/0x1e0 [ 268.487272][ T2939] device_add+0xb31/0xed0 [ 268.491596][ T2939] usb_new_device+0xd06/0x1620 [ 268.496356][ T2939] hub_event+0x29c4/0x4480 [ 268.500773][ T2939] process_one_work+0x6be/0xba0 [ 268.505620][ T2939] worker_thread+0xa59/0x1200 [ 268.510299][ T2939] kthread+0x411/0x500 [ 268.514363][ T2939] ret_from_fork+0x1f/0x30 [ 268.518774][ T2939] [ 268.521088][ T2939] Freed by task 20: [ 268.524884][ T2939] kasan_set_track+0x4a/0x70 [ 268.529475][ T2939] kasan_set_free_info+0x23/0x40 [ 268.534513][ T2939] ____kasan_slab_free+0x125/0x160 [ 268.539653][ T2939] __kasan_slab_free+0x11/0x20 [ 268.544432][ T2939] slab_free_freelist_hook+0xc2/0x190 [ 268.550011][ T2939] kfree+0xc4/0x270 [ 268.553831][ T2939] kvfree+0x35/0x40 [ 268.557644][ T2939] netdev_freemem+0x3f/0x60 [ 268.562150][ T2939] netdev_release+0x7f/0xb0 [ 268.566655][ T2939] device_release+0x96/0x1c0 [ 268.571242][ T2939] kobject_put+0x18a/0x270 [ 268.575661][ T2939] put_device+0x1f/0x30 [ 268.579822][ T2939] free_netdev+0x34b/0x450 [ 268.584239][ T2939] usbnet_disconnect+0x24b/0x3a0 [ 268.589174][ T2939] usb_unbind_interface+0x212/0x8c0 [ 268.594550][ T2939] device_release_driver_internal+0x4c1/0x760 [ 268.600722][ T2939] device_release_driver+0x19/0x20 [ 268.605835][ T2939] bus_remove_device+0x2dd/0x340 [ 268.610776][ T2939] device_del+0x696/0xe90 [ 268.615212][ T2939] usb_disable_device+0x3a8/0x750 [ 268.620248][ T2939] usb_disconnect+0x31e/0x850 [ 268.624929][ T2939] hub_event+0x1a96/0x4480 [ 268.629375][ T2939] process_one_work+0x6be/0xba0 [ 268.634312][ T2939] worker_thread+0xd7b/0x1200 [ 268.638985][ T2939] kthread+0x411/0x500 [ 268.643155][ T2939] ret_from_fork+0x1f/0x30 [ 268.647568][ T2939] [ 268.649888][ T2939] Last potentially related work creation: [ 268.655681][ T2939] kasan_save_stack+0x3a/0x60 [ 268.660389][ T2939] __kasan_record_aux_stack+0xd2/0x100 [ 268.665847][ T2939] kasan_record_aux_stack_noalloc+0xb/0x10 [ 268.671663][ T2939] insert_work+0x51/0x310 [ 268.675994][ T2939] __queue_work+0x8e5/0xc60 [ 268.680499][ T2939] queue_work_on+0xd2/0x140 [ 268.685022][ T2939] usbnet_link_change+0x189/0x1b0 [ 268.690160][ T2939] usbnet_probe+0x1dfd/0x2860 [ 268.694933][ T2939] usb_probe_interface+0x5ff/0xae0 [ 268.700057][ T2939] really_probe+0x285/0x970 [ 268.704583][ T2939] __driver_probe_device+0x198/0x280 [ 268.709865][ T2939] driver_probe_device+0x54/0x3e0 [ 268.714885][ T2939] __device_attach_driver+0x2a6/0x460 [ 268.720254][ T2939] bus_for_each_drv+0x175/0x200 [ 268.725101][ T2939] __device_attach+0x2a2/0x400 [ 268.729884][ T2939] device_initial_probe+0x1a/0x20 [ 268.734910][ T2939] bus_probe_device+0xc0/0x1e0 [ 268.739681][ T2939] device_add+0xb31/0xed0 [ 268.744016][ T2939] usb_set_configuration+0x19c2/0x1f10 [ 268.749492][ T2939] usb_generic_driver_probe+0x91/0x150 [ 268.754961][ T2939] usb_probe_device+0x148/0x260 [ 268.759811][ T2939] really_probe+0x285/0x970 [ 268.764398][ T2939] __driver_probe_device+0x198/0x280 [ 268.770114][ T2939] driver_probe_device+0x54/0x3e0 [ 268.775138][ T2939] __device_attach_driver+0x2a6/0x460 [ 268.780605][ T2939] bus_for_each_drv+0x175/0x200 [ 268.785457][ T2939] __device_attach+0x2a2/0x400 [ 268.790215][ T2939] device_initial_probe+0x1a/0x20 [ 268.795260][ T2939] bus_probe_device+0xc0/0x1e0 [ 268.800143][ T2939] device_add+0xb31/0xed0 [ 268.804624][ T2939] usb_new_device+0xd06/0x1620 [ 268.809407][ T2939] hub_event+0x29c4/0x4480 [ 268.813971][ T2939] process_one_work+0x6be/0xba0 [ 268.818826][ T2939] worker_thread+0xa59/0x1200 [ 268.823511][ T2939] kthread+0x411/0x500 [ 268.827669][ T2939] ret_from_fork+0x1f/0x30 [ 268.832169][ T2939] [ 268.834498][ T2939] The buggy address belongs to the object at ffff88810f5f2000 [ 268.834498][ T2939] which belongs to the cache kmalloc-4k of size 4096 [ 268.848552][ T2939] The buggy address is located 3168 bytes inside of [ 268.848552][ T2939] 4096-byte region [ffff88810f5f2000, ffff88810f5f3000) [ 268.862217][ T2939] The buggy address belongs to the page: [ 268.867853][ T2939] page:ffffea00043d7c00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10f5f0 [ 268.878258][ T2939] head:ffffea00043d7c00 order:3 compound_mapcount:0 compound_pincount:0 [ 268.886592][ T2939] flags: 0x4000000000010200(slab|head|zone=1) [ 268.892683][ T2939] raw: 4000000000010200 0000000000000000 dead000000000122 ffff888100043380 [ 268.901306][ T2939] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000 [ 268.909886][ T2939] page dumped because: kasan: bad access detected [ 268.916446][ T2939] page_owner tracks the page as allocated [ 268.922165][ T2939] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 20, ts 265322691553, free_ts 265300264682 [ 268.942669][ T2939] post_alloc_hook+0x192/0x1b0 [ 268.947446][ T2939] prep_new_page+0x1c/0x110 [ 268.951956][ T2939] get_page_from_freelist+0x2cc5/0x2d50 [ 268.957690][ T2939] __alloc_pages+0x18f/0x440 [ 268.962291][ T2939] new_slab+0xa1/0x4d0 [ 268.966367][ T2939] ___slab_alloc+0x381/0x810 [ 268.970957][ T2939] __slab_alloc+0x49/0x90 [ 268.975286][ T2939] kmem_cache_alloc_trace+0x146/0x270 [ 268.980665][ T2939] kobject_uevent_env+0x272/0x700 [ 268.985690][ T2939] kobject_uevent+0x1d/0x30 [ 268.990211][ T2939] device_add+0xa40/0xed0 [ 268.994546][ T2939] usb_set_configuration+0x19c2/0x1f10 [ 269.000002][ T2939] usb_generic_driver_probe+0x91/0x150 [ 269.005458][ T2939] usb_probe_device+0x148/0x260 [ 269.010305][ T2939] really_probe+0x285/0x970 [ 269.014803][ T2939] __driver_probe_device+0x198/0x280 [ 269.020085][ T2939] page last free stack trace: [ 269.024773][ T2939] free_unref_page_prepare+0x542/0x550 [ 269.030281][ T2939] free_unref_page+0xa2/0x550 [ 269.034977][ T2939] __free_pages+0x6c/0x100 [ 269.039423][ T2939] __free_slab+0xe8/0x1e0 [ 269.043767][ T2939] __unfreeze_partials+0x160/0x190 [ 269.048923][ T2939] put_cpu_partial+0xc6/0x120 [ 269.053607][ T2939] __slab_free+0x1d4/0x290 [ 269.058023][ T2939] ___cache_free+0x104/0x120 [ 269.062703][ T2939] qlink_free+0x4d/0x90 [ 269.066880][ T2939] qlist_free_all+0x5f/0xb0 [ 269.071382][ T2939] kasan_quarantine_reduce+0x14a/0x170 [ 269.076838][ T2939] __kasan_slab_alloc+0x2f/0xf0 [ 269.081774][ T2939] slab_post_alloc_hook+0x4f/0x2b0 [ 269.086895][ T2939] kmem_cache_alloc_trace+0xfb/0x270 [ 269.092186][ T2939] igmp6_group_dropped+0x445/0x9f0 [ 269.097298][ T2939] __ipv6_dev_mc_dec+0x224/0x460 [ 269.102257][ T2939] [ 269.104573][ T2939] Memory state around the buggy address: [ 269.110195][ T2939] ffff88810f5f2b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 269.118425][ T2939] ffff88810f5f2b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 269.126485][ T2939] >ffff88810f5f2c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 269.134907][ T2939] ^ [ 269.142095][ T2939] ffff88810f5f2c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 269.150283][ T2939] ffff88810f5f2d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 269.158347][ T2939] ================================================================== [ 269.166426][ T2939] Disabling lock debugging due to kernel taint [ 269.204920][ T5028] usb 1-1: config 0 descriptor?? [ 269.693749][ T5028] wacom 0003:056A:0314.002B: unknown main item tag 0x0 [ 269.700673][ T5028] wacom 0003:056A:0314.002B: unknown main item tag 0x0 [ 269.707653][ T5028] wacom 0003:056A:0314.002B: unknown main item tag 0x0 [ 269.714651][ T5028] wacom 0003:056A:0314.002B: unknown main item tag 0x0 [ 269.721519][ T5028] wacom 0003:056A:0314.002B: unknown main item tag 0x0 [ 269.728412][ T5028] wacom 0003:056A:0314.002B: unknown main item tag 0x0 [ 269.735308][ T5028] wacom 0003:056A:0314.002B: unknown main item tag 0x0 [ 269.742514][ T5028] wacom 0003:056A:0314.002B: Unknown device_type for 'HID 056a:0314'. Assuming pen. [ 269.752600][ T5028] wacom 0003:056A:0314.002B: hidraw0: USB HID v0.00 Device [HID 056a:0314] on usb-dummy_hcd.0-1/input0 [ 269.764333][ T5028] input: Wacom Intuos Pro S Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:056A:0314.002B/input/input34 [ 269.903827][ T5028] usb 1-1: USB disconnect, device number 19