last executing test programs: 9.798741191s ago: executing program 1 (id=2567): mkdirat(0xffffffffffffffff, 0x0, 0x4) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0f2}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x17, 0x0, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f00000002c0)={0x1, 0x0, [{0x7, 0x3, 0x4, 0x9, 0x80000000, 0xffffffff, 0xb}]}) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406c256d00000002000001090224000100000000090400000103000000092100000001220500090581"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x13d, 0x0, 0xd6e}}) syz_usb_control_io(r2, &(0x7f0000000340)={0x2c, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0003040000000403a71b4bc23d72013ca51e30aa57f5e5f47b4a5e0be126d77b96dd885358c39be4ec49fcc2bc1b575ac087c4d2c81539b2b78945380f5606029de6b6c4a8f56cccfa3b81298449d5dc3248d6d8cee84c5c7580e4ac"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) 7.62123136s ago: executing program 0 (id=2576): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x60280, 0x0) ioctl$BTRFS_IOC_RM_DEV(r0, 0x5000940b, &(0x7f0000002040)={{}, "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"}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb9}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1f, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e000000"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) 7.537666166s ago: executing program 3 (id=2578): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x60280, 0x0) ioctl$BTRFS_IOC_RM_DEV(r0, 0x5000940b, &(0x7f0000002040)={{}, "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"}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1f, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) 6.539323384s ago: executing program 0 (id=2581): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x18) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) syz_io_uring_setup(0x50cf, &(0x7f0000000000)={0x0, 0xfffffffc, 0x40000, 0x2, 0x282}, &(0x7f0000000080), &(0x7f0000ff4000)) 6.514508086s ago: executing program 1 (id=2582): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000180)='./file1\x00', 0x1218088, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0xa, 0x2c2, &(0x7f00000008c0)="$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") socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x18) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000040)=0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000003"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x2000000000000162, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000001c0)='ext4_es_insert_delayed_block\x00', r5, 0x0, 0x4}, 0x18) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, 0x0, 0x0) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, 0x0, 0x0) add_key$user(&(0x7f0000000080), &(0x7f0000000280)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) getpid() 5.792102532s ago: executing program 2 (id=2584): bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_clone(0x21140200, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, &(0x7f0000000040)=0xe) r1 = socket(0x43d560a287710c6a, 0x3, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, 0x0, 0x0) sendmmsg(r2, &(0x7f0000000600)=[{{&(0x7f00000004c0)=@llc={0x1a, 0x4, 0x8, 0x1, 0xa1, 0x2, @broadcast}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000180)="3c1589b537d9d5c407019eb16a425cf4f2a35097fdd7e9b2eb152e84a5d1c62682943f", 0x23}, {&(0x7f0000000540)="d84f70b70f8daa6f03928994d0ddb45b26557fe901e97c93d45a5abaa3846c9ab219a943a2cf29c1e9dbd6dc7c6beb26cee2f57501e617a850ccde67b27ef09eecbb7e698b2eb99359d3eb20876ca68550256c73257f7469f949b9b0ec1c1fcbc08bb530e35aae535b8875e98899a44d17c70f288f8ac8751661825f56769e373709a85e5fadd545f8a796e771e154b2e71bc1e03152908be66711983a13cd6f4ce8d2c59e65ac14cbb89ac62a830d6706089158f656e31c02b8427d92537d7e", 0xc0}], 0x2, &(0x7f0000001080)=[{0x58, 0x117, 0x1, "0c12dd856b5ae0d2f0a5cf381f8b22cc7406dce0cbebb1e384b4919d1410c542224474c24108c6f283f6bebca592d874bc9449bd663bd66d56873fe5838e28c2c0ff69abbc"}, {0xe0, 0x110, 0x66, "781160109b727ddbcc8e03577f0b2d9ec774a64a4b5186027502a3bd7b32afd16f33d399c5f684e2b8e7d95e9073a568a024e6cc34a34d1a30c311b72d36627500f13c3aead4ffc25d1bbf1adcbfe84987633b71dd969950644967fa52503661b2d62b03a10cc06379949048104883fb3764ee984c766f15880a2ca1b4a6b96395347a6e4269c8a5b91294ec49687d9d2e9367b76f48db1e92ca3d18427770330cd2f47261b12ecc3887535951bce91243baa2837da36528075efaff942cf8e5dfde39797a8d5e99b03275"}, {0x108, 0x119, 0x80000001, "1a4fe0ca8023ad8eeb1cd087516c6c562e647e1a48183f9c42dc978a40414ebad373b6b7c74621ed779df39bf40efe9e02364b654a0bd370718bd17315dcdb34172b26b23f6d09c064789d38ae4cea03f045d2f79561ccc9ada958e6beaef37a2ab47f0e5cf3d004f228797357834330f78a33559b4cfe1416d12746bc24ecbe7b5531751ad4804355e33a7de4b47f66c3114d253ed6cfbb218881b82079a3f3d80bca606fafc3c7749a23206c02d8a528a8e1de18c13b1360e9e65ae7e167e83c0eb25b4d9d35849d68ef1e1ce852a38972ed53b201cb111481249a039af03cf6424fe8d5b8a732874a7ac34be1dc513a6d"}, {0xc0, 0x117, 0xfffffe00, "dfef25969986b1a0bd4162356f1eebb5d99e2f1a9865464e319c5222d819aa63c3394b67365dc5aa921ac1304a7521c6ae838b0f67fa068b2eff54225ff5d5e1ee44d26f6bf16cd748774d6c9c5fc7bf5fe9a9c83ac305af2b05d93bde40743e6ef9af0177896ed6885ef766be22951b4a026999029c84b590045cd43585bc8b8322c75dd69d4332c98d283137e22fa1c78a0a5988f525011f0bca8a85c9363a82dbc6b50ba17086a12b55"}, {0xf8, 0x108, 0x401, "542c689881f0540f4ff3d6ebb9990c4e23b11452252144bce0294558cecc380d867e0c01a460fcb381a307d3d9e8a603372dc4ebac283b0f5b53b68bd398f91e3ca36aec381310c151f1da4599a1b937a169a38112343b6523509901b983e2ef2f3debd5c9edde67c7d46c696c32dbdcb7823e6e479439cbd830fbc09fc1881aaebdd5d463b3c81987eeb6e1850ffc26fe700ddd8e9cd983347b9e764788d19ae0ca30fd9992b4d3b9daaec974485e70939a47d5618d4bacca6dd277ca4a90c80a1865f581a6ff7150efbeb8216048be712c2ef8f7c944835a8eba6e2da7e170b3a4"}, {0x78, 0x105, 0x1, "97a80238d1b3392bc8adbd4a6c6d39344a833c1ac97291283a2ace411cc1e74755e10cd8749740467d0a4155e50a633a823b98e145307a5c7f77cee8a0b850dc62467e88147c1945b454f917be75bf58b545a3cda1df03345e81ec4247bde5b03e8d0ca515e8"}, {0xb8, 0x104, 0x4, "4e5f5f4b5d07201873cda6daf4e6d5310a504659bc1f34a6eecb0462094a2f2907cf724ba97479304d36085097ae95a56ac25cb6e716f702354b08d4d68af7846223a0340fce3a7157222d666cb77e69ac580ac962d98fada12fed69ad7b37ae6f04b93aae280f3b5b24d99640f7c8c61fd37ace201b67d3ec71815057ed9e25719f612ada1e13b9b92af1c1fbfb0ed31d4d62bbec809ea529ea40d28643ad0f2132"}, {0x70, 0x84, 0x1000, "afe4bc9391d32d6ac6d151eba329179194ff1b620edae0de9818d4f063b4727b11e6f80567d9ffc30da1d75ba6eccb47bf4ffff40b695f9a884516eaad105f22e3a065aff443aadd259ce94e48bf7e60b464dc3d655355300086a65e5478"}, {0xb8, 0x103, 0x1000000, "977fce4b3bf19957d41123204262236bd4b2b7b08b445a8a7dbe5a45e3a292b6d4b7224163a870e6974407f557a14d996bd8cc1b0912ef1ad5fb245ab8f2bd69af43f7f7534a1f453e18c176fc3db64630e09e34fee6460fde6bc558fb3642bdf930f93d4908104fb5d5b500de1c416544fa4e0fed3070d2a01015a8b2abb9f483ea278b54afcfc7aecc17d6044af1324070bfa160d2f0777df4aaa514b510c35b5b8ead5742"}, {0x90, 0x1, 0x4e, "e39bf25b15ef8ed6d13b82c14f4bbc2a4ffffb8539759fecb72472f5c2f3086f03a9259dfaf87bc7a2c8b4cc08c279616ee92a299475c89fd9c285c69e0ce43f305598f2f8f4ab5a48a6a93b3b63c1289aed59f05130534c0a8616b84e6482fac64dd34f6db29c89661c3800d8e2c489f75b7d2d235dbedb3f47882b607866"}], 0x6e0}}], 0x1, 0x40448c0) setsockopt$inet_int(r1, 0x0, 0x15, 0x0, 0x0) recvmmsg(r2, 0x0, 0x0, 0x45833af92e4bbbfe, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000c00)=ANY=[@ANYRES64=r0], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r3, 0x40000f0, 0xe40, 0xffffffff, &(0x7f0000000280)="7b5515ccc8bca12641e65d58fd1a12f639", 0x0, 0x8001}, 0x28) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{}, &(0x7f0000000100), &(0x7f0000000640)=r3}, 0x2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000080)=ANY=[@ANYRESDEC=r4], 0x0, 0xc5000040, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000009007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=@base={0xb, 0x5, 0x4, 0xa932, 0x9, 0xffffffffffffffff, 0x800008}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000012118b9c16d51e77b14dce259ae40000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000f9ffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r7}, 0x10) inotify_init1(0x0) 5.771416173s ago: executing program 2 (id=2585): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000680)={0xffffffffffffffff}) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x19, 0x8, &(0x7f0000000a80)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x200, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) rt_tgsigqueueinfo(r0, r0, 0x0, &(0x7f0000000180)={0x2, 0x635, 0x4}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYRES64], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd95, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x9, 0xb, &(0x7f0000000580)=ANY=[@ANYRESDEC=r1], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sock=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x21, 0x5, 0x644851d, &(0x7f0000000000)) socket$vsock_stream(0x28, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000040)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x0, 0x1170, 0x1170, 0x0, 0x1170, 0x298, 0x1398, 0x1398, 0x298, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @private2={0xfc, 0x2, '\x00', 0x1}, [0xffffffff, 0xff000000], [0x0, 0x0, 0x0, 0xffffff00], 'veth0_vlan\x00', 'veth0_to_hsr\x00', {}, {}, 0x2e, 0x0, 0x0, 0x46}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@inet=@socket2={{0x28}, 0x1}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) 5.730029266s ago: executing program 3 (id=2586): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x60280, 0x0) ioctl$BTRFS_IOC_RM_DEV(r0, 0x5000940b, &(0x7f0000002040)={{}, "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"}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb9}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1f, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e000000"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.6862819s ago: executing program 0 (id=2587): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@getchain={0x24, 0x66, 0x0, 0x3, 0x2000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0x0, 0xffff}}}, 0x24}}, 0x400c0) getsockname$packet(r0, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000700)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=r2, @ANYBLOB], 0x48}}, 0x0) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x2008410, &(0x7f0000000580)=ANY=[], 0x1, 0x553e, &(0x7f0000000f80)="$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") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vcan0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x810408, 0x0, 0xff, 0x0, &(0x7f00000007c0)) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FITRIM(r3, 0xc0185879, &(0x7f0000000080)={0x0, 0x2000003}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x40001}, 0x40088d4) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={'\x00', 0x2, 0x7, 0x0, 0x6, 0x8, 0xffffffffffffffff}) 4.572680506s ago: executing program 1 (id=2588): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfffffd9d) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x1, 0x4}}, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$setownex(r3, 0xf, &(0x7f00000001c0)={0x1, 0xffffffffffffffff}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x32600) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0x8010002b) connect$tipc(r2, &(0x7f0000000800)=@nameseq={0x1e, 0x1, 0x3, {0x0, 0x4, 0x1}}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa000800460c002c0000000000069078ac1414bbac1414aa070392004e234e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB], 0x0) 4.571185566s ago: executing program 2 (id=2589): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$RTC_EPOCH_READ(r0, 0x8008700d, &(0x7f00000002c0)) socket$inet6_udp(0xa, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000400000005000000", @ANYRES32, @ANYBLOB="000000000000e100000008000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b708000000feffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8dffffffff000000009300", 0xffffffff}, 0x48, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc1}, &(0x7f0000000300)={0x0, "6035ae1e0fe721441705322025000000003e2a5b4377f7ad4bcf2b71d17e1ec0ef54e6773fd7264c39ea00c508ba607269613800"}, 0x48, 0xfffffffffffffffe) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) 4.52641404s ago: executing program 2 (id=2590): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000040)={r1, 0x1, 0x6, @local}, 0x10) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000000c0)={r1, 0x1, 0x6, @local}, 0x10) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000080)={r1, 0x1, 0x6, @local}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000", @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) poll(0x0, 0x0, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x4, &(0x7f0000000a40)=ANY=[@ANYBLOB="1801000000050000000000000000ea0485000000d000000095"], &(0x7f0000000a00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1200000008", @ANYRES32, @ANYBLOB='\x00'/17, @ANYRES32, @ANYBLOB], 0x50) fadvise64(0xffffffffffffffff, 0x8000000000000000, 0x9, 0x6) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000100)='./bus\x00', 0x210c11, &(0x7f00000001c0)=ANY=[@ANYRES64=0x0, @ANYRES8, @ANYRESHEX=0x0, @ANYRESHEX, @ANYRES32], 0x2, 0x227, &(0x7f0000000580)="$eJzsmb9rFEEUx78zu7e3iaJYaGFzFgEjmL3dPZU0IrGxigiJiOVh1pC4ycndIbmAkPwB/gGCf4dFKgs7OwsrCxWEFF5pIUJGZnfmdm7X9e5csPF9ILPf+fXmvdnZN5ADQRD/LV8+f//04vby+lUAp7GAumo/tvQIG9wY//GlVVPy7e6Z50d5ewyAEFndnrC+A+DNigUcpGaFyGb/EMCCsrkOnmjJfXBcUfoBGDztq8hmR2B4qJq3Dd2ZUyKO2KNOvPF4K458WQSyCGXRAsSY/8NDhg0ArlqCGf73BvtP2jHQTUUcaVETep1CV0645V2pwHb5/iX+rXDcNLaAA2d1v6eevrF/ATgCpVtgWFN6GXV4ntdQ1Sgw4r9oZ/at9LUZ8U8OMhXuLIOri3NLVe3cmjHA34oTUeg6QPUAnb96BbMK+flNHiz9mH0J3ijOcibZcStvHcu3yA961HJhePSuOOvrWMuH1bIlGP7pCZ9KJIkLQKHr/Xwcr2YtOq91e4PzY3YupftzN3/Y9AksPRI4vqOGXDbyk23cCs3+ztNmb7C/tLXT3ow2o90wbN3wr/n+9bAp7x2/mWToP+Q/N8lP84b9WslYhznYa/f73WAP6HeDUT1MSyPjrr3ufBul+eEhx+JPIfT1koStLkqWW4OpP/5KPqVatEqdJwiCIAiCIAiCIAiCIAiCmJI6cApogEH9r/JE/1olCtjhPTybA34FAAD//5X3XDw=") 4.051625297s ago: executing program 1 (id=2591): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 4.00767661s ago: executing program 0 (id=2592): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x60280, 0x0) ioctl$BTRFS_IOC_RM_DEV(r0, 0x5000940b, &(0x7f0000002040)={{}, "7e1446d02b7587c98cfb943e8a17263ecd5d37f580d62e32271ede664d56362d417f1881cb1b8b6d382309a89c1295ea466c83b64ceebcf807eab212db51edad2c1b57ec939a90d8ec40bf289b70ea29352e2ada37bcef704b7786d2aea495065a54c4ec237675aa88ec893960ba12d08e4637b8c18b3c1589cd3c6bea67ef540b38b86bd82cdfa3e78ffdf34993eaf7745d8712e58f05e8096801c7c6925f505c8774c73845cc60a7bc061a31d8b13b6df65d7659b0b49dd62ff7ac195940bb62d90badb183646a7bc6ced17436bf6739604f6b73d03c3325cb02acfc2b4909127c6b7d3e19c41c97f2d6058f1bf1ee31c621255f2c9efcdcb257b568e32999d863456ef7b0fc14dcb9e5d9196d26fd6add993c884a14005bd7a1bbe158948df83aa25039d976065a21b5c0d0a9683d33ac454d79f13de7cbf361c2b0e71375dc3e8170d11dc2ce61fd3093f714cce960cc063f64f8ce897c6256164d8da5dc58bca707f6b637a46c58473d1609b1c895f3629358a250b4303521b686de948da77782de4287da335796515c518be9a07984a848873e788c4048cc8b1635fe8bb4acfa7a77da264e0bf27de4084fd45dc4ffd33e53443c1907b46ad50a63238e4248308a07b65956efbc696de396b7f9ce10982b4cf4bba319fab3c10453d4929adef679bf72849954cf242f8b58e872bb6c6542eb809b979001333e61aa024e62d7163a2c8a6ff469c9f3f0075d612fb4dc1d207267bedd6705f65d7b963f5e7a71ffae22a01e028bac53f19a7f88d2426fa049e2fca573dddd0f1a26db8cc5657cac61daa61ee6e550d20ac79d1e99ea8b09cbd4757869441465544597e34bfda69d31b4ecc15a8410a1e12e73cc733990b127de25e85fc34abe95944d37f347ae742eaee40f89d73adebec81bc8dbf92a2ececdff7fe11e09a92dad3f3916bcd0703be2171764cdff7068fc015f33b9df873236674b72c591c52c889d562fb189ebf6b4c9efc50691eecb8f1c33b2d57900f11644cce3232c2754d5d2eac331867c70582b97a33217edfc55ef4b48ef21f1db08c45b8e025696eac1eaa944f92f339e87b7e14353961b641612e66f45c04e6febe128462461760c4a4819c409bf8acfa3d7d139a435d66a943afd79bfc9dd737f5fd444cd8d584f1de3899b4faeecdf62a6193d66b3e39f3617c9bd8b86a20b8e78a3fb983c053aedf136f6fc30fa017cd18a552229ee7ec26c954e2997e2267cc9ec1c3126cc8339c201c4addbe0eb00542c4381780a8e3efc8b6b9f8dfbee1febccdb7d38fc8fa5dc90a5197b9bffeb8fcde1df4e9da1427a2899e2c210d533b0a193c72416bef5a1deb7ef60e67ee86e0bb7ca0dcfdc363a66eb22131c4498057d1ffb284774a923aadb2957584279f0782479758879e0be736447d9cf03afd0b8d7ecffa20432537afff5ea9b69b62f1266817f3a9e3996486e43cc6d87e3c4d1e8f8bd6c25c73aa128b8764a5526443717038dce59a30241e7d5a1ead6c35f7aeb3358f7dbbd68cd9757b5429ce604f82913f1bde3a805554408b4f0d860fe3da93e99f1444a38652c95a2c1ce95fe6d0cc58c2d0d974f20ead31a506d683aaff15a1886691401cb0fc0284605c69acb77c885186602c29543344e25c2e8a6c80a209093306acac2f0e74ceed6953dd2b12b4f42c32cc4757b312247707464f811f544a3e33825c5264080f3c5c1f50a26a468054431c1141747a188c5a4d1cece0189a263296e2eae9a9741ca28a88e5459d9e7109072ffa40558262541f9d1972e23a236b819d42f34b714b11bc63485d75d679f06928634df7d1dd2d001a2d8f746acc33c8fc5f9f72ec32250d289d87ae689fb42fbed76a2b867609af2275a442be2a32c8ec5726e511243025a03ad0221554ccb09b0bdb948914b614192fa7faadc7ece52494f743b527890414191405afe085730a8abece312acafbd44916d3b997755b0132aaa5de9f4443a73532731821ba3127b8ad99e9bc5649bdf990520d5354a8c5de4f1202e886801e32fbe042fc94834874d7789577d4e38396bee318a30b462ba72ab2b23c341feba1b3be4c3654fce74eebe23a66f8fad113c4c71eb3f073386c2f3278c881ad0144f470c18e060b4d9cd3b968660b6f4830b8d56698dec2018181fa05712b50fdab1e6cbc4e5b0e0b3b7f1458c4861bc5afcaaed1b5c40e44a7695c6fb0540dcb86ce5c622e2fda37be70c14735c28cef28400c15b331fecd617cefbfbe1511217a1d0cca4c2629ff20c4b3d55c213ba32efaca52588a04508a6a855b2477a73a7137aba49151516c08d1ce1c3353c612a394fac80c642f9596021373838f1e6d5471f3c953c799697e8cb9534ad54bf25a7ab1f0c408371aad2401c3a81ca5dc4f38ac2047d3aa0d06698e2f88e86a6ab22c8b0487a01ae611cf03958ed7bbc45fef71b3e217fd54d8d8cfc988cfdf0f01433c24dd8671add341705286c0a5a25dac164d8ee019c76ba1118ea752ee3da34e0da3c82aa22a5c0192a6c1b9e89a6af5bd0199551629c493b6711cc77ae21d0f589affc0a7507f337e50a4d3d6ce2fe65af324d1e55fb91181d8ba0d60faabaf5882a4c502b52167f4dde9b04b6234b5ee7d1eba51e90dc6ff4213cda22aa45c472025cdb36ce27c360ee708848400a4c13442c1a277ae823c52882481c4c9e5a267d85a5da0fb8bce0041407c639a420d8a8c2c2306ffc188997d32b1941197301e0c1ca3e09053aded83607576c28c8016cd749342e631bd1679bc25d58449d6641d2d083f044a1eb5a89d0c837eb7dc7b8a0aaaa594d0002e607abbf4eb339909393d293fff8eb76f0ddc671441745b6ddf1eae2a5b7d2b2cb8d08e9f32afb969a227a5f8168db3fa052761212983810a384b732701d4a71a7bb54d7f494e0e500cef80bd447755f2a52ca31c95cb4b9eefecb7f64c616dd5499fb4fa82f7051ee3980a517efb9a5a5a670ea5ff2c60e688a0129f98dac05ae959088c2b0a2c774bd0cbe36b07dc607d64cb5d490118858b33d8eedc06c50a8502de344eaf867708510649d0fae1ecb695e018932657c097b2921c21ccc2f3c2ce2fa4b3a667b0bc7ae98473ef7146ae8e542ba11e617c34260bd4b54428fa0ebf13a4719ceee890c1d52dad6b9ce19e20f6971d2fee67c56e990110c26652097eafb028698fd8dfb99040a7a84393bd7ee81076defcecd0c2a6a7ccb8d1f23459cec19f03652f7616294b5e5d30d3495eaccdc7eecff14d4c34bc51a4bd4cd27f92235db48818aa533184f6056a25f227899d5ecb01e0780a4469961440deb2843ba45fd1f02915519a8b37ccb3f4a5ff4212a6994483ff0d6f75f2808a31ad3894b1f3fcc039013aca6ea13b818204d1e36371d80bc5dc61fa80872178e927e856d86ca19c0856328448125a5779ee5bc10e1aa9a2ab48fda0cf6b62c3abea27809bb7fba90c85aa67b37416aabcb40e30546aa213766b1e53f75b6321850450b90887f84e9739f792fe40fb4310029343144942d131aa333973afd9be15061fe5b08cbf97c6c2230f849cdec2b79285e24a0225f40c04f2b090023031c0c66f0309b7a6fcf90974b3370b6a966552b9d0914e2f1a22a409590f8d1b73aa9f6f2421079e52dd2e458b3906705a65d9eef300eb2a20121354f8c654f623caa0ae2c64c0f7c44b2da13a43e84d735eab29a87d28bb4fcf47c37be60862e96cd5248e84b25ff2e6aba50585f3a67a8f691e69ce4584f708847461dc435855fd4752513cb1702818a56d2f4f07dd142e15daf4fc93a8308be50e28d0b9802fa119934643f51fb89643534f1fbb05bd2e02f8dd7fb828d231bc983a009e34718405bc8a5b6e87296f572701ceff27c3aef9dfbdf209907dc9cb02d67f0515f5c812d0c791c3dfc9e982b08d1a7e91c664aae62888d6e4703f79544f31415fc29585b22aa5e069e6b086ee87247f8376e05f2a9ab4281923312f1549788b3464a524666e423e3d17bae47936f67b29fd01cb96063150f606284bb7569bfb7cc253d4799f1b7a6af2ffcbb395a06ea899d14998bea343cde4951dc44906fcca3fb7a879eb47808ddab5d5610eda43394632cb81e2566382513022d061572ab0e35d0efb31b772ddada15bb5f967d1ad8e4824c0efbff7c360a012f9c6b55348abc6b2417f54ce93d145dd7f99609d7d84c5906ba5eced49a3b793b2c941a045476a66a7bac17c8851d37c8706eb3c1fc68665f92ffc336a4d05d151b788e06810fb8750a81aa3a598d3fc5f5af8c95c9fd423e3eed23b667b12d7337ff87d323db09c3b81e0748ff105d9d117b357ec0c8693b616854803e041deeae5d287a1188b31082322ac66b05d28b2039a63ce547738678ab7850f6eb1ee2dfce6c0294ef321b14692e0f8bcc84b4b4be36ace2464e9b6c3a1417e76f7f28c43a7e0a06950405ca2665a30c6ee19c10b5471933f9261790b39669aa07ecf2e709be5c6e3d5a1efb2f9f4c66f8f85be1967d77516bd3bf20c2cd192efb0f6447c5e6e05783ee64135a0a7cc0e8e415d3dbef2d69756e05ace98001e531909596591c386ea69ea2ee0684ce0204f6c9938bcf82ad4a078c065f0566380d657ee534a43820d1dd8b735d17c5b82e262f0a0bf56049626c68c4d4bc2d4218de225301488e8fdb9777a37e3f1e3fcce6626533afe3a5040a969ab3a0946b1adae13e1a5f7c97012332e01750c61734778d0b9d50a5b40125aff0a2cb32a308b600f2118a059966757fff94e875ef8f1727b487b88869df9e95a3a2d876128262c9a8c8d333d63aa17045ca40b282f0de679b0c32b6780b87aeb10ca8f7d71e5f363398698e6385408cfcb49667e5594f80624fbc5d2c8af6bb82103effaeeab36dc4a04e4a9c8eb36db1d8697d492bb749bf4eaf6f7e6c1c794f4797e9c611c529a542a89328e3fd0dba24f25eac4388a1823a8db19b9a5ebdc8553faae20532fcdf0537ddb77d3abba77e8ddf414dc9c514624f7c1da31deb8672da4dd0ba5dc39a5f3f801cb486845d11bdf942a0f0d7b85cd821dbe9e151d67152d959b90712f67f3703594b6e8643b17c26b2a2e24a4ff1db5ce4fd61b532a34ef497744a920599a4d1b46d7630309add24c0e3cdabaf7ea65303dca4b36d224b4f261c024e263c5adc6373a256b3abead7876f207344dd4794fb3f7603d99a4b7fb79fde8cc4c486443e2c1c09e0dcd313fdaaa9806fdad54ed5d60bb93775058d53033c2f4ece51504d5fa60b24b120c9cc339f682bfb4d3090eb2a20a7c6ef51edc8547b833d58b6048371e7a0b4eba357a7aed5deed5cdb8c4efb8ec0508e9d65993670ab4097fbeff5b959ec67a1a6a2da6113935d7c88498b3d5a7d7497bcdb50b2108bfb43a7ff0b08304690ef9a36b4d0319f8a8ca9f58bba336ede12a32bd3358631d59546c7798bd0585a3f55de4f839b9ec501e44e61d875e54818b4331820c77ff32afc2dc288d41349690623bda4549efafaed3321d53a04ecc81f3d9e0520acf80d362f9a534731ad418b1c0c7f6882d61f00e06e093c0a544056f161505e8da45adf961f72571a2a6163b32f2ce92a15693a4564db0dacac0e771bb3aa9c91fadf6fb44a550b4d20eaf41c6a2bf0b60757bb2febf44aaefd27324b2efc4830ff2f236b325c70ebe8787241cb2fef87b6f3d1c18c3123f348acc2c1b7dde26d487bbf61cddbf74256b873f7b51998bf679dc486e5b03b692a675090564725b4e1a71916fdf8ee33e6f2e1"}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb9}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1f, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e000000"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.00149694s ago: executing program 3 (id=2593): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x202) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_VIF(r1, 0x0, 0xcb, &(0x7f00000000c0)={0xffffffffffffffff, 0x8, 0x5, 0x2, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x34}, @private=0xa010102}, 0x10) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xbebf8000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000141, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) ptrace$ARCH_SHSTK_LOCK(0x1e, r4, 0x3, 0x5003) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r5, 0x541b, &(0x7f0000000140)) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r6, 0x400, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020100008500000043"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='spmi_read_end\x00', 0xffffffffffffffff, 0x0, 0x3}, 0xff03) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00'}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) 3.914292977s ago: executing program 1 (id=2594): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x94) syz_mount_image$msdos(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x2, 0x236, &(0x7f0000000440)="$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") mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)={0x1b, 0x0, 0x0, 0x101, 0x0, 0x1, 0x100, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x5}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r3}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000006000000000000000000bf0500000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0xffffffffffffff0f, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r4, &(0x7f00000008c0)=ANY=[@ANYBLOB="7f454c46040700030700000000000000020003"], 0x58) close(r4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000840)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000007c0), &(0x7f0000000800)='%pB \x00'}, 0x20) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000880), 0x2041, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)={0x2, 0x4, 0x8, 0x1, 0x80, r4, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5}, 0x50) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000940)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x2c, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x4}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x7, &(0x7f0000000200)=@raw=[@map_idx={0x18, 0x0, 0x5, 0x0, 0xb}, @exit, @ringbuf_query], &(0x7f00000002c0)='GPL\x00', 0x7, 0xae, &(0x7f0000000b40)=""/174, 0x40f00, 0x28, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f00000009c0)=[r2, r3, r4, r5, r6, 0xffffffffffffffff, r7, 0x1, r8, 0x1], &(0x7f0000000a00)=[{0x2, 0x3, 0x7, 0xc}, {0x3, 0x1, 0x0, 0x7}, {0x3, 0x1, 0x1, 0xf}, {0x2, 0x5, 0x10, 0xa}, {0x1, 0x4, 0x1, 0xb}, {0x4, 0x1, 0x2, 0xc}, {0x0, 0x1, 0x6, 0xb}, {0x4, 0x2, 0x3, 0xa}], 0x10, 0x5}, 0x94) ioctl$TCFLSH(r0, 0x400455c8, 0x0) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r9, 0x400448de, &(0x7f0000000200)) 3.335014602s ago: executing program 2 (id=2595): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYRESDEC], &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() socket$netlink(0x10, 0x3, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x3, &(0x7f0000002480)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r3 = creat(&(0x7f0000000080)='./file0/file1\x00', 0x90) write$cgroup_type(r3, &(0x7f00000009c0), 0xd4ba0ff) r4 = syz_open_procfs$userns(r2, &(0x7f0000000180)) r5 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000240)={0x3ff, 0x0, &(0x7f00000001c0)=[r0, r3, r4, 0xffffffffffffffff, r0, r1, r3, r5, r0, r0]}, 0xa) unlink(&(0x7f0000000100)='./file0/file1\x00') rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='./file0/file1\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000001540)=ANY=[@ANYBLOB], &(0x7f0000000300)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x9}, 0x94) lsetxattr$security_evm(&(0x7f0000000280)='./file0/../file0\x00', &(0x7f0000000640), 0x0, 0x0, 0x1) getxattr(0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xc1103000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x1, './file0/../file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x2, 0x0) r8 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) readv(r8, &(0x7f0000000100)=[{0x0}, {&(0x7f0000000b40)=""/4096, 0x1000}], 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 3.000365158s ago: executing program 4 (id=2596): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000680)={0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x19, 0x8, &(0x7f0000000a80)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x200, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) rt_tgsigqueueinfo(r0, r0, 0x0, &(0x7f0000000180)={0x2, 0x635, 0x4}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYRES64], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd95, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x9, 0xb, &(0x7f0000000580)=ANY=[@ANYRESDEC=r3], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sock=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x21, 0x5, 0x644851d, &(0x7f0000000000)) socket$vsock_stream(0x28, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r6, 0x2, &(0x7f0000000040)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x0, 0x1170, 0x1170, 0x0, 0x1170, 0x298, 0x1398, 0x1398, 0x298, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @private2={0xfc, 0x2, '\x00', 0x1}, [0xffffffff, 0xff000000], [0x0, 0x0, 0x0, 0xffffff00], 'veth0_vlan\x00', 'veth0_to_hsr\x00', {}, {}, 0x2e, 0x0, 0x0, 0x46}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@inet=@socket2={{0x28}, 0x1}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) 2.916451665s ago: executing program 3 (id=2597): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x7a, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f0000000140), &(0x7f0000000300)=r1}, 0x20) mlockall(0x2) 2.857874349s ago: executing program 3 (id=2598): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000020000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000001e0000000c00018008000100", @ANYRES32=r3], 0x20}}, 0x0) 2.857324979s ago: executing program 3 (id=2599): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x60280, 0x0) ioctl$BTRFS_IOC_RM_DEV(r0, 0x5000940b, &(0x7f0000002040)={{}, "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"}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1f, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) 2.382237136s ago: executing program 0 (id=2600): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000680)={0xffffffffffffffff}) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x19, 0x8, &(0x7f0000000a80)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x200, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) rt_tgsigqueueinfo(r0, r0, 0x0, &(0x7f0000000180)={0x2, 0x635, 0x4}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYRES64], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd95, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x9, 0xb, &(0x7f0000000580)=ANY=[@ANYRESDEC=r1], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sock=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x21, 0x5, 0x644851d, &(0x7f0000000000)) socket$vsock_stream(0x28, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000040)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x0, 0x1170, 0x1170, 0x0, 0x1170, 0x298, 0x1398, 0x1398, 0x298, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @private2={0xfc, 0x2, '\x00', 0x1}, [0xffffffff, 0xff000000], [0x0, 0x0, 0x0, 0xffffff00], 'veth0_vlan\x00', 'veth0_to_hsr\x00', {}, {}, 0x2e, 0x0, 0x0, 0x46}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@inet=@socket2={{0x28}, 0x1}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) 879.113782ms ago: executing program 4 (id=2601): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$RTC_EPOCH_READ(r0, 0x8008700d, &(0x7f00000002c0)) socket$inet6_udp(0xa, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000400000005000000", @ANYRES32, @ANYBLOB="000000000000e100000008000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b708000000feffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8dffffffff000000009300", 0xffffffff}, 0x48, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc1}, &(0x7f0000000300)={0x0, "6035ae1e0fe721441705322025000000003e2a5b4377f7ad4bcf2b71d17e1ec0ef54e6773fd7264c39ea00c508ba607269613800"}, 0x48, 0xfffffffffffffffe) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) 878.546962ms ago: executing program 4 (id=2602): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfffffd9d) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x1, 0x4}}, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$setownex(r3, 0xf, &(0x7f00000001c0)={0x1, 0xffffffffffffffff}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x32600) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0x8010002b) connect$tipc(r2, 0x0, 0x0) listen(r0, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa000800460c002c0000000000069078ac1414bbac1414aa070392004e234e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB], 0x0) 877.423502ms ago: executing program 0 (id=2603): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x60280, 0x0) ioctl$BTRFS_IOC_RM_DEV(r0, 0x5000940b, &(0x7f0000002040)={{}, "7e1446d02b7587c98cfb943e8a17263ecd5d37f580d62e32271ede664d56362d417f1881cb1b8b6d382309a89c1295ea466c83b64ceebcf807eab212db51edad2c1b57ec939a90d8ec40bf289b70ea29352e2ada37bcef704b7786d2aea495065a54c4ec237675aa88ec893960ba12d08e4637b8c18b3c1589cd3c6bea67ef540b38b86bd82cdfa3e78ffdf34993eaf7745d8712e58f05e8096801c7c6925f505c8774c73845cc60a7bc061a31d8b13b6df65d7659b0b49dd62ff7ac195940bb62d90badb183646a7bc6ced17436bf6739604f6b73d03c3325cb02acfc2b4909127c6b7d3e19c41c97f2d6058f1bf1ee31c621255f2c9efcdcb257b568e32999d863456ef7b0fc14dcb9e5d9196d26fd6add993c884a14005bd7a1bbe158948df83aa25039d976065a21b5c0d0a9683d33ac454d79f13de7cbf361c2b0e71375dc3e8170d11dc2ce61fd3093f714cce960cc063f64f8ce897c6256164d8da5dc58bca707f6b637a46c58473d1609b1c895f3629358a250b4303521b686de948da77782de4287da335796515c518be9a07984a848873e788c4048cc8b1635fe8bb4acfa7a77da264e0bf27de4084fd45dc4ffd33e53443c1907b46ad50a63238e4248308a07b65956efbc696de396b7f9ce10982b4cf4bba319fab3c10453d4929adef679bf72849954cf242f8b58e872bb6c6542eb809b979001333e61aa024e62d7163a2c8a6ff469c9f3f0075d612fb4dc1d207267bedd6705f65d7b963f5e7a71ffae22a01e028bac53f19a7f88d2426fa049e2fca573dddd0f1a26db8cc5657cac61daa61ee6e550d20ac79d1e99ea8b09cbd4757869441465544597e34bfda69d31b4ecc15a8410a1e12e73cc733990b127de25e85fc34abe95944d37f347ae742eaee40f89d73adebec81bc8dbf92a2ececdff7fe11e09a92dad3f3916bcd0703be2171764cdff7068fc015f33b9df873236674b72c591c52c889d562fb189ebf6b4c9efc50691eecb8f1c33b2d57900f11644cce3232c2754d5d2eac331867c70582b97a33217edfc55ef4b48ef21f1db08c45b8e025696eac1eaa944f92f339e87b7e14353961b641612e66f45c04e6febe128462461760c4a4819c409bf8acfa3d7d139a435d66a943afd79bfc9dd737f5fd444cd8d584f1de3899b4faeecdf62a6193d66b3e39f3617c9bd8b86a20b8e78a3fb983c053aedf136f6fc30fa017cd18a552229ee7ec26c954e2997e2267cc9ec1c3126cc8339c201c4addbe0eb00542c4381780a8e3efc8b6b9f8dfbee1febccdb7d38fc8fa5dc90a5197b9bffeb8fcde1df4e9da1427a2899e2c210d533b0a193c72416bef5a1deb7ef60e67ee86e0bb7ca0dcfdc363a66eb22131c4498057d1ffb284774a923aadb2957584279f0782479758879e0be736447d9cf03afd0b8d7ecffa20432537afff5ea9b69b62f1266817f3a9e3996486e43cc6d87e3c4d1e8f8bd6c25c73aa128b8764a5526443717038dce59a30241e7d5a1ead6c35f7aeb3358f7dbbd68cd9757b5429ce604f82913f1bde3a805554408b4f0d860fe3da93e99f1444a38652c95a2c1ce95fe6d0cc58c2d0d974f20ead31a506d683aaff15a1886691401cb0fc0284605c69acb77c885186602c29543344e25c2e8a6c80a209093306acac2f0e74ceed6953dd2b12b4f42c32cc4757b312247707464f811f544a3e33825c5264080f3c5c1f50a26a468054431c1141747a188c5a4d1cece0189a263296e2eae9a9741ca28a88e5459d9e7109072ffa40558262541f9d1972e23a236b819d42f34b714b11bc63485d75d679f06928634df7d1dd2d001a2d8f746acc33c8fc5f9f72ec32250d289d87ae689fb42fbed76a2b867609af2275a442be2a32c8ec5726e511243025a03ad0221554ccb09b0bdb948914b614192fa7faadc7ece52494f743b527890414191405afe085730a8abece312acafbd44916d3b997755b0132aaa5de9f4443a73532731821ba3127b8ad99e9bc5649bdf990520d5354a8c5de4f1202e886801e32fbe042fc94834874d7789577d4e38396bee318a30b462ba72ab2b23c341feba1b3be4c3654fce74eebe23a66f8fad113c4c71eb3f073386c2f3278c881ad0144f470c18e060b4d9cd3b968660b6f4830b8d56698dec2018181fa05712b50fdab1e6cbc4e5b0e0b3b7f1458c4861bc5afcaaed1b5c40e44a7695c6fb0540dcb86ce5c622e2fda37be70c14735c28cef28400c15b331fecd617cefbfbe1511217a1d0cca4c2629ff20c4b3d55c213ba32efaca52588a04508a6a855b2477a73a7137aba49151516c08d1ce1c3353c612a394fac80c642f9596021373838f1e6d5471f3c953c799697e8cb9534ad54bf25a7ab1f0c408371aad2401c3a81ca5dc4f38ac2047d3aa0d06698e2f88e86a6ab22c8b0487a01ae611cf03958ed7bbc45fef71b3e217fd54d8d8cfc988cfdf0f01433c24dd8671add341705286c0a5a25dac164d8ee019c76ba1118ea752ee3da34e0da3c82aa22a5c0192a6c1b9e89a6af5bd0199551629c493b6711cc77ae21d0f589affc0a7507f337e50a4d3d6ce2fe65af324d1e55fb91181d8ba0d60faabaf5882a4c502b52167f4dde9b04b6234b5ee7d1eba51e90dc6ff4213cda22aa45c472025cdb36ce27c360ee708848400a4c13442c1a277ae823c52882481c4c9e5a267d85a5da0fb8bce0041407c639a420d8a8c2c2306ffc188997d32b1941197301e0c1ca3e09053aded83607576c28c8016cd749342e631bd1679bc25d58449d6641d2d083f044a1eb5a89d0c837eb7dc7b8a0aaaa594d0002e607abbf4eb339909393d293fff8eb76f0ddc671441745b6ddf1eae2a5b7d2b2cb8d08e9f32afb969a227a5f8168db3fa052761212983810a384b732701d4a71a7bb54d7f494e0e500cef80bd447755f2a52ca31c95cb4b9eefecb7f64c616dd5499fb4fa82f7051ee3980a517efb9a5a5a670ea5ff2c60e688a0129f98dac05ae959088c2b0a2c774bd0cbe36b07dc607d64cb5d490118858b33d8eedc06c50a8502de344eaf867708510649d0fae1ecb695e018932657c097b2921c21ccc2f3c2ce2fa4b3a667b0bc7ae98473ef7146ae8e542ba11e617c34260bd4b54428fa0ebf13a4719ceee890c1d52dad6b9ce19e20f6971d2fee67c56e990110c26652097eafb028698fd8dfb99040a7a84393bd7ee81076defcecd0c2a6a7ccb8d1f23459cec19f03652f7616294b5e5d30d3495eaccdc7eecff14d4c34bc51a4bd4cd27f92235db48818aa533184f6056a25f227899d5ecb01e0780a4469961440deb2843ba45fd1f02915519a8b37ccb3f4a5ff4212a6994483ff0d6f75f2808a31ad3894b1f3fcc039013aca6ea13b818204d1e36371d80bc5dc61fa80872178e927e856d86ca19c0856328448125a5779ee5bc10e1aa9a2ab48fda0cf6b62c3abea27809bb7fba90c85aa67b37416aabcb40e30546aa213766b1e53f75b6321850450b90887f84e9739f792fe40fb4310029343144942d131aa333973afd9be15061fe5b08cbf97c6c2230f849cdec2b79285e24a0225f40c04f2b090023031c0c66f0309b7a6fcf90974b3370b6a966552b9d0914e2f1a22a409590f8d1b73aa9f6f2421079e52dd2e458b3906705a65d9eef300eb2a20121354f8c654f623caa0ae2c64c0f7c44b2da13a43e84d735eab29a87d28bb4fcf47c37be60862e96cd5248e84b25ff2e6aba50585f3a67a8f691e69ce4584f708847461dc435855fd4752513cb1702818a56d2f4f07dd142e15daf4fc93a8308be50e28d0b9802fa119934643f51fb89643534f1fbb05bd2e02f8dd7fb828d231bc983a009e34718405bc8a5b6e87296f572701ceff27c3aef9dfbdf209907dc9cb02d67f0515f5c812d0c791c3dfc9e982b08d1a7e91c664aae62888d6e4703f79544f31415fc29585b22aa5e069e6b086ee87247f8376e05f2a9ab4281923312f1549788b3464a524666e423e3d17bae47936f67b29fd01cb96063150f606284bb7569bfb7cc253d4799f1b7a6af2ffcbb395a06ea899d14998bea343cde4951dc44906fcca3fb7a879eb47808ddab5d5610eda43394632cb81e2566382513022d061572ab0e35d0efb31b772ddada15bb5f967d1ad8e4824c0efbff7c360a012f9c6b55348abc6b2417f54ce93d145dd7f99609d7d84c5906ba5eced49a3b793b2c941a045476a66a7bac17c8851d37c8706eb3c1fc68665f92ffc336a4d05d151b788e06810fb8750a81aa3a598d3fc5f5af8c95c9fd423e3eed23b667b12d7337ff87d323db09c3b81e0748ff105d9d117b357ec0c8693b616854803e041deeae5d287a1188b31082322ac66b05d28b2039a63ce547738678ab7850f6eb1ee2dfce6c0294ef321b14692e0f8bcc84b4b4be36ace2464e9b6c3a1417e76f7f28c43a7e0a06950405ca2665a30c6ee19c10b5471933f9261790b39669aa07ecf2e709be5c6e3d5a1efb2f9f4c66f8f85be1967d77516bd3bf20c2cd192efb0f6447c5e6e05783ee64135a0a7cc0e8e415d3dbef2d69756e05ace98001e531909596591c386ea69ea2ee0684ce0204f6c9938bcf82ad4a078c065f0566380d657ee534a43820d1dd8b735d17c5b82e262f0a0bf56049626c68c4d4bc2d4218de225301488e8fdb9777a37e3f1e3fcce6626533afe3a5040a969ab3a0946b1adae13e1a5f7c97012332e01750c61734778d0b9d50a5b40125aff0a2cb32a308b600f2118a059966757fff94e875ef8f1727b487b88869df9e95a3a2d876128262c9a8c8d333d63aa17045ca40b282f0de679b0c32b6780b87aeb10ca8f7d71e5f363398698e6385408cfcb49667e5594f80624fbc5d2c8af6bb82103effaeeab36dc4a04e4a9c8eb36db1d8697d492bb749bf4eaf6f7e6c1c794f4797e9c611c529a542a89328e3fd0dba24f25eac4388a1823a8db19b9a5ebdc8553faae20532fcdf0537ddb77d3abba77e8ddf414dc9c514624f7c1da31deb8672da4dd0ba5dc39a5f3f801cb486845d11bdf942a0f0d7b85cd821dbe9e151d67152d959b90712f67f3703594b6e8643b17c26b2a2e24a4ff1db5ce4fd61b532a34ef497744a920599a4d1b46d7630309add24c0e3cdabaf7ea65303dca4b36d224b4f261c024e263c5adc6373a256b3abead7876f207344dd4794fb3f7603d99a4b7fb79fde8cc4c486443e2c1c09e0dcd313fdaaa9806fdad54ed5d60bb93775058d53033c2f4ece51504d5fa60b24b120c9cc339f682bfb4d3090eb2a20a7c6ef51edc8547b833d58b6048371e7a0b4eba357a7aed5deed5cdb8c4efb8ec0508e9d65993670ab4097fbeff5b959ec67a1a6a2da6113935d7c88498b3d5a7d7497bcdb50b2108bfb43a7ff0b08304690ef9a36b4d0319f8a8ca9f58bba336ede12a32bd3358631d59546c7798bd0585a3f55de4f839b9ec501e44e61d875e54818b4331820c77ff32afc2dc288d41349690623bda4549efafaed3321d53a04ecc81f3d9e0520acf80d362f9a534731ad418b1c0c7f6882d61f00e06e093c0a544056f161505e8da45adf961f72571a2a6163b32f2ce92a15693a4564db0dacac0e771bb3aa9c91fadf6fb44a550b4d20eaf41c6a2bf0b60757bb2febf44aaefd27324b2efc4830ff2f236b325c70ebe8787241cb2fef87b6f3d1c18c3123f348acc2c1b7dde26d487bbf61cddbf74256b873f7b51998bf679dc486e5b03b692a675090564725b4e1a71916fdf8ee33e6f2e1"}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb9}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1f, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e000000"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) 387.60334ms ago: executing program 1 (id=2605): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000040)={r1, 0x1, 0x6, @local}, 0x10) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000000c0)={r1, 0x1, 0x6, @local}, 0x10) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000080)={r1, 0x1, 0x6, @local}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000", @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) poll(0x0, 0x0, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x4, &(0x7f0000000a40)=ANY=[@ANYBLOB="1801000000050000000000000000ea0485000000d000000095"], &(0x7f0000000a00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="120000", @ANYRES32, @ANYBLOB='\x00'/17, @ANYRES32, @ANYBLOB], 0x50) fadvise64(0xffffffffffffffff, 0x8000000000000000, 0x9, 0x6) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000100)='./bus\x00', 0x210c11, &(0x7f00000001c0)=ANY=[@ANYRES64=0x0, @ANYRES8, @ANYRESHEX=0x0, @ANYRESHEX, @ANYRES32], 0x2, 0x227, &(0x7f0000000580)="$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") 375.939171ms ago: executing program 4 (id=2606): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 363.191122ms ago: executing program 2 (id=2607): mkdirat(0xffffffffffffffff, 0x0, 0x4) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0f2}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x17, 0x0, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f00000002c0)={0x1, 0x0, [{0x7, 0x3, 0x4, 0x9, 0x80000000, 0xffffffff, 0xb}]}) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406c256d0000000200000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x13d, 0x0, 0xd6e}}) syz_usb_control_io(r2, &(0x7f0000000340)={0x2c, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0003040000000403a71b4bc23d72013ca51e30aa57f5e5f47b4a5e0be126d77b96dd885358c39be4ec49fcc2bc1b575ac087c4d2c81539b2b78945380f5606029de6b6c4a8f56cccfa3b81298449d5dc3248d6d8cee84c5c7580e4ac"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) 239.836942ms ago: executing program 4 (id=2608): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x7a, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f0000000140), &(0x7f0000000300)=r1}, 0x20) mlockall(0x2) 0s ago: executing program 4 (id=2609): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x202) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_VIF(r1, 0x0, 0xcb, &(0x7f00000000c0)={0xffffffffffffffff, 0x8, 0x5, 0x2, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x34}, @private=0xa010102}, 0x10) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xbebf8000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000141, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) ptrace$ARCH_SHSTK_LOCK(0x1e, r4, 0x3, 0x5003) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r5, 0x541b, &(0x7f0000000140)) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r6, 0x400, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020100008500000043"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='spmi_read_end\x00', 0xffffffffffffffff, 0x0, 0x3}, 0xff03) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00'}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) kernel console output (not intermixed with test programs): 94][ T6] usb 5-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 571.989879][ T6] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 572.510359][ T6] usb 5-1: config 0 descriptor?? [ 572.783269][ T7308] capability: warning: `syz.3.1642' uses 32-bit capabilities (legacy support in use) [ 573.696928][ T6] lenovo 0003:17EF:6047.0033: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.4-1/input0 [ 573.859309][ T7322] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1643'. [ 573.885329][ T7322] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1643'. [ 573.898505][ T6] lenovo 0003:17EF:6047.0033: Failed to switch F7/9/11 mode: -71 [ 574.583555][ T6] lenovo 0003:17EF:6047.0033: Failed to switch middle button: -71 [ 574.593956][ T6] lenovo 0003:17EF:6047.0033: Fn-lock setting failed: -71 [ 575.062783][ T422] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 575.137050][ T6] lenovo 0003:17EF:6047.0033: Sensitivity setting failed: -71 [ 575.152218][ T6] usb 5-1: USB disconnect, device number 32 [ 575.277911][ T7335] loop2: detected capacity change from 0 to 16 [ 575.284934][ T7335] erofs: (device loop2): mounted with root inode @ nid 36. [ 575.295527][ T422] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 575.333850][ T422] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 575.358359][ T7338] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1647'. [ 575.363516][ T422] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 575.382964][ T7338] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1647'. [ 575.413076][ T422] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 575.422235][ T422] usb 1-1: Manufacturer: syz [ 575.443333][ T422] usb 1-1: config 0 descriptor?? [ 575.723054][ T6] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 575.912779][ T6] usb 5-1: Using ep0 maxpacket: 16 [ 575.921836][ T7332] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 575.933459][ T7332] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 576.273047][ T422] uclogic 0003:256C:006D.0034: interface is invalid, ignoring [ 576.291956][ T422] usb 1-1: USB disconnect, device number 33 [ 576.543653][ T6] usb 5-1: unable to get BOS descriptor or descriptor too short [ 576.551364][ T6] usb 5-1: no configurations [ 576.563516][ T6] usb 5-1: can't read configurations, error -22 [ 576.596151][ T7349] loop4: detected capacity change from 0 to 512 [ 576.631569][ T7349] EXT4-fs (loop4): 1 orphan inode deleted [ 576.638585][ T7349] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 576.647779][ T5870] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 576.662883][ T7349] ext4 filesystem being mounted at /44/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 576.666096][ T5870] EXT4-fs error (device loop4): ext4_release_dquot:6839: comm kworker/u4:45: Failed to release dquot type 1 [ 577.076508][ T493] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 577.775332][ T493] usb 1-1: Using ep0 maxpacket: 16 [ 578.592929][ C0] ip6_tunnel: K xmit: Local address not yet configured! [ 578.603877][ T7374] device batadv_slave_1 entered promiscuous mode [ 578.855411][ T7376] loop2: detected capacity change from 0 to 16 [ 579.080847][ T7376] erofs: (device loop2): mounted with root inode @ nid 36. [ 579.163353][ T6451] EXT4-fs (loop4): unmounting filesystem. [ 579.392069][ T493] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 579.401342][ T493] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 579.419021][ T493] usb 1-1: Product: syz [ 579.462293][ T493] usb 1-1: Manufacturer: syz [ 579.467070][ T493] usb 1-1: SerialNumber: syz [ 579.469541][ T493] r8152-cfgselector 1-1: config 0 descriptor?? [ 579.473584][ T7373] device batadv_slave_1 left promiscuous mode [ 579.554900][ T7385] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1659'. [ 579.575388][ T7385] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1659'. [ 579.599454][ T7383] loop2: detected capacity change from 0 to 4096 [ 579.614292][ T7383] EXT4-fs (loop2): Test dummy encryption mode enabled [ 579.739444][ T7383] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c028, mo2=0003] [ 579.751342][ T28] audit: type=1400 audit(1765544209.399:494): avc: denied { search } for pid=7353 comm="syz.0.1652" name="/" dev="configfs" ino=13674 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 579.786131][ T7354] binder: 7353:7354 ioctl c0306201 200000000640 returned -22 [ 579.878359][ T7383] System zones: 0-5 [ 579.884553][ T493] r8152-cfgselector 1-1: Unknown version 0x0000 [ 579.891712][ T7383] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 579.894370][ T493] r8152-cfgselector 1-1: Unknown version 0x0000 [ 579.907718][ T493] r8152-cfgselector 1-1: USB disconnect, device number 34 [ 580.277285][ T7395] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1663'. [ 580.300382][ T283] EXT4-fs (loop2): unmounting filesystem. [ 580.554931][ T2540] usb 2-1: new full-speed USB device number 36 using dummy_hcd [ 583.440634][ T7430] loop2: detected capacity change from 0 to 2048 [ 583.798194][ T7430] loop2: p2 p3 p7 [ 583.837720][ T7427] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1672'. [ 583.929403][ T7427] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1672'. [ 583.956114][ T7431] loop2: detected capacity change from 0 to 256 [ 584.008560][ T7435] loop0: detected capacity change from 0 to 1024 [ 584.185918][ T7435] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 584.254968][ T7435] SELinux: Context @ is not valid (left unmapped). [ 584.262110][ T28] audit: type=1400 audit(1765544213.909:495): avc: denied { relabelto } for pid=7432 comm="syz.0.1674" name="cgroup.controllers" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="@" [ 584.489897][ T7446] loop1: detected capacity change from 0 to 16 [ 584.501780][ T7446] erofs: (device loop1): mounted with root inode @ nid 36. [ 584.775689][ T282] EXT4-fs (loop0): unmounting filesystem. [ 585.922166][ T7472] loop1: detected capacity change from 0 to 256 [ 587.134209][ T7473] loop0: detected capacity change from 0 to 256 [ 587.140838][ T7473] FAT-fs (loop0): Unrecognized mount option "iocharsħ[peĈ _§ċet=iso8859-3" or missing value [ 588.231575][ T7479] loop0: detected capacity change from 0 to 512 [ 588.248386][ T7479] ext4: Bad value for 'barrier' [ 588.303608][ T391] usb 3-1: new full-speed USB device number 38 using dummy_hcd [ 588.504097][ T391] usb 3-1: not running at top speed; connect to a high speed hub [ 588.513250][ T391] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 588.522043][ T391] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 588.563924][ T391] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 588.591203][ T391] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 588.616752][ T391] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 588.989114][ T391] usb 3-1: Product: ᰉ [ 588.993495][ T391] usb 3-1: Manufacturer: • [ 588.998073][ T391] usb 3-1: SerialNumber: syz [ 589.339532][ T7497] loop1: detected capacity change from 0 to 16 [ 589.348035][ T7497] erofs: (device loop1): mounted with root inode @ nid 36. [ 589.575687][ T391] usb 3-1: 0:2 : does not exist [ 589.582480][ T391] usb 3-1: USB disconnect, device number 38 [ 591.571736][ T7524] loop0: detected capacity change from 0 to 512 [ 592.102258][ T7524] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 592.522524][ T7539] loop2: detected capacity change from 0 to 256 [ 592.637112][ T7546] device batadv_slave_1 entered promiscuous mode [ 592.724064][ T282] EXT4-fs (loop0): unmounting filesystem. [ 594.022409][ T7555] loop1: detected capacity change from 0 to 16 [ 594.046571][ T7555] erofs: (device loop1): mounted with root inode @ nid 36. [ 594.166481][ T7545] device batadv_slave_1 left promiscuous mode [ 594.232774][ T7565] loop2: detected capacity change from 0 to 256 [ 594.579943][ T7568] loop0: detected capacity change from 0 to 16 [ 594.613624][ T7568] erofs: (device loop0): mounted with root inode @ nid 36. [ 595.178132][ T7576] device batadv_slave_1 entered promiscuous mode [ 595.386253][ T7584] loop4: detected capacity change from 0 to 16 [ 595.403478][ T7584] erofs: (device loop4): mounted with root inode @ nid 36. [ 596.063814][ T7575] device batadv_slave_1 left promiscuous mode [ 596.201254][ T7578] loop0: detected capacity change from 0 to 40427 [ 596.216656][ T7578] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 596.232820][ T7578] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 596.272116][ T7578] F2FS-fs (loop0): Found nat_bits in checkpoint [ 597.319685][ T7578] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 597.334163][ T7578] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 597.344995][ T7612] loop1: detected capacity change from 0 to 512 [ 597.534896][ T7616] tipc: Enabling of bearer rejected, failed to enable media [ 597.598860][ T7616] loop2: detected capacity change from 0 to 256 [ 598.196337][ T7616] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x179fc8e0, utbl_chksum : 0xe619d30d) [ 598.226083][ T7618] Core dump to core aborted: cannot preserve file permissions [ 598.249468][ T7612] EXT4-fs (loop1): 1 orphan inode deleted [ 598.269810][ T7612] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 598.278975][ T5921] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 598.294199][ T5921] EXT4-fs error (device loop1): ext4_release_dquot:6839: comm kworker/u4:94: Failed to release dquot type 1 [ 598.400758][ T7626] loop4: detected capacity change from 0 to 16 [ 598.443831][ T7626] erofs: (device loop4): mounted with root inode @ nid 36. [ 598.533322][ T7612] ext4 filesystem being mounted at /330/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 598.905651][ T7629] loop0: detected capacity change from 0 to 256 [ 598.941069][ T7631] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1726'. [ 598.952427][ T7631] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1726'. [ 598.976049][ T28] audit: type=1400 audit(1765544228.629:496): avc: denied { bind } for pid=7636 comm="syz.2.1729" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 598.996489][ T28] audit: type=1400 audit(1765544228.629:497): avc: denied { setopt } for pid=7636 comm="syz.2.1729" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 599.016628][ T7635] device batadv_slave_1 entered promiscuous mode [ 599.608308][ T7651] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1730'. [ 599.621014][ T7651] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1730'. [ 599.990011][ T7634] device batadv_slave_1 left promiscuous mode [ 601.564891][ T284] EXT4-fs (loop1): unmounting filesystem. [ 602.710775][ T7664] device batadv_slave_1 entered promiscuous mode [ 602.724293][ T7663] device batadv_slave_1 entered promiscuous mode [ 603.926991][ T7676] loop4: detected capacity change from 0 to 16 [ 603.963724][ T7672] loop2: detected capacity change from 0 to 16 [ 603.973062][ T7672] erofs: (device loop2): mounted with root inode @ nid 36. [ 603.987545][ T7676] erofs: (device loop4): mounted with root inode @ nid 36. [ 604.063996][ T7678] device batadv_slave_1 entered promiscuous mode [ 604.107637][ T7656] device batadv_slave_1 left promiscuous mode [ 604.145072][ T7662] device batadv_slave_1 left promiscuous mode [ 604.475738][ T7682] loop0: detected capacity change from 0 to 16 [ 604.485347][ T7682] erofs: (device loop0): mounted with root inode @ nid 36. [ 604.602781][ T7684] loop4: detected capacity change from 0 to 16 [ 604.613903][ T7684] erofs: (device loop4): mounted with root inode @ nid 36. [ 604.910592][ T7677] device batadv_slave_1 left promiscuous mode [ 604.961840][ T7686] device veth1_macvtap left promiscuous mode [ 604.977799][ T7686] device macsec0 entered promiscuous mode [ 605.119847][ T7694] loop4: detected capacity change from 0 to 128 [ 605.202144][ T7694] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 605.228404][ T7694] ext4 filesystem being mounted at /62/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 605.550488][ T7706] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1744'. [ 605.559747][ T7706] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1744'. [ 605.914564][ T7719] xt_hashlimit: max too large, truncated to 1048576 [ 606.137570][ T6451] EXT4-fs (loop4): unmounting filesystem. [ 606.664584][ T7729] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1750'. [ 606.679922][ T7729] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1750'. [ 606.973846][ T7747] loop0: detected capacity change from 0 to 16 [ 606.981598][ T7747] erofs: (device loop0): mounted with root inode @ nid 36. [ 609.340060][ T7777] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1764'. [ 609.359397][ T7777] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1764'. [ 609.362845][ T6] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 609.448838][ T7781] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1762'. [ 609.459566][ T7781] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1762'. [ 610.487808][ T7794] xt_socket: unknown flags 0x4c [ 611.570092][ T7799] incfs: Backing dir is not set, filesystem can't be mounted. [ 611.579301][ T7789] tipc: Enabled bearer , priority 0 [ 611.579695][ T7799] incfs: mount failed -2 [ 611.615471][ T7802] loop0: detected capacity change from 0 to 256 [ 612.563733][ T7788] tipc: Resetting bearer [ 612.589655][ T7788] tipc: Disabling bearer [ 612.683199][ T7813] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1775'. [ 612.692415][ T7813] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1775'. [ 614.328234][ T7831] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1779'. [ 614.339583][ T7831] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1779'. [ 615.587401][ T7839] loop2: detected capacity change from 0 to 128 [ 616.013472][ T7839] bio_check_eod: 22241 callbacks suppressed [ 616.013496][ T7839] syz.2.1782: attempt to access beyond end of device [ 616.013496][ T7839] loop2: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 616.109517][ T7839] syz.2.1782: attempt to access beyond end of device [ 616.109517][ T7839] loop2: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 616.153875][ T7839] syz.2.1782: attempt to access beyond end of device [ 616.153875][ T7839] loop2: rw=0, sector=145, nr_sectors = 8 limit=128 [ 616.169265][ T7839] syz.2.1782: attempt to access beyond end of device [ 616.169265][ T7839] loop2: rw=0, sector=145, nr_sectors = 8 limit=128 [ 616.188270][ T7839] syz.2.1782: attempt to access beyond end of device [ 616.188270][ T7839] loop2: rw=0, sector=145, nr_sectors = 8 limit=128 [ 616.201868][ T7839] syz.2.1782: attempt to access beyond end of device [ 616.201868][ T7839] loop2: rw=0, sector=145, nr_sectors = 8 limit=128 [ 616.216672][ T7843] syz.2.1782: attempt to access beyond end of device [ 616.216672][ T7843] loop2: rw=0, sector=145, nr_sectors = 8 limit=128 [ 616.231478][ T7849] loop1: detected capacity change from 0 to 256 [ 616.261943][ T28] audit: type=1400 audit(1765544245.909:498): avc: denied { read } for pid=7850 comm="syz.0.1784" name="ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 616.288521][ T7851] SELinux: Context system_u:object_r:sendmail_exec_t:s0 is not valid (left unmapped). [ 616.328026][ T7843] syz.2.1782: attempt to access beyond end of device [ 616.328026][ T7843] loop2: rw=0, sector=145, nr_sectors = 8 limit=128 [ 616.362757][ T28] audit: type=1400 audit(1765544245.949:499): avc: denied { open } for pid=7850 comm="syz.0.1784" path="/dev/ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 616.368594][ T7843] syz.2.1782: attempt to access beyond end of device [ 616.368594][ T7843] loop2: rw=0, sector=145, nr_sectors = 8 limit=128 [ 616.415602][ T28] audit: type=1400 audit(1765544245.949:500): avc: denied { ioctl } for pid=7850 comm="syz.0.1784" path="/dev/ppp" dev="devtmpfs" ino=158 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 616.440770][ T28] audit: type=1400 audit(1765544246.009:501): avc: denied { relabelto } for pid=7850 comm="syz.0.1784" name="ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:sendmail_exec_t:s0" [ 616.567380][ T7854] netlink: 'syz.4.1786': attribute type 1 has an invalid length. [ 616.589492][ T28] audit: type=1400 audit(1765544246.009:502): avc: denied { associate } for pid=7850 comm="syz.0.1784" name="ppp" dev="devtmpfs" ino=158 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 srawcon="system_u:object_r:sendmail_exec_t:s0" [ 616.818222][ T7843] syz.2.1782: attempt to access beyond end of device [ 616.818222][ T7843] loop2: rw=0, sector=145, nr_sectors = 8 limit=128 [ 616.835296][ T7859] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1786'. [ 616.861904][ T7854] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1786'. [ 616.889162][ T7866] loop2: detected capacity change from 0 to 512 [ 618.169570][ T7866] EXT4-fs (loop2): 1 orphan inode deleted [ 618.175510][ T7866] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 618.184664][ T5921] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 618.194714][ T7866] ext4 filesystem being mounted at /340/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 618.205317][ T5921] EXT4-fs error (device loop2): ext4_release_dquot:6839: comm kworker/u4:94: Failed to release dquot type 1 [ 618.538347][ T7888] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 618.781140][ T7886] loop4: detected capacity change from 0 to 512 [ 619.103068][ T7886] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 619.144343][ T7886] ext4 filesystem being mounted at /70/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 619.234449][ T7886] IPv6: sit1: Disabled Multicast RS [ 619.432781][ T6] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 619.553133][ T7891] loop0: detected capacity change from 0 to 40427 [ 619.570520][ T7891] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 619.588660][ T7891] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 619.628241][ T7891] F2FS-fs (loop0): Found nat_bits in checkpoint [ 619.632749][ T6] usb 3-1: Using ep0 maxpacket: 16 [ 619.642738][ T6] usb 3-1: config 0 interface 0 has no altsetting 0 [ 619.662233][ T6] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 619.690027][ T7891] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 619.691613][ T6] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 619.702722][ T7891] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 619.723062][ T6] usb 3-1: config 0 descriptor?? [ 619.765371][ T7891] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7891 comm=syz.0.1794 [ 619.895884][ T6] usbhid 3-1:0.0: can't add hid device: -71 [ 619.902121][ T6] usbhid: probe of 3-1:0.0 failed with error -71 [ 619.903422][ T283] EXT4-fs (loop2): unmounting filesystem. [ 619.933675][ T6] usb 3-1: USB disconnect, device number 40 [ 619.970784][ T7905] loop2: detected capacity change from 0 to 128 [ 620.252119][ T7911] loop0: detected capacity change from 0 to 256 [ 620.260899][ T7911] FAT-fs (loop0): Unrecognized mount option "iocharsħ[peĈ _§ċet=iso8859-3" or missing value [ 621.294557][ T7905] bio_check_eod: 1022 callbacks suppressed [ 621.294581][ T7905] syz.2.1797: attempt to access beyond end of device [ 621.294581][ T7905] loop2: rw=0, sector=145, nr_sectors = 8 limit=128 [ 621.380246][ T7912] syz.2.1797: attempt to access beyond end of device [ 621.380246][ T7912] loop2: rw=0, sector=145, nr_sectors = 8 limit=128 [ 621.430358][ T7905] syz.2.1797: attempt to access beyond end of device [ 621.430358][ T7905] loop2: rw=0, sector=145, nr_sectors = 8 limit=128 [ 621.443688][ T28] audit: type=1400 audit(1765544251.079:503): avc: denied { read } for pid=7917 comm="syz.1.1799" name="rtc0" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 621.467570][ T28] audit: type=1400 audit(1765544251.079:504): avc: denied { open } for pid=7917 comm="syz.1.1799" path="/dev/rtc0" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 621.482884][ T7912] syz.2.1797: attempt to access beyond end of device [ 621.482884][ T7912] loop2: rw=0, sector=145, nr_sectors = 8 limit=128 [ 621.510942][ T7919] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 621.533362][ T7919] FAT-fs (loop3): unable to read boot sector [ 621.582899][ T7912] syz.2.1797: attempt to access beyond end of device [ 621.582899][ T7912] loop2: rw=0, sector=145, nr_sectors = 8 limit=128 [ 621.606314][ T7912] syz.2.1797: attempt to access beyond end of device [ 621.606314][ T7912] loop2: rw=0, sector=145, nr_sectors = 8 limit=128 [ 621.639964][ T7912] syz.2.1797: attempt to access beyond end of device [ 621.639964][ T7912] loop2: rw=0, sector=145, nr_sectors = 8 limit=128 [ 621.672845][ T7905] syz.2.1797: attempt to access beyond end of device [ 621.672845][ T7905] loop2: rw=0, sector=145, nr_sectors = 8 limit=128 [ 621.744607][ T7923] loop2: detected capacity change from 0 to 256 [ 622.455486][ T6451] EXT4-fs (loop4): unmounting filesystem. [ 622.499652][ T7921] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7921 comm=syz.3.1801 [ 622.530709][ T7935] device batadv_slave_1 entered promiscuous mode [ 622.845516][ T7946] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 624.614075][ T7949] loop0: detected capacity change from 0 to 16 [ 626.098411][ T7949] erofs: (device loop0): mounted with root inode @ nid 36. [ 626.164276][ T7958] loop1: detected capacity change from 0 to 512 [ 626.173756][ T7961] device batadv_slave_1 entered promiscuous mode [ 626.180567][ T7958] EXT4-fs: Ignoring removed mblk_io_submit option [ 626.212524][ T7958] EXT4-fs: Ignoring removed mblk_io_submit option [ 626.223435][ T7958] EXT4-fs (loop1): Test dummy encryption mode enabled [ 626.266593][ T7934] device batadv_slave_1 left promiscuous mode [ 626.283970][ T7958] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 626.319464][ T7958] EXT4-fs (loop1): 1 truncate cleaned up [ 626.333063][ T7958] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 627.285583][ T7960] device batadv_slave_1 left promiscuous mode [ 627.472194][ T7986] loop0: detected capacity change from 0 to 512 [ 627.826413][ T24] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 627.848368][ T284] EXT4-fs (loop1): unmounting filesystem. [ 627.926838][ T7986] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 627.936234][ T7986] ext4 filesystem being mounted at /363/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 627.995385][ T7986] IPv6: sit1: Disabled Multicast RS [ 628.180869][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 628.232417][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 628.512922][ C1] ip6_tunnel: K xmit: Local address not yet configured! [ 628.585486][ T24] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 628.594990][ T24] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 628.603339][ T24] usb 5-1: Manufacturer: syz [ 628.608670][ T24] usb 5-1: config 0 descriptor?? [ 628.633367][ T7995] device batadv_slave_1 entered promiscuous mode [ 628.709721][ T282] EXT4-fs (loop0): unmounting filesystem. [ 629.355525][ T8004] loop1: detected capacity change from 0 to 16 [ 629.799140][ T8010] loop2: detected capacity change from 0 to 512 [ 629.963168][ T8004] erofs: (device loop1): mounted with root inode @ nid 36. [ 630.042603][ T8010] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 630.051658][ T8010] ext4 filesystem being mounted at /344/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 630.156107][ T7994] device batadv_slave_1 left promiscuous mode [ 631.440081][ T24] usbhid 5-1:0.0: can't add hid device: -71 [ 631.446151][ T24] usbhid: probe of 5-1:0.0 failed with error -71 [ 631.473493][ T24] usb 5-1: USB disconnect, device number 35 [ 631.507615][ T283] EXT4-fs (loop2): unmounting filesystem. [ 631.560416][ T28] audit: type=1400 audit(1765544261.209:505): avc: denied { listen } for pid=8034 comm="syz.2.1824" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 631.583516][ T8035] netlink: 'syz.2.1824': attribute type 4 has an invalid length. [ 631.591782][ T8035] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.1824'. [ 633.052038][ T8037] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 635.201883][ T8050] loop2: detected capacity change from 0 to 16 [ 636.323162][ T8050] erofs: (device loop2): mounted with root inode @ nid 36. [ 636.428310][ T28] audit: type=1400 audit(1765544266.079:506): avc: denied { append } for pid=8059 comm="syz.1.1832" name="loop7" dev="devtmpfs" ino=125 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 636.503527][ T8060] loop7: detected capacity change from 0 to 7 [ 636.550399][ T8063] device batadv_slave_1 entered promiscuous mode [ 636.551591][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 636.565983][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 636.575409][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 636.584597][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 636.592456][ T8060] loop7: unable to read partition table [ 636.598519][ T8060] loop_reread_partitions: partition scan of loop7 (úùƒċĦ™‰üCêj̖˘P=½?}X‹ş œë) failed (rc=-5) [ 637.218303][ T8070] device batadv_slave_1 entered promiscuous mode [ 637.476376][ T8061] device batadv_slave_1 left promiscuous mode [ 638.126717][ T8072] loop0: detected capacity change from 0 to 16 [ 638.141399][ T8072] erofs: (device loop0): mounted with root inode @ nid 36. [ 638.281193][ T28] audit: type=1400 audit(1765544267.929:507): avc: denied { execute } for pid=8074 comm="syz.4.1838" dev="tmpfs" ino=369 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 638.303899][ T28] audit: type=1400 audit(1765544267.959:508): avc: denied { execute_no_trans } for pid=8074 comm="syz.4.1838" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=369 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 638.457533][ T8069] device batadv_slave_1 left promiscuous mode [ 638.661811][ T8076] incfs: Backing dir is not set, filesystem can't be mounted. [ 638.672826][ T8076] incfs: mount failed -2 [ 638.679041][ T28] audit: type=1400 audit(1765544268.329:509): avc: denied { setopt } for pid=8075 comm="syz.3.1837" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 638.693252][ T8084] loop0: detected capacity change from 0 to 4096 [ 638.735650][ T8087] device batadv_slave_1 entered promiscuous mode [ 638.795908][ T8065] loop2: detected capacity change from 0 to 40427 [ 638.807458][ T8084] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 638.816660][ T8065] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 638.827063][ T8065] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 638.839380][ T8093] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1843'. [ 638.858270][ T28] audit: type=1400 audit(1765544268.509:510): avc: denied { mounton } for pid=8083 comm="syz.0.1840" path="/367/file1/file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 638.885258][ T8065] F2FS-fs (loop2): Found nat_bits in checkpoint [ 638.925913][ T8065] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 639.775860][ T8065] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 640.030873][ T8107] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1845'. [ 640.040400][ T8086] device batadv_slave_1 left promiscuous mode [ 640.060654][ T8107] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1845'. [ 640.090490][ T28] audit: type=1326 audit(1765544269.739:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8108 comm="syz.3.1847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f966b98f749 code=0x7ffc0000 [ 640.117414][ T28] audit: type=1326 audit(1765544269.739:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8108 comm="syz.3.1847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f966b98f749 code=0x7ffc0000 [ 640.141090][ T28] audit: type=1326 audit(1765544269.739:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8108 comm="syz.3.1847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f966b98f749 code=0x7ffc0000 [ 640.178971][ T282] EXT4-fs (loop0): unmounting filesystem. [ 640.185393][ T8111] device batadv_slave_1 entered promiscuous mode [ 640.230632][ T28] audit: type=1326 audit(1765544269.739:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8108 comm="syz.3.1847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f966b98f749 code=0x7ffc0000 [ 640.254204][ T28] audit: type=1326 audit(1765544269.739:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8108 comm="syz.3.1847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f966b98f749 code=0x7ffc0000 [ 640.299987][ T28] audit: type=1326 audit(1765544269.739:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8108 comm="syz.3.1847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f966b98f749 code=0x7ffc0000 [ 640.323693][ T8124] device batadv_slave_1 entered promiscuous mode [ 640.563755][ T8125] loop1: detected capacity change from 0 to 16 [ 640.572991][ T8125] erofs: (device loop1): mounted with root inode @ nid 36. [ 640.685677][ T8127] loop0: detected capacity change from 0 to 16 [ 640.695542][ T8127] erofs: (device loop0): mounted with root inode @ nid 36. [ 641.005168][ T8110] device batadv_slave_1 left promiscuous mode [ 641.011825][ T6] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 641.139264][ T8123] device batadv_slave_1 left promiscuous mode [ 641.205310][ T6] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 641.216572][ T8143] loop1: detected capacity change from 0 to 256 [ 641.222945][ T6] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 641.231526][ T6] usb 5-1: Product: syz [ 641.235756][ T6] usb 5-1: Manufacturer: syz [ 641.240547][ T6] usb 5-1: SerialNumber: syz [ 641.802503][ T8154] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1858'. [ 642.162959][ T8159] loop0: detected capacity change from 0 to 16 [ 642.190708][ T8159] erofs: (device loop0): mounted with root inode @ nid 36. [ 642.435310][ T8161] syz.0.1860: attempt to access beyond end of device [ 642.435310][ T8161] loop0: rw=524288, sector=34359739032, nr_sectors = 8 limit=16 [ 642.663574][ T6] rtl8150 5-1:1.0: couldn't reset the device [ 642.673352][ T6] rtl8150: probe of 5-1:1.0 failed with error -5 [ 642.696636][ T6] usb 5-1: USB disconnect, device number 36 [ 642.724575][ T8167] device batadv_slave_1 entered promiscuous mode [ 642.822390][ T8173] device batadv_slave_1 entered promiscuous mode [ 643.847870][ T8177] loop2: detected capacity change from 0 to 16 [ 643.856694][ T8175] loop1: detected capacity change from 0 to 16 [ 643.873541][ C0] ip6_tunnel: K xmit: Local address not yet configured! [ 643.891098][ T8177] erofs: (device loop2): mounted with root inode @ nid 36. [ 644.319675][ T8166] device batadv_slave_1 left promiscuous mode [ 644.466131][ T8175] erofs: (device loop1): mounted with root inode @ nid 36. [ 644.581235][ T8172] device batadv_slave_1 left promiscuous mode [ 644.966387][ T8187] FAULT_INJECTION: forcing a failure. [ 644.966387][ T8187] name failslab, interval 1, probability 0, space 0, times 0 [ 645.019682][ T8187] CPU: 0 PID: 8187 Comm: syz.2.1867 Tainted: G W syzkaller #0 [ 645.028686][ T8187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 645.038770][ T8187] Call Trace: [ 645.042068][ T8187] [ 645.045012][ T8187] __dump_stack+0x21/0x24 [ 645.049370][ T8187] dump_stack_lvl+0xee/0x150 [ 645.053974][ T8187] ? __cfi_dump_stack_lvl+0x8/0x8 [ 645.059019][ T8187] ? __local_bh_enable_ip+0x58/0x80 [ 645.064233][ T8187] ? release_sock+0x169/0x1c0 [ 645.068926][ T8187] dump_stack+0x15/0x24 [ 645.073181][ T8187] should_fail_ex+0x3d4/0x520 [ 645.077906][ T8187] __should_failslab+0xac/0xf0 [ 645.082685][ T8187] should_failslab+0x9/0x20 [ 645.087198][ T8187] kmem_cache_alloc_node+0x42/0x340 [ 645.092412][ T8187] ? __alloc_skb+0xea/0x4b0 [ 645.096933][ T8187] __alloc_skb+0xea/0x4b0 [ 645.101276][ T8187] ? netlink_autobind+0x168/0x1a0 [ 645.106401][ T8187] netlink_sendmsg+0x626/0xbc0 [ 645.111183][ T8187] ? __cfi_netlink_sendmsg+0x10/0x10 [ 645.116496][ T8187] ? resched_curr+0x10e/0x380 [ 645.121192][ T8187] ? security_socket_sendmsg+0x93/0xb0 [ 645.126684][ T8187] ? __cfi_netlink_sendmsg+0x10/0x10 [ 645.131990][ T8187] ____sys_sendmsg+0x5a9/0x990 [ 645.136772][ T8187] ? __sys_sendmsg_sock+0x40/0x40 [ 645.141832][ T8187] ? import_iovec+0x7c/0xb0 [ 645.146380][ T8187] ___sys_sendmsg+0x21c/0x290 [ 645.151111][ T8187] ? __sys_sendmsg+0x270/0x270 [ 645.155906][ T8187] ? __cfi___switch_to+0x10/0x10 [ 645.160880][ T8187] ? __fdget+0x19c/0x220 [ 645.165165][ T8187] __x64_sys_sendmsg+0x1f0/0x2c0 [ 645.170164][ T8187] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 645.175654][ T8187] ? __kasan_check_write+0x14/0x20 [ 645.180788][ T8187] x64_sys_call+0x171/0x9a0 [ 645.185321][ T8187] do_syscall_64+0x4c/0xa0 [ 645.189767][ T8187] ? clear_bhb_loop+0x30/0x80 [ 645.194475][ T8187] ? clear_bhb_loop+0x30/0x80 [ 645.199174][ T8187] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 645.205093][ T8187] RIP: 0033:0x7f8578b8f749 [ 645.209547][ T8187] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 645.229198][ T8187] RSP: 002b:00007f8579a35038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 645.237647][ T8187] RAX: ffffffffffffffda RBX: 00007f8578de5fa0 RCX: 00007f8578b8f749 [ 645.245639][ T8187] RDX: 0000000008000002 RSI: 0000200000000000 RDI: 0000000000000003 [ 645.253634][ T8187] RBP: 00007f8579a35090 R08: 0000000000000000 R09: 0000000000000000 [ 645.261617][ T8187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 645.269609][ T8187] R13: 00007f8578de6038 R14: 00007f8578de5fa0 R15: 00007ffea3650ed8 [ 645.277607][ T8187] [ 646.045289][ T8197] loop1: detected capacity change from 0 to 256 [ 646.051927][ T8197] FAT-fs (loop1): Unrecognized mount option "iocharsħ[peĈ _§ċet=iso8859-3" or missing value [ 646.151020][ T8199] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 646.510021][ T28] kauditd_printk_skb: 202 callbacks suppressed [ 646.510039][ T28] audit: type=1400 audit(1765544276.159:719): avc: denied { watch } for pid=8208 comm="syz.0.1875" path=2F6D656D66643A2D263A7B2DAA5D7B202864656C6574656429 dev="tmpfs" ino=2508 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 647.017025][ T8218] device batadv_slave_1 entered promiscuous mode [ 648.150009][ T8225] loop1: detected capacity change from 0 to 16 [ 648.321501][ T8225] erofs: (device loop1): mounted with root inode @ nid 36. [ 648.512289][ T8217] device batadv_slave_1 left promiscuous mode [ 648.662724][ T808] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 648.772744][ T24] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 648.855280][ T808] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 648.872727][ T808] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 648.882718][ T1713] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 648.890960][ T808] usb 1-1: Product: syz [ 648.895185][ T808] usb 1-1: Manufacturer: syz [ 648.899800][ T808] usb 1-1: SerialNumber: syz [ 648.973894][ T24] usb 3-1: config 0 has an invalid descriptor of length 197, skipping remainder of the config [ 648.984311][ T24] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 648.998106][ T24] usb 3-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 649.007252][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 649.016102][ T24] usb 3-1: config 0 descriptor?? [ 649.021990][ T24] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 649.083885][ T1713] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 649.099066][ T1713] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 649.109825][ T1713] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 649.119065][ T1713] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 649.127087][ T1713] usb 2-1: Manufacturer: syz [ 649.132349][ T1713] usb 2-1: config 0 descriptor?? [ 649.274035][ T8245] overlayfs: failed to resolve './bus': -2 [ 649.807899][ T808] rtl8150 1-1:1.0: couldn't reset the device [ 649.814134][ T808] rtl8150: probe of 1-1:1.0 failed with error -5 [ 649.821508][ T808] usb 1-1: USB disconnect, device number 35 [ 649.969642][ T1713] uclogic 0003:256C:006D.0035: interface is invalid, ignoring [ 649.977969][ T1713] usb 2-1: USB disconnect, device number 38 [ 650.066007][ T8254] loop4: detected capacity change from 0 to 256 [ 650.072789][ T8254] FAT-fs (loop4): Unrecognized mount option "iocharsħ[peĈ _§ċet=iso8859-3" or missing value [ 650.662751][ T24] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 650.863849][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 650.885183][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 650.916746][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 650.956555][ T24] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 650.986611][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 651.252296][ T8278] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 651.279803][ T24] usb 1-1: config 0 descriptor?? [ 651.618244][ T39] usb 3-1: USB disconnect, device number 41 [ 651.703614][ T24] plantronics 0003:047F:FFFF.0036: No inputs registered, leaving [ 651.771547][ T24] plantronics 0003:047F:FFFF.0036: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 652.345061][ T808] usb 1-1: USB disconnect, device number 36 [ 652.874663][ T8306] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1907'. [ 652.883836][ T8306] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1907'. [ 652.904666][ T8308] device batadv_slave_1 entered promiscuous mode [ 652.912777][ T1713] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 652.973886][ T8310] loop0: detected capacity change from 0 to 1024 [ 652.984409][ T8310] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 652.993374][ T8310] ext4 filesystem being mounted at /378/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 653.128753][ T8315] loop2: detected capacity change from 0 to 16 [ 653.138016][ T8315] erofs: (device loop2): mounted with root inode @ nid 36. [ 653.191304][ T1713] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 653.206371][ T1713] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 653.479397][ T1713] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 653.488689][ T1713] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 653.496756][ T1713] usb 5-1: Manufacturer: syz [ 653.504079][ T1713] usb 5-1: config 0 descriptor?? [ 653.605301][ T8322] EXT4-fs error (device loop0): ext4_lookup:1858: inode #15: comm syz.0.1909: inode has both inline data and extents flags [ 653.620592][ T28] audit: type=1400 audit(1765544283.285:720): avc: denied { ioctl } for pid=8309 comm="syz.0.1909" path="/dev/rtc0" dev="devtmpfs" ino=263 ioctlcmd=0x7003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 653.645552][ T39] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 653.769388][ T8307] device batadv_slave_1 left promiscuous mode [ 653.835267][ T39] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 653.854292][ T39] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 653.876268][ T39] usb 2-1: Product: syz [ 653.887578][ T39] usb 2-1: Manufacturer: syz [ 653.899837][ T39] usb 2-1: SerialNumber: syz [ 654.133409][ T282] EXT4-fs (loop0): unmounting filesystem. [ 654.311883][ T1713] uclogic 0003:256C:006D.0037: interface is invalid, ignoring [ 654.323875][ T1713] usb 5-1: USB disconnect, device number 37 [ 654.389148][ T28] audit: type=1400 audit(1765544284.045:721): avc: denied { bind } for pid=8336 comm="syz.3.1915" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 654.523559][ T8338] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 654.555822][ T8338] device veth1_macvtap entered promiscuous mode [ 655.003402][ T5982] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 655.687869][ T8347] device batadv_slave_1 entered promiscuous mode [ 655.710250][ T8349] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1919'. [ 655.719369][ T8349] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1919'. [ 655.941083][ T8356] loop0: detected capacity change from 0 to 16 [ 657.124535][ T8356] erofs: (device loop0): mounted with root inode @ nid 36. [ 657.212348][ T39] rtl8150 2-1:1.0: couldn't reset the device [ 657.223729][ T39] rtl8150: probe of 2-1:1.0 failed with error -5 [ 657.235938][ T39] usb 2-1: USB disconnect, device number 39 [ 657.247837][ T8346] device batadv_slave_1 left promiscuous mode [ 657.289695][ T8363] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1921'. [ 657.412476][ T8369] loop2: detected capacity change from 0 to 256 [ 658.040964][ T8376] device batadv_slave_1 entered promiscuous mode [ 659.107447][ T8379] loop1: detected capacity change from 0 to 16 [ 659.149411][ T8379] erofs: (device loop1): mounted with root inode @ nid 36. [ 659.367693][ T8375] device batadv_slave_1 left promiscuous mode [ 659.803051][ T8398] device batadv_slave_1 entered promiscuous mode [ 660.321072][ T8402] loop0: detected capacity change from 0 to 16 [ 660.330744][ T8402] erofs: (device loop0): mounted with root inode @ nid 36. [ 660.466079][ T8403] loop1: detected capacity change from 0 to 256 [ 660.534194][ T8403] FAT-fs (loop1): Unrecognized mount option "iocharsħ[peĈ _§ċet=iso8859-3" or missing value [ 660.635404][ T8397] device batadv_slave_1 left promiscuous mode [ 660.727075][ T8408] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1936'. [ 660.832259][ T28] audit: type=1400 audit(1765544290.485:722): avc: denied { create } for pid=8415 comm="syz.4.1940" name="#18" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 660.897043][ T28] audit: type=1400 audit(1765544290.515:723): avc: denied { link } for pid=8415 comm="syz.4.1940" name="#18" dev="tmpfs" ino=526 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 660.949997][ T28] audit: type=1400 audit(1765544290.515:724): avc: denied { rename } for pid=8415 comm="syz.4.1940" name="#19" dev="tmpfs" ino=526 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 661.357135][ T8424] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 665.668108][ T8434] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 667.170130][ T8435] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1942'. [ 667.267256][ T1713] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 667.330796][ T8439] device batadv_slave_1 entered promiscuous mode [ 668.876386][ T8449] loop2: detected capacity change from 0 to 16 [ 668.885699][ T8449] erofs: (device loop2): mounted with root inode @ nid 36. [ 669.173406][ T8452] loop0: detected capacity change from 0 to 256 [ 669.193567][ T8437] device batadv_slave_1 left promiscuous mode [ 669.235257][ T808] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 669.457188][ T8462] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1953'. [ 669.463840][ T808] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 669.477199][ T808] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 669.583057][ T8462] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1953'. [ 669.841104][ T808] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 669.857536][ T808] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 669.870748][ T808] usb 5-1: Manufacturer: syz [ 669.921194][ T808] usb 5-1: config 0 descriptor?? [ 670.498258][ T808] usbhid 5-1:0.0: can't add hid device: -71 [ 670.504311][ T808] usbhid: probe of 5-1:0.0 failed with error -71 [ 670.513313][ T808] usb 5-1: USB disconnect, device number 38 [ 670.554270][ T8479] device batadv_slave_1 entered promiscuous mode [ 671.065830][ T8488] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 671.073135][ T8488] IPv6: NLM_F_CREATE should be set when creating new route [ 672.054377][ T8486] loop4: detected capacity change from 0 to 16 [ 672.098144][ T8486] erofs: (device loop4): mounted with root inode @ nid 36. [ 672.165708][ T28] audit: type=1400 audit(1765544301.825:725): avc: denied { create } for pid=8495 comm="syz.0.1961" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 672.241325][ T8478] device batadv_slave_1 left promiscuous mode [ 672.459219][ T8506] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1965'. [ 672.868902][ T28] audit: type=1400 audit(1765544302.525:726): avc: denied { connect } for pid=8495 comm="syz.0.1961" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 672.937334][ T8506] loop4: detected capacity change from 0 to 40427 [ 672.944598][ T8506] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 672.952435][ T8506] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 673.260343][ T8506] F2FS-fs (loop4): Found nat_bits in checkpoint [ 673.392975][ T8506] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 673.400260][ T8506] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 673.445588][ T8506] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8506 comm=syz.4.1965 [ 673.472411][ T8506] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1965'. [ 673.512721][ T808] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 673.620348][ T8525] FAULT_INJECTION: forcing a failure. [ 673.620348][ T8525] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 673.633577][ T8525] CPU: 0 PID: 8525 Comm: syz.4.1970 Tainted: G W syzkaller #0 [ 673.642445][ T8525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 673.652514][ T8525] Call Trace: [ 673.655803][ T8525] [ 673.658735][ T8525] __dump_stack+0x21/0x24 [ 673.663068][ T8525] dump_stack_lvl+0xee/0x150 [ 673.667654][ T8525] ? __cfi_dump_stack_lvl+0x8/0x8 [ 673.672683][ T8525] ? _parse_integer+0x2a/0x40 [ 673.677387][ T8525] dump_stack+0x15/0x24 [ 673.681559][ T8525] should_fail_ex+0x3d4/0x520 [ 673.686244][ T8525] should_fail+0xb/0x10 [ 673.690416][ T8525] should_fail_usercopy+0x1a/0x20 [ 673.695458][ T8525] _copy_from_user+0x1e/0xc0 [ 673.700050][ T8525] ___sys_sendmsg+0x155/0x290 [ 673.704728][ T8525] ? __sys_sendmsg+0x270/0x270 [ 673.709585][ T8525] ? __kasan_check_write+0x14/0x20 [ 673.714791][ T8525] ? proc_fail_nth_write+0x17a/0x1f0 [ 673.720081][ T8525] ? vfs_write+0x9d6/0xca0 [ 673.724505][ T8525] ? __fdget+0x19c/0x220 [ 673.728773][ T8525] __x64_sys_sendmsg+0x1f0/0x2c0 [ 673.733710][ T8525] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 673.739182][ T8525] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 673.745253][ T8525] x64_sys_call+0x171/0x9a0 [ 673.749757][ T8525] do_syscall_64+0x4c/0xa0 [ 673.754193][ T8525] ? clear_bhb_loop+0x30/0x80 [ 673.758889][ T8525] ? clear_bhb_loop+0x30/0x80 [ 673.763568][ T8525] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 673.769466][ T8525] RIP: 0033:0x7fac59f8f749 [ 673.773876][ T8525] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 673.793482][ T8525] RSP: 002b:00007fac5ae7b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 673.801907][ T8525] RAX: ffffffffffffffda RBX: 00007fac5a1e5fa0 RCX: 00007fac59f8f749 [ 673.809892][ T8525] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000007 [ 673.817858][ T8525] RBP: 00007fac5ae7b090 R08: 0000000000000000 R09: 0000000000000000 [ 673.825826][ T8525] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 673.833798][ T8525] R13: 00007fac5a1e6038 R14: 00007fac5a1e5fa0 R15: 00007ffe913bfb78 [ 673.841947][ T8525] [ 673.883835][ T808] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 673.902754][ T808] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 673.954267][ T8527] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1971'. [ 673.962892][ T808] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 673.974750][ T8527] loop4: detected capacity change from 0 to 16 [ 673.981174][ T8527] erofs: Unknown parameter '˙˙˙˙' [ 673.993490][ T808] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 674.001536][ T808] usb 2-1: Manufacturer: syz [ 674.027328][ T808] usb 2-1: config 0 descriptor?? [ 674.033674][ T476] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 674.041350][ T476] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 674.092994][ T476] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 674.157926][ T8535] device batadv_slave_1 entered promiscuous mode [ 674.808774][ T422] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 675.001808][ T422] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 675.234079][ T8534] device batadv_slave_1 left promiscuous mode [ 675.305336][ T8560] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1982'. [ 675.339605][ T28] audit: type=1400 audit(1765544304.995:727): avc: denied { watch } for pid=8559 comm="syz.3.1982" path="/bus" dev="proc" ino=4026531855 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 675.343934][ T8563] device batadv_slave_1 entered promiscuous mode [ 675.362158][ T6] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 675.468681][ T808] uclogic 0003:256C:006D.0038: interface is invalid, ignoring [ 675.483539][ T808] usb 2-1: USB disconnect, device number 40 [ 675.972965][ T6] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 675.983482][ T8569] loop0: detected capacity change from 0 to 16 [ 675.992548][ T8569] erofs: (device loop0): mounted with root inode @ nid 36. [ 676.167522][ T6] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 676.175643][ T6] usb 5-1: Product: syz [ 676.179825][ T6] usb 5-1: Manufacturer: syz [ 676.184468][ T6] usb 5-1: SerialNumber: syz [ 676.223995][ T8562] device batadv_slave_1 left promiscuous mode [ 676.347355][ T8573] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1985'. [ 676.359582][ T8573] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1985'. [ 676.368979][ T8575] FAULT_INJECTION: forcing a failure. [ 676.368979][ T8575] name failslab, interval 1, probability 0, space 0, times 0 [ 676.392328][ T8575] CPU: 1 PID: 8575 Comm: syz.1.1986 Tainted: G W syzkaller #0 [ 676.401240][ T8575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 676.411311][ T8575] Call Trace: [ 676.414605][ T8575] [ 676.417546][ T8575] __dump_stack+0x21/0x24 [ 676.421889][ T8575] dump_stack_lvl+0xee/0x150 [ 676.426494][ T8575] ? __cfi_dump_stack_lvl+0x8/0x8 [ 676.431539][ T8575] ? mas_prev+0x21c/0x3f0 [ 676.435885][ T8575] dump_stack+0x15/0x24 [ 676.440053][ T8575] should_fail_ex+0x3d4/0x520 [ 676.444744][ T8575] ? __anon_vma_prepare+0x9a/0x420 [ 676.449877][ T8575] __should_failslab+0xac/0xf0 [ 676.454655][ T8575] should_failslab+0x9/0x20 [ 676.459172][ T8575] kmem_cache_alloc+0x3b/0x330 [ 676.463964][ T8575] ? __anon_vma_prepare+0x51/0x420 [ 676.469088][ T8575] __anon_vma_prepare+0x9a/0x420 [ 676.474028][ T8575] handle_mm_fault+0x2409/0x2640 [ 676.478983][ T8575] ? __cfi_handle_mm_fault+0x10/0x10 [ 676.484269][ T8575] ? down_read_trylock+0x273/0x640 [ 676.489395][ T8575] ? lock_mm_and_find_vma+0x9e/0x320 [ 676.495032][ T8575] ? do_user_addr_fault+0x2ee/0x1050 [ 676.500324][ T8575] do_user_addr_fault+0x63b/0x1050 [ 676.505445][ T8575] exc_page_fault+0x51/0xb0 [ 676.509966][ T8575] asm_exc_page_fault+0x27/0x30 [ 676.514829][ T8575] RIP: 0010:copy_user_short_string+0xd/0x40 [ 676.520745][ T8575] Code: 74 0a 89 d1 f3 a4 89 c8 0f 01 ca c3 89 d0 0f 01 ca c3 01 ca eb e7 90 90 90 90 90 90 90 89 d1 83 e2 07 c1 e9 03 74 12 4c 8b 06 <4c> 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 89 d1 8a [ 676.540350][ T8575] RSP: 0018:ffffc9000d8bfde0 EFLAGS: 00050202 [ 676.546427][ T8575] RAX: ffffffff8263be01 RBX: 0000000000000008 RCX: 0000000000000001 [ 676.554398][ T8575] RDX: 0000000000000000 RSI: ffff88812fec2204 RDI: 0000200000000080 [ 676.562474][ T8575] RBP: ffffc9000d8bfe08 R08: 0000000000010019 R09: ffffed1025fd8442 [ 676.570453][ T8575] R10: ffffed1025fd8442 R11: 1ffff11025fd8440 R12: 00007fffffffeff8 [ 676.578431][ T8575] R13: ffff88812fec2000 R14: 0000200000000080 R15: ffff88812fec2204 [ 676.586404][ T8575] ? _copy_to_user+0x51/0x90 [ 676.591003][ T8575] ? _copy_to_user+0x72/0x90 [ 676.595607][ T8575] tiocgwinsz+0x3a/0x70 [ 676.599762][ T8575] tty_ioctl+0x54b/0xc60 [ 676.604003][ T8575] ? __cfi_tty_ioctl+0x10/0x10 [ 676.608767][ T8575] __se_sys_ioctl+0x12f/0x1b0 [ 676.613450][ T8575] __x64_sys_ioctl+0x7b/0x90 [ 676.618046][ T8575] x64_sys_call+0x58b/0x9a0 [ 676.622571][ T8575] do_syscall_64+0x4c/0xa0 [ 676.626986][ T8575] ? clear_bhb_loop+0x30/0x80 [ 676.631670][ T8575] ? clear_bhb_loop+0x30/0x80 [ 676.636361][ T8575] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 676.642257][ T8575] RIP: 0033:0x7fbf63b8f749 [ 676.646666][ T8575] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 676.666285][ T8575] RSP: 002b:00007fbf64a1c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 676.674719][ T8575] RAX: ffffffffffffffda RBX: 00007fbf63de5fa0 RCX: 00007fbf63b8f749 [ 676.682692][ T8575] RDX: 0000200000000080 RSI: 0000000000005413 RDI: 0000000000000003 [ 676.690661][ T8575] RBP: 00007fbf64a1c090 R08: 0000000000000000 R09: 0000000000000000 [ 676.698631][ T8575] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 676.706602][ T8575] R13: 00007fbf63de6038 R14: 00007fbf63de5fa0 R15: 00007ffe8544f028 [ 676.714571][ T8575] [ 676.846232][ T8578] loop0: detected capacity change from 0 to 256 [ 676.853231][ T8578] FAT-fs (loop0): Unrecognized mount option "iocharsħ[peĈ _§ċet=iso8859-3" or missing value [ 677.630824][ T8596] loop0: detected capacity change from 0 to 256 [ 677.642582][ T8596] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18d7c, utbl_chksum : 0xe619d30d) [ 678.112758][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 678.873920][ T8607] device batadv_slave_1 entered promiscuous mode [ 679.478654][ T8613] loop1: detected capacity change from 0 to 16 [ 679.488032][ T8613] erofs: (device loop1): mounted with root inode @ nid 36. [ 679.510922][ T8610] device batadv_slave_1 entered promiscuous mode [ 679.629574][ T6] rtl8150 5-1:1.0: couldn't reset the device [ 679.668878][ T6] rtl8150: probe of 5-1:1.0 failed with error -5 [ 679.679428][ T6] usb 5-1: USB disconnect, device number 39 [ 679.772031][ T8606] device batadv_slave_1 left promiscuous mode [ 680.553059][ T8623] device batadv_slave_1 entered promiscuous mode [ 680.628634][ T8609] device batadv_slave_1 left promiscuous mode [ 680.675812][ T8625] device batadv_slave_1 entered promiscuous mode [ 681.383143][ T8631] loop1: detected capacity change from 0 to 16 [ 681.404440][ T8631] erofs: (device loop1): mounted with root inode @ nid 36. [ 681.514046][ T8634] loop2: detected capacity change from 0 to 16 [ 681.574872][ T8622] device batadv_slave_1 left promiscuous mode [ 681.719791][ T1713] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 681.734243][ T8634] erofs: (device loop2): mounted with root inode @ nid 36. [ 681.891407][ T8638] loop4: detected capacity change from 0 to 256 [ 681.898035][ T8638] FAT-fs (loop4): Unrecognized mount option "iocharsħ[peĈ _§ċet=iso8859-3" or missing value [ 681.906004][ T1713] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 681.919677][ T8624] device batadv_slave_1 left promiscuous mode [ 681.920241][ T1713] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 683.097546][ T8652] loop4: detected capacity change from 0 to 16 [ 683.106065][ T1713] usb 1-1: string descriptor 0 read error: -71 [ 683.112283][ T1713] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 683.122475][ T1713] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 683.122885][ T8652] erofs: (device loop4): mounted with root inode @ nid 36. [ 683.131455][ T1713] usb 1-1: config 0 descriptor?? [ 683.138264][ T8653] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2007'. [ 683.151875][ T8653] 8021q: VLANs not supported on lo [ 683.161962][ T1713] usb 1-1: can't set config #0, error -71 [ 683.188227][ T1713] usb 1-1: USB disconnect, device number 38 [ 684.364439][ T28] audit: type=1400 audit(1765544313.045:728): avc: denied { map } for pid=8650 comm="syz.4.2006" path="/dev/tty1" dev="devtmpfs" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 684.950670][ T8679] device batadv_slave_1 entered promiscuous mode [ 685.376365][ T8685] loop4: detected capacity change from 0 to 256 [ 685.383233][ T8685] FAT-fs (loop4): Unrecognized mount option "iocharsħ[peĈ _§ċet=iso8859-3" or missing value [ 685.394573][ T422] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 685.417444][ T8680] loop2: detected capacity change from 0 to 16 [ 685.424336][ T8680] erofs: (device loop2): mounted with root inode @ nid 36. [ 685.487676][ T8692] netlink: 'syz.4.2020': attribute type 4 has an invalid length. [ 685.495623][ T8692] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2020'. [ 685.506091][ T28] audit: type=1400 audit(1765544315.165:729): avc: denied { getopt } for pid=8691 comm="syz.4.2020" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 685.576981][ T8692] loop4: detected capacity change from 0 to 512 [ 685.584348][ T422] usb 1-1: config 0 has an invalid interface number: 20 but max is 0 [ 685.592817][ T422] usb 1-1: config 0 has no interface number 0 [ 685.599026][ T422] usb 1-1: New USB device found, idVendor=256c, idProduct=006e, bcdDevice= 0.00 [ 685.608247][ T422] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 685.618866][ T422] usb 1-1: config 0 descriptor?? [ 685.777723][ T8678] device batadv_slave_1 left promiscuous mode [ 686.112750][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 686.278645][ T8720] loop2: detected capacity change from 0 to 256 [ 686.285324][ T8720] FAT-fs (loop2): Unrecognized mount option "iocharsħ[peĈ _§ċet=iso8859-3" or missing value [ 686.399835][ T8727] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2031'. [ 686.696393][ T8727] loop2: detected capacity change from 0 to 40427 [ 686.726954][ T8722] loop1: detected capacity change from 0 to 40427 [ 686.737346][ T8727] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 686.748854][ T8722] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 686.759716][ T8727] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 686.768464][ T8722] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 686.794600][ T8727] F2FS-fs (loop2): Found nat_bits in checkpoint [ 686.842051][ T8722] F2FS-fs (loop1): Found nat_bits in checkpoint [ 686.853549][ T8727] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 686.860703][ T8727] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 686.882996][ T8722] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 686.890245][ T8722] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 686.893177][ T8727] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8727 comm=syz.2.2031 [ 686.917115][ T8727] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2031'. [ 686.926533][ T8722] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8722 comm=syz.1.2029 [ 687.013897][ T8741] loop4: detected capacity change from 0 to 256 [ 687.033167][ T8743] device batadv_slave_1 entered promiscuous mode [ 687.242087][ T8747] loop2: detected capacity change from 0 to 16 [ 687.404015][ T8747] erofs: (device loop2): mounted with root inode @ nid 36. [ 687.870529][ T8742] device batadv_slave_1 left promiscuous mode [ 687.909874][ T858] usb 1-1: USB disconnect, device number 39 [ 688.041431][ T8771] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2044'. [ 688.383123][ T8775] loop2: detected capacity change from 0 to 256 [ 688.389866][ T8775] FAT-fs (loop2): Unrecognized mount option "iocharsħ[peĈ _§ċet=iso8859-3" or missing value [ 688.594134][ T8771] loop4: detected capacity change from 0 to 40427 [ 688.601265][ T8771] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 688.609222][ T8771] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 688.620079][ T8771] F2FS-fs (loop4): Found nat_bits in checkpoint [ 688.792217][ T8771] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 688.956565][ T8771] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 688.995475][ T8771] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8771 comm=syz.4.2044 [ 689.012705][ T8771] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2044'. [ 689.251647][ T8793] loop2: detected capacity change from 0 to 4096 [ 689.260564][ T8793] ext2: Unknown parameter 'nouser_xattr' [ 689.268427][ T28] audit: type=1400 audit(1765544831.915:730): avc: denied { mounton } for pid=8787 comm="syz.2.2048" path="/384/file1" dev="tmpfs" ino=2162 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 689.436495][ T1713] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 689.910361][ T8799] device batadv_slave_1 entered promiscuous mode [ 690.183257][ T8801] loop4: detected capacity change from 0 to 16 [ 690.199782][ T8801] erofs: (device loop4): mounted with root inode @ nid 36. [ 690.489128][ T1713] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 690.498534][ T1713] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 690.839092][ T1713] usb 1-1: Product: syz [ 690.844440][ T1713] usb 1-1: Manufacturer: syz [ 690.849826][ T1713] usb 1-1: SerialNumber: syz [ 690.875080][ T8798] device batadv_slave_1 left promiscuous mode [ 691.562159][ T8825] loop2: detected capacity change from 0 to 256 [ 691.572400][ T8825] FAT-fs (loop2): Unrecognized mount option "iocharsħ[peĈ _§ċet=iso8859-3" or missing value [ 692.038602][ T8828] loop4: detected capacity change from 0 to 256 [ 694.107435][ T8840] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2065'. [ 694.117686][ T1713] rtl8150 1-1:1.0: couldn't reset the device [ 694.126922][ T1713] rtl8150: probe of 1-1:1.0 failed with error -5 [ 694.136734][ T8842] device syzkaller0 entered promiscuous mode [ 694.143711][ T8840] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2065'. [ 694.153474][ T1713] usb 1-1: USB disconnect, device number 40 [ 694.162893][ T8842] tipc: Started in network mode [ 694.193148][ T8842] tipc: Node identity 02f21f93d8db, cluster identity 4711 [ 694.210452][ T8842] tipc: Enabled bearer , priority 0 [ 694.218474][ T8841] tipc: Resetting bearer [ 694.225759][ T8841] tipc: Disabling bearer [ 694.517593][ T8848] netlink: 'syz.1.2062': attribute type 3 has an invalid length. [ 695.441322][ T8856] device batadv_slave_1 entered promiscuous mode [ 695.502737][ T808] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 695.751992][ T8858] loop0: detected capacity change from 0 to 16 [ 695.758738][ T6] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 695.767745][ T8858] erofs: (device loop0): mounted with root inode @ nid 36. [ 695.832737][ T808] usb 3-1: device descriptor read/64, error -71 [ 695.945361][ T6] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 695.954700][ T6] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 695.962812][ T6] usb 5-1: Product: syz [ 695.967189][ T6] usb 5-1: Manufacturer: syz [ 695.971903][ T6] usb 5-1: SerialNumber: syz [ 696.143932][ T808] usb 3-1: device descriptor read/64, error -71 [ 696.277517][ T8855] device batadv_slave_1 left promiscuous mode [ 697.499080][ T8878] syz.3.2074[8878] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 697.499162][ T8878] syz.3.2074[8878] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 697.583621][ T808] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 699.113683][ T6] rtl8150 5-1:1.0: couldn't reset the device [ 699.120376][ T6] rtl8150: probe of 5-1:1.0 failed with error -5 [ 699.136988][ T6] usb 5-1: USB disconnect, device number 40 [ 701.472773][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 701.705458][ T8902] device batadv_slave_1 entered promiscuous mode [ 702.049977][ T8906] loop0: detected capacity change from 0 to 16 [ 702.803019][ T8906] erofs: (device loop0): mounted with root inode @ nid 36. [ 702.974336][ T8901] device batadv_slave_1 left promiscuous mode [ 703.610520][ T8914] loop1: detected capacity change from 0 to 16 [ 703.622137][ T8914] erofs: (device loop1): mounted with root inode @ nid 36. [ 704.407778][ T8910] loop0: detected capacity change from 0 to 40427 [ 704.429755][ T8916] loop2: detected capacity change from 0 to 40427 [ 704.436377][ T476] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 704.453260][ T8910] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 704.466471][ T8916] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 704.493660][ T8910] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 704.502056][ T8916] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 704.547733][ T8910] F2FS-fs (loop0): Found nat_bits in checkpoint [ 704.551301][ T8916] F2FS-fs (loop2): Found nat_bits in checkpoint [ 704.587539][ T8910] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 704.594666][ T8910] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 704.594832][ T8916] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 704.648053][ T476] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 704.889040][ T476] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 704.892727][ T8916] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 704.905497][ T476] usb 2-1: Product: syz [ 704.912003][ T8910] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8910 comm=syz.0.2084 [ 704.924551][ T476] usb 2-1: Manufacturer: syz [ 704.929199][ T476] usb 2-1: SerialNumber: syz [ 704.947915][ T8916] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8916 comm=syz.2.2087 [ 706.699639][ T476] rtl8150 2-1:1.0: couldn't reset the device [ 706.784882][ T476] rtl8150: probe of 2-1:1.0 failed with error -5 [ 706.988971][ T476] usb 2-1: USB disconnect, device number 41 [ 707.331751][ T8949] loop2: detected capacity change from 0 to 40427 [ 707.347347][ T8965] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2097'. [ 707.357177][ T8949] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 707.365341][ T8965] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2097'. [ 707.374680][ T8949] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 707.398908][ T8949] F2FS-fs (loop2): Found nat_bits in checkpoint [ 707.442953][ T8949] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 707.450144][ T8949] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 710.222599][ T9004] loop4: detected capacity change from 0 to 16 [ 710.253786][ T9004] erofs: (device loop4): mounted with root inode @ nid 36. [ 710.344457][ T9009] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2109'. [ 710.382789][ T9009] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2109'. [ 710.618558][ T9020] loop1: detected capacity change from 0 to 128 [ 710.628296][ T9020] syz.1.2113: attempt to access beyond end of device [ 710.628296][ T9020] loop1: rw=2049, sector=145, nr_sectors = 3 limit=128 [ 712.788406][ T9027] syz.1.2113: attempt to access beyond end of device [ 712.788406][ T9027] loop1: rw=2049, sector=153, nr_sectors = 888 limit=128 [ 712.821145][ T9020] syz.1.2113: attempt to access beyond end of device [ 712.821145][ T9020] loop1: rw=524288, sector=153, nr_sectors = 256 limit=128 [ 712.835196][ T9020] syz.1.2113: attempt to access beyond end of device [ 712.835196][ T9020] loop1: rw=0, sector=153, nr_sectors = 8 limit=128 [ 712.856452][ T9020] syz.1.2113: attempt to access beyond end of device [ 712.856452][ T9020] loop1: rw=0, sector=153, nr_sectors = 8 limit=128 [ 712.870045][ T9020] syz.1.2113: attempt to access beyond end of device [ 712.870045][ T9020] loop1: rw=0, sector=153, nr_sectors = 8 limit=128 [ 712.883402][ T9019] syz.1.2113: attempt to access beyond end of device [ 712.883402][ T9019] loop1: rw=0, sector=153, nr_sectors = 8 limit=128 [ 712.896759][ T9020] syz.1.2113: attempt to access beyond end of device [ 712.896759][ T9020] loop1: rw=0, sector=153, nr_sectors = 8 limit=128 [ 712.947360][ T9019] syz.1.2113: attempt to access beyond end of device [ 712.947360][ T9019] loop1: rw=0, sector=153, nr_sectors = 8 limit=128 [ 712.970138][ T9019] syz.1.2113: attempt to access beyond end of device [ 712.970138][ T9019] loop1: rw=0, sector=153, nr_sectors = 8 limit=128 [ 713.164328][ T9033] loop4: detected capacity change from 0 to 256 [ 713.237621][ T9033] exfat: Unknown parameter 'allow?utime' [ 713.291387][ T9019] Buffer I/O error on dev loop1, logical block 153, async page read [ 713.299698][ T9019] Buffer I/O error on dev loop1, logical block 154, async page read [ 713.309416][ T9019] Buffer I/O error on dev loop1, logical block 155, async page read [ 713.318047][ T9019] Buffer I/O error on dev loop1, logical block 156, async page read [ 713.326837][ T9019] Buffer I/O error on dev loop1, logical block 157, async page read [ 713.335065][ T9019] Buffer I/O error on dev loop1, logical block 158, async page read [ 713.343170][ T9019] Buffer I/O error on dev loop1, logical block 159, async page read [ 713.351240][ T9019] Buffer I/O error on dev loop1, logical block 160, async page read [ 713.363409][ T9019] Buffer I/O error on dev loop1, logical block 153, async page read [ 713.371544][ T9019] Buffer I/O error on dev loop1, logical block 154, async page read [ 713.392791][ T28] audit: type=1400 audit(1765544856.045:731): avc: denied { ioctl } for pid=9032 comm="syz.4.2116" path="socket:[43825]" dev="sockfs" ino=43825 ioctlcmd=0xf504 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 713.833442][ T9053] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2122'. [ 713.851747][ T9053] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2122'. [ 713.929809][ T9057] loop2: detected capacity change from 0 to 256 [ 714.151203][ T9060] loop4: detected capacity change from 0 to 16 [ 714.224132][ T9060] erofs: (device loop4): mounted with root inode @ nid 36. [ 715.410117][ T9070] loop2: detected capacity change from 0 to 512 [ 715.440348][ T9070] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 715.462801][ T9070] EXT4-fs (loop2): couldn't mount RDWR because of unsupported optional features (3000000) [ 715.518497][ T9070] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 716.070801][ T9081] loop0: detected capacity change from 0 to 16 [ 716.189496][ T9081] erofs: (device loop0): mounted with root inode @ nid 36. [ 717.652205][ T9089] netlink: 'syz.3.2133': attribute type 34 has an invalid length. [ 718.029437][ T9095] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2134'. [ 718.053229][ T9095] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2134'. [ 718.241881][ T9108] loop0: detected capacity change from 0 to 16 [ 718.325050][ T9108] erofs: (device loop0): mounted with root inode @ nid 36. [ 718.969271][ T9119] loop0: detected capacity change from 0 to 128 [ 719.004733][ T9119] FAT-fs (loop0): Unrecognized mount option "GPL" or missing value [ 719.132062][ T9121] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2141'. [ 720.449212][ T9130] loop4: detected capacity change from 0 to 16 [ 720.458762][ T9130] erofs: (device loop4): mounted with root inode @ nid 36. [ 720.689053][ T9132] loop0: detected capacity change from 0 to 512 [ 720.759843][ T9132] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 720.772848][ T9132] EXT4-fs (loop0): couldn't mount RDWR because of unsupported optional features (3000000) [ 720.789942][ T9132] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities [ 720.947179][ T9121] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9121 comm=syz.3.2141 [ 720.961015][ T9143] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 720.970224][ T9143] FAT-fs (loop5): unable to read boot sector [ 720.978490][ T9121] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2141'. [ 721.012728][ T1713] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 721.206414][ T422] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 721.232109][ T9149] loop0: detected capacity change from 0 to 16 [ 721.242088][ T9149] erofs: (device loop0): mounted with root inode @ nid 36. [ 721.974238][ T9156] loop2: detected capacity change from 0 to 2048 [ 721.981020][ T9156] ext4: Unknown parameter 'uid' [ 722.043844][ T1713] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 722.055250][ T1713] usb 5-1: New USB device found, idVendor=046d, idProduct=c626, bcdDevice= 0.00 [ 722.064363][ T1713] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 722.106879][ T1713] usb 5-1: config 0 descriptor?? [ 722.107191][ T422] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 722.121017][ T422] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 722.129081][ T422] usb 2-1: Product: syz [ 722.133365][ T422] usb 2-1: Manufacturer: syz [ 722.137974][ T422] usb 2-1: SerialNumber: syz [ 723.388836][ T1713] logitech 0003:046D:C626.0039: unbalanced collection at end of report description [ 723.398676][ T1713] logitech 0003:046D:C626.0039: parse failed [ 723.404742][ T1713] logitech: probe of 0003:046D:C626.0039 failed with error -22 [ 723.822719][ T858] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 723.934102][ T1713] usb 5-1: USB disconnect, device number 41 [ 723.941308][ T28] audit: type=1400 audit(1765544866.595:732): avc: denied { bind } for pid=9135 comm="syz.4.2146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 723.965931][ T28] audit: type=1400 audit(1765544866.615:733): avc: denied { name_bind } for pid=9135 comm="syz.4.2146" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 723.986807][ T28] audit: type=1400 audit(1765544866.615:734): avc: denied { node_bind } for pid=9135 comm="syz.4.2146" saddr=fc01::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 724.003898][ T858] usb 1-1: config 1 has an invalid interface number: 97 but max is 0 [ 724.024077][ T858] usb 1-1: config 1 has an invalid descriptor of length 164, skipping remainder of the config [ 724.036168][ T858] usb 1-1: config 1 has no interface number 0 [ 724.042439][ T858] usb 1-1: config 1 interface 97 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 724.057792][ T858] usb 1-1: New USB device found, idVendor=0b05, idProduct=1776, bcdDevice=93.7e [ 724.066957][ T858] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 724.080480][ T858] usb 1-1: Product: ĉŻêžċ™”îı‹ċŠŻî˜´ĉŠèŻŽ¸°ä˘ŸëˆâĤ²áħ™ŒŻá›‘蟭êıĵïİ’í’§Ö ċż ëĴ²ê‹â ˜á“³à½½éħĞä•î“ƒċ§˜ç°²ĉżî·›âĴ€â˜•ïħ℀ë‰ĤâĵŽè‹½§ì·é˜Œä‚–Ĉšëˆ›Ùşħĥċ³Ĥċ‘ê³­îŒ ë°ħç“ħâˆĞœ‘Ş‚ëĥèŸğèƒ˘î—ç†œċıĴî˜˘ï°–Éœï°í‡î£´èĴ€ëµ›ċżŠĉħŽìŻžà ğĥ랃è݈焓䗓ïİšä—•î•ċ”‹ [ 724.106104][ T858] usb 1-1: Manufacturer: ™ [ 724.110725][ T858] usb 1-1: SerialNumber: ▆ žçħçĞğ瓒äĞĥèĦ„ₗ⃰ċċ°½ĦࠉżŒèœŒ§Ĥċ°§äŻµ˜‘˜â€îğŸç„‚éœì‹ŻäŠƒ¨ƒäĵ´Ĵé“ħä‹žá“›á’¸í†’ì—˘şéı•èş ÜĴé˘Ĵꉕä”ċ‚£â€‹á†ë ê˘ï¨ğâžĵ嗀鰁೴䚒ï§Ħçĵ놠䄽ꣳ蜗µâ­í„ı癋´ĥ⤙矯䓂¤‘àĞ´ [ 724.152055][ T422] rtl8150 2-1:1.0: couldn't reset the device [ 724.158152][ T422] rtl8150: probe of 2-1:1.0 failed with error -5 [ 724.165834][ T422] usb 2-1: USB disconnect, device number 42 [ 724.574925][ T9193] loop2: detected capacity change from 0 to 16 [ 726.124119][ T9193] erofs: (device loop2): mounted with root inode @ nid 36. [ 726.299042][ T9195] loop2: detected capacity change from 0 to 256 [ 726.405976][ T9197] device batadv_slave_1 entered promiscuous mode [ 728.894819][ T9203] loop4: detected capacity change from 0 to 16 [ 728.941850][ T422] usb 1-1: USB disconnect, device number 41 [ 728.948488][ T9203] erofs: (device loop4): mounted with root inode @ nid 36. [ 729.026137][ T9211] loop1: detected capacity change from 0 to 2048 [ 729.065154][ T9196] device batadv_slave_1 left promiscuous mode [ 729.171619][ T9220] loop4: detected capacity change from 0 to 16 [ 729.186632][ T9211] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 729.195763][ T9211] ext4 filesystem being mounted at /421/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 729.207687][ T9220] erofs: (device loop4): mounted with root inode @ nid 36. [ 729.564073][ T9227] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.2167: bg 0: block 345: padding at end of block bitmap is not set [ 729.608647][ T9227] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2048 with error 117 [ 729.652752][ T9227] EXT4-fs (loop1): This should not happen!! Data will be lost [ 729.652752][ T9227] [ 729.698050][ T9227] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 2065 with max blocks 2031 with error 28 [ 729.712727][ T9227] EXT4-fs (loop1): This should not happen!! Data will be lost [ 729.712727][ T9227] [ 729.728975][ T9227] EXT4-fs (loop1): Total free blocks count 0 [ 729.742406][ T9227] EXT4-fs (loop1): Free/Dirty block details [ 729.756767][ T9227] EXT4-fs (loop1): free_blocks=0 [ 729.768269][ T9227] EXT4-fs (loop1): dirty_blocks=2032 [ 729.781790][ T9227] EXT4-fs (loop1): Block reservation details [ 730.143354][ T9243] loop0: detected capacity change from 0 to 16 [ 730.153036][ T9243] erofs: (device loop0): mounted with root inode @ nid 36. [ 730.262795][ T422] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 730.337624][ T9245] device batadv_slave_1 entered promiscuous mode [ 730.548725][ T422] usb 2-1: Using ep0 maxpacket: 16 [ 730.557189][ T422] usb 2-1: unable to get BOS descriptor or descriptor too short [ 731.562749][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 731.934255][ T9244] device batadv_slave_1 left promiscuous mode [ 731.945897][ T422] usb 2-1: config 13 has an invalid interface number: 50 but max is 0 [ 732.047711][ T422] usb 2-1: config 13 has an invalid descriptor of length 0, skipping remainder of the config [ 732.063683][ T422] usb 2-1: config 13 has no interface number 0 [ 732.071391][ T422] usb 2-1: config 13 interface 50 altsetting 167 bulk endpoint 0x88 has invalid maxpacket 16 [ 732.081881][ T422] usb 2-1: config 13 interface 50 altsetting 167 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 732.106211][ T422] usb 2-1: config 13 interface 50 has no altsetting 0 [ 732.121174][ T422] usb 2-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32 [ 732.140095][ T422] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 732.221536][ T422] usb 2-1: Product: syz [ 732.239415][ T9259] device batadv_slave_1 entered promiscuous mode [ 732.643447][ T422] usb 2-1: Manufacturer: syz [ 732.648186][ T422] usb 2-1: SerialNumber: syz [ 732.658472][ T9240] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 732.913729][ T9258] device batadv_slave_1 left promiscuous mode [ 733.229058][ T9275] loop2: detected capacity change from 0 to 512 [ 733.333221][ T9275] EXT4-fs: Invalid want_extra_isize 14 [ 733.479767][ T9291] loop0: detected capacity change from 0 to 16 [ 733.543514][ T9291] erofs: (device loop0): mounted with root inode @ nid 36. [ 733.892950][ T422] usb 2-1: MIDIStreaming interface descriptor not found [ 733.911814][ T422] usb 2-1: USB disconnect, device number 43 [ 734.718766][ T9306] device batadv_slave_1 entered promiscuous mode [ 735.674097][ T9307] loop0: detected capacity change from 0 to 16 [ 735.680887][ T9307] erofs: (device loop0): mounted with root inode @ nid 36. [ 735.697775][ T9314] loop2: detected capacity change from 0 to 16 [ 735.716719][ T9314] erofs: (device loop2): mounted with root inode @ nid 36. [ 735.797998][ T9305] device batadv_slave_1 left promiscuous mode [ 737.696039][ T9333] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2205'. [ 739.116678][ T9340] loop1: detected capacity change from 0 to 40427 [ 739.164313][ T9340] F2FS-fs (loop1): fault_injection options not supported [ 739.244484][ T9340] F2FS-fs (loop1): fault_type options not supported [ 739.293564][ T9340] F2FS-fs (loop1): invalid crc value [ 739.330285][ T9340] F2FS-fs (loop1): Found nat_bits in checkpoint [ 739.450719][ T9333] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9333 comm=syz.3.2205 [ 739.614446][ T9333] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2205'. [ 739.644410][ T9340] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 739.863653][ T284] bio_check_eod: 18114 callbacks suppressed [ 739.863673][ T284] syz-executor: attempt to access beyond end of device [ 739.863673][ T284] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 740.178308][ T9372] loop0: detected capacity change from 0 to 512 [ 740.293335][ T9379] loop0: detected capacity change from 0 to 16 [ 740.793890][ T9391] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2222'. [ 740.958444][ T9391] loop4: detected capacity change from 0 to 40427 [ 740.965607][ T9391] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 740.973442][ T9391] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 741.117580][ T9391] F2FS-fs (loop4): Found nat_bits in checkpoint [ 741.511203][ T9391] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 741.601181][ T9391] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 741.724625][ T9410] syz.0.2226[9410] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 741.724718][ T9410] syz.0.2226[9410] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 741.765151][ T9391] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9391 comm=syz.4.2222 [ 741.901440][ T9391] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2222'. [ 741.983586][ T9417] loop1: detected capacity change from 0 to 512 [ 741.990166][ T9417] EXT4-fs: Ignoring removed mblk_io_submit option [ 741.998846][ T9417] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 742.008763][ T9417] EXT4-fs: failed to create workqueue [ 742.014494][ T9417] EXT4-fs (loop1): mount failed [ 742.463989][ T9443] loop2: detected capacity change from 0 to 16 [ 742.483404][ T9443] erofs: (device loop2): mounted with root inode @ nid 36. [ 743.082981][ T290] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 744.219662][ T290] usb 1-1: device descriptor read/64, error -71 [ 744.359021][ T9462] loop2: detected capacity change from 0 to 40427 [ 744.366167][ T9462] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 744.374013][ T9462] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 744.384592][ T9462] F2FS-fs (loop2): Found nat_bits in checkpoint [ 744.821097][ T9462] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 744.833329][ T9462] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 744.982384][ T9462] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9462 comm=syz.2.2240 [ 745.597833][ T9480] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2245'. [ 745.606901][ T9480] device gretap0 left promiscuous mode [ 745.612471][ T9480] bridge0: port 3(gretap0) entered disabled state [ 745.619523][ T9480] device bridge_slave_1 left promiscuous mode [ 745.625823][ T9480] bridge0: port 2(bridge_slave_1) entered disabled state [ 745.633919][ T9480] device bridge_slave_0 left promiscuous mode [ 745.640092][ T9480] bridge0: port 1(bridge_slave_0) entered disabled state [ 745.702341][ T290] usb 1-1: device descriptor read/64, error -71 [ 745.920396][ T9501] bridge0: port 1(bridge_slave_0) entered disabled state [ 749.286339][ T9514] loop1: detected capacity change from 0 to 40427 [ 749.297486][ T9529] loop0: detected capacity change from 0 to 16 [ 749.323229][ T9514] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 749.335368][ T9529] erofs: (device loop0): mounted with root inode @ nid 36. [ 749.362906][ T9514] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 749.466831][ T9514] F2FS-fs (loop1): Found nat_bits in checkpoint [ 749.707021][ T9514] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 749.714291][ T9514] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 749.729574][ T9514] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9514 comm=syz.1.2255 [ 750.200846][ T9550] netlink: 'syz.0.2263': attribute type 4 has an invalid length. [ 750.350382][ T28] audit: type=1326 audit(1765544893.005:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9551 comm="syz.0.2264" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f61c398f749 code=0x0 [ 750.466627][ T9559] loop1: detected capacity change from 0 to 128 [ 751.376415][ T9576] loop0: detected capacity change from 0 to 512 [ 751.386702][ T9576] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 752.523063][ T9576] EXT4-fs (loop0): 1 truncate cleaned up [ 752.528810][ T9576] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 753.502757][ T9592] loop4: detected capacity change from 0 to 16 [ 753.509529][ T9592] erofs: (device loop4): mounted with root inode @ nid 36. [ 753.523973][ T282] EXT4-fs (loop0): unmounting filesystem. [ 753.601816][ T9596] FAULT_INJECTION: forcing a failure. [ 753.601816][ T9596] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 753.651783][ T9596] CPU: 0 PID: 9596 Comm: syz.0.2275 Tainted: G W syzkaller #0 [ 753.660769][ T9596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 753.670929][ T9596] Call Trace: [ 753.674229][ T9596] [ 753.677167][ T9596] __dump_stack+0x21/0x24 [ 753.681520][ T9596] dump_stack_lvl+0xee/0x150 [ 753.686125][ T9596] ? __cfi_dump_stack_lvl+0x8/0x8 [ 753.691182][ T9596] dump_stack+0x15/0x24 [ 753.695351][ T9596] should_fail_ex+0x3d4/0x520 [ 753.700046][ T9596] should_fail+0xb/0x10 [ 753.704218][ T9596] should_fail_usercopy+0x1a/0x20 [ 753.709256][ T9596] _copy_to_user+0x1e/0x90 [ 753.713689][ T9596] simple_read_from_buffer+0xe9/0x160 [ 753.719072][ T9596] proc_fail_nth_read+0x19a/0x210 [ 753.724115][ T9596] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 753.729671][ T9596] ? security_file_permission+0x94/0xb0 [ 753.735236][ T9596] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 753.740796][ T9596] vfs_read+0x26e/0x8c0 [ 753.744973][ T9596] ? __cfi_vfs_read+0x10/0x10 [ 753.749667][ T9596] ? __kasan_check_write+0x14/0x20 [ 753.754795][ T9596] ? mutex_lock+0x8d/0x1a0 [ 753.759308][ T9596] ? __cfi_mutex_lock+0x10/0x10 [ 753.764183][ T9596] ? __fdget_pos+0x2cd/0x380 [ 753.768783][ T9596] ? ksys_read+0x71/0x240 [ 753.773128][ T9596] ksys_read+0x140/0x240 [ 753.777393][ T9596] ? __cfi_ksys_read+0x10/0x10 [ 753.782170][ T9596] ? __bpf_trace_sys_enter+0x62/0x70 [ 753.787470][ T9596] __x64_sys_read+0x7b/0x90 [ 753.791991][ T9596] x64_sys_call+0x2f/0x9a0 [ 753.796427][ T9596] do_syscall_64+0x4c/0xa0 [ 753.800878][ T9596] ? clear_bhb_loop+0x30/0x80 [ 753.805573][ T9596] ? clear_bhb_loop+0x30/0x80 [ 753.810358][ T9596] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 753.816273][ T9596] RIP: 0033:0x7f61c398e15c [ 753.820696][ T9596] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 753.840316][ T9596] RSP: 002b:00007f61c23f7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 753.848747][ T9596] RAX: ffffffffffffffda RBX: 00007f61c3be5fa0 RCX: 00007f61c398e15c [ 753.856730][ T9596] RDX: 000000000000000f RSI: 00007f61c23f70a0 RDI: 0000000000000006 [ 753.864716][ T9596] RBP: 00007f61c23f7090 R08: 0000000000000000 R09: 0000000000000000 [ 753.872703][ T9596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 753.880848][ T9596] R13: 00007f61c3be6038 R14: 00007f61c3be5fa0 R15: 00007ffd2b20b568 [ 753.888832][ T9596] [ 754.209048][ T9607] device batadv_slave_1 entered promiscuous mode [ 754.298102][ T9593] loop1: detected capacity change from 0 to 40427 [ 754.310951][ T9593] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 754.318817][ T9593] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 754.442874][ T9612] loop0: detected capacity change from 0 to 16 [ 754.463458][ T9612] erofs: (device loop0): mounted with root inode @ nid 36. [ 754.616577][ T28] audit: type=1400 audit(1765544897.275:736): avc: denied { name_bind } for pid=9614 comm="syz.4.2281" path="socket:[46508]" dev="sockfs" ino=46508 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 754.656653][ T9593] F2FS-fs (loop1): Found nat_bits in checkpoint [ 754.810293][ T9593] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 754.817603][ T9593] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 754.841846][ T9624] device batadv_slave_1 entered promiscuous mode [ 755.499102][ T9606] device batadv_slave_1 left promiscuous mode [ 757.170968][ T9628] loop2: detected capacity change from 0 to 16 [ 757.213219][ T9628] erofs: (device loop2): mounted with root inode @ nid 36. [ 757.422940][ T9623] device batadv_slave_1 left promiscuous mode [ 757.548865][ T9643] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2288'. [ 758.012579][ T9654] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2292'. [ 758.021500][ T9654] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2292'. [ 759.161734][ T9643] loop2: detected capacity change from 0 to 40427 [ 759.189909][ T9643] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 759.197918][ T9643] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 759.224868][ T9643] F2FS-fs (loop2): Found nat_bits in checkpoint [ 759.506794][ T9643] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 759.522782][ T9643] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 759.543009][ T9643] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9643 comm=syz.2.2288 [ 759.584791][ T9643] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2288'. [ 759.688460][ T9672] loop0: detected capacity change from 0 to 40427 [ 759.695671][ T9672] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 759.703772][ T9672] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 759.714507][ T9672] F2FS-fs (loop0): Found nat_bits in checkpoint [ 759.753463][ T9672] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 759.760621][ T9672] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 759.843444][ T9684] device batadv_slave_1 entered promiscuous mode [ 760.925032][ T9687] loop2: detected capacity change from 0 to 16 [ 761.211230][ T9687] erofs: (device loop2): mounted with root inode @ nid 36. [ 761.265293][ T9672] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9672 comm=syz.0.2296 [ 761.333552][ T9682] device batadv_slave_1 left promiscuous mode [ 761.632964][ C1] ip6_tunnel: K xmit: Local address not yet configured! [ 761.650431][ T9709] loop0: detected capacity change from 0 to 16 [ 761.722665][ T9708] loop2: detected capacity change from 0 to 16 [ 761.744190][ T9708] erofs: (device loop2): mounted with root inode @ nid 36. [ 761.778760][ T9709] erofs: (device loop0): mounted with root inode @ nid 36. [ 761.933793][ T9713] device batadv_slave_1 entered promiscuous mode [ 762.806680][ T9715] loop4: detected capacity change from 0 to 16 [ 762.813770][ T9715] erofs: (device loop4): mounted with root inode @ nid 36. [ 762.953656][ T9712] device batadv_slave_1 left promiscuous mode [ 763.552230][ T9737] device batadv_slave_1 entered promiscuous mode [ 763.781790][ T9740] loop4: detected capacity change from 0 to 16 [ 763.788829][ T9740] erofs: (device loop4): mounted with root inode @ nid 36. [ 763.805480][ T9736] device batadv_slave_1 left promiscuous mode [ 764.482688][ T6] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 764.689433][ T9756] loop1: detected capacity change from 0 to 256 [ 764.696516][ T9756] FAT-fs (loop1): Unrecognized mount option "iocharsħ[peĈ _§ċet=iso8859-3" or missing value [ 765.697975][ T9760] loop4: detected capacity change from 0 to 256 [ 765.704648][ T9760] FAT-fs (loop4): Unrecognized mount option "iocharsħ[peĈ _§ċet=iso8859-3" or missing value [ 766.392673][ T476] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 766.585357][ T476] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 766.602688][ T476] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 766.619688][ T476] usb 2-1: Product: syz [ 766.623996][ T476] usb 2-1: Manufacturer: syz [ 766.628619][ T476] usb 2-1: SerialNumber: syz [ 766.657114][ T6] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 766.659475][ T9767] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2323'. [ 766.673354][ T6] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 766.704180][ T6] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 766.713335][ T6] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 766.721474][ T6] usb 3-1: Manufacturer: syz [ 766.754247][ T6] usb 3-1: config 0 descriptor?? [ 766.774613][ T6] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 767.124772][ T391] usb 3-1: USB disconnect, device number 44 [ 767.287142][ T9767] loop4: detected capacity change from 0 to 40427 [ 767.294363][ T9767] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 767.362844][ T9767] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 767.455487][ T9767] F2FS-fs (loop4): Found nat_bits in checkpoint [ 767.798723][ T9767] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 767.946447][ T9767] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 768.373836][ T476] rtl8150 2-1:1.0: couldn't reset the device [ 768.387190][ T476] rtl8150: probe of 2-1:1.0 failed with error -5 [ 768.417040][ T9767] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9767 comm=syz.4.2323 [ 768.460219][ T476] usb 2-1: USB disconnect, device number 44 [ 768.471789][ T9767] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2323'. [ 768.545601][ T9789] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2329'. [ 768.554751][ T9789] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2329'. [ 768.615994][ T9793] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2332'. [ 769.621117][ T9804] loop2: detected capacity change from 0 to 256 [ 769.714040][ T9804] FAT-fs (loop2): Unrecognized mount option "iocharsħ[peĈ _§ċet=iso8859-3" or missing value [ 770.467628][ T476] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 770.475319][ T422] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 770.663880][ T422] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 770.674327][ T476] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 770.689763][ T476] usb 5-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 770.699031][ T422] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 770.721223][ T476] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 770.734640][ T422] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 770.748508][ T476] usb 5-1: config 0 descriptor?? [ 770.758645][ T422] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 770.769574][ T476] usb-storage 5-1:0.0: USB Mass Storage device detected [ 770.783810][ T422] usb 1-1: Manufacturer: syz [ 770.795388][ T422] usb 1-1: config 0 descriptor?? [ 770.802837][ T476] usb-storage 5-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 770.842234][ T422] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 770.974658][ T422] usb 5-1: USB disconnect, device number 42 [ 771.517286][ T9830] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2341'. [ 771.542513][ T9830] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2341'. [ 771.883083][ C0] ip6_tunnel: K xmit: Local address not yet configured! [ 772.848305][ T9840] loop2: detected capacity change from 0 to 16 [ 772.874281][ T9840] erofs: (device loop2): mounted with root inode @ nid 36. [ 773.171214][ T9844] Bluetooth: hci0: Frame reassembly failed (-84) [ 773.484342][ T28] audit: type=1400 audit(1765544915.835:737): avc: denied { compute_member } for pid=9841 comm="syz.4.2344" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 773.516179][ T5842] Bluetooth: hci0: Frame reassembly failed (-84) [ 774.233499][ T422] usb 1-1: USB disconnect, device number 44 [ 774.726656][ T9863] loop1: detected capacity change from 0 to 256 [ 774.740000][ T9863] FAT-fs (loop1): Unrecognized mount option "iocharsħ[peĈ _§ċet=iso8859-3" or missing value [ 775.502783][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 775.657294][ T9870] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2352'. [ 777.925996][ T9908] loop0: detected capacity change from 0 to 256 [ 777.933061][ T9908] FAT-fs (loop0): Unrecognized mount option "iocharsħ[peĈ _§ċet=iso8859-3" or missing value [ 778.012817][ T858] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 778.012853][ T422] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 778.202833][ T422] usb 2-1: Using ep0 maxpacket: 8 [ 778.210392][ T422] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 778.304988][ T422] usb 2-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=5f.0e [ 778.316522][ T858] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 778.364330][ T858] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 778.417544][ T422] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 778.493839][ T858] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 778.517703][ T422] usb 2-1: config 0 descriptor?? [ 778.655246][ T858] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 778.663894][ T422] usb 2-1: bad CDC descriptors [ 778.673330][ T422] cdc_acm 2-1:0.0: Control and data interfaces are not separated! [ 778.691353][ T858] usb 3-1: Manufacturer: syz [ 778.706185][ T422] cdc_acm 2-1:0.0: This needs exactly 3 endpoints [ 778.723499][ T858] usb 3-1: config 0 descriptor?? [ 778.732682][ T422] cdc_acm: probe of 2-1:0.0 failed with error -22 [ 778.743033][ T858] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 778.870178][ T858] usb 2-1: USB disconnect, device number 45 [ 780.330261][ T9940] device batadv_slave_1 entered promiscuous mode [ 781.439641][ T808] usb 3-1: USB disconnect, device number 45 [ 781.561409][ T9946] loop0: detected capacity change from 0 to 16 [ 781.951304][ T9946] erofs: (device loop0): mounted with root inode @ nid 36. [ 782.082775][ T9939] device batadv_slave_1 left promiscuous mode [ 783.128559][ T9961] input: syz1 as /devices/virtual/input/input8 [ 783.202999][ T28] audit: type=1400 audit(1765544925.835:738): avc: denied { read } for pid=87 comm="acpid" name="event3" dev="devtmpfs" ino=2113 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 783.383066][ T28] audit: type=1400 audit(1765544925.835:739): avc: denied { open } for pid=87 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=2113 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 783.427801][ T28] audit: type=1400 audit(1765544925.845:740): avc: denied { ioctl } for pid=87 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=2113 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 783.522979][ T9968] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2379'. [ 783.541142][ T9975] loop1: detected capacity change from 0 to 256 [ 783.549140][ T28] audit: type=1400 audit(1765544926.055:741): avc: denied { execmem } for pid=9964 comm="syz.3.2381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 784.775607][ T9989] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2386'. [ 784.812917][ T9989] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2386'. [ 784.930721][ T9971] loop0: detected capacity change from 0 to 40427 [ 784.974803][ T9971] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 784.986634][ T9971] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 785.726336][ T9971] F2FS-fs (loop0): Found nat_bits in checkpoint [ 785.879544][ T9971] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 785.892680][ T9971] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 785.909792][ T9968] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9968 comm=syz.0.2379 [ 786.325282][ T9968] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2379'. [ 786.811298][T10031] device batadv_slave_1 entered promiscuous mode [ 787.728268][T10030] device batadv_slave_1 left promiscuous mode [ 789.578443][T10055] loop2: detected capacity change from 0 to 256 [ 789.585224][T10055] FAT-fs (loop2): Unrecognized mount option "iocharsħ[peĈ _§ċet=iso8859-3" or missing value [ 789.713237][T10058] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2406'. [ 791.057033][T10072] loop1: detected capacity change from 0 to 16 [ 791.148576][T10072] erofs: (device loop1): mounted with root inode @ nid 36. [ 792.352741][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 794.487255][T10104] device batadv_slave_1 entered promiscuous mode [ 794.751221][T10107] loop0: detected capacity change from 0 to 16 [ 795.097934][T10107] erofs: (device loop0): mounted with root inode @ nid 36. [ 795.359778][T10103] device batadv_slave_1 left promiscuous mode [ 796.709721][T10121] loop1: detected capacity change from 0 to 16 [ 796.726714][T10125] loop0: detected capacity change from 0 to 256 [ 796.737789][T10127] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2425'. [ 796.747526][T10121] erofs: (device loop1): mounted with root inode @ nid 36. [ 798.399266][T10138] device batadv_slave_1 entered promiscuous mode [ 799.473131][T10137] device batadv_slave_1 left promiscuous mode [ 799.655671][T10128] loop4: detected capacity change from 0 to 40427 [ 799.662907][T10128] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 801.146007][T10128] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 801.164147][T10128] F2FS-fs (loop4): Failed to start F2FS issue_checkpoint_thread (-4) [ 801.402160][T10179] loop1: detected capacity change from 0 to 256 [ 802.819916][T10189] input: syz1 as /devices/virtual/input/input9 [ 803.913129][T10200] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2446'. [ 803.914319][T10202] loop0: detected capacity change from 0 to 256 [ 803.930187][T10204] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2445'. [ 804.546680][T10200] loop1: detected capacity change from 0 to 40427 [ 804.563467][T10200] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 804.579574][T10200] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 804.611284][T10200] F2FS-fs (loop1): Found nat_bits in checkpoint [ 804.668894][T10200] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 804.684422][T10204] loop4: detected capacity change from 0 to 40427 [ 804.686289][T10200] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 804.691544][T10204] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 804.719514][T10204] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 804.724415][T10200] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10200 comm=syz.1.2446 [ 804.818480][T10204] F2FS-fs (loop4): Found nat_bits in checkpoint [ 804.825078][T10200] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2446'. [ 804.882908][T10204] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 804.898135][T10204] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 804.914901][T10204] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10204 comm=syz.4.2445 [ 804.934808][T10204] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2445'. [ 806.823652][ T28] audit: type=1400 audit(1765544949.485:742): avc: denied { watch watch_reads } for pid=10254 comm="syz.2.2460" path="/" dev="ramfs" ino=47442 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 808.529271][ T28] audit: type=1400 audit(1765544949.515:743): avc: denied { watch } for pid=10254 comm="syz.2.2460" path="/file0" dev="ramfs" ino=47455 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 808.564831][T10271] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2464'. [ 808.587690][T10269] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2466'. [ 808.705272][T10277] loop2: detected capacity change from 0 to 16 [ 808.722718][T10277] erofs: (device loop2): mounted with root inode @ nid 36. [ 808.882679][ T422] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 809.010026][T10269] loop0: detected capacity change from 0 to 40427 [ 809.019566][T10269] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 809.027555][T10269] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 809.077279][ T422] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 809.129869][ T422] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 809.158123][T10269] F2FS-fs (loop0): Found nat_bits in checkpoint [ 809.182689][ T422] usb 2-1: Product: syz [ 809.192669][ T422] usb 2-1: Manufacturer: syz [ 809.212667][ T422] usb 2-1: SerialNumber: syz [ 809.251502][T10269] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 809.260428][T10271] loop4: detected capacity change from 0 to 40427 [ 809.261749][T10269] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 809.267653][T10271] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 809.282468][T10271] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 809.299026][T10269] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10269 comm=syz.0.2466 [ 809.313920][T10271] F2FS-fs (loop4): Found nat_bits in checkpoint [ 809.316978][T10269] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2466'. [ 809.330287][T10287] device batadv_slave_1 entered promiscuous mode [ 809.363752][T10271] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 809.370873][T10271] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 809.409571][T10271] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10271 comm=syz.4.2464 [ 809.423735][T10271] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2464'. [ 810.644145][T10285] device batadv_slave_1 left promiscuous mode [ 811.091868][ T422] rtl8150 2-1:1.0: couldn't reset the device [ 811.108178][ T422] rtl8150: probe of 2-1:1.0 failed with error -5 [ 811.252990][ T422] usb 2-1: USB disconnect, device number 46 [ 812.043306][T10329] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2481'. [ 812.081444][T10331] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2482'. [ 812.682324][T10331] loop2: detected capacity change from 0 to 40427 [ 812.689397][T10331] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 812.697205][T10331] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 812.839437][T10331] F2FS-fs (loop2): Found nat_bits in checkpoint [ 812.850051][T10329] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10329 comm=syz.3.2481 [ 812.907839][T10329] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2481'. [ 813.197149][T10331] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 813.229256][T10331] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 813.244778][T10345] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2485'. [ 813.739095][T10331] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2482'. [ 815.878486][T10346] loop0: detected capacity change from 0 to 40427 [ 815.893238][T10346] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 815.911197][T10346] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 815.942369][T10346] F2FS-fs (loop0): Found nat_bits in checkpoint [ 815.999317][T10357] device batadv_slave_1 entered promiscuous mode [ 816.090526][T10346] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 816.097779][T10346] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 816.119278][T10366] loop4: detected capacity change from 0 to 16 [ 816.244663][T10366] erofs: (device loop4): mounted with root inode @ nid 36. [ 816.594867][T10375] loop2: detected capacity change from 0 to 512 [ 816.608169][T10375] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 816.631379][T10375] EXT4-fs (loop2): orphan cleanup on readonly fs [ 816.645562][T10375] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:511: comm syz.2.2488: Block bitmap for bg 0 marked uninitialized [ 816.661149][T10375] EXT4-fs (loop2): Remounting filesystem read-only [ 816.668230][T10375] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6165: Corrupt filesystem [ 816.689813][T10375] EXT4-fs (loop2): Remounting filesystem read-only [ 816.696824][T10375] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:511: comm syz.2.2488: Block bitmap for bg 0 marked uninitialized [ 816.710463][T10375] EXT4-fs (loop2): Remounting filesystem read-only [ 816.717139][T10375] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6165: Corrupt filesystem [ 816.726300][T10375] EXT4-fs (loop2): Remounting filesystem read-only [ 816.733048][T10375] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:511: comm syz.2.2488: Block bitmap for bg 0 marked uninitialized [ 816.746662][T10375] EXT4-fs (loop2): Remounting filesystem read-only [ 816.753374][T10375] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6165: Corrupt filesystem [ 816.762519][T10375] EXT4-fs (loop2): Remounting filesystem read-only [ 816.769330][T10375] EXT4-fs (loop2): 1 orphan inode deleted [ 816.775321][T10375] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 816.833804][T10356] device batadv_slave_1 left promiscuous mode [ 816.879575][T10378] loop0: detected capacity change from 0 to 32768 [ 816.963125][T10378] loop0: p1 p2 p3 < p5 p6 > [ 816.968416][T10378] loop0: p2 size 16775168 extends beyond EOD, truncated [ 816.976763][T10378] loop0: p5 start 4294970168 is beyond EOD, truncated [ 817.354441][ T283] EXT4-fs (loop2): unmounting filesystem. [ 817.707753][T10396] loop2: detected capacity change from 0 to 256 [ 817.714579][T10396] FAT-fs (loop2): Unrecognized mount option "iocharsħ[peĈ _§ċet=iso8859-3" or missing value [ 817.890925][T10398] device batadv_slave_1 entered promiscuous mode [ 819.151842][T10397] device batadv_slave_1 left promiscuous mode [ 819.165504][T10405] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2500'. [ 819.360486][T10412] device batadv_slave_1 entered promiscuous mode [ 819.936598][T10415] loop0: detected capacity change from 0 to 16 [ 819.946253][T10415] erofs: (device loop0): mounted with root inode @ nid 36. [ 820.267915][T10411] device batadv_slave_1 left promiscuous mode [ 820.505956][T10405] loop4: detected capacity change from 0 to 40427 [ 820.513041][T10405] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 820.520847][T10405] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 820.550135][T10405] F2FS-fs (loop4): Found nat_bits in checkpoint [ 820.604351][T10405] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 820.612561][T10405] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 820.656054][T10405] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2500'. [ 822.188558][T10457] device batadv_slave_1 entered promiscuous mode [ 823.466480][T10459] loop4: detected capacity change from 0 to 256 [ 823.473786][T10459] FAT-fs (loop4): Unrecognized mount option "iocharsħ[peĈ _§ċet=iso8859-3" or missing value [ 824.505719][T10461] loop1: detected capacity change from 0 to 16 [ 824.672729][T10461] erofs: (device loop1): mounted with root inode @ nid 36. [ 824.991662][T10456] device batadv_slave_1 left promiscuous mode [ 825.060512][T10466] device batadv_slave_1 entered promiscuous mode [ 825.831020][T10472] loop0: detected capacity change from 0 to 16 [ 825.842835][T10472] erofs: (device loop0): mounted with root inode @ nid 36. [ 825.989960][T10465] device batadv_slave_1 left promiscuous mode [ 826.022252][T10477] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2523'. [ 828.402560][T10477] loop2: detected capacity change from 0 to 40427 [ 828.412274][T10477] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 828.428340][T10477] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 828.456203][T10501] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2530'. [ 828.461580][T10477] F2FS-fs (loop2): Found nat_bits in checkpoint [ 829.594681][T10517] loop4: detected capacity change from 0 to 16 [ 829.602367][T10517] erofs: (device loop4): mounted with root inode @ nid 36. [ 830.525647][T10520] device batadv_slave_1 entered promiscuous mode [ 831.291289][T10519] device batadv_slave_1 left promiscuous mode [ 831.342078][T10536] loop1: detected capacity change from 0 to 16 [ 831.349786][T10536] erofs: (device loop1): mounted with root inode @ nid 36. [ 832.754879][ T422] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 833.114603][ T422] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 833.173267][ T422] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 833.284174][ T422] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 833.383314][ T422] usb 1-1: Manufacturer: syz [ 833.598707][ T422] usb 1-1: config 0 descriptor?? [ 833.613212][ T422] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 834.300998][T10561] loop2: detected capacity change from 0 to 16 [ 834.472891][T10561] erofs: (device loop2): mounted with root inode @ nid 36. [ 834.971455][ T476] usb 1-1: USB disconnect, device number 45 [ 834.982437][T10566] loop1: detected capacity change from 0 to 16 [ 835.009012][T10566] erofs: (device loop1): mounted with root inode @ nid 36. [ 835.696003][T10587] device batadv_slave_1 entered promiscuous mode [ 836.374371][T10585] device batadv_slave_1 entered promiscuous mode [ 837.018356][T10586] device batadv_slave_1 left promiscuous mode [ 837.044023][T10593] loop2: detected capacity change from 0 to 16 [ 837.123471][T10593] erofs: (device loop2): mounted with root inode @ nid 36. [ 837.265370][T10584] device batadv_slave_1 left promiscuous mode [ 837.622142][T10613] loop4: detected capacity change from 0 to 16 [ 837.632737][ T7913] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 837.663506][T10613] erofs: (device loop4): mounted with root inode @ nid 36. [ 837.823736][ T7913] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 837.842154][ T7913] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 837.862908][ T7913] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 837.881263][ T7913] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 837.897592][ T7913] usb 3-1: Manufacturer: syz [ 837.908145][ T7913] usb 3-1: config 0 descriptor?? [ 839.138005][T10633] loop0: detected capacity change from 0 to 256 [ 839.146695][T10633] FAT-fs (loop0): Unrecognized mount option "iocharsħ[peĈ _§ċet=iso8859-3" or missing value [ 839.246253][ T7913] usbhid 3-1:0.0: can't add hid device: -32 [ 839.290669][T10636] loop4: detected capacity change from 0 to 16 [ 839.306916][ T7913] usbhid: probe of 3-1:0.0 failed with error -32 [ 839.478270][T10636] erofs: (device loop4): mounted with root inode @ nid 36. [ 839.489169][ T7913] usb 3-1: USB disconnect, device number 46 [ 839.982737][ T858] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 840.204584][ T858] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 840.288050][ T858] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 840.311167][T10649] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2571'. [ 840.382123][ T858] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 840.478368][ T858] usb 2-1: Manufacturer: syz [ 840.632201][ T858] usb 2-1: config 0 descriptor?? [ 840.653488][ T858] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 841.019805][T10652] loop4: detected capacity change from 0 to 40427 [ 841.035323][T10652] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 841.051878][T10652] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 841.093514][T10652] F2FS-fs (loop4): Found nat_bits in checkpoint [ 841.191606][T10652] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 841.198733][T10652] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 841.238842][T10649] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2571'. [ 841.480611][T10673] loop2: detected capacity change from 0 to 16 [ 841.523486][T10673] erofs: (device loop2): mounted with root inode @ nid 36. [ 842.903271][ T1713] usb 2-1: USB disconnect, device number 47 [ 842.993013][T10701] loop1: detected capacity change from 0 to 256 [ 843.746125][T10717] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2587'. [ 843.792767][ T391] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 844.585318][ T391] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 844.612652][ T391] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 844.643495][ T391] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 844.652586][ T391] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 844.724525][ T391] usb 5-1: Manufacturer: syz [ 844.751910][ T391] usb 5-1: config 0 descriptor?? [ 844.908128][T10717] loop0: detected capacity change from 0 to 40427 [ 844.916788][T10717] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 844.924639][T10717] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 845.006938][T10717] F2FS-fs (loop0): Found nat_bits in checkpoint [ 845.134011][T10734] loop2: detected capacity change from 0 to 16 [ 845.144065][T10734] erofs: (device loop2): mounted with root inode @ nid 36. [ 845.215545][ T391] usbhid 5-1:0.0: can't add hid device: -32 [ 845.225874][ T391] usbhid: probe of 5-1:0.0 failed with error -32 [ 845.288292][ T391] usb 5-1: USB disconnect, device number 43 [ 845.346449][T10717] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 845.360881][T10717] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 845.388497][T10717] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2587'. [ 846.514610][T10742] loop1: detected capacity change from 0 to 512 [ 846.635428][ T5945] Bluetooth: hci0: Frame reassembly failed (-84) [ 848.672810][ T9846] Bluetooth: hci0: command 0x1003 tx timeout [ 848.679061][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 848.843103][T10742] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 849.426139][T10798] loop1: detected capacity change from 0 to 16 [ 849.560029][T10798] erofs: (device loop1): mounted with root inode @ nid 36. [ 849.743427][ T7913] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 849.882617][ C1] ================================================================== [ 849.890763][ C1] BUG: KASAN: use-after-free in enqueue_timer+0xae/0x480 [ 849.897837][ C1] Write of size 8 at addr ffff8881441c8a00 by task kworker/u4:155/5982 [ 849.906103][ C1] [ 849.908448][ C1] CPU: 1 PID: 5982 Comm: kworker/u4:155 Tainted: G W syzkaller #0 [ 849.917663][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 849.927735][ C1] Workqueue: netns cleanup_net [ 849.932530][ C1] Call Trace: [ 849.935823][ C1] [ 849.938681][ C1] __dump_stack+0x21/0x24 [ 849.943024][ C1] dump_stack_lvl+0xee/0x150 [ 849.947642][ C1] ? __cfi_dump_stack_lvl+0x8/0x8 [ 849.952690][ C1] ? enqueue_timer+0xae/0x480 [ 849.957388][ C1] print_address_description+0x71/0x200 [ 849.962947][ C1] print_report+0x4a/0x60 [ 849.967373][ C1] kasan_report+0x122/0x150 [ 849.971892][ C1] ? enqueue_timer+0xae/0x480 [ 849.976615][ C1] __asan_report_store8_noabort+0x17/0x20 [ 849.982351][ C1] enqueue_timer+0xae/0x480 [ 849.986882][ C1] __mod_timer+0x84a/0xbf0 [ 849.991316][ C1] mod_timer+0x1f/0x30 [ 849.995395][ C1] can_stat_update+0xb1a/0xbb0 [ 850.000175][ C1] ? __cfi_can_stat_update+0x10/0x10 [ 850.005476][ C1] call_timer_fn+0x46/0x2a0 [ 850.009993][ C1] ? __cfi_can_stat_update+0x10/0x10 [ 850.015290][ C1] __run_timers+0x644/0x9b0 [ 850.019820][ C1] ? calc_index+0x200/0x200 [ 850.024352][ C1] ? kvm_sched_clock_read+0x18/0x40 [ 850.029597][ C1] run_timer_softirq+0x6a/0xf0 [ 850.034382][ C1] handle_softirqs+0x1d7/0x600 [ 850.039213][ C1] ? irqtime_account_irq+0xc4/0x240 [ 850.044446][ C1] __irq_exit_rcu+0x52/0xf0 [ 850.049054][ C1] irq_exit_rcu+0x9/0x10 [ 850.053313][ C1] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 850.058975][ C1] [ 850.061923][ C1] [ 850.064869][ C1] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 850.070880][ C1] RIP: 0010:preempt_schedule_irq+0x96/0x110 [ 850.076795][ C1] Code: 00 00 00 9c 8f 44 24 20 f6 44 24 21 02 74 0b 0f 0b 48 f7 03 08 00 00 00 74 4d bf 01 00 00 00 e8 80 a9 58 fc fb bf 01 00 00 00 55 e5 ff ff fa bf 01 00 00 00 e8 2a ab 58 fc 65 48 8b 1d 62 5f [ 850.096421][ C1] RSP: 0018:ffffc9000fbaf580 EFLAGS: 00000246 [ 850.102510][ C1] RAX: 1ffff11022e79e01 RBX: ffffc9000fbaf648 RCX: ffffffff87972100 [ 850.110499][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 850.118718][ C1] RBP: ffffc9000fbaf5f8 R08: dffffc0000000000 R09: ffffed1022e79ca9 [ 850.126714][ C1] R10: ffffed1022e79ca9 R11: 1ffff11022e79ca8 R12: 0000000000000000 [ 850.134703][ C1] R13: 0000000000000000 R14: dffffc0000000000 R15: 1ffff92001f75eb0 [ 850.142794][ C1] ? __cfi_preempt_schedule_irq+0x10/0x10 [ 850.148553][ C1] ? __kasan_check_write+0x14/0x20 [ 850.153691][ C1] raw_irqentry_exit_cond_resched+0x29/0x30 [ 850.159602][ C1] irqentry_exit+0x37/0x40 [ 850.164037][ C1] sysvec_reschedule_ipi+0x78/0x80 [ 850.169174][ C1] asm_sysvec_reschedule_ipi+0x1b/0x20 [ 850.174656][ C1] RIP: 0010:kernfs_find_ns+0x36f/0x4b0 [ 850.180152][ C1] Code: 10 00 00 00 eb 1a 44 89 ef 44 89 e6 e8 6a ee 91 ff 45 39 e5 73 36 e8 b0 ec 91 ff b8 08 00 00 00 49 01 c6 4c 89 f0 48 c1 e8 03 <42> 80 3c 38 00 74 08 4c 89 f7 e8 22 66 d6 ff 4d 8b 36 4d 85 f6 0f [ 850.199776][ C1] RSP: 0018:ffffc9000fbaf6f0 EFLAGS: 00000a02 [ 850.205880][ C1] RAX: 1ffff11025fa18b3 RBX: ffffffff85ddab60 RCX: ffff8881173ce540 [ 850.213959][ C1] RDX: 0000000000000000 RSI: 00000000173147c9 RDI: 0000000013842a12 [ 850.221953][ C1] RBP: ffffc9000fbaf738 R08: ffffffff85ddab68 R09: ffffed102003602e [ 850.229943][ C1] R10: ffffed102003602e R11: 1ffff1102003602d R12: 00000000173147c9 [ 850.238018][ C1] R13: 0000000013842a12 R14: ffff88812fd0c598 R15: dffffc0000000000 [ 850.246023][ C1] kernfs_find_and_get_ns+0x80/0x110 [ 850.251349][ C1] sysfs_remove_group+0x6c/0x2a0 [ 850.256313][ C1] sysfs_remove_groups+0x56/0xb0 [ 850.261284][ C1] device_remove_attrs+0x1a7/0x250 [ 850.266412][ C1] ? fw_devlink_unblock_consumers+0x1b0/0x1b0 [ 850.272499][ C1] ? kernfs_remove_by_name_ns+0x120/0x160 [ 850.278247][ C1] device_del+0x69c/0xeb0 [ 850.282602][ C1] ? __cfi_device_del+0x10/0x10 [ 850.287467][ C1] netdev_unregister_kobject+0x186/0x250 [ 850.293149][ C1] unregister_netdevice_many+0x135b/0x1820 [ 850.298983][ C1] ? __cfi_preempt_schedule_irq+0x10/0x10 [ 850.304723][ C1] ? __cfi_unregister_netdevice_many+0x10/0x10 [ 850.310900][ C1] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 850.316555][ C1] ? ip6gre_exit_batch_net+0x4c4/0x5f0 [ 850.322041][ C1] ip6gre_exit_batch_net+0x5a8/0x5f0 [ 850.327351][ C1] ? __cfi_ip6gre_exit_batch_net+0x10/0x10 [ 850.333177][ C1] ? __cfi_ip6gre_exit_batch_net+0x10/0x10 [ 850.339004][ C1] cleanup_net+0x62d/0xb00 [ 850.343443][ C1] ? __cfi_cleanup_net+0x10/0x10 [ 850.348408][ C1] process_one_work+0x71f/0xc40 [ 850.353285][ C1] worker_thread+0xa29/0x11f0 [ 850.357989][ C1] kthread+0x281/0x320 [ 850.362069][ C1] ? __cfi_worker_thread+0x10/0x10 [ 850.367201][ C1] ? __cfi_kthread+0x10/0x10 [ 850.371844][ C1] ret_from_fork+0x1f/0x30 [ 850.376409][ C1] [ 850.379491][ C1] [ 850.381841][ C1] Allocated by task 10742: [ 850.386265][ C1] kasan_set_track+0x4b/0x70 [ 850.390882][ C1] kasan_save_alloc_info+0x25/0x30 [ 850.396035][ C1] __kasan_kmalloc+0x95/0xb0 [ 850.400809][ C1] __kmalloc+0xb1/0x1e0 [ 850.404989][ C1] hci_alloc_dev_priv+0x27/0x1bd0 [ 850.410033][ C1] hci_uart_tty_ioctl+0x3d6/0xa20 [ 850.415084][ C1] tty_ioctl+0x8ef/0xc60 [ 850.419346][ C1] __se_sys_ioctl+0x12f/0x1b0 [ 850.424036][ C1] __x64_sys_ioctl+0x7b/0x90 [ 850.428626][ C1] x64_sys_call+0x58b/0x9a0 [ 850.433124][ C1] do_syscall_64+0x4c/0xa0 [ 850.437533][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 850.443438][ C1] [ 850.445757][ C1] Freed by task 10742: [ 850.449827][ C1] kasan_set_track+0x4b/0x70 [ 850.454442][ C1] kasan_save_free_info+0x31/0x50 [ 850.459468][ C1] ____kasan_slab_free+0x132/0x180 [ 850.464573][ C1] __kasan_slab_free+0x11/0x20 [ 850.469329][ C1] slab_free_freelist_hook+0xc2/0x190 [ 850.474700][ C1] __kmem_cache_free+0xb7/0x1b0 [ 850.479550][ C1] kfree+0x6f/0xf0 [ 850.483283][ C1] hci_release_dev+0x12a3/0x13b0 [ 850.488218][ C1] bt_host_release+0x82/0x90 [ 850.492804][ C1] device_release+0xa4/0x1d0 [ 850.497397][ C1] kobject_put+0x19d/0x280 [ 850.501825][ C1] put_device+0x1f/0x30 [ 850.506030][ C1] hci_dev_cmd+0x265/0x720 [ 850.510456][ C1] hci_sock_ioctl+0x41e/0x7f0 [ 850.515137][ C1] sock_do_ioctl+0x101/0x310 [ 850.519736][ C1] sock_ioctl+0x4d8/0x6e0 [ 850.524105][ C1] __se_sys_ioctl+0x12f/0x1b0 [ 850.528783][ C1] __x64_sys_ioctl+0x7b/0x90 [ 850.533364][ C1] x64_sys_call+0x58b/0x9a0 [ 850.537861][ C1] do_syscall_64+0x4c/0xa0 [ 850.542268][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 850.548153][ C1] [ 850.550472][ C1] Last potentially related work creation: [ 850.556171][ C1] kasan_save_stack+0x3a/0x60 [ 850.560928][ C1] __kasan_record_aux_stack+0xb6/0xc0 [ 850.566293][ C1] kasan_record_aux_stack_noalloc+0xb/0x10 [ 850.572096][ C1] insert_work+0x51/0x300 [ 850.576411][ C1] __queue_work+0x9b1/0xd30 [ 850.580910][ C1] queue_work_on+0xd2/0x140 [ 850.585405][ C1] __hci_cmd_sync_sk+0xa3e/0xcf0 [ 850.590338][ C1] hci_cmd_sync_status+0x53/0x120 [ 850.595356][ C1] hci_dev_cmd+0x628/0x720 [ 850.599762][ C1] hci_sock_ioctl+0x41e/0x7f0 [ 850.604441][ C1] sock_do_ioctl+0x101/0x310 [ 850.609028][ C1] sock_ioctl+0x4d8/0x6e0 [ 850.613349][ C1] __se_sys_ioctl+0x12f/0x1b0 [ 850.618014][ C1] __x64_sys_ioctl+0x7b/0x90 [ 850.622592][ C1] x64_sys_call+0x58b/0x9a0 [ 850.627093][ C1] do_syscall_64+0x4c/0xa0 [ 850.631504][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 850.637392][ C1] [ 850.639711][ C1] Second to last potentially related work creation: [ 850.646282][ C1] kasan_save_stack+0x3a/0x60 [ 850.650955][ C1] __kasan_record_aux_stack+0xb6/0xc0 [ 850.656322][ C1] kasan_record_aux_stack_noalloc+0xb/0x10 [ 850.662141][ C1] insert_work+0x51/0x300 [ 850.666471][ C1] __queue_work+0x9b1/0xd30 [ 850.670968][ C1] queue_work_on+0xd2/0x140 [ 850.675494][ C1] hci_cmd_timeout+0x191/0x200 [ 850.680256][ C1] process_one_work+0x71f/0xc40 [ 850.685100][ C1] worker_thread+0xa29/0x11f0 [ 850.689788][ C1] kthread+0x281/0x320 [ 850.693850][ C1] ret_from_fork+0x1f/0x30 [ 850.698260][ C1] [ 850.700576][ C1] The buggy address belongs to the object at ffff8881441c8000 [ 850.700576][ C1] which belongs to the cache kmalloc-8k of size 8192 [ 850.714619][ C1] The buggy address is located 2560 bytes inside of [ 850.714619][ C1] 8192-byte region [ffff8881441c8000, ffff8881441ca000) [ 850.728058][ C1] [ 850.730389][ C1] The buggy address belongs to the physical page: [ 850.736788][ C1] page:ffffea0005107200 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1441c8 [ 850.747014][ C1] head:ffffea0005107200 order:3 compound_mapcount:0 compound_pincount:0 [ 850.755326][ C1] flags: 0x4000000000010200(slab|head|zone=1) [ 850.761409][ C1] raw: 4000000000010200 ffffea0004eaa000 dead000000000006 ffff888100043500 [ 850.770001][ C1] raw: 0000000000000000 0000000000020002 00000001ffffffff 0000000000000000 [ 850.778573][ C1] page dumped because: kasan: bad access detected [ 850.784967][ C1] page_owner tracks the page as allocated [ 850.790667][ C1] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d2a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 9856, tgid 9852 (syz.2.2347), ts 774572079701, free_ts 757546718325 [ 850.812819][ C1] post_alloc_hook+0x1f5/0x210 [ 850.817579][ C1] prep_new_page+0x1c/0x110 [ 850.822080][ C1] get_page_from_freelist+0x2c7b/0x2cf0 [ 850.827625][ C1] __alloc_pages+0x1c3/0x450 [ 850.832231][ C1] alloc_slab_page+0x6e/0xf0 [ 850.836829][ C1] new_slab+0x98/0x3d0 [ 850.840895][ C1] ___slab_alloc+0x6bd/0xb20 [ 850.845483][ C1] __slab_alloc+0x5e/0xa0 [ 850.849808][ C1] __kmem_cache_alloc_node+0x203/0x2c0 [ 850.855271][ C1] __kmalloc_node_track_caller+0xa0/0x1e0 [ 850.860998][ C1] pskb_expand_head+0x1b0/0x1210 [ 850.865933][ C1] __pskb_pull_tail+0xb1/0x1570 [ 850.870778][ C1] tipc_msg_reverse+0x78/0x940 [ 850.875545][ C1] tipc_sk_filter_rcv+0xbf3/0x2c80 [ 850.880651][ C1] tipc_sk_rcv+0x7d9/0x2cc0 [ 850.885142][ C1] tipc_sk_mcast_rcv+0xe08/0xed0 [ 850.890075][ C1] page last free stack trace: [ 850.894744][ C1] free_unref_page_prepare+0x742/0x750 [ 850.900199][ C1] free_unref_page+0x8f/0x530 [ 850.904877][ C1] __free_pages+0x67/0x100 [ 850.909302][ C1] __free_slab+0xca/0x1a0 [ 850.913648][ C1] __unfreeze_partials+0x160/0x190 [ 850.918770][ C1] put_cpu_partial+0xa9/0x100 [ 850.923453][ C1] __slab_free+0x1c4/0x280 [ 850.927874][ C1] ___cache_free+0xbf/0xd0 [ 850.932289][ C1] qlist_free_all+0xc6/0x140 [ 850.936881][ C1] kasan_quarantine_reduce+0x14a/0x170 [ 850.942339][ C1] __kasan_slab_alloc+0x24/0x80 [ 850.947268][ C1] slab_post_alloc_hook+0x4f/0x2d0 [ 850.952376][ C1] kmem_cache_alloc_node+0x181/0x340 [ 850.957656][ C1] __alloc_skb+0xea/0x4b0 [ 850.961973][ C1] tcp_stream_alloc_skb+0x47/0x360 [ 850.967247][ C1] tcp_sendmsg_locked+0xd10/0x3d90 [ 850.972352][ C1] [ 850.974667][ C1] Memory state around the buggy address: [ 850.980303][ C1] ffff8881441c8900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 850.988365][ C1] ffff8881441c8980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 850.996439][ C1] >ffff8881441c8a00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 851.004496][ C1] ^ [ 851.008558][ C1] ffff8881441c8a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 851.016608][ C1] ffff8881441c8b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 851.024660][ C1] ================================================================== SYZFAIL: failed to send rpc fd=3 want=2944 sent=0 n=-1 (errno 32: Broken pipe) [ 851.032711][ C1] Disabling lock debugging due to kernel taint [ 851.039179][ C1] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 851.050999][ C1] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 851.059422][ C1] CPU: 1 PID: 5982 Comm: kworker/u4:155 Tainted: G B W syzkaller #0 [ 851.062700][ T28] audit: type=1400 audit(1765544993.715:744): avc: denied { write } for pid=274 comm="syz-executor" path="pipe:[14036]" dev="pipefs" ino=14036 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 851.068637][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 851.068652][ C1] Workqueue: netns cleanup_net [ 851.106693][ C1] RIP: 0010:__queue_work+0x575/0xd30 [ 851.112033][ C1] Code: 39 2b 0f 84 b9 00 00 00 e8 b8 e2 28 00 4c 89 ff e8 00 26 ad 03 49 bc 00 00 00 00 00 fc ff df 4c 8b 6d d0 4c 89 e8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ef e8 1c 5c 6d 00 49 8b 7d 00 e8 e3 21 [ 851.131761][ C1] RSP: 0018:ffffc900001b0c70 EFLAGS: 00010046 [ 851.137854][ C1] RAX: 0000000000000000 RBX: 000000007fffffff RCX: ffff8881173ce540 [ 851.145846][ C1] RDX: 0000000000000100 RSI: 000000007fffffff RDI: 000000007fffffff [ 851.153844][ C1] RBP: ffffc900001b0d08 R08: fffffffffffffffb R09: 0000000000000007 [ 851.161822][ C1] R10: ffffed1028839139 R11: 1ffff11028839139 R12: dffffc0000000000 [ 851.169800][ C1] R13: 0000000000000000 R14: ffff8881441c89c8 R15: 0000000000000008 [ 851.177773][ C1] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 851.186713][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 851.193306][ C1] CR2: 00007f61c3bdc4c8 CR3: 0000000116b85000 CR4: 00000000003506a0 [ 851.201300][ C1] Call Trace: [ 851.204581][ C1] [ 851.207436][ C1] delayed_work_timer_fn+0x61/0x80 [ 851.212563][ C1] ? __cfi_delayed_work_timer_fn+0x10/0x10 [ 851.218382][ C1] call_timer_fn+0x46/0x2a0 [ 851.222898][ C1] ? __cfi_delayed_work_timer_fn+0x10/0x10 [ 851.228718][ C1] __run_timers+0x672/0x9b0 [ 851.233228][ C1] ? calc_index+0x200/0x200 [ 851.237736][ C1] ? kvm_sched_clock_read+0x18/0x40 [ 851.242938][ C1] run_timer_softirq+0x6a/0xf0 [ 851.247704][ C1] handle_softirqs+0x1d7/0x600 [ 851.252466][ C1] ? irqtime_account_irq+0xc4/0x240 [ 851.257670][ C1] __irq_exit_rcu+0x52/0xf0 [ 851.262186][ C1] irq_exit_rcu+0x9/0x10 [ 851.266456][ C1] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 851.272124][ C1] [ 851.275063][ C1] [ 851.277997][ C1] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 851.283991][ C1] RIP: 0010:preempt_schedule_irq+0x96/0x110 [ 851.289916][ C1] Code: 00 00 00 9c 8f 44 24 20 f6 44 24 21 02 74 0b 0f 0b 48 f7 03 08 00 00 00 74 4d bf 01 00 00 00 e8 80 a9 58 fc fb bf 01 00 00 00 55 e5 ff ff fa bf 01 00 00 00 e8 2a ab 58 fc 65 48 8b 1d 62 5f [ 851.309526][ C1] RSP: 0018:ffffc9000fbaf580 EFLAGS: 00000246 [ 851.315602][ C1] RAX: 1ffff11022e79e01 RBX: ffffc9000fbaf648 RCX: ffffffff87972100 [ 851.323593][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 851.331561][ C1] RBP: ffffc9000fbaf5f8 R08: dffffc0000000000 R09: ffffed1022e79ca9 [ 851.339538][ C1] R10: ffffed1022e79ca9 R11: 1ffff11022e79ca8 R12: 0000000000000000 [ 851.347510][ C1] R13: 0000000000000000 R14: dffffc0000000000 R15: 1ffff92001f75eb0 [ 851.355492][ C1] ? __cfi_preempt_schedule_irq+0x10/0x10 [ 851.361221][ C1] ? __kasan_check_write+0x14/0x20 [ 851.366336][ C1] raw_irqentry_exit_cond_resched+0x29/0x30 [ 851.372230][ C1] irqentry_exit+0x37/0x40 [ 851.376657][ C1] sysvec_reschedule_ipi+0x78/0x80 [ 851.381777][ C1] asm_sysvec_reschedule_ipi+0x1b/0x20 [ 851.387240][ C1] RIP: 0010:kernfs_find_ns+0x36f/0x4b0 [ 851.392712][ C1] Code: 10 00 00 00 eb 1a 44 89 ef 44 89 e6 e8 6a ee 91 ff 45 39 e5 73 36 e8 b0 ec 91 ff b8 08 00 00 00 49 01 c6 4c 89 f0 48 c1 e8 03 <42> 80 3c 38 00 74 08 4c 89 f7 e8 22 66 d6 ff 4d 8b 36 4d 85 f6 0f [ 851.412337][ C1] RSP: 0018:ffffc9000fbaf6f0 EFLAGS: 00000a02 [ 851.418521][ C1] RAX: 1ffff11025fa18b3 RBX: ffffffff85ddab60 RCX: ffff8881173ce540 [ 851.426497][ C1] RDX: 0000000000000000 RSI: 00000000173147c9 RDI: 0000000013842a12 [ 851.434554][ C1] RBP: ffffc9000fbaf738 R08: ffffffff85ddab68 R09: ffffed102003602e [ 851.442533][ C1] R10: ffffed102003602e R11: 1ffff1102003602d R12: 00000000173147c9 [ 851.450509][ C1] R13: 0000000013842a12 R14: ffff88812fd0c598 R15: dffffc0000000000 [ 851.458488][ C1] kernfs_find_and_get_ns+0x80/0x110 [ 851.463789][ C1] sysfs_remove_group+0x6c/0x2a0 [ 851.468818][ C1] sysfs_remove_groups+0x56/0xb0 [ 851.473756][ C1] device_remove_attrs+0x1a7/0x250 [ 851.478866][ C1] ? fw_devlink_unblock_consumers+0x1b0/0x1b0 [ 851.484931][ C1] ? kernfs_remove_by_name_ns+0x120/0x160 [ 851.490661][ C1] device_del+0x69c/0xeb0 [ 851.495007][ C1] ? __cfi_device_del+0x10/0x10 [ 851.499857][ C1] netdev_unregister_kobject+0x186/0x250 [ 851.505498][ C1] unregister_netdevice_many+0x135b/0x1820 [ 851.511315][ C1] ? __cfi_preempt_schedule_irq+0x10/0x10 [ 851.517045][ C1] ? __cfi_unregister_netdevice_many+0x10/0x10 [ 851.523202][ C1] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 851.528840][ C1] ? ip6gre_exit_batch_net+0x4c4/0x5f0 [ 851.534326][ C1] ip6gre_exit_batch_net+0x5a8/0x5f0 [ 851.539620][ C1] ? __cfi_ip6gre_exit_batch_net+0x10/0x10 [ 851.545515][ C1] ? __cfi_ip6gre_exit_batch_net+0x10/0x10 [ 851.551319][ C1] cleanup_net+0x62d/0xb00 [ 851.555748][ C1] ? __cfi_cleanup_net+0x10/0x10 [ 851.560695][ C1] process_one_work+0x71f/0xc40 [ 851.565641][ C1] worker_thread+0xa29/0x11f0 [ 851.570327][ C1] kthread+0x281/0x320 [ 851.574407][ C1] ? __cfi_worker_thread+0x10/0x10 [ 851.579520][ C1] ? __cfi_kthread+0x10/0x10 [ 851.584130][ C1] ret_from_fork+0x1f/0x30 [ 851.588568][ C1] [ 851.591582][ C1] Modules linked in: [ 851.595485][ C1] ---[ end trace 0000000000000000 ]--- [ 851.600932][ C1] RIP: 0010:__queue_work+0x575/0xd30 [ 851.606216][ C1] Code: 39 2b 0f 84 b9 00 00 00 e8 b8 e2 28 00 4c 89 ff e8 00 26 ad 03 49 bc 00 00 00 00 00 fc ff df 4c 8b 6d d0 4c 89 e8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ef e8 1c 5c 6d 00 49 8b 7d 00 e8 e3 21 [ 851.625821][ C1] RSP: 0018:ffffc900001b0c70 EFLAGS: 00010046 [ 851.631884][ C1] RAX: 0000000000000000 RBX: 000000007fffffff RCX: ffff8881173ce540 [ 851.639853][ C1] RDX: 0000000000000100 RSI: 000000007fffffff RDI: 000000007fffffff [ 851.647830][ C1] RBP: ffffc900001b0d08 R08: fffffffffffffffb R09: 0000000000000007 [ 851.655801][ C1] R10: ffffed1028839139 R11: 1ffff11028839139 R12: dffffc0000000000 [ 851.663776][ C1] R13: 0000000000000000 R14: ffff8881441c89c8 R15: 0000000000000008 [ 851.671744][ C1] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 851.680674][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 851.687269][ C1] CR2: 00007f61c3bdc4c8 CR3: 0000000116b85000 CR4: 00000000003506a0 [ 851.695245][ C1] Kernel panic - not syncing: Fatal exception in interrupt [ 851.702867][ C1] Kernel Offset: disabled [ 851.707231][ C1] Rebooting in 86400 seconds..