last executing test programs: 1m40.949366298s ago: executing program 32 (id=164): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x6}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001f80)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x4c, 0x10, 0x403, 0x6101, 0x0, {0x0, 0x0, 0x0, 0x0, 0x56760003ded1ddd3}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0xc}, @IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e20}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e22}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FLAGS={0x6, 0x8, 0x3f}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @loopback}]}}}]}, 0x40}}, 0x4048084) 1m27.93384702s ago: executing program 33 (id=258): pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = accept4$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f0000000080)=0x14, 0x80800) shutdown(r1, 0x1) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000000c0)={r2, 0x1, 0x6, @remote}, 0x10) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x11) (async) bpf$ENABLE_STATS(0x20, &(0x7f0000000100), 0x4) (async) r3 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000000380)='bpf_lsm_inet_conn_established\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x14, 0x22, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @exit, @call={0x85, 0x0, 0x0, 0x94}, @map_fd, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='GPL\x00', 0x3, 0x55, &(0x7f00000002c0)=""/85, 0x41100, 0x4, '\x00', r2, @lirc_mode2, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x1, 0x4}, 0x8, 0x10, 0x0, 0x0, r3, r0, 0x4, 0x0, &(0x7f00000003c0)=[{0x1, 0x2, 0x9, 0x4}, {0x3, 0x2, 0xa, 0x4}, {0x5, 0x4, 0x4}, {0x3, 0x4, 0xf, 0x2}], 0x10, 0x4}, 0x94) (async) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000004c0)='f2fs_readpages\x00', r0}, 0x18) (async) getpeername$packet(r0, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) (async, rerun: 64) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000005c0)=r3, 0x4) (async, rerun: 64) setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f0000000600)=0x9, 0x4) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000640), 0x414801, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000680)) (async, rerun: 32) socket$key(0xf, 0x3, 0x2) (async, rerun: 32) ioctl$BTRFS_IOC_BALANCE(r4, 0x5000940c, 0x0) (async, rerun: 64) setsockopt$bt_BT_VOICE(r5, 0x112, 0xb, &(0x7f00000006c0)=0x66, 0x2) (async, rerun: 64) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000740)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)=@delchain={0x64, 0x65, 0x800, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x9, 0xf}, {0xe, 0x3}, {0x6, 0xfff1}}, [@TCA_RATE={0x6, 0x5, {0x10, 0x2}}, @TCA_RATE={0x6, 0x5, {0x14, 0x5}}, @TCA_CHAIN={0x8, 0xb, 0x1}, @TCA_RATE={0x6, 0x5, {0xe0, 0x7}}, @TCA_CHAIN={0x8, 0xb, 0x2}, @TCA_RATE={0x6, 0x5, {0x3, 0x29}}, @TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_RATE={0x6, 0x5, {0x1, 0x90}}]}, 0x64}, 0x1, 0x0, 0x0, 0x448d0}, 0x8001) (async) sync() (async) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) recvmmsg(r6, &(0x7f0000000f40)=[{{&(0x7f0000000880)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000c40)=[{&(0x7f0000000900)=""/144, 0x90}, {&(0x7f00000009c0)=""/210, 0xd2}, {&(0x7f0000000ac0)=""/109, 0x6d}, {&(0x7f0000000b40)=""/91, 0x5b}, {&(0x7f0000000bc0)=""/66, 0x42}], 0x5, &(0x7f0000000cc0)=""/5, 0x5}, 0xff}, {{&(0x7f0000000d00)=@ethernet={0x0, @multicast}, 0x80, &(0x7f0000000e80)=[{&(0x7f0000000d80)=""/131, 0x83}, {&(0x7f0000000e40)=""/29, 0x1d}], 0x2, &(0x7f0000000ec0)=""/102, 0x66}, 0xc1}], 0x2, 0x3, 0x0) (async) ioctl$BTRFS_IOC_FS_INFO(r8, 0x8400941f, &(0x7f0000000fc0)) openat(r0, &(0x7f00000013c0)='./file0\x00', 0x20241, 0x100) (async) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000001400)=""/67, 0x43) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r9, &(0x7f0000001580)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001540)={&(0x7f00000014c0)={0x6c, 0x2, 0x3, 0x101, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x4}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x36}, @NFQA_CFG_PARAMS={0x9, 0x2, {0xc, 0x2}}, @NFQA_CFG_CMD={0x8, 0x1, {0x0, 0x0, 0x1}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x5}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x1}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x1b}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x7}, @NFQA_CFG_CMD={0x8, 0x1, {0x2, 0x0, 0x23}}, @NFQA_CFG_CMD={0x8, 0x1, {0x4, 0x0, 0x8}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x840) (async) fsopen(&(0x7f00000015c0)='affs\x00', 0x0) (async, rerun: 32) sched_setscheduler(0x0, 0x6, &(0x7f0000001600)=0x5) (rerun: 32) 49.131569533s ago: executing program 4 (id=515): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r1, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x4080) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r2, 0x200, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x64085}, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r5, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x34, r4, 0x100, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x8863}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x4800) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x50, r2, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5, 0x37, 0x2}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x4941}, 0x4040080) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580), r5) sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f0000000940)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000900)={&(0x7f00000005c0)={0x340, r7, 0x1, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x148, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x3}, @TIPC_NLA_NODE_ID={0xeb, 0x3, "adcab0a474dd6082850f34f22975c552a93a3f74f177064183ecc71ff360ff3cb7dbc62bf8bfee3465a7487d6bbe7290a0fb09ae206c07b3418364bec5d51e0b0f5a30e319ddb30f502b5c2d86a978005e9ef4dc26951d3af4ea89cab20c6abf40025bb285143bac2f631f4efadccfcdcd1c909333a77c142ece0dfeb0a07ccd5a3e63ba794f93483d7e056c90ddede19ce4694571bb3af3b18873f33258714e1a27e62dfe2b5f7a26dcf586da70e58e1b84ddfabb60f1bcbf3a2f323d605a420b6b661221be9da0189f62cdb34897fa6db7f14f144bc55001ecb87460be62a14af1435c40936f"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x5}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_ID={0x3a, 0x3, "4ef331f29ba2a97a34d4366cb6f364f632aa3f38af8a3a41fe5cc2fbef6441f942eadc13319f15c1e30e50121f9b10a5b5c1b7119e61"}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_MEDIA={0x68, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x11438f88}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x600}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff0}]}]}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4e}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x401}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x100}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7e18}]}, @TIPC_NLA_MEDIA={0xc4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x911}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf223}]}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2b}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}]}, @TIPC_NLA_BEARER={0x6c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x23}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x37}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x200}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xd}}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x52a, @private1, 0x5}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'pimreg0\x00'}}]}]}, 0x340}, 0x1, 0x0, 0x0, 0x4}, 0x1) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r5, 0x40089413, &(0x7f0000000980)=0x7) setsockopt$sock_timeval(r3, 0x1, 0x15, &(0x7f00000009c0), 0x10) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000a00)={'batadv_slave_1\x00'}) write(r5, &(0x7f0000000a40)="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", 0x1000) r9 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r9, 0x800448d3, &(0x7f0000001a40)={@any, 0x7, 0x66b, 0x0, 0x4, 0x1000, "f3891127bce2578ccd6e34b0b0e9b70a229a1a9db0bd76d5bf4089bcf2a19f899d6e59c070805ec118c83fe7daec62035fc21442eed13b4c7340e383e3d7ff5051a847c8e7806de9fbff56fe1a48d487b3cf594202ac3c2511841e7599a8e4c55bd9a05188ebf61375af6c54da402d5fee7e5a00ca327c510b2c76d70e7dd528"}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r8, 0x8982, &(0x7f0000001b00)={0x1, 'veth0\x00', {}, 0x8000}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000001b80)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000001c40)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001c00)={&(0x7f0000001bc0)={0x1c, r2, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r10}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x80) r11 = open_tree(0xffffffffffffff9c, &(0x7f0000001c80)='./file0\x00', 0x10100) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000001cc0)={'ip6_vti0\x00', 0x100}) getdents64(r8, &(0x7f0000001d00)=""/201, 0xc9) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001e40), r0) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000001f40)={&(0x7f0000001e00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x48, r12, 0x2, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0xb1534f0cac6ebb90}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}]}, 0x48}, 0x1, 0x0, 0x0, 0x4c004}, 0x10) sendmsg$IEEE802154_ASSOCIATE_REQ(0xffffffffffffffff, &(0x7f0000002080)={&(0x7f0000001f80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002040)={&(0x7f0000001fc0)={0x54, r2, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x2}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x52}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa3}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x4}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa3}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0xe}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x9}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000003) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000020c0)) 49.109769886s ago: executing program 4 (id=516): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x6, &(0x7f0000000240)=0xff, 0x4) io_setup(0x2, &(0x7f0000000380)=0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r5 = epoll_create(0x8) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000040)={0xf6c447fee59251f4}) close_range(r3, r4, 0x0) io_submit(r2, 0x1, &(0x7f0000000000)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x5, 0x3, r0, 0x0, 0x0, 0x0, 0x0, 0x2, r3}]) 48.843914151s ago: executing program 4 (id=518): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kmem_cache_free\x00', r2}, 0x18) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000004800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000050000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r4}, 0x18) (async) bpf$MAP_CREATE(0x2000000000000000, &(0x7f00000007c0)=ANY=[@ANYBLOB="0600000004000000be7000005c00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="aa00"], 0x48) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x2, 0x9, 0x0, 0x3, 0x2}, 0x10}}, 0x4000000) socket$key(0xf, 0x3, 0x2) (async) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000010001bb617793d1967b700000000000000fc0100000001000107144e2386a8d02b95ca0005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1e0001000000000000000000000000000004d46c0000007f000001000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff0700000025bd7000043500000a0001002000000000000000480003006465666c61746500"/240], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) (async) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000640)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="03062fbd7000fcdbdf250300000005000200000000000c00018008000100", @ANYRES32=r12, @ANYBLOB="050003"], 0x30}}, 0x10) (async) sendmsg$inet(r7, &(0x7f00000004c0)={&(0x7f0000000380)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000640)="6d9e960b097ea52d38bd4a767c96fe0a74886051dab9392700a0505c9e037cb8e82917c675bd95d3d3951eedb3fcc01875367ef2647a9f00357b36a96daa818a831ab57963a4fef4630b9f171ab3d5f8a0944b288fba4a1a6228eaf9da78586defdb2a7202d1fbe1d84fafc263237c68ad8c8847a87dcd64332ec1390e9e62108e26756293ce5cb18cc2a71ed95b2620", 0x90}, {&(0x7f0000000800)="6f639bd39ec59ee614e4d7b104ab2be8187af876838f2da08e2eb3c30f705b495cadd26b50a9c47eb4e2009ec8a74e13e49589965e3dd1597dac7985719db7f188fd98d39ab02a2029156cdd02ccaa7ec8d606c6e12cccdba6cfbf3b8c26dfc5fc8cb01855f61f1eabf60ed71ae482b6f977093472790d46861a833960aa7031986371fdc17f14aca90435044ffdc0", 0x8f}], 0x2, &(0x7f00000008c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x34}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @local}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r12, @multicast2, @empty}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xd}}], 0x88}, 0x20004000) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="60000000210001002dbd7000fcdbdf250ac120051200000700000000080017004e244e2014000100fe8000000000000000000000000000bb140002"], 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x4000080) (async) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000018"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) r13 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x8000000000002) (async) sched_setscheduler(r13, 0x2, &(0x7f0000000240)=0x7) 48.805053046s ago: executing program 4 (id=519): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x2010800, 0x0) (async) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x2010800, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001600010200000000000000000a00829f3a3f76585ec6871b"], 0x24}}, 0x0) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001600010200000000000000000a00829f3a3f76585ec6871b"], 0x24}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008020000d900000000000000", @ANYRES32, @ANYBLOB="00000000004000009b8d0000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socket$inet6_udp(0xa, 0x2, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000f40)=ANY=[@ANYBLOB="180000000000000000001c000000000018121c008de97780e1fc5e3d13e2a6000a6a1e84e922b794053a2565476f3c3f332e20ac47b9213f1d10a1aeb3aec0bfe0bf70a8d5490145983d883040038a2842066cb4075af5e452ed4c5120db9b8b0e1129cbbceed12c", @ANYRES8=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b700005ee7da1f3c9499cb7ebf2153bc685d6f90915fbef0fcc5c2dc543193516d6e95465f675d026d8409e1af7c1384f53b9cb911f6567d6dfa0e18920c2d15c269b11ed3"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0xfffffffd}, 0x8}, 0x94) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x100) openat$selinux_load(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000280)={0x10, 0x17, 0x2, {0x7, './file1'}}, 0x10) (async) write$P9_RREADLINK(r2, &(0x7f0000000280)={0x10, 0x17, 0x2, {0x7, './file1'}}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7f, 0x8d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f0000000440)=[{{&(0x7f0000000300)=@nl=@proc, 0x80, &(0x7f0000000640), 0x0, &(0x7f00000007c0)=""/73, 0x49}, 0x5}], 0x1, 0x2, 0x0) (async) recvmmsg(r4, &(0x7f0000000440)=[{{&(0x7f0000000300)=@nl=@proc, 0x80, &(0x7f0000000640), 0x0, &(0x7f00000007c0)=""/73, 0x49}, 0x5}], 0x1, 0x2, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r7}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r7}, 0x18) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed4040, &(0x7f0000001040)={[{@noblock_validity}, {@stripe={'stripe', 0x3d, 0x7}}, {@journal_dev={'journal_dev', 0x3d, 0x1ff}}, {@grpid}, {@data_ordered}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@data_err_ignore}, {@dax_inode}], [{@subj_role={'subj_role', 0x3d, '-'}}, {@func={'func', 0x3d, 'MODULE_CHECK'}}, {@seclabel}, {@smackfsfloor={'smackfsfloor', 0x3d, '{:!(/#'}}, {@smackfsdef={'smackfsdef', 0x3d, 'batadv_slave_1\x00'}}, {@fowner_gt={'fowner>', 0xee00}}, {@subj_role={'subj_role', 0x3d, '#'}}]}, 0x1, 0x47a, &(0x7f0000000ac0)="$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") (async) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed4040, &(0x7f0000001040)={[{@noblock_validity}, {@stripe={'stripe', 0x3d, 0x7}}, {@journal_dev={'journal_dev', 0x3d, 0x1ff}}, {@grpid}, {@data_ordered}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@data_err_ignore}, {@dax_inode}], [{@subj_role={'subj_role', 0x3d, '-'}}, {@func={'func', 0x3d, 'MODULE_CHECK'}}, {@seclabel}, {@smackfsfloor={'smackfsfloor', 0x3d, '{:!(/#'}}, {@smackfsdef={'smackfsdef', 0x3d, 'batadv_slave_1\x00'}}, {@fowner_gt={'fowner>', 0xee00}}, {@subj_role={'subj_role', 0x3d, '#'}}]}, 0x1, 0x47a, &(0x7f0000000ac0)="$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") r8 = getuid() setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000001c0)={{{@in=@multicast1, @in=@remote, 0x4e20, 0x5, 0x4e22, 0x0, 0x2, 0x80, 0x90, 0x2b, r0, r8}, {0xbf, 0x1, 0x100000001, 0x7, 0xd5, 0x64d, 0x3, 0x3}, {0x200, 0x1, 0x8, 0x8}, 0x5, 0x6e6bba, 0x0, 0x0, 0x3, 0x3}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x38}, 0x4d6, 0x61}, 0x2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3500, 0x2, 0x0, 0x3, 0x8, 0x7f, 0x5}}, 0xe8) (async) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000001c0)={{{@in=@multicast1, @in=@remote, 0x4e20, 0x5, 0x4e22, 0x0, 0x2, 0x80, 0x90, 0x2b, r0, r8}, {0xbf, 0x1, 0x100000001, 0x7, 0xd5, 0x64d, 0x3, 0x3}, {0x200, 0x1, 0x8, 0x8}, 0x5, 0x6e6bba, 0x0, 0x0, 0x3, 0x3}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x38}, 0x4d6, 0x61}, 0x2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3500, 0x2, 0x0, 0x3, 0x8, 0x7f, 0x5}}, 0xe8) 48.612166351s ago: executing program 4 (id=520): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x41, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x2) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x2) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000f80)="a4", 0x1}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000000)={0x0, 0x1, 0x1000000000000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) (async) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r4, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4810}, 0x0) (async) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r4, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4810}, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r6}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r7}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r8, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) (async) ioctl$SIOCSIFHWADDR(r8, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 48.452371642s ago: executing program 4 (id=523): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x6, &(0x7f0000002000)={0x1, 0x0, 0x200, 0x2}) socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x901800, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) close(r2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = getpid() sched_setscheduler(r4, 0x2, 0x0) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000100)=0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r7 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r7, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, 0x0, 0x0, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r11}, 0x10) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b800000019000100160000000000000000000000e800000000000000000000000000000008000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000100000000000000"], 0xb8}}, 0x0) setpgid(r5, r4) 48.403312368s ago: executing program 34 (id=523): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x6, &(0x7f0000002000)={0x1, 0x0, 0x200, 0x2}) socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x901800, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) close(r2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = getpid() sched_setscheduler(r4, 0x2, 0x0) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000100)=0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r7 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r7, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, 0x0, 0x0, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r11}, 0x10) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b800000019000100160000000000000000000000e800000000000000000000000000000008000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000100000000000000"], 0xb8}}, 0x0) setpgid(r5, r4) 32.287471213s ago: executing program 3 (id=652): r0 = syz_clone(0xb9264480, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$pokeuser(0x6, r0, 0x7, 0x9) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x164) mknodat$loop(r2, &(0x7f0000001600)='./file1\x00', 0x200, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x11, 0x3, 0x343f) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) ptrace$ARCH_SHSTK_ENABLE(0x1e, r0, 0x2, 0x5001) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) setsockopt$IPT_SO_SET_REPLACE(r7, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0xe501, 0x3, 0x2a8, 0x138, 0x6affffff, 0x3403000b, 0x0, 0x7, 0x210, 0x230, 0x230, 0x210, 0x223, 0x3, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, 'veth1_macvtap\x00', 'veth1_to_team\x00'}, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x28f5c, 0x4, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@time={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x3, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200000000000085dd44f00000950000"], &(0x7f0000000180)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x9, '\x00', r5, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="000000000a004e2300000004fe8000000000000000000000000000aa090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000070000000a004e24000000012001000000000000000000000000000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e200000000cfe8000000000000000000000000000bbffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2200000001ff0200000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000a004e2300000009fe88000000000000000000000000010101000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2000000002fe8000000000000000000000000000bba300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbff000000000000000000000000000000000000000000000000000000000000000a004e2400000000fc0200000000000000000000e8ac35c702000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2300000100000000000000000000000000000000000500"/1036], 0x410) ptrace(0x10, r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xe8) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') r8 = open(&(0x7f0000000380)='./file0\x00', 0x28cc00, 0x50) getdents(r8, 0x0, 0x0) r9 = open(&(0x7f00000000c0)='.\x00', 0x10000, 0x0) getdents(r9, &(0x7f0000001fc0)=""/184, 0xb8) syz_emit_ethernet(0x1e, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaa57e956d3c40241d57f18b2cc32e4f5abff000010a9667993c7aad09abbbba99ae0ffff3f07ff0100002dbf412033076a"], 0x0) ptrace(0x8, r0) waitid(0x1, r0, 0x0, 0x4, 0x0) 32.215952052s ago: executing program 3 (id=653): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) prlimit64(0x0, 0xa, &(0x7f0000000300)={0x8e, 0x3}, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffffff}, [@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @call={0x85, 0x0, 0x0, 0x7d}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeb0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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", @ANYBLOB="a2727e257a2509cf2509450da090db2b81e649ed914d49e7ffa2fed9cd351dbfae1f11442836abd3ce72ebbae55f9a47bfb5cd59f25e19402ab853c5796674c6d521402484d0fead9c8c561ca13855d8f4d44ba23cf7ffc3361c2c0ac671636c8cabc1695274edd7de206708db9a0ace195a0bb69aab889f073a314d3226dcbbfa7c92c2362d85f24ff9bfdf992245c24bd6f1bdd4a4906983ae022971faa90b98a461e8a6891b5946890e86c2e35ae04a1de9e5356e98460896ba74565c2f8337", @ANYRES64=r3, @ANYRESHEX=0x0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00', r6}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x36}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r7, 0x40000f0, 0xe40, 0xffffffff, &(0x7f0000000280)="7b5515ccc8bca12641e65d58fd1a12f639", 0x0, 0x8001}, 0x28) ioctl$X86_IOC_RDMSR_REGS(r3, 0xc02063a0, &(0x7f0000000040)=[0x9, 0x3ff, 0x4adc, 0x2, 0x4, 0xd1f, 0x0, 0x80000001]) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) 31.271446375s ago: executing program 3 (id=658): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa00008, &(0x7f00000002c0), 0x1, 0x7ad, &(0x7f00000007c0)="$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") (async) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa00008, &(0x7f00000002c0), 0x1, 0x7ad, &(0x7f00000007c0)="$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") syz_usb_connect(0x6, 0x1fc, &(0x7f0000000780)=ANY=[@ANYBLOB], 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth1_virt_wifi\x00', 0x0}) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x36, [{{0x9, 0x4, 0x0, 0xb9, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x800, 0x5, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x7, 0x2, 0x1}}}}}]}}]}}, 0x0) (async) r5 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x36, [{{0x9, 0x4, 0x0, 0xb9, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x800, 0x5, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x7, 0x2, 0x1}}}}}]}}]}}, 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x8, "1c7774b2"}]}}, 0x0}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="280000001300010025bd7000fedadf2500000000", @ANYRES32=r4, @ANYBLOB="242400002019000008001300", @ANYRES32=r3], 0x28}, 0x1, 0x0, 0x0, 0xc0008c1}, 0x20048000) 29.178364037s ago: executing program 3 (id=675): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3c) ioctl$KVM_CREATE_GUEST_MEMFD(r0, 0xc040aed4, &(0x7f0000000000)={0x5, 0xc}) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f00000000c0), 0x2, 0xbd1, &(0x7f0000001340)="$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") ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f00000001c0)={0x3, 'vcan0\x00', {0x3}, 0x2}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000000)={"9acfd3f9c5cfa2be22c82e857d28c399", 0x0, 0x0, {0x2, 0x29b}, {0x6, 0x4}, 0x400, [0x2d2, 0x80, 0x10001, 0x5, 0x3, 0x7eec0000000, 0x8, 0x800, 0x10, 0x5, 0x80000001, 0x8, 0xdc, 0x3, 0x2, 0x5]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) getpid() connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000580)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@noauto_da_alloc}, {@dioread_nolock}, {@test_dummy_encryption}, {@nobarrier}, {@nodelalloc}, {@minixdf}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x1, 0xba6, &(0x7f0000000c00)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) syz_mount_image$fuse(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x8820, &(0x7f0000000240)=ANY=[], 0x1, 0x0, 0x0) symlink(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlink(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001200)=""/4096, 0x1000) write$binfmt_script(r1, &(0x7f0000000200)={'#! ', '', [], 0xa, 'G'}, 0x5) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x4000, &(0x7f00000001c0), 0x1, 0x4cb, &(0x7f0000000f00)="$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") r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) pwrite64(r3, &(0x7f0000000140)='2', 0xfdef, 0xfecc) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x111) fallocate(r4, 0x0, 0x1, 0x2000406) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000040)={0xc, r2, 0x0, 0x0, 0x0, 0xfffffffffdffffff}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r5, 0x6611) 28.335642767s ago: executing program 3 (id=676): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x4) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_NOTIFY_STORE(r2, 0x0, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) open(0x0, 0x108843, 0x190) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0x5, [@func_proto={0x0, 0x7, 0x0, 0xd, 0x0, [{0x8}, {0x3, 0x4}, {0x8}, {0x6, 0x1}, {0x5, 0x2}, {0xb, 0x3}, {0x8, 0x4}]}]}, {0x0, [0x30, 0x0, 0x61]}}, &(0x7f0000000380)=""/181, 0x61, 0xb5, 0x1, 0x10, 0x10000, @value=r2}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r7}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r8 = dup(r1) write$FUSE_BMAP(r8, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(r1, &(0x7f0000000140)={0x4a, 0x0, 0x0, {0x7, 0x2b, 0x8, 0x140, 0x2, 0x1, 0x2, 0x7ff, 0x0, 0x0, 0x100, 0x9}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r8]) r9 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) fstat(r9, 0x0) 26.949151797s ago: executing program 3 (id=686): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000340)=ANY=[@ANYRES32], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x5bbf91a1e7f99074, &(0x7f0000000000)) r1 = inotify_init() creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) inotify_add_watch(r1, &(0x7f0000000200)='./file0\x00', 0x400008bf) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="a1ca734da8cbe02dfe0de331e11e77246e7bcd643b4c4c2fa948f1cf804da73e263f170e2ebe6a070cac9d9eba9aafc22e314314dba852", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x4}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2}, 0x0, &(0x7f0000000040)}, 0x20) chmod(&(0x7f0000000080)='./file0/file0\x00', 0xc1) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000e868495fb58d00b6ad1f50ad32d6ad25dfd73a015e0ca6a0f68a7d007dc6751dfb265a0e3ccae669e173a64bc1cfd514600650a58f145ff1205fc9ddaa275e687d452d64e7cc957d77578f4c25235138d5521f9453559c35da860e8efbc64e57cbb7aee976f2b54421eed73d5661cfeecf9c66c54c3b3ffe1b4ce25d7c983cd44c05bd0a48dfe3e26e7a23129d6606ed28a69989d552af6d9a9df2c3af36e0360070011bbecc2f4a3799af2551ce935b0f327cb3f011a7d06602e2fd5234712596b696418f163d1a1a83109753f54b21cd027edd68149ee99eebc6f7d6dd4aed4af7588c8e1b44ccb19e810879b81a7000000e7ffffff00000000d7900a820b63278f4e9a217b98ef7042ad2a928903000000cbe43a1ed25268816b00000000000009d27d753a30a147b24a48435bd8a568669596e9e0867958e1dd7a0defb6670c06054002238260000000000040587c1ed797aa21a38e1e389f640a0b8b0000000000a835ad0f61ba739cd0c31b05c00fba8a4aee676d7caa2e53b91a68ff2e60da7b01a2e5785a238afa4aba70c08b0d71b6f72d6a8d87fb08533d97ad96d3943c4cc8306dac433a5cdf78b04963d679d5a5d07e618a1ef9057fec00f9e93021f5a8d30e716de8cde9c6000000000c3b64d10f0939b42b33ab2a8717096c58bb3bb1d457d8bb96870f5a7e2ba31fd69bb80235d957eaa9a40b764e5381ffa604aaafb76a980e72b408f686b185736693089213b4e140f8f38e5589663115093889deb646122a5dc5a9e5ba4d37749a36b880110e2bf524b79bc91105f1d3f7d0de694a9417d68694f17ba5e27ea1cec518b93fadcfe0de010ae9be3273ff73c34b5695080a35bfa5c69e3b533e1b939c81b3beda037b7191cb0000000000000000000010e5d683b8938db5c305cf7e6e62a6890ba9e1f4ee64f8202b59de5036569febfaa95f4633db108b2f786333ec7bacc927f4a1785165b5d2444b4c022bb5cff472e6a0c8ee9d6d8df83b704669147b732ac508c9b9f0ca0a1ce45319d43d4643eb285835daf2065b57bebd61ad6671296c27253a5f9688d57c91ccd40ffe2dbc5dd1613a2e6f5b363cc8d205ce6ef3c3c6ded7dd3dfdb39008d8997213f68cdc971c1d6fdacb7729a5560880a77525e9cfb94ef1735dfe74e6b948697f7e3580436b532a82e315d56b17a5dba98436cc24babaae409f0aab0b40af116001bc85492455956e853ead08b5793d4ecf72378a3dfd9cc837b1c66212d9a2be8fd6341c2f837c7fe09924a51ec42912856cce3d3b2d092c80813aad03e1e63a655f4138730f302df339f30a4fbd453c9a0fba381d071ad7cb80a52bec572e29b0b9b55c235806b97e166609f8083ce776075c"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x4, &(0x7f0000000240), 0x22, 0x4d5, &(0x7f0000000580)="$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") bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_DEL(r5, 0x0, 0x484, &(0x7f0000000040)={0x2e, @private=0xa010102, 0x4e21, 0x3, 'fo\x00', 0x11, 0x4e9, 0x49}, 0x2c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x8, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) 26.899973513s ago: executing program 35 (id=686): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000340)=ANY=[@ANYRES32], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x5bbf91a1e7f99074, &(0x7f0000000000)) r1 = inotify_init() creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) inotify_add_watch(r1, &(0x7f0000000200)='./file0\x00', 0x400008bf) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="a1ca734da8cbe02dfe0de331e11e77246e7bcd643b4c4c2fa948f1cf804da73e263f170e2ebe6a070cac9d9eba9aafc22e314314dba852", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x4}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2}, 0x0, &(0x7f0000000040)}, 0x20) chmod(&(0x7f0000000080)='./file0/file0\x00', 0xc1) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x4, &(0x7f0000000240), 0x22, 0x4d5, &(0x7f0000000580)="$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") bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_DEL(r5, 0x0, 0x484, &(0x7f0000000040)={0x2e, @private=0xa010102, 0x4e21, 0x3, 'fo\x00', 0x11, 0x4e9, 0x49}, 0x2c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x8, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) 16.780037639s ago: executing program 2 (id=764): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f00000000c0)='netlink_extack\x00', r0}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r2, @ANYBLOB="00000000100000001c001a80080002"], 0x44}}, 0x0) 16.674965882s ago: executing program 2 (id=765): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3f, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2}, [@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x50a3}}, @call={0x85, 0x0, 0x0, 0x8}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x36}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x17}}]}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xe, 0x0, &(0x7f00000001c0)="0101000871a7832e6b7303c3cd59", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 16.6160041s ago: executing program 2 (id=766): fsopen(0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711227000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000dc0)={r0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x50) 16.568074486s ago: executing program 2 (id=767): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x10, &(0x7f0000000600), 0x1, 0x582, &(0x7f0000009ec0)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000080)=ANY=[]) 16.529174451s ago: executing program 2 (id=768): r0 = socket$can_raw(0x1d, 0x3, 0x1) timer_create(0x3, &(0x7f0000000780)={0x0, 0x21, 0x1}, &(0x7f0000000380)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) read(r0, &(0x7f00000027c0)=""/4073, 0xfe9) timer_gettime(r1, &(0x7f00000002c0)) 16.445351482s ago: executing program 2 (id=769): r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x20, 0x14, 0x509, 0x70bd27, 0x25dfdbfd, {0x2, 0x18, 0x0, 0xcb, r2}, [@IFA_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3d}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 16.423061665s ago: executing program 36 (id=769): r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x20, 0x14, 0x509, 0x70bd27, 0x25dfdbfd, {0x2, 0x18, 0x0, 0xcb, r2}, [@IFA_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3d}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 11.46490994s ago: executing program 7 (id=866): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x4401, &(0x7f0000000640), 0x3, 0x75e, &(0x7f00000008c0)="$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") chdir(&(0x7f0000000440)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f00000002c0)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) 11.457457561s ago: executing program 7 (id=867): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000380)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r2, 0x2) r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r3, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) 10.572067046s ago: executing program 7 (id=869): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x11, @empty, 0x0, 0x4, 'nq\x00', 0x2, 0xfffffff8}, 0x2c) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000000), &(0x7f0000000180)=0x68) 10.571944036s ago: executing program 7 (id=870): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x1400c, &(0x7f0000000680), 0x3, 0x470, &(0x7f00000006c0)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x20020c0, 0x0, 0x1, 0x0, &(0x7f0000001a00)) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 10.503678025s ago: executing program 7 (id=872): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e010203010902"], 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x431, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x7453c}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4f, 0x2, 0x0, 0x1, @void}}}, @IFLA_NET_NS_PID={0x8, 0x13, r1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004805}, 0xc080) 10.323959388s ago: executing program 7 (id=873): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000a40)=ANY=[@ANYBLOB="000f02"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000180)={0x20, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x0, 0x4, 0x7, 0x0, 0x6}}}, &(0x7f0000000980)={0x84, &(0x7f00000004c0)={0x0, 0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10.323804198s ago: executing program 37 (id=873): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000a40)=ANY=[@ANYBLOB="000f02"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000180)={0x20, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x0, 0x4, 0x7, 0x0, 0x6}}}, &(0x7f0000000980)={0x84, &(0x7f00000004c0)={0x0, 0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 7.871922617s ago: executing program 1 (id=939): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) write$tun(r0, &(0x7f0000000100)={@val={0x0, 0x6000}, @void, @eth={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x4, 0x14, 0x68, 0x0, 0x9, 0x4, 0x0, @private=0xa010101, @broadcast}}}}}}, 0x26) 7.833883552s ago: executing program 1 (id=940): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001d40)={0x24, 0x12, 0x0, 0x101, 0x0, 0x25dfdbfe, {0xc}, [@typed={0x8, 0x20, 0x0, 0x0, @uid=0xffffffffffffffff}, @nested={0x8, 0x0, 0x0, 0x1, [@nested={0x4, 0x41}]}]}, 0x24}}, 0x0) 7.825514253s ago: executing program 1 (id=941): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d01, 0x0, 0x80000df9}]}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7.748034743s ago: executing program 1 (id=942): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x80c8d0, &(0x7f0000000140)=ANY=[], 0x9, 0x34f, &(0x7f00000004c0)="$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") ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0xd46, 0x100000c, 0xffffeffffffffffb, 0x5, 0x10002, 0x3, 0x4002004c4, 0xa, 0x7, 0x0, 0x40000000800001, 0x0, 0x401, 0x2, 0x9, 0xb], 0xddcd0000, 0x100000}) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000100)=""/35, 0x23}], 0x1) ptrace$setregs(0xd, r0, 0x2, &(0x7f0000000180)) ptrace$cont(0x21, r0, 0x80000001, 0x4) 7.707250818s ago: executing program 1 (id=943): r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/netstat\x00') preadv(r0, &(0x7f0000004300)=[{&(0x7f0000000040)=""/144, 0x90}], 0x1, 0x78, 0xc) 7.603061022s ago: executing program 1 (id=944): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10) sendto$inet(r0, &(0x7f0000000040)="1e4d", 0x2, 0x2800b, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000240)=""/37, 0x25, 0xc9100063, 0x0, 0x0) 7.586521114s ago: executing program 38 (id=944): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10) sendto$inet(r0, &(0x7f0000000040)="1e4d", 0x2, 0x2800b, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000240)=""/37, 0x25, 0xc9100063, 0x0, 0x0) 3.415787556s ago: executing program 9 (id=1073): socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x33, &(0x7f0000000000)={@random="e90c610faca2", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x25, 0x0, 0xe000, 0x3, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x11, 0x0, @opaque="24dc6170e1e0318539"}}}}}, 0x0) syz_emit_ethernet(0xda, &(0x7f0000000b40)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xcc, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xb8, 0x0, @gue={{0x1, 0x1, 0x3, 0xb, 0x100, @void}, "c9eb9499fa1240a27e4c8f8633a77451f9b141a80ce47c4b3084a3873bde7cc86b68fb91b595ef699e50fdd0af0c912bdbacf9c00855b3fa23c4e44cb91a4293b30cd6ca9b1d527c8c1de35f14060b92d2a3d32f65463d6aff00803ccc38f9532d6ac75731d55ed51b60b5e9dea86506cdbc06f1f321956731a0b7613526aef3a6e2a7ae6dbfd67b005f701d6735ecad5e6d0eb81165830147f5e7986e2022768ea3cbbe5a90e7708ee40622"}}}}}}, 0x0) 3.398002848s ago: executing program 9 (id=1077): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_GET_CPUID2(r2, 0xc008ae91, 0x0) 3.31182139s ago: executing program 0 (id=1086): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0xb0, 0xf6, 0xa7, 0x8, 0x547, 0x2235, 0xa264, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xbf, 0xfc, 0x0, 0xd9, 0xcc, 0x84}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_emit_ethernet(0x5a, &(0x7f0000000200)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "dfa200", 0x24, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0xc2, 0x0, 0x0, 0xac9, {[@window={0x3, 0x3, 0x7}, @fastopen={0x22, 0xd, "dd9b267dfd8d724bd41d21"}]}}}}}}}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x14, 0x0, &(0x7f0000000240)) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) 3.260139536s ago: executing program 9 (id=1087): r0 = syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="40010400000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000780)={0x1c, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) 3.259919187s ago: executing program 8 (id=1089): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x103341) ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, &(0x7f0000000140)={0x80, 0x6, 0x7, 0xb92, 0xac, 0x2, 0x0}) 3.259867976s ago: executing program 8 (id=1090): syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa210104, @local, {[@timestamp_addr={0x44, 0xc, 0xa, 0x2, 0x0, [{@remote}]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) 3.251948338s ago: executing program 8 (id=1091): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x402) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000040)={0x23, 0x3, 0x9, 0x41, 0x0, 0x7, 0x0}) 3.107950006s ago: executing program 6 (id=1093): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000100)={0x0, 0x0}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600a00, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x24, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) 3.086961989s ago: executing program 6 (id=1094): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1b4, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x1a0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "e3de3d7b4cd06ac3ee777de774000087cca4198971262ad4b6cabf7a92007f91cb46b24a"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "cbbbe209c638f7c07b12453c9dc4c99b59075c1b2dae7d5f5de140c3"}}, @TIPC_NLA_NODE_REKEYING={0x1e, 0x6, 0x7}, @TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "f33ccf38297091639f9696adeb9e3ae73dce5e7aca31bde066031cef7049"}}, @TIPC_NLA_NODE_ID={0xb4, 0x3, "98fcb9752043d73661e535987531afc78836c45bb85aefd932fdf6e3ef78891bacf4bb241ea53b2b23a69afeb4256d06183c29e31a5007ec6bb5a894dc0691c92e5e07657b6c440fafb454df337de5360f85d0d2c121c307074d579dccc9cb049815eab1b905bcca5cb0a56e97bca7b510d174b24e2537dbe25cdf18aa783e520cc91c08577aae31baf3d3b0719c7ce959908fd3c949c85994ddd1777e495303c222d4c8dc78332ee7f03742942ede93"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) 3.069259151s ago: executing program 6 (id=1095): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000000)=0x8001) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) 3.008954119s ago: executing program 6 (id=1096): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x0, 0x0, 0x6}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) recvmmsg(r0, &(0x7f0000002d40)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/32, 0x30}], 0x1}, 0x1}], 0x1, 0x20, 0x0) close(r1) 2.9968648s ago: executing program 6 (id=1097): r0 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007e3dc410cd0621013ddd0102030109021b000100094000090485000189fe1f000905820220"], 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) syz_usb_control_io(r0, &(0x7f0000000440)={0x18, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0003020000000203"], 0x0, 0x0, 0x0}, 0x0) 2.69593461s ago: executing program 5 (id=1102): unshare(0x400) fchown(0xffffffffffffffff, 0x0, 0x0) 2.688290561s ago: executing program 5 (id=1103): write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x2b, 0x2, 0x7e5105, 0x0, 0x0, 0x7, 0xa15, 0x0, 0x0, 0x1, 0xd0}}, 0x50) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x3, 0x3, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x584}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 2.667886003s ago: executing program 5 (id=1104): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) add_key$keyring(&(0x7f000000f880), 0x0, 0x0, 0x0, 0xfffffffffffffffb) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0xfffffffd, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000700)={0x14, 0x0, 0x0, 0x0, 0x0}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2.610568221s ago: executing program 5 (id=1105): openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4043, 0x1ff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0c00000004000000040000000180000000000000", @ANYRES32=r2], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r3}, 0x38) 2.349729265s ago: executing program 8 (id=1106): unshare(0x2a020480) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0xc, 0x0, 0x7ffc0002}]}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000085}, 0x4000000) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10002) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 1.808902225s ago: executing program 5 (id=1107): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x800, 0x0, 0x1, 0x8}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0xa, 0x4, 0x8, 0xd}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000000)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xabc6f03b7e35f1e0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0xfffffffffffffff9) r2 = add_key(0x0, &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe) keyctl$update(0x2, r2, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, 0x0, 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r4 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet6_mreq(r4, 0x29, 0x1, 0x0, &(0x7f0000000600)) getsockopt(0xffffffffffffffff, 0x1, 0xe, 0x0, &(0x7f0000000040)) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) symlink(&(0x7f0000000080)='./file0/../file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00') inotify_add_watch(0xffffffffffffffff, 0x0, 0x20000b04) write$FUSE_INIT(r3, &(0x7f0000000380)={0x50, 0x0, r5, {0x7, 0x28, 0x7fffffff, 0x4069a064, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xffffffec}}, 0x50) syz_fuse_handle_req(r3, &(0x7f000000a280)="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", 0x2000, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x4, 0x6, 0x0, {0x5, 0x2, 0x1000b, 0x100000a, 0x3, 0x0, 0xfffffffe, 0x8000000, 0x0, 0x8000, 0x2000002, 0x0, r6, 0x7, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f0000006680)="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", 0x2000, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x6, {0x6, 0x1, 0xfd, 0x3dc0000000, 0x9, 0xfffffdff, {0x2, 0x80000808000083, 0x3, 0xf, 0x10000, 0x100000800000008, 0x80000000, 0x0, 0x4, 0xa000, 0x7fffffff, 0x0, r6, 0x0, 0xe8}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.704098469s ago: executing program 5 (id=1108): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet(0x2, 0x3, 0x7f) syz_usb_control_io$hid(r0, 0x0, 0x0) 1.501789585s ago: executing program 8 (id=1109): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab1204000000000000010902240001b30000040904410c17ff5d810009050f1f05e13f000009058303"], 0x0) pipe2(0x0, 0x0) syz_usb_ep_read(r0, 0xf, 0xffffffffffffffd2, 0x0) 1.058989212s ago: executing program 6 (id=1110): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d3750820c80a2103be6f000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000540)={0x1c, &(0x7f0000000040)=ANY=[], 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_disconnect(r0) 240.036469ms ago: executing program 0 (id=1111): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0xfffffffe}, 0x0, 0x10, &(0x7f0000000000), 0x45, 0xffffffffffffffff, 0xffffffffffffffff, 0xf, 0x0, 0x0, 0x10, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x58, &(0x7f00000024c0)}, 0x10) 239.869989ms ago: executing program 9 (id=1112): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xb, 0xfffff000, 0xa, 0xc0f, 0xb, 0x7, 0x4085, 0x3, 0x101}}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xb, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x3, 0xb}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8858}, 0x20004804) 239.809789ms ago: executing program 0 (id=1113): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0xb62ca000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) socket$nl_generic(0x10, 0x3, 0x10) 239.733489ms ago: executing program 9 (id=1114): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000004c0)=@setlink={0x40, 0x13, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x40601}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_vlan\x00'}, @IFLA_ADDRESS={0xa, 0x1, @random="da8bd8fb44fa"}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x48004) 221.026522ms ago: executing program 9 (id=1115): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xf2, 0x30, 0x39, 0x20, 0x2c42, 0x1202, 0x8540, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xc, 0x2, 0x2, 0xc1, 0x7f, 0xc, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000000100)={0x40, 0x17}, 0x0, 0x0, &(0x7f0000000240)={0xc0, 0xa1, 0x4, 0x3}, &(0x7f0000000280)={0x40, 0xa0, 0x4, 0x7}, &(0x7f00000002c0)={0xc0, 0xa2, 0x2f, "03a086cf81eb4959c05a21262ea8989e10bcd0750965760a8f8a07227c6dc0de7dd539437f6efcbcde24cfc5fc2cee"}}) 181.636437ms ago: executing program 0 (id=1116): unshare(0x22020400) r0 = socket$netlink(0x10, 0x3, 0x10) getsockopt$netlink(r0, 0x10e, 0xa, 0x0, 0x0) 132.096743ms ago: executing program 0 (id=1117): socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') read$FUSE(r0, &(0x7f0000000300)={0x2020}, 0x2020) 132.013723ms ago: executing program 0 (id=1118): syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109025f0024010000000201"], 0x0) 0s ago: executing program 8 (id=1119): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000280)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x7, 0x7}, {}, {0x8, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xfffffffd, 0x400, 0x7, 0x6, 0x7}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) kernel console output (not intermixed with test programs): 436][ T354] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 89.584877][ T24] kauditd_printk_skb: 33 callbacks suppressed [ 89.584888][ T24] audit: type=1400 audit(2000000027.059:792): avc: denied { write } for pid=2165 comm="syz.3.438" name="hwrng" dev="devtmpfs" ino=97 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 89.656420][ T279] attempt to access beyond end of device [ 89.656420][ T279] loop1: rw=2049, want=45104, limit=40427 [ 89.657420][ T354] usb 7-1: Using ep0 maxpacket: 16 [ 89.807449][ T354] usb 7-1: config 0 has an invalid interface number: 41 but max is 0 [ 89.815702][ T354] usb 7-1: config 0 has no interface number 0 [ 89.821976][ T354] usb 7-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 89.832806][ T354] usb 7-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 89.844047][ T354] usb 7-1: config 0 interface 41 has no altsetting 0 [ 90.010495][ T24] audit: type=1400 audit(2000000027.359:793): avc: denied { remount } for pid=2171 comm="syz.1.439" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 90.030530][ T24] audit: type=1400 audit(2000000027.369:794): avc: denied { mounton } for pid=2171 comm="syz.1.439" path="/70/file0" dev="ramfs" ino=22734 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 90.097517][ T354] usb 7-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 90.107750][ T354] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.116287][ T354] usb 7-1: Product: syz [ 90.120945][ T354] usb 7-1: Manufacturer: syz [ 90.125560][ T354] usb 7-1: SerialNumber: syz [ 90.130783][ T354] usb 7-1: config 0 descriptor?? [ 90.147460][ T2162] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 90.154553][ T2162] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 90.226937][ T2192] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 90.248419][ T2192] EXT4-fs (loop3): 1 truncate cleaned up [ 90.254150][ T2192] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsddf,errors=continue,sb=0x000000000000ffff,debug_want_extra_isize=0x0000000000000080,block_validity,noload,,errors=continue [ 90.303130][ T24] audit: type=1400 audit(2000000027.779:795): avc: denied { setopt } for pid=2195 comm="syz.4.445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 90.387539][ T354] dm9601: probe of 7-1:0.41 failed with error -71 [ 90.417506][ T354] sr9700: probe of 7-1:0.41 failed with error -71 [ 90.429724][ T354] usb 7-1: USB disconnect, device number 4 [ 90.453465][ T24] audit: type=1400 audit(2000000027.929:796): avc: denied { ioctl } for pid=2209 comm="syz.4.448" path="socket:[22799]" dev="sockfs" ino=22799 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 90.594201][ T24] audit: type=1400 audit(2000000028.069:797): avc: denied { unmount } for pid=279 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 90.597435][ T987] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 90.697453][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 90.849681][ T2213] F2FS-fs (loop6): Wrong CP boundary, start(512) end(1536) blocks(512) [ 90.858050][ T2213] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 90.866402][ T2213] F2FS-fs (loop6): Unrecognized mount option "fault_injection=0000000" or missing value [ 90.893583][ T2216] F2FS-fs (loop1): Unrecognized mount option "nocheckpoinI&ë®ÑК°´Ìt_merge" or missing value [ 90.957449][ T987] usb 4-1: not running at top speed; connect to a high speed hub [ 91.032432][ T2227] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=2227 comm=syz.2.453 [ 91.037506][ T987] usb 4-1: config 95 has an invalid interface number: 1 but max is 0 [ 91.053381][ T987] usb 4-1: config 95 has no interface number 0 [ 91.059757][ T987] usb 4-1: config 95 interface 1 has no altsetting 0 [ 91.139406][ T2232] overlayfs: './bus' not a directory [ 91.199967][ T2231] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 91.206375][ T2231] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 91.216178][ T2231] F2FS-fs (loop2): invalid crc value [ 91.223094][ T2231] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 91.227569][ T987] usb 4-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice=79.79 [ 91.243683][ T987] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.251743][ T987] usb 4-1: Product: syz [ 91.255926][ T987] usb 4-1: Manufacturer: syz [ 91.260669][ T987] usb 4-1: SerialNumber: syz [ 91.265953][ T2231] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 91.273192][ T2231] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 91.285844][ T24] audit: type=1400 audit(2000000028.759:798): avc: denied { ioctl } for pid=2230 comm="syz.2.454" path="/99/file1/file1" dev="loop2" ino=15 ioctlcmd=0x660b scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 91.328073][ T278] attempt to access beyond end of device [ 91.328073][ T278] loop2: rw=2049, want=45112, limit=40427 [ 91.499937][ T2247] syz.2.457[2247] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 91.500031][ T2247] syz.2.457[2247] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 91.534088][ T2247] kvm [2246]: vcpu0, guest rIP: 0x9114 disabled perfctr wrmsr: 0xc2 data 0x9d00 [ 91.555843][ T2247] kvm [2246]: vcpu0, guest rIP: 0x9114 disabled perfctr wrmsr: 0xc1 data 0x9d00 [ 91.569595][ T2247] APIC base relocation is unsupported by KVM [ 91.700145][ T2239] F2FS-fs (loop6): Test dummy encryption mode enabled [ 91.713965][ T2239] F2FS-fs (loop6): invalid crc value [ 91.724000][ T2239] F2FS-fs (loop6): Found nat_bits in checkpoint [ 91.744076][ T2239] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 91.760999][ T2239] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 91.781778][ T2256] netlink: 104 bytes leftover after parsing attributes in process `syz.1.458'. [ 91.857412][ T354] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 91.920469][ T2295] netlink: 'syz.6.459': attribute type 1 has an invalid length. [ 92.044547][ T24] audit: type=1400 audit(2000000029.519:799): avc: denied { connect } for pid=2304 comm="syz.1.462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 92.127416][ T354] usb 3-1: Using ep0 maxpacket: 16 [ 92.199068][ T2310] F2FS-fs (loop1): invalid crc value [ 92.205556][ T2310] F2FS-fs (loop1): Found nat_bits in checkpoint [ 92.212100][ T984] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 92.233328][ T2310] F2FS-fs (loop1): Cannot turn on quotas: -2 on 0 [ 92.239870][ T2310] F2FS-fs (loop1): Cannot turn on quotas: -2 on 1 [ 92.246638][ T2310] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 92.257446][ T354] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 92.272527][ T354] usb 3-1: config 1 has no interface number 1 [ 92.278858][ T354] usb 3-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 92.289478][ T354] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 92.302437][ T354] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 92.497559][ T354] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 92.507252][ T354] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.515530][ T354] usb 3-1: Product: syz [ 92.520750][ T354] usb 3-1: Manufacturer: syz [ 92.525553][ T354] usb 3-1: SerialNumber: syz [ 92.646891][ T984] usb 7-1: Using ep0 maxpacket: 16 [ 92.767469][ T984] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.779039][ T984] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 92.788854][ T984] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 92.801755][ T984] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 92.810843][ T984] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.819725][ T984] usb 7-1: config 0 descriptor?? [ 92.917587][ T354] usb 3-1: 2:1 : format type 0 is detected, processed as PCM [ 92.925105][ T354] usb 3-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 92.951981][ T354] usb 3-1: USB disconnect, device number 9 [ 93.154792][ T24] audit: type=1400 audit(2000000030.629:800): avc: denied { setcurrent } for pid=2321 comm="syz.3.465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 93.178518][ T2322] netlink: 108 bytes leftover after parsing attributes in process `syz.3.465'. [ 93.187697][ T2322] netlink: 8 bytes leftover after parsing attributes in process `syz.3.465'. [ 93.215763][ T2324] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d) [ 93.274320][ T987] usb 4-1: USB disconnect, device number 19 [ 93.290573][ T984] input: HID 045e:07da as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:045E:07DA.0007/input/input8 [ 93.304119][ T24] audit: type=1400 audit(2000000030.789:801): avc: denied { read } for pid=80 comm="acpid" name="event3" dev="devtmpfs" ino=764 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 93.327228][ T984] microsoft 0003:045E:07DA.0007: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0 [ 93.437958][ T2335] FAT-fs (loop1): Unrecognized mount option "iocä÷›Â$Ws"p737" or missing value [ 93.505083][ T2289] usb 7-1: USB disconnect, device number 5 [ 93.604261][ T2344] netlink: 140 bytes leftover after parsing attributes in process `syz.2.470'. [ 93.786994][ T2339] binder: 2329:2339 ioctl c0306201 200000004a40 returned -22 [ 93.795258][ T2320] udevd[2320]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:95.1/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 93.844331][ T2348] fido_id[2348]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 93.969298][ T2355] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 94.156829][ T2368] syz.2.474[2368] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 94.157124][ T2368] syz.2.474[2368] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 94.292994][ T2351] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 94.554838][ T2351] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 94.665729][ T2351] F2FS-fs (loop4): Unrecognized mount option "" or missing value [ 94.776964][ T354] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 94.967624][ T24] kauditd_printk_skb: 5 callbacks suppressed [ 94.967634][ T24] audit: type=1400 audit(2000000032.449:807): avc: denied { getopt } for pid=2384 comm="syz.2.481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 95.033737][ T2376] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 95.047395][ T354] usb 2-1: Using ep0 maxpacket: 32 [ 95.056326][ T24] audit: type=1400 audit(2000000032.529:808): avc: denied { map } for pid=2391 comm="syz.4.482" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=174 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 95.097193][ T2379] F2FS-fs (loop3): Fix alignment : done, start(4096) end(16896) block(12288) [ 95.115585][ T2379] F2FS-fs (loop3): invalid crc value [ 95.138676][ T2379] F2FS-fs (loop3): invalid crc value [ 95.144091][ T2379] F2FS-fs (loop3): Failed to get valid F2FS checkpoint [ 95.208086][ T2401] EXT4-fs error (device loop4): ext4_ext_check_inode:500: inode #2: comm syz.4.484: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 2304(2304) [ 95.226641][ T2401] EXT4-fs (loop4): get root inode failed [ 95.232319][ T2401] EXT4-fs (loop4): mount failed [ 95.238066][ T354] usb 2-1: unable to get BOS descriptor or descriptor too short [ 95.367544][ T354] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 95.375157][ T354] usb 2-1: can't read configurations, error -61 [ 95.477494][ T987] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 95.493786][ T24] audit: type=1326 audit(2000000032.969:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2400 comm="syz.4.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcde2db9749 code=0x7ffc0000 [ 95.517499][ T24] audit: type=1326 audit(2000000032.969:810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2400 comm="syz.4.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcde2db9749 code=0x7ffc0000 [ 95.547517][ T354] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 95.548186][ T24] audit: type=1326 audit(2000000032.999:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2400 comm="syz.4.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7fcde2db9749 code=0x7ffc0000 [ 95.579527][ T24] audit: type=1326 audit(2000000032.999:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2400 comm="syz.4.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcde2db9749 code=0x7ffc0000 [ 95.603740][ T24] audit: type=1326 audit(2000000032.999:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2400 comm="syz.4.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcde2db9749 code=0x7ffc0000 [ 95.627400][ T24] audit: type=1326 audit(2000000032.999:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2400 comm="syz.4.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcde2db9749 code=0x7ffc0000 [ 95.651387][ T24] audit: type=1326 audit(2000000033.029:815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2400 comm="syz.4.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcde2db9749 code=0x7ffc0000 [ 95.675283][ T24] audit: type=1326 audit(2000000033.029:816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2400 comm="syz.4.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcde2db9749 code=0x7ffc0000 [ 95.849672][ T354] usb 2-1: Using ep0 maxpacket: 32 [ 96.007761][ T354] usb 2-1: unable to get BOS descriptor or descriptor too short [ 96.044278][ T2413] netlink: 104 bytes leftover after parsing attributes in process `syz.4.486'. [ 96.137703][ T354] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 96.152254][ T354] usb 2-1: can't read configurations, error -61 [ 96.182546][ T354] usb usb2-port1: attempt power cycle [ 96.616432][ T354] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 96.662485][ T987] usb 7-1: device descriptor read/64, error -71 [ 96.717454][ T354] usb 2-1: Using ep0 maxpacket: 32 [ 96.737497][ T297] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 96.811165][ T2419] F2FS-fs (loop4): invalid crc value [ 96.823365][ T2419] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 96.843674][ T2419] F2FS-fs (loop4): Start checkpoint disabled! [ 96.850696][ T2419] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 96.887468][ T354] usb 2-1: unable to get BOS descriptor or descriptor too short [ 97.007421][ T297] usb 3-1: device descriptor read/64, error -71 [ 97.014073][ T354] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 97.031796][ T354] usb 2-1: can't read configurations, error -61 [ 97.057415][ T987] usb 7-1: device descriptor read/64, error -71 [ 97.198128][ T354] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 97.287532][ T354] usb 2-1: Using ep0 maxpacket: 32 [ 97.327618][ T987] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 97.397449][ T297] usb 3-1: device descriptor read/64, error -71 [ 97.477067][ T354] usb 2-1: unable to get BOS descriptor or descriptor too short [ 97.547402][ T354] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 97.547411][ T984] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 97.570705][ T354] usb 2-1: can't read configurations, error -71 [ 97.582254][ T354] usb usb2-port1: unable to enumerate USB device [ 97.613003][ T49] attempt to access beyond end of device [ 97.613003][ T49] loop4: rw=2049, want=45104, limit=40427 [ 97.647687][ T987] usb 7-1: device descriptor read/64, error -71 [ 97.697407][ T297] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 97.705826][ T2435] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 97.714391][ T2435] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 97.807464][ T984] usb 4-1: Using ep0 maxpacket: 16 [ 98.107987][ T984] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.119042][ T984] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 98.129725][ T984] usb 4-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 98.139539][ T297] usb 3-1: device descriptor read/64, error -71 [ 98.146509][ T984] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.160135][ T984] usb 4-1: config 0 descriptor?? [ 98.198345][ T984] usbhid 4-1:0.0: can't add hid device: -22 [ 98.204944][ T984] usbhid: probe of 4-1:0.0 failed with error -22 [ 98.217434][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 98.217668][ T987] usb 7-1: device descriptor read/64, error -71 [ 98.281013][ T2460] netlink: 12 bytes leftover after parsing attributes in process `syz.6.499'. [ 98.347513][ T987] usb usb7-port1: attempt power cycle [ 98.400219][ T2430] udc-core: couldn't find an available UDC or it's busy [ 98.407234][ T2430] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 98.414944][ T2460] F2FS-fs (loop6): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 98.423214][ T979] usb 4-1: USB disconnect, device number 20 [ 98.438238][ T2460] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 98.446604][ T2460] F2FS-fs (loop6): fault_type options not supported [ 98.454241][ T2460] F2FS-fs (loop6): invalid crc value [ 98.461788][ T2460] F2FS-fs (loop6): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 98.481914][ T2460] F2FS-fs (loop6): Start checkpoint disabled! [ 98.489175][ T2460] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 98.496259][ T2460] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 98.587461][ T984] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 98.650478][ T2470] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 98.947444][ T984] usb 2-1: config 46 has an invalid interface number: 187 but max is 0 [ 98.964682][ T984] usb 2-1: config 46 has no interface number 0 [ 98.974722][ T984] usb 2-1: config 46 interface 187 altsetting 63 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 98.986656][ T984] usb 2-1: config 46 interface 187 altsetting 63 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 99.019354][ T984] usb 2-1: config 46 interface 187 altsetting 63 endpoint 0x9 has invalid maxpacket 2048, setting to 64 [ 99.044850][ T984] usb 2-1: config 46 interface 187 has no altsetting 0 [ 99.098071][ T2489] EXT4-fs warning (device loop2): ext4_fill_super:4099: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 99.118253][ T2352] udevd[2352]: incorrect ext4 checksum on /dev/loop2 [ 99.557418][ T2489] EXT4-fs (loop2): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 100.041824][ T984] usb 2-1: New USB device found, idVendor=19d2, idProduct=0057, bcdDevice= 8.9e [ 100.065685][ T984] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.073841][ T984] usb 2-1: Product: syz [ 100.097531][ T984] usb 2-1: Manufacturer: syz [ 100.102253][ T984] usb 2-1: SerialNumber: syz [ 100.177524][ T24] kauditd_printk_skb: 204 callbacks suppressed [ 100.177536][ T24] audit: type=1326 audit(2000000043.606:1021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2488 comm="syz.2.507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f286aa7c749 code=0x7ffc0000 [ 100.368487][ T2462] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=26 sclass=netlink_tcpdiag_socket pid=2462 comm=syz.1.500 [ 100.369772][ T2515] 9pnet: Insufficient options for proto=fd [ 100.621036][ T984] usb 2-1: USB disconnect, device number 16 [ 100.630681][ T2509] F2FS-fs (loop2): invalid crc value [ 100.656184][ T2528] syz.4.518[2528] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 100.656238][ T2528] syz.4.518[2528] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 100.693666][ T2509] F2FS-fs (loop2): Found nat_bits in checkpoint [ 100.740684][ T2509] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 100.962690][ T24] audit: type=1400 audit(2000000044.436:1022): avc: denied { remove_name } for pid=277 comm="syz-executor" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 100.988615][ T24] audit: type=1400 audit(2000000044.436:1023): avc: denied { unlink } for pid=277 comm="syz-executor" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 101.271860][ T2557] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.279254][ T2557] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.287036][ T2557] device bridge_slave_0 entered promiscuous mode [ 101.304494][ T2557] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.311894][ T2557] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.323906][ T2557] device bridge_slave_1 entered promiscuous mode [ 101.357387][ T2289] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 101.370684][ T278] attempt to access beyond end of device [ 101.370684][ T278] loop2: rw=2049, want=45104, limit=40427 [ 101.381662][ T2557] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.388969][ T2557] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.396309][ T2557] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.403371][ T2557] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.427673][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 101.442166][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.467707][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.501431][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 101.510126][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.517393][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.533081][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 101.541806][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.548948][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.557100][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 101.580413][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 101.590112][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 101.603164][ T2557] device veth0_vlan entered promiscuous mode [ 101.611487][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 101.620149][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 101.628200][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 101.650551][ T2565] syz.2.526[2565] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 101.650601][ T2565] syz.2.526[2565] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 101.650914][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 101.682776][ T2557] device veth1_macvtap entered promiscuous mode [ 101.691792][ T2566] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 101.692297][ T24] audit: type=1400 audit(2000000045.166:1024): avc: denied { load_policy } for pid=2564 comm="syz.2.526" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 101.725849][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 101.734945][ T2566] SELinux: failed to load policy [ 101.748079][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 101.756709][ T2566] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 101.786894][ T2566] SELinux: failed to load policy [ 101.788555][ T24] audit: type=1400 audit(2000000045.266:1025): avc: denied { read } for pid=2569 comm="syz.7.524" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 101.817755][ T2289] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.845403][ T2289] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.855936][ T2289] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 101.856617][ T2576] mmap: syz.7.528 (2576): VmData 29265920 exceed data ulimit 8. Update limits or use boot option ignore_rlimit_data. [ 101.896767][ T2289] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 101.913550][ T24] audit: type=1400 audit(2000000045.386:1026): avc: denied { create } for pid=2579 comm="syz.7.529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 101.917382][ T2289] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.001937][ T2289] usb 2-1: config 0 descriptor?? [ 102.012373][ T9] device bridge_slave_1 left promiscuous mode [ 102.018556][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.026121][ T9] device bridge_slave_0 left promiscuous mode [ 102.033670][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.041749][ T9] device veth1_macvtap left promiscuous mode [ 102.235896][ T9] device veth0_vlan left promiscuous mode [ 102.307729][ T2592] FAT-fs (loop2): Unrecognized mount option "ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ" or missing value [ 102.377425][ T2289] usbhid 2-1:0.0: can't add hid device: -71 [ 102.383601][ T2289] usbhid: probe of 2-1:0.0 failed with error -71 [ 102.405991][ T2289] usb 2-1: USB disconnect, device number 17 [ 102.469168][ T2592] netlink: 4 bytes leftover after parsing attributes in process `syz.2.527'. [ 102.560851][ T2604] EXT4-fs (loop1): Ignoring removed nobh option [ 102.567525][ T2604] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 102.597822][ T984] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 102.650198][ T2604] EXT4-fs (loop1): orphan cleanup on readonly fs [ 102.716223][ T2604] EXT4-fs error (device loop1): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 19 vs 41 free clusters [ 102.768289][ T2604] EXT4-fs (loop1): Remounting filesystem read-only [ 102.787578][ T2604] Quota error (device loop1): write_blk: dquota write failed [ 102.795006][ T2604] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 102.846118][ T2604] EXT4-fs error (device loop1): ext4_acquire_dquot:6224: comm syz.1.533: Failed to acquire dquot type 0 [ 102.877610][ T2604] EXT4-fs (loop1): 1 truncate cleaned up [ 102.887493][ T984] usb 4-1: device descriptor read/64, error -71 [ 102.894037][ T2604] EXT4-fs (loop1): mounted filesystem without journal. Opts: bsddf,noblock_validity,sysvgroups,acl,nogrpid,nobh,errors=remount-ro,noinit_itable,min_batch_time=0x00000000000000012 [ 102.917530][ T2605] F2FS-fs (loop7): Invalid log blocks per segment (4278190089) [ 102.931822][ T2605] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 102.954122][ T2605] F2FS-fs (loop7): invalid crc value [ 102.993635][ T2605] F2FS-fs (loop7): Found nat_bits in checkpoint [ 103.065913][ T2605] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 103.075290][ T2605] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 103.127856][ T2605] F2FS-fs (loop7): Corrupted max_depth of 3: 255 [ 103.146047][ T2605] F2FS-fs (loop7): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 103.158764][ T2605] F2FS-fs (loop7): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 103.317464][ T984] usb 4-1: device descriptor read/64, error -71 [ 103.354985][ T2625] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 103.368931][ T24] audit: type=1400 audit(2000000046.826:1027): avc: denied { accept } for pid=2622 comm="syz.2.537" path="socket:[23879]" dev="sockfs" ino=23879 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 103.467797][ T2632] erofs: Unknown parameter 'ÿ%P¯À‹!ckáÐ2%Ü!sªF°' [ 103.587414][ T984] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 103.785961][ T2651] input: syz1 as /devices/virtual/input/input10 [ 103.822056][ T2651] kvm [2650]: vcpu0, guest rIP: 0x9114 disabled perfctr wrmsr: 0xc2 data 0x9d00 [ 103.832008][ T2651] kvm [2650]: vcpu0, guest rIP: 0x9114 disabled perfctr wrmsr: 0xc1 data 0x9d00 [ 103.887414][ T984] usb 4-1: device descriptor read/64, error -71 [ 103.949249][ T2655] EXT4-fs (loop1): Mount option "nodioread_nolock" incompatible with ext2 [ 104.038159][ T979] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 104.457395][ T979] usb 8-1: device descriptor read/64, error -71 [ 104.463771][ T984] usb 4-1: device descriptor read/64, error -71 [ 104.601340][ T2677] netlink: 24 bytes leftover after parsing attributes in process `syz.2.548'. [ 104.627637][ T2677] netlink: 24 bytes leftover after parsing attributes in process `syz.2.548'. [ 104.749853][ T984] usb usb4-port1: attempt power cycle [ 104.788384][ T2681] erofs: (device loop6): mounted with root inode @ nid 36. [ 104.853472][ T2682] netlink: 'syz.6.551': attribute type 2 has an invalid length. [ 104.861838][ T2685] netlink: 'syz.6.551': attribute type 2 has an invalid length. [ 104.927479][ T2287] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 105.027412][ T979] usb 8-1: device descriptor read/64, error -71 [ 105.124530][ T2694] EXT4-fs (loop6): invalid first ino: 0 [ 105.167664][ T984] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 105.177608][ T2287] usb 3-1: Using ep0 maxpacket: 16 [ 105.297496][ T979] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 105.319292][ T2287] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.337284][ T2287] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.339726][ T984] usb 4-1: device descriptor read/8, error -71 [ 105.365230][ T2287] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 105.385546][ T2287] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.406206][ T2287] usb 3-1: config 0 descriptor?? [ 105.595803][ T2705] EXT4-fs (loop1): Unrecognized mount option "Ó" or missing value [ 105.747451][ T984] usb 4-1: device descriptor read/8, error -71 [ 105.827432][ T979] usb 8-1: device descriptor read/64, error -71 [ 105.868150][ T2287] konepure 0003:1E7D:2DB4.0008: item fetching failed at offset 0/4 [ 105.876197][ T2287] konepure 0003:1E7D:2DB4.0008: parse failed [ 105.882270][ T2287] konepure: probe of 0003:1E7D:2DB4.0008 failed with error -22 [ 106.020670][ T24] audit: type=1400 audit(2000000049.496:1028): avc: denied { write } for pid=2721 comm="syz.1.559" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 107.073155][ T979] usb 8-1: device descriptor read/64, error -71 [ 107.080738][ T24] audit: type=1400 audit(2000000049.666:1029): avc: denied { bind } for pid=2721 comm="syz.1.559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 107.217748][ T979] usb usb8-port1: attempt power cycle [ 107.232785][ T24] audit: type=1400 audit(2000000050.706:1030): avc: denied { setopt } for pid=2738 comm="syz.3.562" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 107.278585][ T2736] EXT4-fs (loop1): mounted filesystem without journal. Opts: norecovery,auto_da_alloc=0x0000000000000400,resuid=0x0000000000000000,usrquota,discard,max_dir_size_kb=0x0000000000000007,journal_ioprio=0x0000000000000004,delalloc,nolazytime,nodelalloc,inode_readahead_blks=0x00000000000400,errors=continue [ 107.472192][ T15] usb 3-1: USB disconnect, device number 12 [ 107.627577][ T964] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 107.637409][ T979] usb 8-1: new low-speed USB device number 4 using dummy_hcd [ 107.727664][ T979] usb 8-1: Invalid ep0 maxpacket: 32 [ 107.867418][ T964] usb 2-1: Using ep0 maxpacket: 32 [ 107.877437][ T979] usb 8-1: new low-speed USB device number 5 using dummy_hcd [ 107.967512][ T979] usb 8-1: Invalid ep0 maxpacket: 32 [ 107.972951][ T979] usb usb8-port1: unable to enumerate USB device [ 107.987434][ T964] usb 2-1: config 0 has an invalid descriptor of length 69, skipping remainder of the config [ 108.007399][ T964] usb 2-1: too many endpoints for config 0 interface 0 altsetting 4: 162, using maximum allowed: 30 [ 108.021307][ T964] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 218, changing to 11 [ 108.040324][ T964] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 26401, setting to 1024 [ 108.055768][ T964] usb 2-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 162 [ 108.068831][ T964] usb 2-1: config 0 interface 0 has no altsetting 0 [ 108.075609][ T964] usb 2-1: New USB device found, idVendor=07c0, idProduct=1125, bcdDevice= 0.00 [ 108.085329][ T964] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.097278][ T964] usb 2-1: config 0 descriptor?? [ 108.137599][ T2767] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 108.327858][ T2784] EXT4-fs (loop3): Ignoring removed bh option [ 108.420283][ T2767] udc-core: couldn't find an available UDC or it's busy [ 108.427263][ T2767] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 108.459204][ T15] usb 2-1: USB disconnect, device number 18 [ 108.470292][ T2797] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2797 comm=syz.2.577 [ 108.487027][ T2784] EXT4-fs (loop3): mounted filesystem without journal. Opts: i_version,nogrpid,bh,,errors=continue [ 108.499150][ T2784] ext4 filesystem being mounted at /92/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 108.665480][ T2810] FAT-fs (loop2): bogus number of reserved sectors [ 108.672144][ T2810] FAT-fs (loop2): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 108.681866][ T2810] FAT-fs (loop2): Can't find a valid FAT filesystem [ 108.839186][ T2810] erofs: (device loop2): mounted with root inode @ nid 36. [ 109.388099][ T2285] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 109.527599][ T354] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 109.779099][ T2285] usb 4-1: config 0 has an invalid interface number: 199 but max is 0 [ 109.819609][ T2285] usb 4-1: config 0 has no interface number 0 [ 109.855359][ T2285] usb 4-1: config 0 interface 199 has no altsetting 0 [ 110.019845][ T354] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.038264][ T354] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.049827][ T354] usb 2-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice= 0.00 [ 110.059923][ T354] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.150029][ T354] usb 2-1: config 0 descriptor?? [ 110.157634][ T2285] usb 4-1: New USB device found, idVendor=17cc, idProduct=1010, bcdDevice=1e.0c [ 110.167801][ T2285] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.176131][ T2285] usb 4-1: Product: syz [ 110.180813][ T2285] usb 4-1: Manufacturer: syz [ 110.185528][ T2285] usb 4-1: SerialNumber: syz [ 110.209391][ T2285] usb 4-1: config 0 descriptor?? [ 110.279672][ T2832] EXT4-fs (loop2): Test dummy encryption mode enabled [ 110.316483][ T2832] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 110.328087][ T2832] System zones: 0-5 [ 110.338974][ T24] audit: type=1400 audit(2000000053.816:1031): avc: denied { shutdown } for pid=2847 comm="syz.7.590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 110.362707][ T2832] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,delalloc,resuid=0x0000000000000000,test_dummy_encryption,nodiscard,data_err=ignore,acl,debug_want_extra_isize=0x0000000000000040,,errors=continue [ 110.448745][ T2818] udc-core: couldn't find an available UDC or it's busy [ 110.455943][ T2818] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 110.536314][ T2852] EXT4-fs (loop7): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 110.600802][ T24] audit: type=1400 audit(2000000054.076:1032): avc: denied { getopt } for pid=2863 comm="syz.1.595" lport=10 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 110.600912][ T2285] snd-usb-audio: probe of 4-1:0.199 failed with error -71 [ 110.638399][ T2852] EXT4-fs (loop7): mounted filesystem without journal. Opts: dioread_nolock,data_err=abort,inlinecrypt,noauto_da_alloc,data_err=ignore,nojournal_checksum,errors=remount-ro,grpquota,noblock_validity,user_xattr,nombcache,errors=remount-ro, [ 110.667246][ T2285] usb 4-1: USB disconnect, device number 25 [ 110.686479][ T2852] netlink: 'syz.7.592': attribute type 12 has an invalid length. [ 110.697618][ T15] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 110.717436][ T354] usbhid 2-1:0.0: can't add hid device: -71 [ 110.724253][ T354] usbhid: probe of 2-1:0.0 failed with error -71 [ 110.739125][ T2868] FAT-fs (loop1): Unrecognized mount option "(" or missing value [ 110.748645][ T354] usb 2-1: USB disconnect, device number 19 [ 110.863396][ T2879] EXT4-fs (loop7): Unrecognized mount option "appraise" or missing value [ 111.012860][ T2879] binder: BINDER_SET_CONTEXT_MGR already set [ 111.068369][ T2879] binder: 2878:2879 ioctl 4018620d 200000000040 returned -16 [ 111.185812][ T15] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 111.195707][ T15] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 111.205490][ T15] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 111.215200][ T15] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 111.565313][ T15] usb 7-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 111.578807][ T15] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.587782][ T15] usb 7-1: Product: syz [ 111.592011][ T15] usb 7-1: Manufacturer: syz [ 111.596628][ T15] usb 7-1: SerialNumber: syz [ 111.613179][ T15] usb 7-1: config 0 descriptor?? [ 111.655199][ T2907] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 111.665736][ T15] ums-isd200 7-1:0.0: USB Mass Storage device detected [ 111.699368][ T2907] EXT4-fs (loop2): 1 truncate cleaned up [ 111.706956][ T2907] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 111.802709][ T24] audit: type=1326 audit(2000000055.276:1033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2920 comm="syz.1.607" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f781ed44749 code=0x0 [ 112.307125][ T15] scsi host1: usb-storage 7-1:0.0 [ 112.318386][ T15] usb 7-1: USB disconnect, device number 9 [ 112.707667][ T2947] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 112.715651][ T2947] EXT4-fs (loop3): Test dummy encryption mode enabled [ 112.722694][ T2947] EXT4-fs (loop3): Journaled quota options ignored when QUOTA feature is enabled [ 112.848920][ T24] audit: type=1400 audit(2000000056.326:1034): avc: denied { lock } for pid=2950 comm="syz.1.614" path="socket:[24399]" dev="sockfs" ino=24399 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 112.899330][ T2947] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,mblk_io_submit,nodioread_nolock,test_dummy_encryption,inode_readahead_blks=0x0000000000000000,nodelalloc,usrjquota=./file1,debug_want_extra_isize=0x0000000000000040,,errors=continue [ 112.931005][ T24] audit: type=1400 audit(2000000056.406:1035): avc: denied { watch watch_reads } for pid=2944 comm="syz.3.613" path=2F39382F131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D3382F66696C6531 dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 112.977668][ T24] audit: type=1400 audit(2000000056.446:1036): avc: denied { accept } for pid=2950 comm="syz.1.614" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 113.098662][ T24] audit: type=1400 audit(2000000056.576:1037): avc: denied { mount } for pid=2953 comm="syz.6.615" name="/" dev="loop6" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 113.136416][ T2958] FAT-fs (loop6): error, corrupted directory (invalid entries) [ 113.145662][ T2958] FAT-fs (loop6): Filesystem has been set read-only [ 113.153152][ T2957] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 113.167794][ T24] audit: type=1400 audit(2000000056.636:1038): avc: denied { unmount } for pid=1399 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 113.200060][ T2955] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsv1,norecovery,inode_readahead_blks=0x0000000008000000,minixdf,resgid=0x0000000000000000,,errors=continue [ 113.286847][ T2955] EXT4-fs error (device loop2): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 113.288495][ T2966] F2FS-fs (loop1): invalid crc value [ 113.330965][ T2966] F2FS-fs (loop1): Found nat_bits in checkpoint [ 113.337561][ T964] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 113.368285][ T2955] overlayfs: upper fs does not support xattr, falling back to index=off and metacopy=off. [ 113.400045][ T2966] F2FS-fs (loop1): Start checkpoint disabled! [ 113.406460][ T2981] SELinux: security_context_str_to_sid(Eá…) failed for (dev ramfs, type ramfs) errno=-22 [ 113.427436][ T2966] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 113.518288][ T2987] syz.2.622[2987] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 113.518324][ T2987] syz.2.622[2987] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 113.530299][ T2987] syz.2.622[2987] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 113.541730][ T2987] syz.2.622[2987] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 113.579261][ T2986] syz.2.622[2986] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 113.601682][ T2986] syz.2.622[2986] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 113.751897][ T24] audit: type=1400 audit(2000000057.226:1039): avc: denied { create } for pid=2997 comm="syz.2.624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 113.838304][ T3005] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 113.849600][ T3005] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 113.859964][ T3005] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 113.877435][ T15] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 113.897494][ T964] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 113.936996][ T964] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.947289][ T964] usb 8-1: New USB device found, idVendor=5543, idProduct=0047, bcdDevice= 0.00 [ 113.963331][ T1016] attempt to access beyond end of device [ 113.963331][ T1016] loop1: rw=2049, want=45104, limit=40427 [ 113.974672][ T964] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.994237][ T964] usb 8-1: config 0 descriptor?? [ 114.137387][ T15] usb 7-1: Using ep0 maxpacket: 16 [ 114.257483][ T15] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 114.276277][ T15] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 114.531736][ T24] audit: type=1400 audit(2000000058.006:1040): avc: denied { setopt } for pid=3032 comm="syz.7.633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 114.537746][ T1016] Bluetooth: hci0: Frame reassembly failed (-84) [ 114.559597][ T3033] bridge: RTM_NEWNEIGH with invalid ether address [ 114.617496][ T964] usbhid 8-1:0.0: can't add hid device: -71 [ 114.623530][ T15] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 114.632771][ T964] usbhid: probe of 8-1:0.0 failed with error -71 [ 114.639297][ T15] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.647269][ T15] usb 7-1: Product: syz [ 114.653198][ T964] usb 8-1: USB disconnect, device number 6 [ 114.659772][ T15] usb 7-1: Manufacturer: 뽡⒅é [ 114.664986][ T15] usb 7-1: SerialNumber: syz [ 114.669616][ T984] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 114.701916][ T3038] erofs: (device loop1): mounted with root inode @ nid 36. [ 114.907465][ T984] usb 4-1: Using ep0 maxpacket: 16 [ 114.997478][ T15] cdc_ncm 7-1:1.0: bind() failure [ 115.003376][ T15] cdc_ncm 7-1:1.1: bind() failure [ 115.010183][ T15] usb 7-1: USB disconnect, device number 10 [ 115.027496][ T984] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.039501][ T984] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.050059][ T984] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 115.137508][ T984] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice= 0.00 [ 115.147317][ T984] usb 4-1: New USB device strings: Mfr=32, Product=0, SerialNumber=0 [ 115.155929][ T984] usb 4-1: Manufacturer: syz [ 115.161998][ T984] usb 4-1: config 0 descriptor?? [ 116.376789][ T3051] input: syz0 as /devices/virtual/input/input11 [ 116.439802][ T984] playstation 0003:054C:0DF2.0009: hidraw0: USB HID v0.09 Device [syz] on usb-dummy_hcd.3-1/input0 [ 116.478847][ T24] audit: type=1400 audit(2000000059.956:1041): avc: denied { write } for pid=3060 comm="syz.6.642" name="file0" dev="tmpfs" ino=453 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 116.501428][ T24] audit: type=1400 audit(2000000059.956:1042): avc: denied { open } for pid=3060 comm="syz.6.642" path="/79/file0" dev="tmpfs" ino=453 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 116.552431][ T984] playstation 0003:054C:0DF2.0009: Failed to retrieve feature with reportID 9: -71 [ 116.564452][ T984] playstation 0003:054C:0DF2.0009: Failed to retrieve DualSense pairing info: -71 [ 116.576320][ T984] playstation 0003:054C:0DF2.0009: Failed to get MAC address from DualSense [ 116.585103][ T984] playstation 0003:054C:0DF2.0009: Failed to create dualsense. [ 116.586272][ T3063] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 116.601867][ T3063] ext4 filesystem being mounted at /116/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.603131][ T984] playstation: probe of 0003:054C:0DF2.0009 failed with error -71 [ 116.612533][ T2289] Bluetooth: hci0: command 0x1003 tx timeout [ 116.626755][ T805] Bluetooth: hci0: sending frame failed (-49) [ 116.631615][ T984] usb 4-1: USB disconnect, device number 26 [ 116.655813][ T3067] EXT4-fs (loop3): quotafile must be on filesystem root [ 116.665276][ T3063] EXT4-fs error (device loop1): ext4_lookup:1830: inode #12: comm syz.1.643: iget: bad i_size value: 2533274857506816 [ 116.717888][ T3063] EXT4-fs error (device loop1): ext4_lookup:1830: inode #12: comm syz.1.643: iget: bad i_size value: 2533274857506816 [ 116.852627][ T3079] fido_id[3079]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 116.876145][ T3063] EXT4-fs error (device loop1): ext4_lookup:1830: inode #12: comm syz.1.643: iget: bad i_size value: 2533274857506816 [ 116.897513][ T3081] device veth4 entered promiscuous mode [ 117.266409][ T3106] netlink: 24 bytes leftover after parsing attributes in process `syz.3.652'. [ 117.304249][ T3106] xt_CT: You must specify a L4 protocol and not use inversions on it [ 117.341893][ T3098] F2FS-fs (loop2): invalid crc value [ 117.354442][ T3098] F2FS-fs (loop2): Found nat_bits in checkpoint [ 117.399384][ T3098] F2FS-fs (loop2): Start checkpoint disabled! [ 117.406647][ T3098] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 117.667304][ T3121] attempt to access beyond end of device [ 117.667304][ T3121] loop2: rw=10241, want=45104, limit=40427 [ 117.982400][ T24] audit: type=1326 audit(2000000061.456:1043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3108 comm="syz.3.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd71b620749 code=0x7fc00000 [ 118.113790][ T3117] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.655: inode #1: comm syz.1.655: iget: illegal inode # [ 118.156005][ T3117] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.655: error while reading EA inode 1 err=-117 [ 118.267735][ T3117] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.655: inode #1: comm syz.1.655: iget: illegal inode # [ 118.290054][ T3117] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.655: error while reading EA inode 1 err=-117 [ 118.299922][ T3134] udc-core: couldn't find an available UDC or it's busy [ 118.309404][ T3134] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 118.314657][ T3117] EXT4-fs (loop1): 1 orphan inode deleted [ 118.527806][ T3117] EXT4-fs (loop1): mounted filesystem without journal. Opts: minixdf,stripe=0x0000000000000003,norecovery,noinit_itable,max_batch_time=0x0000000000000006,minixdf,usrjquota=,debug_want_extra_isize=0x000000000000005c,errors=continue,barrier=0x0000000000000002,noblock_validity,noquota,,errors=continue [ 118.560639][ T9] attempt to access beyond end of device [ 118.560639][ T9] loop2: rw=2049, want=45112, limit=40427 [ 118.621849][ T3138] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue [ 118.647459][ T2285] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 118.683148][ T3142] netlink: 8 bytes leftover after parsing attributes in process `syz.1.660'. [ 118.697453][ T2287] Bluetooth: hci0: command 0x1001 tx timeout [ 118.704053][ T805] Bluetooth: hci0: sending frame failed (-49) [ 118.863962][ T3166] netlink: 60 bytes leftover after parsing attributes in process `syz.1.663'. [ 118.873039][ T3166] netlink: 60 bytes leftover after parsing attributes in process `syz.1.663'. [ 118.932549][ T24] audit: type=1326 audit(2000000062.406:1044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3167 comm="syz.2.665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f286aa7c749 code=0x7ffc0000 [ 118.957944][ T24] audit: type=1326 audit(2000000062.406:1045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3167 comm="syz.2.665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f286aa7c749 code=0x7ffc0000 [ 118.982730][ T24] audit: type=1326 audit(2000000062.436:1046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3167 comm="syz.2.665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f286aa7c749 code=0x7ffc0000 [ 119.048578][ T24] audit: type=1326 audit(2000000062.436:1047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3167 comm="syz.2.665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f286aa7c749 code=0x7ffc0000 [ 119.072907][ T2285] usb 4-1: config 0 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0 [ 119.074334][ T24] audit: type=1326 audit(2000000062.436:1048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3167 comm="syz.2.665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f286aa7c749 code=0x7ffc0000 [ 119.083270][ T2285] usb 4-1: config 0 interface 0 has no altsetting 0 [ 119.113348][ T2285] usb 4-1: New USB device found, idVendor=056a, idProduct=00d2, bcdDevice= 0.00 [ 119.122396][ T2285] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.134939][ T2285] usb 4-1: config 0 descriptor?? [ 119.167456][ T24] audit: type=1326 audit(2000000062.466:1049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3167 comm="syz.2.665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f286aa7c749 code=0x7ffc0000 [ 119.460488][ T3166] F2FS-fs (loop1): Test dummy encryption mode enabled [ 119.488634][ T3166] F2FS-fs (loop1): invalid crc value [ 119.538291][ T3166] F2FS-fs (loop1): Found nat_bits in checkpoint [ 119.607446][ T3166] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 119.628974][ T2285] wacom 0003:056A:00D2.000A: Unknown device_type for 'HID 056a:00d2'. Assuming pen. [ 119.654267][ T2285] wacom 0003:056A:00D2.000A: hidraw0: USB HID v8.00 Device [HID 056a:00d2] on usb-dummy_hcd.3-1/input0 [ 119.665792][ T3166] overlayfs: unrecognized mount option "uuid=null" or missing value [ 119.674754][ T2285] input: Wacom Bamboo Craft Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:00D2.000A/input/input12 [ 119.723317][ T3172] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 119.760218][ T3172] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 119.827052][ T3172] F2FS-fs (loop6): invalid crc_offset: 218959117 [ 119.833828][ T2285] usb 4-1: USB disconnect, device number 27 [ 119.864573][ T3172] F2FS-fs (loop6): invalid crc_offset: 218959117 [ 119.873821][ T3172] F2FS-fs (loop6): Failed to get valid F2FS checkpoint [ 120.041490][ T3184] GPT:first_usable_lbas don't match. [ 120.046799][ T3184] GPT:34 != 290 [ 120.051686][ T3184] GPT: Use GNU Parted to correct GPT errors. [ 120.057835][ T3184] loop2: p1 p2 p3 [ 120.245410][ T3204] syz.1.672[3204] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 120.245465][ T3204] syz.1.672[3204] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 120.360579][ T24] audit: type=1400 audit(2000000063.836:1050): avc: denied { listen } for pid=3209 comm="syz.2.674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 120.394729][ T24] audit: type=1400 audit(2000000063.836:1051): avc: denied { accept } for pid=3209 comm="syz.2.674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 120.620553][ T3208] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 121.205116][ T276] EXT4-fs error (device loop3): ext4_readdir:263: inode #12: block 80: comm syz-executor: path /109/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 121.250191][ T276] EXT4-fs error (device loop3): ext4_empty_dir:3092: inode #12: block 80: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 121.288525][ T984] Bluetooth: hci0: command 0x1009 tx timeout [ 121.327585][ T276] EXT4-fs warning (device loop3): ext4_empty_dir:3094: inode #12: comm syz-executor: directory missing '..' [ 121.341263][ T276] EXT4-fs error (device loop3): ext4_readdir:263: inode #12: block 80: comm syz-executor: path /109/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 121.377866][ T276] EXT4-fs error (device loop3): ext4_empty_dir:3092: inode #12: block 80: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 121.428039][ T3244] netlink: 'syz.1.680': attribute type 12 has an invalid length. [ 121.464653][ T276] EXT4-fs warning (device loop3): ext4_empty_dir:3094: inode #12: comm syz-executor: directory missing '..' [ 121.476960][ T276] EXT4-fs error (device loop3): ext4_readdir:263: inode #12: block 80: comm syz-executor: path /109/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 121.499760][ T276] EXT4-fs error (device loop3): ext4_empty_dir:3092: inode #12: block 80: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 121.527967][ T276] EXT4-fs warning (device loop3): ext4_empty_dir:3094: inode #12: comm syz-executor: directory missing '..' [ 121.553930][ T276] EXT4-fs error (device loop3): ext4_readdir:263: inode #12: block 80: comm syz-executor: path /109/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 121.602189][ T3247] 9pnet: Insufficient options for proto=fd [ 121.618072][ T276] EXT4-fs error (device loop3): ext4_empty_dir:3092: inode #12: block 80: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 121.660433][ T276] EXT4-fs warning (device loop3): ext4_empty_dir:3094: inode #12: comm syz-executor: directory missing '..' [ 121.672323][ T276] EXT4-fs error (device loop3): ext4_readdir:263: inode #12: block 80: comm syz-executor: path /109/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 121.707787][ T3253] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3695335479 (236501470656 ns) > initial count (87349860352 ns). Using initial count to start timer. [ 121.726372][ T3253] Disabled LAPIC found during irq injection [ 121.732594][ T276] EXT4-fs error (device loop3): ext4_empty_dir:3092: inode #12: block 80: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 121.745238][ T24] audit: type=1400 audit(2000000065.216:1052): avc: denied { read } for pid=3250 comm="syz.6.682" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=26935 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 121.752638][ T276] EXT4-fs warning (device loop3): ext4_empty_dir:3094: inode #12: comm syz-executor: directory missing '..' [ 121.789035][ T276] EXT4-fs warning (device loop3): ext4_empty_dir:3094: inode #12: comm syz-executor: directory missing '..' [ 121.801372][ T276] EXT4-fs warning (device loop3): ext4_empty_dir:3094: inode #12: comm syz-executor: directory missing '..' [ 121.813800][ T276] EXT4-fs warning (device loop3): ext4_empty_dir:3094: inode #12: comm syz-executor: directory missing '..' [ 121.826001][ T276] EXT4-fs warning (device loop3): ext4_empty_dir:3094: inode #12: comm syz-executor: directory missing '..' [ 121.844525][ T276] EXT4-fs warning (device loop3): ext4_empty_dir:3094: inode #12: comm syz-executor: directory missing '..' [ 122.267509][ T2287] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 122.547422][ T2287] usb 7-1: device descriptor read/64, error -71 [ 122.742976][ T3271] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.751410][ T3271] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.759153][ T3271] device bridge_slave_0 entered promiscuous mode [ 122.767253][ T3271] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.776184][ T3271] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.784253][ T3271] device bridge_slave_1 entered promiscuous mode [ 122.818447][ T3271] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.825696][ T3271] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.832992][ T3271] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.840076][ T3271] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.859397][ T1016] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 122.867987][ T1016] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.876218][ T1016] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.886144][ T1016] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 122.894560][ T1016] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.901869][ T1016] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.910432][ T49] device bridge_slave_1 left promiscuous mode [ 122.916564][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.924461][ T49] device bridge_slave_0 left promiscuous mode [ 122.930697][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.947485][ T2287] usb 7-1: device descriptor read/64, error -71 [ 122.988041][ T1016] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 122.996522][ T1016] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 123.004931][ T1016] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.011995][ T1016] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.024388][ T1016] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 123.032541][ T1016] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 123.037440][ T15] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 123.049118][ T1016] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 123.057666][ T1016] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 123.071505][ T1016] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 123.080678][ T1016] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 123.094108][ T1016] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 123.103158][ T1016] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 123.111774][ T1016] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 123.119635][ T1016] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 123.128193][ T3271] device veth0_vlan entered promiscuous mode [ 123.140543][ T3271] device veth1_macvtap entered promiscuous mode [ 123.147230][ T1016] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 123.155699][ T1016] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 123.164438][ T1016] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 123.179245][ T1016] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 123.188322][ T1016] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 123.197838][ T1016] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 123.206197][ T1016] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 123.217626][ T2287] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 123.279664][ T3283] erofs: (device loop8): mounted with root inode @ nid 36. [ 123.292413][ T3283] erofs: (device loop8): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 123.302116][ T3283] attempt to access beyond end of device [ 123.302116][ T3283] loop8: rw=524288, want=524304, limit=16 [ 123.313601][ T15] usb 3-1: Using ep0 maxpacket: 32 [ 123.319625][ T42] erofs: (device loop8): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[4100] [ 123.333542][ T3283] attempt to access beyond end of device [ 123.333542][ T3283] loop8: rw=0, want=524304, limit=16 [ 123.347006][ T3283] erofs: (device loop8): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[4100] [ 123.361417][ T3283] attempt to access beyond end of device [ 123.361417][ T3283] loop8: rw=0, want=524304, limit=16 [ 123.373221][ T3283] erofs: (device loop8): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[4100] [ 123.443227][ T3286] netlink: 28 bytes leftover after parsing attributes in process `syz.8.691'. [ 123.447453][ T15] usb 3-1: config 0 interface 0 altsetting 11 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.469352][ T15] usb 3-1: config 0 interface 0 altsetting 11 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 123.482712][ T15] usb 3-1: config 0 interface 0 has no altsetting 0 [ 123.489576][ T15] usb 3-1: New USB device found, idVendor=04b4, idProduct=de64, bcdDevice= 0.00 [ 123.499545][ T15] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.511248][ T15] usb 3-1: config 0 descriptor?? [ 123.516599][ T2287] usb 7-1: device descriptor read/64, error -71 [ 123.524752][ T24] audit: type=1400 audit(2000000067.006:1053): avc: denied { lock } for pid=3287 comm="syz.1.692" path="socket:[26165]" dev="sockfs" ino=26165 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 123.907460][ T2287] usb 7-1: device descriptor read/64, error -71 [ 124.008161][ T15] cypress 0003:04B4:DE64.000B: item fetching failed at offset 0/3 [ 124.016346][ T15] cypress 0003:04B4:DE64.000B: parse failed [ 124.022430][ T15] cypress: probe of 0003:04B4:DE64.000B failed with error -22 [ 124.037500][ T2287] usb usb7-port1: attempt power cycle [ 124.211812][ T15] usb 3-1: USB disconnect, device number 13 [ 124.307934][ T24] audit: type=1326 audit(2000000067.786:1054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3290 comm="syz.1.693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f781ed44749 code=0x7ffc0000 [ 124.340990][ T24] audit: type=1326 audit(2000000067.816:1055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3290 comm="syz.1.693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f781ed44749 code=0x7ffc0000 [ 124.369639][ T24] audit: type=1326 audit(2000000067.846:1056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3290 comm="syz.1.693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=23 compat=0 ip=0x7f781ed44749 code=0x7ffc0000 [ 124.395882][ T24] audit: type=1326 audit(2000000067.846:1057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3290 comm="syz.1.693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f781ed44749 code=0x7ffc0000 [ 124.426263][ T24] audit: type=1326 audit(2000000067.846:1058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3290 comm="syz.1.693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f781ed44749 code=0x7ffc0000 [ 124.458856][ T2287] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 124.461103][ T24] audit: type=1326 audit(2000000067.846:1059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3290 comm="syz.1.693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=284 compat=0 ip=0x7f781ed44749 code=0x7ffc0000 [ 124.471312][ T3304] syz.1.696[3304] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 124.493146][ T24] audit: type=1326 audit(2000000067.846:1060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3290 comm="syz.1.693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f781ed44749 code=0x7ffc0000 [ 124.495246][ T3305] syz.1.696[3305] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 124.506544][ T24] audit: type=1326 audit(2000000067.846:1061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3290 comm="syz.1.693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f781ed44749 code=0x7ffc0000 [ 124.573249][ T3304] syz.1.696[3304] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 124.574331][ T24] audit: type=1326 audit(2000000067.846:1062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3290 comm="syz.1.693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f781ed44749 code=0x7ffc0000 [ 124.576134][ T3306] overlayfs: invalid origin (0000) [ 124.618575][ T3305] syz.1.696[3305] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 124.687889][ T2287] usb 7-1: device descriptor read/8, error -71 [ 124.813069][ T3315] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 124.822731][ T3315] EXT4-fs (loop6): orphan cleanup on readonly fs [ 124.829620][ T3315] EXT4-fs error (device loop6): ext4_free_blocks:5685: comm syz.6.700: Freeing blocks not in datazone - block = 0, count = 4096 [ 124.848599][ T3315] EXT4-fs (loop6): 1 orphan inode deleted [ 124.865257][ T3315] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue [ 124.898048][ T3335] xt_l2tp: wrong L2TP version: 0 [ 124.927513][ T2287] usb 7-1: device descriptor read/8, error -71 [ 125.050543][ T3333] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 125.079442][ T3346] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3346 comm=syz.8.707 [ 125.095275][ T3333] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 125.127026][ T3333] F2FS-fs (loop1): invalid crc value [ 125.146287][ T3333] F2FS-fs (loop1): Found nat_bits in checkpoint [ 125.169290][ T3333] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 125.178306][ T3333] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 125.809716][ T3379] netlink: 'syz.6.712': attribute type 12 has an invalid length. [ 125.992391][ T3378] exfat: Deprecated parameter 'utf8' [ 126.061063][ T3378] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 126.085697][ T3378] exFAT-fs (loop2): bogus allocation bitmap size(need : 2, cur : 10) [ 126.223202][ T3378] device syzkaller0 entered promiscuous mode [ 126.302808][ T3382] F2FS-fs (loop8): invalid crc value [ 126.346532][ T3391] syz.1.713[3391] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 126.346613][ T3391] syz.1.713[3391] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 126.388698][ T3382] F2FS-fs (loop8): Found nat_bits in checkpoint [ 126.492700][ T3382] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e4 [ 126.538129][ T3382] netlink: 4 bytes leftover after parsing attributes in process `syz.8.715'. [ 126.581140][ T3382] netlink: 12 bytes leftover after parsing attributes in process `syz.8.715'. [ 126.602087][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 126.614452][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 127.135103][ T3429] netlink: 4 bytes leftover after parsing attributes in process `syz.1.722'. [ 127.144134][ T15] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 127.611801][ T3439] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 127.623417][ T3439] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0002] [ 127.631597][ T3439] System zones: 1-12 [ 127.636126][ T3439] EXT4-fs (loop6): 1 truncate cleaned up [ 127.641979][ T3439] EXT4-fs (loop6): mounted filesystem without journal. Opts: nolazytime,init_itable=0x000000007fffffff,debug,lazytime,nombcache,noload,,errors=continue [ 127.717474][ T15] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.728390][ T15] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.738415][ T15] usb 9-1: New USB device found, idVendor=1d34, idProduct=0004, bcdDevice= 0.00 [ 127.748288][ T15] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.758060][ T15] usb 9-1: config 0 descriptor?? [ 127.817459][ T986] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 128.167501][ T986] usb 3-1: Using ep0 maxpacket: 32 [ 128.204753][ T3459] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 128.228376][ T15] hid-led 0003:1D34:0004.000C: unknown main item tag 0x3 [ 128.235701][ T15] hid-led 0003:1D34:0004.000C: item fetching failed at offset 3/5 [ 128.244097][ T15] hid-led: probe of 0003:1D34:0004.000C failed with error -22 [ 128.273934][ T3466] EXT4-fs (loop1): shut down requested (0) [ 128.287571][ T986] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.299251][ T3466] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 128.308129][ T986] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.318845][ T3466] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 128.328209][ T986] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 128.341554][ T3466] fuse: Unknown parameter '§4' [ 128.346612][ T986] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.358278][ T986] usb 3-1: config 0 descriptor?? [ 128.494537][ T3471] binder: 3468:3471 ioctl 4018620d 0 returned -22 [ 128.520966][ T2285] usb 9-1: USB disconnect, device number 2 [ 129.179105][ T3472] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 129.207512][ T3472] EXT4-fs (loop2): Mount option "noacl" will be removed by 3.5 [ 129.207512][ T3472] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 129.207512][ T3472] [ 129.237904][ T986] hub 3-1:0.0: USB hub found [ 129.257617][ T3472] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 129.287572][ T3472] EXT4-fs (loop2): can't mount with commit=2034, fs mounted w/o journal [ 129.337445][ T986] hub 3-1:0.0: config failed, can't read hub descriptor (err -90) [ 129.454942][ T24] kauditd_printk_skb: 13 callbacks suppressed [ 129.454952][ T24] audit: type=1400 audit(2000000072.926:1076): avc: denied { shutdown } for pid=3490 comm="syz.1.736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 129.537506][ T986] usbhid 3-1:0.0: can't add hid device: -71 [ 129.543804][ T3475] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12 [ 129.546582][ T986] usbhid: probe of 3-1:0.0 failed with error -71 [ 129.588171][ T986] usb 3-1: USB disconnect, device number 14 [ 129.596094][ T3485] FAT-fs (loop7): Directory bread(block 64) failed [ 129.617449][ T3475] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 129.617627][ T3485] FAT-fs (loop7): Directory bread(block 65) failed [ 129.628471][ T24] audit: type=1326 audit(2000000073.046:1077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3497 comm="syz.1.741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f781ed44749 code=0x7ffc0000 [ 129.668166][ T3475] F2FS-fs (loop8): invalid crc value [ 129.676343][ T3475] F2FS-fs (loop8): Found nat_bits in checkpoint [ 129.690130][ T3485] FAT-fs (loop7): Directory bread(block 66) failed [ 129.696767][ T3485] FAT-fs (loop7): Directory bread(block 67) failed [ 129.710126][ T3475] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 129.717350][ T3475] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 129.748573][ T24] audit: type=1326 audit(2000000073.046:1078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3497 comm="syz.1.741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f781ed44749 code=0x7ffc0000 [ 129.757467][ T3485] FAT-fs (loop7): Directory bread(block 68) failed [ 129.776169][ T24] audit: type=1326 audit(2000000073.046:1079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3497 comm="syz.1.741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f781ed44749 code=0x7ffc0000 [ 129.802071][ T3485] FAT-fs (loop7): Directory bread(block 69) failed [ 129.802115][ T3485] FAT-fs (loop7): Directory bread(block 70) failed [ 129.809011][ T24] audit: type=1326 audit(2000000073.046:1080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3497 comm="syz.1.741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f781ed44749 code=0x7ffc0000 [ 129.815228][ T3485] FAT-fs (loop7): Directory bread(block 71) failed [ 129.815268][ T3485] FAT-fs (loop7): Directory bread(block 72) failed [ 129.840102][ T24] audit: type=1326 audit(2000000073.046:1081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3497 comm="syz.1.741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f781ed44749 code=0x7ffc0000 [ 129.876004][ T3485] FAT-fs (loop7): Directory bread(block 73) failed [ 129.877075][ T3513] netlink: 4 bytes leftover after parsing attributes in process `syz.8.737'. [ 129.894587][ T24] audit: type=1326 audit(2000000073.066:1082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3497 comm="syz.1.741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f781ed44749 code=0x7ffc0000 [ 129.918170][ T24] audit: type=1326 audit(2000000073.066:1083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3497 comm="syz.1.741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f781ed44749 code=0x7ffc0000 [ 129.952916][ T24] audit: type=1326 audit(2000000073.066:1084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3497 comm="syz.1.741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f781ed44749 code=0x7ffc0000 [ 129.980313][ T24] audit: type=1326 audit(2000000073.066:1085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3497 comm="syz.1.741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f781ed44749 code=0x7ffc0000 [ 130.047448][ T15] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 130.082776][ T3515] FAT-fs (loop7): error, corrupted directory (invalid entries) [ 130.091267][ T3515] FAT-fs (loop7): Filesystem has been set read-only [ 130.098271][ T3515] FAT-fs (loop7): error, corrupted directory (invalid entries) [ 130.358771][ T3527] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3527 comm=syz.7.748 [ 130.447456][ T15] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 130.455704][ T15] usb 7-1: config 0 has no interface number 0 [ 130.472374][ T15] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.494168][ T15] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 130.514680][ T15] usb 7-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 130.524978][ T15] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.538873][ T15] usb 7-1: config 0 descriptor?? [ 130.617800][ T2290] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 130.711219][ T3542] EXT4-fs (loop7): Ignoring removed bh option [ 130.717919][ T3542] EXT4-fs (loop7): Test dummy encryption mode enabled [ 130.726394][ T3542] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 130.735110][ T3542] System zones: 0-5 [ 130.739917][ T3542] EXT4-fs (loop7): mounted filesystem without journal. Opts: debug,delalloc,bh,test_dummy_encryption,nodiscard,min_batch_time=0x0000000000000004,acl,debug_want_extra_isize=0x0000000000000040,,errors=continue [ 130.781918][ T3540] F2FS-fs (loop2): Found nat_bits in checkpoint [ 130.802881][ T3540] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 130.827478][ T2289] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 130.829728][ T3540] incfs: Backing dir is not set, filesystem can't be mounted. [ 130.843246][ T3540] incfs: mount failed -2 [ 130.887465][ T2290] usb 9-1: device descriptor read/64, error -71 [ 131.197494][ T15] usbhid 7-1:0.1: can't add hid device: -71 [ 131.203713][ T15] usbhid: probe of 7-1:0.1 failed with error -71 [ 131.212678][ T15] usb 7-1: USB disconnect, device number 15 [ 131.247482][ T2289] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 131.255946][ T2289] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 131.266865][ T2289] usb 2-1: config 220 has no interface number 2 [ 131.273440][ T2289] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 131.286736][ T2289] usb 2-1: config 220 interface 0 has no altsetting 0 [ 131.293740][ T2289] usb 2-1: config 220 interface 76 has no altsetting 0 [ 131.300759][ T2289] usb 2-1: config 220 interface 1 has no altsetting 0 [ 131.347457][ T2290] usb 9-1: device descriptor read/64, error -71 [ 131.458688][ T278] attempt to access beyond end of device [ 131.458688][ T278] loop2: rw=2049, want=45104, limit=40427 [ 131.477422][ T2289] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 131.486583][ T2289] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.494900][ T2289] usb 2-1: Product: syz [ 131.503674][ T2289] usb 2-1: Manufacturer: syz [ 131.508857][ T2289] usb 2-1: SerialNumber: syz [ 131.600036][ T3556] xt_bpf: check failed: parse error [ 131.628664][ T2290] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 131.659852][ T3556] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=3556 comm=syz.7.756 [ 131.672576][ T3556] netlink: 8 bytes leftover after parsing attributes in process `syz.7.756'. [ 131.681406][ T3556] device erspan0 entered promiscuous mode [ 132.069148][ T2289] usb 2-1: selecting invalid altsetting 0 [ 132.095765][ T2289] uvcvideo: Found UVC 7.01 device syz (8086:0b07) [ 132.102286][ T2289] uvcvideo: No valid video chain found. [ 132.189875][ T2290] usb 9-1: device descriptor read/64, error -71 [ 132.604866][ T2289] usb 2-1: USB disconnect, device number 20 [ 132.778909][ T3582] syz.7.760[3582] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 132.779200][ T3582] syz.7.760[3582] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 132.807375][ T2290] usb 9-1: device descriptor read/64, error -71 [ 132.937668][ T2290] usb usb9-port1: attempt power cycle [ 132.971534][ T3588] EXT4-fs error (device loop2): ext4_acquire_dquot:6224: comm syz.2.767: Failed to acquire dquot type 0 [ 132.983587][ T3588] EXT4-fs (loop2): 1 truncate cleaned up [ 132.989595][ T3588] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 133.006681][ T278] EXT4-fs error (device loop2): ext4_acquire_dquot:6224: comm syz-executor: Failed to acquire dquot type 0 [ 133.047493][ T2289] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 133.057759][ T15] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 133.160276][ T3592] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.167793][ T3592] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.175211][ T3592] device bridge_slave_0 entered promiscuous mode [ 133.182729][ T3592] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.189990][ T3592] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.197469][ T3592] device bridge_slave_1 entered promiscuous mode [ 133.230517][ T3592] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.237607][ T3592] bridge0: port 2(bridge_slave_1) entered forwarding state [ 133.244853][ T3592] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.251892][ T3592] bridge0: port 1(bridge_slave_0) entered forwarding state [ 133.269924][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 133.277929][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.285221][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.294558][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 133.303522][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.310671][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 133.318150][ T2289] usb 2-1: Using ep0 maxpacket: 16 [ 133.325566][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 133.333865][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.337560][ T15] usb 7-1: Using ep0 maxpacket: 32 [ 133.341464][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 133.347518][ T2290] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 133.376710][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 133.385404][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 133.393852][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 133.401822][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 133.409846][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 133.418618][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 133.426972][ T3597] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.434237][ T3597] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.445033][ T2289] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 133.456426][ T2289] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 133.467536][ T2289] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.478682][ T2289] usb 2-1: config 0 descriptor?? [ 133.491398][ T15] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.503740][ T3592] device veth0_vlan entered promiscuous mode [ 133.516917][ T15] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.523973][ T3592] device veth1_macvtap entered promiscuous mode [ 133.538257][ T15] usb 7-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 133.547475][ T15] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.556758][ T1016] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 133.570037][ T1016] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 133.581057][ T15] usb 7-1: config 0 descriptor?? [ 133.586478][ T1016] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 133.821769][ T3627] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 133.837233][ T3627] EXT4-fs error (device loop9): ext4_orphan_get:1421: comm syz.9.783: bad orphan inode 131083 [ 133.849751][ T3578] netlink: 4 bytes leftover after parsing attributes in process `syz.6.763'. [ 133.859008][ T2290] usb 9-1: device not accepting address 5, error -71 [ 133.866829][ T3578] netlink: 4 bytes leftover after parsing attributes in process `syz.6.763'. [ 133.876405][ T3627] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue [ 133.948102][ T2289] lua 0003:1E7D:2C2E.000D: collection stack underflow [ 133.955046][ T2289] lua 0003:1E7D:2C2E.000D: item 0 4 0 12 parsing failed [ 133.962401][ T2289] lua 0003:1E7D:2C2E.000D: parse failed [ 133.968024][ T2289] lua: probe of 0003:1E7D:2C2E.000D failed with error -22 [ 133.975512][ T3634] F2FS-fs (loop8): Unrecognized mount option "age_extent_cache" or missing value [ 134.167833][ T2289] usb 2-1: USB disconnect, device number 21 [ 134.179219][ T15] hid-generic 0003:0403:6030.000E: unknown main item tag 0x7 [ 134.190640][ T3644] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12 [ 134.190787][ T15] hid-generic 0003:0403:6030.000E: hidraw0: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.6-1/input0 [ 134.198606][ T3644] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 134.220280][ T3644] F2FS-fs (loop8): invalid crc value [ 134.233392][ T3644] F2FS-fs (loop8): Found nat_bits in checkpoint [ 134.253884][ T3644] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 134.260950][ T3644] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 134.277961][ T3649] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 134.318882][ T3649] EXT4-fs (loop9): invalid journal inode [ 134.333153][ T3649] EXT4-fs (loop9): can't get journal size [ 134.341666][ T3649] EXT4-fs (loop9): 1 truncate cleaned up [ 134.347412][ T3649] EXT4-fs (loop9): mounted filesystem without journal. Opts: norecovery,grpquota,sysvgroups,lazytime,,errors=continue [ 134.388050][ T3649] EXT4-fs (loop9): shut down requested (2) [ 134.394385][ T3649] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop9 ino=12 [ 134.404352][ T3649] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop9 ino=12 [ 134.418795][ T3649] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop9 ino=12 [ 134.457475][ T3649] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop9 ino=12 [ 134.472503][ T3649] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop9 ino=12 [ 134.492431][ T3649] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop9 ino=13 [ 134.537450][ T3649] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop9 ino=12 [ 134.546414][ T3649] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop9 ino=12 [ 134.556241][ T3649] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop9 ino=12 [ 134.565697][ T3649] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop9 ino=13 [ 134.574809][ T3649] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop9 ino=12 [ 134.584525][ T24] kauditd_printk_skb: 72 callbacks suppressed [ 134.584536][ T24] audit: type=1400 audit(2000000078.066:1154): avc: denied { rename } for pid=3648 comm="syz.9.791" name="file0" dev="loop9" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 134.655366][ T3680] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x44702e96, utbl_chksum : 0xe619d30d) [ 134.752042][ T24] audit: type=1400 audit(2000000078.226:1155): avc: denied { append } for pid=3679 comm="syz.8.801" name="rtc0" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 134.802186][ T24] audit: type=1400 audit(2000000078.256:1156): avc: denied { ioctl } for pid=3679 comm="syz.8.801" path="/dev/rtc0" dev="devtmpfs" ino=258 ioctlcmd=0x7005 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 135.005125][ T24] audit: type=1400 audit(2000000078.476:1157): avc: denied { sys_module } for pid=3708 comm="syz.1.813" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 135.128148][ T3727] EXT4-fs (loop7): Ignoring removed nobh option [ 135.139430][ T3727] EXT4-fs error (device loop7): ext4_ext_check_inode:500: inode #11: comm syz.7.820: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 135.159131][ T3727] EXT4-fs error (device loop7): ext4_orphan_get:1400: comm syz.7.820: couldn't read orphan inode 11 (err -117) [ 135.171844][ T3727] EXT4-fs (loop7): mounted filesystem without journal. Opts: sysvgroups,noload,nobh,noload,journal_dev=0x0000000000000004,norecovery,errors=continue,quota,,errors=continue [ 135.193253][ T3727] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:476: comm syz.7.820: Invalid block bitmap block 0 in block_group 0 [ 135.208132][ T3727] Quota error (device loop7): write_blk: dquota write failed [ 135.215878][ T3727] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 135.226347][ T3727] EXT4-fs error (device loop7): ext4_acquire_dquot:6224: comm syz.7.820: Failed to acquire dquot type 0 [ 135.243058][ T49] Quota error (device loop7): remove_tree: Getting block too big (0 >= 9) [ 135.252306][ T49] EXT4-fs error (device loop7): ext4_release_dquot:6260: comm kworker/u4:2: Failed to release dquot type 0 [ 135.277427][ T984] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 135.319696][ T3741] netlink: 8 bytes leftover after parsing attributes in process `syz.7.824'. [ 135.339926][ T3738] FAT-fs (loop8): Directory bread(block 64) failed [ 135.346784][ T3738] FAT-fs (loop8): Directory bread(block 65) failed [ 135.353797][ T3738] FAT-fs (loop8): Directory bread(block 66) failed [ 135.360858][ T3738] FAT-fs (loop8): Directory bread(block 67) failed [ 135.368432][ T3738] FAT-fs (loop8): Directory bread(block 68) failed [ 135.375304][ T3738] FAT-fs (loop8): Directory bread(block 69) failed [ 135.381971][ T3738] FAT-fs (loop8): Directory bread(block 70) failed [ 135.389613][ T3738] FAT-fs (loop8): Directory bread(block 71) failed [ 135.396457][ T3738] FAT-fs (loop8): Directory bread(block 72) failed [ 135.403243][ T3738] FAT-fs (loop8): Directory bread(block 73) failed [ 135.417026][ T3738] attempt to access beyond end of device [ 135.417026][ T3738] loop8: rw=524288, want=1164, limit=256 [ 135.428908][ T3738] attempt to access beyond end of device [ 135.428908][ T3738] loop8: rw=0, want=1164, limit=256 [ 135.471786][ T15] usb 7-1: USB disconnect, device number 16 [ 135.536610][ T3753] exFAT-fs (loop7): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 135.598294][ T3760] exfat: Unknown parameter 'keep_last_dots' [ 135.644613][ T3763] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=120 sclass=netlink_route_socket pid=3763 comm=syz.9.834 [ 135.645191][ T3760] tap0: tun_chr_ioctl cmd 2147767507 [ 135.664034][ T984] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xA4, skipping [ 135.683312][ T3753] attempt to access beyond end of device [ 135.683312][ T3753] loop7: rw=2049, want=304, limit=256 [ 135.701218][ T984] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 135.723297][ T984] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.732748][ T984] usb 2-1: config 0 descriptor?? [ 135.844065][ T3784] EXT4-fs (loop8): Ignoring removed nobh option [ 135.852155][ T3784] EXT4-fs (loop8): Ignoring removed bh option [ 135.859178][ T3784] EXT4-fs (loop8): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 135.880359][ T3784] EXT4-fs (loop8): mounted filesystem without journal. Opts: delalloc,nobarrier,init_itable=0x0000000000000003,inlinecrypt,data_err=ignore,nodiscard,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue [ 135.910912][ T3784] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:3342: comm syz.8.843: Allocating blocks 497-513 which overlap fs metadata [ 135.927183][ T3796] netlink: 67 bytes leftover after parsing attributes in process `syz.9.848'. [ 135.980493][ T984] usb 2-1: USB disconnect, device number 22 [ 136.068743][ T964] usb 8-1: new full-speed USB device number 7 using dummy_hcd [ 136.107470][ T15] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 136.267452][ T986] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 136.437458][ T2285] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 136.477505][ T15] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 136.489889][ T15] usb 7-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBA, skipping [ 136.517495][ T986] usb 10-1: Using ep0 maxpacket: 8 [ 136.617520][ T964] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 136.626831][ T964] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.635048][ T964] usb 8-1: Product: syz [ 136.639496][ T986] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 136.649333][ T964] usb 8-1: Manufacturer: syz [ 136.653940][ T964] usb 8-1: SerialNumber: syz [ 136.658637][ T15] usb 7-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 136.667698][ T986] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 136.677533][ T15] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.685498][ T15] usb 7-1: Product: syz [ 136.689979][ T986] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 136.700198][ T964] usb 8-1: config 0 descriptor?? [ 136.705199][ T15] usb 7-1: Manufacturer: syz [ 136.709817][ T15] usb 7-1: SerialNumber: syz [ 136.714673][ T986] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 136.728067][ T15] usb 7-1: config 0 descriptor?? [ 136.733365][ T986] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 136.742532][ T986] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.750796][ T3765] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 136.760400][ T2288] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 136.767556][ T3765] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 136.817450][ T2285] usb 9-1: config index 0 descriptor too short (expected 23569, got 27) [ 136.825903][ T2285] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 136.907484][ T2285] usb 9-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 136.916735][ T2285] usb 9-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 136.924876][ T2285] usb 9-1: Manufacturer: syz [ 136.929996][ T2285] usb 9-1: config 0 descriptor?? [ 137.007447][ T2288] usb 2-1: Using ep0 maxpacket: 8 [ 137.127496][ T2288] usb 2-1: config index 0 descriptor too short (expected 74, got 45) [ 137.135793][ T2288] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 137.147055][ T2288] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 137.157068][ T2288] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 137.168441][ T2288] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 137.178543][ T2288] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 137.191630][ T2288] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 137.200664][ T2288] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.013211][ T2288] usb 8-1: USB disconnect, device number 7 [ 138.060254][ T3842] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue [ 138.689577][ T986] usb 7-1: USB disconnect, device number 17 [ 138.968022][ T3854] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 138.980320][ T3854] EXT4-fs error (device loop7): ext4_orphan_get:1421: comm syz.7.870: bad orphan inode 131083 [ 138.991396][ T3854] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue [ 138.996610][ T2288] usb 10-1: USB disconnect, device number 2 [ 139.016974][ T3854] overlayfs: upper fs needs to support d_type. [ 139.031189][ T2557] EXT4-fs error (device loop7): ext4_readdir:263: inode #2: block 13: comm syz-executor: path /72/file1: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 139.052742][ T986] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 139.065091][ T3858] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 139.079732][ T3858] EXT4-fs error (device loop9): ext4_orphan_get:1421: comm syz.9.871: bad orphan inode 16 [ 139.090175][ T3858] ext4_test_bit(bit=15, block=4) = 0 [ 139.095467][ T3858] EXT4-fs (loop9): 1 orphan inode deleted [ 139.101486][ T3858] EXT4-fs (loop9): mounted filesystem without journal. Opts: jqfmt=vfsold,max_dir_size_kb=0x000000000000004a,resgid=0x0000000000000000,inode_readahead_blks=0x0000000000000100,acl,stripe=0x0000000000000001,init_itable=0x0000000000000008,journal_dev=0x000000007ffffffe,auto_da_alloc,,errors=continue [ 139.175796][ T2290] usb 9-1: USB disconnect, device number 7 [ 139.265828][ T3867] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.273215][ T3867] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.283889][ T3867] device bridge_slave_0 entered promiscuous mode [ 139.291474][ T3867] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.291662][ T3863] exFAT-fs (loop8): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 139.298753][ T3867] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.318858][ T986] usb 7-1: Using ep0 maxpacket: 16 [ 139.325816][ T3867] device bridge_slave_1 entered promiscuous mode [ 139.345016][ T24] audit: type=1400 audit(2000000082.816:1158): avc: denied { append } for pid=3862 comm="syz.8.875" path="/54/file2/memory.events" dev="loop8" ino=1048656 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 139.374711][ T24] audit: type=1400 audit(2000000082.856:1159): avc: denied { map } for pid=3862 comm="syz.8.875" path="/54/file2/memory.events" dev="loop8" ino=1048656 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 139.405991][ T3867] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.413182][ T3867] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.420475][ T3867] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.427664][ T3867] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.444656][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 139.455217][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.463369][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.474593][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 139.483276][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.490342][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.497477][ T986] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 139.511674][ T2285] usb 2-1: USB disconnect, device number 23 [ 139.526110][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 139.547076][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.554286][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.584987][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 139.597439][ T2288] usb 10-1: new full-speed USB device number 3 using dummy_hcd [ 139.615444][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 139.626887][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 139.629328][ T3880] erofs: (device loop8): mounted with root inode @ nid 36. [ 139.656321][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 139.675527][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 139.684532][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 139.697501][ T986] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 139.716009][ T986] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.725011][ T986] usb 7-1: Product: syz [ 139.730095][ T986] usb 7-1: Manufacturer: syz [ 139.734742][ T986] usb 7-1: SerialNumber: syz [ 139.739947][ T3867] device veth0_vlan entered promiscuous mode [ 139.740086][ T986] usb 7-1: config 0 descriptor?? [ 139.753921][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 139.770587][ T1016] device bridge_slave_1 left promiscuous mode [ 139.792822][ T1016] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.808692][ T1016] device bridge_slave_0 left promiscuous mode [ 139.828684][ T1016] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.840110][ T1016] device veth1_macvtap left promiscuous mode [ 139.848977][ T1016] device veth0_vlan left promiscuous mode [ 139.940355][ T3867] device veth1_macvtap entered promiscuous mode [ 139.947781][ T3899] netlink: 8 bytes leftover after parsing attributes in process `syz.1.888'. [ 139.957933][ T2288] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 139.968393][ T2288] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 139.998927][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 140.008353][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 140.092148][ T3914] kvm: pic: non byte write [ 140.137476][ T2288] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 140.149093][ T2288] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.160429][ T2288] usb 10-1: Product: syz [ 140.166872][ T2288] usb 10-1: Manufacturer: syz [ 140.172229][ T2288] usb 10-1: SerialNumber: syz [ 140.228564][ T3924] netlink: 16 bytes leftover after parsing attributes in process `syz.1.897'. [ 140.298289][ T3927] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 140.320672][ T3927] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 140.388407][ T1016] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 140.400125][ T1016] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 140.409074][ T1016] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 140.418663][ T1016] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 140.427039][ T1016] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 140.435657][ T1016] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 140.657541][ T2288] usb 10-1: 0:2 : does not exist [ 141.061239][ T2285] usb 7-1: USB disconnect, device number 18 [ 141.088130][ T2288] usb 10-1: USB disconnect, device number 3 [ 141.143941][ T9] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 141.858474][ T279] FAT-fs (loop1): error, invalid access to FAT (entry 0x0fff0000) [ 141.867679][ T279] FAT-fs (loop1): Filesystem has been set read-only [ 142.015516][ T4035] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.022780][ T4035] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.030569][ T4035] device bridge_slave_0 entered promiscuous mode [ 142.037897][ T4035] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.046011][ T4035] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.053806][ T4035] device bridge_slave_1 entered promiscuous mode [ 142.106613][ T4035] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.114070][ T4035] bridge0: port 2(bridge_slave_1) entered forwarding state [ 142.122665][ T4035] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.130197][ T4035] bridge0: port 1(bridge_slave_0) entered forwarding state [ 142.153407][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 142.171124][ T24] audit: type=1400 audit(2000000085.646:1160): avc: denied { mounton } for pid=4049 comm="syz.6.952" path="/proc/400/cgroup" dev="proc" ino=30194 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 142.194387][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.211750][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.257416][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 142.266098][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 142.277342][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.285682][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 142.294679][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 142.304119][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 142.313501][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.321853][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 142.338414][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 142.347276][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 142.355628][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 142.368516][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 142.387411][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 142.398049][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 142.408822][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 142.417963][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 142.426562][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 142.434276][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 142.443267][ T24] audit: type=1400 audit(2000000085.926:1161): avc: denied { read } for pid=4066 comm="syz.6.958" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 142.467211][ T4035] device veth0_vlan entered promiscuous mode [ 142.474269][ T24] audit: type=1400 audit(2000000085.926:1162): avc: denied { open } for pid=4066 comm="syz.6.958" path="/120/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 142.504583][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 142.513186][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 142.523523][ T4035] device veth1_macvtap entered promiscuous mode [ 142.564005][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 142.588240][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 142.596880][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 142.607784][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 142.616286][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 142.695512][ T4080] kvm: pic: non byte write [ 142.705482][ T4085] kvm: pic: non byte write [ 143.568407][ T4100] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 143.581641][ T4100] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 143.780279][ T4124] FAT-fs (loop9): error, corrupted file size (i_pos 196, 2097152) [ 143.812713][ T4124] FAT-fs (loop9): Filesystem has been set read-only [ 143.820642][ T4124] FAT-fs (loop9): error, corrupted file size (i_pos 196, 2097152) [ 143.830740][ T4135] FAT-fs (loop9): error, corrupted file size (i_pos 196, 2097152) [ 143.962592][ T4151] netlink: 20 bytes leftover after parsing attributes in process `syz.0.989'. [ 144.085062][ T4167] device veth0 entered promiscuous mode [ 144.096392][ T4167] device veth0 left promiscuous mode [ 144.127148][ T4177] device syz_tun entered promiscuous mode [ 144.145108][ T24] audit: type=1400 audit(2000000087.616:1163): avc: denied { write } for pid=4178 comm="syz.0.1001" name="vga_arbiter" dev="devtmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 144.178256][ T24] audit: type=1400 audit(2000000087.656:1164): avc: denied { read write } for pid=4174 comm="syz.6.999" name="file0" dev="fuse" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 144.208423][ T4181] loop: Write error at byte offset 9, length 3584. [ 144.216309][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 144.228378][ C0] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 144.306590][ T24] audit: type=1400 audit(2000000087.656:1165): avc: denied { open } for pid=4174 comm="syz.6.999" path="/132/file0/file0" dev="fuse" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 144.343394][ T4192] erofs: (device loop6): mounted with root inode @ nid 36. [ 144.354034][ T4197] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 144.369200][ T4192] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=46 [ 144.522292][ T4217] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1016'. [ 144.639273][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 144.677719][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 144.686558][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 144.698026][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 144.706314][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 144.714969][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 144.725492][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 144.735751][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 144.871986][ T24] audit: type=1326 audit(2000000088.346:1166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4264 comm="syz.5.1036" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6b24e99749 code=0x0 [ 145.350021][ T24] audit: type=1400 audit(2000000088.826:1167): avc: denied { attach_queue } for pid=4289 comm="syz.6.1045" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 145.612249][ T4301] device syzkaller0 entered promiscuous mode [ 145.681628][ T4305] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4305 comm=syz.8.1052 [ 145.782474][ T4318] kvm: pic: single mode not supported [ 145.782527][ T4318] kvm: pic: single mode not supported [ 145.788053][ T4318] kvm: pic: level sensitive irq not supported [ 145.802862][ T4318] kvm: pic: single mode not supported [ 145.809251][ T4318] kvm: pic: level sensitive irq not supported [ 145.828584][ T4318] kvm: pic: level sensitive irq not supported [ 145.836485][ T4318] kvm: pic: single mode not supported [ 145.845478][ T4318] kvm: pic: single mode not supported [ 145.848954][ T24] audit: type=1400 audit(2000000089.326:1168): avc: denied { map } for pid=4330 comm="syz.5.1062" path="socket:[32349]" dev="sockfs" ino=32349 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 145.882881][ T4324] pit: kvm: requested 51123 ns i8254 timer period limited to 200000 ns [ 145.907921][ T4324] pit: kvm: requested 9219 ns i8254 timer period limited to 200000 ns [ 145.916397][ T4324] pit: kvm: requested 99733 ns i8254 timer period limited to 200000 ns [ 145.925113][ T4324] pit: kvm: requested 191085 ns i8254 timer period limited to 200000 ns [ 145.940402][ T4324] pit: kvm: requested 158400 ns i8254 timer period limited to 200000 ns [ 145.963556][ T4337] Illegal XDP return value 4291080312, expect packet loss! [ 145.976803][ T4324] pit: kvm: requested 96381 ns i8254 timer period limited to 200000 ns [ 146.010606][ T4324] pit: kvm: requested 115657 ns i8254 timer period limited to 200000 ns [ 146.022259][ T4324] pit: kvm: requested 173485 ns i8254 timer period limited to 200000 ns [ 146.031932][ T4324] pit: kvm: requested 42742 ns i8254 timer period limited to 200000 ns [ 146.057664][ T4324] pit: kvm: requested 97219 ns i8254 timer period limited to 200000 ns [ 146.299992][ T2285] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 146.312899][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 146.321431][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 146.329805][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 146.340143][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 146.348618][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 146.356846][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 146.365605][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 146.373864][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 146.453891][ T4401] netlink: 'syz.6.1094': attribute type 6 has an invalid length. [ 146.507451][ T985] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 146.517611][ T2288] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 146.767810][ T2288] usb 1-1: Using ep0 maxpacket: 8 [ 146.807960][ T984] usb 7-1: new full-speed USB device number 19 using dummy_hcd [ 146.810958][ T4414] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1100'. [ 146.880496][ T985] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 146.887425][ T2288] usb 1-1: config 0 has an invalid interface number: 191 but max is 0 [ 146.890833][ T985] usb 10-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBA, skipping [ 146.900241][ T2288] usb 1-1: config 0 has no interface number 0 [ 146.916504][ T2288] usb 1-1: config 0 interface 191 has no altsetting 0 [ 147.077443][ T2288] usb 1-1: New USB device found, idVendor=0547, idProduct=2235, bcdDevice=a2.64 [ 147.086513][ T2288] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.095074][ T2288] usb 1-1: Product: syz [ 147.097661][ T985] usb 10-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 147.099390][ T2288] usb 1-1: Manufacturer: syz [ 147.113082][ T2288] usb 1-1: SerialNumber: syz [ 147.114923][ T985] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.121887][ T2288] usb 1-1: config 0 descriptor?? [ 147.136593][ T985] usb 10-1: Product: syz [ 147.146676][ T985] usb 10-1: Manufacturer: syz [ 147.156756][ T985] usb 10-1: SerialNumber: syz [ 147.167648][ T985] usb 10-1: config 0 descriptor?? [ 147.187403][ T4384] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 147.194391][ T4384] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 147.201607][ T984] usb 7-1: config 0 has an invalid interface number: 133 but max is 0 [ 147.211327][ T24] audit: type=1326 audit(2000000090.696:1169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4427 comm="syz.8.1106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ba2bb5749 code=0x7ffc0000 [ 147.237605][ T984] usb 7-1: config 0 has no interface number 0 [ 147.247699][ T24] audit: type=1326 audit(2000000090.696:1170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4427 comm="syz.8.1106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f1ba2bb5749 code=0x7ffc0000 [ 147.272216][ T24] audit: type=1326 audit(2000000090.696:1171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4427 comm="syz.8.1106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ba2bb5749 code=0x7ffc0000 [ 147.296219][ T24] audit: type=1326 audit(2000000090.696:1172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4427 comm="syz.8.1106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f1ba2bb5749 code=0x7ffc0000 [ 147.319645][ T24] audit: type=1326 audit(2000000090.696:1173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4427 comm="syz.8.1106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ba2bb5749 code=0x7ffc0000 [ 147.343506][ T24] audit: type=1326 audit(2000000090.696:1174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4427 comm="syz.8.1106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f1ba2bb5749 code=0x7ffc0000 [ 147.367056][ T24] audit: type=1326 audit(2000000090.696:1175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4427 comm="syz.8.1106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ba2bb5749 code=0x7ffc0000 [ 147.390537][ T24] audit: type=1326 audit(2000000090.696:1176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4427 comm="syz.8.1106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f1ba2bb5749 code=0x7ffc0000 [ 147.414192][ T24] audit: type=1326 audit(2000000090.696:1177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4427 comm="syz.8.1106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ba2bb5749 code=0x7ffc0000 [ 147.437736][ T984] usb 7-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 147.446753][ T984] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.447435][ T24] audit: type=1326 audit(2000000090.696:1178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4427 comm="syz.8.1106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7f1ba2bb5749 code=0x7ffc0000 [ 147.454828][ T984] usb 7-1: Product: syz [ 147.482537][ T984] usb 7-1: Manufacturer: syz [ 147.488538][ T984] usb 7-1: SerialNumber: syz [ 147.494987][ T984] usb 7-1: config 0 descriptor?? [ 147.735148][ T4432] udc-core: couldn't find an available UDC or it's busy [ 147.742583][ T4432] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 147.963892][ T984] usb 7-1: USB disconnect, device number 19 [ 148.057406][ T964] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 148.297676][ T986] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 148.307395][ T964] usb 6-1: Using ep0 maxpacket: 32 [ 148.427444][ T964] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 148.438671][ T964] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 148.449052][ T964] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 148.458089][ T964] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.466661][ T964] usb 6-1: config 0 descriptor?? [ 148.507968][ T964] hub 6-1:0.0: USB hub found [ 148.537466][ T986] usb 9-1: Using ep0 maxpacket: 8 [ 148.657450][ T986] usb 9-1: config 179 has an invalid interface number: 65 but max is 0 [ 148.665785][ T986] usb 9-1: config 179 has no interface number 0 [ 148.672244][ T986] usb 9-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 148.683772][ T986] usb 9-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 148.695223][ T986] usb 9-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 148.706427][ T986] usb 9-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 148.716683][ T986] usb 9-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 148.730185][ T964] hub 6-1:0.0: 1 port detected [ 148.735040][ T986] usb 9-1: config 179 interface 65 has no altsetting 0 [ 148.742057][ T986] usb 9-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 148.751614][ T985] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 148.759298][ T986] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.808750][ T986] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:179.65/input/input15 [ 149.007385][ T985] usb 7-1: Using ep0 maxpacket: 32 [ 149.027908][ T2288] usb 9-1: USB disconnect, device number 8 [ 149.034155][ T2288] xpad 9-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 149.127458][ T985] usb 7-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 149.136765][ T985] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.146232][ T985] usb 7-1: config 0 descriptor?? [ 149.245677][ T985] usb 1-1: USB disconnect, device number 4 [ 149.255111][ T2288] usb 10-1: USB disconnect, device number 4 [ 149.377459][ T986] hub 6-1:0.0: activate --> -90 [ 149.540875][ T4459] ================================================================== [ 149.549054][ T4459] BUG: KASAN: slab-out-of-bounds in tc_setup_flow_action+0x842/0x3280 [ 149.557364][ T4459] Read of size 8 at addr ffff88810ac5f6c0 by task syz.8.1119/4459 [ 149.565148][ T4459] [ 149.567469][ T4459] CPU: 1 PID: 4459 Comm: syz.8.1119 Not tainted syzkaller #0 [ 149.574876][ T4459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 149.585096][ T4459] Call Trace: [ 149.588386][ T4459] __dump_stack+0x21/0x24 [ 149.592693][ T4459] dump_stack_lvl+0x169/0x1d8 [ 149.597353][ T4459] ? show_regs_print_info+0x18/0x18 [ 149.602541][ T4459] ? thaw_kernel_threads+0x220/0x220 [ 149.607816][ T4459] print_address_description+0x7f/0x2c0 [ 149.613337][ T4459] ? tc_setup_flow_action+0x842/0x3280 [ 149.618870][ T4459] kasan_report+0xe2/0x130 [ 149.623404][ T4459] ? flow_action_cookie_create+0x28/0x90 [ 149.629027][ T4459] ? tc_setup_flow_action+0x842/0x3280 [ 149.634729][ T4459] __asan_report_load8_noabort+0x14/0x20 [ 149.640464][ T4459] tc_setup_flow_action+0x842/0x3280 [ 149.646086][ T4459] ? __kmalloc+0x1a7/0x330 [ 149.650665][ T4459] ? flow_rule_alloc+0x32/0x2c0 [ 149.655511][ T4459] mall_replace_hw_filter+0x293/0x810 [ 149.660895][ T4459] ? pcpu_block_update_hint_alloc+0x8bc/0xc50 [ 149.666986][ T4459] ? mall_set_parms+0x410/0x410 [ 149.671823][ T4459] ? tcf_exts_destroy+0xb0/0xb0 [ 149.676717][ T4459] ? pcpu_alloc+0xf8a/0x16b0 [ 149.681296][ T4459] ? mall_set_parms+0x19d/0x410 [ 149.686135][ T4459] mall_change+0x528/0x750 [ 149.690530][ T4459] ? __kasan_check_write+0x14/0x20 [ 149.695669][ T4459] ? mall_get+0xa0/0xa0 [ 149.699808][ T4459] ? tcf_chain_tp_insert_unique+0xac1/0xc10 [ 149.705672][ T4459] ? nla_strcmp+0xf4/0x140 [ 149.710081][ T4459] tc_new_tfilter+0x13f6/0x1a10 [ 149.714910][ T4459] ? mall_get+0xa0/0xa0 [ 149.719045][ T4459] ? tcf_gate_entry_destructor+0x20/0x20 [ 149.724660][ T4459] ? security_capable+0x87/0xb0 [ 149.729487][ T4459] ? ns_capable+0x8c/0xf0 [ 149.733794][ T4459] ? netlink_net_capable+0x125/0x160 [ 149.739054][ T4459] ? tcf_gate_entry_destructor+0x20/0x20 [ 149.744668][ T4459] rtnetlink_rcv_msg+0x800/0xb90 [ 149.749587][ T4459] ? rtnetlink_bind+0x80/0x80 [ 149.754324][ T4459] ? arch_stack_walk+0xee/0x140 [ 149.757404][ T985] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 149.759188][ T4459] ? stack_trace_save+0x98/0xe0 [ 149.759206][ T4459] ? stack_trace_snprint+0xf0/0xf0 [ 149.776839][ T4459] ? memcpy+0x56/0x70 [ 149.780880][ T4459] ? avc_has_perm+0x234/0x360 [ 149.785548][ T4459] ? __kasan_slab_alloc+0xbd/0xf0 [ 149.790676][ T4459] ? slab_post_alloc_hook+0x5d/0x2f0 [ 149.796085][ T4459] ? ___sys_sendmsg+0x1f0/0x260 [ 149.800921][ T4459] ? avc_has_perm_noaudit+0x240/0x240 [ 149.806300][ T4459] ? selinux_nlmsg_lookup+0x3fb/0x4a0 [ 149.811806][ T4459] netlink_rcv_skb+0x1e0/0x430 [ 149.816557][ T4459] ? rtnetlink_bind+0x80/0x80 [ 149.821410][ T4459] ? netlink_ack+0xb80/0xb80 [ 149.826232][ T4459] ? __netlink_lookup+0x387/0x3b0 [ 149.831264][ T4459] rtnetlink_rcv+0x1c/0x20 [ 149.835661][ T4459] netlink_unicast+0x876/0xa40 [ 149.840554][ T4459] netlink_sendmsg+0x88d/0xb30 [ 149.845480][ T4459] ? netlink_getsockopt+0x530/0x530 [ 149.850779][ T4459] ? security_socket_sendmsg+0x82/0xa0 [ 149.856247][ T4459] ? netlink_getsockopt+0x530/0x530 [ 149.861642][ T4459] ____sys_sendmsg+0x5a2/0x8c0 [ 149.866603][ T4459] ? __sys_sendmsg_sock+0x40/0x40 [ 149.871610][ T4459] ? import_iovec+0x7c/0xb0 [ 149.876132][ T4459] ___sys_sendmsg+0x1f0/0x260 [ 149.880933][ T4459] ? __sys_sendmsg+0x250/0x250 [ 149.885677][ T4459] ? __fdget+0x1a1/0x230 [ 149.889897][ T4459] __x64_sys_sendmsg+0x1e2/0x2a0 [ 149.894870][ T4459] ? __kasan_check_write+0x14/0x20 [ 149.899962][ T4459] ? ___sys_sendmsg+0x260/0x260 [ 149.904794][ T4459] ? __kasan_check_read+0x11/0x20 [ 149.909794][ T4459] ? exit_to_user_mode_prepare+0x9a/0xa0 [ 149.915399][ T4459] do_syscall_64+0x31/0x40 [ 149.919793][ T4459] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 149.925659][ T4459] RIP: 0033:0x7f1ba2bb5749 [ 149.930046][ T4459] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 149.949916][ T4459] RSP: 002b:00007f1ba161d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 149.958316][ T4459] RAX: ffffffffffffffda RBX: 00007f1ba2e0bfa0 RCX: 00007f1ba2bb5749 [ 149.966453][ T4459] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000004 [ 149.974410][ T4459] RBP: 00007f1ba2c39f91 R08: 0000000000000000 R09: 0000000000000000 [ 149.982363][ T4459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 149.990317][ T4459] R13: 00007f1ba2e0c038 R14: 00007f1ba2e0bfa0 R15: 00007fffe88f7e68 [ 149.997389][ T985] usb 1-1: Using ep0 maxpacket: 16 [ 149.998266][ T4459] [ 149.998275][ T4459] Allocated by task 4459: [ 149.998297][ T4459] __kasan_kmalloc+0xda/0x110 [ 150.014635][ T4459] __kmalloc+0x1a7/0x330 [ 150.018851][ T4459] tcf_idr_create+0x5f/0x790 [ 150.023421][ T4459] tcf_idr_create_from_flags+0x61/0x70 [ 150.028862][ T4459] tcf_gact_init+0x2b4/0x520 [ 150.033427][ T4459] tcf_action_init_1+0x3e1/0x670 [ 150.038340][ T4459] tcf_action_init+0x1e6/0x700 [ 150.043087][ T4459] tcf_exts_validate+0x215/0x510 [ 150.048001][ T4459] mall_set_parms+0x4b/0x410 [ 150.052572][ T4459] mall_change+0x45c/0x750 [ 150.057074][ T4459] tc_new_tfilter+0x13f6/0x1a10 [ 150.061917][ T4459] rtnetlink_rcv_msg+0x800/0xb90 [ 150.066853][ T4459] netlink_rcv_skb+0x1e0/0x430 [ 150.071606][ T4459] rtnetlink_rcv+0x1c/0x20 [ 150.076157][ T4459] netlink_unicast+0x876/0xa40 [ 150.080937][ T4459] netlink_sendmsg+0x88d/0xb30 [ 150.085913][ T4459] ____sys_sendmsg+0x5a2/0x8c0 [ 150.091085][ T4459] ___sys_sendmsg+0x1f0/0x260 [ 150.095927][ T4459] __x64_sys_sendmsg+0x1e2/0x2a0 [ 150.101118][ T4459] do_syscall_64+0x31/0x40 [ 150.105660][ T4459] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 150.112245][ T4459] [ 150.114835][ T4459] Last potentially related work creation: [ 150.117474][ T985] usb 1-1: config 1 has too many interfaces: 36, using maximum allowed: 32 [ 150.121150][ T4459] kasan_save_stack+0x3a/0x60 [ 150.121161][ T4459] __kasan_record_aux_stack+0xd2/0x100 [ 150.121170][ T4459] kasan_record_aux_stack_noalloc+0xb/0x10 [ 150.121188][ T4459] kvfree_call_rcu+0x10c/0x620 [ 150.130297][ T985] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 150.134812][ T4459] ip_ma_put+0xf7/0x140 [ 150.134822][ T4459] __ip_mc_dec_group+0x44e/0x520 [ 150.134839][ T4459] ip_mc_down+0x1b0/0x240 [ 150.141929][ T985] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 150.146539][ T4459] inetdev_event+0x2c7/0x1030 [ 150.146551][ T4459] raw_notifier_call_chain+0x90/0x100 [ 150.146559][ T4459] dev_close_many+0x330/0x4d0 [ 150.146576][ T4459] unregister_netdevice_many+0x44c/0x1980 [ 150.151995][ T985] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 36 [ 150.160258][ T4459] ip_tunnel_delete_nets+0x343/0x390 [ 150.160268][ T4459] ipip_exit_batch_net+0x22/0x30 [ 150.160278][ T4459] cleanup_net+0x5fb/0xb70 [ 150.160286][ T4459] process_one_work+0x6e1/0xba0 [ 150.160293][ T4459] worker_thread+0xa6a/0x13b0 [ 150.160301][ T4459] kthread+0x346/0x3d0 [ 150.160309][ T4459] ret_from_fork+0x1f/0x30 [ 150.160312][ T4459] [ 150.160321][ T4459] The buggy address belongs to the object at ffff88810ac5f600 [ 150.160321][ T4459] which belongs to the cache kmalloc-192 of size 192 [ 150.160329][ T4459] The buggy address is located 0 bytes to the right of [ 150.160329][ T4459] 192-byte region [ffff88810ac5f600, ffff88810ac5f6c0) [ 150.160342][ T4459] The buggy address belongs to the page: [ 150.281672][ T4459] page:ffffea00042b17c0 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10ac5f [ 150.291895][ T4459] flags: 0x4000000000000200(slab) [ 150.296899][ T4459] raw: 4000000000000200 dead000000000100 dead000000000122 ffff888100043380 [ 150.305466][ T4459] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 150.314021][ T4459] page dumped because: kasan: bad access detected [ 150.317470][ T985] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 150.320407][ T4459] page_owner tracks the page as allocated [ 150.320423][ T4459] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12c00(GFP_NOIO|__GFP_NOWARN|__GFP_NORETRY), pid 1, ts 1958298221, free_ts 0 [ 150.320438][ T4459] prep_new_page+0x179/0x180 [ 150.320454][ T4459] get_page_from_freelist+0x2235/0x23d0 [ 150.329628][ T985] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.335149][ T4459] __alloc_pages_nodemask+0x268/0x5f0 [ 150.335158][ T4459] new_slab+0x84/0x3f0 [ 150.335168][ T4459] ___slab_alloc+0x2a6/0x450 [ 150.335182][ T4459] __slab_alloc+0x63/0xa0 [ 150.350969][ T985] usb 1-1: Product: syz [ 150.354567][ T4459] __kmalloc+0x201/0x330 [ 150.354582][ T4459] bio_alloc_bioset+0x112/0x570 [ 150.354598][ T4459] blk_rq_map_kern+0x1e3/0x8c0 [ 150.360415][ T985] usb 1-1: Manufacturer: syz [ 150.368333][ T4459] __scsi_execute+0xe4/0x620 [ 150.368343][ T4459] scsi_probe_and_add_lun+0x418/0x33e0 [ 150.368351][ T4459] __scsi_scan_target+0x1d6/0xbc0 [ 150.368359][ T4459] scsi_scan_host_selected+0x343/0x5f0 [ 150.368366][ T4459] scsi_scan_host+0x39e/0x660 [ 150.368375][ T4459] virtscsi_probe+0x817/0x990 [ 150.368384][ T4459] virtio_dev_probe+0x8c0/0xb10 [ 150.368394][ T4459] page_owner free stack trace missing [ 150.380316][ T985] usb 1-1: SerialNumber: syz [ 150.382344][ T4459] [ 150.382349][ T4459] Memory state around the buggy address: [ 150.382362][ T4459] ffff88810ac5f580: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 150.469660][ T4459] ffff88810ac5f600: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 150.477793][ T4459] >ffff88810ac5f680: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 150.485831][ T4459] ^ [ 150.491961][ T4459] ffff88810ac5f700: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 150.500015][ T4459] ffff88810ac5f780: 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc fc [ 150.508061][ T4459] ================================================================== [ 150.516102][ T4459] Disabling lock debugging due to kernel taint [ 150.525467][ T985] usb 6-1: USB disconnect, device number 4 [ 150.531773][ T986] hub 6-1:0.0: hub_ext_port_status failed (err = -71) [ 150.607416][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 150.654827][ T2289] usb 1-1: USB disconnect, device number 5 [ 150.667497][ T2288] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 150.907356][ T2288] usb 10-1: Using ep0 maxpacket: 32 [ 151.027456][ T2288] usb 10-1: config 0 has an invalid interface number: 12 but max is 0 [ 151.037493][ T2288] usb 10-1: config 0 has no interface number 0 [ 151.043843][ T2288] usb 10-1: config 0 interface 12 has no altsetting 0 [ 151.207603][ T2288] usb 10-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 151.216728][ T2288] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.224817][ T2288] usb 10-1: Product: syz [ 151.229199][ T2288] usb 10-1: Manufacturer: syz [ 151.233934][ T2288] usb 10-1: SerialNumber: syz [ 151.239701][ T2288] usb 10-1: config 0 descriptor?? [ 151.246349][ T986] usb 7-1: USB disconnect, device number 20 [ 152.489890][ T985] usb 10-1: USB disconnect, device number 5 [ 159.007508][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!