last executing test programs: 7.399173275s ago: executing program 2 (id=622): ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x15, 0x7, 0x0, 0x180, 0x4, 0xfffffffffffffffe, 0xa000000000100000, 0x0, 0x7ff, 0x5, 0x0, 0x9, 0x4, 0x9e, 0x0, 0x5368], 0x1, 0x1d6690}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="cc0000001300e9990000000000000000ac1414aa000000000000000001000000ac1e000100000000000000000000000000000000000000000a00400000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="010000000000000000000000000000000900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000001000000000c0015005c073500e00e000008001f0002000000"], 0xcc}}, 0x4000) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) r5 = getpid() prlimit64(r5, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000001c0)='kfree\x00', r7}, 0x18) r8 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xd0f, 0x203, 0x0, {0x60, 0x0, 0x0, r9, {0x0, 0x2}, {0xffff, 0xffff}, {0xf}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x20, 0x2, {{0x10, 0x3, 0x1, 0x3, 0x400, 0x8}, [@TCA_NETEM_DELAY_DIST={0x4}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000380), 0x0, 0x4040811) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="f0cd6699da3959df2458167c7bfacb36048d5faa3a3601b5311013fbae95", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 7.256891467s ago: executing program 1 (id=624): syz_open_dev$tty1(0xc, 0x4, 0x1) (async) syz_open_procfs(0x0, &(0x7f0000000240)='fd/3\x00') (async) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000001000000e27f0000"], 0x50) (async, rerun: 32) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async, rerun: 32) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, 0x0) (rerun: 32) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r0}, 0x10) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000280)={0x50, 0x0, r2, {0x7, 0x2b, 0x0, 0x19101204, 0x0, 0x0, 0x1, 0xe, 0x0, 0x0, 0x100, 0x200}}, 0x50) (async) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004200)="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", 0x2000, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x78, 0x0, 0x4, {0x8001, 0xcd, 0x0, {0xfffffffffffffffe, 0x80, 0x10, 0x7ff, 0xf, 0x2, 0xf79c000, 0x8, 0x20b, 0x6000, 0x578, 0x0, r3, 0x80000003, 0xc}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) mount$bpf(0x0, 0x0, &(0x7f0000000040), 0x220000, &(0x7f0000000400)={[{@mode={'mode', 0x3d, 0x80000000}}, {}, {@mode={'mode', 0x3d, 0x7fff}}, {@gid}, {@gid={'gid', 0x3d, r3}}, {@mode}, {@mode={'mode', 0x3d, 0x4}}], [{@fsname={'fsname', 0x3d, 'sched_switch\x00'}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@smackfsroot={'smackfsroot', 0x3d, '/proc/sys/net/ipv4/tcp_congestion_control\x00'}}, {@seclabel}]}) (async, rerun: 32) bind$inet(r1, 0x0, 0x0) (async, rerun: 64) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async, rerun: 64) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000000002) (async) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) connect$unix(r5, &(0x7f0000000300)=@abs={0x0, 0x0, 0xb}, 0x6e) (async) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) (async) r8 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$tcp_congestion(r8, 0x0, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x41, 0x0) 7.230234558s ago: executing program 1 (id=625): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='kfree\x00', r2}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = dup(r3) fsetxattr$security_selinux(r4, &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:mouse_device_t:s0\x00', 0x20, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETAW(r7, 0x5407, &(0x7f0000000080)={0xd, 0x102, 0x4, 0xf001, 0x16, "deff07001a00"}) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000000)=0xff) (async) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000000)=0xff) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) (async) ioctl$KVM_RUN(r8, 0xae80, 0x0) syz_clone(0x400a1400, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x400a1400, 0x0, 0x0, 0x0, 0x0, 0x0) 7.09142373s ago: executing program 1 (id=627): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32, @ANYBLOB="00020099f85f38161b2e6090e9ed0b20ed", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe2$9p(0x0, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r5, 0x0, 0x0) listen(r5, 0xa) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r7, &(0x7f00000000c0)='syz0\x00', 0x1ff) r8 = syz_usb_connect$cdc_ecm(0x3, 0x4d, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x5d, 0x2, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x2}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x60, 0x0, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x3, 0x10, 0x7f}}}}}]}}]}}, 0x0) syz_usb_control_io(r8, 0x0, 0x0) r9 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) dup3(0xffffffffffffffff, r9, 0x0) 6.308780486s ago: executing program 2 (id=630): syz_usb_connect(0x3, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x94, 0x67, 0x7f, 0x10, 0xb95, 0x2791, 0xb96, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x81, 0x9, 0x0, 0x0, [{{0x9, 0x4, 0x7, 0x8f, 0x0, 0xff, 0xe6, 0x5a, 0x2}}]}}]}}, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0}) (async) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x2) (async) prctl$PR_SET_TIMERSLACK(0x1d, 0x6) (async) rt_sigaction(0x41, 0x0, 0x0, 0x8, &(0x7f00000001c0)) (async) syz_usb_connect$cdc_ncm(0x1, 0x81, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6f, 0x2, 0x1, 0x8, 0x20, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, "8c"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x7fffffff, 0x5, 0x3, 0x40}, {0x6, 0x24, 0x1a, 0xe6, 0x8}, [@acm={0x4, 0x24, 0x2, 0x5}, @network_terminal={0x7, 0x24, 0xa, 0x2, 0xc8, 0x6, 0xa8}, @dmm={0x7, 0x24, 0x14, 0xff62, 0x40}]}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0x6, 0x1, 0xa3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0xa, 0x1, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0xd, 0x3, 0x70}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x110, 0x7, 0x6, 0x4, 0x20, 0x9}, 0x127, &(0x7f0000000480)={0x5, 0xf, 0x127, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0xb9, "02a25413c349937d56bdbc9f5e5ae1ac"}, @ext_cap={0x7, 0x10, 0x2, 0x1e, 0x4, 0xd}, @ssp_cap={0x24, 0x10, 0xa, 0x23, 0x6, 0x57f, 0xf00f, 0x9, [0xff000f, 0xff0000, 0xffc000, 0x101c0cf, 0x0, 0xff0f]}, @generic={0xd9, 0x10, 0x4, "68692aa8dcc445d1dae522530b4eadbc69df18083250480f2930529fbb0482b8ecc6f7539c37c188d4f64e4a8d2e62066b8f1e48394ad9635fd80ef09b2bef22eca3d59dcd353cada83bc85fb199040d88e9fe837688f6fc35fb94b171bbc75410508e351f539219fa97e76bcba9e0377a60fd7293d2ffc3d68e26d2206d3a5d79d659dcd9fde1948333920db12f9b0b393d42f517a83582ec14b37e0ed0356fbe400e0f7f4b2269f3543d5fd27bdf6d5505a822b6a83a58450d656f4b57060dd31f4910607ab3195b1496c6370c0f9ec7351a4a2bbb"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0xb3, 0x8, 0x4}]}, 0x3, [{0x86, &(0x7f0000000380)=ANY=[]}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x430}}, {0x41, &(0x7f00000002c0)=@string={0x41, 0x3, "c6236451837273eb1d7763b97b85be727501f33dc6dd53b36c27fe62026b34d63a39e20b9f3e795b36568f0faf12c7ba8aa190992b8d3116659728e772fddb"}}]}) 4.193019408s ago: executing program 3 (id=642): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYRES8], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYRES32=r0, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000380)='./file0\x00', 0x10, &(0x7f0000000200), 0x0, 0x5ae, &(0x7f00000016c0)="$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") (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) r3 = getpid() (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'nicvf0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001e80)=ANY=[@ANYBLOB="300000001c0007fe78a434e646ecf0cfd7dc0c01", @ANYRES32=r5, @ANYBLOB="0800100014000100"/24], 0x30}}, 0x440c0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYRESHEX=r0], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) unshare(0x64000600) (async) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r9 = openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r9, 0xc0189436, &(0x7f00000004c0)=ANY=[@ANYBLOB="000000800000000006000000000000000400000000000000", @ANYRES32=r2, @ANYRESOCT, @ANYRES32=r8, @ANYBLOB="00000000b90500"/28, @ANYRES32, @ANYBLOB='\x00\x00\n\x00\t\x00'/28, @ANYRES32, @ANYBLOB="00000000bb34a45400"/28]) (async) ioctl$KVM_CHECK_EXTENSION(r8, 0xae03, 0x7a) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000a40)=ANY=[@ANYRESHEX], 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0xc000) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r10, 0x84009422, &(0x7f00000010c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r11) 4.131244099s ago: executing program 3 (id=643): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x58, 0x4, 0x5}, 0x50) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x240540c7, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) gettid() timer_create(0x0, 0x0, &(0x7f0000000380)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, 0x0, 0x0) close(r1) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xaf) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r7}, 0x10) socketpair(0x18, 0x0, 0x2, &(0x7f0000000280)) 4.107168079s ago: executing program 0 (id=644): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000410"], 0x50) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = socket$nl_route(0x10, 0x3, 0x0) connect$netlink(r5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000a00)='fib_table_lookup\x00', r6, 0x0, 0x400}, 0x18) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac14140f00000000000000001400020002000000ffffff53a2513743897e44000d0001007564703a"], 0x54}}, 0x0) 4.021736681s ago: executing program 1 (id=646): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0xffffffffffffffff, 0xa, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x7, 0x8000, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x5c, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000000000b7030000000000008500000070"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00', r5}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="cc0000001b00010000000000ffffffff00000000000000000000000000000001fc02000000000000000000000000000100000009000000000a"], 0xcc}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r9}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x88a, &(0x7f00000001c0)={[{@usrquota}, {@usrjquota, 0x22}, {@data_ordered}, {@noload}, {@grpid}, {@grpjquota, 0x22}, {@init_itable}, {@jqfmt_vfsold}, {@noblock_validity}]}, 0xfe, 0x44e, &(0x7f0000000900)="$eJzs3M1vG0UbAPDHdpw0bfMmbykfDS0ECiLiI2nSD3rgUgQSB5CQ4FDEKSRpFeo2qAkSrSIIHMIRVeKOOCLxF3ChXBBwQuIKd4QUoVwonIzW3k3dxE7ixIlL/ftJm8x4xpp5dnfs8azXAXSsoeRPLuJgRPwaEf3V7J0Vhqr/bq0sTP69sjCZi3L5jT9zlXp/rSxMZlWz5x2oZsrlDdpdejtiolSavprmR+cvvzc6d+36czOXJy5OX5y+Mn727KmTx7rPjJ9uSZx9SV8HP5w9euSVt268Nnn+xjs/fp3092BaXhtHqwxV925dT7a6sTbrq0nnutrYEZpSiIjkcBUr478/CtG7WtYfL3/S1s4Bu6pczpd7GhcvloF7WDJRBzpR9kaffP7Ntj2aetwVls/F6jrGrXSrlnRFPq1TTD8j7YahiDi/+M8XyRa7tA4BAFDr5rmIeLbe/C8fD9TU+196bWggIv4fEYci4r6IOBwR90dU6j4YEQ812f7aKyTr5z/l/m0FtkXJ/O+F9NrWnfO/bPYXA4U011eJv5i7MFOaPpHuk+Eo9iT5sQ3a+O6lXz5rVFY7/0u2pP1sLpj244+uNQt0UxPzEzuJudbyxxGDXfXiz63OeZP58ZGIGNxmGzNPf3W0Udnm8W+gBZPy8pcRT1WP/2KsiT+Ta3h9cuz5M+OnR/dFafrEaHZWrPfTz0uvN2p/R/G3wPLNcuyve/6vxj+Q2xcxd+36pcr12rnm21j67dOGn2m2e/53596spLvTxz6YmJ+/OhbRnXt1/ePjt5+b5bP6yfk/fLz++D8Ut/fEwxGRnMTHIuKRiHg07ftjEfF4RBzfIP4fXnzi3ebj32BVvoWS+Kc2O/5Re/ybTxQuff9N8/FnkuN/qpIaTh/ZyuvfVju4k30HAAAA/xX5ynfgc/mR1XQ+PzJS/Q7/4difL83OzT9zYfb9K1PV78oPRDGfrXT116yHjqVrw1l+fE3+ZLpu/Hmht5IfmZwtTbU7eOhwBxqM/8TvhXb3Dth17teCzmX8Q+cy/qFzGf/QuYx/6Fz1xv9HbegHsPc2ef/v3at+AHvP/B86l/EPncv4h47U8N74/I5u+ZdoU+Lb7p39VsPWE5G/S0K+ZxLFqFvUteUfs9hmoqduUbtfmQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFrj3wAAAP//j57jFA==") bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="40000000100001002cbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="842700000000000008001b00000000001800"], 0x40}, 0x1, 0x0, 0x0, 0x20000084}, 0x4800) 3.407219133s ago: executing program 4 (id=647): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x17, 0x11, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000005000000000000000000000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950057d600000000000018540000020000000000000000000000bf91000000000000b7020000020000008500000085000000b700000000000000950000000000"], &(0x7f0000000000)='GPL\x00', 0x7, 0x2e, &(0x7f0000000340)=""/46, 0x41100, 0x3, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x2, 0x2}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x6, &(0x7f00000003c0)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000000540)=[{0x5, 0x2, 0x2, 0x8}, {0x5, 0x4, 0x10, 0x8}, {0x1, 0x2}, {0x1, 0x4, 0x0, 0x4}, {0x5, 0x1, 0x9, 0x1}, {0x4, 0x1, 0x5, 0x9}], 0x10, 0x8}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000400)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1}, 0x50) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'tunl0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x40}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r5}, 0x10) 2.830607774s ago: executing program 3 (id=648): syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f0000000440)='./file0\x00', 0x2008410, &(0x7f0000001f80)=ANY=[@ANYBLOB="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", @ANYRES64], 0x1, 0x553d, &(0x7f00000024c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000680)='./file1\x00', 0x143041, 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) socket$tipc(0x1e, 0x5, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='sched_switch\x00', r5}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00"/20, @ANYRES32, @ANYRES16=r5], 0x48) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000000000)={0x2, 'tunl0\x00', {0x4}, 0x10}) syz_usb_connect$cdc_ncm(0x3, 0x87, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x1320022, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) setxattr$security_capability(&(0x7f0000000240)='./file0/file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) socket$inet6_udp(0xa, 0x2, 0x0) 2.276802145s ago: executing program 4 (id=649): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0)={[{@stripe={'stripe', 0x3d, 0xffffffffffffff81}}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@dax}, {@grpquota}, {@nobh}, {@user_xattr}, {@user_xattr}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)) chroot(&(0x7f0000000040)='./file0\x00') r0 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) symlinkat(&(0x7f0000000280)='./file0\x00', r0, &(0x7f0000000080)='./file0\x00') ioctl$RTC_UIE_ON(r0, 0x7003) 2.276245845s ago: executing program 0 (id=650): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x13, 0x5c, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x94) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000740)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe6, 0xe6, 0x7, [@datasec={0xc, 0x2, 0x0, 0xf, 0x2, [{0x3, 0x696, 0xffffff00}, {0x3, 0x9, 0x10}], '|R'}, @var={0x8, 0x0, 0x0, 0xe, 0x4, 0x2}, @enum={0x0, 0x3, 0x0, 0x6, 0x4, [{0x4, 0x2}, {0x1, 0xfff}, {0x4, 0xffffff09}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x1, 0xf7c}}, @func_proto={0x0, 0x7, 0x0, 0xd, 0x0, [{0x2, 0x5}, {0x4, 0x5}, {0xc, 0x1}, {0x8, 0x3}, {0x1, 0x6}, {0x9}, {0x1, 0x3}]}, @const={0x0, 0x0, 0x0, 0xa, 0x3}, @struct={0x5, 0x2, 0x0, 0x4, 0x0, 0x5, [{0xf, 0x3, 0x3}, {0xd, 0x5}]}]}, {0x0, [0x2e, 0x30, 0x5f, 0x30, 0x0]}}, &(0x7f0000000000)=""/118, 0x107, 0x76, 0x0, 0x8}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000580)={r0, 0x20, &(0x7f0000000400)={&(0x7f00000004c0)=""/163, 0xa3, 0x0, &(0x7f0000000380)=""/45, 0x2d}}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='qdisc_dequeue\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 2.275839195s ago: executing program 0 (id=651): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000000)={[{@nobarrier}]}, 0xff, 0x485, &(0x7f0000000480)="$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") (async) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000000)={[{@nobarrier}]}, 0xff, 0x485, &(0x7f0000000480)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) (async) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) getpid() (async) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FICLONE(r2, 0x40049409, r2) write(0xffffffffffffffff, &(0x7f00000000c0), 0x0) (async) write(0xffffffffffffffff, &(0x7f00000000c0), 0x0) statx(0xffffffffffffffff, 0x0, 0x400, 0x4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sysinfo(&(0x7f0000000c00)=""/184) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) setxattr$security_capability(&(0x7f0000000240)='./file0/file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000940)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x6, [@int={0xf, 0x0, 0x0, 0x1, 0x0, 0x31, 0x0, 0x79}]}, {0x0, [0x61, 0x5f, 0x0, 0x61]}}, &(0x7f0000000380)=""/176, 0x2e, 0xb0, 0x0, 0x9}, 0x28) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000940)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x6, [@int={0xf, 0x0, 0x0, 0x1, 0x0, 0x31, 0x0, 0x79}]}, {0x0, [0x61, 0x5f, 0x0, 0x61]}}, &(0x7f0000000380)=""/176, 0x2e, 0xb0, 0x0, 0x9}, 0x28) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) 2.275622565s ago: executing program 4 (id=652): syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2000844, &(0x7f00000006c0)=ANY=[@ANYBLOB="74696d655f6f66667365743d3078293030303030303030303030303466372c6e6f636173652c73686f77657865632c666c7573682c6e66732c6e6f646f74732c646f74732c6e66733d6e6f7374616c655f72726d616c2c756d61736b3d30303030303030303030303030303030303030303030322c646973636172642c6e6f646f74732c6e6f646f74732c6e6f646f74732c636865636b3d6f726d616c2c0013e1de9c60b7ceec49aaf3a7ab46c1e33d9b029d5d8ffc00a752b500"], 0x1, 0x274, &(0x7f0000000e80)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@remote, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc, 0x7}, 0x70bd2a, 0x3504, 0xa, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 1.990709821s ago: executing program 2 (id=653): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES8=r1], 0x20}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='personality\x00') prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'macvlan0\x00'}) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r7}, 0x10) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000680)=@base={0xa, 0x16, 0xb4, 0x3, 0x0, 0xffffffffffffffff, 0x5}, 0x50) sendmsg$nl_route(r2, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x64, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x64}}, 0x0) 1.855355673s ago: executing program 0 (id=654): prlimit64(0x0, 0xe, 0x0, 0x0) (async, rerun: 64) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x2803c60, &(0x7f0000000400)={[{@index_off}, {@nfs_export_on}, {@redirect_dir_off}, {@metacopy_off}], [{@smackfstransmute={'smackfstransmute', 0x3d, '{,^'}}, {@subj_user={'subj_user', 0x3d, '\x11{\\&[:'}}, {@fowner_gt={'fowner>', 0xee00}}]}) (async, rerun: 64) sched_setscheduler(0x0, 0x2, 0x0) (async) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r0, 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000000)=0x1) (async) pread64(r1, &(0x7f0000000080)=""/110, 0x6e, 0x5) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async, rerun: 64) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) (async, rerun: 64) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 64) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='afs_edit_dir\x00', r2, 0x0, 0x3}, 0x18) (async) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000140), 0x10) (async) sendmsg$can_bcm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000003c0)=[@text32={0x20, 0x0}], 0x1, 0x6c, 0x0, 0x0) (async) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000008604"]) (async) sendmsg$can_bcm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x6, 0x400, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "a464357177330772"}}, 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x800) 1.54046068s ago: executing program 0 (id=655): socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002d80)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000080)=@abs={0x1, 0x30, 0x4e31}, 0x6e, 0x0}}], 0x2, 0x40008004) 1.53866426s ago: executing program 4 (id=656): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0000}]}) personality(0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000a80)=ANY=[@ANYRES32, @ANYBLOB="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", @ANYBLOB="1800000000000000000000000000000018110000", @ANYRESHEX=r1], 0x0}, 0xffffffffffffffba) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000006c0)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x3921) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x8a883, 0xf) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f0000000080)={r6, 0x0, {0x0, 0x0, 0x0, 0x7, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc67be43ea6acc96e3a2503dc31c97214d58128bbad0099cebdc25f5ab60c9e69098c8b534464c516bdd8a0f350000000000000300", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x2, 0x9]}}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00000000000000000001000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) newfstatat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(0xee01, r8, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1a00000004000000000000000100000000000000", @ANYRESHEX=r4, @ANYBLOB="00010000000000000000000000400d1f6a0dc4058838916ffa4b5518806262558301598f9456a7d734f5fd4e81819d705d65a2e4f21d58909df066bc084abf8165aba0507cc6f8d80453197629e7f5427e7117fffead8570fccf23ba5e9fddb34386a28918c287d44f0c1a5bd8e2dfef1bb4254b24bc6b024aab2f6359652649a82ff3f7638e7cb2af", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00Az\x00'/28], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$BLKRRPART(r5, 0x125f, 0x0) r9 = add_key$keyring(&(0x7f0000000500), &(0x7f0000000540)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0x1d, r9, &(0x7f0000000200)='.dead\x00', &(0x7f00000002c0)='/dev/hwrng\x00') r10 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r10, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r11 = dup2(r10, r10) write$tun(r11, 0x0, 0x46) ioctl$TUNSETSTEERINGEBPF(r11, 0x800454e0, &(0x7f00000003c0)=r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r12 = syz_open_procfs(0x0, &(0x7f00000001c0)='environ\x00') preadv(r12, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000340)='sched_kthread_stop_ret\x00', r3}, 0x10) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYRESDEC=r7], 0x40}}, 0x0) 1.303154394s ago: executing program 1 (id=657): r0 = syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x8008, 0x0, 0x1, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x24, 0x25, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xf}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8001}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@ipv6_newroute={0x3c, 0x18, 0x1, 0x70bd28, 0x0, {0xa, 0x80, 0x0, 0x0, 0x0, 0x2}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x0, {0x0, 0x0, 0x10}}}}}, @RTA_EXPIRES={0x8, 0x17, 0xb}]}, 0x3c}}, 0x40094) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='devpts\x00', 0x2, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x1) 1.302824574s ago: executing program 3 (id=658): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000932737e3041674d11a3a17b35ca75ce55c8c9d70c96abfaf6829ba92ac5357030060e65c3d74fcd9a6b1837040f7599773193dfbd2bc04ba4c385a101349636f62477a874eb26b3e5a6f439400006ba913f88baa3e0a6220e152ed00391da6846bb6726aeff5a145201bc1068d410a91cc3ed0520e9686721439fe0fc9c00fcc5f0bd9050f0e131778f47cefd463ac3bf55726f8a5ab4716afe85ef605c9813c919176ee7c5c6a1507fc2e89f8a7f5dc3db877680300b45f60405cfa25ea717f55253db6eb95bfd8fa79026bbb1934f352630c043e58f5733b35d60536ebc4c2d2c3eb", @ANYRES16=r1, @ANYBLOB="2503feffffff000000001600000004000180"], 0x18}}, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000002c0)={0x0, 0x5, 0x7ff}) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000780)={r2, "022055f1c83515dfe14552abd5cd363a"}) 1.277265355s ago: executing program 2 (id=659): prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0xe64, 0x5, 0x10, "0062ba7d82000000000000000000f7ffffff00"}) r4 = syz_open_pts(r3, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0x5419, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r5}, 0x18) r6 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r6, 0x28, 0x1, &(0x7f0000007800)=0xffffffff00000041, 0x8) listen(r6, 0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) socket$nl_sock_diag(0x10, 0x3, 0x4) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x800, &(0x7f0000000c00)=ANY=[@ANYBLOB='iocharset=maccyrillic,discard,gid=', @ANYRES8, @ANYBLOB=',errors=remount-ro,iocharset=cp936,errors=continue,iocharset=cp863,errors=remount-ro,time_offset=0x0000000000000008,errors=remount-ro,utf8,uid=', @ANYRESHEX, @ANYBLOB="2c00da9e6281ed732202e92d385b355a8b25d5f39dadafad4bb7987fd8e29441bbc6e82871b48b3edc068c8629dccf3f5b446c25368d6872e0b16e23dbb4468ad8f7bf9f04ce7af7b48e32c74faaa501363aaf927834ab5356364b36f24655f86b3fff40d19d5bb954f3da29015cdb001605b6d29039f7b166c8b2f5"], 0x1, 0x1524, &(0x7f0000002280)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x40000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) 1.234293466s ago: executing program 4 (id=660): r0 = openat(0xffffffffffffffff, 0x0, 0x404a0, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x17, 0xf, 0x5, 0x41c82, 0xffffffffffffffff, 0x5, '\x00', 0x0, r0, 0x1, 0x0, 0x3, 0x5}, 0x50) (async) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0x78b}) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000040)=0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r3, 0x0) (async) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000480)={"43d064455ca79c3698dcca60005c1ba163b1d8f04d69d873792c0cbfc95dacc7cd39a49df12a052d0d8f1bd04b722b4f262437efc030e706916de618763f4600660b41f320706e06860fe29f1bb455ef507156d0a5738f130784a1aad99f74b3e592254eede14eb1b64af356cfaa8ff002c4deed28995dc5e6ee13c4a1b39ba72979c5f3ed91ff89e73e09f7f88fe58bce505f0500764c95c8bed7499213d10731b60ed6c8806ab094843295ac02f06dc46485bb56f2eb2eb3c5ef1e50a2431a2082b54c4b0e1357daaefd30e08322fb5f922f6d9fa3226faf7aeb9630aabe81617fe2849d8ab92fb80f07dfa9d831f4f7ef48923e28553f0c31cf1343d4c0d4dee937e639671ec2ceab9e5048d5bcd9f52a9c90ddd1fee1fda90a114fdf7298b7607c5294efdea04743a0045e96aae496fcb06636a8620f6e007ee5f5c24ab0d0f85cfb3a7820dbe2241b017e917eafb27d13feba7de3a28dd4c29c7959ae5c0724c848f8960fbea5f7b7a35ac32fa6bbf869030a1b61fb0d20a5631dcea68ffa7d456869c4e79f6033f38fa88ccd53dc1feb5381c01dd71ec0446e3633270b7fb961e04ad7e1f44e3fd0d96c724499e1ec2cff23a3d5a97952ec0a44dd967491dc45d4df48ad83027df0be02e35ca4c107bdf957f4c7a831dff89f998a2e1302445dc02b5fc38f7c8a6260723e535062319cb68cb309e91b88c55014bb436c5d9f6bf35cbe24605821baf9ea6aaa31cb2dd74e29863a0c71e3367846cffe17c4a29a76eb635e95c6d7f4d846f3369aedbfb70b3716c1c0234a0deb9abfac12686d45ba97952e8a50480c5f44e038b1a4d5cd9301d02b942afacfaa30b6ef315d72eaf41dddda4983608dc2f5d5e92392a141b0f2f8d34042d1a6cd45d9f9df4c83b8c8b55959d58843ab3564d3f49d81ed2ccd42bb8ad9c8e4b92c2df872c9383c88f4b1bbaf116fff233f55d99b43677eb29ad63e00ea4eee69c72a604b2cdd7641d9c682d1d4ea8e5bd0de857ac1a55b2d6374a4a18af8f27887ffb4b2168e764a5aa9b303a35873d2177de8c5a00be39726baa6d336b6a36b8ec6743454b4542f3fb3ca678a0ecca17ba7c2655931f38ed26219fde45ab8469db2a156953b028abec63c6b841c8bd9f9f0861e7aeb8195013444d2d326cad53718e40be06aea644573a9ef22b13692a17ed8a451af9e2de15b4bfce7c257063e28c07e4c3301a1bff37d72efc14d34ddabbb286f53264e0c8122f215de4f2e06f6e0472674c2476a61ad2e309abfed7e3367bc7373876507764e60b193e8c5abbe95f42adfc74dd25c9098dfba8272f7361d0000000000000000000000000000000000000000000000000000e000"}) (async) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x3, 0x8, 0x7f, 0x1, 0x0, 0x2, 0xfffffffffffff804, 0x0, 0x0, 0x0, 0x0, 0x7, 0x6, 0x1, 0x4], 0x8000000, 0x49340}) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) sched_setscheduler(r4, 0x2, &(0x7f0000000040)=0x6) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, 0x0, 0x0, &(0x7f0000000b00), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) (async) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r5, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) (async) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) (async) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x88, &(0x7f0000000140)={[{@nogrpid}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@errors_remount}, {@nodiscard}, {@quota}]}, 0x3, 0x438, &(0x7f0000000580)="$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") (async) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$eJzs3E1PE10UwPHTF0pbAmXx5DGaGG50o5sJVNdKYyAxNpEgNb4kJgNMtenYkpkGU2NEV26NH8IFYcmORPkCbNzpxo07NiYuZGEc0+kMhTKAlNIi/H8JmcPce6b3zgzk3AnD+r23T4t5W8vrFQnHlYRERDZEBiUsvpC3DbtxTLZ6JZf7fnw+f+f+g1uZbHZsUqnxzNSVtFJqYOjDsxcJr9tKr6wNPlr/nv629v/a2fXfU08KtirYqlSuKF1Nl79W9GnTULMFu6gpNWEaum2oQsk2rHp7ud6eN8tzc1Wll2b7k3OWYdtKL1VV0aiqSllVrKqKPNYLJaVpmupPCvaTW5yc1DMtJs+0eTA4IpaV0SMiktjRklvsyoAAAEBXNdf/YVHtrP+XLqxW+u4uD3j1/0osqP6/+qV+rG31f1xEAut///MD63/9YPX/zorodDlU/Y/jYSi2Y1eoEdYarYye9H5+Xa8fLg27AfU/AAAAAAAAAAAAAAAAAAAAAAD/gg3HSTmOk/K3/leviMRFxP8+IDUiIte7MGS00SGuP06Axot70QER8818bj5X33odVkXEFEOGJSW/3PvBU4v9N49UzaB8NBe8/IX5XMRtyeSl4OaPSKpHmvMdZ/xmdmxE1W3P75Hk1vy0pOS/4Px0YH5MLl3ckq9JSj7NSFlMmXXH0ch/OaLUjdvZpvyE2w8AAAAAgJNAU5sC1++atlt7PX9zfd38fCDSWF8PB67Po3Iu2t25AwAAAABwWtjV50XdNA1rjyAh+/dpPYge0ZH9Gf5tlv+3DEc30z0C/8O3NcW9nW0/LaEDnJZdgrC0kjVUm4067Cz8x0a79ZGJ0c5fQTc48+79z/Yd8NpyfJ+Zth5E9r4Bejr2CwgAAABAxzSKfn/PaHcHBAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAKdSJ/47W7TkCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAx8WfAAAA//+SWQVN") (async) connect$inet(0xffffffffffffffff, 0x0, 0x0) (async) recvmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x40081) 1.090406209s ago: executing program 4 (id=661): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000410"], 0x50) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = socket$nl_route(0x10, 0x3, 0x0) connect$netlink(r5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000a00)='fib_table_lookup\x00', r6, 0x0, 0x400}, 0x18) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac14140f00000000000000001400020002000000ffffff53a2513743897e44000d0001007564703a"], 0x54}}, 0x0) 1.040748369s ago: executing program 3 (id=662): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000580)='./bus\x00', 0x200080, &(0x7f0000000180), 0x1, 0x783, &(0x7f0000001000)="$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") ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000100)={0xfffffff7, 0xe, 0x9, 0x7fffffff, 0x6, "ce2bce09c06dcef378fb926065873956e576cc", 0x9, 0x6}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0x2f, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x21, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r1}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0600000004000000008000005c00000000000000", @ANYRES32, @ANYBLOB="0000c2069432f60e"], 0x48) pwrite64(r0, &(0x7f00000001c0)="645d6e878c56400f6c4507c3307ccd8722", 0x11, 0x6) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r3, 0x0) pipe2(&(0x7f00000000c0), 0x80000) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f0000000000)=0x2, 0x8) 659.090277ms ago: executing program 0 (id=663): socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x27) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_usb_connect$printer(0x0, 0x2d, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201010207010320b804020240000102030109021b00010105f07f09040001010094d066ccdfb6a3d0434f4f81a700000909050102ff0709e107"], &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r6, 0x20e, 0x5ee, 0xfd000004, &(0x7f00000004c0)="b9180bb7600a070c009e40f086dd1fff310005e03300fd010010ac14142ee0080001c699da153f0ae0e6e380f60115f683317585d7472be0ab4439f0f570ff155bc5f73ba3f8bb99a6e8ded1ce485cf058105cd981b42493481cd659416a2e10c9119664f36eb00b333c20c9ec0c222d644bdcb178c1cc53d6960fbb842d6a33dfcde3a1e1848135214baf139753866cadcbe3ce52505e992818cc452bee339d9ab076f484020eaa348a21d7911e4c44905256ec2cc54cca47a198b00c10aff62a4bed43a2ebcad92743fb22c593f28fd4bb7c703cde9cae0569d4c8d9a823f2c12863f7a6c0cf88ed22aae4f6f084508833b61429a25773eedf63dd9f33d430f2a0a30a7761db16fe0f743b95ded898c28aac1256ce2751b3d738899b8b19d9052b7f13ff94", 0x0, 0x31, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ptrace$PTRACE_GETSIGMASK(0x420a, r0, 0x8, &(0x7f0000000040)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x18) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000011, 0x28011, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 92.394758ms ago: executing program 1 (id=664): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x800040, &(0x7f0000000340), 0x1, 0x597, &(0x7f0000001140)="$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") r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xa, 0x4, 0x4, 0x5, 0x2}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r3, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%ps \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) bind$netlink(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x143041, 0x0) syz_mount_image$msdos(&(0x7f00000011c0), &(0x7f0000001200)='./file0\x00', 0x2000010, &(0x7f0000000040)={[{@fat=@allow_utime={'allow_utime', 0x3d, 0x5a6c}}]}, 0x1, 0x11aa, &(0x7f0000001240)="$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") unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) waitid(0x0, r2, 0x0, 0x8, 0x0) waitid(0x1000000000000000, 0x0, 0x0, 0x4, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) fcntl$lock(r6, 0x5, &(0x7f0000000200)={0x0, 0x2, 0x8, 0xffffffffffffdfff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x7, 0x4, 0x8, 0x0, 0x30500, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, @void, @value, @value=r6}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000015c0)={0x1d, 0xf, &(0x7f0000001680)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x3ff}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x18) ptrace$ARCH_GET_GS(0x1e, r0, &(0x7f0000000000), 0x1004) 91.885978ms ago: executing program 2 (id=665): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@newlink={0x44, 0x10, 0x403, 0x0, 0x25dfdc00, {0x0, 0x0, 0x74, 0x0, 0x800}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ES={0x5, 0xa, 0x93}, @IFLA_MACSEC_INC_SCI={0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000801}, 0x24008804) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000080)={0x0, @loopback, @remote}, &(0x7f0000000200)=0xc) close(r1) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x90}, [@ldst={0x3, 0x0, 0xb}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$RNDGETENTCNT(r1, 0x80045200, &(0x7f0000000280)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000001c0)='sched_switch\x00', r4}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000000)=ANY=[@ANYRESDEC=r2], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 168.79µs ago: executing program 2 (id=666): r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = syz_clone(0x808200, &(0x7f0000000b40)="6723ae37d14fe6cf2f71f27f8c9f3309cba4a38b0468ab67e3a207d88b34768ce14ef81cd24cddcc1ac0733cf6efd3fc172f657117448843e5c96fd6d49e3c6be26c86c4a7372d6a69b8fccf08a77230a7597ec0d3823b53a4497b9e2d4d5b47e1e3de149d5f4a3c29361724fedd657dce42ed85ae53d4d90d8989b7d19cdab035a7703c91d8b5f7a0564319da1123726dbbf7dc5abe5aa3afca17588d5471157c8f6d949ca4ded28218204fa87e42d3195fc5642a9d71c1dee7e3feb790fc75f77b0a68ef", 0xc5, &(0x7f0000000540), &(0x7f0000000580), &(0x7f0000000c40)="bc627d3d7b54853afc54778c5ce35c7a6dfe9c462a6cb79c543e9186b6532ec7e9b027386b67b869ec05761dea4f1db4858128f43bc8e326c07cf677cacae13e189a0e7eedc0dc3af95277ef30ecca6f00d44c394b434b85fe3ebdbd3dd34c244640c14069fbb585b83892602695cb7c7f59f45cebb6b87d2017848851075b880196a65c04671b824a07f24c247cb594abd3dc4ceb3078f94d87968cf19f7f630443639134701fd7d91797ea5fdabe7d501c4aeeeb1ebff1a35ad713d1ec37") prlimit64(r1, 0x8, &(0x7f0000000000)={0x8, 0xfd}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) r6 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, 0xffffffffffffffff, 0x0) (async) lstat(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r4, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="927d074e379cae8244f5fe4bf945e42ec714775b9f945a18a11cf0bdb30f30b8a3bc9c060146a03837719e5f28672ede5289d96bdfe717f2ed", 0x39}], 0x1, &(0x7f00000007c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32=r4, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r3, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32=r6, @ANYRESOCT=0x0, @ANYRES32, @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r0, @ANYRESOCT=r8, @ANYRES32=r2, @ANYBLOB="000000001c00000000000000010000000200000048b9d1f1897ed0b60781c5201e05df21b8d4fac0133edc08d1e46788b021f4a6fb61d25fc7a99edc62026d63b4a67b3c8fbd", @ANYRES32=r3, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r3, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r3, @ANYRES32, @ANYRES8=r9, @ANYRES8, @ANYRES32=r3, @ANYRES32=r7, @ANYRES32=r9, @ANYBLOB='\x00\x00\x00\x00'], 0x118, 0x4000010}}], 0x1, 0x10) (async) clock_adjtime(0x0, &(0x7f0000000340)={0xffff, 0x0, 0x0, 0x0, 0x6733, 0x401, 0x0, 0x0, 0xab5, 0x0, 0x3b9ac9ff, 0x4000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfef, 0x0, 0x0, 0x1, 0xe52, 0x6}) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) (async) connect$unix(0xffffffffffffffff, 0x0, 0x0) (async) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES32], 0x48) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r11, 0x1, 0x3b, 0xffffffffffffffff, &(0x7f0000000000)=0xd) (async) r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000600)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r12, @ANYBLOB="0000f14d077a0000b704000001000000850000007800000095be0176f37f6538febcbf"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00'}, 0x18) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="660a0000000000006111740000000000180000000000000000000000005b9f640000009500000000"], &(0x7f0000000000)='GPL\x00'}, 0x80) (async) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0500000004000000ff0f00000700000000000000", @ANYRES32, @ANYRESHEX=r10], 0x48) (async) socket$netlink(0x10, 0x3, 0x0) 0s ago: executing program 3 (id=667): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet6(0xa, 0x802, 0x0) r1 = open(&(0x7f0000000080)='./file1\x00', 0x60c42, 0x86) preadv2(r1, &(0x7f0000000280)=[{&(0x7f0000000180)=""/190, 0xbe}], 0x1, 0x6, 0xfffffff5, 0xb) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18) r7 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x240, 0x0) ioctl$TIOCSETD(r7, 0x5423, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000000)=ANY=[], 0x18) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x6e23, 0xfffffdff, @loopback, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001840), 0x3b, 0x0) kernel console output (not intermixed with test programs): = 262144 [ 41.348500][ T708] WARNING: CPU: 1 PID: 708 at net/core/filter.c:3926 bpf_xdp_adjust_tail+0x1aa/0x1c0 [ 41.358001][ T708] Modules linked in: [ 41.361965][ T708] CPU: 1 PID: 708 Comm: syz.4.97 Not tainted syzkaller #0 [ 41.369071][ T708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2025 [ 41.379195][ T708] RIP: 0010:bpf_xdp_adjust_tail+0x1aa/0x1c0 [ 41.381168][ T5] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 41.385142][ T708] Code: 48 89 d3 e8 c8 41 fe fd 48 89 da e9 cb fe ff ff e8 8b 54 c4 fd c6 05 6f 1f 01 03 01 48 c7 c7 00 50 4f 85 89 de e8 c6 de cf 00 <0f> 0b 48 c7 c0 ea ff ff ff e9 68 ff ff ff 0f 1f 84 00 00 00 00 00 [ 41.385161][ T708] RSP: 0018:ffffc90000e577b8 EFLAGS: 00010246 [ 41.411241][ T297] usbhid 2-1:0.0: can't add hid device: -32 [ 41.412326][ T708] [ 41.418807][ T297] usbhid: probe of 2-1:0.0 failed with error -32 [ 41.424331][ T708] RAX: 361e63d2c9614d00 RBX: 0000000000040000 RCX: 0000000000080000 [ 41.424349][ T708] RDX: ffffc90002930000 RSI: 0000000000001dd9 RDI: 0000000000001dda [ 41.448998][ T708] RBP: ffffc90000e577f8 R08: dffffc0000000000 R09: ffffed103ee24e8b [ 41.457057][ T708] R10: ffffed103ee24e8b R11: 1ffff1103ee24e8a R12: ffffc90000e57928 [ 41.465108][ T708] R13: ffff888134b442fa R14: ffffc90000e57920 R15: 1ffff920001caf25 [ 41.473230][ T708] FS: 00007f454da056c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 41.482219][ T708] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 41.488861][ T708] CR2: 000000110c2baac8 CR3: 000000010d809000 CR4: 00000000003506a0 [ 41.496902][ T708] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 41.504945][ T708] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 41.512965][ T708] Call Trace: [ 41.516293][ T708] ? 0xffffffffa002e3b4 [ 41.520485][ T708] bpf_prog_f476d5219b92964a+0x15/0xc4c [ 41.526097][ T708] bpf_dispatcher_xdp_func+0x1f/0x30 [ 41.531439][ T708] do_xdp_generic+0x78a/0x1480 [ 41.536432][ T708] ? generic_xdp_tx+0x470/0x470 [ 41.541374][ T708] ? __kasan_check_read+0x11/0x20 [ 41.546537][ T708] ? skb_put+0x10e/0x1f0 [ 41.550915][ T708] tun_get_user+0x216b/0x3090 [ 41.555696][ T708] ? tun_do_read+0x1c00/0x1c00 [ 41.560496][ T708] ? do_futex+0x1210/0x1210 [ 41.565068][ T708] ? avc_policy_seqno+0x1b/0x70 [ 41.569944][ T708] ? selinux_file_permission+0x2a5/0x510 [ 41.575810][ T708] ? fsnotify_perm+0x66/0x4b0 [ 41.580531][ T708] tun_chr_write_iter+0x1bf/0x270 [ 41.585679][ T708] vfs_write+0x725/0xd60 [ 41.589979][ T708] ? kernel_write+0x3c0/0x3c0 [ 41.594754][ T708] ? futex_exit_release+0x1d0/0x1d0 [ 41.600000][ T708] ? fput_many+0x15a/0x1a0 [ 41.604489][ T708] ? __fget_files+0x2c4/0x320 [ 41.609214][ T708] ? __fdget_pos+0x1f7/0x380 [ 41.613854][ T708] ? ksys_write+0x71/0x240 [ 41.618288][ T708] ksys_write+0x140/0x240 [ 41.622657][ T708] ? __ia32_sys_read+0x90/0x90 [ 41.627459][ T708] ? __kasan_check_read+0x11/0x20 [ 41.632557][ T708] __x64_sys_write+0x7b/0x90 [ 41.637171][ T708] do_syscall_64+0x31/0x40 [ 41.641638][ T708] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 41.647549][ T708] RIP: 0033:0x7f454ef9b97f [ 41.652007][ T708] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 41.671768][ T708] RSP: 002b:00007f454da05000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 41.680257][ T708] RAX: ffffffffffffffda RBX: 00007f454f1f3fa0 RCX: 00007f454ef9b97f [ 41.688315][ T708] RDX: 000000000000fed7 RSI: 00002000000002c0 RDI: 00000000000000c8 [ 41.696342][ T708] RBP: 00007f454f01ff91 R08: 0000000000000000 R09: 0000000000000000 [ 41.704349][ T708] R10: 000000000000fed7 R11: 0000000000000293 R12: 0000000000000000 [ 41.712370][ T708] R13: 00007f454f1f4038 R14: 00007f454f1f3fa0 R15: 00007ffd83884958 [ 41.720361][ T708] ---[ end trace 16d607995ac14537 ]--- [ 41.725860][ T708] Illegal XDP return value 4294967274, expect packet loss! [ 41.771191][ T5] usb 3-1: config index 0 descriptor too short (expected 3133, got 61) [ 41.779750][ T5] usb 3-1: config 0 has an invalid interface number: 156 but max is 1 [ 41.788789][ T5] usb 3-1: config 0 has an invalid descriptor of length 248, skipping remainder of the config [ 41.799485][ T5] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 41.808573][ T5] usb 3-1: config 0 has no interface number 0 [ 41.815065][ T5] usb 3-1: config 0 interface 156 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 41.825241][ T5] usb 3-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 41.851762][ T5] usb 3-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 41.862315][ T5] usb 3-1: config 0 interface 156 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 41.875774][ T5] usb 3-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 41.885036][ T5] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.176892][ T5] usb 3-1: config 0 descriptor?? [ 42.231907][ T5] usb 3-1: MIDIStreaming interface descriptor not found [ 42.307956][ T729] 9pnet: Insufficient options for proto=fd [ 42.731000][ T412] usb 3-1: USB disconnect, device number 4 [ 42.895911][ T324] usb 2-1: USB disconnect, device number 3 [ 42.975866][ T735] FAT-fs (loop1): Unrecognized mount option "time_offset=0x)0000000000004f7" or missing value [ 43.125881][ T739] device ip6tnl1 entered promiscuous mode [ 43.134008][ T739] device veth0 entered promiscuous mode [ 43.141679][ T738] device veth0 left promiscuous mode [ 43.147377][ T24] kauditd_printk_skb: 5 callbacks suppressed [ 43.147388][ T24] audit: type=1400 audit(1758638012.430:283): avc: denied { getopt } for pid=738 comm="syz.0.105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 43.358739][ T733] F2FS-fs (loop3): invalid crc value [ 43.509848][ T24] audit: type=1400 audit(1758638012.800:284): avc: denied { read write } for pid=742 comm="syz.4.106" name="ppp" dev="devtmpfs" ino=152 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 43.552522][ T733] F2FS-fs (loop3): Found nat_bits in checkpoint [ 43.571080][ T24] audit: type=1400 audit(1758638012.830:285): avc: denied { open } for pid=742 comm="syz.4.106" path="/dev/ppp" dev="devtmpfs" ino=152 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 43.601416][ T24] audit: type=1400 audit(1758638012.860:286): avc: denied { setopt } for pid=745 comm="syz.2.107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 43.623533][ T24] audit: type=1400 audit(1758638012.860:287): avc: denied { getopt } for pid=745 comm="syz.2.107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 43.635642][ T752] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 43.644370][ T24] audit: type=1326 audit(1758638012.860:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=748 comm="syz.0.108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcdef76ec9 code=0x7ffc0000 [ 43.653749][ T733] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 43.677049][ T24] audit: type=1326 audit(1758638012.860:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=748 comm="syz.0.108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=201 compat=0 ip=0x7efcdef76ec9 code=0x7ffc0000 [ 43.708109][ T24] audit: type=1326 audit(1758638012.860:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=748 comm="syz.0.108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcdef76ec9 code=0x7ffc0000 [ 43.739509][ T752] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1047: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 43.754208][ T24] audit: type=1326 audit(1758638012.860:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=748 comm="syz.0.108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efcdef76ec9 code=0x7ffc0000 [ 43.783926][ T24] audit: type=1326 audit(1758638012.860:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=748 comm="syz.0.108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcdef76ec9 code=0x7ffc0000 [ 43.783953][ T752] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.109: bg 0: block 248: padding at end of block bitmap is not set [ 43.850686][ T752] EXT4-fs error (device loop2): ext4_acquire_dquot:6226: comm syz.2.109: Failed to acquire dquot type 1 [ 43.862644][ T752] EXT4-fs (loop2): 1 truncate cleaned up [ 43.864163][ T5] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 43.882459][ T752] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 43.899543][ T752] capability: warning: `syz.2.109' uses 32-bit capabilities (legacy support in use) [ 44.253792][ T603] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 44.292673][ T764] F2FS-fs (loop1): Invalid segment count (1) [ 44.298706][ T764] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 44.324225][ T764] F2FS-fs (loop1): journaled quota format not specified [ 44.858844][ T5] usb 1-1: unable to get BOS descriptor or descriptor too short [ 44.941402][ T5] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 44.960939][ T5] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 3 [ 45.195431][ T5] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 45.204713][ T5] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.212967][ T5] usb 1-1: Product: syz [ 45.217235][ T5] usb 1-1: Manufacturer: syz [ 45.222264][ T5] usb 1-1: SerialNumber: syz [ 45.233886][ T5] usb 1-1: config 0 descriptor?? [ 45.281216][ T603] usb 3-1: Using ep0 maxpacket: 32 [ 45.521545][ T603] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 45.552267][ T603] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 45.731206][ T603] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 45.740402][ T603] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 45.749835][ T603] usb 3-1: Product: syz [ 45.754158][ T603] usb 3-1: Manufacturer: syz [ 45.760597][ T794] F2FS-fs (loop3): invalid crc value [ 45.772096][ T794] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 45.796666][ T794] F2FS-fs (loop3): Start checkpoint disabled! [ 45.801922][ T603] hub 3-1:4.0: USB hub found [ 45.808040][ T794] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 45.820625][ T794] attempt to access beyond end of device [ 45.820625][ T794] loop3: rw=0, want=45072, limit=40427 [ 45.833653][ T5] usb 1-1: USB disconnect, device number 2 [ 45.851166][ T324] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 46.031181][ T603] hub 3-1:4.0: 2 ports detected [ 46.451199][ T324] usb 5-1: config 0 has no interfaces? [ 46.457276][ T324] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 46.466625][ T324] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.499342][ T324] usb 5-1: config 0 descriptor?? [ 46.654437][ T761] serio: Serial port ptm0 [ 46.681361][ T603] hub 3-1:4.0: set hub depth failed [ 46.915098][ T603] usb 3-1: USB disconnect, device number 5 [ 46.953037][ T823] netlink: 140 bytes leftover after parsing attributes in process `syz.3.126'. [ 48.286870][ T849] mip6: mip6_destopt_init_state: spi is not 0: 3540254720 [ 48.620844][ T324] usb 5-1: USB disconnect, device number 4 [ 48.791501][ T888] raw_sendmsg: syz.4.145 forgot to set AF_INET. Fix it! [ 48.911147][ T323] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 48.922361][ T24] kauditd_printk_skb: 99 callbacks suppressed [ 48.922374][ T24] audit: type=1400 audit(1758638018.220:390): avc: denied { accept } for pid=890 comm="syz.4.146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 49.156899][ T894] netlink: 36 bytes leftover after parsing attributes in process `syz.4.147'. [ 49.166483][ T894] syz.4.147[894] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 49.166890][ T894] syz.4.147[894] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 49.246233][ T897] xt_hashlimit: max too large, truncated to 1048576 [ 49.301224][ T323] usb 2-1: config 1 has an invalid descriptor of length 218, skipping remainder of the config [ 49.311599][ T323] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 49.471163][ T323] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 49.480578][ T323] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.494617][ T323] usb 2-1: Product: syz [ 49.498956][ T24] audit: type=1400 audit(1758638018.790:391): avc: denied { write } for pid=898 comm="syz.0.149" name="loop-control" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 49.528367][ T323] usb 2-1: Manufacturer: syz [ 49.543260][ T323] usb 2-1: SerialNumber: syz [ 49.555615][ T24] audit: type=1400 audit(1758638018.790:392): avc: denied { open } for pid=898 comm="syz.0.149" path="/dev/loop-control" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 49.618842][ T905] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue [ 49.631079][ T905] ext4 filesystem being mounted at /32/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.684782][ T910] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 49.706946][ T24] audit: type=1400 audit(1758638019.000:393): avc: denied { mounton } for pid=908 comm="syz.2.152" path="/21/file0" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 49.753977][ T24] audit: type=1400 audit(1758638019.050:394): avc: denied { setattr } for pid=908 comm="syz.2.152" name="file0" dev="loop2" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 49.789381][ T917] overlayfs: './file1' not a directory [ 49.796261][ T865] udc-core: couldn't find an available UDC or it's busy [ 49.805222][ T865] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 49.813551][ T24] audit: type=1400 audit(1758638019.110:395): avc: denied { rename } for pid=908 comm="syz.2.152" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 49.827852][ T923] netlink: 8 bytes leftover after parsing attributes in process `syz.1.153'. [ 49.844834][ T923] netlink: 8 bytes leftover after parsing attributes in process `syz.1.153'. [ 49.853692][ T923] netlink: 8 bytes leftover after parsing attributes in process `syz.1.153'. [ 49.862606][ T923] netlink: 8 bytes leftover after parsing attributes in process `syz.1.153'. [ 49.871547][ T923] netlink: 8 bytes leftover after parsing attributes in process `syz.1.153'. [ 49.880487][ T923] netlink: 8 bytes leftover after parsing attributes in process `syz.1.153'. [ 49.889350][ T923] netlink: 8 bytes leftover after parsing attributes in process `syz.1.153'. [ 49.898301][ T923] netlink: 8 bytes leftover after parsing attributes in process `syz.1.153'. [ 49.911179][ T323] usb 2-1: 0:2 : does not exist [ 49.927510][ T323] usb 2-1: USB disconnect, device number 4 [ 49.988893][ T931] overlayfs: './bus' not a directory [ 50.021181][ T603] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 50.048575][ T24] audit: type=1400 audit(1758638019.340:396): avc: denied { read } for pid=939 comm="syz.1.158" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 50.049663][ T940] binder: 939:940 ioctl c0306201 0 returned -14 [ 50.080545][ T24] audit: type=1400 audit(1758638019.340:397): avc: denied { open } for pid=939 comm="syz.1.158" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 50.104891][ T24] audit: type=1400 audit(1758638019.340:398): avc: denied { ioctl } for pid=939 comm="syz.1.158" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 50.314242][ T938] F2FS-fs (loop4): fault_injection options not supported [ 50.322386][ T938] F2FS-fs (loop4): invalid crc value [ 50.329089][ T938] F2FS-fs (loop4): Found nat_bits in checkpoint [ 50.358907][ T938] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 50.433957][ T603] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 50.445248][ T603] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 50.455102][ T603] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 50.468283][ T603] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 50.477337][ T603] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.486094][ T603] usb 1-1: config 0 descriptor?? [ 50.834050][ T24] audit: type=1326 audit(1758638020.130:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=951 comm="syz.2.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0abdefec9 code=0x7ffc0000 [ 50.989977][ T603] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 51.007063][ T603] plantronics 0003:047F:FFFF.0002: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 51.191374][ T278] attempt to access beyond end of device [ 51.191374][ T278] loop4: rw=2049, want=45104, limit=40427 [ 51.301815][ T964] rtc_cmos 00:00: Alarms can be up to one day in the future [ 51.312043][ T963] rtc_cmos 00:00: Alarms can be up to one day in the future [ 51.392250][ T966] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 51.405698][ T966] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 51.414187][ T966] EXT4-fs error (device loop4): ext4_free_branches:1026: inode #13: comm syz.4.164: invalid indirect mapped block 2683928664 (level 1) [ 51.428327][ T966] EXT4-fs (loop4): Remounting filesystem read-only [ 51.435358][ T966] EXT4-fs (loop4): 1 truncate cleaned up [ 51.441360][ T966] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,dioread_nolock,errors=remount-ro,minixdf,jqfmt=vfsv0,usrjquota=." [ 51.458108][ T966] EXT4-fs (loop4): Quota file not on filesystem root. Journaled quota will not work [ 51.874126][ T324] rtc_cmos 00:00: Alarms can be up to one day in the future [ 51.952152][ T324] rtc_cmos 00:00: Alarms can be up to one day in the future [ 51.963965][ T324] rtc_cmos 00:00: Alarms can be up to one day in the future [ 51.980612][ T324] rtc_cmos 00:00: Alarms can be up to one day in the future [ 51.988288][ T324] rtc rtc0: __rtc_set_alarm: err=-22 [ 52.158933][ T977] F2FS-fs (loop3): Found nat_bits in checkpoint [ 52.221026][ T977] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 52.241148][ T976] attempt to access beyond end of device [ 52.241148][ T976] loop3: rw=2049, want=45104, limit=40427 [ 52.491177][ T324] usb 1-1: reset high-speed USB device number 3 using dummy_hcd [ 52.711498][ T279] attempt to access beyond end of device [ 52.711498][ T279] loop3: rw=2049, want=45112, limit=40427 [ 52.820027][ T1006] EXT4-fs (loop4): error: journal path ./file0 is not a block device [ 52.898020][ T25] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 53.141265][ T25] usb 2-1: Using ep0 maxpacket: 32 [ 53.261410][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 53.374829][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 53.385098][ T25] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 53.394513][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.404162][ T25] usb 2-1: config 0 descriptor?? [ 53.450632][ T996] F2FS-fs (loop2): Found nat_bits in checkpoint [ 53.516090][ T1020] validate_nla: 3 callbacks suppressed [ 53.516099][ T1020] netlink: 'syz.3.173': attribute type 3 has an invalid length. [ 53.535268][ T1020] netlink: 'syz.3.173': attribute type 3 has an invalid length. [ 53.585870][ T996] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 53.641270][ T996] attempt to access beyond end of device [ 53.641270][ T996] loop2: rw=2049, want=45104, limit=40427 [ 53.940482][ T25] savu 0003:1E7D:2D5A.0003: hiddev97,hidraw1: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 54.001445][ T5] usb 1-1: USB disconnect, device number 3 [ 54.158820][ T1004] fuse: Unknown parameter 'ft 1fF$00000000000000000003' [ 54.201666][ T625] usb 2-1: USB disconnect, device number 5 [ 54.346687][ T277] attempt to access beyond end of device [ 54.346687][ T277] loop2: rw=2049, want=45112, limit=40427 [ 54.365767][ T1034] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 54.372969][ T7] Bluetooth: hci0: Frame reassembly failed (-84) [ 54.545348][ T1041] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 54.554723][ T1041] ext4 filesystem being mounted at /28/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 54.580016][ T24] kauditd_printk_skb: 47 callbacks suppressed [ 54.580029][ T24] audit: type=1326 audit(1758638023.870:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1040 comm="syz.2.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0abdefec9 code=0x7ffc0000 [ 54.609769][ T24] audit: type=1326 audit(1758638023.890:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1040 comm="syz.2.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fc0abdee617 code=0x7ffc0000 [ 54.633492][ T24] audit: type=1326 audit(1758638023.890:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1040 comm="syz.2.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0abdefec9 code=0x7ffc0000 [ 54.658526][ T24] audit: type=1326 audit(1758638023.890:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1040 comm="syz.2.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc0abdee710 code=0x7ffc0000 [ 54.681844][ T24] audit: type=1326 audit(1758638023.890:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1040 comm="syz.2.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fc0abdf16f7 code=0x7ffc0000 [ 54.705166][ T24] audit: type=1326 audit(1758638023.890:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1040 comm="syz.2.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc0abdefec9 code=0x7ffc0000 [ 54.728601][ T24] audit: type=1326 audit(1758638023.890:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1040 comm="syz.2.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fc0abdf16f7 code=0x7ffc0000 [ 54.759275][ T24] audit: type=1326 audit(1758638023.890:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1040 comm="syz.2.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fc0abdeeb2a code=0x7ffc0000 [ 54.784160][ T24] audit: type=1326 audit(1758638023.890:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1040 comm="syz.2.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0abdefec9 code=0x7ffc0000 [ 54.808021][ T24] audit: type=1326 audit(1758638023.890:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1040 comm="syz.2.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=332 compat=0 ip=0x7fc0abdefec9 code=0x7ffc0000 [ 54.922601][ T1052] tipc: Started in network mode [ 54.928010][ T1052] tipc: Own node identity ac14141b, cluster identity 4711 [ 54.935973][ T1052] tipc: New replicast peer: 255.255.255.255 [ 54.942670][ T1052] tipc: Enabled bearer , priority 10 [ 56.071137][ T393] tipc: 32-bit node address hash set to 1b1414ac [ 56.217022][ T1074] tipc: Started in network mode [ 56.222171][ T1074] tipc: Own node identity ac14140f, cluster identity 4711 [ 56.229737][ T1074] tipc: New replicast peer: 255.255.255.83 [ 56.236010][ T1074] tipc: Enabled bearer , priority 10 [ 56.254452][ T603] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 56.421104][ T323] Bluetooth: hci0: command 0x1003 tx timeout [ 56.427814][ T1037] Bluetooth: hci0: sending frame failed (-49) [ 56.531179][ T603] usb 4-1: Using ep0 maxpacket: 16 [ 56.662867][ T603] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 56.674541][ T603] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 56.686205][ T603] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 56.700638][ T603] usb 4-1: New USB device found, idVendor=056a, idProduct=0029, bcdDevice= 0.00 [ 56.711315][ T603] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.753203][ T603] usb 4-1: config 0 descriptor?? [ 57.183726][ T1081] FAULT_INJECTION: forcing a failure. [ 57.183726][ T1081] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 57.199497][ T1081] CPU: 1 PID: 1081 Comm: syz.0.191 Tainted: G W syzkaller #0 [ 57.208200][ T1081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2025 [ 57.218266][ T1081] Call Trace: [ 57.221565][ T1081] __dump_stack+0x21/0x24 [ 57.225926][ T1081] dump_stack_lvl+0x169/0x1d8 [ 57.230661][ T1081] ? show_regs_print_info+0x18/0x18 [ 57.235879][ T1081] dump_stack+0x15/0x1c [ 57.240036][ T1081] should_fail+0x3c1/0x510 [ 57.244459][ T1081] should_fail_usercopy+0x1a/0x20 [ 57.249492][ T1081] _copy_from_user+0x20/0xd0 [ 57.254107][ T1081] core_sys_select+0x2d1/0x650 [ 57.258897][ T1081] ? poll_select_set_timeout+0x160/0x160 [ 57.264538][ T1081] ? rw_verify_area+0x1c0/0x360 [ 57.269424][ T1081] ? sigprocmask+0x1b0/0x1b0 [ 57.274043][ T1081] ? putname+0xfe/0x150 [ 57.278223][ T1081] __se_sys_pselect6+0x287/0x310 [ 57.283195][ T1081] ? __x64_sys_pselect6+0x100/0x100 [ 57.288526][ T1081] ? __ia32_sys_read+0x90/0x90 [ 57.293283][ T1081] __x64_sys_pselect6+0xe5/0x100 [ 57.298234][ T1081] do_syscall_64+0x31/0x40 [ 57.302652][ T1081] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 57.308624][ T1081] RIP: 0033:0x7efcdef76ec9 [ 57.313036][ T1081] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 57.332636][ T1081] RSP: 002b:00007efcdd9df038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 57.341054][ T1081] RAX: ffffffffffffffda RBX: 00007efcdf1cdfa0 RCX: 00007efcdef76ec9 [ 57.349018][ T1081] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000040 [ 57.356989][ T1081] RBP: 00007efcdd9df090 R08: 0000000000000000 R09: 0000000000000000 [ 57.364958][ T1081] R10: 0000200000000300 R11: 0000000000000246 R12: 0000000000000001 [ 57.372927][ T1081] R13: 00007efcdf1ce038 R14: 00007efcdf1cdfa0 R15: 00007ffe119804c8 [ 57.385552][ T393] tipc: 32-bit node address hash set to f1414ac [ 57.521192][ T603] usbhid 4-1:0.0: can't add hid device: -71 [ 57.527871][ T603] usbhid: probe of 4-1:0.0 failed with error -71 [ 57.534162][ T1087] EXT4-fs (loop2): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000000,grpquota,,errors=continue [ 57.540307][ T603] usb 4-1: USB disconnect, device number 3 [ 57.547426][ T1087] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.906053][ T1097] EXT4-fs error (device loop2): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 57.921083][ T1097] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 35 with error 28 [ 57.942727][ T1097] EXT4-fs (loop2): This should not happen!! Data will be lost [ 57.942727][ T1097] [ 57.953331][ T1097] EXT4-fs (loop2): Total free blocks count 0 [ 57.959695][ T1097] EXT4-fs (loop2): Free/Dirty block details [ 57.966344][ T1097] EXT4-fs (loop2): free_blocks=4293918720 [ 57.972500][ T1097] EXT4-fs (loop2): dirty_blocks=64 [ 57.978583][ T1097] EXT4-fs (loop2): Block reservation details [ 57.986298][ T1097] EXT4-fs (loop2): i_reserved_data_blocks=4 [ 61.408680][ T393] Bluetooth: hci0: command 0x1001 tx timeout [ 61.415039][ T1037] Bluetooth: hci0: sending frame failed (-49) [ 61.482006][ T7] EXT4-fs error (device loop2): ext4_map_blocks:740: inode #15: block 8: comm kworker/u4:0: lblock 40 mapped to illegal pblock 8 (length 8) [ 61.497051][ T7] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 40 with max blocks 8 with error 117 [ 61.509793][ T7] EXT4-fs (loop2): This should not happen!! Data will be lost [ 61.509793][ T7] [ 61.736757][ T1111] tipc: New replicast peer: 255.255.255.83 [ 61.743217][ T1111] tipc: Enabled bearer , priority 10 [ 61.782477][ T1108] FAT-fs (loop2): Directory bread(block 64) failed [ 61.789167][ T1108] FAT-fs (loop2): Directory bread(block 65) failed [ 61.795785][ T1108] FAT-fs (loop2): Directory bread(block 66) failed [ 61.802322][ T1108] FAT-fs (loop2): Directory bread(block 67) failed [ 61.808862][ T1108] FAT-fs (loop2): Directory bread(block 68) failed [ 61.815398][ T1108] FAT-fs (loop2): Directory bread(block 69) failed [ 61.822003][ T1108] FAT-fs (loop2): Directory bread(block 70) failed [ 61.828518][ T1108] FAT-fs (loop2): Directory bread(block 71) failed [ 61.835085][ T1108] FAT-fs (loop2): Directory bread(block 72) failed [ 61.841876][ T1108] FAT-fs (loop2): Directory bread(block 73) failed [ 61.851815][ T603] usb 4-1: new low-speed USB device number 4 using dummy_hcd [ 62.661658][ T603] usb 4-1: config index 0 descriptor too short (expected 1307, got 27) [ 62.673323][ T603] usb 4-1: config 0 has an invalid interface number: 0 but max is -1 [ 62.700564][ T603] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 62.712232][ T603] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 62.723610][ T603] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 62.733778][ T603] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 62.961785][ T1118] FAT-fs (loop2): Unrecognized mount option "time_offset=0x)0000000000004f7" or missing value [ 63.020833][ T603] usb 4-1: string descriptor 0 read error: -22 [ 63.027196][ T603] usb 4-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 63.036768][ T603] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.045708][ T603] usb 4-1: config 0 descriptor?? [ 63.061218][ T1099] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 63.081640][ T603] hub 4-1:0.0: bad descriptor, ignoring hub [ 63.087642][ T603] hub: probe of 4-1:0.0 failed with error -5 [ 63.094622][ T603] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input7 [ 63.241322][ T24] kauditd_printk_skb: 22 callbacks suppressed [ 63.241436][ T24] audit: type=1400 audit(1758638032.410:479): avc: denied { read } for pid=80 comm="acpid" name="event3" dev="devtmpfs" ino=619 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 63.272241][ T24] audit: type=1400 audit(1758638032.410:480): avc: denied { open } for pid=80 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=619 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 63.297072][ T24] audit: type=1400 audit(1758638032.410:481): avc: denied { ioctl } for pid=80 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=619 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 63.412215][ T603] usb 4-1: USB disconnect, device number 4 [ 63.461214][ T323] Bluetooth: hci0: command 0x1009 tx timeout [ 63.606230][ T24] audit: type=1326 audit(1758638032.900:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1122 comm="syz.0.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7efcdef76ec9 code=0x7ffc0000 [ 63.631515][ T24] audit: type=1326 audit(1758638032.930:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1122 comm="syz.0.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7efcdef76ec9 code=0x7ffc0000 [ 63.655072][ T24] audit: type=1326 audit(1758638032.930:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1122 comm="syz.0.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7efcdef76ec9 code=0x7ffc0000 [ 63.679525][ T24] audit: type=1326 audit(1758638032.930:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1122 comm="syz.0.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7efcdef76ec9 code=0x7ffc0000 [ 63.704973][ T24] audit: type=1326 audit(1758638032.930:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1122 comm="syz.0.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7efcdef76ec9 code=0x7ffc0000 [ 63.728564][ T24] audit: type=1326 audit(1758638032.930:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1122 comm="syz.0.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7efcdef76ec9 code=0x7ffc0000 [ 63.752134][ T24] audit: type=1326 audit(1758638032.930:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1122 comm="syz.0.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7efcdef76ec9 code=0x7ffc0000 [ 63.873923][ T1137] FAT-fs (loop0): Unrecognized mount option "time_offset=0x)0000000000004f7" or missing value [ 64.040250][ T1146] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.353852][ T1154] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 65.664477][ T1174] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 65.763665][ T1174] ext4 filesystem being mounted at /43/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 65.905939][ T1187] loop3: p1 p2 < > p3 < p5 > [ 65.910776][ T1187] loop3: partition table partially beyond EOD, truncated [ 65.918224][ T1187] loop3: p1 start 4043309312 is beyond EOD, truncated [ 65.925248][ T1187] loop3: p2 start 4278190080 is beyond EOD, truncated [ 65.933010][ T1187] loop3: p5 start 4043309312 is beyond EOD, truncated [ 66.041170][ T354] udevd[354]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 66.045386][ T1192] FAT-fs (loop3): Unrecognized mount option "time_offset=0x)0000000000004f7" or missing value [ 66.721088][ T25] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 66.996535][ T1224] fuse: Bad value for 'fd' [ 67.040620][ T1215] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 67.065862][ T1220] EXT4-fs (loop4): Ignoring removed oldalloc option [ 67.091310][ T1220] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 67.114619][ T1220] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 67.182010][ T1220] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2815: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 67.773050][ T1220] EXT4-fs (loop4): 1 truncate cleaned up [ 67.776411][ T393] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 67.786110][ T1220] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsddf,oldalloc,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,block_validity,jqfmt=vfsv1,,errors=continue [ 67.810372][ T1215] mmap: syz.0.226 (1215) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 67.822814][ T25] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 67.830921][ T25] usb 3-1: config 0 has no interface number 0 [ 67.839534][ T25] usb 3-1: config 0 interface 2 altsetting 2 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 67.850529][ T25] usb 3-1: config 0 interface 2 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 67.865603][ T25] usb 3-1: config 0 interface 2 altsetting 2 endpoint 0x82 has invalid maxpacket 192, setting to 64 [ 67.876586][ T25] usb 3-1: config 0 interface 2 has no altsetting 0 [ 68.050530][ T278] EXT4-fs error (device loop4): mb_free_blocks:1524: group 0, inode 18: block 35:freeing already freed block (bit 34); block bitmap corrupt. [ 68.281327][ T25] usb 3-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 68.291926][ T393] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 68.303480][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.311912][ T393] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 68.324819][ T25] usb 3-1: Product: syz [ 68.329049][ T25] usb 3-1: Manufacturer: syz [ 68.329062][ T25] usb 3-1: SerialNumber: syz [ 68.329591][ T393] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.393127][ T25] usb 3-1: config 0 descriptor?? [ 68.404282][ T393] usb 4-1: config 0 descriptor?? [ 68.421386][ T1202] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 68.428461][ T1202] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 69.395864][ T393] keytouch 0003:0926:3333.0004: fixing up Keytouch IEC report descriptor [ 69.409949][ T393] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0004/input/input8 [ 69.425805][ T1257] FAT-fs (loop4): Unrecognized mount option "time_offset=0x)0000000000004f7" or missing value [ 69.443909][ T25] usb 3-1: USB disconnect, device number 6 [ 69.493848][ T393] keytouch 0003:0926:3333.0004: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 69.615875][ T24] kauditd_printk_skb: 83 callbacks suppressed [ 69.615889][ T24] audit: type=1400 audit(1758638038.910:572): avc: denied { setopt } for pid=1273 comm="syz.0.242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 69.671436][ T1219] udc-core: couldn't find an available UDC or it's busy [ 69.678441][ T1219] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 70.777234][ T25] usb 4-1: USB disconnect, device number 5 [ 70.999028][ T1285] FAT-fs (loop2): Unrecognized mount option "time_offset=0x)0000000000004f7" or missing value [ 71.050082][ T1291] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=1291 comm=syz.4.246 [ 71.141884][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 71.150488][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.268086][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 71.597759][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.606761][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.615650][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.624250][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.633318][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.731146][ T24] audit: type=1400 audit(1758638041.020:573): avc: denied { wake_alarm } for pid=1306 comm="syz.3.250" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 71.875126][ T1323] EXT4-fs (loop2): Mount option "journal_async_commit" incompatible with ext2 [ 71.886361][ T24] audit: type=1400 audit(1758638041.180:574): avc: denied { mount } for pid=1325 comm="syz.0.255" name="/" dev="ramfs" ino=18818 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 71.979825][ T1329] FAT-fs (loop2): Unrecognized mount option "time_offset=0x)0000000000004f7" or missing value [ 72.604954][ T24] audit: type=1400 audit(1758638041.900:575): avc: denied { add_name } for pid=1338 comm="syz.4.259" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 72.848606][ T24] audit: type=1400 audit(1758638041.900:576): avc: denied { associate } for pid=1338 comm="syz.4.259" name="bus" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 72.875468][ T24] audit: type=1400 audit(1758638041.920:577): avc: denied { remove_name } for pid=1338 comm="syz.4.259" name="bus" dev="incremental-fs" ino=320 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 72.899334][ T24] audit: type=1400 audit(1758638041.920:578): avc: denied { rmdir } for pid=1338 comm="syz.4.259" name="bus" dev="incremental-fs" ino=320 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 73.084788][ T24] audit: type=1400 audit(1758638042.380:579): avc: denied { accept } for pid=1350 comm="syz.4.263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 73.321557][ T1347] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x10e00a98, utbl_chksum : 0xe619d30d) [ 73.486397][ T1364] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 73.499573][ T1364] exFAT-fs (loop0): IO charset iso8859- not found [ 73.553249][ T324] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 73.562347][ T324] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 73.921430][ T1377] cgroup: syz.3.267 (1377) created nested cgroup for controller "memory" which has incomplete hierarchy support. Nested cgroups may change behavior in the future. [ 73.938001][ T1377] cgroup: "memory" requires setting use_hierarchy to 1 on the root [ 75.061435][ T1385] EXT4-fs (loop4): Ignoring removed bh option [ 75.252714][ T1385] EXT4-fs error (device loop4): ext4_map_blocks:630: inode #3: block 2: comm syz.4.269: lblock 2 mapped to illegal pblock 2 (length 1) [ 75.267368][ T1385] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 75.275675][ T1385] EXT4-fs error (device loop4): ext4_map_blocks:630: inode #3: block 48: comm syz.4.269: lblock 0 mapped to illegal pblock 48 (length 1) [ 75.291494][ T1385] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 75.300342][ T1385] EXT4-fs error (device loop4): ext4_acquire_dquot:6226: comm syz.4.269: Failed to acquire dquot type 0 [ 75.315235][ T1385] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 75.325302][ T1385] EXT4-fs error (device loop4): ext4_evict_inode:283: inode #11: comm syz.4.269: mark_inode_dirty error [ 75.337992][ T1385] EXT4-fs warning (device loop4): ext4_evict_inode:286: couldn't mark inode dirty (err -117) [ 75.348367][ T1385] EXT4-fs (loop4): 1 orphan inode deleted [ 75.354188][ T1385] EXT4-fs (loop4): mounted filesystem without journal. Opts: usrquota,noblock_validity,bh,max_batch_time=0x0000000000000001,nodelalloc,inlinecrypt,,errors=continue [ 75.392173][ T9] EXT4-fs error (device loop4): ext4_map_blocks:630: inode #3: block 1: comm kworker/u4:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 75.576159][ T9] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 75.595825][ T1391] FAT-fs (loop0): Unrecognized mount option "time_offset=0x)0000000000004f7" or missing value [ 75.623326][ T9] EXT4-fs error (device loop4): ext4_release_dquot:6262: comm kworker/u4:1: Failed to release dquot type 0 [ 76.119343][ T278] EXT4-fs error (device loop4): __ext4_get_inode_loc:4438: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 76.132306][ T278] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 76.141954][ T278] EXT4-fs error (device loop4): ext4_quota_off:6545: inode #3: comm syz-executor: mark_inode_dirty error [ 76.210688][ T1400] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 76.331074][ T1406] tipc: Started in network mode [ 76.336093][ T1406] tipc: Own node identity ac14140f, cluster identity 4711 [ 76.343433][ T1406] tipc: New replicast peer: 255.255.255.83 [ 76.349462][ T1406] tipc: Enabled bearer , priority 10 [ 76.376808][ T1400] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 76.391417][ T1400] FAT-fs (loop2): Filesystem has been set read-only [ 77.840062][ T393] tipc: 32-bit node address hash set to f1414ac [ 78.934040][ T1436] __nla_validate_parse: 26 callbacks suppressed [ 78.934051][ T1436] netlink: 68 bytes leftover after parsing attributes in process `syz.3.283'. [ 78.961578][ T1430] FAT-fs (loop4): Unrecognized mount option "time_offset=0x)0000000000004f7" or missing value [ 78.969118][ T1438] netlink: 'syz.3.285': attribute type 3 has an invalid length. [ 78.980557][ T1438] netlink: 'syz.3.285': attribute type 3 has an invalid length. [ 79.237026][ T1451] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 81.271131][ T24] audit: type=1400 audit(1758638050.550:580): avc: denied { nlmsg_read } for pid=1470 comm="syz.1.294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 81.299178][ T24] audit: type=1400 audit(1758638050.550:581): avc: denied { audit_write } for pid=1470 comm="syz.1.294" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 81.320666][ T24] audit: type=1107 audit(1758638050.550:582): pid=1470 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 81.342007][ T1472] FAT-fs (loop0): Unrecognized mount option "time_offset=0x)0000000000004f7" or missing value [ 81.361094][ T15] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 81.606613][ T1481] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 81.704334][ T1481] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 81.921475][ T1481] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 81.938417][ T1481] [EXT4 FS bs=4096, gc=2, bpg=35, ipg=32, mo=6042e01c, mo2=0000] [ 81.946494][ T1481] EXT4-fs (loop4): failed to initialize system zone (-117) [ 81.954128][ T1481] EXT4-fs (loop4): mount failed [ 82.071275][ T15] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.098048][ T15] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 82.202409][ T24] audit: type=1400 audit(1758638051.500:583): avc: denied { listen } for pid=1497 comm="syz.0.302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 82.291058][ T1499] netlink: 44 bytes leftover after parsing attributes in process `syz.4.297'. [ 83.195286][ T1498] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 83.211162][ T1498] ext4 filesystem being mounted at /69/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.237532][ T15] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 83.330530][ T1507] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.339135][ T1507] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.346235][ T1507] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.509583][ T15] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.531069][ T15] usb 4-1: Product: syz [ 83.535348][ T15] usb 4-1: Manufacturer: syz [ 83.539956][ T15] usb 4-1: SerialNumber: syz [ 83.561418][ T15] usb 4-1: can't set config #1, error -71 [ 83.573710][ T15] usb 4-1: USB disconnect, device number 6 [ 83.754791][ T1496] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 83.769290][ T1496] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 83.779121][ T1496] F2FS-fs (loop2): invalid crc value [ 83.816237][ T1496] F2FS-fs (loop2): Found nat_bits in checkpoint [ 83.858622][ T1496] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 83.866988][ T24] audit: type=1400 audit(1758638053.160:584): avc: denied { shutdown } for pid=1514 comm="syz.0.305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 83.887004][ T1496] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 84.202997][ T1522] EXT4-fs (loop3): Mount option "nouser_xattr" will be removed by 3.5 [ 84.202997][ T1522] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 84.202997][ T1522] [ 84.221884][ T1522] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 84.233193][ T1522] EXT4-fs (loop3): group descriptors corrupted! [ 84.542887][ T24] audit: type=1400 audit(1758638053.840:585): avc: denied { load_policy } for pid=1549 comm="syz.2.317" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 84.542957][ T1550] SELinux: policydb version -1819688930 does not match my version range 15-33 [ 84.572002][ T1550] SELinux: failed to load policy [ 84.595620][ T24] audit: type=1400 audit(1758638053.890:586): avc: denied { read } for pid=1551 comm="syz.2.318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 85.291186][ T412] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 85.357783][ T24] audit: type=1400 audit(1758638054.650:587): avc: denied { getopt } for pid=1567 comm="syz.3.324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 85.377614][ T603] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 85.482026][ T1574] EXT4-fs (loop2): Unrecognized mount option "pcr=00000000000000000007" or missing value [ 85.582910][ T24] audit: type=1400 audit(1758638054.880:588): avc: denied { create } for pid=1579 comm="syz.1.328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 85.604601][ T1577] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 85.622178][ T1577] netlink: 92 bytes leftover after parsing attributes in process `syz.2.327'. [ 85.651216][ T412] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.662251][ T412] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 85.678532][ T412] usb 5-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 85.683375][ T1585] netlink: 116 bytes leftover after parsing attributes in process `syz.2.329'. [ 85.688202][ T412] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.699724][ T1585] netlink: 116 bytes leftover after parsing attributes in process `syz.2.329'. [ 85.706395][ T412] usb 5-1: config 0 descriptor?? [ 85.751169][ T603] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 85.771098][ T603] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 85.791093][ T603] usb 1-1: New USB device found, idVendor=0925, idProduct=8866, bcdDevice= 0.00 [ 85.800135][ T603] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.821672][ T603] usb 1-1: config 0 descriptor?? [ 85.841140][ T1555] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 85.936349][ T24] audit: type=1400 audit(1758638055.230:589): avc: denied { connect } for pid=1587 comm="syz.1.330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 86.021076][ T15] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 86.192179][ T412] samsung 0003:0419:0600.0006: unknown main item tag 0x0 [ 86.199393][ T412] samsung 0003:0419:0600.0006: unknown main item tag 0x0 [ 86.208699][ T412] samsung 0003:0419:0600.0006: unknown main item tag 0x0 [ 86.216465][ T412] samsung 0003:0419:0600.0006: unknown main item tag 0x0 [ 86.227277][ T412] samsung 0003:0419:0600.0006: unknown main item tag 0x0 [ 86.234633][ T412] samsung 0003:0419:0600.0006: unknown main item tag 0x0 [ 86.242090][ T412] samsung 0003:0419:0600.0006: unknown main item tag 0x0 [ 86.255729][ T412] samsung 0003:0419:0600.0006: hidraw0: USB HID v0.00 Device [HID 0419:0600] on usb-dummy_hcd.4-1/input0 [ 86.341443][ T603] smartjoyplus 0003:0925:8866.0007: item fetching failed at offset 3/7 [ 86.350353][ T603] smartjoyplus 0003:0925:8866.0007: parse failed [ 86.356830][ T603] smartjoyplus: probe of 0003:0925:8866.0007 failed with error -22 [ 86.401555][ T15] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 86.659272][ T412] usb 1-1: USB disconnect, device number 4 [ 86.721144][ T603] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 86.767108][ T15] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 86.776942][ T15] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 86.786012][ T15] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.795997][ T15] usb 3-1: config 0 descriptor?? [ 86.923785][ T1548] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 86.931689][ T1548] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 86.940934][ T1548] F2FS-fs (loop4): invalid crc value [ 86.947694][ T1548] F2FS-fs (loop4): Found nat_bits in checkpoint [ 86.971095][ T603] usb 4-1: Using ep0 maxpacket: 16 [ 86.979803][ T1548] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 86.987097][ T1548] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 87.005107][ T412] usb 5-1: USB disconnect, device number 5 [ 87.101218][ T603] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 87.260151][ T24] kauditd_printk_skb: 3 callbacks suppressed [ 87.260164][ T24] audit: type=1400 audit(1758638056.550:593): avc: denied { getopt } for pid=1616 comm="syz.4.337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 87.271269][ T603] usb 4-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 87.297268][ T24] audit: type=1400 audit(1758638056.550:594): avc: denied { setattr } for pid=1616 comm="syz.4.337" name="IEEE-802.15.4-MAC" dev="sockfs" ino=19675 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 87.301195][ T603] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.331476][ T1614] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 87.340775][ T1614] ext4 filesystem being mounted at /72/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.377595][ T24] audit: type=1400 audit(1758638056.670:595): avc: denied { ioctl } for pid=1613 comm="syz.0.336" path="/72/file1/file1" dev="loop0" ino=15 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 87.400910][ T603] usb 4-1: Product: syz [ 87.406198][ T603] usb 4-1: Manufacturer: syz [ 87.410812][ T603] usb 4-1: SerialNumber: syz [ 87.419158][ T603] usb 4-1: config 0 descriptor?? [ 87.461572][ T603] hub 4-1:0.0: bad descriptor, ignoring hub [ 87.761092][ T625] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 87.863621][ T603] hub: probe of 4-1:0.0 failed with error -5 [ 87.873762][ T603] snd-usb-audio: probe of 4-1:0.0 failed with error -2 [ 88.001157][ T15] uclogic 0003:256C:006D.0008: interface is invalid, ignoring [ 88.121242][ T625] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 88.131666][ T625] usb 1-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 88.145130][ T625] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 88.154379][ T625] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.200979][ T1627] IPv4: Oversized IP packet from 127.202.26.0 [ 88.202704][ T625] snd-usb-audio: probe of 1-1:27.0 failed with error -2 [ 88.406003][ T24] audit: type=1400 audit(1758638057.700:596): avc: denied { read } for pid=1623 comm="syz.0.339" name="loop-control" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 88.408610][ T1624] device bridge0 entered promiscuous mode [ 88.437058][ T1624] bridge0: port 3(macsec1) entered blocking state [ 88.443540][ T1624] bridge0: port 3(macsec1) entered disabled state [ 88.450810][ T1624] device bridge0 left promiscuous mode [ 88.471163][ T603] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 88.525489][ T1630] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 88.533007][ T1630] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 88.540251][ T1630] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 88.549621][ T1630] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec11c, mo2=0002] [ 88.557882][ T1630] System zones: 1-12 [ 88.563136][ T1630] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2219: inode #15: comm syz.0.339: corrupted in-inode xattr [ 88.575299][ T1630] EXT4-fs error (device loop0): ext4_orphan_get:1400: comm syz.0.339: couldn't read orphan inode 15 (err -117) [ 88.587473][ T1630] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,grpid,debug,noload,mblk_io_submit,commit=0x0000000000000005,quota,debug,usrjquota=,nolazytime,mblk_io_submit,,errors=continue [ 88.614908][ T412] usb 1-1: USB disconnect, device number 5 [ 88.771210][ T603] usb 5-1: too many configurations: 23, using maximum allowed: 8 [ 89.248354][ T1646] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.255745][ T1646] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.262844][ T1646] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.372065][ T25] usb 3-1: USB disconnect, device number 7 [ 89.471183][ T15] usb 4-1: USB disconnect, device number 7 [ 89.486626][ T24] audit: type=1400 audit(1758638058.780:597): avc: denied { create } for pid=1652 comm="syz.2.348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 89.621185][ T603] usb 5-1: New USB device found, idVendor=5bd3, idProduct=317c, bcdDevice= 4.5e [ 89.640517][ T603] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=19 [ 89.648969][ T603] usb 5-1: SerialNumber: syz [ 89.759293][ T603] usb 5-1: config 0 descriptor?? [ 90.078063][ T603] usb 5-1: bad CDC descriptors [ 90.293903][ T603] usb 5-1: USB disconnect, device number 6 [ 90.321168][ T24] audit: type=1400 audit(1758638059.590:598): avc: denied { mount } for pid=1626 comm="syz.4.340" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 90.448202][ T24] audit: type=1400 audit(1758638059.590:599): avc: denied { remount } for pid=1626 comm="syz.4.340" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 90.606397][ T1684] SELinux: Context system_u:object_r:su_ is not valid (left unmapped). [ 90.631498][ T24] audit: type=1400 audit(1758638059.930:600): avc: denied { relabelto } for pid=1683 comm="syz.3.355" name="68" dev="tmpfs" ino=397 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:su_" [ 90.719127][ T24] audit: type=1400 audit(1758638059.950:601): avc: denied { associate } for pid=1683 comm="syz.3.355" name="68" dev="tmpfs" ino=397 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:su_" [ 90.801806][ T24] audit: type=1107 audit(1758638059.950:602): pid=1683 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='>' [ 90.821753][ T1694] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 90.851802][ T1694] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 90.993366][ T1697] EXT4-fs (loop4): mounted filesystem without journal. Opts: acl,barrier=0x0000000000001003,errors=remount-ro,noauto_da_alloc,dioread_lock, [ 91.009520][ T1697] ext4 filesystem being mounted at /71/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.039154][ T1697] netlink: 36 bytes leftover after parsing attributes in process `syz.4.359'. [ 91.094957][ T1697] netlink: 5 bytes leftover after parsing attributes in process `syz.4.359'. [ 91.158110][ T1697] netlink: 5 bytes leftover after parsing attributes in process `syz.4.359'. [ 91.210326][ T1707] EXT4-fs error (device loop4): ext4_xattr_block_get:546: inode #15: comm syz.4.359: corrupted xattr block 19 [ 91.226298][ T1707] EXT4-fs (loop4): Remounting filesystem read-only [ 91.233143][ T1707] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 91.282007][ T15] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 91.541068][ T15] usb 3-1: Using ep0 maxpacket: 32 [ 92.006683][ T15] usb 3-1: config 1 interface 0 altsetting 32 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.042512][ T15] usb 3-1: config 1 interface 0 altsetting 32 bulk endpoint 0x3 has invalid maxpacket 1024 [ 92.068272][ T15] usb 3-1: config 1 interface 0 altsetting 32 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 92.376335][ T24] kauditd_printk_skb: 4 callbacks suppressed [ 92.376351][ T24] audit: type=1400 audit(1758638061.670:607): avc: denied { map } for pid=1731 comm="syz.4.368" path="socket:[19907]" dev="sockfs" ino=19907 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 92.406813][ T393] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 92.539707][ T24] audit: type=1401 audit(1758638061.830:608): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t [ 92.612764][ T15] usb 3-1: config 1 interface 0 has no altsetting 0 [ 92.691203][ T15] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 92.708599][ T15] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 92.716913][ T15] usb 3-1: SerialNumber: syz [ 92.741236][ T1692] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 92.758385][ T24] audit: type=1400 audit(1758638062.050:609): avc: denied { compute_member } for pid=1738 comm="syz.0.371" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 92.762082][ T15] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 93.032452][ T15] cdc_acm 3-1:1.0: ttyACM0: USB ACM device [ 93.040743][ T15] usb 3-1: USB disconnect, device number 8 [ 93.051200][ T393] usb 4-1: unable to get BOS descriptor or descriptor too short [ 93.062706][ T1743] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 93.171171][ T393] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 93.179093][ T393] usb 4-1: can't read configurations, error -71 [ 93.414424][ T1758] 9pnet: Insufficient options for proto=fd [ 93.475901][ T1760] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 93.631441][ T1766] FAT-fs (loop2): Unrecognized mount option "time_offset=0x)0000000000004f7" or missing value [ 94.572412][ T1791] netlink: 'syz.2.386': attribute type 12 has an invalid length. [ 94.601253][ T24] audit: type=1326 audit(1758638063.890:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1793 comm="syz.3.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa941eb2ec9 code=0x7ffc0000 [ 94.646136][ T1788] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 94.671158][ T24] audit: type=1326 audit(1758638063.890:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1793 comm="syz.3.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa941eb2ec9 code=0x7ffc0000 [ 94.696812][ T1788] ext4 filesystem being mounted at /80/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.717635][ T24] audit: type=1326 audit(1758638063.890:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1793 comm="syz.3.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa941eb2ec9 code=0x7ffc0000 [ 94.799777][ T24] audit: type=1326 audit(1758638063.890:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1793 comm="syz.3.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa941eb2ec9 code=0x7ffc0000 [ 94.826672][ T1798] EXT4-fs (loop2): Ignoring removed bh option [ 94.857947][ T1798] EXT4-fs error (device loop2): ext4_map_blocks:630: inode #3: block 2: comm syz.2.386: lblock 2 mapped to illegal pblock 2 (length 1) [ 94.872063][ T1798] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 94.880322][ T1798] EXT4-fs error (device loop2): ext4_map_blocks:630: inode #3: block 48: comm syz.2.386: lblock 0 mapped to illegal pblock 48 (length 1) [ 94.895337][ T1798] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 94.904304][ T1798] EXT4-fs error (device loop2): ext4_acquire_dquot:6226: comm syz.2.386: Failed to acquire dquot type 0 [ 94.915838][ T1798] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 94.925736][ T1798] EXT4-fs error (device loop2): ext4_evict_inode:283: inode #11: comm syz.2.386: mark_inode_dirty error [ 94.937244][ T1798] EXT4-fs warning (device loop2): ext4_evict_inode:286: couldn't mark inode dirty (err -117) [ 94.947551][ T1798] EXT4-fs (loop2): 1 orphan inode deleted [ 94.953360][ T1798] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrquota,noblock_validity,bh,max_batch_time=0x0000000000000001,nodelalloc,inlinecrypt,,errors=continue [ 94.970051][ T7] EXT4-fs error (device loop2): ext4_map_blocks:630: inode #3: block 1: comm kworker/u4:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 94.985121][ T7] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 94.993687][ T7] EXT4-fs error (device loop2): ext4_release_dquot:6262: comm kworker/u4:0: Failed to release dquot type 0 [ 95.006000][ T1798] EXT4-fs error (device loop2): __ext4_get_inode_loc:4438: comm syz.2.386: Invalid inode table block 1 in block_group 0 [ 95.018761][ T1798] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 95.028445][ T1798] EXT4-fs error (device loop2): ext4_quota_off:6545: inode #3: comm syz.2.386: mark_inode_dirty error [ 95.253678][ T1794] F2FS-fs (loop3): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 95.275596][ T1794] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 95.299258][ T1794] F2FS-fs (loop3): invalid crc value [ 95.305888][ T1794] F2FS-fs (loop3): Current segment's next free block offset is inconsistent with bitmap, logtype:3, segno:0, type:0, next_blkoff:3, blkofs:6 [ 95.321003][ T1794] F2FS-fs (loop3): Failed to initialize F2FS segment manager (-117) [ 95.582898][ T1815] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 95.742715][ T1814] F2FS-fs (loop0): Fix alignment : done, start(4096) end(16896) block(12288) [ 95.938550][ T1814] F2FS-fs (loop0): invalid crc value [ 95.963022][ T1814] F2FS-fs (loop0): invalid crc value [ 95.976639][ T1814] F2FS-fs (loop0): Failed to get valid F2FS checkpoint [ 96.292510][ T1839] netlink: 24 bytes leftover after parsing attributes in process `syz.4.397'. [ 96.307527][ T1839] netlink: 4 bytes leftover after parsing attributes in process `syz.4.397'. [ 96.373201][ T15] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 96.621106][ T15] usb 4-1: Using ep0 maxpacket: 16 [ 96.670259][ T1844] EXT4-fs error (device loop2): ext4_free_branches:1026: inode #13: comm syz.2.398: invalid indirect mapped block 10 (level 1) [ 96.723019][ T1844] EXT4-fs error (device loop2): ext4_free_branches:1026: inode #13: comm syz.2.398: invalid indirect mapped block 8 (level 1) [ 96.741708][ T1844] EXT4-fs (loop2): 1 truncate cleaned up [ 96.747541][ T1844] EXT4-fs (loop2): mounted filesystem without journal. Opts: quota,,errors=continue [ 96.761163][ T15] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 96.771797][ T15] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 96.905862][ T1850] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 96.924524][ T1843] EXT4-fs error (device loop2): ext4_lookup:1830: inode #12: comm syz.2.398: unexpected EA_INODE flag [ 96.935693][ T15] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 96.950248][ T15] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.167959][ T15] usb 4-1: Product: syz [ 97.179564][ T15] usb 4-1: Manufacturer: syz [ 97.187455][ T15] usb 4-1: SerialNumber: syz [ 97.249957][ T1861] 9pnet: Insufficient options for proto=fd [ 97.455880][ T1863] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 97.519503][ T1873] fuse: blksize only supported for fuseblk [ 97.525868][ T15] usb 4-1: 0:2 : does not exist [ 97.583589][ T24] kauditd_printk_skb: 27 callbacks suppressed [ 97.583600][ T24] audit: type=1107 audit(1758638066.880:641): pid=1862 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 97.625886][ T15] usb 4-1: USB disconnect, device number 10 [ 98.022110][ T1882] netlink: 'syz.1.408': attribute type 12 has an invalid length. [ 98.069541][ T24] audit: type=1400 audit(1758638067.360:642): avc: denied { map } for pid=1884 comm="syz.1.409" path="socket:[20691]" dev="sockfs" ino=20691 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 98.213088][ T24] audit: type=1400 audit(1758638067.480:643): avc: denied { setopt } for pid=1887 comm="syz.4.410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 98.246130][ T1890] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 98.301109][ T15] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 98.581314][ T15] usb 4-1: Using ep0 maxpacket: 8 [ 98.995799][ T15] usb 4-1: config 9 has an invalid interface number: 142 but max is 0 [ 99.021074][ T15] usb 4-1: config 9 has no interface number 0 [ 99.027227][ T15] usb 4-1: config 9 interface 142 altsetting 3 endpoint 0x9 has an invalid bInterval 128, changing to 7 [ 99.038733][ T15] usb 4-1: config 9 interface 142 altsetting 3 has an invalid endpoint with address 0x0, skipping [ 99.059612][ T15] usb 4-1: config 9 interface 142 altsetting 3 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 99.070935][ T15] usb 4-1: config 9 interface 142 altsetting 3 has a duplicate endpoint with address 0x3, skipping [ 99.091104][ T15] usb 4-1: config 9 interface 142 has no altsetting 0 [ 99.124051][ T1899] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 99.141237][ T1899] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 99.165087][ T1899] F2FS-fs (loop4): Found nat_bits in checkpoint [ 99.204480][ T1899] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 99.211802][ T1899] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 99.245741][ T1899] attempt to access beyond end of device [ 99.245741][ T1899] loop4: rw=2049, want=45104, limit=40427 [ 99.291705][ T278] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 99.291718][ T278] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 99.299456][ T278] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 99.307689][ T278] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 99.315666][ T278] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 99.323636][ T15] usb 4-1: New USB device found, idVendor=07ca, idProduct=a807, bcdDevice=63.61 [ 99.341897][ T15] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.350288][ T278] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 99.350299][ T278] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 99.387459][ T15] usb 4-1: Product: Ќ [ 99.399284][ T15] usb 4-1: Manufacturer: 駝ẳﭳ☾鈔颾怉ࡆ瓒恈㓪㙝똬퐟邭䔻壶矊㓣㑵隶㉽㳕馁✙⟢㳶˜폷︰鶥谏䋽뫏㣩鹀時㴹碾莃抶펀颟꺹鲾ꒁ긻쓴枆⸿♶愌ḭ濸풭탛꾰⟀잜㘸ᛖ㦭ᵂ钆ൔ噴⁘薐䚧 ⯮峱돕恅鍙幟Ǜ폦⯜䊆矪⊁쏧랤社쯿炗읁ᔁ탑련ᑜᣡ邀泛ᛕ꽦昘䳷붾᫿퓭괡ဲ뱊쪓ꀏ╿퀄ᮏ [ 99.435228][ T15] usb 4-1: SerialNumber: syz [ 99.500472][ T1922] netlink: 'syz.2.420': attribute type 5 has an invalid length. [ 99.831444][ T1937] FAT-fs (loop2): Unrecognized mount option "time_offset=0x)0000000000004f7" or missing value [ 100.026914][ T1868] udc-core: couldn't find an available UDC or it's busy [ 100.034371][ T1868] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 100.619020][ T354] udevd[354]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 100.676531][ T1868] udc-core: couldn't find an available UDC or it's busy [ 100.683886][ T1868] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 100.704961][ T1868] udc-core: couldn't find an available UDC or it's busy [ 100.712015][ T1868] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 101.010470][ T15] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 101.932473][ T15] usb 3-1: device descriptor read/64, error -71 [ 101.984079][ T625] usb 4-1: USB disconnect, device number 11 [ 102.651409][ T1969] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 102.660825][ T1969] FAT-fs (loop3): FAT read failed (blocknr 255) [ 102.683971][ T1960] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 102.693295][ T1960] ext4 filesystem being mounted at /89/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 102.852364][ T1978] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 102.876494][ T1978] EXT4-fs (loop0): Test dummy encryption mode enabled [ 102.881946][ T15] usb 3-1: device descriptor read/64, error -71 [ 102.893801][ T1978] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 102.952670][ T1978] EXT4-fs (loop0): orphan cleanup on readonly fs [ 103.008425][ T1978] EXT4-fs error (device loop0): ext4_free_branches:1026: inode #13: comm syz.0.433: invalid indirect mapped block 234881024 (level 0) [ 103.051562][ T1978] EXT4-fs (loop0): 1 truncate cleaned up [ 103.057567][ T1978] EXT4-fs (loop0): mounted filesystem without journal. Opts: lazytime,inlinecrypt,noblock_validity,abort,mblk_io_submit,dioread_nolock,max_dir_size_kb=0x000000000000222a,nouid32,test_dummy_encryption,bsdgroups,,errors=continue [ 103.151199][ T15] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 103.716952][ T1983] netlink: 8 bytes leftover after parsing attributes in process `syz.3.434'. [ 104.099105][ T2000] EXT4-fs (loop2): test_dummy_encryption requires encrypt feature [ 104.168184][ T2008] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 104.178048][ T24] audit: type=1326 audit(1758638073.470:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2013 comm="syz.0.443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcdef76ec9 code=0x7ffc0000 [ 104.206630][ T2008] EXT4-fs (loop3): Ignoring removed bh option [ 104.214808][ T24] audit: type=1326 audit(1758638073.500:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2013 comm="syz.0.443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7efcdef76ec9 code=0x7ffc0000 [ 104.239112][ T2008] EXT4-fs (loop3): Test dummy encryption mode enabled [ 104.247465][ T24] audit: type=1326 audit(1758638073.500:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2013 comm="syz.0.443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcdef76ec9 code=0x7ffc0000 [ 104.272166][ T2008] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 104.282503][ T24] audit: type=1326 audit(1758638073.500:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2013 comm="syz.0.443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7efcdef76ec9 code=0x7ffc0000 [ 104.307143][ T24] audit: type=1326 audit(1758638073.500:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2013 comm="syz.0.443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcdef76ec9 code=0x7ffc0000 [ 104.329504][ T2008] EXT4-fs (loop3): 1 truncate cleaned up [ 104.331893][ T24] audit: type=1326 audit(1758638073.500:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2013 comm="syz.0.443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efcdef76ec9 code=0x7ffc0000 [ 104.336324][ T2008] EXT4-fs (loop3): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000002,mblk_io_submit,bh,auto_da_alloc,barrier,test_dummy_encryption,nogrpid,,errors=continue [ 104.377915][ T24] audit: type=1326 audit(1758638073.500:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2013 comm="syz.0.443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcdef76ec9 code=0x7ffc0000 [ 104.401678][ T24] audit: type=1326 audit(1758638073.500:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2013 comm="syz.0.443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efcdef76ec9 code=0x7ffc0000 [ 104.425746][ T24] audit: type=1326 audit(1758638073.500:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2013 comm="syz.0.443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcdef76ec9 code=0x7ffc0000 [ 104.448340][ T2000] netlink: 8 bytes leftover after parsing attributes in process `syz.2.438'. [ 104.458420][ T2000] netlink: 8 bytes leftover after parsing attributes in process `syz.2.438'. [ 104.469404][ T2017] overlayfs: failed to clone upperpath [ 104.469678][ T24] audit: type=1326 audit(1758638073.500:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2013 comm="syz.0.443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efcdef76ec9 code=0x7ffc0000 [ 104.499884][ T2008] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 105.256339][ T2030] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpjquota=,stripe=0x0000000000000002,,errors=continue [ 105.273920][ T2030] ext4 filesystem being mounted at /95/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.858352][ T2053] FAT-fs (loop4): Unrecognized mount option "time_offset=0x)0000000000004f7" or missing value [ 106.945764][ T2064] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 106.971245][ T2064] ext4 filesystem being mounted at /81/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 106.991521][ T2069] netlink: 40 bytes leftover after parsing attributes in process `syz.1.458'. [ 107.022757][ T2069] tipc: Invalid UDP bearer configuration [ 107.022786][ T2069] tipc: Enabling of bearer rejected, failed to enable media [ 107.044292][ T2073] overlayfs: failed to resolve './file0': -2 [ 107.069447][ T2045] F2FS-fs (loop2): fault_injection options not supported [ 107.114215][ T2045] F2FS-fs (loop2): invalid crc value [ 107.152410][ T2045] F2FS-fs (loop2): Found nat_bits in checkpoint [ 107.546314][ T2045] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 107.635539][ T2045] syz.2.453[2045] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 107.635622][ T2045] syz.2.453[2045] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 107.773550][ T277] attempt to access beyond end of device [ 107.773550][ T277] loop2: rw=2049, want=45104, limit=40427 [ 107.904224][ T2109] netlink: 24 bytes leftover after parsing attributes in process `syz.2.466'. [ 108.140267][ T2121] tipc: Started in network mode [ 108.145258][ T2121] tipc: Own node identity ac14140f, cluster identity 4711 [ 108.152708][ T2121] tipc: New replicast peer: 255.255.255.83 [ 108.158631][ T2121] tipc: Enabled bearer , priority 10 [ 108.431618][ T2130] FAT-fs (loop3): Unrecognized mount option "" or missing value [ 108.653383][ T2130] EXT4-fs (loop3): external journal device major/minor numbers have changed [ 108.662378][ T2130] EXT4-fs (loop3): failed to open journal device unknown-block(0,3) -6 [ 108.964750][ T2152] 9pnet: Insufficient options for proto=fd [ 108.989434][ T2155] 9pnet: Insufficient options for proto=fd [ 109.021157][ T393] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 109.261070][ T393] usb 3-1: Using ep0 maxpacket: 32 [ 109.281095][ T626] tipc: 32-bit node address hash set to f1414ac [ 109.381139][ T393] usb 3-1: config 229 contains an unexpected descriptor of type 0x2, skipping [ 109.390134][ T393] usb 3-1: config 229 has an invalid descriptor of length 0, skipping remainder of the config [ 109.400543][ T393] usb 3-1: config 229 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 109.413721][ T393] usb 3-1: config 229 interface 0 has no altsetting 0 [ 109.451085][ T15] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 109.571257][ T393] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 109.580720][ T393] usb 3-1: New USB device strings: Mfr=1, Product=17, SerialNumber=3 [ 109.588881][ T393] usb 3-1: Product: syz [ 109.593132][ T393] usb 3-1: Manufacturer: syz [ 109.597788][ T393] usb 3-1: SerialNumber: syz [ 109.701081][ T15] usb 1-1: Using ep0 maxpacket: 16 [ 109.779340][ T24] kauditd_printk_skb: 67 callbacks suppressed [ 109.779356][ T24] audit: type=1326 audit(1758638079.070:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2174 comm="syz.4.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f454ef9cec9 code=0x7ffc0000 [ 109.841202][ T24] audit: type=1326 audit(1758638079.070:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2174 comm="syz.4.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f454ef9cec9 code=0x7ffc0000 [ 109.882225][ T15] usb 1-1: unable to get BOS descriptor or descriptor too short [ 109.898097][ T24] audit: type=1326 audit(1758638079.070:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2174 comm="syz.4.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7f454ef9cec9 code=0x7ffc0000 [ 109.924821][ T24] audit: type=1326 audit(1758638079.120:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2174 comm="syz.4.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f454ef9cec9 code=0x7ffc0000 [ 109.949414][ T24] audit: type=1326 audit(1758638079.120:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2174 comm="syz.4.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f454ef9cec9 code=0x7ffc0000 [ 109.993274][ T24] audit: type=1326 audit(1758638079.120:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2174 comm="syz.4.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f454ef9cec9 code=0x7ffc0000 [ 110.019086][ T15] usb 1-1: config 13 has an invalid interface number: 50 but max is 0 [ 110.019641][ T393] cdc_ether 3-1:229.0: skipping garbage [ 110.033297][ T393] usb 3-1: bad CDC descriptors [ 110.039675][ T393] usb 3-1: USB disconnect, device number 11 [ 110.055556][ T15] usb 1-1: config 13 has an invalid descriptor of length 52, skipping remainder of the config [ 110.057260][ T24] audit: type=1326 audit(1758638079.120:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2174 comm="syz.4.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f454ef9cec9 code=0x7ffc0000 [ 110.633876][ T2186] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.641270][ T2186] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.648316][ T2186] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.659488][ T15] usb 1-1: config 13 has no interface number 0 [ 110.666114][ T15] usb 1-1: config 13 interface 50 altsetting 167 bulk endpoint 0x8 has invalid maxpacket 16 [ 110.676758][ T15] usb 1-1: config 13 interface 50 altsetting 167 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 110.690243][ T15] usb 1-1: config 13 interface 50 has no altsetting 0 [ 110.698947][ T24] audit: type=1326 audit(1758638079.120:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2174 comm="syz.4.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f454ef9cec9 code=0x7ffc0000 [ 110.727662][ T2192] tipc: Enabling of bearer rejected, already enabled [ 112.321173][ T15] usb 1-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32 [ 112.330295][ T15] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.366616][ T15] usb 1-1: Product: syz [ 112.370826][ T15] usb 1-1: Manufacturer: syz [ 112.401171][ T15] usb 1-1: can't set config #13, error -71 [ 112.409666][ T15] usb 1-1: USB disconnect, device number 6 [ 112.453019][ T412] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 112.475195][ T2210] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 112.484667][ T24] audit: type=1326 audit(1758638081.780:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2213 comm="syz.4.498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f454ef9cec9 code=0x7ffc0000 [ 112.517866][ T24] audit: type=1400 audit(1758638081.780:730): avc: denied { mounton } for pid=2209 comm="syz.0.497" path="/104/file0/bus" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 112.584811][ T2217] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.592951][ T2217] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.599997][ T2217] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.625070][ T50] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 112.667133][ T2214] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=2214 comm=syz.4.498 [ 112.838683][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 112.847959][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.855079][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.864363][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 112.872925][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 112.881480][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 112.889833][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 112.898826][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 112.907504][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 112.916431][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 112.933532][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 112.959215][ T276] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 112.974064][ T50] usb 3-1: Using ep0 maxpacket: 16 [ 112.979845][ T276] EXT4-fs error (device loop0) in ext4_mb_clear_bb:5645: Corrupt filesystem [ 112.991303][ T412] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 112.999799][ T412] usb 4-1: can't read configurations, error -71 [ 113.196889][ T50] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 113.318952][ T2236] tipc: Enabling of bearer rejected, already enabled [ 113.491498][ T50] usb 3-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 113.500774][ T50] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.510412][ T50] usb 3-1: Product: syz [ 113.516197][ T50] usb 3-1: Manufacturer: syz [ 113.521839][ T50] usb 3-1: SerialNumber: syz [ 113.533119][ T50] usb 3-1: config 0 descriptor?? [ 113.587264][ T2240] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 113.627964][ T50] hub 3-1:0.0: bad descriptor, ignoring hub [ 113.634093][ T50] hub: probe of 3-1:0.0 failed with error -5 [ 113.692914][ T50] snd-usb-audio: probe of 3-1:0.0 failed with error -2 [ 113.845521][ C1] hrtimer: interrupt took 24912 ns [ 114.240127][ T2256] netlink: 96 bytes leftover after parsing attributes in process `syz.4.508'. [ 114.548474][ T2256] Alternate GPT is invalid, using primary GPT. [ 114.555405][ T2256] loop4: p2 p3 p7 [ 114.633338][ T278] __loop_clr_fd: partition scan of loop4 failed (rc=-16) [ 114.633374][ T354] blk_update_request: I/O error, dev loop4, sector 608 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 114.641803][ T1265] blk_update_request: I/O error, dev loop4, sector 408 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 114.655681][ T419] blk_update_request: I/O error, dev loop4, sector 208 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 114.663898][ T354] blk_update_request: I/O error, dev loop4, sector 608 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 114.686503][ T1265] blk_update_request: I/O error, dev loop4, sector 408 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 114.698449][ T1265] Buffer I/O error on dev loop4p7, logical block 8, async page read [ 114.702218][ T354] Buffer I/O error on dev loop4p2, logical block 8, async page read [ 114.716188][ T2266] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 114.888312][ T2272] FAT-fs (loop2): Unrecognized mount option "utf " or missing value [ 114.995047][ T412] usb 3-1: USB disconnect, device number 12 [ 115.605590][ T2291] FAT-fs (loop0): Unrecognized mount option "time_offset=0x)0000000000004f7" or missing value [ 116.188303][ T2299] tipc: Started in network mode [ 116.193260][ T2299] tipc: Own node identity ac14140f, cluster identity 4711 [ 116.200598][ T2299] tipc: New replicast peer: 255.255.255.83 [ 116.206527][ T2299] tipc: Enabled bearer , priority 10 [ 116.582516][ T24] kauditd_printk_skb: 50 callbacks suppressed [ 116.582530][ T24] audit: type=1400 audit(1758638085.860:781): avc: denied { create } for pid=2306 comm="syz.3.521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 117.172192][ T2314] FAT-fs (loop0): Unrecognized mount option "time_offset=0x)0000000000004f7" or missing value [ 117.316840][ T2325] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 117.331106][ T324] tipc: 32-bit node address hash set to f1414ac [ 117.452012][ T2325] ext4 filesystem being mounted at /93/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 117.690445][ T2325] netlink: 12 bytes leftover after parsing attributes in process `syz.2.525'. [ 117.724342][ T24] audit: type=1326 audit(1758638087.020:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2324 comm="syz.2.525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0abdefec9 code=0x7ffc0000 [ 117.759822][ T24] audit: type=1326 audit(1758638087.020:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2324 comm="syz.2.525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=63 compat=0 ip=0x7fc0abdefec9 code=0x7ffc0000 [ 117.796563][ T24] audit: type=1326 audit(1758638087.020:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2324 comm="syz.2.525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0abdefec9 code=0x7ffc0000 [ 117.901601][ T354] blk_update_request: I/O error, dev loop4, sector 608 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 118.173876][ T419] blk_update_request: I/O error, dev loop4, sector 208 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 118.187874][ T354] blk_update_request: I/O error, dev loop4, sector 608 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 118.199556][ T354] Buffer I/O error on dev loop4p2, logical block 8, async page read [ 118.203549][ T24] audit: type=1326 audit(1758638087.020:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2324 comm="syz.2.525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fc0abdefec9 code=0x7ffc0000 [ 118.235105][ T1265] blk_update_request: I/O error, dev loop4, sector 408 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 118.239448][ T354] blk_update_request: I/O error, dev loop4, sector 609 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 118.257815][ T1265] Buffer I/O error on dev loop4p7, logical block 8, async page read [ 118.263864][ T419] Buffer I/O error on dev loop4p3, logical block 8, async page read [ 118.274317][ T419] Buffer I/O error on dev loop4p3, logical block 9, async page read [ 118.282560][ T419] Buffer I/O error on dev loop4p3, logical block 10, async page read [ 118.290824][ T419] Buffer I/O error on dev loop4p3, logical block 11, async page read [ 118.299182][ T419] Buffer I/O error on dev loop4p3, logical block 12, async page read [ 118.312690][ T419] Buffer I/O error on dev loop4p3, logical block 13, async page read [ 118.325504][ T24] audit: type=1326 audit(1758638087.020:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2324 comm="syz.2.525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0abdefec9 code=0x7ffc0000 [ 118.357078][ T24] audit: type=1326 audit(1758638087.020:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2324 comm="syz.2.525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc0abdefec9 code=0x7ffc0000 [ 118.381916][ T24] audit: type=1326 audit(1758638087.020:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2324 comm="syz.2.525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0abdefec9 code=0x7ffc0000 [ 118.406153][ T24] audit: type=1326 audit(1758638087.020:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2324 comm="syz.2.525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc0abdefec9 code=0x7ffc0000 [ 118.429730][ T24] audit: type=1326 audit(1758638087.020:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2324 comm="syz.2.525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0abdefec9 code=0x7ffc0000 [ 118.456277][ T2355] tipc: Enabling of bearer rejected, already enabled [ 119.641826][ T354] print_req_error: 40 callbacks suppressed [ 119.641844][ T354] blk_update_request: I/O error, dev loop4, sector 408 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 119.660108][ T354] blk_update_request: I/O error, dev loop4, sector 408 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 119.672537][ T354] blk_update_request: I/O error, dev loop4, sector 409 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 119.684730][ T354] blk_update_request: I/O error, dev loop4, sector 410 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 119.699030][ T354] blk_update_request: I/O error, dev loop4, sector 411 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 119.710935][ T354] buffer_io_error: 35 callbacks suppressed [ 119.710946][ T354] Buffer I/O error on dev loop4p7, logical block 11, async page read [ 119.745177][ T354] blk_update_request: I/O error, dev loop4, sector 412 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 119.756473][ T354] Buffer I/O error on dev loop4p7, logical block 12, async page read [ 119.764759][ T354] blk_update_request: I/O error, dev loop4, sector 413 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 119.775937][ T354] Buffer I/O error on dev loop4p7, logical block 13, async page read [ 119.784267][ T354] blk_update_request: I/O error, dev loop4, sector 414 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 119.795441][ T354] Buffer I/O error on dev loop4p7, logical block 14, async page read [ 119.804038][ T354] blk_update_request: I/O error, dev loop4, sector 415 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 119.816140][ T354] Buffer I/O error on dev loop4p7, logical block 15, async page read [ 119.858222][ T419] blk_update_request: I/O error, dev loop4, sector 208 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 119.874542][ T1265] Buffer I/O error on dev loop4p7, logical block 8, async page read [ 119.889993][ T354] Buffer I/O error on dev loop4p2, logical block 8, async page read [ 119.911514][ T354] Buffer I/O error on dev loop4p2, logical block 9, async page read [ 119.923885][ T1265] Buffer I/O error on dev loop4p7, logical block 9, async page read [ 119.945929][ T354] Buffer I/O error on dev loop4p2, logical block 10, async page read [ 119.994288][ T2395] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 121.365288][ T2424] fuse: Bad value for 'fd' [ 121.702884][ T2431] EXT4-fs (loop3): Test dummy encryption mode enabled [ 121.709968][ T2431] EXT4-fs (loop3): Test dummy encryption mode enabled [ 121.718750][ T2431] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodioread_nolock,barrier=0x00000000000003ff,acl,stripe=0x0000000000000009,auto_da_alloc=0x0000000000008001,test_dummy_encryption,max_batch_time=0x0000000000000000,test_dummy_encryption,,errors=continue [ 121.773688][ T2421] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 121.791767][ T2421] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 121.801377][ T2421] F2FS-fs (loop0): invalid crc value [ 121.814853][ T2421] F2FS-fs (loop0): Found nat_bits in checkpoint [ 121.822653][ T24] kauditd_printk_skb: 3 callbacks suppressed [ 121.822666][ T24] audit: type=1400 audit(1758638091.120:794): avc: denied { map } for pid=2430 comm="syz.3.556" path="pipe:[13210]" dev="pipefs" ino=13210 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 121.862211][ T24] audit: type=1400 audit(1758638091.150:795): avc: denied { execute } for pid=2430 comm="syz.3.556" path="pipe:[13210]" dev="pipefs" ino=13210 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 121.895266][ T24] audit: type=1326 audit(1758638091.190:796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2430 comm="syz.3.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa941eb2ec9 code=0x7ffc0000 [ 121.922301][ T2421] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 121.939539][ T2421] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 121.948808][ T24] audit: type=1326 audit(1758638091.190:797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2430 comm="syz.3.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa941eb2ec9 code=0x7ffc0000 [ 121.984425][ T24] audit: type=1326 audit(1758638091.190:798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2430 comm="syz.3.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa941eb2ec9 code=0x7ffc0000 [ 122.008932][ T24] audit: type=1326 audit(1758638091.190:799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2430 comm="syz.3.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa941eb2ec9 code=0x7ffc0000 [ 122.034269][ T24] audit: type=1326 audit(1758638091.190:800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2430 comm="syz.3.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa941eb2ec9 code=0x7ffc0000 [ 122.083958][ T24] audit: type=1326 audit(1758638091.190:801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2430 comm="syz.3.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa941eb2ec9 code=0x7ffc0000 [ 122.114901][ T24] audit: type=1326 audit(1758638091.220:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2430 comm="syz.3.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa941eb2ec9 code=0x7ffc0000 [ 122.165491][ T24] audit: type=1326 audit(1758638091.220:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2430 comm="syz.3.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa941eb2ec9 code=0x7ffc0000 [ 122.342647][ T2466] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 122.350385][ T2466] EXT4-fs (loop2): Test dummy encryption mode enabled [ 122.371776][ T2466] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 122.379124][ T2466] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 122.491453][ T2470] EXT4-fs (loop3): Ignoring removed bh option [ 122.632526][ T323] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 122.638087][ T2470] EXT4-fs error (device loop3): ext4_map_blocks:630: inode #3: block 2: comm syz.3.566: lblock 2 mapped to illegal pblock 2 (length 1) [ 122.669697][ T2470] EXT4-fs error (device loop3): ext4_map_blocks:630: inode #3: block 48: comm syz.3.566: lblock 0 mapped to illegal pblock 48 (length 1) [ 122.684200][ T2470] EXT4-fs error (device loop3): ext4_acquire_dquot:6226: comm syz.3.566: Failed to acquire dquot type 0 [ 122.695850][ T2470] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 122.705535][ T2470] EXT4-fs error (device loop3): ext4_evict_inode:283: inode #11: comm syz.3.566: mark_inode_dirty error [ 122.717020][ T2470] EXT4-fs warning (device loop3): ext4_evict_inode:286: couldn't mark inode dirty (err -117) [ 122.727286][ T2470] EXT4-fs (loop3): 1 orphan inode deleted [ 122.733038][ T2470] EXT4-fs (loop3): mounted filesystem without journal. Opts: usrquota,noblock_validity,bh,max_batch_time=0x0000000000000001,nodelalloc,inlinecrypt,,errors=continue [ 122.756012][ T2466] EXT4-fs (loop2): 1 truncate cleaned up [ 122.764490][ T2466] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,max_dir_size_kb=0x0000000000000006,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid, [ 122.786797][ T296] EXT4-fs error (device loop3): ext4_map_blocks:630: inode #3: block 1: comm kworker/u4:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 122.801768][ T296] EXT4-fs error (device loop3): ext4_release_dquot:6262: comm kworker/u4:3: Failed to release dquot type 0 [ 123.174846][ T2490] overlayfs: failed to clone upperpath [ 123.232420][ T279] EXT4-fs error (device loop3): __ext4_get_inode_loc:4438: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 123.246078][ T279] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 123.255791][ T279] EXT4-fs error (device loop3): ext4_quota_off:6545: inode #3: comm syz-executor: mark_inode_dirty error [ 123.351143][ T323] usb 1-1: not running at top speed; connect to a high speed hub [ 123.616768][ T2501] netlink: 4 bytes leftover after parsing attributes in process `syz.3.570'. [ 123.626441][ T2501] netlink: 12 bytes leftover after parsing attributes in process `syz.3.570'. [ 123.681181][ T323] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 123.692679][ T323] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.901274][ T2533] cgroup: noprefix used incorrectly [ 123.951840][ T323] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 123.961105][ T323] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.022141][ T323] usb 1-1: Product: 枱ẋ몾赹揚馟窸럧窥뒌耭護滹ⱊ주纮ꁾ辏鋯賫鿆敩Ẑ둏㟔赗Ỏ뵊挟ꩈ᫼泯尶䮔侠佗鿬ะ輇쾑萬燦ㄑዴ햞䡿礱࢞✇녇믍᧗ [ 124.249958][ T323] usb 1-1: Manufacturer: ⹜Ғ߾濞싧鷚뉙ᅌۛ蚿뷼ꪩ즏廵∥糎桽䇊쳁䬯쨵ᙠ冑ႃ詸謏㐯썯ᅹꥌ肗Ƹ烶ᅀᝯ웲䋿駏㵎䊮ᥤ걒ᨏ䗨㿧镟ᢊ賮넌讁ᬀ鄛⻬觕臂蝼厍੤苮Hሀ諸艏痎ⁱ鶨哢碪꽛ꦍ쾅錒ꔗ㺜礹ᥞ轌ᦛྀ৉漡⽞왶؜쩌ⶮ嬓鋖ሡ섋オ憒腜䶉鮢殳▔ۇ쇸脮 [ 124.285866][ T323] usb 1-1: SerialNumber: 칅윸କق瀓촃䃊⅐닝톒컮ꁛ눑胭᧷䆒ᒨꖲ봽汋ᷡꨆ凇蕞姊ݫᠩ擢럂턞䍍뵫됶 [ 124.731578][ T323] cdc_ncm 1-1:1.0: bind() failure [ 124.849573][ T323] cdc_ncm 1-1:1.1: bind() failure [ 125.036529][ T323] usb 1-1: USB disconnect, device number 7 [ 125.301841][ T2556] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=22273 [ 125.335028][ T2556] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=22273 [ 125.367774][ T2556] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=22273 [ 125.390485][ T2560] print_req_error: 267 callbacks suppressed [ 125.390505][ T2560] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 125.409343][ T2561] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=22273 [ 125.419720][ T2556] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=22273 [ 125.430105][ T2560] FAT-fs (loop3): unable to read boot sector [ 125.440032][ T2556] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=22273 [ 125.461158][ T2556] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=22273 [ 125.520888][ T354] blk_update_request: I/O error, dev loop4, sector 608 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 125.533882][ T354] blk_update_request: I/O error, dev loop4, sector 608 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 125.550506][ T1265] blk_update_request: I/O error, dev loop4, sector 208 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 125.555712][ T354] buffer_io_error: 233 callbacks suppressed [ 125.555730][ T354] Buffer I/O error on dev loop4p2, logical block 8, async page read [ 125.564276][ T298] blk_update_request: I/O error, dev loop4, sector 408 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 125.572441][ T354] blk_update_request: I/O error, dev loop4, sector 609 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 125.600133][ T354] Buffer I/O error on dev loop4p2, logical block 9, async page read [ 125.613280][ T354] blk_update_request: I/O error, dev loop4, sector 610 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 125.621605][ T1265] blk_update_request: I/O error, dev loop4, sector 208 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 125.626091][ T354] Buffer I/O error on dev loop4p2, logical block 10, async page read [ 125.635793][ T298] blk_update_request: I/O error, dev loop4, sector 408 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 125.700371][ T1265] Buffer I/O error on dev loop4p3, logical block 8, async page read [ 125.728082][ T298] Buffer I/O error on dev loop4p7, logical block 8, async page read [ 125.743326][ T1265] blk_update_request: I/O error, dev loop4, sector 209 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 125.768439][ T298] Buffer I/O error on dev loop4p7, logical block 9, async page read [ 125.791391][ T1265] Buffer I/O error on dev loop4p3, logical block 9, async page read [ 125.805867][ T298] Buffer I/O error on dev loop4p7, logical block 10, async page read [ 125.825126][ T1265] Buffer I/O error on dev loop4p3, logical block 10, async page read [ 125.839324][ T298] Buffer I/O error on dev loop4p7, logical block 11, async page read [ 125.878896][ T2566] netlink: 8 bytes leftover after parsing attributes in process `syz.4.590'. [ 125.923079][ T2579] EXT4-fs (loop2): Ignoring removed nobh option [ 125.938104][ T2579] EXT4-fs error (device loop2): ext4_orphan_get:1395: inode #15: comm syz.2.594: iget: bad i_size value: 38620345925642 [ 125.951487][ T2579] EXT4-fs error (device loop2): ext4_orphan_get:1400: comm syz.2.594: couldn't read orphan inode 15 (err -117) [ 125.963777][ T2579] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobh,auto_da_alloc,data_err=ignore,,errors=continue [ 126.001120][ T626] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 126.020210][ T2579] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.594: bg 0: block 5: invalid block bitmap [ 126.032991][ T2579] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 126.045622][ T2579] EXT4-fs (loop2): This should not happen!! Data will be lost [ 126.045622][ T2579] [ 126.058118][ T2579] EXT4-fs (loop2): Total free blocks count 0 [ 126.064290][ T2579] EXT4-fs (loop2): Free/Dirty block details [ 126.070249][ T2579] EXT4-fs (loop2): free_blocks=0 [ 126.075361][ T2579] EXT4-fs (loop2): dirty_blocks=1 [ 126.080456][ T2579] EXT4-fs (loop2): Block reservation details [ 126.090896][ T2579] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 126.213309][ T2588] udc-core: couldn't find an available UDC or it's busy [ 126.226469][ T2588] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 126.281067][ T626] usb 1-1: device descriptor read/64, error -71 [ 126.350901][ T2603] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.358191][ T2603] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.491170][ T324] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 126.691061][ T626] usb 1-1: device descriptor read/64, error -71 [ 126.811053][ T324] usb 5-1: Using ep0 maxpacket: 16 [ 126.852274][ T24] kauditd_printk_skb: 187 callbacks suppressed [ 126.852289][ T24] audit: type=1400 audit(1758638096.150:988): avc: denied { mount } for pid=2621 comm="syz.1.606" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 126.951111][ T324] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 126.961451][ T626] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 126.969045][ T324] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 127.151159][ T324] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 127.170554][ T324] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.191337][ T324] usb 5-1: Product: syz [ 127.195556][ T324] usb 5-1: Manufacturer: syz [ 127.210383][ T324] usb 5-1: SerialNumber: syz [ 127.272126][ T626] usb 1-1: device descriptor read/64, error -71 [ 127.274887][ T24] audit: type=1400 audit(1758638096.570:989): avc: denied { sys_admin } for pid=2631 comm="syz.3.609" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 127.480536][ T24] audit: type=1326 audit(1758638096.770:990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2587 comm="syz.4.597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7f454ef9cec9 code=0x7ffc0000 [ 127.521091][ T24] audit: type=1326 audit(1758638096.800:991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2587 comm="syz.4.597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f454ef9cec9 code=0x7ffc0000 [ 127.551591][ T24] audit: type=1326 audit(1758638096.800:992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2587 comm="syz.4.597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f454ef9cec9 code=0x7ffc0000 [ 127.601166][ T324] usb 5-1: 0:2 : does not exist [ 127.682864][ T324] usb 5-1: USB disconnect, device number 7 [ 127.691072][ T626] usb 1-1: device descriptor read/64, error -71 [ 127.763716][ T2651] tipc: Enabling of bearer rejected, already enabled [ 128.670725][ T24] audit: type=1400 audit(1758638097.960:993): avc: denied { read } for pid=2654 comm="syz.4.615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 128.711540][ T626] usb usb1-port1: attempt power cycle [ 128.764367][ T2657] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.771607][ T2657] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.788731][ T24] audit: type=1400 audit(1758638098.080:994): avc: denied { write } for pid=2654 comm="syz.4.615" path="socket:[22389]" dev="sockfs" ino=22389 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 128.862177][ T354] udevd[354]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 128.900243][ T2660] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 128.955669][ T24] audit: type=1326 audit(1758638098.250:995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2677 comm="syz.0.620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcdef76ec9 code=0x7ffc0000 [ 129.222510][ T24] audit: type=1326 audit(1758638098.280:996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2677 comm="syz.0.620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efcdef76ec9 code=0x7ffc0000 [ 129.251345][ T24] audit: type=1326 audit(1758638098.420:997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2677 comm="syz.0.620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcdef76ec9 code=0x7ffc0000 [ 129.612686][ T296] attempt to access beyond end of device [ 129.612686][ T296] loop3: rw=1, want=1041, limit=128 [ 129.625681][ T2691] netem: change failed [ 130.399779][ T419] print_req_error: 117 callbacks suppressed [ 130.399798][ T419] blk_update_request: I/O error, dev loop4, sector 408 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 130.429931][ T419] blk_update_request: I/O error, dev loop4, sector 408 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 130.460806][ T419] blk_update_request: I/O error, dev loop4, sector 409 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 130.475905][ T2727] udc-core: couldn't find an available UDC or it's busy [ 130.480368][ T419] blk_update_request: I/O error, dev loop4, sector 410 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 130.536492][ T2729] tipc: Enabling of bearer rejected, already enabled [ 130.553523][ T2727] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 130.625683][ T419] buffer_io_error: 104 callbacks suppressed [ 130.625703][ T419] Buffer I/O error on dev loop4p7, logical block 10, async page read [ 130.689089][ T419] blk_update_request: I/O error, dev loop4, sector 411 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 130.737409][ T419] Buffer I/O error on dev loop4p7, logical block 11, async page read [ 130.751244][ T323] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 130.829224][ T419] blk_update_request: I/O error, dev loop4, sector 412 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 130.908117][ T419] Buffer I/O error on dev loop4p7, logical block 12, async page read [ 130.969999][ T419] blk_update_request: I/O error, dev loop4, sector 413 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 131.051108][ T323] usb 3-1: device descriptor read/64, error -71 [ 131.066474][ T419] Buffer I/O error on dev loop4p7, logical block 13, async page read [ 131.111135][ T419] blk_update_request: I/O error, dev loop4, sector 414 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 131.261482][ T419] Buffer I/O error on dev loop4p7, logical block 14, async page read [ 131.269897][ T419] blk_update_request: I/O error, dev loop4, sector 415 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 131.288314][ T419] Buffer I/O error on dev loop4p7, logical block 15, async page read [ 131.311449][ T1265] blk_update_request: I/O error, dev loop4, sector 408 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 131.325248][ T354] Buffer I/O error on dev loop4p2, logical block 8, async page read [ 131.337419][ T419] Buffer I/O error on dev loop4p3, logical block 8, async page read [ 131.350773][ T354] Buffer I/O error on dev loop4p2, logical block 9, async page read [ 131.360968][ T1265] Buffer I/O error on dev loop4p7, logical block 8, async page read [ 131.721142][ T323] usb 3-1: device descriptor read/64, error -71 [ 131.731719][ T2752] FAT-fs (loop3): Unrecognized mount option "time_offset=0x)0000000000004f7" or missing value [ 132.051296][ T323] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 132.321126][ T323] usb 3-1: device descriptor read/64, error -71 [ 132.725432][ T323] usb 3-1: device descriptor read/64, error -71 [ 132.740245][ T2781] netlink: 12 bytes leftover after parsing attributes in process `syz.4.645'. [ 132.958385][ T323] usb usb3-port1: attempt power cycle [ 133.098464][ T2785] tipc: Enabling of bearer rejected, already enabled [ 133.187568][ T2788] netlink: 12 bytes leftover after parsing attributes in process `syz.1.646'. [ 133.920097][ T323] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 133.932425][ T2791] device wireguard0 entered promiscuous mode [ 134.086433][ T2794] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 134.094432][ T323] usb 3-1: device descriptor read/8, error -71 [ 134.124828][ T2786] device lo entered promiscuous mode [ 134.131473][ T2786] device tunl0 entered promiscuous mode [ 134.137890][ T2794] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 134.152361][ T2786] device gre0 entered promiscuous mode [ 134.167575][ T2786] device gretap0 entered promiscuous mode [ 134.174388][ T2794] F2FS-fs (loop3): Found nat_bits in checkpoint [ 134.188419][ T2786] device erspan0 entered promiscuous mode [ 134.199522][ T2786] device ip_vti0 entered promiscuous mode [ 134.209685][ T2786] device ip6_vti0 entered promiscuous mode [ 134.216263][ T2794] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 134.223593][ T2794] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 134.223600][ T2786] device sit0 entered promiscuous mode [ 134.236863][ T2786] device ip6tnl0 entered promiscuous mode [ 134.244333][ T2786] device ip6gre0 entered promiscuous mode [ 134.282001][ T2786] device syz_tun entered promiscuous mode [ 134.291276][ T2807] EXT4-fs error (device loop0): ext4_orphan_get:1395: inode #15: comm syz.0.651: casefold flag without casefold feature [ 134.320574][ T2786] device ip6gretap0 entered promiscuous mode [ 134.340544][ T2786] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.347893][ T2786] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.356171][ T2786] device bridge0 entered promiscuous mode [ 134.363919][ T2786] device dummy0 entered promiscuous mode [ 134.370821][ T2786] device veth0 entered promiscuous mode [ 134.377839][ T2786] device veth1 entered promiscuous mode [ 134.379685][ T323] usb 3-1: device descriptor read/8, error -71 [ 134.384766][ T2807] EXT4-fs error (device loop0): ext4_orphan_get:1400: comm syz.0.651: couldn't read orphan inode 15 (err -117) [ 134.410041][ T2813] FAT-fs (loop4): Unrecognized mount option "time_offset=0x)0000000000004f7" or missing value [ 134.434552][ T2786] device wg0 entered promiscuous mode [ 134.441561][ T2807] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobarrier,,errors=continue [ 134.798019][ T2786] device wg1 entered promiscuous mode [ 134.804765][ T2786] device wg2 entered promiscuous mode [ 134.812183][ T2786] device veth0_to_bridge entered promiscuous mode [ 135.077624][ T2786] device veth1_to_bridge entered promiscuous mode [ 135.094432][ T2786] device veth0_to_bond entered promiscuous mode [ 135.101480][ T2786] device bond_slave_0 entered promiscuous mode [ 135.107743][ T2786] device veth1_to_bond entered promiscuous mode [ 135.114863][ T2786] device bond_slave_1 entered promiscuous mode [ 135.121230][ T2786] device veth0_to_team entered promiscuous mode [ 135.128060][ T2786] device team_slave_0 entered promiscuous mode [ 135.134837][ T2786] device veth1_to_team entered promiscuous mode [ 135.141787][ T2786] device team_slave_1 entered promiscuous mode [ 135.148046][ T2786] device veth0_to_batadv entered promiscuous mode [ 135.155548][ T2786] device batadv_slave_0 entered promiscuous mode [ 135.172929][ T2786] device veth1_to_batadv entered promiscuous mode [ 135.180401][ T2786] device batadv_slave_1 entered promiscuous mode [ 135.194792][ T2786] device xfrm0 entered promiscuous mode [ 135.201637][ T2786] device veth0_to_hsr entered promiscuous mode [ 135.208803][ T2786] device hsr_slave_0 entered promiscuous mode [ 135.261819][ T2786] device veth1_to_hsr entered promiscuous mode [ 135.268943][ T2786] device hsr_slave_1 entered promiscuous mode [ 135.282724][ T2786] device veth1_virt_wifi entered promiscuous mode [ 135.308790][ T2786] device veth0_virt_wifi entered promiscuous mode [ 135.316533][ T2786] device veth1_vlan entered promiscuous mode [ 135.328132][ T2786] device vlan0 entered promiscuous mode [ 135.334389][ T2786] device vlan1 entered promiscuous mode [ 135.345664][ T2786] device veth0_macvtap entered promiscuous mode [ 135.353089][ T2786] device macsec0 entered promiscuous mode [ 135.359846][ T2786] device ip6erspan0 entered promiscuous mode [ 135.366131][ T2786] device gretap1 entered promiscuous mode [ 135.415015][ T2835] netlink: 32 bytes leftover after parsing attributes in process `syz.4.656'. [ 135.611922][ T2849] exfat: Bad value for 'gid' [ 135.616027][ T419] print_req_error: 332 callbacks suppressed [ 135.616046][ T419] blk_update_request: I/O error, dev loop4, sector 208 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 135.628884][ T354] blk_update_request: I/O error, dev loop4, sector 608 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 135.635588][ T1265] blk_update_request: I/O error, dev loop4, sector 408 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 135.646822][ T354] blk_update_request: I/O error, dev loop4, sector 608 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 135.657636][ T419] blk_update_request: I/O error, dev loop4, sector 208 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 135.681372][ T1265] blk_update_request: I/O error, dev loop4, sector 408 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 135.692673][ T1265] buffer_io_error: 292 callbacks suppressed [ 135.692683][ T1265] Buffer I/O error on dev loop4p7, logical block 8, async page read [ 135.706958][ T1265] blk_update_request: I/O error, dev loop4, sector 409 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 135.709280][ T354] Buffer I/O error on dev loop4p2, logical block 8, async page read [ 135.722490][ T1265] Buffer I/O error on dev loop4p7, logical block 9, async page read [ 135.726900][ T419] Buffer I/O error on dev loop4p3, logical block 8, async page read [ 135.742695][ T354] blk_update_request: I/O error, dev loop4, sector 609 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 135.754236][ T419] blk_update_request: I/O error, dev loop4, sector 209 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 135.765721][ T1265] blk_update_request: I/O error, dev loop4, sector 410 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 135.777774][ T354] Buffer I/O error on dev loop4p2, logical block 9, async page read [ 135.786050][ T419] Buffer I/O error on dev loop4p3, logical block 9, async page read [ 135.794451][ T1265] Buffer I/O error on dev loop4p7, logical block 10, async page read [ 135.803103][ T354] Buffer I/O error on dev loop4p2, logical block 10, async page read [ 135.804089][ T419] Buffer I/O error on dev loop4p3, logical block 10, async page read [ 135.819468][ T419] Buffer I/O error on dev loop4p3, logical block 11, async page read [ 135.873120][ T2857] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 135.944260][ T2861] tipc: Enabling of bearer rejected, already enabled [ 136.185832][ T2862] EXT4-fs error (device loop3): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 136.747499][ T9] ------------[ cut here ]------------ [ 136.753195][ T9] kernel BUG at fs/ext4/inode.c:2778! [ 136.759047][ T9] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 136.765245][ T9] CPU: 1 PID: 9 Comm: kworker/u4:1 Tainted: G W syzkaller #0 [ 136.774018][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2025 [ 136.784113][ T9] Workqueue: writeback wb_workfn (flush-7:3) [ 136.790133][ T9] RIP: 0010:ext4_writepages+0x2ddb/0x2e00 [ 136.795864][ T9] Code: 2d 94 ff 84 db 75 31 e8 c3 2a 94 ff 49 bc 00 00 00 00 00 fc ff df 4c 8b 6c 24 30 48 8b 5c 24 38 e9 21 f8 ff ff e8 a5 2a 94 ff <0f> 0b e8 9e 2a 94 ff e8 75 ef 30 ff eb 98 e8 92 2a 94 ff e8 69 ef [ 136.815575][ T9] RSP: 0018:ffffc90000097180 EFLAGS: 00010293 [ 136.821650][ T9] RAX: ffffffff81cf7b6b RBX: 0000008410000000 RCX: ffff88810024cf00 [ 136.829631][ T9] RDX: 0000000000000000 RSI: 0000008000000000 RDI: 0000000000000000 [ 136.837610][ T9] RBP: ffffc900000974f0 R08: dffffc0000000000 R09: ffffed1023841ecf [ 136.845590][ T9] R10: ffffed1023841ecf R11: 1ffff11023841ece R12: dffffc0000000000 [ 136.853568][ T9] R13: ffff88810e8fe000 R14: 0000008000000000 R15: ffff88811c20f670 [ 136.861549][ T9] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 136.870490][ T9] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 136.877081][ T9] CR2: 000055557f0d94a8 CR3: 0000000124556000 CR4: 00000000003506a0 [ 136.885068][ T9] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 136.893057][ T9] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 136.901045][ T9] Call Trace: [ 136.904344][ T9] ? put_callchain_entry+0xb0/0xb0 [ 136.909450][ T9] ? __bpf_get_stackid+0x23a/0x960 [ 136.914665][ T9] ? bpf_send_signal_common+0x315/0x420 [ 136.920344][ T9] ? __kasan_check_write+0x14/0x20 [ 136.925448][ T9] ? __switch_to+0x50f/0xfc0 [ 136.930032][ T9] ? bpf_send_signal_common+0x315/0x420 [ 136.935574][ T9] ? ext4_readpage+0x220/0x220 [ 136.940334][ T9] ? __kasan_check_write+0x14/0x20 [ 136.945441][ T9] ? __switch_to+0x50f/0xfc0 [ 136.950053][ T9] ? bpf_send_signal_thread+0x16/0x20 [ 136.955418][ T9] ? bpf_trace_run3+0xd0/0x230 [ 136.960197][ T9] ? __kasan_check_write+0x14/0x20 [ 136.965315][ T9] ? bpf_send_signal_thread+0x16/0x20 [ 136.970691][ T9] ? ext4_readpage+0x220/0x220 [ 136.975448][ T9] do_writepages+0x12a/0x270 [ 136.980033][ T9] ? __writepage+0x130/0x130 [ 136.984620][ T9] ? __kasan_check_write+0x14/0x20 [ 136.989738][ T9] ? _raw_spin_lock+0x8e/0xe0 [ 136.994409][ T9] ? __kasan_check_write+0x14/0x20 [ 136.999517][ T9] ? _raw_spin_lock+0x8e/0xe0 [ 137.004186][ T9] __writeback_single_inode+0xd5/0xa20 [ 137.009669][ T9] ? wbc_attach_and_unlock_inode+0x171/0x590 [ 137.015643][ T9] writeback_sb_inodes+0x860/0x1400 [ 137.020878][ T9] ? queue_io+0x4c0/0x4c0 [ 137.025239][ T9] ? __kasan_check_read+0x11/0x20 [ 137.030347][ T9] ? queue_io+0x385/0x4c0 [ 137.034669][ T9] wb_writeback+0x3e3/0xb90 [ 137.039169][ T9] ? wb_io_lists_depopulated+0x180/0x180 [ 137.044793][ T9] ? set_worker_desc+0x155/0x1c0 [ 137.049726][ T9] ? update_load_avg+0x4dc/0x14f0 [ 137.054744][ T9] ? __kasan_check_write+0x14/0x20 [ 137.059852][ T9] wb_workfn+0x38f/0xe20 [ 137.064107][ T9] ? inode_wait_for_writeback+0x200/0x200 [ 137.069841][ T9] ? _raw_spin_unlock_irq+0x4e/0x70 [ 137.075031][ T9] ? finish_task_switch+0x12e/0x5a0 [ 137.080222][ T9] ? __switch_to_asm+0x34/0x60 [ 137.084981][ T9] ? __schedule+0xb4f/0x1310 [ 137.089564][ T9] ? __kasan_check_read+0x11/0x20 [ 137.094606][ T9] ? read_word_at_a_time+0x12/0x20 [ 137.099711][ T9] ? strscpy+0x9b/0x290 [ 137.103900][ T9] process_one_work+0x6e1/0xba0 [ 137.108757][ T9] worker_thread+0xa6a/0x13b0 [ 137.113439][ T9] kthread+0x346/0x3d0 [ 137.117588][ T9] ? worker_clr_flags+0x190/0x190 [ 137.122615][ T9] ? kthread_blkcg+0xd0/0xd0 [ 137.127202][ T9] ret_from_fork+0x1f/0x30 [ 137.131621][ T9] Modules linked in: [ 137.136573][ T323] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 137.144973][ T9] ---[ end trace 16d607995ac14538 ]--- [ 137.145000][ T9] RIP: 0010:ext4_writepages+0x2ddb/0x2e00 [ 137.145012][ T9] Code: 2d 94 ff 84 db 75 31 e8 c3 2a 94 ff 49 bc 00 00 00 00 00 fc ff df 4c 8b 6c 24 30 48 8b 5c 24 38 e9 21 f8 ff ff e8 a5 2a 94 ff <0f> 0b e8 9e 2a 94 ff e8 75 ef 30 ff eb 98 e8 92 2a 94 ff e8 69 ef [ 137.145019][ T9] RSP: 0018:ffffc90000097180 EFLAGS: 00010293 [ 137.145033][ T9] RAX: ffffffff81cf7b6b RBX: 0000008410000000 RCX: ffff88810024cf00 [ 137.145051][ T9] RDX: 0000000000000000 RSI: 0000008000000000 RDI: 0000000000000000 [ 137.206375][ T24] kauditd_printk_skb: 35 callbacks suppressed [ 137.206388][ T24] audit: type=1400 audit(1758638106.500:1033): avc: denied { create } for pid=2877 comm="syz.4.668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 137.235585][ T24] audit: type=1400 audit(1758638106.500:1034): avc: denied { write } for pid=2877 comm="syz.4.668" path="socket:[23645]" dev="sockfs" ino=23645 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 137.259325][ T9] RBP: ffffc900000974f0 R08: dffffc0000000000 R09: ffffed1023841ecf [ 137.268091][ T9] R10: ffffed1023841ecf R11: 1ffff11023841ece R12: dffffc0000000000 [ 137.276529][ T9] R13: ffff88810e8fe000 R14: 0000008000000000 R15: ffff88811c20f670 [ 137.284797][ T9] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 137.294066][ T9] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 137.300663][ T9] CR2: 00007ffd83884bd8 CR3: 000000010d0d9000 CR4: 00000000003506b0 [ 137.309037][ T9] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 137.317282][ T9] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 137.325365][ T9] Kernel panic - not syncing: Fatal exception [ 137.331743][ T9] Kernel Offset: disabled [ 137.336080][ T9] Rebooting in 86400 seconds..