last executing test programs: 36m11.879896362s ago: executing program 1 (id=273): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x40041, 0x0) setuid(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x17, 0x0, 0xfffffffc, 0x8000}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @random="0106002010ff"}) r5 = fsopen(&(0x7f0000000080)='bpf\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r6, &(0x7f0000000140)='./file0\x00') readlinkat(r6, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f00000002c0)=""/204, 0xcc) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xb, 0x8, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffff9}, 0x50) 36m9.323274331s ago: executing program 1 (id=282): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002ac0)={0x1a, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000003f64ecb21ed7d74b542e43ae9f57f61af1c5b6016901992307df92d7c26b05a7da0582d208fd1f57c41cee38c7023e71dc864ab49f7894dd5ee29721d0625ee50c8aeca9b5090d85ff1c5df40229f0981507171aec7dc97abd981893d51a27e8a1033fa344fa3c6c27705648a66a47e0a1bc8fcede095704453c77f6c5370191ab55c423aae05729e69c987cf5f9aa2fd88c9e2114f53b9f82157c197397e43647b083db79f1f2"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x20c9}, 0x80) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x7, 0x4, 0x8, 0xd9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000440)={0x0, r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r5, &(0x7f0000005d40)=[{{&(0x7f0000000180)=@can={0x1d, r6}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1}}, {{&(0x7f00000022c0)=@can={0x1d, r6}, 0x80, &(0x7f0000003340)=[{&(0x7f0000002340)}], 0x1}}], 0x2, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) wait4(r7, 0x0, 0x0, 0x0) ptrace$cont(0x18, r7, 0x10000000000005, 0x6) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000202505a1a44000010203010902640002010000000904000001020d0000052406000105200000000d240f010012000000000000000624ab"], 0x0) 36m4.034957722s ago: executing program 1 (id=290): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x9) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r3 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r3, &(0x7f0000000000)='./file1\x00', 0xc000, 0x0) rename(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file1\x00') chdir(&(0x7f00000003c0)='./bus\x00') unlink(&(0x7f0000000280)='./file1\x00') r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mincore(&(0x7f0000f0c000/0x3000)=nil, 0x3000, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) 36m2.737300158s ago: executing program 1 (id=291): syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000001240)='./file2\x00', 0x8410, &(0x7f0000000480)=ANY=[@ANYBLOB="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", @ANYBLOB="d23c17f6ec95b3b820b1161ffa233394c6007d8285b061be4d1d842e4a63ec77a08347691f71d1e4132f09405a5b81867a01cf3df73c16fd31622d37a921bdbff76ef2fed6da828ab4e0f87928c18c0380050249fb6ab8e225d1"], 0x1, 0x2a0, &(0x7f00000001c0)="$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") truncate(&(0x7f0000000840)='./file1\x00', 0x2) close(0x3) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) 35m57.93153473s ago: executing program 1 (id=293): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000540)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) r3 = openat$random(0xffffffffffffff9c, &(0x7f000000fe80), 0x40800, 0x0) setreuid(0x0, 0xee00) ioctl$RNDADDENTROPY(r3, 0x40085203, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r4, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x101d0}], 0x1}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r5) sendmsg$IEEE802154_START_REQ(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)={0x2c, r6, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x17}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0xffff}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000094}, 0x8000) dup(0xffffffffffffffff) socket$xdp(0x2c, 0x3, 0x0) 35m54.216087354s ago: executing program 1 (id=299): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sigaltstack(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x513, &(0x7f0000000c40)="$eJzs3W9rJHcdAPDvTLJp7i41WxU5C7bFVu6K3m7S2DaKtBVEHxXU+jzGZBNCNtmQ3dRLKJriCxBEVPAF+ETwBQjSlyDCgT4XFUX0Th/qjczuRPNnN1mSTfbcfD4w2d9v/n2/vyE7O39+zARwbb0QEW9FxFhEvBwR08X4tBgW8sp+Z75HD99byocksuydvyWRFOMO1pXXxyPiVmeRmIyIr38l4lvJybjN3b31xXq9tl3Uq62NrWpzd+/e2sbiam21tjk3N/va/Ovzr87PZIULtbMcEW986U8/+v7PvvzGrz7z7d8v/OXud/K0vvCxTt4RsXShAD101l1qb4sD+TbavoxgQ5K3pzQ27CwAAOhHfoz/4Yj4ZPv4fzrG2kdzAAAAwCjJ3pyKfyURGQAAADCy0oiYiiStFH0BpiJNK5VOH96Pxs203mi2Pr3S2NlczqdFlKOUrqzVazNFX+FylJK8Plv0sT2ov3KsPhcRz0TED6dvtOuVpUZ9edgXPwAAAOCauPX80fP/f06n7TIAAAAwYso9KwAAAMCocMoPAAAAo8/5PwAAAIy0r779dj5kB+/xXn53d2e98e695VpzvbKxs1RZamxvVVYbjdX2M/s2zlpfvdHY+mxs7tyvtmrNVrW5u7ew0djZbC2sHXkFNgAAAHCFnnn+g98lEbH/+RvtIYrnAAIc8cdhJwAM0tiwEwCGZnzYCQBDUzpzDnsIGHXJGdNPdt7pXCuMX19OPgAAwODd+fjJ+/8TxbSzrw0A/8/09QGA68fdPbi+SuftAXh70JkAw/KhzsdTvab3fHhHH/f/O9cYsuxciQEAAAMz1R6StFIcp09FmlYqEU+3XwtQSlbW6rWZ4vzgt9Olp/L6bHvJ5Mw+wwAAAAAAAAAAAAAAAAAAAAAAAABAR5YlkQEAAAAjLSL9c9J+mn/EnemXpo5eHTj21q+fvvPj+4ut1vZsxETy9+l81EREtH5SjH8l80oAAAAAeAJ0ztOLz9lhZwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAqHn08L2lg+Eq4/71ixFR7hZ/PCbbn5NRioib/0hi/NBySUSMDSD+/vsRcbtb/CQeZ1lWLrLoFv/GJccvtzdN9/hpRNwaQHy4zj7I9z9vdfv+pfFC+7P792+8GC6q9/4v/e/+b6zH/ufpY/Venn3wi2rP+O9HPDveff9zED/pxD8SIq+82Gcbv/mNvb2uEw6tslv8w7GqrY2tanN3797axuJqbbW2OTc3+9r86/Ovzs9UV9bqteJv1zA/+MQvH5/W/ps94pePtv/E9n+pr9Zn8e8H9x9+pFMpdYt/98Xuv7+3e8RPi9++TxXlfPqdg/J+p3zYcz//zXOntX+5R/snz2j/3b7aH597+Wvf+0PXKSe2BgBwFZq7e+uL9Xpt+5TCZB/zXHHhzScjjQEW4slIY1iF7Lud/8eLreeCi58oZBdZfDwGkMbEie/pWJx3hUnEfr6uPv8hAQCAEfO/g/7T7iABAAAAAAAAAAAAAAAAAAAAl+mcjyWbjIi+Zz4ec384TQUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAONV/AgAA//8FStFZ") pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_selinux(r6, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x0) 35m38.683072911s ago: executing program 32 (id=299): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sigaltstack(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x513, &(0x7f0000000c40)="$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") pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_selinux(r6, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x0) 5m2.756541257s ago: executing program 2 (id=4863): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x800700, &(0x7f0000000740)={[{@grpquota}, {@journal_dev={'journal_dev', 0x3d, 0x101}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4c}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x8}}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x471, &(0x7f0000000200)="$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") socket$inet6(0xa, 0x3, 0xff) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x9031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) rename(&(0x7f0000000400)='./bus\x00', 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x18) r4 = syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./file0\x00', 0x400, &(0x7f0000000180)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c757466383d302c757365667265652c646973636172642c757466383d312c756e695f786c6174653d302c73686f72746e616d653d77696e39352c756e695f786c6174653d302c756e695f786c6174653d302c0008442895b66131b4e4d54b2ba6ae54da0e13047e9f62fbb85ccc774b3ec4c81a1a985232d16d0d934460e920a59172e764c68194b9d9d0be76c595bac1fc5a0a8256a7b77e071e9bdd6100f9ae"], 0xfd, 0x274, &(0x7f0000000500)="$eJzs3MGLG1UYAPDPbNvdbmmzBxEUxIde9BLa9S8I0oK4oKyNqAdh6mY17JgsmbgSEdubV/+O4tGboP4De/HmXbwsguClBzHSJONm10BbaZzV/H4Q5su8+fLeTGbCNwN5R29/+dHebtHYzQZRW0tRi7gT9yI27kdTT0yXtXF8IWbdiZcu/fbjs2++8+5rza2t69sp3WjefHkzpXTluW8/+eyr578fXHrr6yvfrMbhxntHv27+dPjU4dNHf9wsP703SFm61esNslt5O+10ir1GSm/k7axop063aPdPtO/mvf39Ycq6O5fX9/vtokhZd5j22sM06KVBf5iyD7JONzUajXR5PZbNyiNntO5ub2fNhQyGKlyct7Lfb2Yrcxtbd/+NQQEAZ0tV9f+HnSJ1itR9UP1fC/X/4qj/l8H9+n99ev2epP4HAAAAAAAAAAAAAID/gnujUX00GtXLZflajYi1iCjfVz1OFsP3v9xm/ri3FpF/cdA6aE2Wk/bmbnQij3ZcPR/x+/h8mJrEN17dun41jW3Ed/ntaf7tg9ZKrJb5pY35+dcm+elk/vlYn+1/M+rx5Pz8zbn5F+LFF2byG1GPH96PXuSxMz6vj/M/v5bSK69vncq/ON4OAAAA/g8a6S9/u38ftzdSOW3IqfbJyuPnA1F/wPOBU/fX5+KZc9XtNwAAACyTYvjpXpbn7b7g0QKHbuFBLSIq6v2XiDgbB+GxBj9/PLnqH2bjqn+ZAACAx+246K96JAAAAAAAAAAAAAAAAAAAALC8HnbysHL7fzL32Ex3K9XsJQAAAAAAAAAAAAAAAAAAAAAAAJwNfwYAAP//xsMhSw==") r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000440)={'ip_vti0\x00', &(0x7f0000000400)={'gre0\x00', 0x0, 0x0, 0x7c7, 0x3, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x86, 0x4, 0x0, @loopback, @local}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f3, &(0x7f0000000080)={'syztnl0\x00', 0x0}) setpgid(r0, r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x18) socket(0x28, 0x5, 0x0) utimensat(0xffffffffffffff9c, &(0x7f00000003c0)='.\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="08d62b803445c2cf34d3c1889fb625270dbdb2dcee27ecbc6de6963ebaead6a40215893863ca424ef66e41d755e508da62e0ef10b8544e264b2119e018b6064bc691de08f5ee9e8ee43b573cc945e4dacefa1fecd10ee4d5c9a26731a2de35d46bf0855d52f81ca22fac040e35a653b90e1b9f60112e4f30437a6a0d08cb620f4aa8ec699b12c988c10d0ea617153b1b994cc5839a1100befffb98271c4327d2099faf37e1e05ce369c17b6a57d540b7f8430f636f119147caafec5f1d95020823ecfa3de94cce3ae1131228dee656f982ccd14b91532ef1c599ea53f0b5e4945f6d7a2501ed3e48f81bbbce94", @ANYRESHEX=r0, @ANYRES64=r4, @ANYRES8], 0x50) gettid() futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) 4m59.749283082s ago: executing program 2 (id=4869): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() r2 = fcntl$getown(r0, 0x9) syz_open_procfs(r2, &(0x7f0000000100)='sessionid\x00') sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000140)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r5, 0x6, 0x21, &(0x7f0000002e00)="2210942272ce9a37c0fb001f95548ca7", 0x20) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400007a784464c6edc35c55b80d8669a85cbe65fbe9fd0c2541443061bbe9fc7496a6d2f5b4f36b8427d91ee662ea57625f89e559d3e997a245e1ae73f1b30acbc03b6fd10082514793f499d19e606b788c658a90ef97734209a21cba1c752119efc3ae7364dde2e3c5a3800b06e4"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) syz_clone(0x44209400, 0x0, 0x0, &(0x7f0000000180), 0x0, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r8, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r8, 0x29, 0x36, &(0x7f00000000c0)=ANY=[], 0x8) bind$inet6(r8, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r8, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) setsockopt$inet6_int(r8, 0x29, 0x3a, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x503, 0x0, 0xfffff7fd, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x48482}}}}}}]}, 0x48}}, 0x8080) recvmmsg(r8, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r8, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000000c0)=0xf) 4m57.049355322s ago: executing program 2 (id=4871): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e0000001ac1414aa0000000003"], 0x1c) setsockopt$inet_mreqn(r0, 0x0, 0x25, &(0x7f0000000080)={@multicast1, @local}, 0xc) r1 = getpid() close_range(r0, r0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7a680000) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000180)='-,])\\\x00', &(0x7f00000001c0)='#+\xe3[}{]7)-}$\x00', 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r5, 0x29, 0x1, &(0x7f0000000040), 0x4) write$binfmt_misc(r5, &(0x7f0000000100), 0xfdef) shutdown(r5, 0x0) 4m55.560158234s ago: executing program 2 (id=4873): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x4, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000ffffffff850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000280)='./file2\x00', 0x800084, &(0x7f0000000240)=ANY=[@ANYRESDEC, @ANYRES8, @ANYRES16], 0x6, 0x2d7, &(0x7f0000000a40)="$eJzs3b1rJGUcB/DfbGZf1GK3sBLBAS2sjsu1NhvkDsRUHlucFhq8O5DsIlwg4ut6ldjZWPoXCIJ/iI2dpWAr2HnCwci8ZXdzk80q2YiXz6dInszzfGd+85Jkmvzy3ouzw7tZ3H/42a8xGCTRGfcjHiUxik40vowV428CAPg/e5Tn8UdeaZn+5es12cEW6wIAtuec3/+1tPx4p1jx4+XVBgBsx+07b7+5t79/860sG8St2VfHkyQiis/V/N79+CCmcS+uxzAeR5QvCt0o3xaK4a08z+dpVhjFK7P58aRIzt79qd7/3u8RZX43hjEqN528bZT5N/Zv7maVpfy8qOPZ+vjjIn8jhvH8SXglf6MlH5NevPryUv3XYhg/vx8fxjTulkUs8l/sZtnr+bd/fvpOUV6RT+bHk365biHfaQ4+v+R7BAAAAAAAAAAAAAAAAAAAAADA0+da3TunH2X/nmJT3X9n53HxRTeyxmi1P0+VT5odLfoDRSfP83ke3zX9da5nWZYnVRvBRT6NF9K6sSAAAAAAAAAAAAAAAAAAAABccUcff3J4MJ3ee3Ahg6YbQBoRf92O+Lf7GS9teSnWL+7XxzyYTjv1cHVNurwldpo1ScTaMoqTuKDLct7gmSdqrgff/9CaKs7oKI22qcH5B+22H+vswedtUx91q+vYmmqersODpP0a9k+KHxQ3Lk7fuF6019ONU1t6ZxXfPIqbnWmvdWr4j29l77lyMF+zJpJ13xev/VaVvXQW5aB5ynvlVW2Nd+vBUvzUs7HR8xyDKv7kz4pEtw4AAAAAAAAAAAAAAAAAANiqxV//tkw+XBvt5P2tlQUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAl2rx//83GaSr4Q1SvXhw9F+dGwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFfH3wEAAP//f/xSgA==") open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x201008, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000001180)='./bus\x00') rmdir(&(0x7f0000000440)='./file0\x00') writev(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x8004084) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x14) syz_mount_image$f2fs(&(0x7f0000000080), &(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x450, &(0x7f0000001340)=ANY=[@ANYBLOB="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", @ANYBLOB="c48c3efc494546da45362799e6f240421e0fa8b6ebaf28e2d9d3db3ce6fc536fc07524080a709f6831ceb5fa883198c63c2c17fceff8cc47e947ecb70191115fe82096190ed0e4cce683d2a4cf5626d5b27fa9d887d1a498fb25930eea33871a63973789f301a1f9e0b4f0dd82664f17ff3fadda01ee254ea496f8ecf64dae9325fe54fef06abd6eb487f22ce3aa4b83489b4b9fc192b23eae3369bf49e78e8a01dbd401b867b8154dfcc78d660b00eb4ee0054a9ee6a5dab12a7a41d4619fafb7"], 0x2, 0x5567, &(0x7f0000006f40)="$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") 4m47.2733496s ago: executing program 2 (id=4886): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)='%-010d \x00'}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x26, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = syz_io_uring_setup(0x952, &(0x7f0000000240), &(0x7f0000000140)=0x0, &(0x7f0000000080)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r5 = eventfd2(0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r3, 0x4, &(0x7f0000000000)=r5, 0x1) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) readv(r5, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/134, 0x86}], 0x1) io_uring_enter(r3, 0x47fa, 0x0, 0x0, 0x0, 0xff0b) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc00000000000000", @ANYRES32, @ANYBLOB="00000000000000a84400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000400"/28], 0x50) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000280)={'wg2\x00'}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x0, 0x88, 0x0, 0x0, 0x0, @local, @rand_addr=' \x01\x00', 0x80}}) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bb000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003900000095"], &(0x7f00000000c0)='GPL\x00', 0x76, 0x0, 0x0, 0x41000, 0x24, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000000)=0xf) ioctl$TCFLSH(r7, 0x400455c8, 0x40000000004) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000180)=0x33) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r8}, 0x18) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}}, 0x20) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000100)) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'veth1_macvtap\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r10, {}, {}, {0xfff3}}}, 0x24}}, 0x0) 4m46.735143414s ago: executing program 2 (id=4889): setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300090d000000000000000000000004"], 0x68}, 0x1, 0x7}, 0x4a79a644ae8bc70) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffff05850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000200)='kmem_cache_free\x00'}, 0x18) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r5) r6 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r7 = open(&(0x7f0000000040)='./file0\x00', 0x101040, 0x0) sync_file_range(r7, 0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r5, 0x89f8, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'veth1_virt_wifi\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@setlink={0x28, 0x13, 0x1, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r10, 0x2424, 0x1920}, [@IFLA_NET_NS_PID={0x8, 0x13, r9}]}, 0x28}, 0x1, 0x0, 0x0, 0xc0008c1}, 0x20048000) sendmsg$nl_route_sched(r6, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000380)=@delqdisc={0xcc, 0x25, 0x1, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0x0, 0x6}, {0xffe0, 0xc}, {0xf, 0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}, @TCA_STAB={0x5c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7b, 0x5, 0xe200, 0x9, 0x1, 0x10, 0x80000001, 0x3}}, {0xa, 0x2, [0xb, 0xd, 0x3]}}, {{0x1c, 0x1, {0xe, 0xc, 0x5, 0x1, 0x2, 0xe, 0x9, 0x7}}, {0x12, 0x2, [0x8001, 0x0, 0x7, 0x400, 0x8, 0x8, 0x2]}}]}, @qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x9, 0xfffffff9, 0x81, 0xe, 0x2, 0x9, 0x1, 0xf, 0x80}}}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x40008000}, 0x0) r11 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r11, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1={0xfc, 0x1, '\x00', 0x4}, 0x0, 0x8000}}) 4m44.885034165s ago: executing program 33 (id=4889): setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300090d000000000000000000000004"], 0x68}, 0x1, 0x7}, 0x4a79a644ae8bc70) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffff05850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000200)='kmem_cache_free\x00'}, 0x18) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r5) r6 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r7 = open(&(0x7f0000000040)='./file0\x00', 0x101040, 0x0) sync_file_range(r7, 0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r5, 0x89f8, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'veth1_virt_wifi\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@setlink={0x28, 0x13, 0x1, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r10, 0x2424, 0x1920}, [@IFLA_NET_NS_PID={0x8, 0x13, r9}]}, 0x28}, 0x1, 0x0, 0x0, 0xc0008c1}, 0x20048000) sendmsg$nl_route_sched(r6, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000380)=@delqdisc={0xcc, 0x25, 0x1, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0x0, 0x6}, {0xffe0, 0xc}, {0xf, 0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}, @TCA_STAB={0x5c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7b, 0x5, 0xe200, 0x9, 0x1, 0x10, 0x80000001, 0x3}}, {0xa, 0x2, [0xb, 0xd, 0x3]}}, {{0x1c, 0x1, {0xe, 0xc, 0x5, 0x1, 0x2, 0xe, 0x9, 0x7}}, {0x12, 0x2, [0x8001, 0x0, 0x7, 0x400, 0x8, 0x8, 0x2]}}]}, @qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x9, 0xfffffff9, 0x81, 0xe, 0x2, 0x9, 0x1, 0xf, 0x80}}}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x40008000}, 0x0) r11 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r11, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1={0xfc, 0x1, '\x00', 0x4}, 0x0, 0x8000}}) 9.428696261s ago: executing program 6 (id=8751): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x20c006, &(0x7f0000000480)={[{@grpjquota}, {@mblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@discard}, {@grpquota}], [{@seclabel}]}, 0x1, 0x446, &(0x7f0000000d40)="$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") r4 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r4, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3) 7.140145807s ago: executing program 6 (id=8757): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x7, 0x2a, 0x5}, 0x50) keyctl$chown(0x4, 0x0, 0xee01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000081139000bfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff0000000071103500000000001d300500000000004704000001ed00000f030000000000001d44020000000000620a00fe040400007203000000000000b500f7ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a8641aa05a1336b3b4c4becea710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3380d28e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51bf900000000000000d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343cccc953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93020000000000000080e69db384ac7eeedcf2ba3a9508f9d6aba582a896a9f1e096df6ecea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6032399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c9102"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 7.092682991s ago: executing program 4 (id=8759): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0xc) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r4, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) shutdown(r4, 0x1) 6.347943292s ago: executing program 3 (id=8761): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x200, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r3 = timerfd_create(0x7, 0x0) timerfd_gettime(r3, &(0x7f0000000000)) 5.134017951s ago: executing program 4 (id=8763): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{r0}, &(0x7f0000000780), &(0x7f00000007c0)=r1}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="61123c00000000006113500000000000bf200000000000001500000008ffffffbd03010000000000cf000000000000006916000000000000bf67000000000000170600000fff07006706000002000000070600000ee60000bf050000000000001f650000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070500000419311f2d4301000000000095000000000000000500000000000000950000000000000032ed3c5be95e76b67754bb12dc8c27df8ecf264e0f84f9f17d3c30e3c72fe9755ba08554bb4f2278af6d71d79a5e12810a089dc1d4681d295c45a674f888a08034b7dd399703d6c4f633a9a4f16d0a3e1282ee45a010fb94fa9de56c9d8a814261bdb94a6538b89dc6c60bf70d742a81b72bab8395fa64810b5b1bfd3782519518c51231422bb8fab4d4d897db2c544c0ec50b8eac8c63d2b1cd06a39702bd547f5ebaa6954f01cef3c9bacec15e2e3b2bd352e93a22adfe8efe33ff2f8ee5476d4ef7a6f0c4704403b9bad2b648e90fff24f69a5ef05f5408ea197ed09a9510ee6063229de2984abdd46ea3ec78e3127002ed37c2564b8f8a621483fb2a5ff221e0d831d64759d17b8c59d0f2b0727f6b7958fb5b939af4be5e55a95f8c6d785a91c7c3f0c17ae7f9ac5ff05f5ecddf0cef90d50e763be96496661c749e21ab63a1f50b30a65a9027ba357bf8c614497ee59b68bf6a5d45c81c567e347d54574164bbea3e7b7f8a13cce7014137f250370b8a70ae3eaf6d6f17759c3886871e97d063b7f26eed3226bb0b9ee6320a2b02fea7a06a0e37182adf4b1be6f29358d4f5dfec405bde000000000000000000000000000000902e647cc5962eccaad64429335f3ce2a10ce72da82875427c1d16db24dca08487ba41a3fb337f8432d8176a515229e32ee11a1dd23dac038f989eafdd67f60b63f7be4d1bf325b57335b9973c73bfa89517a98b1fc15f8a2713718feb01059d8b570a0000e3b2a93bd745a74f9bf7f7abc5d15d56331055cc0820c5c9d676d92557c4e47cfbe27f91f0eb18e21dfdab3c84ec11377fbbfd1e000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="b9ff03316844268cb89e14f0080047e0ffff00124000632f77fbac14fe16e000030a07080403fe80000020006558845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0x24, 0x60000000}, 0x2c) 5.124217952s ago: executing program 3 (id=8764): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000000), &(0x7f0000000180)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000440)=ANY=[@ANYBLOB="b0"], 0xb0) mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) write$FUSE_INIT(r4, &(0x7f00000001c0)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x4, 0x800000, 0x4, 0x400, 0x5, 0x1, 0x0, 0x0, 0x1, 0x74}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) open$dir(0x0, 0x500, 0x40) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x40, 0x0) 5.114494012s ago: executing program 0 (id=8765): syz_mount_image$exfat(&(0x7f0000000180), &(0x7f0000000280)='./file0\x00', 0x80, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0x1, 0x1501, &(0x7f0000001580)="$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") socket$packet(0x11, 0x3, 0x300) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2}, 0x14) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/246, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000002c0)={0x1, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) socket$nl_netfilter(0x10, 0x3, 0xc) 4.861894583s ago: executing program 3 (id=8766): r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001fc, 0x301) ioctl$USBDEVFS_REAPURB(r0, 0x4004550c, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b7"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0x0, 0x40, &(0x7f0000000000)={0x4b5a9da54893e123, 0x14, 0x8, 0x2}, 0x8, 0x7, 0x200, 0x0, 0x0, 0x20000, 0x0}) syz_clone(0x82020080, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48) write(r3, &(0x7f0000000200)="fb37351ce3c67c5c695b02b554b56a32280cb7edf580a67ae19fa1920514853da54769d12f797052d7bf1e7ea55f90a87eede87e3394fc8070cc57f2af5174c1ca44b7526f1fd20a2d2438d8da1b89c9f285f2cb3114", 0x56) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_GET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r5, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc080}, 0x800) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={0xffffffffffffffff, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) 4.860812353s ago: executing program 0 (id=8767): bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, 0x0, &(0x7f00000001c0)='GPL\x00', 0x4, 0x93, &(0x7f00000003c0)=""/147}, 0x94) gettid() mknod(0x0, 0x8001420, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x0) connect$unix(r1, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r2, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 4.712458545s ago: executing program 6 (id=8768): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8c, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x0, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x10000000, 0x5, 0xb, 0x4, 0x6, 0x5, 0x0, 0x6, 0x5, 0x1, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d03, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0xe, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x93a, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x1, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 4.602451264s ago: executing program 5 (id=8770): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc08, 0x3, 0x238, 0x0, 0x5002004a, 0xb, 0x310, 0xea02, 0x3d0, 0x3c8, 0x3c8, 0x3d0, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'erspan0\x00', 'ip6tnl0\x00'}, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000e280)={0x2020, 0x0, 0x0}, 0x2020) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, &(0x7f0000000000), &(0x7f0000000140)}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x15, &(0x7f0000000100)={{}, 0x0, 0x0}, 0x20) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r5}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000c280)="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", 0x2000, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x0, {0x4, 0x0, 0x0, 0x0, 0x1, 0x0, {0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000340)='./file0/../file0/file0\x00', &(0x7f0000000e40)) 4.589789605s ago: executing program 5 (id=8771): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x1c, r6, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 4.16267054s ago: executing program 4 (id=8772): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) timer_create(0x2, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="5aee1757d46e117f5b4ed3323d93", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.880390903s ago: executing program 0 (id=8773): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c00)=@framed={{}, [@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) mlock2(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, &(0x7f0000000200)='\x00\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) 3.816650238s ago: executing program 6 (id=8774): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fsetxattr$system_posix_acl(r2, &(0x7f0000000000)='system.posix_acl_default\x00', 0x0, 0xfe44, 0x0) 3.455150708s ago: executing program 5 (id=8775): socket(0xa, 0x3, 0x87) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000002c0), 0x601, 0x0) ioctl$TCSETAW(r4, 0x5407, &(0x7f0000000100)={0xa, 0x7, 0x3, 0x6, 0x1b}) 3.443895329s ago: executing program 6 (id=8776): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x3e8, 0x0, 0x60, 0xd0e0000, 0x2c0, 0x100, 0x350, 0x1d8, 0x1d8, 0x350, 0x1d8, 0x7fffffe, 0x0, {[{{@uncond, 0xee02, 0x2a0, 0x2c0, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0xffff, 0x0, [{0x3, 0x77, 0x7, 0x2}, {0x6, 0x5d, 0x8, 0xf}, {0x0, 0x7, 0x4, 0x5}, {0x200, 0x10, 0x4, 0x401}, {0x2, 0x7, 0x9, 0x7}, {0x8, 0x2, 0x40, 0x80}, {0x7, 0x10, 0x4, 0xc27e}, {0x0, 0x8, 0x1, 0x9}, {0xa66, 0xf9, 0x2, 0x40}, {0xf207, 0x18, 0x1, 0x6}, {0x2, 0x8, 0x6, 0xb6}, {0x0, 0x5, 0x5, 0x4}, {0x9, 0x7f, 0x5, 0x2}, {0x5, 0x2, 0xf, 0xc00}, {0x1, 0x9, 0x2, 0x54}, {0x3, 0x2b, 0x2, 0x3}, {0xffff, 0x5, 0x6d, 0x7}, {0x6, 0xa, 0x5, 0x51d8}, {0x8, 0xe, 0x5}, {0x0, 0x40, 0x7, 0x88}, {0x7, 0x2, 0x6, 0x3}, {0x98d, 0x2, 0xff, 0x5}, {0x81, 0x1, 0x3, 0x7f}, {0x1, 0x2, 0xc0, 0x86f}, {0x8, 0x2, 0x9, 0x6}, {0x7, 0x75, 0x7, 0xd}, {0x6, 0x6, 0x6, 0x8001}, {0x122, 0x5, 0x2, 0x3dbd}, {0x5, 0x8, 0x9, 0x1}, {0x0, 0x3, 0x9, 0xff}, {0x0, 0x4, 0x0, 0xfffffff8}, {0x7, 0x1, 0x9, 0xd}, {0xfff, 0x7, 0x0, 0xbc}, {0x4, 0x4c, 0x8, 0xff}, {0x8, 0xc0, 0x80, 0x4}, {0x1, 0x9, 0x0, 0x508d}, {0x1ff, 0x5, 0x81, 0xd}, {0x0, 0x0, 0x2, 0x5}, {0x401, 0x3, 0x80, 0x9}, {0x9, 0x2, 0x0, 0x8}, {0x0, 0x1, 0xfb, 0x7}, {0xe, 0xff, 0x0, 0x7fffffff}, {0x7, 0x4, 0x7, 0x40}, {0xa, 0xc, 0x6, 0x5}, {0x9, 0x8, 0x7, 0x10000}, {0xe9, 0x6, 0x3, 0x3}, {0xb, 0x7, 0x7, 0x200}, {0xe, 0x5, 0x6, 0x2}, {0x9, 0x5, 0x0, 0x1}, {0x9, 0x1, 0x7, 0x1}, {0x1c0, 0x5, 0x2, 0x8e1}, {0x80, 0x5, 0x0, 0x7f07}, {0x6, 0x0, 0x1, 0x1ff}, {0x2, 0x28, 0xfc, 0x8}, {0x6, 0x3, 0x7, 0x2}, {0xa, 0xc5, 0x4, 0x3}, {0x3, 0x71, 0x8, 0x7}, {0x6e, 0x2, 0x0, 0xc}, {0x0, 0x7, 0x7, 0x10000}, {0x9, 0x7, 0x5, 0x7}, {0x100, 0x8, 0x3}, {0xd34, 0x7f, 0x8}, {0x9, 0x9, 0x1, 0x80000001}, {0x6, 0xfe, 0x3, 0x3}], {0x1}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@multicast2, @empty, 0xffffffff, 0xffffff00, 'veth1_virt_wifi\x00', 'xfrm0\x00', {}, {}, 0x1, 0x1, 0x6c}, 0x9400, 0x70, 0x90, 0x94}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e24, 0x0, @rand_addr, 0x8000}, 0x1c) mkdir(&(0x7f0000000540)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9, [@func={0x4, 0x0, 0x0, 0xc, 0x1}]}, {0x0, [0x61, 0x61, 0x0, 0x2e, 0x0, 0x2e, 0x30]}}, &(0x7f0000001940)=""/4096, 0x2d, 0x1000, 0x1, 0x1, 0x10000}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = dup(r6) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x10, &(0x7f0000000140)=ANY=[@ANYBLOB="717207000034b7e81d0f9b15400400", @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r8, @ANYBLOB=',k']) r9 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$evdev(r9, &(0x7f0000000340)=[{{0x0, 0xea60}, 0x11, 0x7f}], 0x18) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0xfdff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYRESOCT=r8, @ANYRES32, @ANYRES16], 0x34}, 0x1, 0x0, 0x0, 0x44854}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000071121600000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000a00)=@mangle={'mangle\x00', 0x1f, 0x6, 0x588, 0x308, 0x3f8, 0x308, 0x308, 0x0, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x6, &(0x7f0000000600), {[{{@ip={@dev={0xac, 0x14, 0x14, 0x16}, @remote, 0xffffffff, 0x0, 'wg1\x00', 'rose0\x00', {}, {}, 0x21, 0x2, 0x40}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x4, 0x0, 0x1, 0x4, 0x0, 0x6], 0x5, 0x4}}}, @common=@osf={{0x50}, {'syz0\x00', 0x0, 0x8, 0x2, 0x2}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x3, 0x7f}}}, {{@ip={@local, @empty, 0xffffff00, 0x0, 'syz_tun\x00', 'veth1_to_batadv\x00', {0xff}, {0xff}, 0x21, 0x0, 0x8}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x7}}]}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x19}}}, {{@ip={@private=0xa010100, @empty, 0xffffffff, 0xff, 'dvmrp0\x00', 'dvmrp0\x00', {0xff}, {}, 0x89, 0x2, 0x8}, 0x0, 0xc0, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x18}}, @inet=@rpfilter={{0x28}, {0x5}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@remote, [0xffffff00, 0xff, 0xff000000, 0xffffffff], 0x4e22, 0x4e23, 0x4e22, 0x4e24, 0x400, 0x8, 0x1, 0x95, 0xa5}}}, {{@ip={@rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0xb}, 0x0, 0x0, 'macsec0\x00', 'ipvlan1\x00', {0xff}, {0xff}, 0x1d, 0x0, 0x8}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip6erspan0\x00', {0x2, 0x6, 0x7, 0x0, 0x7, 0x7ff, 0xfffffa72, 0x18, 0xf8}, {0x3}}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x8dd54b38fc84a6ee, 0x0, 0x1}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0xff000000, 0xff000000, 'pim6reg0\x00', 'bond_slave_0\x00', {}, {0xff}, 0x1, 0x2, 0x2c}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @local, 0x9, 0xf, [0x3c, 0x1c, 0x3d, 0x27, 0x1f, 0x1a, 0x11, 0xa, 0x20, 0x8, 0x2b, 0x28, 0x1, 0x1f, 0x2, 0x3e], 0x0, 0x3, 0x100000001}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x5e8) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3.411776401s ago: executing program 3 (id=8777): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000080)={0x8, 0x2, 0x2}, 0x10) write(r3, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r3, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) 2.627050005s ago: executing program 0 (id=8778): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) timer_create(0x0, 0x0, &(0x7f0000000000)) syz_genetlink_get_family_id$devlink(&(0x7f0000008280), 0xffffffffffffffff) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, 0x0, 0x0) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000080)=0xc, 0x4) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f00000000c0)=0x9, 0x4) r2 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100009e173610ef171e7206de01020301090212000100000000090400000002"], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="000004000000f82710e0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000500)='hrtimer_start\x00'}, 0x10) 2.547521832s ago: executing program 5 (id=8779): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x6, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="817bb97cdac2f8f819447aa4a50c293af36b43cab2641b7753df26944b52221c709e644460775e", 0x27}], 0x1}, 0x24040050) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01090000000000000f478e"]) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0xb0, 0x4002004c4, 0x1000, 0x0, 0x0, 0x0, 0x5, 0x0, 0x9, 0x0, 0x7], 0xeeee8000, 0x2113c0}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r3, &(0x7f0000000380)=ANY=[@ANYBLOB="0e00010002"], 0x8) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003980)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="661dd86d73db6c75f11a65f20f", 0xd}], 0x1, 0x0, 0x0, 0x4c001}}], 0x1, 0x0) recvmmsg(r3, &(0x7f0000007440)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000140)=""/53, 0x35}], 0x1}, 0x3ff}], 0x1, 0x40012040, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.521870074s ago: executing program 5 (id=8780): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fstat(0xffffffffffffffff, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[]) 2.470826938s ago: executing program 4 (id=8781): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$nl_xfrm(0x10, 0x3, 0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2182, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) 2.306996782s ago: executing program 3 (id=8782): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x4000004) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r4, 0x29, 0x39, 0x0, 0x0) 2.072598861s ago: executing program 0 (id=8783): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) getsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0xfffffd9d) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x1, 0x4}}, 0x10) sendfile(r3, r2, 0x0, 0x8010002b) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) 1.634791856s ago: executing program 5 (id=8784): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) dup(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_buf(r1, 0x1, 0x3b, 0x0, &(0x7f0000000100)) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value=0x2000000}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000280)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4003, 0x1}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000880), 0x88000, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x1000000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0) 1.607263338s ago: executing program 4 (id=8785): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) symlink(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 975.94206ms ago: executing program 3 (id=8786): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socket$can_raw(0x1d, 0x3, 0x1) socket$can_raw(0x1d, 0x3, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0), 0x1, 0x4fa, &(0x7f00000005c0)="$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") 583.195782ms ago: executing program 4 (id=8787): socket(0x1000000000000010, 0x80802, 0x0) syz_mount_image$vfat(&(0x7f0000001800), &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x4, 0x275, &(0x7f00000009c0)="$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") syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000380)={[], [{@uid_lt={'uid<', 0xffffffffffffffff}}, {@appraise}, {@measure}]}, 0xff, 0x23f, &(0x7f0000000540)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) creat(&(0x7f00000000c0)='./bus\x00', 0x182) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = getpid() mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r2 = creat(&(0x7f0000000340)='./bus\x00', 0x0) ioctl$BLKFLSBUF(r2, 0x1261, 0x0) r3 = syz_pidfd_open(r1, 0x0) setns(r3, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) syz_emit_ethernet(0xd5, &(0x7f0000000c40)={@random="baa1e54d58be", @local, @void, {@mpls_uc={0x8847, {[{0x5}, {0x9, 0x0, 0x1}], @ipv6=@generic={0x9, 0x6, "c179c4", 0x97, 0x91, 0xc211c5e2102cde98, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, {[], "38754fbdd4faa6f97c7ecb9eacd3c41f9bb777397bc09dfcc3bee03d39e0c5540e6723c94bb5340423c91ae0350c8acdde25750b49eab2b85cde6a34fc1dfc4672f8058e769ef3a9c6a8b40a4e0034766def5c50a007e0fd5900ca9fb140f0b588780a73e8118406c53e2fe4e1f6a86bb24d1830adf5fb2f9d1d7911ab04a99284255e5ccccfacef14cf243a394dd04d542dc7d4660740"}}}}}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 137.711858ms ago: executing program 0 (id=8788): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x3, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x211}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000804) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 0s ago: executing program 6 (id=8789): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000c00)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x3e0, 0x1b0, 0xc8, 0x8, 0x1b0, 0x5803, 0x310, 0x2e8, 0x2e8, 0x310, 0x2e8, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'erspan0\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1b0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67442c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1}}, @common=@inet=@socket1={{0x28}, 0xa490f54eab606508}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@remote, @mcast2, [], [], 'macvtap0\x00', 'syzkaller1\x00'}, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440) kernel console output (not intermixed with test programs): ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.39/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 2087.066518][ T28] audit: type=1400 audit(2000000943.940:2167): avc: denied { mounton } for pid=22808 comm="syz.6.5036" path="/syzcgroup/cpu/syz6/cpuset.cpus" dev="cgroup" ino=529 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 2087.066531][T22809] cgroup: none used incorrectly [ 2087.280733][T22822] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5041'. [ 2087.701275][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 2088.047101][T22827] x_tables: duplicate underflow at hook 1 [ 2092.466913][T22881] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5056'. [ 2092.639541][T22886] x_tables: duplicate underflow at hook 1 [ 2095.741245][ T309] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 2095.921266][ T309] usb 7-1: Using ep0 maxpacket: 32 [ 2095.927973][ T309] usb 7-1: config 0 has an invalid interface number: 196 but max is 0 [ 2095.936439][ T309] usb 7-1: config 0 has no interface number 0 [ 2095.948859][ T309] usb 7-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 2095.959276][ T309] usb 7-1: config 0 interface 196 has no altsetting 0 [ 2095.967785][ T309] usb 7-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 2095.977351][ T309] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2095.985598][ T309] usb 7-1: Product: syz [ 2095.989912][ T309] usb 7-1: Manufacturer: syz [ 2095.994740][ T309] usb 7-1: SerialNumber: syz [ 2096.000581][ T309] usb 7-1: config 0 descriptor?? [ 2096.006281][T22952] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 2096.066063][T22969] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5088'. [ 2096.480899][ T309] ipheth 7-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 2096.488416][ T309] ipheth: probe of 7-1:0.196 failed with error -71 [ 2096.496024][ T309] usb 7-1: USB disconnect, device number 6 [ 2096.838841][T22981] x_tables: duplicate underflow at hook 1 [ 2098.181220][ T309] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 2098.371213][ T309] usb 7-1: Using ep0 maxpacket: 32 [ 2098.377665][ T309] usb 7-1: config 0 has an invalid interface number: 196 but max is 0 [ 2098.385930][ T309] usb 7-1: config 0 has no interface number 0 [ 2098.392190][ T309] usb 7-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 2098.402408][ T309] usb 7-1: config 0 interface 196 has no altsetting 0 [ 2098.410580][ T309] usb 7-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 2098.419812][ T309] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2098.427851][ T309] usb 7-1: Product: syz [ 2098.432055][ T309] usb 7-1: Manufacturer: syz [ 2098.436634][ T309] usb 7-1: SerialNumber: syz [ 2098.441781][ T309] usb 7-1: config 0 descriptor?? [ 2098.447018][T23006] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 2098.658335][ T309] ipheth 7-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 2098.665909][ T309] ipheth: probe of 7-1:0.196 failed with error -71 [ 2098.673972][ T309] usb 7-1: USB disconnect, device number 7 [ 2098.715703][T23016] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5105'. [ 2098.724742][T23016] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5105'. [ 2099.166155][ T28] audit: type=1400 audit(2000000956.040:2168): avc: denied { connect } for pid=23038 comm="syz.6.5113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 2099.370652][T23055] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5119'. [ 2099.773808][T23065] netlink: 4500 bytes leftover after parsing attributes in process `syz.5.5123'. [ 2099.853910][T23069] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5122'. [ 2099.995861][T23073] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5126'. [ 2100.384431][T23088] netlink: 168 bytes leftover after parsing attributes in process `syz.3.5132'. [ 2101.276888][ T28] audit: type=1400 audit(2000000958.150:2169): avc: denied { getopt } for pid=23116 comm="syz.5.5144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 2102.773537][T23162] netlink: 40 bytes leftover after parsing attributes in process `syz.6.5160'. [ 2102.791572][T23162] netlink: 40 bytes leftover after parsing attributes in process `syz.6.5160'. [ 2105.345136][T23197] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5171'. [ 2105.360213][T23191] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5168'. [ 2106.707737][T23216] netlink: 76 bytes leftover after parsing attributes in process `syz.3.5177'. [ 2106.820465][T23216] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5177'. [ 2106.829794][T23216] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5177'. [ 2107.238120][T23225] overlayfs: failed to resolve './file1': -2 [ 2108.267077][ T28] audit: type=1400 audit(2000000965.140:2170): avc: denied { getopt } for pid=23244 comm="syz.6.5187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 2108.914487][T23282] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5200'. [ 2112.587294][T21026] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 2113.300068][T23326] block device autoloading is deprecated and will be removed. [ 2114.359250][T23332] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5212'. [ 2114.369843][T23332] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5212'. [ 2114.379988][T23332] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5212'. [ 2114.465950][T23336] overlayfs: failed to clone upperpath [ 2115.015191][T21026] usb 7-1: device not accepting address 8, error -71 [ 2115.052669][T23352] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5218'. [ 2115.257610][T23358] netlink: 'syz.4.5219': attribute type 13 has an invalid length. [ 2115.268950][T23358] 1ªX¹¦D: refused to change device tx_queue_len [ 2115.276160][T23358] A link change request failed with some changes committed already. Interface 31ªX¹¦D may have been left with an inconsistent configuration, please check. [ 2115.461210][T21026] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 2115.671244][T21026] usb 7-1: Using ep0 maxpacket: 32 [ 2115.678271][T21026] usb 7-1: config 0 has an invalid interface number: 196 but max is 0 [ 2115.686836][T21026] usb 7-1: config 0 has no interface number 0 [ 2115.693065][T21026] usb 7-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 2115.801402][T21026] usb 7-1: config 0 interface 196 has no altsetting 0 [ 2116.999434][T23377] block device autoloading is deprecated and will be removed. [ 2117.850760][T23383] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 2117.934573][T21026] usb 7-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 2118.107290][T21026] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2118.170170][T21026] usb 7-1: Product: syz [ 2118.289333][T21026] usb 7-1: config 0 descriptor?? [ 2118.295462][T21026] usb 7-1: can't set config #0, error -71 [ 2118.321436][T21026] usb 7-1: USB disconnect, device number 9 [ 2119.017824][T23415] netlink: 'syz.5.5237': attribute type 13 has an invalid length. [ 2119.029616][T23415] 0ªX¹¦D: refused to change device tx_queue_len [ 2119.036913][T23415] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 2119.254416][T23435] netlink: 'syz.3.5247': attribute type 1 has an invalid length. [ 2119.498654][T23441] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 2120.509016][T23458] overlayfs: failed to resolve './file2': -2 [ 2121.531306][ T45] Bluetooth: hci0: command 0x1003 tx timeout [ 2121.538977][T20139] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 2123.031265][ T28] audit: type=1400 audit(2000000979.890:2171): avc: denied { getopt } for pid=23509 comm="syz.6.5269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 2123.154433][T23525] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5276'. [ 2123.973219][T23531] overlayfs: failed to resolve './file2': -2 [ 2124.681371][T22279] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 2124.877152][T22279] usb 7-1: Using ep0 maxpacket: 32 [ 2124.883612][T22279] usb 7-1: config 0 has an invalid interface number: 196 but max is 0 [ 2124.892121][T22279] usb 7-1: config 0 has no interface number 0 [ 2124.898259][T22279] usb 7-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 2124.908313][T22279] usb 7-1: config 0 interface 196 has no altsetting 0 [ 2124.916550][T22279] usb 7-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 2124.925665][T22279] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2124.933833][T22279] usb 7-1: Product: syz [ 2124.938071][T22279] usb 7-1: Manufacturer: syz [ 2124.943600][T22279] usb 7-1: SerialNumber: syz [ 2125.225811][T22279] usb 7-1: config 0 descriptor?? [ 2125.231110][T23536] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 2125.471412][T22279] ipheth 7-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 2125.478831][T22279] ipheth: probe of 7-1:0.196 failed with error -71 [ 2125.516176][T22279] usb 7-1: USB disconnect, device number 10 [ 2125.568751][T23584] overlayfs: failed to resolve './file2': -2 [ 2126.337114][T23602] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 2127.050183][T23614] overlayfs: failed to clone upperpath [ 2128.012371][T23630] overlayfs: failed to resolve './file2': -2 [ 2131.741863][ T28] audit: type=1400 audit(2000000988.620:2172): avc: denied { getopt } for pid=23677 comm="syz.5.5320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 2132.315127][T23697] netlink: 'syz.3.5326': attribute type 13 has an invalid length. [ 2132.323331][T23697] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2132.550986][T23697] 0ªX¹¦D: refused to change device tx_queue_len [ 2132.558196][T23697] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 2133.503850][ T45] Bluetooth: hci0: command 0x1003 tx timeout [ 2133.511417][T20139] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 2134.776602][T23739] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2134.794174][T23739] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2134.806662][T23739] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2134.831611][T23739] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2135.159412][T22279] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 2135.215848][T22279] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 2135.645956][T23750] netlink: 76 bytes leftover after parsing attributes in process `syz.4.5344'. [ 2135.655054][T23750] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5344'. [ 2135.753789][T23768] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5360'. [ 2139.720924][T23789] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2139.729596][T23789] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2139.745211][T23789] bridge0: port 1(vlan3) entered blocking state [ 2139.751532][T23789] bridge0: port 1(vlan3) entered forwarding state [ 2139.760884][T12120] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2139.768829][T21026] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 2139.800201][T23799] usb usb5: usbfs: process 23799 (syz.6.5363) did not claim interface 0 before use [ 2139.810492][ T28] audit: type=1400 audit(2000000996.680:2173): avc: denied { accept } for pid=23800 comm="syz.3.5362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 2140.061279][T13761] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 2143.395570][T23863] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2143.461195][T13761] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 2145.679006][T21026] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 2145.775842][T23883] block device autoloading is deprecated and will be removed. [ 2145.867464][ T28] audit: type=1400 audit(2000001002.740:2174): avc: denied { read write } for pid=22201 comm="syz-executor" name="loop6" dev="devtmpfs" ino=1217 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2147.123784][ T28] audit: type=1400 audit(2000001002.740:2175): avc: denied { open } for pid=22201 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=1217 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2147.176881][ T28] audit: type=1400 audit(2000001002.740:2176): avc: denied { ioctl } for pid=22201 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=1217 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2147.204085][T23901] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=23901 comm=syz.6.5397 [ 2147.216660][T23901] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=23901 comm=syz.6.5397 [ 2147.230987][T23901] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5397'. [ 2147.326203][T23912] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5403'. [ 2147.334866][T23910] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5402'. [ 2147.341795][ T28] audit: type=1326 audit(2000001004.170:2177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23905 comm="syz.4.5400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab2398eb69 code=0x7ffc0000 [ 2147.368344][T23910] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5402'. [ 2147.424336][T23910] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5402'. [ 2147.433465][ T28] audit: type=1326 audit(2000001004.170:2178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23905 comm="syz.4.5400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=201 compat=0 ip=0x7fab2398eb69 code=0x7ffc0000 [ 2147.464542][ T28] audit: type=1326 audit(2000001004.170:2179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23905 comm="syz.4.5400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab2398eb69 code=0x7ffc0000 [ 2147.661847][ T28] audit: type=1400 audit(2000001004.540:2180): avc: denied { connect } for pid=23947 comm="syz.6.5419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 2150.264273][T23964] block device autoloading is deprecated and will be removed. [ 2151.424805][ T28] audit: type=1400 audit(2000001008.300:2181): avc: denied { ioctl } for pid=23992 comm="syz.6.5432" path="pid:[4026532394]" dev="nsfs" ino=4026532394 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 2151.573275][T24012] cgroup: Unexpected value for 'cpuset_v2_mode' [ 2151.915089][T24016] netlink: 'syz.6.5438': attribute type 13 has an invalid length. [ 2151.927473][T24016] gretap0: refused to change device tx_queue_len [ 2151.934710][T24016] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 2152.090812][T24043] netlink: 152 bytes leftover after parsing attributes in process `syz.4.5453'. [ 2152.475258][T24049] xt_TCPMSS: Only works on TCP SYN packets [ 2152.482130][T24049] netlink: 9 bytes leftover after parsing attributes in process `syz.0.5451'. [ 2152.491596][T24049] device 30ªX¹¦D entered promiscuous mode [ 2152.505820][T24049] netlink: 5 bytes leftover after parsing attributes in process `syz.0.5451'. [ 2152.515071][T24049] 1ªX¹¦D: renamed from 30ªX¹¦D [ 2152.523127][T24049] device 31ªX¹¦D left promiscuous mode [ 2152.531623][T24049] A link change request failed with some changes committed already. Interface 31ªX¹¦D may have been left with an inconsistent configuration, please check. [ 2153.759509][ T28] audit: type=1400 audit(2000001010.630:2182): avc: denied { setcheckreqprot } for pid=24098 comm="syz.6.5477" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 2153.780720][T24099] SELinux: syz.6.5477 (24099) set checkreqprot to 1. This is deprecated and will be rejected in a future kernel release. [ 2153.796875][T24099] SELinux: https://github.com/SELinuxProject/selinux-kernel/wiki/DEPRECATE-checkreqprot [ 2154.846288][T24134] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5493'. [ 2154.980100][T24141] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5490'. [ 2155.818223][T24163] x_tables: duplicate underflow at hook 1 [ 2155.996283][T24186] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5513'. [ 2157.306400][T24215] netlink: 'syz.4.5523': attribute type 13 has an invalid length. [ 2157.317733][T24215] 1ªX¹¦D: refused to change device tx_queue_len [ 2157.324849][T24215] A link change request failed with some changes committed already. Interface 31ªX¹¦D may have been left with an inconsistent configuration, please check. [ 2157.566014][T24219] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5525'. [ 2160.480339][T24232] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5530'. [ 2160.499621][T24232] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5530'. [ 2160.509687][T24232] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5530'. [ 2160.710157][T24269] netlink: 176 bytes leftover after parsing attributes in process `syz.4.5548'. [ 2160.752662][T24280] netlink: 68 bytes leftover after parsing attributes in process `syz.4.5552'. [ 2163.969729][T24302] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5563'. [ 2164.017371][T24311] loop6: detected capacity change from 0 to 256 [ 2164.049857][ T28] audit: type=1400 audit(2000001020.920:2183): avc: denied { mount } for pid=24308 comm="syz.6.5565" name="/" dev="loop6" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 2164.077507][T24322] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5572'. [ 2164.097100][T24322] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5572'. [ 2164.121249][ T28] audit: type=1400 audit(2000001020.970:2184): avc: denied { unmount } for pid=22201 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 2164.186785][T24342] netlink: 'syz.4.5582': attribute type 3 has an invalid length. [ 2164.323311][ T28] audit: type=1400 audit(2000001021.200:2185): avc: denied { setopt } for pid=24370 comm="syz.6.5595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 2164.491431][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 2164.682448][ T28] audit: type=1400 audit(2000001021.560:2186): avc: denied { write } for pid=24399 comm="syz.6.5606" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 2164.721816][T24404] loop6: detected capacity change from 0 to 256 [ 2164.756309][T24404] FAT-fs (loop6): Directory bread(block 64) failed [ 2164.763658][T24404] FAT-fs (loop6): Directory bread(block 65) failed [ 2164.770606][T24404] FAT-fs (loop6): Directory bread(block 66) failed [ 2164.777737][T24404] FAT-fs (loop6): Directory bread(block 67) failed [ 2164.790745][T24405] netlink: 'syz.4.5602': attribute type 13 has an invalid length. [ 2164.801848][T24405] 1ªX¹¦D: refused to change device tx_queue_len [ 2164.809071][T24405] A link change request failed with some changes committed already. Interface 31ªX¹¦D may have been left with an inconsistent configuration, please check. [ 2164.878043][T24404] FAT-fs (loop6): Directory bread(block 68) failed [ 2164.885031][T24404] FAT-fs (loop6): Directory bread(block 69) failed [ 2164.891965][T24404] FAT-fs (loop6): Directory bread(block 70) failed [ 2164.898588][T24404] FAT-fs (loop6): Directory bread(block 71) failed [ 2164.905267][T24404] FAT-fs (loop6): Directory bread(block 72) failed [ 2164.911986][T24404] FAT-fs (loop6): Directory bread(block 73) failed [ 2165.096209][T24425] No source specified [ 2165.273668][T24449] loop6: detected capacity change from 0 to 512 [ 2165.321015][T24449] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 2165.383566][T24449] EXT4-fs error (device loop6): ext4_find_inline_data_nolock:164: inode #17: comm syz.6.5626: inline data xattr refers to an external xattr inode [ 2165.412858][T24449] EXT4-fs error (device loop6): ext4_orphan_get:1405: comm syz.6.5626: couldn't read orphan inode 17 (err -117) [ 2165.427975][T24449] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 2165.469354][T24449] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 2165.484147][ T28] audit: type=1400 audit(2000001022.340:2187): avc: denied { write } for pid=24445 comm="syz.6.5626" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 2165.506370][ T28] audit: type=1400 audit(2000001022.340:2188): avc: denied { add_name } for pid=24445 comm="syz.6.5626" name="cpu.stat" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 2165.528144][ T28] audit: type=1400 audit(2000001022.340:2189): avc: denied { read append } for pid=24445 comm="syz.6.5626" path="/135/bus/cpu.stat" dev="loop6" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 2165.799268][T24460] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5629'. [ 2165.808358][T24460] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5629'. [ 2165.913660][T24475] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5636'. [ 2165.922641][T24475] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5636'. [ 2165.931730][T24475] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5636'. [ 2165.978595][T24485] tipc: Can't bind to reserved service type 2 [ 2166.009183][T22201] EXT4-fs (loop6): unmounting filesystem. [ 2166.072409][ T28] audit: type=1400 audit(2000001022.950:2190): avc: denied { read } for pid=24502 comm="syz.6.5650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 2166.106840][T24510] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5653'. [ 2166.485807][T24535] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5662'. [ 2166.535148][ T28] audit: type=1326 audit(2000001023.410:2191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24531 comm="syz.3.5661" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa15158eb69 code=0x0 [ 2167.070893][T24588] loop6: detected capacity change from 0 to 16 [ 2167.079209][T24588] erofs: (device loop6): mounted with root inode @ nid 36. [ 2167.445364][T24607] cgroup: subsys name conflicts with all [ 2167.641701][T24627] cgroup: name respecified [ 2167.660755][T24633] netlink: 'syz.4.5707': attribute type 1 has an invalid length. [ 2168.048416][T24662] loop6: detected capacity change from 0 to 1024 [ 2168.067712][T24662] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 2168.081697][T24662] EXT4-fs (loop6): orphan cleanup on readonly fs [ 2168.089418][T24662] EXT4-fs error (device loop6): ext4_ext_check_inode:520: inode #11: comm syz.6.5718: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 5(4), depth 0(0) [ 2168.108887][T24662] EXT4-fs error (device loop6): ext4_orphan_get:1405: comm syz.6.5718: couldn't read orphan inode 11 (err -117) [ 2168.121549][T24662] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 2168.133032][T24662] EXT4-fs error (device loop6): ext4_lookup:1858: inode #15: comm syz.6.5718: iget: bad i_size value: 1970324836974602 [ 2168.149998][T22201] EXT4-fs (loop6): unmounting filesystem. [ 2168.359161][T24683] loop6: detected capacity change from 0 to 512 [ 2168.386536][T24683] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 2168.398086][T24683] EXT4-fs error (device loop6): ext4_find_inline_data_nolock:164: inode #17: comm syz.6.5725: inline data xattr refers to an external xattr inode [ 2168.413519][T24683] EXT4-fs error (device loop6): ext4_orphan_get:1405: comm syz.6.5725: couldn't read orphan inode 17 (err -117) [ 2168.427187][T24683] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 2168.521036][T24683] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 2169.015997][T24705] x_tables: duplicate underflow at hook 1 [ 2169.058718][T22201] EXT4-fs (loop6): unmounting filesystem. [ 2172.331204][T11931] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 2172.512194][T11931] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2172.524129][T11931] usb 7-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice=ff.fc [ 2172.533357][T11931] usb 7-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 2172.541777][T11931] usb 7-1: Product: syz [ 2172.545947][T11931] usb 7-1: Manufacturer: syz [ 2172.551219][T11931] usb 7-1: config 0 descriptor?? [ 2172.964794][T11931] holtek 0003:1241:5015.0005: item fetching failed at offset 3/5 [ 2172.978141][T11931] holtek 0003:1241:5015.0005: parse failed [ 2172.984381][T11931] holtek: probe of 0003:1241:5015.0005 failed with error -22 [ 2173.382377][T11931] usb 7-1: USB disconnect, device number 11 [ 2174.117949][T24864] x_tables: duplicate underflow at hook 1 [ 2175.068131][T24911] loop6: detected capacity change from 0 to 512 [ 2175.074826][T24911] EXT4-fs: Ignoring removed nobh option [ 2175.080479][T24911] ext3: Bad value for 'min_batch_time' [ 2175.122043][T24238] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 2175.292302][T24921] __nla_validate_parse: 8 callbacks suppressed [ 2175.292316][T24921] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5821'. [ 2175.307739][T24921] tipc: Enabling of bearer rejected, failed to enable media [ 2175.324341][T24923] netlink: 5264 bytes leftover after parsing attributes in process `syz.4.5822'. [ 2175.391267][T13761] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 2175.711202][T13761] usb 7-1: Using ep0 maxpacket: 32 [ 2175.723075][T13761] usb 7-1: config 0 has an invalid interface number: 196 but max is 0 [ 2175.731463][T13761] usb 7-1: config 0 has no interface number 0 [ 2175.737733][T13761] usb 7-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 2175.748572][T13761] usb 7-1: config 0 interface 196 has no altsetting 0 [ 2175.757428][T13761] usb 7-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 2175.766979][T13761] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2175.775216][T13761] usb 7-1: Product: syz [ 2175.779541][T13761] usb 7-1: Manufacturer: syz [ 2175.784375][T13761] usb 7-1: SerialNumber: syz [ 2175.789705][T13761] usb 7-1: config 0 descriptor?? [ 2175.795161][T24911] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 2175.965506][T24947] netlink: 'syz.3.5827': attribute type 13 has an invalid length. [ 2176.045148][T24947] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2176.052685][T13761] ipheth 7-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 2176.061211][T24947] 0ªX¹¦D: refused to change device tx_queue_len [ 2176.067550][T13761] ipheth: probe of 7-1:0.196 failed with error -71 [ 2176.074338][T24947] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 2176.091436][T13761] usb 7-1: USB disconnect, device number 12 [ 2177.229879][T25000] netlink: 'syz.3.5849': attribute type 13 has an invalid length. [ 2177.237799][T25000] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2177.246118][T25000] 0ªX¹¦D: refused to change device tx_queue_len [ 2177.252682][T25000] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 2178.668652][T25038] loop6: detected capacity change from 0 to 512 [ 2178.714147][T25038] EXT4-fs: Ignoring removed nobh option [ 2178.737268][T25038] ext3: Bad value for 'min_batch_time' [ 2178.848938][T24913] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 2178.868743][T25054] 9pnet_fd: Insufficient options for proto=fd [ 2179.111250][T18771] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 2179.301279][T18771] usb 7-1: Using ep0 maxpacket: 32 [ 2179.308352][T18771] usb 7-1: config 0 has an invalid interface number: 196 but max is 0 [ 2179.316830][T18771] usb 7-1: config 0 has no interface number 0 [ 2179.323245][T18771] usb 7-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 2179.333587][T18771] usb 7-1: config 0 interface 196 has no altsetting 0 [ 2179.342299][T18771] usb 7-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 2179.351754][T18771] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2179.359825][T18771] usb 7-1: Product: syz [ 2179.364561][T18771] usb 7-1: Manufacturer: syz [ 2179.369407][T18771] usb 7-1: SerialNumber: syz [ 2179.374786][T18771] usb 7-1: config 0 descriptor?? [ 2179.380016][T25023] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 2179.449369][T25095] netlink: 'syz.5.5892': attribute type 1 has an invalid length. [ 2179.590141][T18771] ipheth 7-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 2179.597901][T18771] ipheth: probe of 7-1:0.196 failed with error -71 [ 2179.608207][T18771] usb 7-1: USB disconnect, device number 13 [ 2179.650145][T25102] 9pnet_fd: Insufficient options for proto=fd [ 2180.336663][T25146] loop6: detected capacity change from 0 to 512 [ 2180.343361][T25146] EXT4-fs: Ignoring removed nobh option [ 2180.349022][T25146] ext3: Bad value for 'min_batch_time' [ 2180.401745][T24913] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 2180.606884][T25174] tipc: Enabling of bearer rejected, already enabled [ 2180.697405][T18771] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 2180.882163][T18771] usb 7-1: Using ep0 maxpacket: 32 [ 2180.961665][T18771] usb 7-1: config 0 has an invalid interface number: 196 but max is 0 [ 2180.969962][T18771] usb 7-1: config 0 has no interface number 0 [ 2180.976180][T18771] usb 7-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 2180.986310][T18771] usb 7-1: config 0 interface 196 has no altsetting 0 [ 2180.994528][T18771] usb 7-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 2181.003640][T18771] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2181.011706][T18771] usb 7-1: Product: syz [ 2181.015891][T18771] usb 7-1: Manufacturer: syz [ 2181.020493][T18771] usb 7-1: SerialNumber: syz [ 2181.026024][T18771] usb 7-1: config 0 descriptor?? [ 2181.031318][T25146] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 2181.242193][T18771] ipheth 7-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 2181.249767][T18771] ipheth: probe of 7-1:0.196 failed with error -71 [ 2181.258270][T18771] usb 7-1: USB disconnect, device number 14 [ 2181.803612][T25239] tipc: Enabling of bearer rejected, failed to enable media [ 2181.846190][T25249] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5959'. [ 2182.116801][T25264] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5965'. [ 2182.363109][T25297] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5980'. [ 2182.683233][T25319] netlink: 60 bytes leftover after parsing attributes in process `syz.5.5990'. [ 2182.817444][T25334] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5996'. [ 2183.277146][T25363] loop6: detected capacity change from 0 to 512 [ 2183.400864][T25363] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 2183.431293][T25363] EXT4-fs error (device loop6): ext4_find_inline_data_nolock:164: inode #17: comm syz.6.6007: inline data xattr refers to an external xattr inode [ 2183.446430][T25363] EXT4-fs error (device loop6): ext4_orphan_get:1405: comm syz.6.6007: couldn't read orphan inode 17 (err -117) [ 2183.458731][T25363] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 2183.477078][T25363] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 2183.579594][T25382] syz.5.6016[25382] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2183.579647][T25382] syz.5.6016[25382] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2183.592335][T25382] tmpfs: Unknown parameter 'quo' [ 2183.984653][T22201] EXT4-fs (loop6): unmounting filesystem. [ 2184.739233][T25437] loop6: detected capacity change from 0 to 512 [ 2184.746154][T25437] EXT4-fs: Ignoring removed nobh option [ 2184.752164][T25437] ext3: Bad value for 'min_batch_time' [ 2184.801477][T24913] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 2185.201246][T21026] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 2185.501178][T21026] usb 7-1: Using ep0 maxpacket: 32 [ 2185.507423][T21026] usb 7-1: config 0 has an invalid interface number: 196 but max is 0 [ 2185.515665][T21026] usb 7-1: config 0 has no interface number 0 [ 2185.521849][T21026] usb 7-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 2185.532072][T21026] usb 7-1: config 0 interface 196 has no altsetting 0 [ 2185.544401][T21026] usb 7-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 2185.553585][T21026] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2185.561702][T21026] usb 7-1: Product: syz [ 2185.565936][T21026] usb 7-1: Manufacturer: syz [ 2185.570576][T21026] usb 7-1: SerialNumber: syz [ 2185.578425][T21026] usb 7-1: config 0 descriptor?? [ 2185.584007][T25437] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 2185.793953][T21026] ipheth 7-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 2185.801575][T21026] ipheth: probe of 7-1:0.196 failed with error -71 [ 2185.809598][T21026] usb 7-1: USB disconnect, device number 15 [ 2185.828996][T25498] syz.4.6062[25498] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2185.829069][T25498] syz.4.6062[25498] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2186.597012][T25534] tipc: Enabling of bearer rejected, failed to enable media [ 2186.716198][T25551] loop6: detected capacity change from 0 to 128 [ 2186.726237][T25551] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 2186.735112][T25551] ext4 filesystem being mounted at /214/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 2187.177694][ T28] audit: type=1400 audit(2000001044.050:2192): avc: denied { create } for pid=25550 comm="syz.6.6084" name="encrypted_dir" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 2187.444660][T25561] netlink: 'syz.4.6085': attribute type 13 has an invalid length. [ 2187.452307][T25563] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6086'. [ 2187.461637][T25561] 1ªX¹¦D: refused to change device tx_queue_len [ 2187.474309][T25561] A link change request failed with some changes committed already. Interface 31ªX¹¦D may have been left with an inconsistent configuration, please check. [ 2187.586171][T22201] EXT4-fs (loop6): unmounting filesystem. [ 2187.723310][T25585] tipc: Enabling of bearer rejected, already enabled [ 2188.650275][T25631] netlink: 'syz.6.6113': attribute type 2 has an invalid length. [ 2188.682006][T25635] loop6: detected capacity change from 0 to 512 [ 2188.699393][T25635] EXT4-fs: Ignoring removed nobh option [ 2188.713471][T25635] ext3: Bad value for 'min_batch_time' [ 2188.800327][T25661] 9p: Unknown Cache mode f [ 2189.195722][ T309] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 2189.381174][ T309] usb 7-1: Using ep0 maxpacket: 32 [ 2189.387429][ T309] usb 7-1: config 0 has an invalid interface number: 196 but max is 0 [ 2189.395704][ T309] usb 7-1: config 0 has no interface number 0 [ 2189.401846][ T309] usb 7-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 2189.411931][ T309] usb 7-1: config 0 interface 196 has no altsetting 0 [ 2189.420039][ T309] usb 7-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 2189.429171][ T309] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2189.437246][ T309] usb 7-1: Product: syz [ 2189.441452][ T309] usb 7-1: Manufacturer: syz [ 2189.446079][ T309] usb 7-1: SerialNumber: syz [ 2189.453621][ T309] usb 7-1: config 0 descriptor?? [ 2189.458915][T25635] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 2189.668068][ T309] ipheth 7-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 2189.675643][ T309] ipheth: probe of 7-1:0.196 failed with error -71 [ 2189.685357][ T309] usb 7-1: USB disconnect, device number 16 [ 2191.040893][T25768] loop6: detected capacity change from 0 to 128 [ 2191.050972][T25768] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 2191.059770][T25768] ext4 filesystem being mounted at /222/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 2191.127631][T25778] device vlan2 entered promiscuous mode [ 2191.133421][T25778] device bridge0 entered promiscuous mode [ 2191.857996][T25824] syz.0.6192[25824] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2191.858048][T25824] syz.0.6192[25824] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2191.937974][T22201] EXT4-fs (loop6): unmounting filesystem. [ 2191.967015][T25828] loop6: detected capacity change from 0 to 2048 [ 2192.057594][T25828] loop6: p1 < > p3 [ 2192.062308][T25828] loop6: p3 size 134217728 extends beyond EOD, truncated [ 2192.089676][ T103] loop6: p1 < > p3 [ 2192.094219][ T103] loop6: p3 size 134217728 extends beyond EOD, truncated [ 2192.392821][T24238] udevd[24238]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 2192.393309][T24913] udevd[24913]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 2192.408216][T25846] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2192.424175][T25846] device bridge_slave_0 left promiscuous mode [ 2192.430403][T25846] bridge0: port 1(bridge_slave_0) entered disabled state [ 2192.441464][T25846] device bridge_slave_1 left promiscuous mode [ 2192.447683][T25846] bridge0: port 2(bridge_slave_1) entered disabled state [ 2192.990247][T25866] loop6: detected capacity change from 0 to 512 [ 2193.013473][T25866] EXT4-fs: Ignoring removed nobh option [ 2193.019085][T25866] ext3: Bad value for 'min_batch_time' [ 2193.255813][T25918] netlink: 'syz.5.6221': attribute type 13 has an invalid length. [ 2193.264706][T25918] 0ªX¹¦D: refused to change device tx_queue_len [ 2193.271286][T25918] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 2193.351302][T13761] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 2193.531378][T13761] usb 7-1: Using ep0 maxpacket: 32 [ 2193.540679][T13761] usb 7-1: config 0 has an invalid interface number: 196 but max is 0 [ 2193.603007][T13761] usb 7-1: config 0 has no interface number 0 [ 2193.645213][T13761] usb 7-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 2193.687880][T13761] usb 7-1: config 0 interface 196 has no altsetting 0 [ 2193.749564][T13761] usb 7-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 2193.768794][T13761] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2193.778359][T13761] usb 7-1: Product: syz [ 2193.784996][T13761] usb 7-1: Manufacturer: syz [ 2193.790133][T13761] usb 7-1: SerialNumber: syz [ 2193.844758][T13761] usb 7-1: config 0 descriptor?? [ 2193.865325][T25866] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 2194.230167][T13761] ipheth 7-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 2194.244149][T13761] ipheth: probe of 7-1:0.196 failed with error -71 [ 2194.272841][T13761] usb 7-1: USB disconnect, device number 17 [ 2194.353384][T25939] overlayfs: missing 'lowerdir' [ 2194.461062][T25972] syz.4.6255[25972] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2194.461363][T25972] syz.4.6255[25972] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2195.233860][T25984] loop6: detected capacity change from 0 to 2048 [ 2195.411400][T25984] EXT4-fs: Ignoring removed mblk_io_submit option [ 2195.417870][T25984] EXT4-fs: Ignoring removed bh option [ 2195.455167][T25996] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6266'. [ 2195.478682][T25996] netlink: 140 bytes leftover after parsing attributes in process `syz.0.6266'. [ 2195.493364][ T28] audit: type=1400 audit(2000001052.370:2193): avc: denied { mounton } for pid=25997 comm="syz.5.6267" path="/1141/file0" dev="tmpfs" ino=6243 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 2195.510086][T25998] block device autoloading is deprecated and will be removed. [ 2195.521620][T25984] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 2195.524612][T25998] I/O error, dev loop11, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2195.543342][T25998] FAT-fs (loop11): unable to read boot sector [ 2195.562081][T26005] netlink: 88 bytes leftover after parsing attributes in process `syz.0.6269'. [ 2195.573190][ T28] audit: type=1400 audit(2000001052.450:2194): avc: denied { write } for pid=25983 comm="syz.6.6260" name="memory.events" dev="loop6" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 2195.579238][T26005] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6269'. [ 2195.607647][T25984] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 2195.626321][T26009] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6271'. [ 2195.640471][T25984] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 129 with error 28 [ 2195.684431][T25984] EXT4-fs (loop6): This should not happen!! Data will be lost [ 2195.684431][T25984] [ 2195.729024][T25984] EXT4-fs (loop6): Total free blocks count 0 [ 2195.741677][T25984] EXT4-fs (loop6): Free/Dirty block details [ 2195.754417][T25984] EXT4-fs (loop6): free_blocks=2415919104 [ 2195.760354][T25984] EXT4-fs (loop6): dirty_blocks=144 [ 2195.765667][T25984] EXT4-fs (loop6): Block reservation details [ 2195.773400][T25984] EXT4-fs (loop6): i_reserved_data_blocks=9 [ 2195.791541][T22201] EXT4-fs (loop6): unmounting filesystem. [ 2195.978228][T26030] x_tables: duplicate underflow at hook 1 [ 2197.072986][T26065] netlink: 165 bytes leftover after parsing attributes in process `syz.4.6291'. [ 2197.111994][ T28] audit: type=1400 audit(2000001054.990:2195): avc: denied { compute_member } for pid=26067 comm="syz.6.6294" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 2197.221627][T26084] incfs: Options parsing error. -22 [ 2197.227168][T26084] incfs: mount failed -22 [ 2198.047866][T26103] netlink: 'syz.6.6304': attribute type 13 has an invalid length. [ 2198.118712][T26103] gretap0: refused to change device tx_queue_len [ 2198.125358][T26103] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 2198.816100][T26136] loop6: detected capacity change from 0 to 512 [ 2198.825393][T26136] EXT4-fs: Ignoring removed nobh option [ 2198.831389][T26136] ext3: Bad value for 'min_batch_time' [ 2199.101245][T18771] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 2199.249827][T26158] netlink: 'syz.4.6325': attribute type 13 has an invalid length. [ 2199.258517][T26158] 1ªX¹¦D: refused to change device tx_queue_len [ 2199.265156][T26158] A link change request failed with some changes committed already. Interface 31ªX¹¦D may have been left with an inconsistent configuration, please check. [ 2199.311204][T18771] usb 7-1: Using ep0 maxpacket: 32 [ 2199.317620][T18771] usb 7-1: config 0 has an invalid interface number: 196 but max is 0 [ 2199.325895][T18771] usb 7-1: config 0 has no interface number 0 [ 2199.332162][T18771] usb 7-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 2199.342861][T18771] usb 7-1: config 0 interface 196 has no altsetting 0 [ 2199.351280][T18771] usb 7-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 2199.360512][T18771] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2199.368716][T18771] usb 7-1: Product: syz [ 2199.373218][T18771] usb 7-1: Manufacturer: syz [ 2199.378785][T18771] usb 7-1: SerialNumber: syz [ 2199.388545][T18771] usb 7-1: config 0 descriptor?? [ 2199.394208][T26136] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 2199.615508][T18771] ipheth 7-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 2199.623566][T18771] ipheth: probe of 7-1:0.196 failed with error -71 [ 2199.644192][T18771] usb 7-1: USB disconnect, device number 18 [ 2200.331221][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 2200.590600][T26211] loop6: detected capacity change from 0 to 512 [ 2200.597641][T26211] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 2200.608063][T26212] netlink: 'syz.5.6350': attribute type 13 has an invalid length. [ 2200.618115][T26212] 0ªX¹¦D: refused to change device tx_queue_len [ 2200.626656][T26212] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 2200.892791][T26211] EXT4-fs error (device loop6): ext4_find_inline_data_nolock:164: inode #17: comm syz.6.6351: inline data xattr refers to an external xattr inode [ 2200.908126][T26211] EXT4-fs error (device loop6): ext4_orphan_get:1405: comm syz.6.6351: couldn't read orphan inode 17 (err -117) [ 2200.920500][T26211] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 2200.932198][T26211] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 2201.346751][T22201] EXT4-fs (loop6): unmounting filesystem. [ 2201.417027][T26272] binder: 26268:26272 ioctl c0306201 200000000000 returned -14 [ 2201.448928][T26275] block device autoloading is deprecated and will be removed. [ 2201.457058][T26275] I/O error, dev loop13, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2201.467465][T26275] FAT-fs (loop13): unable to read boot sector [ 2201.739214][T26285] netlink: 'syz.3.6380': attribute type 13 has an invalid length. [ 2201.747650][T26285] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2201.779280][T26285] 0ªX¹¦D: refused to change device tx_queue_len [ 2201.787141][T26285] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 2201.909537][T26282] loop6: detected capacity change from 0 to 40427 [ 2201.938821][T26282] F2FS-fs (loop6): Found nat_bits in checkpoint [ 2201.963172][T26282] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 2201.995616][T22201] syz-executor: attempt to access beyond end of device [ 2201.995616][T22201] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 2202.233022][T26325] loop6: detected capacity change from 0 to 256 [ 2202.240146][T26325] exfat: Deprecated parameter 'namecase' [ 2202.249677][T26325] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 2202.381465][T26345] tmpfs: Unknown parameter 'hu' [ 2202.424760][T26328] loop6: detected capacity change from 0 to 512 [ 2202.457745][T26328] EXT4-fs: Ignoring removed nobh option [ 2202.474969][T26328] ext3: Bad value for 'min_batch_time' [ 2202.826002][T18771] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 2203.031347][T18771] usb 7-1: Using ep0 maxpacket: 32 [ 2203.040284][T18771] usb 7-1: config 0 has an invalid interface number: 196 but max is 0 [ 2203.050659][T18771] usb 7-1: config 0 has no interface number 0 [ 2203.060855][T18771] usb 7-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 2203.071031][T18771] usb 7-1: config 0 interface 196 has no altsetting 0 [ 2203.079642][T18771] usb 7-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 2203.089018][T18771] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2203.097106][T18771] usb 7-1: Product: syz [ 2203.101361][T18771] usb 7-1: Manufacturer: syz [ 2203.106136][T18771] usb 7-1: SerialNumber: syz [ 2203.112092][T18771] usb 7-1: config 0 descriptor?? [ 2203.117466][T26328] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 2203.283510][T26368] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6411'. [ 2203.288740][ T28] audit: type=1400 audit(2000001061.160:2196): avc: denied { setopt } for pid=26365 comm="syz.5.6410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 2203.328951][T18771] ipheth 7-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 2203.336712][T18771] ipheth: probe of 7-1:0.196 failed with error -71 [ 2203.351988][T18771] usb 7-1: USB disconnect, device number 19 [ 2203.359456][ T28] audit: type=1400 audit(2000001061.230:2197): avc: denied { read } for pid=26374 comm="syz.0.6414" name="file0" dev="tmpfs" ino=7101 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 2203.391321][T26375] block device autoloading is deprecated and will be removed. [ 2203.472510][T26397] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6424'. [ 2203.751996][T26436] netlink: 'syz.4.6434': attribute type 13 has an invalid length. [ 2203.760469][T26436] 1ªX¹¦D: refused to change device tx_queue_len [ 2203.766943][T26436] A link change request failed with some changes committed already. Interface 31ªX¹¦D may have been left with an inconsistent configuration, please check. [ 2204.463063][T26460] overlayfs: failed to clone upperpath [ 2204.815911][T26498] netlink: 'syz.4.6463': attribute type 13 has an invalid length. [ 2204.824619][T26498] 1ªX¹¦D: refused to change device tx_queue_len [ 2204.831050][T26498] A link change request failed with some changes committed already. Interface 31ªX¹¦D may have been left with an inconsistent configuration, please check. [ 2205.523698][T26541] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6485'. [ 2205.967973][ T28] audit: type=1400 audit(2000001064.842:2198): avc: denied { remount } for pid=26557 comm="syz.0.6491" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 2206.412134][T26595] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6508'. [ 2206.459997][T26599] block device autoloading is deprecated and will be removed. [ 2206.469830][T26599] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2206.491297][T26599] FAT-fs (loop9): unable to read boot sector [ 2206.511283][ T309] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 2206.701280][ T309] usb 7-1: Using ep0 maxpacket: 16 [ 2206.707815][ T309] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 2206.727801][ T309] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 0 [ 2206.749540][ T309] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 2206.759625][T26625] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6522'. [ 2206.763864][ T309] usb 7-1: New USB device found, idVendor=067b, idProduct=aaa8, bcdDevice=c3.0c [ 2206.779204][ T309] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2206.787501][ T309] usb 7-1: Product: syz [ 2206.792157][ T309] usb 7-1: Manufacturer: syz [ 2206.796911][ T309] usb 7-1: SerialNumber: syz [ 2206.802860][ T309] usb 7-1: config 0 descriptor?? [ 2206.808774][ T309] pl2303 7-1:0.0: required endpoints missing [ 2207.012543][T18771] usb 7-1: USB disconnect, device number 20 [ 2207.269322][T26653] netlink: 'syz.0.6534': attribute type 13 has an invalid length. [ 2207.281226][T26653] 1ªX¹¦D: refused to change device tx_queue_len [ 2207.288686][T26653] A link change request failed with some changes committed already. Interface 31ªX¹¦D may have been left with an inconsistent configuration, please check. [ 2208.370256][T26693] netlink: 'syz.5.6550': attribute type 1 has an invalid length. [ 2208.378383][T26693] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6550'. [ 2208.538001][T26707] netlink: 'syz.4.6549': attribute type 13 has an invalid length. [ 2208.548840][T26707] 1ªX¹¦D: refused to change device tx_queue_len [ 2208.558306][T26707] A link change request failed with some changes committed already. Interface 31ªX¹¦D may have been left with an inconsistent configuration, please check. [ 2208.685429][T26706] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2208.694712][T26706] FAT-fs (loop1): unable to read boot sector [ 2208.721735][T26711] device ip6gretap0 entered promiscuous mode [ 2208.727884][T26711] device macsec0 entered promiscuous mode [ 2208.755749][T26701] loop6: detected capacity change from 0 to 512 [ 2208.765280][T26701] EXT4-fs: Ignoring removed nobh option [ 2208.778083][T26701] ext3: Bad value for 'min_batch_time' [ 2209.271306][ T309] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 2209.451292][ T309] usb 7-1: Using ep0 maxpacket: 32 [ 2209.459739][ T309] usb 7-1: config 0 has an invalid interface number: 196 but max is 0 [ 2209.469961][ T309] usb 7-1: config 0 has no interface number 0 [ 2209.476814][ T309] usb 7-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 2209.488343][ T309] usb 7-1: config 0 interface 196 has no altsetting 0 [ 2209.498609][ T309] usb 7-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 2209.508522][ T309] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2209.518864][ T309] usb 7-1: Product: syz [ 2209.524878][ T309] usb 7-1: Manufacturer: syz [ 2209.530936][ T309] usb 7-1: SerialNumber: syz [ 2209.541363][ T309] usb 7-1: config 0 descriptor?? [ 2209.547592][T26701] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 2209.769823][ T309] ipheth 7-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 2209.777510][ T309] ipheth: probe of 7-1:0.196 failed with error -71 [ 2209.792836][ T309] usb 7-1: USB disconnect, device number 21 [ 2210.429042][T26800] loop6: detected capacity change from 0 to 256 [ 2210.448844][T26800] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 2210.631564][T26802] loop6: detected capacity change from 0 to 40427 [ 2210.643588][T26802] F2FS-fs (loop6): fault_injection options not supported [ 2210.653378][T26802] F2FS-fs (loop6): invalid crc value [ 2210.665154][T26802] F2FS-fs (loop6): Found nat_bits in checkpoint [ 2210.703826][T26802] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 2210.734960][T26802] syz.6.6592: attempt to access beyond end of device [ 2210.734960][T26802] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 2210.774291][T22201] syz-executor: attempt to access beyond end of device [ 2210.774291][T22201] loop6: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 2210.892254][T26829] loop6: detected capacity change from 0 to 512 [ 2210.915874][T26829] EXT4-fs error (device loop6): ext4_orphan_get:1400: inode #15: comm syz.6.6602: casefold flag without casefold feature [ 2210.929917][T26829] EXT4-fs error (device loop6): ext4_orphan_get:1405: comm syz.6.6602: couldn't read orphan inode 15 (err -117) [ 2210.944689][T26829] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 2210.982328][T22201] EXT4-fs (loop6): unmounting filesystem. [ 2212.517279][T26897] syz.5.6627[26897] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2212.517369][T26897] syz.5.6627[26897] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2212.567028][T26905] netlink: 'syz.5.6631': attribute type 10 has an invalid length. [ 2213.686245][T26961] loop6: detected capacity change from 0 to 128 [ 2213.718218][T26961] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 2213.727522][T26961] ext4 filesystem being mounted at /283/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 2213.765351][T22201] EXT4-fs (loop6): unmounting filesystem. [ 2214.101305][T18771] usb 7-1: new full-speed USB device number 22 using dummy_hcd [ 2214.282302][T18771] usb 7-1: config 16 has an invalid interface number: 131 but max is 0 [ 2214.295925][T18771] usb 7-1: config 16 has no interface number 0 [ 2214.309491][T18771] usb 7-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 2214.321205][T18771] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2214.338451][T18771] usb-storage 7-1:16.131: USB Mass Storage device detected [ 2214.357035][T18771] usb-storage 7-1:16.131: Quirks match for vid 04e6 pid 000b: 4 [ 2214.416094][T27002] x_tables: duplicate underflow at hook 1 [ 2214.559484][T13761] usb 7-1: USB disconnect, device number 22 [ 2215.137687][T27042] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6682'. [ 2215.717636][T27085] sch_fq: defrate 4294967295 ignored. [ 2215.774028][T27097] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6708'. [ 2215.938411][T27118] IPv6: sit2: Disabled Multicast RS [ 2216.262462][T27138] overlayfs: failed to clone upperpath [ 2216.321211][T11931] usb 7-1: new full-speed USB device number 23 using dummy_hcd [ 2216.512893][T11931] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2216.525349][T11931] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2216.535453][T11931] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 2216.544543][T11931] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2216.553638][T11931] usb 7-1: config 0 descriptor?? [ 2216.559848][T11931] hub 7-1:0.0: USB hub found [ 2216.760579][T11931] hub 7-1:0.0: 1 port detected [ 2216.903042][T27163] /dev/loop0: Can't open blockdev [ 2216.967075][T11931] hub 7-1:0.0: hub_hub_status failed (err = -71) [ 2216.982400][T11931] hub 7-1:0.0: config failed, can't get hub status (err -71) [ 2217.009027][T11931] usbhid 7-1:0.0: can't add hid device: -71 [ 2217.031309][T11931] usbhid: probe of 7-1:0.0 failed with error -71 [ 2217.071602][T11931] usb 7-1: USB disconnect, device number 23 [ 2217.546605][T27182] netlink: 'syz.4.6741': attribute type 13 has an invalid length. [ 2217.557272][T27182] 1ªX¹¦D: refused to change device tx_queue_len [ 2217.565304][T27182] A link change request failed with some changes committed already. Interface 31ªX¹¦D may have been left with an inconsistent configuration, please check. [ 2217.690550][T27180] SELinux: Context u:r:untrusted_app:s0:c512,c768 is not valid (left unmapped). [ 2217.711847][ T28] audit: type=1400 audit(2000001076.592:2199): avc: denied { relabelto } for pid=27179 comm="syz.6.6742" name="293" dev="tmpfs" ino=1556 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768" [ 2217.739818][ T28] audit: type=1400 audit(2000001076.612:2200): avc: denied { associate } for pid=27179 comm="syz.6.6742" name="293" dev="tmpfs" ino=1556 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="u:r:untrusted_app:s0:c512,c768" [ 2217.782132][ T28] audit: type=1400 audit(2000001076.662:2201): avc: denied { write } for pid=22201 comm="syz-executor" name="293" dev="tmpfs" ino=1556 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768" [ 2217.808609][ T28] audit: type=1400 audit(2000001076.662:2202): avc: denied { remove_name } for pid=22201 comm="syz-executor" name="binderfs" dev="tmpfs" ino=1560 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768" [ 2217.838606][ T28] audit: type=1400 audit(2000001076.662:2203): avc: denied { rmdir } for pid=22201 comm="syz-executor" name="293" dev="tmpfs" ino=1556 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768" [ 2217.873231][T27196] x_tables: duplicate underflow at hook 1 [ 2217.923177][T27203] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6751'. [ 2219.988887][T27297] IPv6: sit2: Disabled Multicast RS [ 2220.037535][T27301] netlink: 'syz.3.6792': attribute type 4 has an invalid length. [ 2220.063454][ T28] audit: type=1400 audit(2000001078.942:2204): avc: denied { watch_reads } for pid=27304 comm="syz.3.6794" path="/1434/file1" dev="tmpfs" ino=7764 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 2220.602498][T27343] SELinux: Context system_u:object_r:man_t:s0 is not valid (left unmapped). [ 2220.620947][ T28] audit: type=1400 audit(2000001079.492:2205): avc: denied { relabelto } for pid=27342 comm="syz.0.6811" name="1417" dev="tmpfs" ino=7642 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:man_t:s0" [ 2220.648475][ T28] audit: type=1400 audit(2000001079.502:2206): avc: denied { associate } for pid=27342 comm="syz.0.6811" name="1417" dev="tmpfs" ino=7642 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:man_t:s0" [ 2220.714788][ T28] audit: type=1400 audit(2000001079.542:2207): avc: denied { write } for pid=283 comm="syz-executor" name="1417" dev="tmpfs" ino=7642 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:man_t:s0" [ 2220.778788][ T28] audit: type=1400 audit(2000001079.542:2208): avc: denied { remove_name } for pid=283 comm="syz-executor" name="binderfs" dev="tmpfs" ino=7646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:man_t:s0" [ 2221.785899][T27394] loop6: detected capacity change from 0 to 512 [ 2221.822774][T27394] EXT4-fs (loop6): orphan cleanup on readonly fs [ 2221.833755][T27394] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.6832: bg 0: block 248: padding at end of block bitmap is not set [ 2221.853197][T27394] EXT4-fs error (device loop6): ext4_acquire_dquot:6801: comm syz.6.6832: Failed to acquire dquot type 1 [ 2221.881725][T27394] EXT4-fs (loop6): 1 truncate cleaned up [ 2221.897866][T27394] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 2221.950474][T27394] EXT4-fs (loop6): warning: mounting fs with errors, running e2fsck is recommended [ 2221.963350][T27394] EXT4-fs warning (device loop6): read_mmp_block:115: Error -117 while reading MMP block 0 [ 2222.044877][T22201] EXT4-fs (loop6): unmounting filesystem. [ 2222.322906][T27414] IPv6: sit1: Disabled Multicast RS [ 2222.419998][T27417] loop6: detected capacity change from 0 to 1024 [ 2222.437650][T27417] EXT4-fs: Ignoring removed i_version option [ 2222.444544][T27417] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 2222.491657][T27417] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 2222.526419][T27417] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:3841: comm syz.6.6840: Allocating blocks 497-513 which overlap fs metadata [ 2222.541468][T27417] EXT4-fs (loop6): pa ffff8881125c3000: logic 256, phys. 385, len 8 [ 2222.549548][T27417] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:4881: group 0, free 0, pa_free 1 [ 2222.630641][T22201] EXT4-fs (loop6): unmounting filesystem. [ 2224.277932][T27559] overlayfs: failed to clone upperpath [ 2224.461211][T11931] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 2224.648056][T11931] usb 7-1: unable to get BOS descriptor or descriptor too short [ 2224.661919][T11931] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 2224.669608][T11931] usb 7-1: can't read configurations, error -71 [ 2224.867230][T27598] overlayfs: failed to clone upperpath [ 2224.916158][T27606] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=27606 comm=syz.3.6919 [ 2224.928794][T27606] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=27606 comm=syz.3.6919 [ 2225.377906][T27652] x_tables: duplicate underflow at hook 1 [ 2226.571891][T27725] netlink: 'syz.5.6969': attribute type 6 has an invalid length. [ 2226.949034][T27745] 9pnet_fd: Insufficient options for proto=fd [ 2228.066757][T27824] x_tables: duplicate underflow at hook 1 [ 2229.542543][T27929] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 2230.763872][T28003] bridge0: port 2(vlan3) entered blocking state [ 2230.770224][T28003] bridge0: port 2(vlan3) entered disabled state [ 2230.843375][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 2230.843389][ T28] audit: type=1400 audit(2000001089.722:2212): avc: denied { getopt } for pid=28005 comm="syz.4.7091" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 2231.377051][T28043] syz.0.7108[28043] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2231.377102][T28043] syz.0.7108[28043] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2231.571046][T28071] netlink: 104 bytes leftover after parsing attributes in process `syz.5.7122'. [ 2231.621605][T20169] Bluetooth: hci0: command 0x1003 tx timeout [ 2231.625336][T20139] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 2231.694245][T28093] loop6: detected capacity change from 0 to 128 [ 2231.741724][T28093] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 2231.750892][T28093] ext4 filesystem being mounted at /334/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 2232.551257][T22201] EXT4-fs (loop6): unmounting filesystem. [ 2232.562820][T28139] overlayfs: missing 'lowerdir' [ 2232.631772][T28143] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 2234.490502][T28267] netlink: 'syz.5.7208': attribute type 13 has an invalid length. [ 2234.506446][T28267] 0ªX¹¦D: refused to change device tx_queue_len [ 2234.515286][T28267] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 2234.651530][T20169] Bluetooth: hci0: command 0x1003 tx timeout [ 2234.651977][T20139] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 2235.172143][T28316] netlink: 277 bytes leftover after parsing attributes in process `syz.3.7229'. [ 2235.316257][T28339] netlink: 'syz.4.7239': attribute type 15 has an invalid length. [ 2235.329945][T28334] x_tables: duplicate underflow at hook 1 [ 2235.536188][T28374] overlayfs: failed to clone upperpath [ 2235.669071][T28396] netlink: 64 bytes leftover after parsing attributes in process `syz.6.7267'. [ 2236.115533][T28440] loop6: detected capacity change from 0 to 128 [ 2236.176098][T28440] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 2236.186859][T28440] ext4 filesystem being mounted at /345/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 2236.191809][ T28] audit: type=1326 audit(2000001095.072:2213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28442 comm="syz.4.7288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab2398eb69 code=0x7ffc0000 [ 2236.235703][ T28] audit: type=1326 audit(2000001095.072:2214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28442 comm="syz.4.7288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab2398eb69 code=0x7ffc0000 [ 2236.264412][T22201] EXT4-fs (loop6): unmounting filesystem. [ 2236.268292][ T28] audit: type=1326 audit(2000001095.112:2215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28442 comm="syz.4.7288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7fab2398eb69 code=0x7ffc0000 [ 2236.303572][ T28] audit: type=1326 audit(2000001095.112:2216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28442 comm="syz.4.7288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab2398eb69 code=0x7ffc0000 [ 2236.330701][ T28] audit: type=1326 audit(2000001095.112:2217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28442 comm="syz.4.7288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab2398eb69 code=0x7ffc0000 [ 2236.361156][ T28] audit: type=1326 audit(2000001095.112:2218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28442 comm="syz.4.7288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7fab2398eb69 code=0x7ffc0000 [ 2236.390535][ T28] audit: type=1326 audit(2000001095.112:2219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28442 comm="syz.4.7288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab2398eb69 code=0x7ffc0000 [ 2236.423517][ T28] audit: type=1326 audit(2000001095.112:2220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28442 comm="syz.4.7288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab2398eb69 code=0x7ffc0000 [ 2236.453441][ T28] audit: type=1326 audit(2000001095.112:2221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28442 comm="syz.4.7288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=81 compat=0 ip=0x7fab2398eb69 code=0x7ffc0000 [ 2236.482415][ T28] audit: type=1326 audit(2000001095.112:2222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28442 comm="syz.4.7288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab2398eb69 code=0x7ffc0000 [ 2237.509856][T28534] tipc: Enabling of bearer rejected, failed to enable media [ 2237.511377][T28536] loop6: detected capacity change from 0 to 128 [ 2237.556272][T28540] I/O error, dev loop13, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2237.567422][T28540] FAT-fs (loop13): unable to read boot sector [ 2237.662546][T28555] netlink: 44 bytes leftover after parsing attributes in process `syz.5.7338'. [ 2237.676470][T28555] netlink: 43 bytes leftover after parsing attributes in process `syz.5.7338'. [ 2237.688182][T28555] netlink: 'syz.5.7338': attribute type 6 has an invalid length. [ 2237.702308][T28555] netlink: 'syz.5.7338': attribute type 5 has an invalid length. [ 2237.714741][T28555] netlink: 43 bytes leftover after parsing attributes in process `syz.5.7338'. [ 2237.743499][T28561] SELinux: Context Ü is not valid (left unmapped). [ 2237.754103][T28562] incfs: Options parsing error. -22 [ 2237.761274][T28562] incfs: mount failed -22 [ 2237.803509][T28571] loop6: detected capacity change from 0 to 512 [ 2237.842994][T28571] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 2237.851163][T28577] syz.0.7347[28577] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2237.854941][T28577] syz.0.7347[28577] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2237.857997][T28571] EXT4-fs (loop6): 1 truncate cleaned up [ 2237.891686][T28571] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 2237.934777][T22201] EXT4-fs (loop6): unmounting filesystem. [ 2237.999372][T28590] loop6: detected capacity change from 0 to 4096 [ 2237.999743][T28592] overlayfs: failed to clone upperpath [ 2238.076852][T28590] EXT4-fs (loop6): Test dummy encryption mode enabled [ 2238.276417][T28590] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 2238.305922][T22201] EXT4-fs (loop6): unmounting filesystem. [ 2238.412036][T28618] xt_hashlimit: size too large, truncated to 1048576 [ 2238.430579][T28602] loop6: detected capacity change from 0 to 512 [ 2238.445764][T28602] EXT4-fs: Ignoring removed nobh option [ 2238.455392][T28602] ext3: Bad value for 'min_batch_time' [ 2238.718104][T28628] overlayfs: failed to clone upperpath [ 2238.731801][T11931] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 2238.921184][T11931] usb 7-1: Using ep0 maxpacket: 32 [ 2238.928600][T11931] usb 7-1: config 0 has an invalid interface number: 196 but max is 0 [ 2238.938495][T11931] usb 7-1: config 0 has no interface number 0 [ 2238.948011][T11931] usb 7-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 2238.959989][T11931] usb 7-1: config 0 interface 196 has no altsetting 0 [ 2238.970316][T11931] usb 7-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 2238.982723][T11931] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2238.993303][T11931] usb 7-1: Product: syz [ 2239.000101][T11931] usb 7-1: Manufacturer: syz [ 2239.008156][T11931] usb 7-1: SerialNumber: syz [ 2239.015854][T11931] usb 7-1: config 0 descriptor?? [ 2239.023121][T28602] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 2239.234100][T11931] ipheth 7-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 2239.242860][T11931] ipheth: probe of 7-1:0.196 failed with error -71 [ 2239.251954][T11931] usb 7-1: USB disconnect, device number 26 [ 2239.914694][T28710] hub 6-0:1.0: USB hub found [ 2239.921080][T28710] hub 6-0:1.0: 1 port detected [ 2240.022996][T28714] loop6: detected capacity change from 0 to 512 [ 2240.030682][T28714] EXT4-fs: Ignoring removed nobh option [ 2240.037257][T28714] ext3: Bad value for 'min_batch_time' [ 2240.071786][T28621] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 2240.351290][T11931] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 2240.537216][T28736] netlink: 96 bytes leftover after parsing attributes in process `syz.4.7412'. [ 2240.551318][T11931] usb 7-1: Using ep0 maxpacket: 32 [ 2240.560818][T11931] usb 7-1: config 0 has an invalid interface number: 196 but max is 0 [ 2240.573351][T11931] usb 7-1: config 0 has no interface number 0 [ 2240.581519][T11931] usb 7-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 2240.595646][T11931] usb 7-1: config 0 interface 196 has no altsetting 0 [ 2240.611185][T11931] usb 7-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 2240.622270][T11931] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2240.630874][T11931] usb 7-1: Product: syz [ 2240.636927][T11931] usb 7-1: Manufacturer: syz [ 2240.643153][T11931] usb 7-1: SerialNumber: syz [ 2240.649742][T11931] usb 7-1: config 0 descriptor?? [ 2240.657806][T28714] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 2240.699954][T28744] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=28744 comm=syz.5.7416 [ 2240.874083][T11931] ipheth 7-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 2240.885450][T11931] ipheth: probe of 7-1:0.196 failed with error -71 [ 2240.901092][T11931] usb 7-1: USB disconnect, device number 27 [ 2241.430367][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 2241.430387][ T28] audit: type=1400 audit(2000001100.302:2227): avc: denied { append } for pid=28780 comm="syz.6.7432" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 2241.690598][T28795] random: crng reseeded on system resumption [ 2241.788841][T28804] loop6: detected capacity change from 0 to 1024 [ 2241.799871][T28804] EXT4-fs: Ignoring removed orlov option [ 2241.842710][T28804] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 2241.874903][T28804] EXT4-fs (loop6): shut down requested (1) [ 2241.884308][ T28] audit: type=1400 audit(2000001100.762:2228): avc: denied { create } for pid=28802 comm="syz.6.7441" name=E91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 2241.910702][ T28] audit: type=1400 audit(2000001100.762:2229): avc: denied { read } for pid=85 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 2241.911538][T22201] EXT4-fs (loop6): unmounting filesystem. [ 2241.950758][ T28] audit: type=1400 audit(2000001100.762:2230): avc: denied { search } for pid=85 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2241.991696][ T28] audit: type=1400 audit(2000001100.762:2231): avc: denied { write } for pid=85 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2242.056135][ T28] audit: type=1400 audit(2000001100.762:2232): avc: denied { add_name } for pid=85 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2242.086096][ T28] audit: type=1400 audit(2000001100.762:2233): avc: denied { create } for pid=85 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 2242.112202][ T28] audit: type=1400 audit(2000001100.762:2234): avc: denied { append open } for pid=85 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 2242.142344][ T28] audit: type=1400 audit(2000001100.762:2235): avc: denied { getattr } for pid=85 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 2242.322510][T11290] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 2242.391834][T28846] xt_hashlimit: size too large, truncated to 1048576 [ 2242.521194][T11290] usb 7-1: Using ep0 maxpacket: 32 [ 2242.530602][T11290] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2242.545510][T11290] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2242.558092][T11290] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 2242.568405][T11290] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2242.583516][T11290] usb 7-1: config 0 descriptor?? [ 2242.591023][T11290] hub 7-1:0.0: USB hub found [ 2242.612764][T28857] overlayfs: failed to clone lowerpath [ 2242.650842][T28861] overlayfs: failed to clone upperpath [ 2242.792645][T11290] hub 7-1:0.0: config failed, can't read hub descriptor (err -22) [ 2243.004812][T11290] hid-generic 0003:046D:C31C.0006: item fetching failed at offset 0/1 [ 2243.015939][T11290] hid-generic: probe of 0003:046D:C31C.0006 failed with error -22 [ 2243.025235][ T28] audit: type=1400 audit(2000001101.892:2236): avc: denied { create } for pid=28873 comm="syz.0.7469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 2243.306998][T28919] overlayfs: failed to clone upperpath [ 2243.352930][T11290] usb 7-1: USB disconnect, device number 28 [ 2243.919039][T28958] loop6: detected capacity change from 0 to 512 [ 2243.936479][T28958] EXT4-fs: Ignoring removed nobh option [ 2243.945849][T28958] ext3: Bad value for 'min_batch_time' [ 2244.271292][T11290] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 2244.471319][T11290] usb 7-1: Using ep0 maxpacket: 32 [ 2244.478854][T11290] usb 7-1: config 0 has an invalid interface number: 196 but max is 0 [ 2244.488438][T11290] usb 7-1: config 0 has no interface number 0 [ 2244.495974][T11290] usb 7-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 2244.508081][T11290] usb 7-1: config 0 interface 196 has no altsetting 0 [ 2244.518632][T11290] usb 7-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 2244.531425][T11290] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2244.541919][T11290] usb 7-1: Product: syz [ 2244.546238][T11290] usb 7-1: Manufacturer: syz [ 2244.552368][T11290] usb 7-1: SerialNumber: syz [ 2244.558517][T11290] usb 7-1: config 0 descriptor?? [ 2244.564341][T28958] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 2244.775317][T11290] ipheth 7-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 2244.783886][T11290] ipheth: probe of 7-1:0.196 failed with error -71 [ 2244.792206][T11290] usb 7-1: USB disconnect, device number 29 [ 2245.292783][T29026] loop6: detected capacity change from 0 to 512 [ 2245.304171][T29026] EXT4-fs (loop6): Test dummy encryption mode enabled [ 2245.311919][T29026] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 2245.337200][T29026] EXT4-fs error (device loop6): ext4_orphan_get:1426: comm syz.6.7535: bad orphan inode 131083 [ 2245.354538][T29026] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 2245.394859][T22201] EXT4-fs (loop6): unmounting filesystem. [ 2245.414062][T29041] input: syz0 as /devices/virtual/input/input12 [ 2245.656056][T11290] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 2245.665212][T11290] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 2245.771033][T29065] overlayfs: failed to clone upperpath [ 2245.774738][T29066] xt_hashlimit: size too large, truncated to 1048576 [ 2246.823285][T29122] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7574'. [ 2246.850596][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 2246.850612][ T28] audit: type=1400 audit(2000001105.722:2246): avc: denied { mounton } for pid=29123 comm="syz.6.7575" path="/proc/976/task" dev="proc" ino=91219 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 2247.035248][T29137] loop6: detected capacity change from 0 to 512 [ 2247.053327][T29137] EXT4-fs: Ignoring removed nobh option [ 2247.066174][T29137] ext3: Bad value for 'min_batch_time' [ 2247.361349][T13761] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 2247.541236][T13761] usb 7-1: Using ep0 maxpacket: 32 [ 2247.561559][T13761] usb 7-1: config 0 has an invalid interface number: 196 but max is 0 [ 2247.569880][T13761] usb 7-1: config 0 has no interface number 0 [ 2247.591239][T13761] usb 7-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 2247.607348][T13761] usb 7-1: config 0 interface 196 has no altsetting 0 [ 2247.631591][T13761] usb 7-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 2247.640934][T13761] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2247.650494][T13761] usb 7-1: Product: syz [ 2247.655804][T13761] usb 7-1: Manufacturer: syz [ 2247.660958][T13761] usb 7-1: SerialNumber: syz [ 2247.667179][T13761] usb 7-1: config 0 descriptor?? [ 2247.672716][T29137] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 2247.865771][T29164] af_packet: tpacket_rcv: packet too big, clamped from 4087 to 4294967272. macoff=96 [ 2247.885450][T13761] ipheth 7-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 2247.894179][T13761] ipheth: probe of 7-1:0.196 failed with error -71 [ 2247.905086][T13761] usb 7-1: USB disconnect, device number 30 [ 2247.962727][T29172] xt_hashlimit: size too large, truncated to 1048576 [ 2248.401080][T29192] netlink: 96 bytes leftover after parsing attributes in process `syz.4.7603'. [ 2248.414425][T29194] loop6: detected capacity change from 0 to 128 [ 2248.428462][T29194] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 2248.439782][T29194] ext4 filesystem being mounted at /383/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 2248.463226][T29194] fscrypt (loop6, inode 12): Unsupported encryption modes (contents 0, filenames 0) [ 2248.485755][T22201] EXT4-fs (loop6): unmounting filesystem. [ 2248.515563][T29206] loop6: detected capacity change from 0 to 512 [ 2248.534247][T29206] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 2248.543667][T29206] ext4 filesystem being mounted at /384/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 2248.563685][ T28] audit: type=1400 audit(2000001107.442:2247): avc: denied { append } for pid=29205 comm="syz.6.7608" name="file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 2248.595330][T22201] EXT4-fs (loop6): unmounting filesystem. [ 2248.615014][T29211] device syzkaller0 entered promiscuous mode [ 2248.826216][T29236] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7621'. [ 2249.151572][T18771] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 2249.161359][T29256] x_tables: duplicate underflow at hook 4 [ 2249.351230][T18771] usb 7-1: Using ep0 maxpacket: 32 [ 2249.361406][T18771] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 2249.381256][T18771] usb 7-1: config 0 has no interface number 0 [ 2249.388119][T18771] usb 7-1: config 0 interface 184 has no altsetting 0 [ 2249.400688][T18771] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 2249.412689][T18771] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2249.422055][T18771] usb 7-1: Product: syz [ 2249.426522][T18771] usb 7-1: Manufacturer: syz [ 2249.432389][T18771] usb 7-1: SerialNumber: syz [ 2249.442575][T18771] usb 7-1: config 0 descriptor?? [ 2249.453198][T18771] smsc75xx v1.0.0 [ 2249.908056][T29289] overlayfs: failed to clone upperpath [ 2249.915745][T29289] overlayfs: failed to clone upperpath [ 2250.454591][T18771] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 2250.467627][T18771] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 2250.680406][T18771] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 2250.694648][T18771] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 2250.711969][T18771] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 2250.724896][T18771] smsc75xx: probe of 7-1:0.184 failed with error -71 [ 2250.734354][T18771] usb 7-1: USB disconnect, device number 31 [ 2251.337749][T29372] loop6: detected capacity change from 0 to 1024 [ 2251.345863][T29372] EXT4-fs: Ignoring removed orlov option [ 2251.361817][T29372] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 2251.379894][ T28] audit: type=1400 audit(2000001110.252:2248): avc: denied { mounton } for pid=29371 comm="syz.6.7682" path="/394/bus/bus" dev="loop6" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 2251.393820][T29372] overlayfs: './file1' not a directory [ 2251.405808][ T28] audit: type=1400 audit(2000001110.252:2249): avc: denied { write } for pid=29371 comm="syz.6.7682" name="bus" dev="loop6" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 2251.445727][ T28] audit: type=1400 audit(2000001110.252:2250): avc: denied { add_name } for pid=29371 comm="syz.6.7682" name="work" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 2251.471140][ T28] audit: type=1400 audit(2000001110.252:2251): avc: denied { setattr } for pid=29371 comm="syz.6.7682" name="work" dev="loop6" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 2251.497531][ T28] audit: type=1400 audit(2000001110.252:2252): avc: denied { remove_name } for pid=29371 comm="syz.6.7682" name="#5a" dev="loop6" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 2251.523508][ T28] audit: type=1400 audit(2000001110.252:2253): avc: denied { rename } for pid=29371 comm="syz.6.7682" name="#5a" dev="loop6" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 2251.549490][ T28] audit: type=1400 audit(2000001110.252:2254): avc: denied { unlink } for pid=29371 comm="syz.6.7682" name="#5a" dev="loop6" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2251.550021][T22201] EXT4-fs (loop6): unmounting filesystem. [ 2251.576957][ T28] audit: type=1400 audit(2000001110.292:2255): avc: denied { mounton } for pid=29371 comm="syz.6.7682" path="/394/bus/file0" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 2251.656270][T29389] overlayfs: failed to clone upperpath [ 2252.028455][T29418] device ip6tnl2 entered promiscuous mode [ 2252.341879][T29473] I/O error, dev loop11, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2252.354010][T29473] FAT-fs (loop11): unable to read boot sector [ 2252.519975][T29485] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 2253.162323][T29514] 9pnet_fd: Insufficient options for proto=fd [ 2253.185172][T29516] serio: Serial port ptm0 [ 2253.272577][T29525] overlayfs: failed to clone upperpath [ 2253.286367][T29527] SELinux: failed to load policy [ 2253.487275][T29535] netlink: 'syz.6.7755': attribute type 13 has an invalid length. [ 2253.499458][T29535] gretap0: refused to change device tx_queue_len [ 2253.507465][T29535] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 2254.139807][T29557] overlayfs: failed to clone upperpath [ 2254.211995][T29565] loop6: detected capacity change from 0 to 1024 [ 2254.249458][T29565] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 2254.272866][T29565] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 2254.302260][T29565] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (59422!=20869) [ 2254.323777][T29565] EXT4-fs error (device loop6): ext4_get_journal_inode:5722: inode #17: comm syz.6.7768: iget: bad i_size value: 4398046511204 [ 2254.359166][T29565] EXT4-fs (loop6): no journal found [ 2254.392062][ T549] kernel write not supported for file bpf-prog (pid: 549 comm: kworker/0:7) [ 2254.616585][T29596] netlink: 'syz.0.7777': attribute type 13 has an invalid length. [ 2254.629621][T29596] 1ªX¹¦D: refused to change device tx_queue_len [ 2254.637988][T29596] A link change request failed with some changes committed already. Interface 31ªX¹¦D may have been left with an inconsistent configuration, please check. [ 2254.844260][T29598] loop6: detected capacity change from 0 to 512 [ 2254.851721][T29598] EXT4-fs: Ignoring removed nobh option [ 2254.857696][T29598] ext3: Bad value for 'min_batch_time' [ 2254.968745][T29608] overlayfs: failed to clone upperpath [ 2255.131477][ T549] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 2255.328106][ T549] usb 7-1: Using ep0 maxpacket: 32 [ 2255.338568][ T549] usb 7-1: config 0 has an invalid interface number: 196 but max is 0 [ 2255.352099][ T549] usb 7-1: config 0 has no interface number 0 [ 2255.359683][ T549] usb 7-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 2255.375366][ T549] usb 7-1: config 0 interface 196 has no altsetting 0 [ 2255.398237][ T549] usb 7-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 2255.408713][ T549] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2255.417092][ T549] usb 7-1: Product: syz [ 2255.422923][ T549] usb 7-1: Manufacturer: syz [ 2255.429015][ T549] usb 7-1: SerialNumber: syz [ 2255.439201][ T549] usb 7-1: config 0 descriptor?? [ 2255.446501][T29598] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 2255.458867][T29618] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29618 comm=syz.0.7789 [ 2255.662073][ T549] ipheth 7-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 2255.670445][ T549] ipheth: probe of 7-1:0.196 failed with error -71 [ 2255.720564][ T549] usb 7-1: USB disconnect, device number 32 [ 2256.216956][T29681] I/O error, dev loop13, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2256.237658][T29681] FAT-fs (loop13): unable to read boot sector [ 2256.265708][T29688] overlayfs: failed to clone upperpath [ 2256.853645][T29719] syz.4.7831[29719] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2256.853734][T29719] syz.4.7831[29719] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2256.867696][T29719] syz.4.7831[29719] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2256.882610][T29719] syz.4.7831[29719] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2256.897407][T29719] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29719 comm=syz.4.7831 [ 2257.026473][T29732] bridge: RTM_NEWNEIGH with invalid ether address [ 2257.162340][T29742] bridge: RTM_NEWNEIGH with invalid ether address [ 2257.361753][T29751] bridge: RTM_NEWNEIGH with invalid ether address [ 2257.532471][T29759] overlayfs: failed to clone upperpath [ 2257.548184][T29761] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 2257.587350][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 2257.587371][ T28] audit: type=1400 audit(2000001116.462:2261): avc: denied { write } for pid=29762 comm="syz.6.7851" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 2257.587763][T29763] incfs: Can't find or create .index dir in ./file0 [ 2257.596802][ T28] audit: type=1400 audit(2000001116.462:2262): avc: denied { add_name } for pid=29762 comm="syz.6.7851" name=".index" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 2257.618236][T29763] incfs: mount failed -14 [ 2257.642386][ T28] audit: type=1400 audit(2000001116.462:2263): avc: denied { associate } for pid=29762 comm="syz.6.7851" name=".index" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 2257.937241][ T28] audit: type=1400 audit(2000001116.812:2264): avc: denied { write } for pid=29811 comm="syz.4.7874" name="file0" dev="tmpfs" ino=8884 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 2257.961417][ T28] audit: type=1400 audit(2000001116.812:2265): avc: denied { open } for pid=29811 comm="syz.4.7874" path="/1652/file0" dev="tmpfs" ino=8884 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 2257.969911][T29815] netlink: 88 bytes leftover after parsing attributes in process `syz.4.7875'. [ 2257.986936][ T28] audit: type=1400 audit(2000001116.812:2266): avc: denied { ioctl } for pid=29811 comm="syz.4.7874" path="/1652/file0" dev="tmpfs" ino=8884 ioctlcmd=0x5820 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 2257.996251][T29815] netlink: 48 bytes leftover after parsing attributes in process `syz.4.7875'. [ 2258.034015][T29816] loop6: detected capacity change from 0 to 512 [ 2258.041813][T29816] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 2258.057695][T29816] EXT4-fs error (device loop6): ext4_find_inline_data_nolock:164: inode #17: comm syz.6.7871: inline data xattr refers to an external xattr inode [ 2258.079539][T29816] EXT4-fs error (device loop6): ext4_orphan_get:1405: comm syz.6.7871: couldn't read orphan inode 17 (err -117) [ 2258.092994][T29816] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 2258.112285][T29816] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 2258.168879][T29822] overlayfs: failed to clone upperpath [ 2258.527061][T29837] x_tables: duplicate underflow at hook 1 [ 2258.717768][T22201] EXT4-fs (loop6): unmounting filesystem. [ 2258.740641][T29846] hub 6-0:1.0: USB hub found [ 2258.746245][T29846] hub 6-0:1.0: 1 port detected [ 2258.795386][T29855] sch_fq: defrate 4294967295 ignored. [ 2258.927418][T29863] loop6: detected capacity change from 0 to 512 [ 2258.937579][T29863] EXT4-fs: Ignoring removed nobh option [ 2258.944339][T29863] ext3: Bad value for 'min_batch_time' [ 2259.281212][ T549] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 2259.471184][ T549] usb 7-1: Using ep0 maxpacket: 32 [ 2259.479790][ T549] usb 7-1: config 0 has an invalid interface number: 196 but max is 0 [ 2259.491829][ T549] usb 7-1: config 0 has no interface number 0 [ 2259.498686][ T549] usb 7-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 2259.511671][ T549] usb 7-1: config 0 interface 196 has no altsetting 0 [ 2259.521217][ T549] usb 7-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 2259.534175][ T549] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2259.542593][ T549] usb 7-1: Product: syz [ 2259.547814][ T549] usb 7-1: Manufacturer: syz [ 2259.553264][ T549] usb 7-1: SerialNumber: syz [ 2259.561841][ T549] usb 7-1: config 0 descriptor?? [ 2259.567885][T29863] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 2259.778871][ T549] ipheth 7-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 2259.795811][ T549] ipheth: probe of 7-1:0.196 failed with error -71 [ 2259.815800][ T549] usb 7-1: USB disconnect, device number 33 [ 2259.992990][T29919] syz.3.7917[29919] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2259.993091][T29919] syz.3.7917[29919] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2260.362645][ T549] kernel write not supported for file bpf-prog (pid: 549 comm: kworker/0:7) [ 2260.952404][T29993] netlink: 96 bytes leftover after parsing attributes in process `syz.4.7951'. [ 2261.015753][T30009] device wg2 entered promiscuous mode [ 2261.169180][T30030] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2261.180871][T30030] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2261.193947][T30030] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2261.205545][T30030] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2261.242399][T13761] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 2261.263399][T30034] overlayfs: failed to clone upperpath [ 2261.672257][T30064] netlink: 96 bytes leftover after parsing attributes in process `syz.4.7981'. [ 2261.673398][T30066] xt_bpf: check failed: parse error [ 2261.710744][T30069] overlayfs: failed to clone lowerpath [ 2261.764788][T30080] overlayfs: failed to clone upperpath [ 2262.251278][ T309] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 2262.422551][T30126] loop6: detected capacity change from 0 to 512 [ 2262.454450][T30126] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 2262.480108][T30126] EXT4-fs error (device loop6): ext4_find_inline_data_nolock:164: inode #17: comm syz.6.7999: inline data xattr refers to an external xattr inode [ 2262.501357][T30126] EXT4-fs error (device loop6): ext4_orphan_get:1405: comm syz.6.7999: couldn't read orphan inode 17 (err -117) [ 2262.514838][T30126] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 2262.543431][T30126] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 2263.160393][T22201] EXT4-fs (loop6): unmounting filesystem. [ 2263.226433][T30180] netlink: 96 bytes leftover after parsing attributes in process `syz.3.8028'. [ 2263.537970][T30207] loop6: detected capacity change from 0 to 512 [ 2263.556721][T30207] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 2263.571872][T30207] EXT4-fs (loop6): 1 truncate cleaned up [ 2263.578781][T30207] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 2263.617308][T22201] EXT4-fs (loop6): unmounting filesystem. [ 2263.692797][T30221] overlayfs: failed to clone upperpath [ 2264.770458][T30310] bridge: RTM_NEWNEIGH with invalid ether address [ 2264.856114][T30314] x_tables: duplicate underflow at hook 1 [ 2265.564399][T30341] overlayfs: failed to clone upperpath [ 2265.618508][T30347] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8097'. [ 2265.661786][T30349] bridge: RTM_NEWNEIGH with invalid ether address [ 2265.945376][ T28] audit: type=1400 audit(2000001124.822:2267): avc: denied { watch watch_reads } for pid=30386 comm="syz.4.8114" path="/" dev="configfs" ino=13853 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 2266.883147][T13761] kernel write not supported for file bpf-prog (pid: 13761 comm: kworker/0:3) [ 2266.898195][T30430] loop6: detected capacity change from 0 to 512 [ 2266.908465][T30430] EXT4-fs: Ignoring removed nobh option [ 2266.921835][T30430] ext3: Bad value for 'min_batch_time' [ 2266.960355][T30450] overlayfs: failed to clone upperpath [ 2267.119737][T30476] overlayfs: failed to clone upperpath [ 2267.221450][T18771] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 2267.421304][T18771] usb 7-1: Using ep0 maxpacket: 32 [ 2267.429493][T18771] usb 7-1: config 0 has an invalid interface number: 196 but max is 0 [ 2267.439089][T18771] usb 7-1: config 0 has no interface number 0 [ 2267.445590][T18771] usb 7-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 2267.458293][T18771] usb 7-1: config 0 interface 196 has no altsetting 0 [ 2267.468475][T18771] usb 7-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 2267.478437][T18771] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2267.488071][T18771] usb 7-1: Product: syz [ 2267.493197][T18771] usb 7-1: Manufacturer: syz [ 2267.498914][T18771] usb 7-1: SerialNumber: syz [ 2267.507690][T18771] usb 7-1: config 0 descriptor?? [ 2267.513300][T30430] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 2267.729876][T18771] ipheth 7-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 2267.739099][T18771] ipheth: probe of 7-1:0.196 failed with error -71 [ 2267.748958][T18771] usb 7-1: USB disconnect, device number 34 [ 2268.015898][T30562] tipc: Resetting bearer [ 2268.035140][T30562] device vlan2 left promiscuous mode [ 2268.043339][T30562] device bridge0 left promiscuous mode [ 2268.083198][T30564] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8193'. [ 2268.258471][T30571] kvm: emulating exchange as write [ 2268.415081][T30594] loop6: detected capacity change from 0 to 512 [ 2268.422575][T30594] EXT4-fs: Ignoring removed nobh option [ 2268.432620][T30594] ext3: Bad value for 'min_batch_time' [ 2268.473202][T28621] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 2268.741228][T18771] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 2268.931230][T18771] usb 7-1: Using ep0 maxpacket: 32 [ 2268.938959][T18771] usb 7-1: config 0 has an invalid interface number: 196 but max is 0 [ 2268.948993][T18771] usb 7-1: config 0 has no interface number 0 [ 2268.956195][T18771] usb 7-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 2268.970768][T18771] usb 7-1: config 0 interface 196 has no altsetting 0 [ 2268.980244][T18771] usb 7-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 2268.991718][T18771] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2269.002192][T18771] usb 7-1: Product: syz [ 2269.010661][T18771] usb 7-1: Manufacturer: syz [ 2269.016095][T18771] usb 7-1: SerialNumber: syz [ 2269.022163][T18771] usb 7-1: config 0 descriptor?? [ 2269.027798][T30594] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 2269.240853][T18771] ipheth 7-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 2269.254119][T18771] ipheth: probe of 7-1:0.196 failed with error -71 [ 2269.268760][T30633] syz.0.8223[30633] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2269.268852][T30633] syz.0.8223[30633] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2269.274857][T18771] usb 7-1: USB disconnect, device number 35 [ 2269.337574][ T28] audit: type=1326 audit(2000001128.212:2268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30637 comm="syz.0.8225" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7feb4af8eb69 code=0x0 [ 2270.122564][T30662] syz.4.8234[30662] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2270.122624][T30662] syz.4.8234[30662] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2270.137602][T30662] netlink: 96 bytes leftover after parsing attributes in process `syz.4.8234'. [ 2270.782278][T30690] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 2271.512107][T30739] tipc: Enabling of bearer rejected, failed to enable media [ 2271.747329][T30763] xt_hashlimit: size too large, truncated to 1048576 [ 2272.426327][T30788] x_tables: duplicate underflow at hook 4 [ 2272.437009][T30789] x_tables: duplicate underflow at hook 1 [ 2272.593001][T30793] netlink: 'syz.0.8286': attribute type 13 has an invalid length. [ 2272.606362][T30793] 1ªX¹¦D: refused to change device tx_queue_len [ 2272.614927][T30793] A link change request failed with some changes committed already. Interface 31ªX¹¦D may have been left with an inconsistent configuration, please check. [ 2272.811214][T20139] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 2272.811613][ T45] Bluetooth: hci0: command 0x1003 tx timeout [ 2273.901333][T30845] syz.0.8305[30845] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2273.901411][T30845] syz.0.8305[30845] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2273.973719][T30851] syz.0.8308[30851] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2273.986145][T30851] syz.0.8308[30851] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2274.136717][T30866] bridge: RTM_NEWNEIGH with invalid ether address [ 2274.223326][ T28] audit: type=1326 audit(2000001133.102:2269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30875 comm="syz.5.8320" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f466cf8eb69 code=0x0 [ 2274.697546][T30902] overlayfs: failed to clone upperpath [ 2274.862536][ T28] audit: type=1400 audit(2000001133.742:2270): avc: denied { accept } for pid=30910 comm="syz.6.8335" path="socket:[96266]" dev="sockfs" ino=96266 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 2274.978208][T30920] device wg2 entered promiscuous mode [ 2275.014561][T30922] device syzkaller0 entered promiscuous mode [ 2275.030095][T30922] tipc: Started in network mode [ 2275.036399][T30922] tipc: Node identity 867e6d1718fd, cluster identity 4711 [ 2275.043734][T30922] tipc: Enabled bearer , priority 0 [ 2275.052881][T30921] tipc: Resetting bearer [ 2275.076633][T30921] tipc: Disabling bearer [ 2275.127122][T30929] device veth0 entered promiscuous mode [ 2275.135484][T30929] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8343'. [ 2275.507118][T30958] bridge: RTM_NEWNEIGH with invalid ether address [ 2275.750341][T30971] x_tables: duplicate underflow at hook 1 [ 2276.120367][T30983] overlayfs: failed to clone upperpath [ 2276.317408][T30999] bridge: RTM_NEWNEIGH with invalid ether address [ 2276.342152][T31001] device wg2 entered promiscuous mode [ 2276.837164][T31014] overlayfs: failed to clone upperpath [ 2277.599251][T31089] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8413'. [ 2277.662589][T31090] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=31090 comm=syz.3.8413 [ 2277.676120][T31090] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8413'. [ 2278.093204][T31108] overlayfs: failed to clone upperpath [ 2278.428203][T31121] loop6: detected capacity change from 0 to 2048 [ 2278.457098][T31121] EXT4-fs error (device loop6): __ext4_fill_super:5389: inode #2: comm syz.6.8426: iget: bad extended attribute block 281474976710655 [ 2278.474262][T31121] EXT4-fs (loop6): get root inode failed [ 2278.480105][T31121] EXT4-fs (loop6): mount failed [ 2278.513676][T31129] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8429'. [ 2278.662626][T31134] xt_hashlimit: size too large, truncated to 1048576 [ 2278.663832][T31135] loop6: detected capacity change from 0 to 512 [ 2278.679458][T31135] EXT4-fs: Ignoring removed nobh option [ 2278.686038][T31135] ext3: Bad value for 'min_batch_time' [ 2278.853551][T31149] syz.3.8436[31149] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2278.853631][T31149] syz.3.8436[31149] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2279.000630][T18771] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 2279.211267][T18771] usb 7-1: Using ep0 maxpacket: 32 [ 2279.227130][T18771] usb 7-1: config 0 has an invalid interface number: 196 but max is 0 [ 2279.306107][T18771] usb 7-1: config 0 has no interface number 0 [ 2279.312845][T18771] usb 7-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 2279.325222][T18771] usb 7-1: config 0 interface 196 has no altsetting 0 [ 2279.344669][T18771] usb 7-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 2279.355161][T18771] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2279.365290][T18771] usb 7-1: Product: syz [ 2279.369960][T18771] usb 7-1: Manufacturer: syz [ 2279.375725][T18771] usb 7-1: SerialNumber: syz [ 2279.383517][T18771] usb 7-1: config 0 descriptor?? [ 2279.390149][T31135] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 2279.603959][T18771] ipheth 7-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 2279.616293][T18771] ipheth: probe of 7-1:0.196 failed with error -71 [ 2279.641840][T18771] usb 7-1: USB disconnect, device number 36 [ 2280.230856][T31199] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2280.241151][T31199] IPv6: NLM_F_CREATE should be set when creating new route [ 2280.252086][T31199] IPv6: NLM_F_CREATE should be set when creating new route [ 2280.319158][T31210] loop6: detected capacity change from 0 to 512 [ 2280.338651][T31210] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 2280.358890][T31210] EXT4-fs error (device loop6): ext4_find_inline_data_nolock:164: inode #17: comm syz.6.8460: inline data xattr refers to an external xattr inode [ 2280.375273][T31210] EXT4-fs error (device loop6): ext4_orphan_get:1405: comm syz.6.8460: couldn't read orphan inode 17 (err -117) [ 2280.388426][T31210] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 2280.410123][T31210] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 2280.877401][T31233] netlink: 312 bytes leftover after parsing attributes in process `syz.0.8469'. [ 2281.035756][T22201] EXT4-fs (loop6): unmounting filesystem. [ 2281.862506][T31275] device macsec0 entered promiscuous mode [ 2282.339026][ T28] audit: type=1400 audit(2000001141.212:2271): avc: denied { append } for pid=31305 comm="syz.5.8497" name="file0" dev="tmpfs" ino=9069 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 2282.550723][T31312] loop6: detected capacity change from 0 to 512 [ 2282.571587][T31312] EXT4-fs: Ignoring removed nobh option [ 2282.591617][T31312] ext3: Bad value for 'min_batch_time' [ 2282.901193][T18771] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 2283.091201][T18771] usb 7-1: Using ep0 maxpacket: 32 [ 2283.098731][T18771] usb 7-1: config 0 has an invalid interface number: 196 but max is 0 [ 2283.108451][T18771] usb 7-1: config 0 has no interface number 0 [ 2283.114904][T18771] usb 7-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 2283.126048][T18771] usb 7-1: config 0 interface 196 has no altsetting 0 [ 2283.136459][T18771] usb 7-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 2283.146385][T18771] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2283.165088][T18771] usb 7-1: Product: syz [ 2283.169355][T18771] usb 7-1: Manufacturer: syz [ 2283.174554][T18771] usb 7-1: SerialNumber: syz [ 2283.185136][T18771] usb 7-1: config 0 descriptor?? [ 2283.190816][T31312] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 2283.331393][T31358] overlayfs: failed to clone upperpath [ 2283.404703][T18771] ipheth 7-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 2283.412427][T18771] ipheth: probe of 7-1:0.196 failed with error -71 [ 2283.426864][T18771] usb 7-1: USB disconnect, device number 37 [ 2283.967978][T31378] loop6: detected capacity change from 0 to 512 [ 2283.990940][T31378] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 2284.016633][T31378] EXT4-fs (loop6): group descriptors corrupted! [ 2285.697522][T31475] loop6: detected capacity change from 0 to 512 [ 2285.707857][T31475] EXT4-fs: Ignoring removed nobh option [ 2285.714629][T31475] ext3: Bad value for 'min_batch_time' [ 2285.751860][T28621] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 2286.051174][T11290] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 2286.164927][T31501] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8565'. [ 2286.231287][T11290] usb 7-1: Using ep0 maxpacket: 32 [ 2286.238981][T11290] usb 7-1: config 0 has an invalid interface number: 196 but max is 0 [ 2286.267143][T11290] usb 7-1: config 0 has no interface number 0 [ 2286.277188][T11290] usb 7-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 2286.297969][T11290] usb 7-1: config 0 interface 196 has no altsetting 0 [ 2286.307243][T11290] usb 7-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 2286.321223][T11290] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2286.330472][T11290] usb 7-1: Product: syz [ 2286.335686][T11290] usb 7-1: Manufacturer: syz [ 2286.340959][T11290] usb 7-1: SerialNumber: syz [ 2286.353732][T11290] usb 7-1: config 0 descriptor?? [ 2286.359464][T31475] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 2286.602631][T11290] ipheth 7-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 2286.621231][T11290] ipheth: probe of 7-1:0.196 failed with error -71 [ 2286.646215][T11290] usb 7-1: USB disconnect, device number 38 [ 2289.058456][ T28] audit: type=1400 audit(2000001147.932:2272): avc: denied { read } for pid=31599 comm="syz.4.8601" name="file0" dev="tmpfs" ino=9862 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 2289.196058][ T28] audit: type=1326 audit(2000001148.072:2273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31602 comm="syz.0.8602" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7feb4af8eb69 code=0x0 [ 2289.771191][T11931] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 2289.951179][T11931] usb 7-1: Using ep0 maxpacket: 8 [ 2289.969926][T11931] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 2289.980431][T11931] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2289.991247][T11931] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2290.003420][T11931] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2290.014266][T11931] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2290.038049][T11931] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2290.047597][T11931] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2291.220364][T31651] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 2292.524432][T13761] usb 7-1: USB disconnect, device number 39 [ 2292.526931][T31675] netlink: 44 bytes leftover after parsing attributes in process `syz.5.8626'. [ 2292.866400][T31688] loop6: detected capacity change from 0 to 512 [ 2292.888870][T31688] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 2293.117698][T31688] EXT4-fs (loop6): orphan cleanup on readonly fs [ 2293.125698][T31688] EXT4-fs error (device loop6): ext4_orphan_get:1426: comm syz.6.8631: bad orphan inode 15 [ 2293.137996][T31688] ext4_test_bit(bit=14, block=18) = 1 [ 2293.145522][T31688] is_bad_inode(inode)=0 [ 2293.150611][T31688] NEXT_ORPHAN(inode)=1023 [ 2293.156377][T31688] max_ino=32 [ 2293.161812][T31688] i_nlink=0 [ 2293.165883][T31688] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2934: inode #15: comm syz.6.8631: corrupted xattr block 19 [ 2293.181492][T31688] EXT4-fs warning (device loop6): ext4_evict_inode:299: xattr delete (err -117) [ 2293.191509][T31688] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 2293.293483][T31702] syz.6.8631 (31702): attempted to duplicate a private mapping with mremap. This is not supported. [ 2293.406634][T22201] EXT4-fs (loop6): unmounting filesystem. [ 2293.425855][T31706] loop6: detected capacity change from 0 to 512 [ 2293.443146][T31706] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802c11d, mo2=0002] [ 2293.454140][T31706] System zones: 1-12 [ 2293.462057][T31706] EXT4-fs error (device loop6): ext4_xattr_ibody_find:2195: inode #15: comm syz.6.8636: corrupted in-inode xattr [ 2293.475888][T31706] EXT4-fs error (device loop6): ext4_orphan_get:1405: comm syz.6.8636: couldn't read orphan inode 15 (err -117) [ 2293.491347][T31706] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 2293.511531][T31706] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8636'. [ 2293.530804][T22201] EXT4-fs (loop6): unmounting filesystem. [ 2293.720440][T31715] loop6: detected capacity change from 0 to 512 [ 2293.728981][T31715] EXT4-fs: Ignoring removed nobh option [ 2293.735523][T31715] ext3: Bad value for 'min_batch_time' [ 2294.021211][ T309] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 2294.211157][ T309] usb 7-1: Using ep0 maxpacket: 32 [ 2294.218054][ T309] usb 7-1: config 0 has an invalid interface number: 196 but max is 0 [ 2294.238598][ T309] usb 7-1: config 0 has no interface number 0 [ 2294.247325][ T309] usb 7-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 2294.258827][ T309] usb 7-1: config 0 interface 196 has no altsetting 0 [ 2294.267767][ T309] usb 7-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 2294.289614][ T309] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2294.314390][ T309] usb 7-1: Product: syz [ 2294.323488][ T309] usb 7-1: Manufacturer: syz [ 2294.333964][ T309] usb 7-1: SerialNumber: syz [ 2294.345930][ T309] usb 7-1: config 0 descriptor?? [ 2294.360104][T31715] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 2294.572893][ T309] ipheth 7-1:0.196: Unable to find endpoints [ 2294.594925][ T309] usb 7-1: USB disconnect, device number 40 [ 2296.996641][T31776] x_tables: duplicate underflow at hook 1 [ 2297.490081][ T28] audit: type=1400 audit(2000001156.362:2274): avc: denied { mounton } for pid=31792 comm="syz.5.8664" path="/1704/file0" dev="tmpfs" ino=9254 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 2298.446427][T31816] tipc: Enabled bearer , priority 0 [ 2298.454827][T31816] device syzkaller0 entered promiscuous mode [ 2298.465798][T31816] tipc: Resetting bearer [ 2298.473986][T31815] tipc: Resetting bearer [ 2298.482847][T31815] tipc: Disabling bearer [ 2298.552646][T31819] device syzkaller0 entered promiscuous mode [ 2298.634227][T31821] sch_fq: defrate 0 ignored. [ 2298.643738][T31821] loop6: detected capacity change from 0 to 512 [ 2298.650761][T31821] EXT4-fs: Ignoring removed oldalloc option [ 2298.661740][T31821] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 2298.692082][T22201] EXT4-fs (loop6): unmounting filesystem. [ 2300.082122][T31855] loop6: detected capacity change from 0 to 512 [ 2300.093613][T31855] EXT4-fs: Ignoring removed nobh option [ 2300.100529][T31855] ext3: Bad value for 'min_batch_time' [ 2300.172666][T28621] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 2300.632383][T31859] netlink: 'syz.0.8681': attribute type 13 has an invalid length. [ 2300.669420][T31859] 1ªX¹¦D: refused to change device tx_queue_len [ 2300.676285][T31859] A link change request failed with some changes committed already. Interface 31ªX¹¦D may have been left with an inconsistent configuration, please check. [ 2303.196641][T31899] loop6: detected capacity change from 0 to 512 [ 2303.224085][T31899] EXT4-fs: Ignoring removed nobh option [ 2303.238060][T31899] ext3: Bad value for 'min_batch_time' [ 2303.791162][ T309] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 2303.955567][T31923] 9pnet_fd: Insufficient options for proto=fd [ 2304.081234][ T309] usb 7-1: Using ep0 maxpacket: 32 [ 2304.088593][ T309] usb 7-1: config 0 has an invalid interface number: 196 but max is 0 [ 2304.096993][ T309] usb 7-1: config 0 has no interface number 0 [ 2304.103506][ T309] usb 7-1: config 0 interface 196 has no altsetting 0 [ 2304.113768][ T309] usb 7-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 2304.123666][ T309] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2304.132000][ T309] usb 7-1: Product: syz [ 2304.136322][ T309] usb 7-1: Manufacturer: syz [ 2304.141935][ T309] usb 7-1: SerialNumber: syz [ 2304.153080][ T309] usb 7-1: config 0 descriptor?? [ 2304.362114][ T309] ipheth 7-1:0.196: Unable to find endpoints [ 2304.370912][ T309] usb 7-1: USB disconnect, device number 41 [ 2304.660635][T31934] overlayfs: failed to clone upperpath [ 2306.051882][T31960] x_tables: duplicate underflow at hook 1 [ 2307.500791][T31985] loop6: detected capacity change from 0 to 128 [ 2308.703939][ T28] audit: type=1326 audit(2000000009.620:2275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32007 comm="syz.6.8725" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3645d8eb69 code=0x0 [ 2309.538656][T32028] x_tables: duplicate underflow at hook 1 [ 2309.993462][T32036] xt_hashlimit: max too large, truncated to 1048576 [ 2311.071892][T32055] netlink: 'syz.0.8736': attribute type 11 has an invalid length. [ 2315.500443][T32098] xt_hashlimit: size too large, truncated to 1048576 [ 2316.124035][T32111] loop6: detected capacity change from 0 to 512 [ 2316.132232][T32111] EXT4-fs: Ignoring removed mblk_io_submit option [ 2316.152815][T32111] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 2317.232272][T32111] EXT4-fs (loop6): 1 truncate cleaned up [ 2317.239266][T32111] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 2317.662256][T32119] tipc: Enabling of bearer rejected, failed to enable media [ 2318.111901][T22201] EXT4-fs (loop6): unmounting filesystem. [ 2320.125808][ T28] audit: type=1326 audit(2000000020.080:2276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32139 comm="syz.3.8761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa15158eb69 code=0x7ffc0000 [ 2320.201300][ T28] audit: type=1326 audit(2000000020.080:2277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32139 comm="syz.3.8761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa15158eb69 code=0x7ffc0000 [ 2320.229296][ T28] audit: type=1326 audit(2000000020.110:2278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32139 comm="syz.3.8761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7fa15158eb69 code=0x7ffc0000 [ 2320.254790][ T28] audit: type=1326 audit(2000000020.110:2279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32139 comm="syz.3.8761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa15158eb69 code=0x7ffc0000 [ 2320.291139][ T28] audit: type=1326 audit(2000000020.110:2280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32139 comm="syz.3.8761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa15158eb69 code=0x7ffc0000 [ 2320.464623][ T28] audit: type=1326 audit(2000000020.120:2281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32139 comm="syz.3.8761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=287 compat=0 ip=0x7fa15158eb69 code=0x7ffc0000 [ 2320.527137][ T28] audit: type=1326 audit(2000000020.120:2282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32139 comm="syz.3.8761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa15158eb69 code=0x7ffc0000 [ 2320.609923][ T28] audit: type=1326 audit(2000000020.120:2283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32139 comm="syz.3.8761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa15158eb69 code=0x7ffc0000 [ 2322.749844][T32191] x_tables: duplicate underflow at hook 1 [ 2325.345704][T32231] tipc: Enabling of bearer rejected, already enabled [ 2325.355735][T32231] general protection fault, probably for non-canonical address 0xdffffc0000000004: 0000 [#1] PREEMPT SMP KASAN [ 2325.368129][T32231] KASAN: null-ptr-deref in range [0x0000000000000020-0x0000000000000027] [ 2325.376863][T32231] CPU: 1 PID: 32231 Comm: syz.0.8788 Not tainted 6.1.145-syzkaller-00036-g4a6a5e5dbb49 #0 [ 2325.387663][T32231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2325.398577][T32231] RIP: 0010:qdisc_tree_reduce_backlog+0x181/0x360 [ 2325.405428][T32231] Code: e8 34 9a b7 fd 4d 89 ef 83 7d d0 00 74 0a e8 d6 36 73 fd e9 a2 00 00 00 4d 8b 36 49 8d 46 20 48 89 c1 48 c1 e9 03 48 89 4d b8 <80> 3c 19 00 48 89 45 d0 74 0d 48 8b 7d d0 e8 fc 99 b7 fd 48 8b 45 [ 2325.426913][T32231] RSP: 0018:ffffc90008e66e68 EFLAGS: 00010202 [ 2325.433262][T32231] RAX: 0000000000000020 RBX: dffffc0000000000 RCX: 0000000000000004 [ 2325.441442][T32231] RDX: ffff88810e89d100 RSI: 0000000000000000 RDI: 0000000000000000 [ 2325.451780][T32231] RBP: ffffc90008e66eb0 R08: ffff88810e89d100 R09: 0000000000000002 [ 2325.462225][T32231] R10: 00000000ffffffff R11: 0000000000000002 R12: 00000000000b0002 [ 2325.471276][T32231] R13: ffff888131216c00 R14: 0000000000000000 R15: ffff888131216c00 [ 2325.479864][T32231] FS: 00007feb4bdd06c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 2325.489125][T32231] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2325.496446][T32231] CR2: fffffffffffffffd CR3: 0000000122424000 CR4: 00000000003506a0 [ 2325.504900][T32231] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2325.513186][T32231] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2325.522219][T32231] Call Trace: [ 2325.525716][T32231] [ 2325.529484][T32231] fq_change+0xc18/0x11e0 [ 2325.535088][T32231] ? ref_tracker_alloc+0x2a5/0x430 [ 2325.540756][T32231] ? __cfi_ref_tracker_alloc+0x10/0x10 [ 2325.547127][T32231] ? qdisc_alloc+0x588/0x780 [ 2325.551999][T32231] ? qdisc_create+0x170/0x1040 [ 2325.557647][T32231] ? tc_modify_qdisc+0x8ea/0x1900 [ 2325.563134][T32231] ? __cfi_fq_change+0x10/0x10 [ 2325.568005][T32231] ? netlink_sendmsg+0x8aa/0xbc0 [ 2325.573425][T32231] fq_init+0x3e3/0x5d0 [ 2325.577708][T32231] ? __cfi_fq_init+0x10/0x10 [ 2325.582869][T32231] qdisc_create+0x7f3/0x1040 [ 2325.587743][T32231] ? qdisc_notify+0x360/0x360 [ 2325.592532][T32231] ? qdisc_lookup+0x100/0x4e0 [ 2325.597425][T32231] tc_modify_qdisc+0x8ea/0x1900 [ 2325.602738][T32231] ? __cfi_tc_modify_qdisc+0x10/0x10 [ 2325.608587][T32231] ? __kasan_check_write+0x14/0x20 [ 2325.614208][T32231] ? mutex_lock+0x8d/0x1a0 [ 2325.618918][T32231] ? __cfi_mutex_lock+0x10/0x10 [ 2325.624709][T32231] ? ns_capable+0x8c/0xf0 [ 2325.629319][T32231] ? netlink_net_capable+0x125/0x160 [ 2325.634980][T32231] ? __cfi_tc_modify_qdisc+0x10/0x10 [ 2325.641635][T32231] rtnetlink_rcv_msg+0x9f4/0xcf0 [ 2325.647480][T32231] ? __cfi_rtnetlink_rcv_msg+0x10/0x10 [ 2325.653136][T32231] ? kernel_text_address+0xa0/0xd0 [ 2325.659025][T32231] ? __kernel_text_address+0xd/0x30 [ 2325.659585][T32234] xt_socket: unknown flags 0x8 [ 2325.665303][T32231] ? unwind_get_return_address+0x4d/0x90 [ 2325.665342][T32231] ? memcpy+0x56/0x70 [ 2325.665370][T32231] ? avc_has_perm_noaudit+0x2f4/0x460 [ 2325.665394][T32231] ? __cfi_avc_has_perm_noaudit+0x10/0x10 [ 2325.696844][T32231] ? slab_post_alloc_hook+0x4f/0x2d0 [ 2325.702348][T32231] ? kmem_cache_alloc_node+0x181/0x340 [ 2325.708964][T32231] ? __alloc_skb+0xea/0x4b0 [ 2325.713599][T32231] ? avc_has_perm+0x158/0x240 [ 2325.718739][T32231] ? __alloc_skb+0x236/0x4b0 [ 2325.723469][T32231] ? netlink_sendmsg+0x626/0xbc0 [ 2325.728599][T32231] ? __cfi_avc_has_perm+0x10/0x10 [ 2325.733932][T32231] ? selinux_nlmsg_lookup+0x400/0x4c0 [ 2325.739963][T32231] netlink_rcv_skb+0x1f2/0x440 [ 2325.744838][T32231] ? __cfi_rtnetlink_rcv_msg+0x10/0x10 [ 2325.750437][T32231] ? __cfi_netlink_rcv_skb+0x10/0x10 [ 2325.756569][T32231] ? __netlink_lookup+0x387/0x3b0 [ 2325.762145][T32231] rtnetlink_rcv+0x1c/0x20 [ 2325.767496][T32231] netlink_unicast+0x8b1/0xa30 [ 2325.773251][T32231] netlink_sendmsg+0x8aa/0xbc0 [ 2325.779097][T32231] ? __cfi_netlink_sendmsg+0x10/0x10 [ 2325.784601][T32231] ? security_socket_sendmsg+0x93/0xb0 [ 2325.790874][T32231] ? __cfi_netlink_sendmsg+0x10/0x10 [ 2325.796355][T32231] ____sys_sendmsg+0x5a9/0x990 [ 2325.801273][T32231] ? __sys_sendmsg_sock+0x40/0x40 [ 2325.806438][T32231] ? import_iovec+0x7c/0xb0 [ 2325.810950][T32231] ___sys_sendmsg+0x21c/0x290 [ 2325.815730][T32231] ? __sys_sendmsg+0x270/0x270 [ 2325.820634][T32231] ? __fdget+0x19c/0x220 [ 2325.824905][T32231] __x64_sys_sendmsg+0x1f0/0x2c0 [ 2325.829858][T32231] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 2325.835333][T32231] ? __kasan_check_write+0x14/0x20 [ 2325.840562][T32231] ? fpregs_restore_userregs+0x128/0x260 [ 2325.846648][T32231] ? switch_fpu_return+0xe/0x10 [ 2325.851791][T32231] x64_sys_call+0x171/0x9a0 [ 2325.856415][T32231] do_syscall_64+0x4c/0xa0 [ 2325.860963][T32231] ? clear_bhb_loop+0x30/0x80 [ 2325.865821][T32231] ? clear_bhb_loop+0x30/0x80 [ 2325.870681][T32231] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2325.876910][T32231] RIP: 0033:0x7feb4af8eb69 [ 2325.881680][T32231] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2325.903228][T32231] RSP: 002b:00007feb4bdd0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2325.911919][T32231] RAX: ffffffffffffffda RBX: 00007feb4b1b5fa0 RCX: 00007feb4af8eb69 [ 2325.920034][T32231] RDX: 0000000004008000 RSI: 0000200000000200 RDI: 0000000000000005 [ 2325.928273][T32231] RBP: 00007feb4b011df1 R08: 0000000000000000 R09: 0000000000000000 [ 2325.936353][T32231] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2325.944587][T32231] R13: 0000000000000000 R14: 00007feb4b1b5fa0 R15: 00007ffc0ab5a9b8 [ 2325.952742][T32231] [ 2325.956647][T32231] Modules linked in: [ 2325.960779][T32231] ---[ end trace 0000000000000000 ]--- [ 2325.966624][T32231] RIP: 0010:qdisc_tree_reduce_backlog+0x181/0x360 [ 2325.973116][T32231] Code: e8 34 9a b7 fd 4d 89 ef 83 7d d0 00 74 0a e8 d6 36 73 fd e9 a2 00 00 00 4d 8b 36 49 8d 46 20 48 89 c1 48 c1 e9 03 48 89 4d b8 <80> 3c 19 00 48 89 45 d0 74 0d 48 8b 7d d0 e8 fc 99 b7 fd 48 8b 45 [ 2325.993133][T32231] RSP: 0018:ffffc90008e66e68 EFLAGS: 00010202 [ 2325.999394][T32231] RAX: 0000000000000020 RBX: dffffc0000000000 RCX: 0000000000000004 [ 2326.008164][T32231] RDX: ffff88810e89d100 RSI: 0000000000000000 RDI: 0000000000000000 [ 2326.016574][T32231] RBP: ffffc90008e66eb0 R08: ffff88810e89d100 R09: 0000000000000002 [ 2326.025608][T32231] R10: 00000000ffffffff R11: 0000000000000002 R12: 00000000000b0002 [ 2326.034405][T32231] R13: ffff888131216c00 R14: 0000000000000000 R15: ffff888131216c00 [ 2326.042601][T32231] FS: 00007feb4bdd06c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 2326.053817][T32231] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2326.062190][T32231] CR2: fffffffffffffffd CR3: 0000000122424000 CR4: 00000000003506a0 [ 2326.070808][T32231] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2326.081199][T32231] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2326.090409][T32231] Kernel panic - not syncing: Fatal exception in interrupt [ 2326.098580][T32231] Kernel Offset: disabled [ 2326.103447][T32231] Rebooting in 86400 seconds..