last executing test programs: 2m38.746038409s ago: executing program 1 (id=1893): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = socket(0x2, 0x3, 0x9) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r2, &(0x7f0000004780)=[{{&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, 0x0}}, {{&(0x7f00000031c0)={0x2, 0x0, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_retopts={{0x14, 0x0, 0x7, {[@noop]}}}], 0x18}}], 0x2, 0x0) 2m38.745469219s ago: executing program 1 (id=1894): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000406d041bc700000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xfb, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000780)=ANY=[@ANYRESHEX=r1], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x117040, 0x1) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r9}, 0x10) unshare(0x60600) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) 2m35.588780705s ago: executing program 1 (id=1914): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00+'], 0x168) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "9fbbb0", 0x0, 0xc, 0x0, @private1, @local}}}}, 0x0) listen(r0, 0x2) syz_emit_ethernet(0x4a, &(0x7f00000005c0)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) 2m35.581870076s ago: executing program 1 (id=1916): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x7b) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = syz_usb_connect$hid(0x2, 0x3b, &(0x7f0000000280)=ANY=[], 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) ioctl$BTRFS_IOC_SET_FEATURES(r3, 0x40309439, &(0x7f0000000000)={0x1, 0x1, 0x10}) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @dev}, 0x2}}, 0x2e) close(r4) socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}, 0x2, 0x0, 0x0, 0x3}}, 0x2e) r6 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r6, &(0x7f0000000000)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x11}}}, 0x1e) connect$pptp(r6, &(0x7f0000000040)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000300), 0x1a01, 0x0) ioctl$EVIOCGPROP(r7, 0x40047438, &(0x7f0000000180)=""/246) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000440)={0x24, &(0x7f0000000040)={0x0, 0x24, 0x5, {0x5, 0x0, "b53a25"}}, 0x0, 0x0, 0x0}, 0x0) 2m34.864469055s ago: executing program 2 (id=1925): syz_mount_image$ext4(&(0x7f00000004c0)='ext3\x00', &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f0000000240), 0x21, 0x4a6, &(0x7f0000000a40)="$eJzs3cFPG9kZAPBvBgiEkEDaHNqqbdI0bVpFscFJUJRTemlVRZGqRj31kFBwEMLGCJs00BzI/1CpkXpq/4QeKvVQKae97233tpfsYaXsbrSrsNIevJqxIYRgYDcES/j3k55m3jzj7z2sec98gF8APetcRKxFxLGIuBcRo+3rSbvEzVbJHvfyxaPp9RePppNoNu98luTt2bXY8jWZE+3nHIqIP/4u4i/Jm3HrK6vzU5VKealdLzaqi8X6yurluerUbHm2vFAqTU5Mjl+/cq10YGM9W/3P89/O3frT///3k2fvr/36b1m3RtptW8dxkFpDH9iMk+mPiFvvIlgX9LXHc6zbHeE7SSPiexFxPr//R6MvfzUBgKOs2RyN5ujWOgBw1KV5DixJC+1cwEikaaHQyuGdieG0Uqs3Lt2vLS/MtHJlYzGQ3p+rlMfbucKxGEiy+kR+/qpe2la/EhGnI+Lvg8fzemG6Vpnp5hsfAOhhJ7at/18OttZ/AOCIG+p2BwCAQ2f9B4DeY/0HgN5j/QeA3mP9B4DeY/0HgN5j/QeAnvKH27ez0lxvf/71zIOV5fnag8sz5fp8obo8XZiuLS0WZmu12fwze6p7PV+lVlucuBrLD4uNcr1RrK+s3q3Wlhcad/PP9b5bHjiUUQEAuzl99umHSUSs3Tiel9iyl4O1Go62tNsdALqmr9sdALrGbl/Qu/yMD+ywRe9rOv6J0JOD7wtwOC7+UP4fepX8P/Qu+X/oXfL/0LuazcSe/wDQY+T4Ab//BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgG9vJC9JWmjvBT4SaVooRJyMiLEYSO7PVcrjEXEqIj4YHBjM6hPd7jQA8JbST5L2/l8XRy+MbG89lnw1mB8j4q//vPOPh1ONxtJEdv3zzeuNJ+3rpW70HwDYy8Y6vbGOb3j54tH0RjnM/jz/TWtz0Szueru0WvqjPz8OxUBEDH+RtOst2fuVvgOIv/Y4In6w0/iTPDcy1t75dHv8LPbJQ42fvhY/zdtax+x78f0D6Av0mqfZ/HNzp/svjXP5cef7fyifod7exvy3/sb8l27Of30d5r9z+41x9b3fd2x7HPGj/p3iJ5vxkw7xL+wz/kc//un5Tm3Nf0VcjJ3jb41VbFQXi/WV1ctz1anZ8mx5oVSanJgcv37lWqmY56iLG5nqN31649Kp3cY/3CH+0B7j/8U+x//vr+/9+We7xP/Vz3d+/c/sEj9bE3+5z/hTw//tuH13Fn+mw/j3ev0v7TP+s49XZ/b5UADgENRXVuenKpXykhMnTpxsnnR7ZgLetVc3fbd7AgAAAAAAAAAAAAAAdHIY/07U7TECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwdH0TAAD//yyP2UE=") bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f00000004c0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @local}}}}, @tclass={{0x14, 0x29, 0x43, 0xfffffff9}}], 0x40}}, {{&(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback, 0x7}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=[@dontfrag={{0x14}}, @tclass={{0x14, 0x29, 0x43, 0x4}}, @rthdr_2292={{0xb8, 0x29, 0x39, {0x0, 0x14, 0x2, 0x8, 0x0, [@loopback, @ipv4={'\x00', '\xff\xff', @multicast2}, @empty, @private1, @loopback, @private0, @mcast1, @remote, @ipv4={'\x00', '\xff\xff', @loopback}, @empty]}}}], 0xe8}}], 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=ANY=[@ANYBLOB="5c0000000301050100000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400fe80bfcd7835000000000000000000bb0c000280a0ff0100000000000c0019800800020009"], 0x5c}}, 0x0) quotactl$Q_GETNEXTQUOTA(0xffffffff80000901, &(0x7f0000000200)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, 0x0) 2m34.864126425s ago: executing program 2 (id=1926): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00220f0035f0a8319be78a0000bac9d057e9350310"], 0x0}, 0x0) (async, rerun: 64) syz_open_dev$hiddev(&(0x7f0000000240), 0x200000009, 0x301) (rerun: 64) signalfd(0xffffffffffffffff, 0x0, 0x0) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) (async) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) (async) r2 = syz_open_procfs(0x0, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) sendfile(r3, r2, 0x0, 0x7f1) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async, rerun: 64) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x298) (async, rerun: 64) r4 = getpid() (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x803f, 0xffffffffffffffff, 0x0) (rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r7}, 0x18) (async, rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (rerun: 64) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3e, 0x0, 0x0) (async, rerun: 32) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 32) openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x141842, 0x0) (async, rerun: 32) r8 = inotify_init() (rerun: 32) inotify_add_watch(r8, &(0x7f00000000c0)='.\x00', 0xe0000011) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) 2m33.359928528s ago: executing program 2 (id=1942): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="190000000000000009c04156b758b822bdc1c834e7cceb25e8979813471685c9718f9bf74bc2e698a4dfabe5dfdabd5a9846f0d2dce061496c552c745ed462e59c1ee9eda08f216bea80712c179650e4044539dec12f4a2cf9a9f3d3facb71835333031f99f0b6a515279699cb84b3b107c95bf35607986b925c9261656835b90000000000000000000000004abee90a20c8bfe132226cb781eb103c8a0ea9e89ccbe764312eb0a8415d084644207f40c87654", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r4, 0x80087601, &(0x7f0000000280)) setitimer(0x1, &(0x7f0000000000)={{0x0, 0xea60}, {0x0, 0xea60}}, &(0x7f0000000180)) mount$binderfs(0x0, &(0x7f0000000480)='./binderfs\x00', 0x0, 0x2c, &(0x7f0000000880)=ANY=[@ANYBLOB=',defcontext=']) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000a000000080000000100000f"], &(0x7f0000000040)=""/249, 0x3a, 0xf9, 0x6, 0x0, 0x0, @void, @value}, 0x28) 2m33.216410718s ago: executing program 3 (id=1944): bpf$PROG_LOAD(0x5, 0x0, 0x0) dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) socket$tipc(0x1e, 0x2, 0x0) syz_open_procfs$namespace(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=@framed={{}, [@printk={@llx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r6, 0x4b52, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) 2m32.713678812s ago: executing program 1 (id=1945): gettid() memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000200850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) inotify_add_watch(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x20000b5f) r4 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000640)=ANY=[@ANYBLOB="1201000000000010c41090ea40000000000109022400010000000009040000010301000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYBLOB], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) inotify_init1(0x0) 2m32.488554987s ago: executing program 2 (id=1948): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001540)={&(0x7f0000001500)='kmem_cache_free\x00'}, 0x10) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r6, 0x8946, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r7}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) sync() 2m31.248552022s ago: executing program 3 (id=1951): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x2, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8000000}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) mkdir(0x0, 0x0) r2 = open_tree(0xffffffffffffff9c, 0x0, 0x0) write$FUSE_GETXATTR(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) ioctl$TIOCL_SETSEL(r4, 0x541c, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {}, {0x10, 0x8}}}, 0x24}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r2, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000002c0)=[0x0, 0x0], &(0x7f0000000340), 0x0, 0x52, &(0x7f0000000380), 0x0, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0xa2, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x9, 0x18, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x931}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, &(0x7f0000000040)='syzkaller\x00', 0x7863, 0x29, &(0x7f0000000200)=""/41, 0x40f00, 0x10, '\x00', r7, @cgroup_sock=0x22, r2, 0x8, &(0x7f0000000240)={0x9, 0x3}, 0x8, 0x10, 0x0, 0x0, r8, 0xffffffffffffffff, 0x9, &(0x7f0000000700)=[r0], &(0x7f0000000740)=[{0x4, 0x3, 0x0, 0x8}, {0x1, 0x3, 0x10, 0x5}, {0x0, 0x4, 0xa, 0x9}, {0x3, 0x4, 0x9}, {0x3, 0x2, 0x9, 0x2}, {0x4, 0x1, 0x3}, {0x3, 0x5, 0x7, 0x2}, {0x5, 0x2, 0x4, 0xb}, {0x1, 0x4, 0x8, 0x2}], 0x10, 0x8, @void, @value}, 0x94) syz_emit_ethernet(0x2a, &(0x7f0000000300)=ANY=[@ANYBLOB="e90c630faca20180c200000008004500001c00301300000000000000000000000000471bce8d00089078"], 0x0) 2m31.208839235s ago: executing program 3 (id=1952): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000080)=0x8, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'wg1\x00', 0x0}) sendto$packet(r1, &(0x7f0000001800)='7', 0x1, 0x0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="bf63a9e561c5"}, 0x14) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRES64=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r4, &(0x7f00000020c0)="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", 0x2000, &(0x7f0000006e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) pipe2$9p(&(0x7f00000002c0)={0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x400, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r4}}) 2m31.154260049s ago: executing program 2 (id=1953): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000020000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000010000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000340), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[], [], 0x6b}}) chdir(&(0x7f0000000080)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r2}, 0x10) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) 2m31.1398113s ago: executing program 2 (id=1954): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe2$9p(&(0x7f0000000240), 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x0, &(0x7f00000003c0)={[{}, {@minixdf}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@data_err_abort}, {@grpquota}, {@noinit_itable}, {@test_dummy_encryption}, {@errors_remount}, {@acl}]}, 0xff, 0x46b, &(0x7f0000000800)="$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") mkdir(&(0x7f0000000580)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = getpid() r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0xe, 0x0, &(0x7f0000000080)="00000000000000003b2bf39a88a8", 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) bpf$PROG_LOAD(0x5, 0x0, 0x0) 2m29.82097373s ago: executing program 4 (id=1959): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000fd00000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x2, 0x4, 0xfff, 0xa, 0x1004, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000005940)=ANY=[@ANYBLOB="0a00000001000000420000004000000000000000", @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000d5e43e564a08b0d0"], 0x48) inotify_init() mkdir(&(0x7f0000000000)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x80, &(0x7f0000000240), 0x1, 0x50d, &(0x7f0000000980)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() io_pgetevents(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0xfffffffffffffffd, 0x8}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x1f, 0x16, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"/300], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffc90, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000a3060000004502000000100000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000300000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000380)='svcrdma_dma_map_rw_err\x00', r4}, 0x18) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000100), 0x1001) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000061129400000000009500000000000000d30433dde7a5cd873207ff065160f0049e76"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0xc3c3, 0x0, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x5, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, &(0x7f0000000000), &(0x7f0000000200)=r6}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000801f000000000000000000940000000fad413e550000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 2m29.458541815s ago: executing program 0 (id=1963): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x2, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8000000}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) mkdir(0x0, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x0) write$FUSE_GETXATTR(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000300)={@random="e90c630faca2", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x8}}}}}, 0x0) (fail_nth: 3) 2m29.107174949s ago: executing program 4 (id=1964): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000020000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000010000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000340), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[], [], 0x6b}}) chdir(&(0x7f0000000080)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r2}, 0x10) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) 2m29.060329682s ago: executing program 0 (id=1965): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x0, 0x168, 0x10, 0x190, 0xb, 0x388, 0x250, 0x250, 0x388, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth1_to_batadv\x00', 'veth1_to_hsr\x00', {}, {}, 0x3a}, 0x6000000, 0x128, 0x190, 0x0, {0x0, 0x28e}, [@common=@icmp6={{0x28}, {0x0, 'K\r'}}, @common=@inet=@hashlimit1={{0x58}, {'netdevsim0\x00', {0x0, 0x0, 0x9, 0x1, 0x0, 0x10000, 0x80000001}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x1f8, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:usb_device_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x0, 0x0, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = dup(r7) write$UHID_INPUT(r8, &(0x7f0000001040)={0xa, {"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", 0x1025}}, 0x1006) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x8, 0x0, 0x0, &(0x7f0000000b00)='GPL\x00', 0x1f28, 0xe6, &(0x7f0000000b40)=""/230, 0x40f00, 0x2b, '\x00', 0x0, @cgroup_skb, r8, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r4, 0x0, &(0x7f0000000cc0)=[r9, 0xffffffffffffffff], 0x0, 0x10, 0xbe99, @void, @value}, 0x90) socket$inet6_tcp(0xa, 0x1, 0x0) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) eventfd2(0x0, 0x0) 2m28.011943064s ago: executing program 0 (id=1966): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b000000050800000005000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x16, &(0x7f00000009c0)=ANY=[@ANYRES32=r0, @ANYBLOB="b4dc7737194b2d8131f6a646bb980afeaa64d9c79180039dea57b043afe9053a031b66724e55636a988c423f2f86029ed8fdff081d95a77d59b1ad3b82ef262651bf75072b8e8be56eb1174bbbccab733f4d5d7e57dcf65944e2c642e253454ae7e9d8c26fe5e0a7e9873e08f8ffaff008227b41eebd21573cf0c650b1b26ebd40692c06a2de4b2b8c988af6398c872671cb829c58d6f62a677a2465bece16f5946fb89b8a6f205d36ddf7a2b4ce93c59c44e833ded9fca8947722006926534159ff437acf96740b53cc6ff6064b5b15e60ed1813e5792274264b0c5d9795fd7ebc039cd", @ANYRESDEC=r0], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01007effbbe0215100000000000000000c000000040003801880aa80140002007465616d300000000000"], 0x30}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x1, 0x7, 0x5, 0xffffffff, {{0x6, 0x4, 0x1, 0x2b, 0x18, 0x67, 0x0, 0x2, 0x4, 0x0, @multicast2, @broadcast, {[@noop]}}}}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wg2\x00'}) socket$netlink(0x10, 0x3, 0x2) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0x14, &(0x7f0000000080)=0x8, 0x4) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'wg2\x00', 0x0}) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f00000001c0)=ANY=[@ANYRESDEC=r0, @ANYRESHEX=r5, @ANYRES32=r9], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r10}, 0x10) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0x0) write$FUSE_OPEN(0xffffffffffffffff, 0x0, 0x0) getresuid(0x0, 0x0, 0x0) chdir(0x0) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$packet(r6, &(0x7f0000000180)='7', 0x1, 0x4000, &(0x7f0000000040)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @random="bf73a9e561c5"}, 0x14) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000980)={0x0}, 0x1, 0x0, 0x0, 0x8004}, 0x0) 2m27.836050816s ago: executing program 4 (id=1967): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r4, 0x80087601, &(0x7f0000000280)) setitimer(0x1, &(0x7f0000000000)={{0x0, 0xea60}, {0x0, 0xea60}}, &(0x7f0000000180)) mount$binderfs(0x0, &(0x7f0000000480)='./binderfs\x00', 0x0, 0x2c, &(0x7f0000000880)=ANY=[@ANYBLOB=',defcontext=']) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000a000000080000000100000f"], &(0x7f0000000040)=""/249, 0x3a, 0xf9, 0x6, 0x0, 0x0, @void, @value}, 0x28) 2m26.648390647s ago: executing program 0 (id=1968): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000006000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000000c0)) pwritev(r2, &(0x7f0000000080)=[{&(0x7f00000004c0)='\x00!', 0x2}], 0x1, 0x0, 0x0) 2m26.555397334s ago: executing program 4 (id=1969): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000007000000008000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r3}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) close(r4) 2m25.492288127s ago: executing program 4 (id=1970): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000080000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) close(r3) 876.47845ms ago: executing program 3 (id=1973): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000500000000100000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000000)) r3 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000006000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000500)='mm_page_alloc\x00', r4}, 0x10) readv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000280)=""/144, 0x28}], 0x300) ptrace$ARCH_GET_MAX_TAG_BITS(0x1e, r0, &(0x7f0000000040), 0x4003) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r6, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x44, r7, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_SECCTX={0x2d, 0x7, 'system_u:object_r:public_content_rw_t:s0\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x240040b5}, 0x20000000) ioctl$FS_IOC_GETFSLABEL(r5, 0x800452d2, &(0x7f0000000100)) setsockopt$inet6_int(r3, 0x29, 0x24, &(0x7f0000000100)=0x40, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@local, 0x10000, 0x0, 0x1, 0x1, 0x0, 0x2}, 0x20) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback}, 0x1c) 701.886762ms ago: executing program 4 (id=1975): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="12010000000000407d1ef62c00003601000000dab88e0000000109022400010000f6cdc16cbb6bcff22c497800000b0407000905810300"/73], 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0100000007000000020000000400000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000e5a4fd6545ba3f0e262116c8a3cb858a4887a4808a0388ee269bca412746678547ac250f3954555a2d274a47cd35a806f609174f5ad356587863bb66755a94b40ece72be575e897d9f16119f26a6d2fc1782b04b69ac947bcc3a449f1aef3a3d10cfb2384dc84c8075d014804e755a8a20daf5c35687305a5114714e02ed163fa8b8041459c8a0228647017b85869ed8c462357058e93dee57e4a91da89f106e25b030e80a89286b58e045ed22bc777eabfe8c015f4ee8b910843e7ab94fe865720c6ec096a2a7bfbab691cdca1b1e88cb293732f1b20f68fb4da67e134e926e4fdd512b8e"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f00000005c0)=ANY=[], &(0x7f0000000600)='syzkaller\x00', 0x80000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffff1e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="edb095c3436e017206729caa54348c80788069c942f24c22fe9e133c225067ca3e7422"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000030c0)=ANY=[@ANYRES32], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3, &(0x7f00000002c0)={0x7, &(0x7f0000000180)=[{0x0, 0xc, 0xf, 0x4}, {0x8, 0x6, 0x5, 0x711b}, {0x8, 0x6, 0x10, 0x37a8}, {0x24, 0x0, 0x1, 0x4}, {0x401, 0x52, 0x3, 0xb0}, {0xfffb, 0xf7, 0x13, 0x7}, {0xb7, 0xc4, 0x0, 0xffffffff}]}) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r8, 0xc0502100, &(0x7f0000000640)={0x0}) syz_open_dev$hiddev(&(0x7f0000000500), 0x2, 0x500102) r10 = socket$netlink(0x10, 0x3, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r8, 0x40182103, &(0x7f0000000140)={r9, 0x0, r10}) r11 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000380)='/proc/self/attr/current\x00', 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f00000003c0)={r9, 0x1, r11, 0xfffffffa}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0xe0c, 0xffe0, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847fe884700121100632f77fbac14141dac1414", 0x0, 0x71, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000140)="d510c490f913672b5ae413000500", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r13, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) recvmsg$unix(r12, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) bpf$ENABLE_STATS(0x20, &(0x7f0000000080), 0x4) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="00210704000007003d7da32915"], 0x0, 0x0, 0x0, 0x0}, 0x0) 195.001437ms ago: executing program 0 (id=1974): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000009f910000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_generic(0x11, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x44, r4, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x10001}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x2}, @chandef_params, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}]]}, 0x44}}, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r2, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, r4, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x80000000, 0xf}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x6}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xf}]}, 0x5c}, 0x1, 0x0, 0x0, 0x5000}, 0x2000089c) syz_emit_ethernet(0x2b, &(0x7f0000000000)={@link_local, @random="a538ae464632", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x11, 0x0, 0x0, @multicast1, '\x00'}}}}}, 0x0) sendmsg(r2, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) 110.575102ms ago: executing program 0 (id=1976): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b000000050000000004000009", @ANYRES32, @ANYBLOB="000000000000000000f7ffff7f0000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) r2 = gettid() r3 = syz_open_dev$usbfs(&(0x7f00000007c0), 0x73, 0x82) ioctl$USBDEVFS_REAPURB(r3, 0x4008550c, 0x0) rt_sigqueueinfo(r2, 0x21, &(0x7f0000002d00)={0x0, 0x0, 0xfffffffb}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x2000410, &(0x7f0000000000)={[{@commit={'commit', 0x3d, 0x5}}]}, 0x1, 0x79f, &(0x7f00000012c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r4}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000001a80)={0x62c, r7, 0x1, 0x70bd25, 0x0, {}, [@WGDEVICE_A_PEERS={0x5d8, 0x8, 0x0, 0x1, [{0x1c0, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x138, 0x9, 0x0, 0x1, [{0x1c}, {0x118, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x2, @mcast2, 0x6}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @multicast1}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "eff93d58460ea431f2cb4a6894ddb2834088d7445bf5afdd0619ce173f1db717"}]}, {0x54, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "491bc0be1dc1f88092e741a88b64f6dd9218ad21b44b472e44f1d0807ee6675c"}]}, {0x3bc, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "7b4326167f79726ecfae0aeee91d38ba98df91957e9dead91c7bebb4db027bf1"}, @WGPEER_A_ALLOWEDIPS={0x33c, 0x9, 0x0, 0x1, [{0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x21}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x20}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}]}, {0x130, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_FLAGS={0x8, 0x3, 0xf}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x9, 0x7, @empty, 0x3}}, @WGPEER_A_ALLOWEDIPS={0x4}]}, {0x4}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_LISTEN_PORT={0x6}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x62c}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) getpid() connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000003c0)=ANY=[@ANYBLOB='P\x00'/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800900010069706970000000002000028005000a00000000000400130005000500000000000500090000000000"], 0x50}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d00000085"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) 27.869379ms ago: executing program 3 (id=1977): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000020000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000010000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000340), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[], [], 0x6b}}) chdir(&(0x7f0000000080)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r2}, 0x10) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) 23.449699ms ago: executing program 1 (id=1971): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454da, 0x0) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x1808014, &(0x7f0000000600)=ANY=[@ANYBLOB="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"/716], 0x5, 0x558b, &(0x7f00000079c0)="$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") (async) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0xffffffffdfffffff, 0x1000}, 0x20) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x4, 0x0, &(0x7f0000000580)) (async) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000b00)={&(0x7f0000001280)=ANY=[@ANYBLOB="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"], 0x0, 0x11d, 0x0, 0x0, 0x9, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000bc0)={0x6, 0x1b, &(0x7f0000000480)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x71}, @jmp={0x5, 0x1, 0xb, 0x2, 0x4, 0x80, 0x1}, @cb_func={0x18, 0x0, 0x4, 0x0, 0x7}, @generic={0x4d, 0x7, 0x5, 0x8, 0x5}], 0x0, 0xfffffffe, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000b40)={0x1, 0x3, 0x9, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000b80), 0x0, 0x10, 0x7, @void, @value}, 0x90) (async) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) (async) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x5) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs2/custom0\x00', 0x801, 0x0) (async) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r9, 0x560a, &(0x7f0000000100)={0x3, 0x0, 0xfff, 0x0, 0x6, 0xa}) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x800714, &(0x7f0000001180)={[{@dioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0x7}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x47c5e5ec}}, {@grpjquota}, {@errors_continue}, {@nobh}, {@nouser_xattr}, {@discard}, {@barrier}, {@norecovery}, {@errors_continue}, {@data_err_ignore}]}, 0xee, 0x442, &(0x7f0000000d00)="$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") (async) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a421, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x6, &(0x7f0000000040)=[{0x3, 0x6, 0x9, 0x7}, {0x7, 0xf7, 0xe5, 0xb}, {0x24f1, 0x4, 0x5, 0x3ff}, {0x6, 0xd7, 0xf}, {0x1ff, 0x4, 0x9, 0x2}, {0x3, 0xb3, 0x7, 0x1ff}]}) (async) select(0x62, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x0, 0x2710}) 0s ago: executing program 3 (id=1978): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) r5 = dup(r2) syz_kvm_setup_cpu$x86(r1, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000008c0)=[@text64={0x40, &(0x7f0000000780)="dd3506000000660f72e610430f01c8b9800000c00f3235000800000f30f20f38f09731ec0000420f783fc4c3f9622b0547dc8b22130000450f096566440f388083fc000000", 0x45}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000024d564b000000eccd"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) kernel console output (not intermixed with test programs): 0][ T1497] uclogic 0003:256C:006D.0024: interface is invalid, ignoring [ 294.530536][ T5173] F2FS-fs (loop3): Unrecognized mount option "prjquota=**.]\{" or missing value [ 294.553346][ T1077] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 294.582913][ T939] usb 5-1: USB disconnect, device number 34 [ 294.619868][ T1073] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 294.867886][ T1077] usb 2-1: Using ep0 maxpacket: 16 [ 294.982651][ T1077] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 295.001246][ T1077] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 295.020635][ T1077] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 295.048733][ T1073] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 295.061130][ T5186] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 295.068240][ T1073] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 295.089183][ T1073] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 295.135224][ T1073] usb 3-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00 [ 295.147667][ T1073] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.159555][ T24] audit: type=1400 audit(1726446439.679:3599): avc: denied { create } for pid=5192 comm="syz.3.1169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 295.213448][ T24] audit: type=1400 audit(1726446439.721:3600): avc: denied { write } for pid=5194 comm="syz.4.1168" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 295.242253][ T1073] usb 3-1: config 0 descriptor?? [ 295.248628][ T5200] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1170'. [ 295.259507][ T5202] 9pnet: Insufficient options for proto=fd [ 295.449323][ T5206] EXT4-fs: failed to create workqueue [ 295.459587][ T5206] EXT4-fs (loop4): mount failed [ 295.465074][ T5212] EXT4-fs (loop0): 1 truncate cleaned up [ 295.471242][ T5212] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 295.516198][ T5212] EXT4-fs error (device loop0): ext4_add_entry:2440: inode #2: comm syz.0.1174: Directory hole found for htree leaf block 0 [ 295.869319][ T5203] xt_CT: netfilter: NOTRACK target is deprecated, use CT instead or upgrade iptables [ 295.881125][ T1077] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 295.890790][ T1077] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.899051][ T1077] usb 2-1: Product: syz [ 295.903110][ T1077] usb 2-1: Manufacturer: syz [ 295.907512][ T1077] usb 2-1: SerialNumber: syz [ 296.081845][ T5230] device pim6reg1 entered promiscuous mode [ 296.136016][ T5166] udc-core: couldn't find an available UDC or it's busy [ 296.143041][ T5166] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 296.154595][ T1073] usbhid 3-1:0.0: can't add hid device: -71 [ 296.160523][ T1073] usbhid: probe of 3-1:0.0 failed with error -71 [ 296.168141][ T1073] usb 3-1: USB disconnect, device number 29 [ 296.211601][ T5235] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 296.220509][ T5235] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038 (0x7fffffff) [ 296.244837][ T24] audit: type=1400 audit(1726446440.813:3601): avc: denied { rename } for pid=5234 comm="syz.2.1178" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 296.329631][ T5252] IPv6: sit1: Disabled Multicast RS [ 296.461760][ T5254] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1182'. [ 296.518471][ T939] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 296.527301][ T5235] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.1178: bg 0: block 18: invalid block bitmap [ 296.539669][ T1077] usb 2-1: 2:1 : format type 0 is detected, processed as PCM [ 296.547488][ T24] audit: type=1400 audit(1726446441.138:3602): avc: denied { mounton } for pid=5234 comm="syz.2.1178" path="/29/file0/file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 296.563989][ T5235] Quota error (device loop2): write_blk: dquota write failed [ 296.579531][ T5235] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 296.621092][ T5235] EXT4-fs error (device loop2): ext4_acquire_dquot:6219: comm syz.2.1178: Failed to acquire dquot type 1 [ 296.633325][ T24] audit: type=1400 audit(1726446441.233:3603): avc: denied { setattr } for pid=5234 comm="syz.2.1178" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 296.801245][ T939] usb 4-1: Using ep0 maxpacket: 8 [ 296.915742][ T939] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 296.924870][ T939] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.946237][ T939] usb 4-1: config 0 descriptor?? [ 297.067984][ T1073] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 297.153874][ T1077] usb 2-1: current rate 11611129 is different from the runtime rate 9338507 [ 297.249092][ T939] asix 4-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 297.287114][ T288] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 297.306121][ T1073] usb 3-1: Using ep0 maxpacket: 16 [ 297.385609][ T1077] usb 2-1: USB disconnect, device number 31 [ 297.399576][ T2612] udevd[2612]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 297.416132][ T24] audit: type=1326 audit(1726446442.051:3604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5268 comm="syz.0.1186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb098a7def9 code=0x7ffc0000 [ 297.449759][ T1073] usb 3-1: config 3 has an invalid interface number: 113 but max is 0 [ 297.457729][ T1073] usb 3-1: config 3 has no interface number 0 [ 297.463813][ T1073] usb 3-1: config 3 interface 113 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 297.473662][ T1073] usb 3-1: config 3 interface 113 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 297.484527][ T1073] usb 3-1: config 3 interface 113 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 297.495110][ T1073] usb 3-1: config 3 interface 113 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 297.505601][ T1073] usb 3-1: config 3 interface 113 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 297.516011][ T1073] usb 3-1: config 3 interface 113 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 297.525537][ T1073] usb 3-1: config 3 interface 113 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 297.536165][ T1073] usb 3-1: config 3 interface 113 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 297.544673][ T288] usb 5-1: Using ep0 maxpacket: 8 [ 297.677814][ T288] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 297.688674][ T288] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 297.696794][ T1073] usb 3-1: New USB device found, idVendor=0424, idProduct=9e00, bcdDevice=5d.d9 [ 297.698514][ T288] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 297.707241][ T1073] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.719821][ T288] usb 5-1: New USB device found, idVendor=1b96, idProduct=0010, bcdDevice= 0.00 [ 297.728480][ T1073] usb 3-1: Product: syz [ 297.738089][ T288] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.741275][ T1073] usb 3-1: Manufacturer: syz [ 297.750008][ T288] usb 5-1: config 0 descriptor?? [ 297.756218][ T1073] usb 3-1: SerialNumber: syz [ 297.803104][ T1073] smsc95xx v2.0.0 [ 297.806670][ T1073] smsc95xx 3-1:3.113 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 297.816756][ T1073] smsc95xx: probe of 3-1:3.113 failed with error -22 [ 297.896771][ T1077] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 298.068677][ T5224] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1176'. [ 298.212088][ T288] ntrig 0003:1B96:0010.0025: item fetching failed at offset 5/7 [ 298.222416][ T288] ntrig 0003:1B96:0010.0025: parse failed [ 298.228080][ T288] ntrig: probe of 0003:1B96:0010.0025 failed with error -22 [ 298.425433][ T342] usb 5-1: USB disconnect, device number 35 [ 298.611031][ T939] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 298.623176][ T939] asix: probe of 4-1:0.0 failed with error -71 [ 298.636455][ T939] usb 4-1: USB disconnect, device number 48 [ 298.782600][ T1077] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 298.792753][ T1077] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 298.801615][ T1077] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 298.810526][ T1077] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.819222][ T1077] usb 1-1: config 0 descriptor?? [ 298.954059][ T1076] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 299.106938][ T5275] loop0: p1 < > p2 p3 p4 < p5 > [ 299.112859][ T5275] loop0: p3 size 16744448 extends beyond EOD, truncated [ 299.123026][ T1073] usb 1-1: USB disconnect, device number 35 [ 299.128839][ T939] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 299.173140][ T1077] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 299.296997][ T1076] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 299.307806][ T1076] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 299.317670][ T1076] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 299.326903][ T1076] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.335674][ T1076] usb 2-1: config 0 descriptor?? [ 299.401838][ T1077] usb 5-1: Using ep0 maxpacket: 8 [ 299.478045][ T939] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 299.488946][ T939] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 299.498636][ T939] usb 4-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 299.507552][ T939] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.516238][ T939] usb 4-1: config 0 descriptor?? [ 299.563769][ T1077] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 299.571785][ T1077] usb 5-1: can't read configurations, error -61 [ 299.665910][ T1073] usb 3-1: USB disconnect, device number 30 [ 299.680718][ T5291] xt_CT: No such helper "pptp" [ 299.740211][ T1077] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 299.774178][ T5283] udc-core: couldn't find an available UDC or it's busy [ 299.781013][ T5283] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 299.983153][ T1495] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 300.184352][ T939] lg-g15 0003:046D:C222.0026: ignoring exceeding usage max [ 300.196953][ T939] lg-g15 0003:046D:C222.0026: hidraw0: USB HID v0.00 Device [HID 046d:c222] on usb-dummy_hcd.3-1/input0 [ 300.268571][ T1076] usbhid 2-1:0.0: can't add hid device: -71 [ 300.274374][ T1076] usbhid: probe of 2-1:0.0 failed with error -71 [ 300.281273][ T1076] usb 2-1: USB disconnect, device number 32 [ 300.354286][ T1077] usb 5-1: Using ep0 maxpacket: 8 [ 300.364033][ T1495] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 300.374006][ T1495] usb 1-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db [ 300.382778][ T1495] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.391458][ T1495] usb 1-1: config 0 descriptor?? [ 300.507169][ T1077] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 300.518508][ T5300] netem: change failed [ 300.522525][ T1077] usb 5-1: can't read configurations, error -61 [ 300.530470][ T1077] usb usb5-port1: attempt power cycle [ 300.583507][ T5300] FAT-fs (loop2): Unrecognized mount option "nonumtœ" or missing value [ 300.595386][ T24] kauditd_printk_skb: 8 callbacks suppressed [ 300.595397][ T24] audit: type=1326 audit(1726446445.390:3613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5299 comm="syz.2.1194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74d3b83ef9 code=0x7ffc0000 [ 300.624886][ T24] audit: type=1326 audit(1726446445.390:3614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5299 comm="syz.2.1194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7f74d3b83ef9 code=0x7ffc0000 [ 300.656817][ T5302] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 300.688335][ T1495] usb 1-1: string descriptor 0 read error: -71 [ 300.694536][ T1495] usb 1-1: bad CDC descriptors [ 300.701740][ T1495] usb 1-1: USB disconnect, device number 36 [ 300.925818][ T1077] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 300.963942][ T939] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 301.011595][ T1077] usb 5-1: Using ep0 maxpacket: 8 [ 301.162528][ T24] audit: type=1400 audit(1726446445.978:3615): avc: denied { mounton } for pid=5308 comm="syz.0.1197" path="/56/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=fifo_file permissive=1 [ 301.164067][ T1077] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 301.193413][ T1077] usb 5-1: can't read configurations, error -61 [ 301.221149][ T939] usb 2-1: device descriptor read/64, error -71 [ 301.260405][ T5317] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 301.269425][ T5317] ext4 filesystem being mounted at /60/file1 supports timestamps until 2038 (0x7fffffff) [ 301.310828][ T5299] FAT-fs (loop2): error, invalid access to FAT (entry 0x0affffff) [ 301.318633][ T5299] FAT-fs (loop2): Filesystem has been set read-only [ 301.335442][ T1077] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 301.395286][ T5326] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 301.406228][ T5326] EXT4-fs (loop2): 1 truncate cleaned up [ 301.411859][ T5326] EXT4-fs (loop2): mounted filesystem without journal. Opts: quota,inode_readahead_blks=0x0000000000000080,barrier=0x0000000000000003,stripe=0x0000000000000004,block_validity,debug_want_extra_isize=0x000000000000002e,,errors=continue [ 301.434322][ T1077] usb 5-1: Using ep0 maxpacket: 8 [ 301.441427][ T5326] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2210: inode #15: comm syz.2.1204: corrupted in-inode xattr [ 301.453579][ T5326] EXT4-fs warning (device loop2): ext4_xattr_set_entry:1744: inode #15: comm syz.2.1204: unable to update i_inline_off [ 301.465929][ T5326] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2210: inode #15: comm syz.2.1204: corrupted in-inode xattr [ 301.566630][ T5333] EXT4-fs (loop2): 1 orphan inode deleted [ 301.572260][ T5333] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 301.581054][ T5333] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038 (0x7fffffff) [ 301.590904][ T1077] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 301.598307][ T939] usb 2-1: device descriptor read/64, error -71 [ 301.606630][ T1077] usb 5-1: can't read configurations, error -61 [ 301.613637][ T5333] syz.2.1206[5333] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 301.613687][ T5333] syz.2.1206[5333] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 301.624976][ T1077] usb usb5-port1: unable to enumerate USB device [ 301.654477][ T5333] EXT4-fs (loop2): re-mounted. Opts: (null) [ 301.675426][ T1076] usb 4-1: USB disconnect, device number 49 [ 301.803477][ T5347] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 301.859800][ T939] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 301.876389][ T5353] EXT4-fs (loop2): Unrecognized mount option "permit_directio" or missing value [ 302.107691][ T5363] EXT4-fs (loop3): 1 orphan inode deleted [ 302.113510][ T5363] EXT4-fs (loop3): mounted filesystem without journal. Opts: resgid=0x0000000000000000,discard,noblock_validity,init_itable,stripe=0x000000000000002e,resgid=0x0000000000000000,sysvgroups,norecovery,usrquota,,errors=continue [ 302.136785][ T939] usb 2-1: device descriptor read/64, error -71 [ 302.155012][ T5363] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038 (0x7fffffff) [ 302.218173][ T5379] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 302.242404][ T5379] EXT4-fs (loop2): mounted filesystem without journal. Opts: barrier,jqfmt=vfsold,noquota,min_batch_time=0x0000000000000010,journal_dev=0x000000000000000d,,errors=continue [ 302.277664][ T5393] fuse: Unknown parameter '0x0000000000000003' [ 302.283934][ T5379] ext4 filesystem being mounted at /42/file0 supports timestamps until 2038 (0x7fffffff) [ 302.303120][ T5396] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1229'. [ 302.319077][ T5391] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:476: comm syz.4.1227: Invalid block bitmap block 0 in block_group 0 [ 302.333208][ T5391] Quota error (device loop4): write_blk: dquota write failed [ 302.340428][ T5391] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 302.350345][ T5391] EXT4-fs error (device loop4): ext4_acquire_dquot:6219: comm syz.4.1227: Failed to acquire dquot type 0 [ 302.362369][ T5391] EXT4-fs error (device loop4): ext4_free_blocks:5687: comm syz.4.1227: Freeing blocks not in datazone - block = 0, count = 4096 [ 302.376544][ T5391] EXT4-fs error (device loop4): ext4_read_inode_bitmap:140: comm syz.4.1227: Invalid inode bitmap blk 0 in block_group 0 [ 302.378269][ T4711] EXT4-fs error (device loop2): ext4_xattr_block_get:546: inode #15: comm syz-executor: corrupted xattr block 32 [ 302.389341][ T5391] EXT4-fs error (device loop4) in ext4_free_inode:360: Corrupt filesystem [ 302.402664][ T7] Quota error (device loop4): remove_tree: Getting block too big (0 >= 9) [ 302.411715][ T5391] EXT4-fs (loop4): 1 orphan inode deleted [ 302.417806][ T5396] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 302.423165][ T5391] EXT4-fs (loop4): mounted filesystem without journal. Opts: €; ,errors=continue [ 302.432696][ T5396] EXT4-fs (loop3): Unrecognized mount option "appraise_type=imasig" or missing value [ 302.441392][ T7] EXT4-fs error (device loop4): ext4_release_dquot:6242: comm kworker/u4:0: Failed to release dquot type 0 [ 302.451343][ T4711] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 302.470844][ T4711] EXT4-fs error (device loop2): ext4_xattr_block_get:546: inode #15: comm syz-executor: corrupted xattr block 32 [ 302.489183][ T4711] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 302.498047][ T4711] EXT4-fs error (device loop2): ext4_xattr_block_get:546: inode #15: comm syz-executor: corrupted xattr block 32 [ 302.509864][ T4711] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 302.518660][ T939] usb 2-1: device descriptor read/64, error -71 [ 302.525004][ T4711] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2921: inode #15: comm syz-executor: corrupted xattr block 32 [ 302.537706][ T4711] EXT4-fs warning (device loop2): ext4_evict_inode:303: xattr delete (err -117) [ 302.547540][ T4711] EXT4-fs error (device loop2): ext4_free_inode:353: comm syz-executor: bit already cleared for inode 16 [ 302.558879][ T4711] EXT4-fs error (device loop2): ext4_ext_check_inode:500: inode #17: comm syz-executor: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 1540(4), depth 0(0) [ 302.576715][ T4711] EXT4-fs error (device loop2): ext4_ext_check_inode:500: inode #17: comm syz-executor: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 1540(4), depth 0(0) [ 302.595008][ T5396] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 302.608918][ T5396] EXT4-fs (loop3): mounted filesystem without journal. Opts: minixdf,bsddf,barrier=0x00000000000001ff,data_err=abort,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,noblock_validity,nomblk_io_submit,,errors=continue [ 302.650072][ T939] usb usb2-port1: attempt power cycle [ 302.733016][ T24] audit: type=1400 audit(1726446447.626:3616): avc: denied { read } for pid=5407 comm="syz.3.1232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 302.760596][ T5405] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 302.772158][ T5405] EXT4-fs error (device loop4): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 302.787124][ T5405] EXT4-fs (loop4): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28 [ 302.799427][ T5405] EXT4-fs (loop4): This should not happen!! Data will be lost [ 302.799427][ T5405] [ 302.810619][ T5405] EXT4-fs (loop4): Total free blocks count 0 [ 302.817683][ T5405] EXT4-fs (loop4): Free/Dirty block details [ 302.823595][ T5405] EXT4-fs (loop4): free_blocks=2415919104 [ 302.829157][ T5405] EXT4-fs (loop4): dirty_blocks=16 [ 302.834447][ T5405] EXT4-fs (loop4): Block reservation details [ 302.840612][ T5405] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 302.853331][ T5413] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.860442][ T5413] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.868135][ T5413] device bridge_slave_0 entered promiscuous mode [ 302.875365][ T5413] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.882335][ T5413] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.889570][ T5413] device bridge_slave_1 entered promiscuous mode [ 302.943366][ T5413] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.950232][ T5413] bridge0: port 2(bridge_slave_1) entered forwarding state [ 302.957481][ T5413] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.964243][ T5413] bridge0: port 1(bridge_slave_0) entered forwarding state [ 303.002500][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 303.010091][ T407] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.018093][ T407] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.029653][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 303.038286][ T407] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.040551][ T939] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 303.045149][ T407] bridge0: port 1(bridge_slave_0) entered forwarding state [ 303.071103][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 303.079881][ T407] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.086733][ T407] bridge0: port 2(bridge_slave_1) entered forwarding state [ 303.094014][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 303.104745][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 303.122994][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 303.134114][ T5413] device veth0_vlan entered promiscuous mode [ 303.141929][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 303.160273][ T5413] device veth1_macvtap entered promiscuous mode [ 303.167626][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 303.184167][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 303.191765][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 303.212168][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 303.212562][ T939] usb 2-1: device descriptor read/8, error -71 [ 303.228264][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 303.251767][ T7] device bridge_slave_1 left promiscuous mode [ 303.257772][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.280628][ T7] device bridge_slave_0 left promiscuous mode [ 303.292157][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.309648][ T7] device veth1_macvtap left promiscuous mode [ 303.319110][ T7] device veth0_vlan left promiscuous mode [ 303.359872][ T5455] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 303.368989][ T5455] ext4 filesystem being mounted at /52/bus supports timestamps until 2038 (0x7fffffff) [ 303.488287][ T939] usb 2-1: device descriptor read/8, error -71 [ 303.495026][ T5466] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 303.511557][ T24] audit: type=1400 audit(1726446448.445:3617): avc: denied { ioctl } for pid=5474 comm="syz.2.1234" path="/dev/rtc0" dev="devtmpfs" ino=166 ioctlcmd=0x700a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 303.542937][ T5466] EXT4-fs (loop4): 1 truncate cleaned up [ 303.554581][ T5466] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable,resuid=0x0000000000000000,stripe=0x0000000000000000,,errors=continue [ 303.605384][ T24] audit: type=1400 audit(1726446448.550:3618): avc: denied { setattr } for pid=5465 comm="syz.4.1255" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 303.648643][ T5486] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=39 sclass=netlink_xfrm_socket pid=5486 comm=syz.2.1264 [ 303.689493][ T5493] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Dropping request. Check SNMP counters. [ 303.711875][ T7] tipc: Left network mode [ 303.728151][ T5494] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 303.753040][ T5501] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1269'. [ 303.778194][ T5501] device gretap0 entered promiscuous mode [ 303.802692][ T939] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 303.815412][ T5501] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1269'. [ 303.838380][ T5501] 0ªX¹¦D: renamed from gretap0 [ 303.847868][ T5501] device 30ªX¹¦D left promiscuous mode [ 303.861113][ T5501] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 303.934827][ T5507] EXT4-fs (loop3): Ignoring removed bh option [ 303.937688][ T5504] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.948084][ T5504] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.956609][ T5504] device bridge_slave_0 entered promiscuous mode [ 303.965962][ T5504] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.968872][ T5507] EXT4-fs (loop3): mounted filesystem without journal. Opts: user_xattr,bsdgroups,dioread_lock,norecovery,debug_want_extra_isize=0x0000000000000080,min_batch_time=0x0000000000000002,nombcache,resgid=0x0000000000000000,noauto_da_alloc,bh,,errors=continue [ 303.972796][ T5504] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.973209][ T5504] device bridge_slave_1 entered promiscuous mode [ 303.997037][ T939] usb 2-1: device descriptor read/8, error -71 [ 304.030993][ T5503] EXT4-fs error (device loop2): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 304.053816][ T5503] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 32 with error 28 [ 304.070577][ T5503] EXT4-fs (loop2): This should not happen!! Data will be lost [ 304.070577][ T5503] [ 304.075346][ T5504] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.080148][ T5503] EXT4-fs (loop2): Total free blocks count 0 [ 304.086874][ T5504] bridge0: port 2(bridge_slave_1) entered forwarding state [ 304.086956][ T5504] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.092797][ T5503] EXT4-fs (loop2): Free/Dirty block details [ 304.099732][ T5504] bridge0: port 1(bridge_slave_0) entered forwarding state [ 304.115141][ T1934] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 304.128146][ T1934] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.131557][ T5503] EXT4-fs (loop2): free_blocks=2415919104 [ 304.140784][ T1934] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.158591][ T5503] EXT4-fs (loop2): dirty_blocks=8192 [ 304.167106][ T1934] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 304.169912][ T5503] EXT4-fs (loop2): Block reservation details [ 304.175383][ T1934] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.180957][ T5503] EXT4-fs (loop2): i_reserved_data_blocks=512 [ 304.187594][ T1934] bridge0: port 1(bridge_slave_0) entered forwarding state [ 304.188964][ T1934] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 304.195850][ T5505] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 2048 with error 28 [ 304.201003][ T1934] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.208744][ T5505] EXT4-fs (loop2): This should not happen!! Data will be lost [ 304.208744][ T5505] [ 304.220660][ T1934] bridge0: port 2(bridge_slave_1) entered forwarding state [ 304.244627][ T1934] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 304.245520][ T5517] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,nouid32,minixdf,,errors=continue [ 304.252699][ T1934] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 304.263304][ T5517] ext4 filesystem being mounted at /44/file0 supports timestamps until 2038 (0x7fffffff) [ 304.286513][ T1934] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 304.297934][ T939] usb 2-1: device descriptor read/8, error -71 [ 304.321581][ T5504] device veth0_vlan entered promiscuous mode [ 304.328571][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 304.345430][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 304.356628][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 304.380129][ T5504] device veth1_macvtap entered promiscuous mode [ 304.387398][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 304.412294][ T939] usb usb2-port1: unable to enumerate USB device [ 304.426715][ T1934] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 304.437538][ T5529] syz.0.1279[5529] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 304.437596][ T5529] syz.0.1279[5529] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 304.467439][ T1934] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 304.527603][ T7] device bridge_slave_1 left promiscuous mode [ 304.533578][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.545165][ T24] audit: type=1400 audit(1726446449.526:3619): avc: denied { module_load } for pid=5538 comm="syz.4.1271" path="/sys/power/wakeup_count" dev="sysfs" ino=1423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 304.573669][ T7] device bridge_slave_0 left promiscuous mode [ 304.579833][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.588358][ T7] device veth1_macvtap left promiscuous mode [ 304.613312][ T7] device veth0_vlan left promiscuous mode [ 304.631634][ T5548] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 304.722994][ T5554] attempt to access beyond end of device [ 304.722994][ T5554] loop4: rw=3, want=6952, limit=128 [ 304.738321][ T5554] attempt to access beyond end of device [ 304.738321][ T5554] loop4: rw=2051, want=7894, limit=128 [ 304.747399][ T5556] syz.0.1288[5556] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 304.749422][ T5556] syz.0.1288[5556] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 304.767042][ T5539] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1280'. [ 304.808927][ T5539] device ip6tnl1 entered promiscuous mode [ 304.859321][ T5571] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1295'. [ 305.681617][ T5610] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.1312: casefold flag without casefold feature [ 305.694529][ T5610] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: inode #12: comm syz.4.1312: missing EA_INODE flag [ 305.706283][ T5610] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.1312: error while reading EA inode 12 err=-117 [ 305.718709][ T5610] EXT4-fs (loop4): 1 orphan inode deleted [ 305.724294][ T5610] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 305.930519][ T5617] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.1313: inode #1: comm syz.4.1313: iget: illegal inode # [ 305.943692][ T5617] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.1313: error while reading EA inode 1 err=-117 [ 305.956435][ T5617] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.1313: inode #1: comm syz.4.1313: iget: illegal inode # [ 305.969558][ T5617] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.1313: error while reading EA inode 1 err=-117 [ 305.981960][ T5617] EXT4-fs (loop4): 1 orphan inode deleted [ 305.994702][ T5617] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,nogrpid,debug_want_extra_isize=0x000000000000005c,noauto_da_alloc,noauto_da_alloc,grpquota,usrjquota=,,errors=continue [ 306.839648][ T5646] netlink: 'syz.0.1323': attribute type 3 has an invalid length. [ 306.848685][ T1495] kernel write not supported for file 256/task/257/clear_refs (pid: 1495 comm: kworker/1:18) [ 307.100732][ T5662] EXT4-fs (loop2): mounted filesystem without journal. Opts: commit=0x0000000000000005,,errors=continue [ 307.113081][ T5673] EXT4-fs (loop4): Unrecognized mount option "fowner<00000000000000000000" or missing value [ 307.144635][ T5662] EXT4-fs error (device loop2): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 307.211431][ T24] kauditd_printk_skb: 1 callbacks suppressed [ 307.211443][ T24] audit: type=1400 audit(1726446452.329:3621): avc: denied { mount } for pid=5686 comm="syz.2.1339" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 307.211648][ T5687] devtmpfs: Too few inodes for current use [ 307.217671][ T24] audit: type=1400 audit(1726446452.329:3622): avc: denied { remount } for pid=5686 comm="syz.2.1339" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 307.278331][ T5682] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 307.292845][ T5682] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038 (0x7fffffff) [ 307.347550][ T5695] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 307.368855][ T5695] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a003c018, mo2=0002] [ 307.377014][ T5695] System zones: 0-1, 3-12 [ 307.381885][ T5695] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodiscard,bsddf,auto_da_alloc=0x0000000000000000,nomblk_io_submit,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,acl,debug,,errors=continue [ 307.415651][ T5695] EXT4-fs (loop2): re-mounted. Opts: (null) [ 307.478519][ T5710] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 307.921555][ T5718] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_lock,usrjquota=,errors=remount-ro,norecovery,auto_da_alloc,noquota,grpquota,usrjquota=,grpjquota=,jqfmt=vfsold, [ 307.993141][ T24] audit: type=1107 audit(1726446453.148:3623): pid=5722 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg=' ¶g«çeßîÒJD'‡ÐÊ"ÍHO,vTqlëµ{ãƒÜ dó#܆P?YS¥|RœVêe>8³$•9vÕf•É¯šš_àÔÿ' [ 308.281635][ T5718] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.1351: bg 0: block 234: padding at end of block bitmap is not set [ 308.296020][ T5718] EXT4-fs (loop4): Remounting filesystem read-only [ 308.774711][ T5762] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1357'. [ 308.807856][ T5769] input: syz1 as /devices/virtual/input/input21 [ 308.814975][ T24] audit: type=1400 audit(1726446454.019:3624): avc: denied { bind } for pid=5765 comm="syz.0.1369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 308.885457][ T5779] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.892466][ T5779] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.913287][ T5779] device bridge_slave_1 left promiscuous mode [ 308.919353][ T5779] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.930200][ T5774] EXT4-fs error (device loop2) in ext4_do_update_inode:5303: error 27 [ 308.938401][ T5774] EXT4-fs error (device loop2): ext4_dirty_inode:6107: inode #3: comm syz.2.1373: mark_inode_dirty error [ 308.949943][ T5774] EXT4-fs error (device loop2) in ext4_do_update_inode:5303: error 27 [ 308.958114][ T5774] EXT4-fs error (device loop2): __ext4_ext_dirty:182: inode #3: comm syz.2.1373: mark_inode_dirty error [ 308.958292][ T5779] device bridge_slave_0 left promiscuous mode [ 308.969776][ T5774] Quota error (device loop2): write_blk: dquota write failed [ 308.975670][ T5779] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.983972][ T5786] serio: Serial port ptm0 [ 309.023090][ T5774] Quota error (device loop2): qtree_write_dquot: Error -27 occurred while creating quota [ 309.035165][ T5774] EXT4-fs error (device loop2): ext4_acquire_dquot:6219: comm syz.2.1373: Failed to acquire dquot type 0 [ 309.048816][ T5774] EXT4-fs error (device loop2) in ext4_do_update_inode:5303: error 27 [ 309.057505][ T5774] EXT4-fs error (device loop2): ext4_dirty_inode:6107: inode #16: comm syz.2.1373: mark_inode_dirty error [ 309.069160][ T5774] EXT4-fs error (device loop2) in ext4_do_update_inode:5303: error 27 [ 309.077904][ T5774] EXT4-fs error (device loop2): __ext4_ext_dirty:182: inode #16: comm syz.2.1373: mark_inode_dirty error [ 309.089645][ T5774] EXT4-fs error (device loop2) in ext4_do_update_inode:5303: error 27 [ 309.097985][ T5774] EXT4-fs error (device loop2) in ext4_orphan_del:3290: error 27 [ 309.106122][ T5774] EXT4-fs error (device loop2) in ext4_do_update_inode:5303: error 27 [ 309.116514][ T5774] EXT4-fs error (device loop2): ext4_truncate:4389: inode #16: comm syz.2.1373: mark_inode_dirty error [ 309.127988][ T5774] EXT4-fs error (device loop2) in ext4_orphan_cleanup:3108: error 27 [ 309.137691][ T5774] EXT4-fs (loop2): 1 truncate cleaned up [ 309.143214][ T5774] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsddf,,errors=continue [ 309.152565][ T5774] ext4 filesystem being mounted at /38/file1 supports timestamps until 2038 (0x7fffffff) [ 309.167784][ T24] audit: type=1400 audit(1726446454.387:3625): avc: denied { mount } for pid=5773 comm="syz.2.1373" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 309.207422][ T5802] binder: 5801:5802 ioctl 400c620e 20000180 returned -22 [ 309.214383][ T24] audit: type=1400 audit(1726446454.387:3626): avc: denied { unmount } for pid=5773 comm="syz.2.1373" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 309.269238][ T24] audit: type=1400 audit(1726446454.429:3627): avc: denied { write } for pid=5801 comm="syz.0.1384" name="binder1" dev="binder" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 309.403072][ T5806] EXT4-fs (loop2): external journal device major/minor numbers have changed [ 309.422050][ T5806] blk_update_request: I/O error, dev loop75, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 309.426041][ T5805] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,nouid32,minixdf,,errors=continue [ 309.432986][ T5806] EXT4-fs (loop2): couldn't read superblock of external journal [ 309.457740][ T5805] ext4 filesystem being mounted at /23/file0 supports timestamps until 2038 (0x7fffffff) [ 309.602844][ T5817] serio: Serial port ptm1 [ 310.022486][ T5840] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 310.030380][ T5840] EXT4-fs (loop3): too many log groups per flexible block group [ 310.046274][ T5840] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 310.056902][ T24] audit: type=1326 audit(1726446455.321:3628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5846 comm="syz.0.1400" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb098a7def9 code=0x0 [ 310.060920][ T5840] EXT4-fs (loop3): mount failed [ 310.334697][ T5856] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.341658][ T5856] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.349332][ T5856] device bridge_slave_0 entered promiscuous mode [ 310.357584][ T5856] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.364473][ T5856] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.372237][ T5856] device bridge_slave_1 entered promiscuous mode [ 310.448751][ T5861] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 310.461367][ T5861] EXT4-fs (loop3): orphan cleanup on readonly fs [ 310.468525][ T5856] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.475394][ T5856] bridge0: port 2(bridge_slave_1) entered forwarding state [ 310.480348][ T5861] EXT4-fs warning (device loop3): ext4_enable_quotas:6467: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 310.482506][ T5856] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.503777][ T5856] bridge0: port 1(bridge_slave_0) entered forwarding state [ 310.530955][ T1934] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 310.539614][ T1934] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.541871][ T5861] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 310.553376][ T1934] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.573106][ T1934] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 310.581235][ T1934] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.588106][ T1934] bridge0: port 1(bridge_slave_0) entered forwarding state [ 310.588685][ T5861] EXT4-fs error (device loop3): ext4_ext_check_inode:500: inode #13: comm syz.3.1404: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 310.596369][ T1934] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 310.621124][ T1934] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.627992][ T1934] bridge0: port 2(bridge_slave_1) entered forwarding state [ 310.645077][ T1934] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 310.652909][ T1934] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 310.667773][ T1934] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 310.678654][ T5856] device veth0_vlan entered promiscuous mode [ 310.689618][ T5861] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.1404: couldn't read orphan inode 13 (err -117) [ 310.696074][ T1934] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 310.711062][ T5861] EXT4-fs (loop3): mounted filesystem without journal. Opts: sysvgroups,noblock_validity,min_batch_time=0x000000000000082f,grpquota,debug,debug,grpid,,errors=continue [ 310.736637][ T5856] device veth1_macvtap entered promiscuous mode [ 310.749454][ T1934] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 310.758223][ T1934] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 310.766390][ T1934] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 310.766606][ T5869] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_lock,usrjquota=,errors=remount-ro,norecovery,auto_da_alloc,noquota,grpquota,usrjquota=,grpjquota=,jqfmt=vfsold, [ 310.792724][ T1934] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 310.802402][ T1934] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 310.957084][ T7] device bridge_slave_1 left promiscuous mode [ 310.963299][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.981575][ T7] device bridge_slave_0 left promiscuous mode [ 311.002016][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.027385][ T7] device veth1_macvtap left promiscuous mode [ 311.223692][ T5912] rtc_cmos 00:00: Alarms can be up to one day in the future [ 311.263655][ T5898] EXT4-fs (loop3): mounted filesystem without journal. Opts: nombcache,abort,dioread_lock,norecovery,discard,lazytime,noload,usrquota,noauto_da_alloc,,errors=continue [ 311.340895][ T5927] syz.1.1431[5927] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 311.340954][ T5927] syz.1.1431[5927] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 311.383491][ T4666] EXT4-fs error (device loop3): ext4_lookup:1832: inode #2: comm syz-executor: deleted inode referenced: 11 [ 311.388471][ T5869] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.1407: bg 0: block 234: padding at end of block bitmap is not set [ 311.423348][ T4666] EXT4-fs error (device loop3): ext4_lookup:1832: inode #2: comm syz-executor: deleted inode referenced: 11 [ 311.435071][ T5869] EXT4-fs (loop4): Remounting filesystem read-only [ 311.443996][ T5929] netlink: 'syz.0.1432': attribute type 4 has an invalid length. [ 311.781752][ T5953] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.797552][ T5953] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.812555][ T5953] device bridge_slave_0 entered promiscuous mode [ 311.830370][ T5953] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.845509][ T5953] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.863350][ T5953] device bridge_slave_1 entered promiscuous mode [ 311.978823][ T5953] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.985690][ T5953] bridge0: port 2(bridge_slave_1) entered forwarding state [ 311.992788][ T5953] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.999590][ T5953] bridge0: port 1(bridge_slave_0) entered forwarding state [ 312.110761][ T6003] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 312.123306][ T6003] EXT4-fs (loop4): 1 truncate cleaned up [ 312.129394][ T6003] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable,resuid=0x0000000000000000,stripe=0x0000000000000000,,errors=continue [ 312.157555][ T5996] device veth0_vlan left promiscuous mode [ 312.166172][ T5996] device veth0_vlan entered promiscuous mode [ 312.186116][ T1934] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 312.193693][ T1934] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.202055][ T1934] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.235051][ T1934] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 312.243888][ T1934] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.250759][ T1934] bridge0: port 1(bridge_slave_0) entered forwarding state [ 312.258396][ T1934] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 312.267900][ T1934] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.274807][ T1934] bridge0: port 2(bridge_slave_1) entered forwarding state [ 312.292152][ T1934] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 312.318845][ T1934] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 312.348960][ T1934] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 312.368074][ T1934] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 312.394429][ T5953] device veth0_vlan entered promiscuous mode [ 312.403103][ T1934] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 312.415036][ T1934] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 312.433996][ T1934] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 312.451974][ T1934] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 312.470513][ T1934] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 312.480721][ T1934] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 312.489777][ T7] device bridge_slave_1 left promiscuous mode [ 312.495835][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.503581][ T7] device bridge_slave_0 left promiscuous mode [ 312.510131][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.518110][ T7] device veth1_macvtap left promiscuous mode [ 312.524109][ T7] device veth0_vlan left promiscuous mode [ 312.634597][ T1934] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 312.642965][ T1934] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 312.652839][ T5953] device veth1_macvtap entered promiscuous mode [ 312.676005][ T1934] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 312.684175][ T1934] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 312.693114][ T1934] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 312.729328][ T1934] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 312.737204][ T6018] input: syz1 as /devices/virtual/input/input22 [ 312.738067][ T1934] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 312.769467][ T6011] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.783238][ T6011] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.790875][ T6011] device bridge_slave_0 entered promiscuous mode [ 312.798219][ T6011] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.805070][ T6011] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.812323][ T6011] device bridge_slave_1 entered promiscuous mode [ 312.848387][ T6018] EXT4-fs (loop3): error: journal path ./file0 is not a block device [ 312.932246][ T6011] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.939118][ T6011] bridge0: port 2(bridge_slave_1) entered forwarding state [ 312.946199][ T6011] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.953101][ T6011] bridge0: port 1(bridge_slave_0) entered forwarding state [ 313.036757][ T6040] fuse: Unknown parameter '0x0000000000000005' [ 313.070928][ T6011] device veth0_vlan entered promiscuous mode [ 313.087982][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 313.097060][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 313.114619][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 313.131879][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 313.150309][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 313.165628][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 313.186467][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 313.203911][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 313.217304][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 313.240743][ T6011] device veth1_macvtap entered promiscuous mode [ 313.258731][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 313.276836][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 313.295602][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 313.334537][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 313.355160][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 313.593219][ T6092] syz.2.1500[6092] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 313.593271][ T6092] syz.2.1500[6092] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 313.647439][ T6101] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1504'. [ 313.668217][ T6101] device gretap0 entered promiscuous mode [ 313.678412][ T6101] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1504'. [ 313.687737][ T6101] 0ªX¹¦D: renamed from gretap0 [ 313.693012][ T6101] device 30ªX¹¦D left promiscuous mode [ 313.698925][ T6101] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 313.763042][ T7] device bridge_slave_1 left promiscuous mode [ 313.777193][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.784816][ T7] device bridge_slave_0 left promiscuous mode [ 313.792674][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.805685][ T7] device veth1_macvtap left promiscuous mode [ 313.821644][ T7] device veth0_vlan left promiscuous mode [ 313.954184][ T6128] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 313.965121][ T6128] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038 (0x7fffffff) [ 313.979897][ T6128] EXT4-fs error (device loop4): ext4_add_entry:2440: inode #2: comm syz.4.1516: Directory hole found for htree leaf block 0 [ 314.015019][ T6145] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1522'. [ 314.101147][ T6151] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 314.113787][ T6151] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038 (0x7fffffff) [ 314.362216][ T6160] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.1528: inode #1: comm syz.4.1528: iget: illegal inode # [ 314.387298][ T6160] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.1528: error while reading EA inode 1 err=-117 [ 314.407568][ T6160] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.1528: inode #1: comm syz.4.1528: iget: illegal inode # [ 314.433420][ T6160] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.1528: error while reading EA inode 1 err=-117 [ 314.447514][ T6172] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 314.457123][ T6160] EXT4-fs (loop4): 1 orphan inode deleted [ 314.471796][ T6160] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,nogrpid,debug_want_extra_isize=0x000000000000005c,noauto_da_alloc,noauto_da_alloc,grpquota,usrjquota=,,errors=continue [ 314.545317][ T6177] EXT4-fs (loop3): shut down requested (0) [ 314.600859][ T7] EXT4-fs error (device loop3): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 314.631685][ T7] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 314.663944][ T7] EXT4-fs (loop3): This should not happen!! Data will be lost [ 314.663944][ T7] [ 314.687343][ T7] EXT4-fs (loop3): Total free blocks count 0 [ 314.696893][ T7] EXT4-fs (loop3): Free/Dirty block details [ 314.713234][ T7] EXT4-fs (loop3): free_blocks=68451041280 [ 314.724289][ T7] EXT4-fs (loop3): dirty_blocks=7696 [ 314.735549][ T7] EXT4-fs (loop3): Block reservation details [ 314.747550][ T7] EXT4-fs (loop3): i_reserved_data_blocks=481 [ 314.765151][ T7] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 314.882987][ T24] kauditd_printk_skb: 21 callbacks suppressed [ 314.882999][ T24] audit: type=1400 audit(1726446460.391:3650): avc: denied { setattr } for pid=6189 comm="syz.3.1538" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 315.041605][ T6203] syz.2.1542[6203] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 315.041666][ T6203] syz.2.1542[6203] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 315.082144][ T6199] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 315.102350][ T6208] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1544'. [ 315.130703][ T6199] EXT4-fs (loop3): too many log groups per flexible block group [ 315.154804][ T6199] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 315.178021][ T6199] EXT4-fs (loop3): mount failed [ 315.232161][ T6218] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 315.326387][ T24] audit: type=1400 audit(1726446460.843:3651): avc: denied { read } for pid=6221 comm="syz.1.1550" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 315.368422][ T24] audit: type=1400 audit(1726446460.843:3652): avc: denied { open } for pid=6221 comm="syz.1.1550" path="/39/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 315.418558][ T24] audit: type=1400 audit(1726446460.885:3653): avc: denied { remount } for pid=6235 comm="syz.3.1558" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 315.540530][ T24] audit: type=1400 audit(1726446461.074:3654): avc: denied { mount } for pid=6268 comm="syz.0.1573" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 315.586540][ T6264] EXT4-fs warning (device loop4): dx_probe:845: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 315.598316][ T6264] EXT4-fs warning (device loop4): dx_probe:848: Enable large directory feature to access it [ 315.608803][ T6264] EXT4-fs warning (device loop4): dx_probe:946: inode #2: comm syz.4.1571: Corrupt directory, running e2fsck is recommended [ 315.622403][ T6264] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 315.637095][ T6264] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2210: inode #15: comm syz.4.1571: corrupted in-inode xattr [ 315.664988][ T6264] EXT4-fs (loop4): Remounting filesystem read-only [ 315.677877][ T6264] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.1571: couldn't read orphan inode 15 (err -117) [ 315.700218][ T6264] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,data_err=abort,init_itable,auto_da_alloc,grpjquota=.nouid32,errors=remount-ro,jqfmt=vfsv1,grpid,, [ 315.738020][ T6264] EXT4-fs warning (device loop4): dx_probe:845: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 315.762131][ T6264] EXT4-fs warning (device loop4): dx_probe:848: Enable large directory feature to access it [ 315.774044][ T6264] EXT4-fs warning (device loop4): dx_probe:946: inode #2: comm syz.4.1571: Corrupt directory, running e2fsck is recommended [ 315.788286][ T6304] EXT4-fs warning (device loop4): dx_probe:845: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 315.824720][ T6304] EXT4-fs warning (device loop4): dx_probe:848: Enable large directory feature to access it [ 315.852892][ T6304] EXT4-fs warning (device loop4): dx_probe:946: inode #2: comm syz.4.1571: Corrupt directory, running e2fsck is recommended [ 315.881748][ T6264] EXT4-fs warning (device loop4): dx_probe:845: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 315.893329][ T6264] EXT4-fs warning (device loop4): dx_probe:848: Enable large directory feature to access it [ 315.905928][ T6264] EXT4-fs warning (device loop4): dx_probe:946: inode #2: comm syz.4.1571: Corrupt directory, running e2fsck is recommended [ 315.921966][ T6264] EXT4-fs warning (device loop4): dx_probe:845: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 316.036938][ T24] audit: type=1400 audit(1726446461.599:3655): avc: denied { mounton } for pid=6322 comm="syz.2.1596" path="/84/file0" dev="ramfs" ino=42253 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 316.061953][ T24] audit: type=1400 audit(1726446461.599:3656): avc: denied { ioctl } for pid=6322 comm="syz.2.1596" path="socket:[42252]" dev="sockfs" ino=42252 ioctlcmd=0x8912 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 316.296132][ T6334] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.338419][ T6334] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.345740][ T6334] device bridge_slave_0 entered promiscuous mode [ 316.430041][ T6334] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.439590][ T6334] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.455813][ T6334] device bridge_slave_1 entered promiscuous mode [ 316.625102][ T6367] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 316.676259][ T6334] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.683129][ T6334] bridge0: port 2(bridge_slave_1) entered forwarding state [ 316.690215][ T6334] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.697035][ T6334] bridge0: port 1(bridge_slave_0) entered forwarding state [ 316.793618][ T7] device bridge_slave_1 left promiscuous mode [ 316.802157][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.820929][ T7] device bridge_slave_0 left promiscuous mode [ 316.838025][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.855488][ T7] device veth1_macvtap left promiscuous mode [ 316.861312][ T7] device veth0_vlan left promiscuous mode [ 316.891170][ T6392] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 317.000997][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 317.009298][ T407] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.024761][ T407] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.043501][ T1934] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 317.063679][ T1934] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.070528][ T1934] bridge0: port 1(bridge_slave_0) entered forwarding state [ 317.078298][ T1934] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 317.086728][ T1934] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.093583][ T1934] bridge0: port 2(bridge_slave_1) entered forwarding state [ 317.101073][ T1934] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 317.108920][ T1934] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 317.136734][ T1934] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 317.161255][ T6334] device veth0_vlan entered promiscuous mode [ 317.168216][ T6407] 9pnet: Insufficient options for proto=fd [ 317.174727][ T1934] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 317.184053][ T1934] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 317.203597][ T1934] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 317.219496][ T1934] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 317.240795][ T6334] device veth1_macvtap entered promiscuous mode [ 317.270086][ T1934] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 317.282266][ T1934] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 317.295143][ T1934] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 317.320381][ T1934] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 317.328667][ T1934] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 317.337458][ T1934] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 317.346109][ T1934] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 317.458395][ T6427] fuse: Invalid rootmode [ 317.545238][ T6435] overlayfs: failed to resolve './file0': -2 [ 317.621493][ T6439] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6439 comm=syz.2.1649 [ 317.698502][ T6439] device bridge1 entered promiscuous mode [ 317.712877][ T6439] IPv6: ADDRCONF(NETDEV_CHANGE): bridge1: link becomes ready [ 318.389271][ T6515] 9pnet: Insufficient options for proto=fd [ 318.411930][ T6519] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 318.533732][ T24] audit: type=1326 audit(1726446464.213:3657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6537 comm="syz.3.1692" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdb86710ef9 code=0x0 [ 319.283358][ T6575] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 319.292291][ T6575] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038 (0x7fffffff) [ 319.366400][ T6586] serio: Serial port pts0 [ 319.439925][ T6602] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1717'. [ 319.553849][ T6615] overlayfs: overlapping lowerdir path [ 319.629374][ T6627] input: syz1 as /devices/virtual/input/input24 [ 319.716139][ T6649] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 319.778696][ T24] audit: type=1326 audit(1726446465.525:3658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6640 comm="syz.1.1735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c8a020ef9 code=0x7fc00000 [ 320.471857][ T24] audit: type=1326 audit(1726446466.249:3659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6640 comm="syz.1.1735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f5c8a020ef9 code=0x7fc00000 [ 321.024952][ T939] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 321.228552][ T6712] netem: change failed [ 321.321020][ T6712] FAT-fs (loop4): Unrecognized mount option "nonumtœ" or missing value [ 321.480044][ T24] audit: type=1326 audit(1726446467.310:3660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6711 comm="syz.4.1763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae82bd3ef9 code=0x7ffc0000 [ 321.506259][ T24] audit: type=1326 audit(1726446467.341:3661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6711 comm="syz.4.1763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae82bd3ef9 code=0x7ffc0000 [ 321.530378][ T24] audit: type=1326 audit(1726446467.341:3662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6711 comm="syz.4.1763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7fae82bd3ef9 code=0x7ffc0000 [ 321.600443][ T6716] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 321.669895][ T7] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 321.777463][ T939] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 321.788367][ T939] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 321.801269][ T939] usb 4-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 321.810516][ T939] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.825737][ T939] usb 4-1: config 0 descriptor?? [ 322.020402][ T6711] FAT-fs (loop4): error, invalid access to FAT (entry 0x0affffff) [ 322.028300][ T6711] FAT-fs (loop4): Filesystem has been set read-only [ 322.106454][ T6743] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 322.116770][ T6743] EXT4-fs (loop4): Unrecognized mount option "appraise_type=imasig" or missing value [ 322.132126][ T6746] FAULT_INJECTION: forcing a failure. [ 322.132126][ T6746] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 322.149450][ T6746] CPU: 0 PID: 6746 Comm: syz.1.1773 Tainted: G W 5.10.225-syzkaller-00513-g8d23314f588a #0 [ 322.160523][ T6746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 322.170414][ T6746] Call Trace: [ 322.173547][ T6746] dump_stack_lvl+0x1e2/0x24b [ 322.178060][ T6746] ? bfq_pos_tree_add_move+0x43b/0x43b [ 322.183350][ T6746] ? arch_stack_walk+0xf3/0x140 [ 322.188039][ T6746] dump_stack+0x15/0x17 [ 322.192029][ T6746] should_fail+0x3c6/0x510 [ 322.196279][ T6746] should_fail_usercopy+0x1a/0x20 [ 322.201152][ T6746] copy_page_from_iter+0x398/0x6e0 [ 322.206090][ T6746] tun_get_user+0x755/0x38f0 [ 322.210518][ T6746] ? _kstrtoull+0x3a0/0x4a0 [ 322.214941][ T6746] ? tun_do_read+0x1f60/0x1f60 [ 322.219547][ T6746] ? kstrtouint_from_user+0x20a/0x2a0 [ 322.224749][ T6746] ? kstrtol_from_user+0x310/0x310 [ 322.229792][ T6746] ? avc_policy_seqno+0x1b/0x70 [ 322.234473][ T6746] ? selinux_file_permission+0x2bb/0x560 [ 322.239945][ T6746] ? fsnotify_perm+0x67/0x4e0 [ 322.244460][ T6746] tun_chr_write_iter+0x1a8/0x250 [ 322.249317][ T6746] vfs_write+0xb4c/0xe70 [ 322.253391][ T6746] ? kernel_write+0x3d0/0x3d0 [ 322.257909][ T6746] ? __fdget_pos+0x209/0x3a0 [ 322.262332][ T6746] ? ksys_write+0x77/0x2c0 [ 322.266586][ T6746] ksys_write+0x199/0x2c0 [ 322.270753][ T6746] ? __ia32_sys_read+0x90/0x90 [ 322.275355][ T6746] ? debug_smp_processor_id+0x17/0x20 [ 322.280568][ T6746] __x64_sys_write+0x7b/0x90 [ 322.284986][ T6746] do_syscall_64+0x34/0x70 [ 322.289246][ T6746] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 322.294968][ T6746] RIP: 0033:0x7f5c8a01f9df [ 322.299220][ T6746] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48 [ 322.301863][ T304] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 322.318679][ T6746] RSP: 002b:00007f5c88c9a000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 322.318692][ T6746] RAX: ffffffffffffffda RBX: 00007f5c8a1d8f80 RCX: 00007f5c8a01f9df [ 322.318698][ T6746] RDX: 0000000000000032 RSI: 0000000020000300 RDI: 00000000000000c8 [ 322.318704][ T6746] RBP: 00007f5c88c9a090 R08: 0000000000000000 R09: 0000000000000000 [ 322.318710][ T6746] R10: 0000000000000032 R11: 0000000000000293 R12: 0000000000000001 [ 322.318716][ T6746] R13: 0000000000000000 R14: 00007f5c8a1d8f80 R15: 00007fffc42a08e8 [ 322.332061][ T939] lg-g15 0003:046D:C222.0027: ignoring exceeding usage max [ 322.386349][ T24] audit: type=1400 audit(1726446468.265:3663): avc: denied { ioctl } for pid=6727 comm="syz.2.1768" path="socket:[44379]" dev="sockfs" ino=44379 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 322.434160][ T6743] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 322.443354][ T6750] tipc: Started in network mode [ 322.448397][ T939] lg-g15 0003:046D:C222.0027: hidraw0: USB HID v0.00 Device [HID 046d:c222] on usb-dummy_hcd.3-1/input0 [ 322.459379][ T6750] tipc: Own node identity 2, cluster identity 4711 [ 322.472103][ T6743] EXT4-fs (loop4): mounted filesystem without journal. Opts: minixdf,bsddf,barrier=0x00000000000001ff,data_err=abort,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,noblock_validity,nomblk_io_submit,,errors=continue [ 322.474062][ T6750] tipc: 32-bit node address hash set to 2 [ 322.558698][ T304] usb 1-1: Using ep0 maxpacket: 8 [ 322.576444][ T939] usb 4-1: USB disconnect, device number 50 [ 322.591894][ T6757] tipc: Started in network mode [ 322.602561][ T6757] tipc: Own node identity 2, cluster identity 4711 [ 322.614424][ T6757] tipc: 32-bit node address hash set to 2 [ 322.656104][ T6764] tmpfs: Unknown parameter 'hugue' [ 322.683600][ T6769] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1781'. [ 322.749237][ T304] usb 1-1: unable to get BOS descriptor or descriptor too short [ 322.767333][ T24] audit: type=1400 audit(1726446468.653:3664): avc: denied { create } for pid=6777 comm="syz.4.1783" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 322.844705][ T304] usb 1-1: config 7 has an invalid interface number: 222 but max is 0 [ 322.852787][ T304] usb 1-1: config 7 has no interface number 0 [ 322.858836][ T304] usb 1-1: config 7 interface 222 has no altsetting 0 [ 322.884842][ T6783] udc-core: couldn't find an available UDC or it's busy [ 322.892949][ T6783] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 322.907036][ T6786] xt_CT: No such helper "pptp" [ 323.025788][ T304] usb 1-1: New USB device found, idVendor=0489, idProduct=e0b4, bcdDevice=87.95 [ 323.035257][ T304] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.043088][ T304] usb 1-1: Product: syz [ 323.048124][ T304] usb 1-1: Manufacturer: syz [ 323.052551][ T304] usb 1-1: SerialNumber: syz [ 323.263495][ T939] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 323.340901][ T6802] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1792'. [ 323.359622][ T24] audit: type=1400 audit(1726446469.283:3665): avc: denied { ioctl } for pid=6803 comm="syz.3.1793" path="socket:[44522]" dev="sockfs" ino=44522 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 323.475404][ T304] usb 1-1: USB disconnect, device number 37 [ 323.492103][ T939] usb 2-1: Using ep0 maxpacket: 16 [ 323.554168][ T24] audit: type=1326 audit(1726446469.483:3666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6810 comm="syz.3.1796" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdb86710ef9 code=0x0 [ 323.606385][ T939] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 323.620633][ T939] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 323.647233][ T939] usb 2-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00 [ 323.664588][ T939] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.745576][ T939] usb 2-1: config 0 descriptor?? [ 324.273014][ T6822] netlink: 165 bytes leftover after parsing attributes in process `syz.2.1797'. [ 324.283987][ T939] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 324.768490][ T304] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 324.888890][ T6835] 9pnet: Insufficient options for proto=fd [ 325.121426][ T304] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 325.131373][ T304] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 325.140099][ T304] usb 5-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.09 [ 325.149428][ T304] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.158602][ T304] usb 5-1: config 0 descriptor?? [ 325.164413][ T1495] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 325.185705][ T6839] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1805'. [ 325.201668][ T6841] FAULT_INJECTION: forcing a failure. [ 325.201668][ T6841] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 325.214861][ T6841] CPU: 0 PID: 6841 Comm: syz.3.1806 Tainted: G W 5.10.225-syzkaller-00513-g8d23314f588a #0 [ 325.225924][ T6841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 325.235907][ T6841] Call Trace: [ 325.239040][ T6841] dump_stack_lvl+0x1e2/0x24b [ 325.243546][ T6841] ? bfq_pos_tree_add_move+0x43b/0x43b [ 325.248844][ T6841] ? kmem_cache_free+0xa9/0x1e0 [ 325.253524][ T6841] dump_stack+0x15/0x17 [ 325.257518][ T6841] should_fail+0x3c6/0x510 [ 325.261768][ T6841] should_fail_usercopy+0x1a/0x20 [ 325.266649][ T6841] _copy_from_user+0x20/0xd0 [ 325.271057][ T6841] __copy_msghdr_from_user+0x587/0x7c0 [ 325.276353][ T6841] ? __ia32_sys_shutdown+0x70/0x70 [ 325.281297][ T6841] ___sys_sendmsg+0x166/0x2e0 [ 325.285815][ T6841] ? __sys_sendmsg+0x280/0x280 [ 325.290413][ T6841] ? rw_verify_area+0x1c3/0x360 [ 325.295103][ T6841] ? __fdget+0x1bc/0x240 [ 325.299177][ T6841] __se_sys_sendmsg+0x1b1/0x280 [ 325.303871][ T6841] ? __x64_sys_sendmsg+0x90/0x90 [ 325.308638][ T6841] ? ksys_write+0x260/0x2c0 [ 325.312982][ T6841] ? debug_smp_processor_id+0x17/0x20 [ 325.318186][ T6841] __x64_sys_sendmsg+0x7b/0x90 [ 325.322787][ T6841] do_syscall_64+0x34/0x70 [ 325.327038][ T6841] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 325.332767][ T6841] RIP: 0033:0x7fdb86710ef9 [ 325.337020][ T6841] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 325.356468][ T6841] RSP: 002b:00007fdb8538a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 325.364709][ T6841] RAX: ffffffffffffffda RBX: 00007fdb868c8f80 RCX: 00007fdb86710ef9 [ 325.372517][ T6841] RDX: 0000000000000000 RSI: 0000000020000640 RDI: 0000000000000006 [ 325.380329][ T6841] RBP: 00007fdb8538a090 R08: 0000000000000000 R09: 0000000000000000 [ 325.388139][ T6841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 325.395952][ T6841] R13: 0000000000000000 R14: 00007fdb868c8f80 R15: 00007ffdedb4bbd8 [ 325.407905][ T1077] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 325.464191][ T1495] usb 1-1: Using ep0 maxpacket: 8 [ 325.549593][ T939] usb 2-1: USB disconnect, device number 37 [ 325.589336][ T1495] usb 1-1: config 0 has an invalid descriptor of length 180, skipping remainder of the config [ 325.600742][ T1495] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 325.609780][ T1495] usb 1-1: New USB device found, idVendor=05ac, idProduct=0274, bcdDevice= 0.00 [ 325.618868][ T1495] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.627841][ T1495] usb 1-1: config 0 descriptor?? [ 325.892768][ T1495] usb 1-1: string descriptor 0 read error: -71 [ 325.901729][ T1495] usb 1-1: USB disconnect, device number 38 [ 326.225980][ T1077] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 326.238865][ T1077] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 326.248337][ T1077] usb 3-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.09 [ 326.257901][ T1077] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.274007][ T1077] usb 3-1: config 0 descriptor?? [ 326.350125][ T6870] udc-core: couldn't find an available UDC or it's busy [ 326.357368][ T6870] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 326.616427][ T1495] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 326.854592][ T1495] usb 1-1: Using ep0 maxpacket: 16 [ 326.968668][ T1529] usb 5-1: USB disconnect, device number 40 [ 326.974580][ T1495] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 326.995035][ T1495] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 327.028773][ T1495] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 327.048519][ T1495] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.068170][ T1495] usb 1-1: config 0 descriptor?? [ 327.177697][ T6896] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 327.214463][ T6899] device pim6reg1 entered promiscuous mode [ 328.221819][ T939] usb 3-1: USB disconnect, device number 31 [ 328.455229][ T1495] usbhid 1-1:0.0: can't add hid device: -71 [ 328.461078][ T1495] usbhid: probe of 1-1:0.0 failed with error -71 [ 328.467303][ T24] audit: type=1400 audit(1726446474.637:3667): avc: denied { unlink } for pid=6916 comm="syz.3.1830" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 328.508654][ T1495] usb 1-1: USB disconnect, device number 39 [ 329.105409][ T6941] SELinux: security_context_str_to_sid() failed for (dev binder, type binder) errno=-22 [ 329.200309][ T6936] device pim6reg1 entered promiscuous mode [ 329.262837][ T6948] FAULT_INJECTION: forcing a failure. [ 329.262837][ T6948] name failslab, interval 1, probability 0, space 0, times 0 [ 329.275389][ T6948] CPU: 0 PID: 6948 Comm: syz.4.1840 Tainted: G W 5.10.225-syzkaller-00513-g8d23314f588a #0 [ 329.286454][ T6948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 329.296346][ T6948] Call Trace: [ 329.299479][ T6948] dump_stack_lvl+0x1e2/0x24b [ 329.303989][ T6948] ? panic+0x812/0x812 [ 329.307892][ T6948] ? bfq_pos_tree_add_move+0x43b/0x43b [ 329.313231][ T6948] ? stack_trace_save+0x113/0x1c0 [ 329.318053][ T6948] dump_stack+0x15/0x17 [ 329.322039][ T6948] should_fail+0x3c6/0x510 [ 329.326293][ T6948] ? v9fs_session_init+0xfb/0x19b0 [ 329.331242][ T6948] __should_failslab+0xa4/0xe0 [ 329.335839][ T6948] should_failslab+0x9/0x20 [ 329.340179][ T6948] __kmalloc_track_caller+0x5f/0x320 [ 329.345308][ T6948] kstrdup+0x34/0x70 [ 329.349034][ T6948] v9fs_session_init+0xfb/0x19b0 [ 329.353809][ T6948] ? v9fs_show_options+0x570/0x570 [ 329.358753][ T6948] ? __kasan_kmalloc+0x9/0x10 [ 329.363274][ T6948] ? v9fs_mount+0x5f/0x7b0 [ 329.367524][ T6948] v9fs_mount+0x75/0x7b0 [ 329.371606][ T6948] legacy_get_tree+0xf1/0x190 [ 329.376113][ T6948] ? incfs_get_verity_signature+0x420/0x420 [ 329.381937][ T6948] vfs_get_tree+0x88/0x290 [ 329.386202][ T6948] do_new_mount+0x2ba/0xb30 [ 329.390535][ T6948] ? do_move_mount_old+0x160/0x160 [ 329.395482][ T6948] ? security_capable+0x87/0xb0 [ 329.400168][ T6948] ? ns_capable+0x89/0xe0 [ 329.404331][ T6948] path_mount+0x56f/0xcb0 [ 329.408498][ T6948] __se_sys_mount+0x2c4/0x3b0 [ 329.413017][ T6948] ? __x64_sys_mount+0xd0/0xd0 [ 329.417612][ T6948] __x64_sys_mount+0xbf/0xd0 [ 329.422042][ T6948] do_syscall_64+0x34/0x70 [ 329.426288][ T6948] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 329.432036][ T6948] RIP: 0033:0x7fae82bd3ef9 [ 329.436268][ T6948] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 329.455894][ T6948] RSP: 002b:00007fae8184d038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 329.464130][ T6948] RAX: ffffffffffffffda RBX: 00007fae82d8bf80 RCX: 00007fae82bd3ef9 [ 329.471941][ T6948] RDX: 0000000020000200 RSI: 00000000200001c0 RDI: 0000000000000000 [ 329.479750][ T6948] RBP: 00007fae8184d090 R08: 0000000020000580 R09: 0000000000000000 [ 329.487561][ T6948] R10: 0000000000000400 R11: 0000000000000246 R12: 0000000000000002 [ 329.495371][ T6948] R13: 0000000000000000 R14: 00007fae82d8bf80 R15: 00007ffc16446188 [ 329.645780][ T939] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 329.864663][ T1077] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 329.883804][ T939] usb 4-1: Using ep0 maxpacket: 8 [ 329.902754][ T1529] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 329.912286][ T1076] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 329.960351][ T1495] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 329.998153][ T939] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 330.007345][ T939] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.016065][ T939] usb 4-1: config 0 descriptor?? [ 330.207930][ T1077] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 330.218801][ T1077] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9346, setting to 1024 [ 330.229733][ T1077] usb 3-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 330.236290][ T1495] usb 1-1: device descriptor read/64, error -71 [ 330.238571][ T1077] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.253518][ T1077] usb 3-1: config 0 descriptor?? [ 330.258398][ T1076] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 330.265244][ T1529] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 330.269326][ T1076] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 330.280067][ T1529] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 330.289427][ T6968] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 330.299106][ T1529] usb 5-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 330.305713][ T1076] usb 2-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 330.314736][ T1529] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.323445][ T1076] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.334722][ T1529] usb 5-1: config 0 descriptor?? [ 330.344111][ T1076] usb 2-1: config 0 descriptor?? [ 330.474486][ T939] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 330.484372][ T939] asix 4-1:0.0 (unnamed net_device) (uninitialized): Error reading PHYID register: ffffffe0 [ 330.537885][ T939] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 330.646537][ T1495] usb 1-1: device descriptor read/64, error -71 [ 330.790510][ T1529] lg-g15 0003:046D:C222.0028: ignoring exceeding usage max [ 330.798072][ T24] audit: type=1326 audit(1726446477.083:3668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6965 comm="syz.2.1849" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa24b10cef9 code=0x0 [ 330.799551][ T1076] hid-led 0003:1D34:000A.0029: unknown main item tag 0x0 [ 330.822336][ T1529] lg-g15 0003:046D:C222.0028: hidraw0: USB HID v0.00 Device [HID 046d:c222] on usb-dummy_hcd.4-1/input0 [ 330.903211][ T1495] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 330.988971][ T1529] usb 5-1: USB disconnect, device number 41 [ 331.022056][ T24] audit: type=1400 audit(1726446477.325:3669): avc: denied { setattr } for pid=6971 comm="syz.1.1851" name="" dev="pipefs" ino=44980 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 331.036685][ T1076] hid-led: probe of 0003:1D34:000A.0029 failed with error -71 [ 331.054635][ T1076] usb 2-1: USB disconnect, device number 38 [ 331.160516][ T1495] usb 1-1: device descriptor read/64, error -71 [ 331.476257][ T6980] FAULT_INJECTION: forcing a failure. [ 331.476257][ T6980] name failslab, interval 1, probability 0, space 0, times 0 [ 331.488952][ T6980] CPU: 0 PID: 6980 Comm: syz.4.1853 Tainted: G W 5.10.225-syzkaller-00513-g8d23314f588a #0 [ 331.500022][ T6980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 331.509912][ T6980] Call Trace: [ 331.513045][ T6980] dump_stack_lvl+0x1e2/0x24b [ 331.517551][ T6980] ? bfq_pos_tree_add_move+0x43b/0x43b [ 331.522848][ T6980] dump_stack+0x15/0x17 [ 331.526872][ T6980] should_fail+0x3c6/0x510 [ 331.531093][ T6980] ? p9_client_create+0xd0/0x1130 [ 331.535954][ T6980] __should_failslab+0xa4/0xe0 [ 331.540560][ T6980] should_failslab+0x9/0x20 [ 331.541208][ T1495] usb 1-1: device descriptor read/64, error -71 [ 331.544910][ T6980] kmem_cache_alloc_trace+0x3a/0x2e0 [ 331.556092][ T6980] ? arch_stack_walk+0xf3/0x140 [ 331.560785][ T6980] p9_client_create+0xd0/0x1130 [ 331.565468][ T6980] ? stack_trace_save+0x113/0x1c0 [ 331.570324][ T6980] ? p9_parse_header+0x6c0/0x6c0 [ 331.575099][ T6980] ? slab_post_alloc_hook+0x80/0x2f0 [ 331.580223][ T6980] ? v9fs_session_init+0xfb/0x19b0 [ 331.585165][ T6980] ? v9fs_session_init+0xfb/0x19b0 [ 331.590140][ T6980] ? kstrdup+0x4f/0x70 [ 331.594020][ T6980] ? __kasan_check_write+0x14/0x20 [ 331.598969][ T6980] v9fs_session_init+0x1fa/0x19b0 [ 331.603832][ T6980] ? v9fs_show_options+0x570/0x570 [ 331.608775][ T6980] ? __kasan_kmalloc+0x9/0x10 [ 331.613285][ T6980] ? v9fs_mount+0x5f/0x7b0 [ 331.617536][ T6980] v9fs_mount+0x75/0x7b0 [ 331.621619][ T6980] legacy_get_tree+0xf1/0x190 [ 331.626130][ T6980] ? incfs_get_verity_signature+0x420/0x420 [ 331.631861][ T6980] vfs_get_tree+0x88/0x290 [ 331.636118][ T6980] do_new_mount+0x2ba/0xb30 [ 331.640455][ T6980] ? do_move_mount_old+0x160/0x160 [ 331.645399][ T6980] ? security_capable+0x87/0xb0 [ 331.650087][ T6980] ? ns_capable+0x89/0xe0 [ 331.654261][ T6980] path_mount+0x56f/0xcb0 [ 331.656560][ T1495] usb usb1-port1: attempt power cycle [ 331.658426][ T6980] __se_sys_mount+0x2c4/0x3b0 [ 331.658436][ T6980] ? __x64_sys_mount+0xd0/0xd0 [ 331.658455][ T6980] ? __bpf_trace_sys_enter+0x62/0x70 [ 331.677882][ T6980] __x64_sys_mount+0xbf/0xd0 [ 331.682293][ T6980] do_syscall_64+0x34/0x70 [ 331.686544][ T6980] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 331.692267][ T6980] RIP: 0033:0x7fae82bd3ef9 [ 331.696526][ T6980] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 331.715966][ T6980] RSP: 002b:00007fae8184d038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 331.724206][ T6980] RAX: ffffffffffffffda RBX: 00007fae82d8bf80 RCX: 00007fae82bd3ef9 [ 331.732017][ T6980] RDX: 0000000020000200 RSI: 00000000200001c0 RDI: 0000000000000000 [ 331.739830][ T6980] RBP: 00007fae8184d090 R08: 0000000020000580 R09: 0000000000000000 [ 331.747645][ T6980] R10: 0000000000000400 R11: 0000000000000246 R12: 0000000000000002 [ 331.755451][ T6980] R13: 0000000000000000 R14: 00007fae82d8bf80 R15: 00007ffc16446188 [ 331.787952][ T24] audit: type=1400 audit(1726446478.123:3670): avc: denied { mounton } for pid=6984 comm="syz.4.1855" path=2F35342FE91F7189591E9233614B dev="tmpfs" ino=322 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 331.788308][ T1529] kernel write not supported for file bpf-prog (pid: 1529 comm: kworker/1:49) [ 331.874136][ T24] audit: type=1400 audit(1726446478.217:3671): avc: denied { setattr } for pid=6984 comm="syz.4.1855" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 331.923405][ T24] audit: type=1400 audit(1726446478.280:3672): avc: denied { append } for pid=6984 comm="syz.4.1855" name="ashmem" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 331.979420][ T939] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 331.993830][ T939] asix: probe of 4-1:0.0 failed with error -71 [ 332.007460][ T939] usb 4-1: USB disconnect, device number 51 [ 332.046109][ T1495] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 332.068821][ T6990] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #16: comm syz.4.1856: iget: bad extended attribute block 128 [ 332.081504][ T6990] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.1856: couldn't read orphan inode 16 (err -117) [ 332.093364][ T6990] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 332.102319][ T6990] ext4 filesystem being mounted at /55/file1 supports timestamps until 2038 (0x7fffffff) [ 332.116901][ T6990] EXT4-fs error (device loop4): ext4_lookup:1828: inode #16: comm syz.4.1856: iget: bad extended attribute block 128 [ 332.208691][ T1495] usb 1-1: device descriptor read/8, error -71 [ 332.334446][ T7007] SELinux: security_context_str_to_sid() failed for (dev binder, type binder) errno=-22 [ 332.474813][ T1495] usb 1-1: device descriptor read/8, error -71 [ 332.478710][ T7013] overlayfs: statfs failed on './file0' [ 332.504439][ T7015] overlayfs: statfs failed on './file0' [ 332.531892][ T1077] usbhid 3-1:0.0: can't add hid device: -71 [ 332.537851][ T1077] usbhid: probe of 3-1:0.0 failed with error -71 [ 332.561914][ T1077] usb 3-1: USB disconnect, device number 32 [ 333.472464][ T7038] EXT4-fs (loop4): Ignoring removed nobh option [ 333.556392][ T7046] overlayfs: statfs failed on './file0' [ 333.609497][ T7038] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobh,noauto_da_alloc,jqfmt=vfsold,data_err=ignore,noquota,acl,init_itable=0x00000000000085c5,nojournal_checksum,jqfmt=vfsv1,,errors=continue [ 333.770735][ T7054] SELinux: security_context_str_to_sid() failed for (dev binder, type binder) errno=-22 [ 333.817832][ T939] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 333.825573][ T7057] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1880'. [ 333.834396][ T7057] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1880'. [ 334.094049][ T939] usb 4-1: Using ep0 maxpacket: 8 [ 334.208445][ T939] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 334.217388][ T939] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.226009][ T939] usb 4-1: config 0 descriptor?? [ 334.388189][ T7068] fuse: Bad value for 'fd' [ 334.425740][ T7074] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1886'. [ 334.495483][ T7084] device pim6reg1 entered promiscuous mode [ 334.684775][ T939] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 334.698857][ T939] asix 4-1:0.0 (unnamed net_device) (uninitialized): Error reading PHYID register: ffffffe0 [ 334.751356][ T939] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 334.875141][ T1077] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 335.227688][ T1077] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 335.243662][ T1077] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 335.265169][ T1077] usb 2-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 335.282354][ T1077] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.326108][ T1077] usb 2-1: config 0 descriptor?? [ 335.665806][ T1073] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 336.243011][ T7116] SELinux: security_context_str_to_sid() failed for (dev binder, type binder) errno=-22 [ 336.476120][ T7129] binder: 7127:7129 ioctl 4018620d 0 returned -22 [ 336.538781][ T7129] binder: 7127:7129 ioctl 4018620d 0 returned -22 [ 336.659798][ T7132] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1906'. [ 336.742371][ T939] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 336.754418][ T939] asix: probe of 4-1:0.0 failed with error -71 [ 336.761799][ T939] usb 4-1: USB disconnect, device number 52 [ 336.780267][ T1073] usb 3-1: Using ep0 maxpacket: 8 [ 336.952607][ T1073] usb 3-1: unable to get BOS descriptor or descriptor too short [ 337.000509][ T7140] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=47 sclass=netlink_route_socket pid=7140 comm=syz.4.1909 [ 337.013385][ T7140] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1909'. [ 337.028042][ T1073] usb 3-1: config 7 has an invalid interface number: 222 but max is 0 [ 337.036251][ T1073] usb 3-1: config 7 has no interface number 0 [ 337.042432][ T1073] usb 3-1: config 7 interface 222 has no altsetting 0 [ 337.129715][ T24] audit: type=1400 audit(1726446483.739:3673): avc: denied { ioctl } for pid=7142 comm="syz.4.1910" path="socket:[45286]" dev="sockfs" ino=45286 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 337.228731][ T7147] xt_CT: No such helper "pptp" [ 337.247109][ T1073] usb 3-1: New USB device found, idVendor=0489, idProduct=e0b4, bcdDevice=87.95 [ 337.267343][ T1073] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.276908][ T1073] usb 3-1: Product: syz [ 337.298164][ T1073] usb 3-1: Manufacturer: syz [ 337.302616][ T1073] usb 3-1: SerialNumber: syz [ 337.847202][ T1077] usbhid 2-1:0.0: can't add hid device: -71 [ 337.853044][ T1077] usbhid: probe of 2-1:0.0 failed with error -71 [ 337.859921][ T1077] usb 2-1: USB disconnect, device number 39 [ 338.107413][ T7169] SELinux: security_context_str_to_sid() failed for (dev binder, type binder) errno=-22 [ 338.413108][ T7180] device pim6reg1 entered promiscuous mode [ 338.456976][ T7184] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1925'. [ 338.467225][ T1073] usb 3-1: USB disconnect, device number 33 [ 338.685686][ T1077] usb 2-1: new full-speed USB device number 40 using dummy_hcd [ 338.707244][ T7196] device pim6reg1 entered promiscuous mode [ 338.803806][ T7200] device pim6reg1 entered promiscuous mode [ 338.877236][ T7205] tipc: Started in network mode [ 338.881955][ T7205] tipc: Own node identity 2, cluster identity 4711 [ 338.888671][ T7205] tipc: 32-bit node address hash set to 2 [ 338.906733][ T7207] device pim6reg1 entered promiscuous mode [ 339.104834][ T1492] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 339.257287][ T1495] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 339.275969][ T1073] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 339.352181][ T1077] usb 2-1: device descriptor read/64, error -71 [ 339.352613][ T1492] usb 5-1: Using ep0 maxpacket: 8 [ 339.460185][ T7213] overlayfs: statfs failed on './file0' [ 339.504851][ T1495] usb 1-1: Using ep0 maxpacket: 16 [ 339.542912][ T1492] usb 5-1: unable to get BOS descriptor or descriptor too short [ 339.618983][ T1073] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 339.638359][ T1073] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 339.638436][ T1495] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 339.657563][ T1073] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 339.659079][ T1492] usb 5-1: config 7 has an invalid interface number: 222 but max is 0 [ 339.679621][ T1495] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 339.690459][ T1492] usb 5-1: config 7 has no interface number 0 [ 339.691159][ T1073] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 339.696599][ T1495] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 339.714563][ T1073] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.718569][ T1492] usb 5-1: config 7 interface 222 has no altsetting 0 [ 339.726139][ T1077] usb 2-1: device descriptor read/64, error -71 [ 339.733074][ T1495] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 339.747873][ T1495] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.751830][ T1073] usb 3-1: config 0 descriptor?? [ 339.760806][ T1495] usb 1-1: config 0 descriptor?? [ 339.886139][ T1492] usb 5-1: New USB device found, idVendor=0489, idProduct=e0b4, bcdDevice=87.95 [ 339.895112][ T1492] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.902940][ T1492] usb 5-1: Product: syz [ 339.907429][ T1492] usb 5-1: Manufacturer: syz [ 339.911834][ T1492] usb 5-1: SerialNumber: syz [ 340.000045][ T1077] usb 2-1: new full-speed USB device number 41 using dummy_hcd [ 340.131080][ T7236] SELinux: security_context_str_to_sid() failed for (dev binder, type binder) errno=-22 [ 340.133388][ T1495] usbhid 1-1:0.0: can't add hid device: -71 [ 340.145395][ T1073] usbhid 3-1:0.0: can't add hid device: -71 [ 340.152389][ T1073] usbhid: probe of 3-1:0.0 failed with error -71 [ 340.159368][ T1495] usbhid: probe of 1-1:0.0 failed with error -71 [ 340.160880][ T1073] usb 3-1: USB disconnect, device number 34 [ 340.179585][ T1495] usb 1-1: USB disconnect, device number 44 [ 340.254812][ T1492] usb 5-1: USB disconnect, device number 42 [ 340.514330][ T1495] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 340.647672][ T1077] usb 2-1: device descriptor read/64, error -71 [ 340.694152][ T7243] device pim6reg1 entered promiscuous mode [ 340.937310][ T7251] hub 6-0:1.0: USB hub found [ 340.943122][ T7251] hub 6-0:1.0: 1 port detected [ 341.657921][ T1495] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 341.681474][ T1495] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 341.691931][ T1495] usb 1-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 341.703673][ T1495] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.715561][ T1495] usb 1-1: config 0 descriptor?? [ 341.724374][ T7256] overlayfs: statfs failed on './file0' [ 341.844271][ T7259] EXT4-fs (loop4): Ignoring removed orlov option [ 341.850616][ T7259] EXT4-fs (loop4): Ignoring removed nobh option [ 341.868935][ T7259] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv1,orlov,barrier=0x0000000000000004,nobh,debug_want_extra_isize=0x0000000000000080,nodiscard,nodelalloc,acl,dioread_lock,,errors=continue [ 342.073074][ T7264] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1951'. [ 342.162808][ T7268] fuse: Bad value for 'user_id' [ 342.221793][ T1495] lg-g15 0003:046D:C222.002A: ignoring exceeding usage max [ 342.234716][ T1495] lg-g15 0003:046D:C222.002A: hidraw0: USB HID v0.00 Device [HID 046d:c222] on usb-dummy_hcd.0-1/input0 [ 342.433398][ T1495] usb 1-1: USB disconnect, device number 45 [ 342.748028][ T7275] device pim6reg1 entered promiscuous mode [ 343.812398][ T7285] EXT4-fs error (device loop4) in ext4_do_update_inode:5303: error 27 [ 343.824408][ T7285] EXT4-fs error (device loop4): ext4_dirty_inode:6107: inode #3: comm syz.4.1959: mark_inode_dirty error [ 343.849448][ T7285] EXT4-fs error (device loop4) in ext4_do_update_inode:5303: error 27 [ 343.867630][ T7285] EXT4-fs error (device loop4): __ext4_ext_dirty:182: inode #3: comm syz.4.1959: mark_inode_dirty error [ 343.887065][ T7285] Quota error (device loop4): write_blk: dquota write failed [ 343.898616][ T7285] Quota error (device loop4): qtree_write_dquot: Error -27 occurred while creating quota [ 343.914654][ T7299] FAULT_INJECTION: forcing a failure. [ 343.914654][ T7299] name failslab, interval 1, probability 0, space 0, times 0 [ 343.927145][ T7285] EXT4-fs error (device loop4): ext4_acquire_dquot:6219: comm syz.4.1959: Failed to acquire dquot type 0 [ 343.938501][ T7299] CPU: 1 PID: 7299 Comm: syz.0.1963 Tainted: G W 5.10.225-syzkaller-00513-g8d23314f588a #0 [ 343.949692][ T7299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 343.959549][ T7299] Call Trace: [ 343.962685][ T7299] dump_stack_lvl+0x1e2/0x24b [ 343.967283][ T7299] ? panic+0x812/0x812 [ 343.971186][ T7299] ? bfq_pos_tree_add_move+0x43b/0x43b [ 343.976492][ T7299] ? __alloc_pages_nodemask+0x435/0xaf0 [ 343.981860][ T7299] dump_stack+0x15/0x17 [ 343.985855][ T7299] should_fail+0x3c6/0x510 [ 343.990108][ T7299] ? __build_skb+0x2a/0x300 [ 343.994449][ T7299] __should_failslab+0xa4/0xe0 [ 343.999047][ T7299] should_failslab+0x9/0x20 [ 344.003386][ T7299] kmem_cache_alloc+0x3d/0x2e0 [ 344.008001][ T7299] __build_skb+0x2a/0x300 [ 344.012154][ T7299] build_skb+0x25/0x1e0 [ 344.016145][ T7299] tun_get_user+0x1bd6/0x38f0 [ 344.020660][ T7299] ? _kstrtoull+0x3a0/0x4a0 [ 344.024999][ T7299] ? tun_do_read+0x1f60/0x1f60 [ 344.029596][ T7299] ? kstrtouint_from_user+0x20a/0x2a0 [ 344.034813][ T7299] ? kstrtol_from_user+0x310/0x310 [ 344.039753][ T7299] ? __check_object_size+0x9e/0x3c0 [ 344.044795][ T7299] ? trie_delete_elem+0x7a/0x760 [ 344.049571][ T7299] ? avc_policy_seqno+0x1b/0x70 [ 344.054247][ T7299] ? selinux_file_permission+0x2bb/0x560 [ 344.059724][ T7299] ? fsnotify_perm+0x67/0x4e0 [ 344.064232][ T7299] tun_chr_write_iter+0x1a8/0x250 [ 344.069092][ T7299] vfs_write+0xb4c/0xe70 [ 344.073168][ T7299] ? putname+0xe7/0x140 [ 344.077164][ T7299] ? __traceiter_kmem_cache_free+0x2e/0x50 [ 344.082803][ T7299] ? kernel_write+0x3d0/0x3d0 [ 344.087323][ T7299] ? __fdget_pos+0x209/0x3a0 [ 344.091746][ T7299] ? ksys_write+0x77/0x2c0 [ 344.095996][ T7299] ksys_write+0x199/0x2c0 [ 344.100162][ T7299] ? __ia32_sys_read+0x90/0x90 [ 344.104765][ T7299] ? debug_smp_processor_id+0x17/0x20 [ 344.109968][ T7299] __x64_sys_write+0x7b/0x90 [ 344.114400][ T7299] do_syscall_64+0x34/0x70 [ 344.118649][ T7299] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 344.124377][ T7299] RIP: 0033:0x7fb098a7c9df [ 344.128630][ T7299] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48 [ 344.148071][ T7299] RSP: 002b:00007fb0976f7000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 344.156317][ T7299] RAX: ffffffffffffffda RBX: 00007fb098c35f80 RCX: 00007fb098a7c9df [ 344.164125][ T7299] RDX: 000000000000002a RSI: 0000000020000300 RDI: 00000000000000c8 [ 344.171957][ T7299] RBP: 00007fb0976f7090 R08: 0000000000000000 R09: 0000000000000000 [ 344.179747][ T7299] R10: 000000000000002a R11: 0000000000000293 R12: 0000000000000001 [ 344.187560][ T7299] R13: 0000000000000000 R14: 00007fb098c35f80 R15: 00007ffe9bb67fe8 [ 344.199813][ T7285] EXT4-fs (loop4): 1 orphan inode deleted [ 344.205539][ T7285] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 344.214684][ T7285] ext4 filesystem being mounted at /84/file1 supports timestamps until 2038 (0x7fffffff) [ 344.262188][ T7301] xt_CT: No such helper "pptp" [ 346.651810][ T7312] SELinux: security_context_str_to_sid() failed for (dev binder, type binder) errno=-22 [ 346.818694][ T7318] device pim6reg1 entered promiscuous mode [ 350.854857][ T7329] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.861919][ T7329] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.869525][ T7329] device bridge_slave_0 entered promiscuous mode [ 350.876498][ T7329] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.883609][ T7329] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.890998][ T7329] device bridge_slave_1 entered promiscuous mode [ 350.940975][ T7329] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.947843][ T7329] bridge0: port 2(bridge_slave_1) entered forwarding state [ 350.954950][ T7329] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.961706][ T7329] bridge0: port 1(bridge_slave_0) entered forwarding state [ 351.012070][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.145431][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.298457][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 351.306120][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 351.698142][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 351.706168][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.713007][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 351.720613][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 351.728897][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.735714][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 351.841242][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 351.849419][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 351.857445][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 351.870382][ T7329] device veth0_vlan entered promiscuous mode [ 351.877028][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 351.885585][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 351.893002][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 351.907077][ T7329] device veth1_macvtap entered promiscuous mode [ 351.914113][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 351.922385][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 351.930882][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 351.945656][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 351.954059][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 351.962501][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 351.971176][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 352.250391][ T1077] usb usb2-port1: attempt power cycle [ 457.985020][ T1077] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 466.686681][ T7350] bridge0: port 1(bridge_slave_0) entered blocking state [ 466.694181][ T7350] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.701723][ T7350] device bridge_slave_0 entered promiscuous mode [ 466.708776][ T7354] bridge0: port 1(bridge_slave_0) entered blocking state [ 466.716364][ T7354] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.723756][ T7354] device bridge_slave_0 entered promiscuous mode [ 466.730422][ T7352] bridge0: port 1(bridge_slave_0) entered blocking state [ 466.737238][ T7352] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.745011][ T7352] device bridge_slave_0 entered promiscuous mode [ 466.754197][ T7353] bridge0: port 1(bridge_slave_0) entered blocking state [ 466.761715][ T7353] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.769115][ T7353] device bridge_slave_0 entered promiscuous mode [ 466.775670][ T7350] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.783078][ T7350] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.790512][ T7350] device bridge_slave_1 entered promiscuous mode [ 466.797051][ T7354] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.803951][ T7354] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.811479][ T7354] device bridge_slave_1 entered promiscuous mode [ 466.818036][ T7351] bridge0: port 1(bridge_slave_0) entered blocking state [ 466.825120][ T7351] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.832333][ T7351] device bridge_slave_0 entered promiscuous mode [ 466.839099][ T7352] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.847530][ T7352] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.854929][ T7352] device bridge_slave_1 entered promiscuous mode [ 466.861386][ T7353] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.868525][ T7353] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.875878][ T7353] device bridge_slave_1 entered promiscuous mode [ 466.887400][ T7351] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.894612][ T7351] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.902980][ T7351] device bridge_slave_1 entered promiscuous mode [ 467.486771][ T7350] bridge0: port 2(bridge_slave_1) entered blocking state [ 467.493637][ T7350] bridge0: port 2(bridge_slave_1) entered forwarding state [ 467.500751][ T7350] bridge0: port 1(bridge_slave_0) entered blocking state [ 467.507547][ T7350] bridge0: port 1(bridge_slave_0) entered forwarding state [ 467.522359][ T7352] bridge0: port 2(bridge_slave_1) entered blocking state [ 467.529202][ T7352] bridge0: port 2(bridge_slave_1) entered forwarding state [ 467.536362][ T7352] bridge0: port 1(bridge_slave_0) entered blocking state [ 467.543099][ T7352] bridge0: port 1(bridge_slave_0) entered forwarding state [ 467.553841][ T7353] bridge0: port 2(bridge_slave_1) entered blocking state [ 467.560689][ T7353] bridge0: port 2(bridge_slave_1) entered forwarding state [ 467.567800][ T7353] bridge0: port 1(bridge_slave_0) entered blocking state [ 467.574590][ T7353] bridge0: port 1(bridge_slave_0) entered forwarding state [ 467.589150][ T7351] bridge0: port 2(bridge_slave_1) entered blocking state [ 467.595996][ T7351] bridge0: port 2(bridge_slave_1) entered forwarding state [ 467.603125][ T7351] bridge0: port 1(bridge_slave_0) entered blocking state [ 467.609894][ T7351] bridge0: port 1(bridge_slave_0) entered forwarding state [ 467.619652][ T7354] bridge0: port 2(bridge_slave_1) entered blocking state [ 467.626499][ T7354] bridge0: port 2(bridge_slave_1) entered forwarding state [ 467.633620][ T7354] bridge0: port 1(bridge_slave_0) entered blocking state [ 467.640409][ T7354] bridge0: port 1(bridge_slave_0) entered forwarding state [ 467.786683][ T407] bridge0: port 1(bridge_slave_0) entered disabled state [ 467.920035][ T407] bridge0: port 1(bridge_slave_0) entered disabled state [ 468.053395][ T407] bridge0: port 1(bridge_slave_0) entered disabled state [ 468.186757][ T407] bridge0: port 2(bridge_slave_1) entered disabled state [ 468.320115][ T407] bridge0: port 2(bridge_slave_1) entered disabled state [ 468.539220][ T407] bridge0: port 1(bridge_slave_0) entered disabled state [ 468.672548][ T407] bridge0: port 2(bridge_slave_1) entered disabled state [ 468.805952][ T407] bridge0: port 2(bridge_slave_1) entered disabled state [ 468.939282][ T407] bridge0: port 1(bridge_slave_0) entered disabled state [ 469.415999][ T407] bridge0: port 2(bridge_slave_1) entered disabled state [ 491.425780][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 491.433861][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 491.469789][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 491.477357][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 491.484535][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 491.493230][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 491.502072][ T407] bridge0: port 1(bridge_slave_0) entered blocking state [ 491.508927][ T407] bridge0: port 1(bridge_slave_0) entered forwarding state [ 491.516389][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 491.524546][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 491.532464][ T407] bridge0: port 2(bridge_slave_1) entered blocking state [ 491.539300][ T407] bridge0: port 2(bridge_slave_1) entered forwarding state [ 491.551018][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 491.558397][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 491.567361][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 491.575653][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 491.583665][ T407] bridge0: port 1(bridge_slave_0) entered blocking state [ 491.590478][ T407] bridge0: port 1(bridge_slave_0) entered forwarding state [ 491.613053][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 491.620673][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 491.627837][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 491.636036][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 491.644188][ T407] bridge0: port 1(bridge_slave_0) entered blocking state [ 491.651021][ T407] bridge0: port 1(bridge_slave_0) entered forwarding state [ 491.658968][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 491.667561][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 491.675487][ T407] bridge0: port 2(bridge_slave_1) entered blocking state [ 491.682318][ T407] bridge0: port 2(bridge_slave_1) entered forwarding state [ 491.689606][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 491.697549][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 491.705224][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 491.713110][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 491.722937][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 491.730275][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 491.749246][ T7351] device veth0_vlan entered promiscuous mode [ 491.765245][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 491.783518][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 491.792458][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 491.800218][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 491.808644][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 491.817475][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 491.825327][ T1077] usb 2-1: device descriptor read/8, error -71 [ 491.831449][ T407] bridge0: port 1(bridge_slave_0) entered blocking state [ 491.838255][ T407] bridge0: port 1(bridge_slave_0) entered forwarding state [ 491.845569][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 491.853676][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 491.861836][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 491.870103][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 491.878219][ T407] bridge0: port 2(bridge_slave_1) entered blocking state [ 491.885031][ T407] bridge0: port 2(bridge_slave_1) entered forwarding state [ 491.892371][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 491.900143][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 491.908029][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 491.916134][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 491.924111][ T407] bridge0: port 1(bridge_slave_0) entered blocking state [ 491.930870][ T407] bridge0: port 1(bridge_slave_0) entered forwarding state [ 491.938227][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 491.946566][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 491.954822][ T407] bridge0: port 2(bridge_slave_1) entered blocking state [ 491.961726][ T407] bridge0: port 2(bridge_slave_1) entered forwarding state [ 491.969079][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 491.977348][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 491.985539][ T407] bridge0: port 2(bridge_slave_1) entered blocking state [ 491.992379][ T407] bridge0: port 2(bridge_slave_1) entered forwarding state [ 491.999741][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 492.007134][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 492.024813][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 492.032579][ T1077] usb 2-1: device descriptor read/8, error -71 [ 492.039297][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 492.047067][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 492.055593][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 492.067663][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 492.075519][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 492.089249][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 492.097122][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 492.104788][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 492.112879][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 492.124679][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 492.132579][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 492.146668][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 492.155324][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 492.168536][ T7351] device veth1_macvtap entered promiscuous mode [ 492.175299][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 492.183488][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 492.191454][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 492.204377][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 492.212312][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 492.228714][ T7350] device veth0_vlan entered promiscuous mode [ 492.235151][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 492.242560][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 492.250088][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 492.258396][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 492.266434][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 492.274530][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 492.285392][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 492.293591][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 492.308725][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 492.316898][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 492.331943][ T7354] device veth0_vlan entered promiscuous mode [ 492.338789][ T1934] device bridge_slave_1 left promiscuous mode [ 492.344938][ T1934] bridge0: port 2(bridge_slave_1) entered disabled state [ 492.352137][ T1934] device bridge_slave_0 left promiscuous mode [ 492.359097][ T1934] bridge0: port 1(bridge_slave_0) entered disabled state [ 492.366793][ T1934] device veth1_macvtap left promiscuous mode [ 492.372654][ T1934] device veth0_vlan left promiscuous mode [ 492.452881][ T7350] device veth1_macvtap entered promiscuous mode [ 492.459861][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 492.470735][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 492.518124][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 492.525869][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 492.533618][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 492.541604][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 492.549672][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 492.557188][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 492.564445][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 492.617802][ T7354] device veth1_macvtap entered promiscuous mode [ 492.934120][ T304] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 492.948930][ T7353] device veth0_vlan entered promiscuous mode [ 492.955261][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 492.963350][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 492.971271][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 492.978903][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 492.987125][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 492.995308][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 493.003316][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 493.011822][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 493.019506][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 493.027393][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 493.034823][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 493.056759][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 493.064860][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 493.073012][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 493.081492][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 493.089422][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 493.098050][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 493.106248][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 493.113506][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 493.122667][ T7352] device veth0_vlan entered promiscuous mode [ 493.141960][ T7353] device veth1_macvtap entered promiscuous mode [ 493.157264][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 493.166475][ T7411] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 493.168661][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 493.184374][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 493.202070][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 493.210475][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 493.218566][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 493.226990][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 493.230544][ T304] usb 5-1: no configurations [ 493.239644][ T304] usb 5-1: can't read configurations, error -22 [ 493.248462][ T7352] device veth1_macvtap entered promiscuous mode [ 493.273001][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 493.283157][ T7414] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1976'. [ 493.292583][ T7414] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7414 comm=syz.0.1976 [ 493.328212][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 493.336611][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 493.359776][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 493.368177][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 493.376981][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 493.386235][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 493.391379][ T24] audit: type=1400 audit(1726446647.781:3674): avc: denied { write } for pid=256 comm="syz-executor" path="pipe:[1393]" dev="pipefs" ino=1393 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 493.425146][ T304] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 493.459524][ T1934] tipc: Left network mode [ 493.467639][ T1934] tipc: Left network mode [ 493.473360][ T1934] tipc: Left network mode [ 493.686771][ T1077] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 493.724958][ T304] usb 5-1: device descriptor read/all, error -71 [ 493.731187][ T304] usb usb5-port1: attempt power cycle [ 494.298285][ T1934] device bridge_slave_1 left promiscuous mode [ 494.304224][ T1934] bridge0: port 2(bridge_slave_1) entered disabled state [ 494.311532][ T1934] device bridge_slave_0 left promiscuous mode [ 494.317568][ T1934] bridge0: port 1(bridge_slave_0) entered disabled state [ 494.325378][ T1934] device bridge_slave_1 left promiscuous mode [ 494.331271][ T1934] bridge0: port 2(bridge_slave_1) entered disabled state [ 494.339007][ T1934] device bridge_slave_0 left promiscuous mode [ 494.345149][ T1934] bridge0: port 1(bridge_slave_0) entered disabled state [ 494.352910][ T1934] device bridge_slave_1 left promiscuous mode [ 494.358906][ T1934] bridge0: port 2(bridge_slave_1) entered disabled state [ 494.366299][ T1934] device bridge_slave_0 left promiscuous mode [ 494.372194][ T1934] bridge0: port 1(bridge_slave_0) entered disabled state [ 494.380070][ T1934] device bridge_slave_1 left promiscuous mode [ 494.386062][ T1934] bridge0: port 2(bridge_slave_1) entered disabled state [ 494.393656][ T1934] device bridge_slave_0 left promiscuous mode [ 494.399554][ T1934] bridge0: port 1(bridge_slave_0) entered disabled state [ 494.407608][ T1934] device bridge_slave_1 left promiscuous mode [ 494.414112][ T1934] bridge0: port 2(bridge_slave_1) entered disabled state [ 494.421491][ T1934] device bridge_slave_0 left promiscuous mode [ 494.427391][ T1934] bridge0: port 1(bridge_slave_0) entered disabled state [ 494.436196][ T1934] device veth1_macvtap left promiscuous mode [ 494.442342][ T1934] device veth1_macvtap left promiscuous mode [ 494.448231][ T1934] device veth0_vlan left promiscuous mode [ 494.454061][ T1934] device veth1_macvtap left promiscuous mode [ 494.460017][ T1934] device veth0_vlan left promiscuous mode [ 494.465604][ T1934] device veth1_macvtap left promiscuous mode [ 494.471477][ T1934] device veth0_vlan left promiscuous mode [ 494.477410][ T1934] device veth1_macvtap left promiscuous mode [ 494.483197][ T1934] device veth0_vlan left promiscuous mode [ 494.489247][ T1934] device veth1_macvtap left promiscuous mode [ 494.495033][ T1934] device veth0_vlan left promiscuous mode [ 497.347015][ T1934] device bridge_slave_1 left promiscuous mode [ 497.352938][ T1934] bridge0: port 2(bridge_slave_1) entered disabled state [ 497.360251][ T1934] device bridge_slave_0 left promiscuous mode [ 497.366261][ T1934] bridge0: port 1(bridge_slave_0) entered disabled state [ 497.374153][ T1934] device bridge_slave_1 left promiscuous mode [ 497.380063][ T1934] bridge0: port 2(bridge_slave_1) entered disabled state [ 497.387569][ T1934] device bridge_slave_0 left promiscuous mode [ 497.393583][ T1934] bridge0: port 1(bridge_slave_0) entered disabled state [ 497.401289][ T1934] device bridge_slave_1 left promiscuous mode [ 497.407309][ T1934] bridge0: port 2(bridge_slave_1) entered disabled state [ 497.414657][ T1934] device bridge_slave_0 left promiscuous mode [ 497.420558][ T1934] bridge0: port 1(bridge_slave_0) entered disabled state [ 497.428324][ T1934] device bridge_slave_1 left promiscuous mode [ 497.434304][ T1934] bridge0: port 2(bridge_slave_1) entered disabled state [ 497.441667][ T1934] device bridge_slave_0 left promiscuous mode [ 497.447584][ T1934] bridge0: port 1(bridge_slave_0) entered disabled state [ 497.455253][ T1934] device bridge_slave_1 left promiscuous mode [ 497.461358][ T1934] bridge0: port 2(bridge_slave_1) entered disabled state [ 497.468677][ T1934] device bridge_slave_0 left promiscuous mode [ 497.474574][ T1934] bridge0: port 1(bridge_slave_0) entered disabled state [ 497.482728][ T1934] device veth1_macvtap left promiscuous mode [ 497.488559][ T1934] device veth0_vlan left promiscuous mode [ 497.494178][ T1934] device veth1_macvtap left promiscuous mode [ 497.500030][ T1934] device veth0_vlan left promiscuous mode [ 497.505681][ T1934] device veth1_macvtap left promiscuous mode [ 497.511512][ T1934] device veth0_vlan left promiscuous mode [ 497.517276][ T1934] device veth1_macvtap left promiscuous mode [ 497.523058][ T1934] device veth0_vlan left promiscuous mode [ 497.528952][ T1934] device veth1_macvtap left promiscuous mode [ 497.534738][ T1934] device veth0_vlan left promiscuous mode