last executing test programs: 6.766246858s ago: executing program 2 (id=318): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000010000850000007d000000180100002020752500000000002020327b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) io_setup(0x4, &(0x7f0000000240)) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000100)={[0xfffffffffffffffd]}, 0x8) r2 = epoll_create1(0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000700000000000000fcff000095"], &(0x7f0000000380)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rcu_utilization\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioprio_set$pid(0x1, 0x0, 0x4004) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)={0x2, 0x1, 0x0, 0x2, 0x8, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x40}}, 0x0) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r2, &(0x7f0000000380)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r8, &(0x7f0000000540)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000cc0)={&(0x7f0000000100)='ext4_es_find_extent_range_exit\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000080)='ext4_es_find_extent_range_exit\x00', r0}, 0x10) openat$cgroup_ro(r1, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r9, 0x107, 0xf, &(0x7f0000000080)=0x2490, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) 5.863341763s ago: executing program 2 (id=324): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@noauto_da_alloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@dioread_lock}, {@norecovery}, {@discard}, {@lazytime}, {@noload}, {@usrquota}, {@noauto_da_alloc}]}, 0xfe, 0x54d, &(0x7f0000000400)="$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") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) pwrite64(r0, &(0x7f0000000280)='+', 0x1, 0x0) r1 = getpid() r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)={0x28, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'eth', 0x3a, 'gre0\x00'}}]}]}, 0x28}}, 0x0) r4 = socket(0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1800000000000000000000ddbcef8700850000001b00000000000000000000001c4e455009c675ef8c8817e6297e73e96eecbd1b6543763ceb2899f77bb0237750abe6682648f9ab7999cdeeddaf360733424374b9bf75fe7aa8154b8bdcc08000691b12971ca22e82311b460429546bf836723967a59a45c74bfac260895ed6111c82d93221564167c4fff92324391e8940a87331d682271a7b19704be552a4a6995268f4861765e088007eab75ba946638"], &(0x7f0000000040)='syzkaller\x00', 0x2}, 0x90) sendmsg$nl_route_sched(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000006c0)=@getqdisc={0x24, 0x26, 0xe6a2863ad7166219, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x7}}}, 0x24}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x26e1, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000c50000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='signal_generate\x00'}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f00000008c0)='block_plug\x00', r5}, 0x10) write$cgroup_type(r6, &(0x7f0000000000), 0x248800) sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) r7 = syz_open_procfs(r1, &(0x7f00000000c0)='net/nf_conntrack\x00') r8 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r8, 0x0) fallocate(r8, 0x0, 0x0, 0x1001f0) fallocate(r8, 0x3, 0x0, 0x10000) socket$inet_udplite(0x2, 0x2, 0x88) gettid() capset(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x56}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010100000000105801000100000000000109022400010000002009040000010300000009210000000122dc0109058903"], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r7, 0x65, 0x4, &(0x7f0000000380), &(0x7f00000003c0)=0x4) 4.40450672s ago: executing program 4 (id=335): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000010000850000007d000000180100002020752500000000002020327b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) io_setup(0x4, &(0x7f0000000240)) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000100)={[0xfffffffffffffffd]}, 0x8) r2 = epoll_create1(0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000700000000000000fcff000095"], &(0x7f0000000380)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rcu_utilization\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioprio_set$pid(0x1, 0x0, 0x4004) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)={0x2, 0x1, 0x0, 0x2, 0x8, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x40}}, 0x0) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r2, &(0x7f0000000380)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r8, &(0x7f0000000540)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000cc0)={&(0x7f0000000100)='ext4_es_find_extent_range_exit\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000080)='ext4_es_find_extent_range_exit\x00', r0}, 0x10) openat$cgroup_ro(r1, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r9, 0x107, 0xf, &(0x7f0000000080)=0x2490, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) 4.294145524s ago: executing program 0 (id=336): add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000540)={0x8, 0x441}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f00000001c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) ptrace(0xffffffffffffffff, r2) recvmmsg(r3, &(0x7f0000000500), 0x0, 0x2, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket(0x0, 0x3, 0x2) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/net\x00') write(r6, &(0x7f0000000000)="3c00000058001f000307f4f9002304000a04d65f0800010002010002170003800500000099db973b91aa057972513500b0406700912deb5b85932234", 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x21, 0x3, 0x428, 0x268, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private2, @local, [], [], 'geneve1\x00', 'syzkaller1\x00'}, 0x0, 0x220, 0x268, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'sit0\x00', {0x9, 0x0, 0x20, 0x0, 0x0, 0x8, 0x5}}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48}}, {{@ipv6={@empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'erspan0\x00', 'veth1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) write$cgroup_int(r1, &(0x7f0000000380), 0x101bf) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0x404}) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x200000}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f00000004c0)="e2f4ba85d5f3e88506", 0x9}], 0x1, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) io_setup(0x3, &(0x7f00000000c0)) syz_mount_image$erofs(&(0x7f0000000080), &(0x7f00000001c0)='./file2\x00', 0x2000000, &(0x7f0000000000)=ANY=[@ANYRES64=0x0], 0x7e, 0x1f0, &(0x7f00000012c0)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x114d091, 0x0) mount(0x0, 0x0, 0x0, 0x3a5832, 0x0) syz_open_pts(r1, 0x80) 3.912517289s ago: executing program 2 (id=337): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x1200, 0x0, 0x0, 0x1d}}, &(0x7f0000001200)=""/189, 0x1a, 0xbd, 0x1}, 0x20) 3.897418269s ago: executing program 1 (id=338): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000010000850000007d000000180100002020752500000000002020327b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) io_setup(0x4, &(0x7f0000000240)) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000100)={[0xfffffffffffffffd]}, 0x8) r2 = epoll_create1(0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000700000000000000fcff000095"], &(0x7f0000000380)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rcu_utilization\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioprio_set$pid(0x1, 0x0, 0x4004) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)={0x2, 0x1, 0x0, 0x2, 0x8, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x40}}, 0x0) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r2, &(0x7f0000000380)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r8, &(0x7f0000000540)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000cc0)={&(0x7f0000000100)='ext4_es_find_extent_range_exit\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000080)='ext4_es_find_extent_range_exit\x00', r0}, 0x10) openat$cgroup_ro(r1, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r9, 0x107, 0xf, &(0x7f0000000080)=0x2490, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) 3.782253934s ago: executing program 2 (id=339): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) getsockopt$inet_buf(r1, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x24b) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x24b) r2 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x2, 0x1, 0x0, 0x10, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x0, 0xffff}, {0x6}, [@mbim_extended={0x8, 0x24, 0x1c, 0x0, 0x0, 0x4}]}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x2, &(0x7f0000000280)=ANY=[@ANYBLOB="85000000860000009500fd9f000000008a479a9cc9ca135552516c6a61eb9c85eee435df8b397697a17981c301f2daa876d6451fb05899ab4c4445e05e9cc341935f0e2a3f2635144f4d8cc4e6f88b6c82558daddf9e1e98e5ae70c92421f387eb8eec8dbcdbbbf5abac304dca2e178ee7726db7371a930700cc72227eefaf8153637da6df60a30c40e799da2cacbee549fc544ecd2709c32be5d21ac5f44f026cbf754ced8e486cbf25c987919562"], &(0x7f00000000c0)='GPL\x00', 0x80000005, 0xc2, &(0x7f00000009c0)=""/194, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x32}, 0x80) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) r5 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r5, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES16], 0x1) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000080)=0x7) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000400)={@private0={0xfc, 0x2}, 0x5, r6}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000440)={0x1, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x15, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000ae0100000000000000037702f799650000"], &(0x7f0000000080)='GPL\x00', 0x1f, 0xb6, &(0x7f0000000340)=""/182, 0x40f00, 0x0, '\x00', r6, 0xf, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x2000009, 0x2}, 0x8, 0x10, &(0x7f0000000400)={0x3, 0xa, 0xf25, 0x81}, 0x10, r7, r3}, 0x80) recvfrom$packet(0xffffffffffffffff, &(0x7f00000003c0)=""/4096, 0x1000, 0x2, &(0x7f0000000140)={0x11, 0x19, r6, 0x1, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}, 0x14) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 3.461330356s ago: executing program 4 (id=342): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@security={'security\x00', 0x4, 0x4, 0x3d0, 0xffffffff, 0x0, 0x1a8, 0xd0, 0xffffffff, 0xffffffff, 0x300, 0x300, 0x300, 0xffffffff, 0x7fffffe, 0x0, {[{{@ipv6={@dev, @ipv4={'\x00', '\xff\xff', @multicast1}, [], [], 'bridge_slave_1\x00', 'geneve0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x3}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x0, 0x0, 0x2}}}, {{@ipv6={@empty, @mcast1, [], [], 'geneve1\x00', 'macvlan0\x00'}, 0x0, 0x118, 0x158, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'syz0\x00'}}, @common=@ipv6header={{0x28}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x8, "d85a58008beaa5785dadc0384586ccc9f5c2ff5d0f5171d73a80be2cac2f"}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x430) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400ff0100000000000000000000000000010c00028005000100000000004700028005000100010000000600034000000000060005"], 0xe4}, 0x1, 0x0, 0x0, 0x4040110}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f0000000880)=ANY=[@ANYBLOB="2800000a4000004624c5618c22a5742d39bee51e9b650e503c92b60b4f6a9be25b36f050eb4911c5ac17b44f735b2884c7f573b91efb02e7cb79a1fd5ab33a97c64166658b9a0231286d4000000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000065090100000000006600000006000000180100002020702500000000002020207b9af8ff000000005d9100000000000037010000f8ffffffb702000008000000b70300000000ffff56000000060000002c93000000000000b5030000000000008500000076000000b7000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000300)='net/arp\x00') r5 = open(0x0, 0x0, 0x0) open(&(0x7f0000000780)='./file0\x00', 0x80001, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x0) lseek(r4, 0x4f, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYRES32=0x0, @ANYBLOB="000000000000000018000d80140001801000020000000081000000000000000008"], 0x40}}, 0x0) gettid() sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001000f24f656f00000000000000000400", @ANYRES32=0x0, @ANYBLOB="000000000000000008000d000000000008001300", @ANYRES32=0x0, @ANYBLOB], 0x30}}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000002840)={'syzkaller1\x00'}) r6 = socket(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$WG_CMD_GET_DEVICE(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a40)=ANY=[@ANYBLOB="280000004c390783510f98822a95ba4fd253fdd773f48dc43f0020b75cab0194579475a91b8499274299736cf760c1a13d4a86511466c923ccc6e895e7003575102f6e24f42b76b036c12f7ed5c7b8a715f72c73a3a3e07142ceed6f33765ce031580aea6417fd1b2149b8e32caaed7a6a65fa49994a4c0b4bd94b950e886796ea5cb9a416047843d12d0064a3f464bea93a154b941d5d28511c40a46f3f7839e4c50992633f599126d89d441ecf7629742f3af500000000000000", @ANYRES16=r10, @ANYBLOB="1b030000000000000000000000001400020077673100"/34], 0x28}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}, @TCA_INGRESS_BLOCK={0x8}]}, 0x34}}, 0x0) socket(0x10, 0x3, 0x0) r11 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) socket$nl_generic(0x10, 0x3, 0x10) 3.3672813s ago: executing program 0 (id=343): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r1 = dup(r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x8001000d}, 0x90) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'wlan1\x00'}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)={0xcc, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @local}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x38, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @empty}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @loopback}]}]}, 0xcc}}, 0x0) socket$packet(0x11, 0xa, 0x300) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000004c0), &(0x7f00000005c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000010000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000725e850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl(r9, 0x1, &(0x7f0000000580)="e1426d90c4936c6085794d0a540a3b612ffdd7c7bdb024101e52286b42b15a70b172ae670df19f8491a693a37691d9f5bb5b617300911f") r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffff11a3}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2610054c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {0x7, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0xfffffffe}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x480c0) pwrite64(r5, &(0x7f0000000180)="ac423e927038a7b0e14b614d358854a41bbd0f0822a0b6851a6166a7bbf05cb540acfd38a14b9326f57966b93c350642d9623f71f9c6c0c190ea1a1efe3991ec7ed86706ff079a4bd2ac4abe3226515d1e4d136b34f27300edad11fd2d8eecacc8415366d911d5695445a4c6ed98d414dc9ab0", 0x73, 0x800) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$smc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r11, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x30, r12, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x48010}, 0x0) r13 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x2, 0x2, 0xa7, 0x7fff, 0x2f10, r1, 0x9, '\x00', 0x0, r1, 0x2, 0x5, 0x2}, 0x2b) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r13, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000201000085000000430000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r14 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000300)='kfree\x00', r14}, 0x10) socket$inet(0x2, 0x4, 0xfffffffd) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x4c, r3, 0x300, 0xfffffffc, 0x25dfdc01, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x78}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x30}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_MESH_ID={0xa}]}, 0x4c}}, 0x0) pipe(&(0x7f0000000440)) 3.298377412s ago: executing program 4 (id=344): capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000480)={[0xfffffffffffffffd]}, 0x0, 0x8) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) getpid() r2 = socket$netlink(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_CAP_ACK(r2, 0x10e, 0xa, &(0x7f0000000300)=0x1, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) r4 = openat(r3, &(0x7f00000000c0)='./file0\x00', 0x6a1c2, 0x50) faccessat(r3, &(0x7f0000000000)='./file0\x00', 0x5) r5 = socket$igmp6(0xa, 0x3, 0x2) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="40000001000000080000000000000000020000082cea0180fe00028005000100000000000200000000000000e0000001080002009f00000006000340000000006a5beae4e8327e8c1ac17068c726df4184e9566241f8a0b2b1a92bfb5b4942d285653ab351cdf463e740b7be49b83f2b715cc293636ba3444eb0229e440800dac11b1963d85872acac1e1418ed1701d625cf4488ff19ac599ebecebe3b6cb25370c46143b5365140df05b693dcf625673c803212f29b26d175329d231f58579ced47f6bb2a"], 0x40}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@private2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {0xfffffffffffffffd}, {}, 0x0, 0x0, 0x2}, {{@in6=@loopback}, 0x0, @in=@remote}}, 0xe8) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000001240)={0x3, &(0x7f0000001200)=[{0x81}, {0xc}, {0x6}]}) socket$inet(0x2, 0x1, 0x7) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000680)='./file0\x00', 0x8049, &(0x7f00000006c0)=ANY=[@ANYRES16=r4, @ANYRES8=r0], 0x2, 0x2aa, &(0x7f00000002c0)="$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") bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r7}, 0x10) r8 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x802) write$evdev(r8, &(0x7f0000000000), 0x100000008) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r9, 0x0) 3.189996566s ago: executing program 0 (id=346): sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000400)={0x4c, 0x0, 0x300, 0x74bd2d, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xd77}, @NL80211_ATTR_STA_PLINK_STATE={0x5}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x1d, 0x13, [{0x48, 0x1}, {0x60, 0x1}, {0x16, 0x1}, {0x30}, {0x16}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x1b, 0x1}, {0x1}, {}, {0x16}, {0x24}, {0x16, 0x1}, {0x48, 0x1}, {0x6}, {0xb}, {0x48, 0x1}, {0x5, 0x1}, {0x5}, {0x1}, {0x36}, {0x18}, {0x3}, {0x6}]}, @NL80211_ATTR_STA_VLAN={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x2400c000) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0x0, &(0x7f00000003c0)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000580)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ftruncate(r2, 0x8000000000000004) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000001c0)=0x1) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000170000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000005c0)={r0, r3, 0x0, 0x1, &(0x7f0000000500)='\x00'}, 0x30) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, 0x0, 0x4004810) creat(&(0x7f0000000300)='./bus\x00', 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='map_files\x00') r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f00000000c0)=ANY=[@ANYBLOB='-', @ANYRESOCT], 0x118) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x5, 0x8010, r6, 0x0) openat$cgroup_netprio_ifpriomap(r5, &(0x7f0000000000), 0x2, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000680)="044aac2f202c5feda71eab039a57a93088fdcce4efe28aacd39e45b7fd0ff40649db61833e5f08c68fc4887c001a2b00aa77e87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a3960a9758a78567a07386553835c661f4110adba358afd8b404ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a23450333", 0xa2, 0x24000004, &(0x7f0000b63fe4)={0xa, 0x2, 0xffff7ffd, @dev={0xfe, 0x80, '\x00', 0x3b}}, 0x1c) shutdown(r4, 0x1) recvmsg(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)}, 0x40000110) r7 = creat(0x0, 0x0) sendmsg$IPSET_CMD_FLUSH(r7, &(0x7f0000000640)={&(0x7f0000000340), 0xc, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYRESOCT], 0x2c}, 0x1, 0x0, 0x0, 0x4000901}, 0x44050) ftruncate(r7, 0x1208200) 2.679102066s ago: executing program 1 (id=349): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000010000850000007d000000180100002020752500000000002020327b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) io_setup(0x4, &(0x7f0000000240)) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000100)={[0xfffffffffffffffd]}, 0x8) r2 = epoll_create1(0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000700000000000000fcff000095"], &(0x7f0000000380)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rcu_utilization\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioprio_set$pid(0x1, 0x0, 0x4004) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)={0x2, 0x1, 0x0, 0x2, 0x8, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x40}}, 0x0) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r2, &(0x7f0000000380)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r8, &(0x7f0000000540)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000cc0)={&(0x7f0000000100)='ext4_es_find_extent_range_exit\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000080)='ext4_es_find_extent_range_exit\x00', r0}, 0x10) openat$cgroup_ro(r1, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r9, 0x107, 0xf, &(0x7f0000000080)=0x2490, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) 2.272669322s ago: executing program 3 (id=350): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @local}, 0xc) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @private=0x4}, @address_request}}}}, 0x0) 2.202271895s ago: executing program 3 (id=351): r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) write$binfmt_elf32(r0, &(0x7f00000008c0)=ANY=[], 0x4b0) unshare(0x400) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x4) fadvise64(r1, 0x0, 0x0, 0x2c906f7b00000003) unshare(0x400) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x1a9a81) ioctl$USBDEVFS_CONTROL(r2, 0x8004551a, 0x0) close(r0) syz_mount_image$erofs(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00058639aa6f0bfbe4b28434ef119376977b00fffbcec7a5fc1f5a72d4fe24156a9f971990e4f372b7"], 0x0, 0x17d, &(0x7f0000001ac0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000b80)='./bus\x00') stat(&(0x7f00000002c0)='./file2\x00', &(0x7f0000000380)) r3 = open(&(0x7f0000000000)='./bus\x00', 0x16d43e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r3, 0xffffe000) io_setup(0x7f, &(0x7f0000000100)=0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r2, 0x8004f50e, &(0x7f0000000340)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000080)='syzkaller\x00'}, 0x90) syz_emit_ethernet(0xee, &(0x7f0000000200)={@dev, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x38}, @void, {@ipv4={0x800, @generic={{0x1b, 0x4, 0x2, 0x1, 0xe0, 0x67, 0x0, 0x81, 0x6c, 0x0, @local, @rand_addr=0x64010101, {[@timestamp_prespec={0x44, 0xc, 0xb1, 0x3, 0x7, [{@multicast2, 0x7f}]}, @cipso={0x86, 0x4a, 0x3, [{0x7, 0x12, "e39d63392e1dc0f417a89d7811947666"}, {0x0, 0xc, "0b8209a1f799054730dd"}, {0x1, 0x9, "863ed544e355b7"}, {0x2, 0x12, "c80168a4c6d67d327b577c9e9b144503"}, {0x0, 0x6, "20638e51"}, {0x1, 0x5, "c99f26"}]}]}}, "237be30a5fb8bb3c919bc20bbde8decf23f4f487911523e1979647abb6cdd3cad43b4d0eec14246eea1179925e185413c46c7095ba7e8a94ca35a1c44c76399988e14b0e8af9934e5810acc314c1e6848e5258651d556bb3270815d6d2e9dcdddc6230c2d410e83ffac1bac75e68b0894f8f96ac"}}}}, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x19f, &(0x7f0000000400)={[{@sysvgroups}, {@noblock_validity}, {@min_batch_time={'min_batch_time', 0x3d, 0x82f}}, {@grpquota}, {@debug}, {@debug}, {@grpid}]}, 0x80, 0x542, &(0x7f00000027c0)="$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") mount(0x0, &(0x7f00000001c0)='.\x00', 0x0, 0x10f482a, 0x0) r5 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r5, 0x7, 0x0, 0x0, 0x0) r6 = fsopen(&(0x7f0000000040)='ramfs\x00', 0x0) io_submit(r4, 0x2, &(0x7f0000000380)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000080)="7f", 0x1}, &(0x7f0000000140)={0x0, 0x0, 0x2, 0x1, 0x0, r6, 0x0}]) 2.201989955s ago: executing program 4 (id=352): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000010000850000007d000000180100002020752500000000002020327b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) io_setup(0x4, &(0x7f0000000240)) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000100)={[0xfffffffffffffffd]}, 0x8) r2 = epoll_create1(0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000700000000000000fcff000095"], &(0x7f0000000380)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rcu_utilization\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioprio_set$pid(0x1, 0x0, 0x4004) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)={0x2, 0x1, 0x0, 0x2, 0x8, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x40}}, 0x0) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r2, &(0x7f0000000380)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r8, &(0x7f0000000540)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000cc0)={&(0x7f0000000100)='ext4_es_find_extent_range_exit\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000080)='ext4_es_find_extent_range_exit\x00', r0}, 0x10) openat$cgroup_ro(r1, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r9, 0x107, 0xf, &(0x7f0000000080)=0x2490, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) 1.941906335s ago: executing program 3 (id=353): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file0\x00', 0x1000801, &(0x7f0000000000)=ANY=[@ANYRES16=0x0], 0x0, 0x1ca, &(0x7f00000008c0)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r0 = getpid() write$P9_RATTACH(0xffffffffffffffff, &(0x7f00000001c0)={0x14, 0x69, 0x2, {0x80, 0x5, 0x1}}, 0x14) (async) sched_setaffinity(0x0, 0x0, 0x0) (async) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r1) (async) r2 = creat(&(0x7f0000000340)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB="2be1"]) syz_genetlink_get_family_id$fou(&(0x7f0000000200), r1) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000240)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) (async) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt(r5, 0x40, 0x0, &(0x7f0000000380)="3321b7e26a1a06c08063875994af93944ceb35f62d364c53344b36682300113f13bdb1bc3f67e93bc59417218c41b4ee524e8308271e0ab146e340f023695212d5e2c3b722fb4533d6118c0db73c4f4c41d24a3baf4931fc959b16eb2a1baa", 0x5f) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) futex(&(0x7f000000cffc), 0xb, 0x0, &(0x7f00000005c0), &(0x7f0000048000), 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) (async) chdir(&(0x7f0000000140)='./file0\x00') syz_mount_image$tmpfs(0x0, &(0x7f0000000300)='./file0\x00', 0x1021085, 0x0, 0x4, 0x0, &(0x7f0000000000)) (async) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) 1.833457789s ago: executing program 3 (id=354): add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000540)={0x8, 0x441}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f00000001c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) ptrace(0xffffffffffffffff, r2) recvmmsg(r3, &(0x7f0000000500), 0x0, 0x2, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket(0x0, 0x3, 0x2) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/net\x00') write(r6, &(0x7f0000000000)="3c00000058001f000307f4f9002304000a04d65f0800010002010002170003800500000099db973b91aa057972513500b0406700912deb5b85932234", 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x21, 0x3, 0x428, 0x268, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private2, @local, [], [], 'geneve1\x00', 'syzkaller1\x00'}, 0x0, 0x220, 0x268, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'sit0\x00', {0x9, 0x0, 0x20, 0x0, 0x0, 0x8, 0x5}}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48}}, {{@ipv6={@empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'erspan0\x00', 'veth1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) write$cgroup_int(r1, &(0x7f0000000380), 0x101bf) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0x404}) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x200000}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f00000004c0)="e2f4ba85d5f3e88506", 0x9}], 0x1, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) io_setup(0x3, &(0x7f00000000c0)) syz_mount_image$erofs(&(0x7f0000000080), &(0x7f00000001c0)='./file2\x00', 0x2000000, &(0x7f0000000000)=ANY=[@ANYRES64=0x0], 0x7e, 0x1f0, &(0x7f00000012c0)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x114d091, 0x0) mount(0x0, 0x0, 0x0, 0x3a5832, 0x0) syz_open_pts(r1, 0x80) 1.759739002s ago: executing program 1 (id=355): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x3, 0x8, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$tmpfs(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r3 = accept4(0xffffffffffffffff, &(0x7f0000000400)=@un=@abs, &(0x7f0000000200)=0x80, 0x800) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000540)={0x0, @dev, @private}, &(0x7f0000000680)=0xc) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f0000000780)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x80, r4, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}]}]}, 0x80}, 0x1, 0x0, 0x0, 0xc0}, 0x80) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, &(0x7f0000000080)=@v2={0x2, @adiantum, 0xfe73b24727ebbfcb, '\x00', @b}) r6 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000100)={@empty}, 0x14) getsockopt(r6, 0xb4b7, 0x9, &(0x7f0000000300)=""/232, &(0x7f00000001c0)=0xe8) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(r7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r9, &(0x7f00000000c0)=ANY=[@ANYBLOB="1e0306003c5c9801288463ff0f46001404"], 0xffdd) r10 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$sock_timeval(r10, 0x1, 0x14, &(0x7f0000abaff9)={0x77359400}, 0x10) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c00000010000100"/20, @ANYRES32=0x0, @ANYBLOB="00000000f53309f71400030065727370616e3000000000000000000008000d00ffffff"], 0x3c}}, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000006a000107000000000000ec21a0a7000000e10000040001"], 0x1c}}, 0x40000) 1.351053218s ago: executing program 1 (id=356): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) unshare(0x22020400) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x900}) 1.330386889s ago: executing program 0 (id=347): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000010000850000007d000000180100002020752500000000002020327b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) io_setup(0x4, &(0x7f0000000240)) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000100)={[0xfffffffffffffffd]}, 0x8) r2 = epoll_create1(0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000700000000000000fcff000095"], &(0x7f0000000380)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rcu_utilization\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioprio_set$pid(0x1, 0x0, 0x4004) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)={0x2, 0x1, 0x0, 0x2, 0x8, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x40}}, 0x0) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r2, &(0x7f0000000380)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r8, &(0x7f0000000540)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000cc0)={&(0x7f0000000100)='ext4_es_find_extent_range_exit\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000080)='ext4_es_find_extent_range_exit\x00', r0}, 0x10) openat$cgroup_ro(r1, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r9, 0x107, 0xf, &(0x7f0000000080)=0x2490, 0x4) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) 1.325695779s ago: executing program 4 (id=357): getcwd(&(0x7f0000000180)=""/178, 0xb2) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000a40)='cgroup.freeze\x00', 0x26e1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xf40, 0x0) mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2001095, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) r2 = memfd_create(&(0x7f0000000380)='sec\x18rity.selinux\x00\xab)Jr\x12k\xf4q\xf5\x06Z:y5\x06\x97\xc2&\x15\xdeq+\x94wN\xce\xac\x83\x9c\xaf\t\xc9\xebo\xda\xb0\xd6N\x80G\xcf\x15w\xe4\x0f\xfd\x00=p\xec#\xbe\x1a\xbe\x8c\xc4\x83s\xc3N\xa9>d\x9e\x14\x96\xfa\xfe\xfa.\xebv5\x97\xed\xcb\x10\xb3_\xe7BN\xcb \xe7\x9d\x8ep1e\xfe\xd7\xbf\xb1\xcf\xb0\x97\xd8B\x18\xc1\xd2\x0e\t\x92\xf1\\R\xdcX\x17\x97\xe3J\xf4\xff', 0x0) pwrite64(r2, &(0x7f000003bfff)='/', 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r2, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x4c000, 0x0) listen(r1, 0x6) syz_emit_ethernet(0x4a, &(0x7f0000000340)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x3, 0x12, &(0x7f0000000c80)=ANY=[@ANYBLOB="1800000004000000000000000900000018110000", @ANYRES32, @ANYBLOB="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"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0xc9, &(0x7f00000003c0)=""/201}, 0x90) syz_emit_ethernet(0x4e, &(0x7f0000000c00)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd600a843500180600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22446253ff59962a7a67afd8d0603b624e699662b34b5e317e311d568cca0ac4a4e97cab", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="600000009078000003030000"], 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x1c08734, &(0x7f0000000900)={[{@dioread_nolock}, {@noload}, {@grpquota}, {@minixdf}, {@grpquota}, {@errors_continue}, {@sb={'sb', 0x3d, 0x4}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x1}}, {@grpquota}, {@abort}, {@commit={'commit', 0x3d, 0x7}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000000}}, {@init_itable_val={'init_itable', 0x3d, 0xffffffffffffffff}}]}, 0x1, 0x486, &(0x7f0000000440)="$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") ioctl$TUNSETOFFLOAD(r0, 0x40086607, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) set_robust_list(&(0x7f0000000dc0)={&(0x7f0000000280)={&(0x7f0000000240)}, 0x29c5, &(0x7f0000000300)={&(0x7f00000002c0)}}, 0x18) r4 = openat$cgroup_subtree(r3, &(0x7f0000000080), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[@ANYBLOB='+pids'], 0x6) syz_mount_image$erofs(&(0x7f0000000080), &(0x7f00000001c0)='./file0\x00', 0x21688a0, &(0x7f0000000600)=ANY=[@ANYBLOB="00ea2eb34e7ea51c9446c55a2d1e0be39af9faf44ad59cb6ad1c94490d970e811439edddc71c9b18946b559ce53bee0a1abe562fc3f3898e5826eda1962cf6e3c4c0ade52151923a70b46eacfc1aabebcf156e549e884bcabc1333f344f31cd30cd93cb2814e0dbc24a7a107e295e86e09283c825fe177c89c6385f68f2c843cffffffff15539bab6142ceed9265ba989d1e283fc4ffc83f3a7eb1b9a513076c746823e656ad78f3b5a336cdbd83dad59e0debb36b4ea5e658e253f01637cc03f704a08019f95b92fffffffff8dd21552d6967ab1b01e5d52a5793eb179deee4572770a5197127b090287bca2a4eaa1705b42c16968d020ed3ba3cc8000000657ea095f152b1b6a1e6ad8d24ad17f649ccc23d4ecb"], 0x1, 0x177, &(0x7f0000000240)="$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") chdir(&(0x7f0000000100)='./file0\x00') r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r5, 0x0) write$cgroup_subtree(r4, &(0x7f0000000500)={[{0x2b, 'pids'}, {0x2b, 'cpu'}]}, 0xb) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000004680)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2c, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0xfffffffe, 0x0, 0x0, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000e00)=ANY=[@ANYBLOB="100001000800000005000000000000000000000900001800005f4058c267ec3423c828e762099baa6a202c2c0e59b06995e02a783454a28fe0677971cae9bce488c90afde304fbf68f86fb9d7bfd0bda518ca846a1b9ff78fed4aa1c7c07abf838ee57049e153ebe4dd35999c025a6b4ee3fd52220a48f7b8ac33124e38d5e77dd44ac838ea6dc63cbfa1f5fd38870244a5b91c3e9faabc464521508127e54a5e2121355b8a5d380b43a926064c435733df4259d6311421d500e99040a7002b87701dd77823175caef70b7842d6b62dd8e5f21c355a7c36cf23474748c14db6c56e43118b8f2f48a9f8da7360b"], 0xffffffffffffffff, 0x29, 0x0, 0x1}, 0x20) 1.266049831s ago: executing program 1 (id=358): socket(0x10, 0x3, 0x0) (async) r0 = socket(0x10, 0x3, 0x0) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x40, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x25, 0x5586, &(0x7f00000079c0)="$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") r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x800, 0x0, 0x1, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0xff, 0x9}, 0x20) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0xff, 0x9}, 0x20) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000300)={@local}, &(0x7f00000004c0)=0x37) setsockopt$MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000000)={{0xa, 0x4e22, 0x5, @dev={0xfe, 0x80, '\x00', 0x1b}}, {0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80000000}, 0x0, {[0x82, 0x8, 0x0, 0x8, 0x0, 0x2]}}, 0x5c) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e21, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c) (async) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e21, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x7, 0x2, 0x1, 0x0, 0x274, 0x3ff}, 0x20) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x7, 0x2, 0x1, 0x0, 0x274, 0x3ff}, 0x20) sendto$inet6(0xffffffffffffffff, &(0x7f0000000500)="7804ca2b7bdef249166a19961bb0c3c49194a0b2ef46c3aeee3d32ae100460cc9b6f692604205b9459b6cdf23b9546369ec3721efc90a891a1a71d4f497bd109a995ff093dc78cd9aae8c2ca0d7f35210d323e95ebf1ab6f5b8697d9d5730bbad7956de87a55326a4b296001c05c23", 0x6f, 0xa0f15a6d21a68a81, &(0x7f00000000c0)={0xa, 0x4e23, 0x4, @local, 0x7f}, 0x1c) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000), 0x10) (async) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000), 0x10) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000480)) (async) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000480)) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, 0x0) r2 = socket(0x10, 0x0, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f0000000600)) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000640), 0xc, &(0x7f0000000a80)={&(0x7f00000008c0)=ANY=[], 0x174}}, 0x0) accept4(0xffffffffffffffff, &(0x7f0000000000)=@caif=@rfm, &(0x7f0000000680)=0x80, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000001340)=@raw={'raw\x00', 0xc01, 0x3, 0x12e8, 0x1108, 0x5002004a, 0x12, 0x1108, 0x6800, 0x1250, 0x3c8, 0x3c8, 0x1250, 0x3c8, 0x2, 0x0, {[{{@ip={@multicast1, @multicast1, 0x0, 0x0, 'veth1_to_batadv\x00', 'macvlan0\x00'}, 0x60, 0x10a0, 0x1108, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x0, './cgroup/syz0\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0xb, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}, {{@ip={@remote, @remote, 0x0, 0x0, 'team_slave_0\x00', 'veth1_vlan\x00'}, 0x0, 0xe0, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@set={{0x40}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x1348) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)=@RTM_GETMDB={0x18, 0x56, 0x400}, 0x18}}, 0x0) 914.152465ms ago: executing program 3 (id=359): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000010000850000007d000000180100002020752500000000002020327b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) io_setup(0x4, &(0x7f0000000240)) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000100)={[0xfffffffffffffffd]}, 0x8) r2 = epoll_create1(0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000700000000000000fcff000095"], &(0x7f0000000380)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rcu_utilization\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioprio_set$pid(0x1, 0x0, 0x4004) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)={0x2, 0x1, 0x0, 0x2, 0x8, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x40}}, 0x0) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r2, &(0x7f0000000380)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r8, &(0x7f0000000540)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000cc0)={&(0x7f0000000100)='ext4_es_find_extent_range_exit\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000080)='ext4_es_find_extent_range_exit\x00', r0}, 0x10) openat$cgroup_ro(r1, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r9, 0x107, 0xf, &(0x7f0000000080)=0x2490, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) 714.774502ms ago: executing program 3 (id=360): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000180)={[{@nombcache}, {@debug}, {@norecovery}, {@grpid}, {@norecovery}]}, 0x9, 0x61b, &(0x7f0000000800)="$eJzs3c9rHGUfAPDvTDY/mrzvm7S8vK+92IBIC9qkSVspItjitZT64+YpNmmpTZvSRDS1YAr1oogXD4InD9b/QgtePXj14MWDSCGI9GCl2pXZzKa72Wyy+bG7SfbzgUmemcnO852Eb55nn31mJoCONZx9SSMORsT1JGKwYl8h8p3DSz/34PdbF7IliWLx9d+SuPVBslB5rCT/PpC/+O/BSH5IIw501dY7O3/zysT09NSNfH107ur10dn5m0cvX524NHVp6tr4C+OnTp44eWrs2JbOr1BRPnvn7XcHPzr35ldfPErGvv7pXBKn43EeW3ZeK1/bu6Was9/ZcBSXPHyyNS19PbXFY+8UfwxW/44zycoN7FgX8xzpjoj/x2B0Vfw1B+PDV9saHNBUxSTKbRTQcZL187+7dlNfc4IBWqjcDyi/t1/tfXCttMm9EqAVFs8sDQAs5X53RJTzv7A0Nhh9pbGB/gdJ1ThPEhFbG5lbktXx/Xfn7mRL1BmHA5pj4XZ5lHtl+5+UcnMo+kpr/Q/SqvxPK5Zs+2ubrH94xbr8h9ZZuB0RT+Xtf09sKP+Tivx/a5P1y38AAAAAAADYPvfORMTzq83/S5fn//SsMv9nICJOb0P963/+l97PC8k2VAdUWDwT8VLN/N+/KmcHD3Xln/P/uzQfoDu9eHl66lhE/CcijkR3b7Y+Vn3YqgnCRz858Hm9+ivn/2VLVn95LmB+qPuFFRfiTk7MTWzP2UNnW7wd8bA0//dQvqV6/k/W/ic17f/Hr2QJfr3BOg48e/d81YZfnvx7WD//gWYpfhlxeNXrf550t5O1788xWuoPjJZ7BbWefv/Tb+rVL/+hfbL2v3/t/O9NKu/XM7ux4/dExPH5QrHe/s32/3uSN7rKx8+8NzE3d2Msoic5W7t9fGMxw15VzodyvmT5f+SZtcf/lvv/FXm4LyIWGqzzf48Hfq63T/sP7ZPl/+Ta7f9Qdfu/0UJfjN8d+ja/xViN8w21/ydKbfqRfIvxP6hUez+ORhO0LeECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwC6XRsS/IklHlstpOjISMRAR/43+dHpmdu65izPvXJvM9lU//39waT0pP/9/qGJ9fMX68YjYHxGfde0rrY9cmJmebPfJAwAAAAAAAAAAAAAAAAAAwA4xULrmv9i78vr/zK9d7Y4OaLpC/l2+Q+cpbPqVxd5tDQRouc3nP7DbNZ7/3U2NA2i9+vn/8FGxpKXhAC2k/w+da5P57+MC2AO0/9CpGhzT62t2HEA7NNz+LzY3DgAAAAAAYFvsP3TvxyQiFl7cV1oyPfk+k/1hb0vbHQDQNubwQucqzLQ7AqBdvMcHkuXSn6te7F9/9n/SnIAAAAAAAAAAAAAAgBqHD7r+HzpVGrHGI7zN7Ye9bI3r/1dLfrcLgD2k/qM/Gmn7Ez0E2MW8xwfWa8dd/w8AAAAAAAAAAAAAO0DfzSsT09NTN2bnd1/h5Z0RxsYKCxM7IoxtLTxe72fKj5nf2JG7I2JnnGCrC+VbcLQxjDb+TwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKr8EwAA//8EDy29") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20) 467.550572ms ago: executing program 1 (id=362): socket(0x200000000000011, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0xfecc) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000300)={0x2, 0x0, @multicast1}, 0x10) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x5) socket(0x10, 0x3, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0xe, 0x0, 0x0, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x90) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000040)=0x3a, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xa4e2649f55398085) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000021c0)=ANY=[], &(0x7f0000000480)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) bind$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) ioctl$KVM_CREATE_VM(r0, 0xae03, 0x3c) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYRES16=0x0, @ANYBLOB], 0x88}, 0x1, 0x0, 0x0, 0x1000}, 0x40) 447.874933ms ago: executing program 4 (id=363): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x0, @initdev={0xac, 0x1e, 0x4, 0x0}}, 0x4, 0x0, 0x0, 0xffff}}, 0x26) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r3, 0x4068aea3, &(0x7f0000000140)={0xa4, 0x0, 0x1}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x1426, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r5) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001d40), r5) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000001d80)={0x1c, r6, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}]}, 0x1c}}, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000000000)={0x0, 0xe, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x0, '\x00', 0x40}) r7 = userfaultfd(0x80000) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000300)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x8}) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_emit_ethernet(0x4c, &(0x7f0000000080)={@local, @dev, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "014100", 0x16, 0x11, 0x0, @remote, @local, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x8, 0x0, 0x0, 0x2, 0x0, @val=0xff7f0000}, "2775a7399c79"}}}}}}}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00', r8}, 0x10) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r12, &(0x7f00000001c0)='4', 0x1) tee(r11, r10, 0x3, 0x0) rt_sigaction(0xd, &(0x7f0000000240)={&(0x7f0000000340)="36d2d8f2438395ff1f965a00c4c1185c840561ee0000c4033d6ce411c4816a51242516000000c4022db6545c006aa1c4e1fd5b1664660fd054060aa89ef3ae7864640f2a6cda00c4f0450fbb3e2e1129", 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000280)) close(r9) syz_genetlink_get_family_id$mptcp(&(0x7f0000000580), r1) socket$inet6_udplite(0xa, 0x2, 0x88) 375.301096ms ago: executing program 0 (id=364): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0x4000000, 0x0, 0x0) 162.429924ms ago: executing program 0 (id=365): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x200000, &(0x7f0000000180), 0xfc, 0x57c, &(0x7f00000013c0)="$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") r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x42, 0x0) mount$fuse(0xc0ed0000, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0']) 141.787145ms ago: executing program 2 (id=366): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x3, 0x8, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$tmpfs(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r3 = accept4(0xffffffffffffffff, &(0x7f0000000400)=@un=@abs, &(0x7f0000000200)=0x80, 0x800) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000540)={0x0, @dev, @private}, &(0x7f0000000680)=0xc) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f0000000780)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x80, r4, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}]}]}, 0x80}, 0x1, 0x0, 0x0, 0xc0}, 0x80) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, &(0x7f0000000080)=@v2={0x2, @adiantum, 0xfe73b24727ebbfcb, '\x00', @b}) r6 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000100)={@empty}, 0x14) getsockopt(r6, 0xb4b7, 0x9, &(0x7f0000000300)=""/232, &(0x7f00000001c0)=0xe8) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(r7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r9, &(0x7f00000000c0)=ANY=[@ANYBLOB="1e0306003c5c9801288463ff0f46001404"], 0xffdd) r10 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$sock_timeval(r10, 0x1, 0x14, &(0x7f0000abaff9)={0x77359400}, 0x10) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c00000010000100"/20, @ANYRES32=0x0, @ANYBLOB="00000000f53309f71400030065727370616e3000000000000000000008000d00ffffff"], 0x3c}}, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000006a000107000000000000ec21a0a7000000e10000040001"], 0x1c}}, 0x40000) 0s ago: executing program 2 (id=367): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000010000850000007d000000180100002020752500000000002020327b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) io_setup(0x4, &(0x7f0000000240)) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000100)={[0xfffffffffffffffd]}, 0x8) r2 = epoll_create1(0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000700000000000000fcff000095"], &(0x7f0000000380)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rcu_utilization\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioprio_set$pid(0x1, 0x0, 0x4004) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)={0x2, 0x1, 0x0, 0x2, 0x8, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x40}}, 0x0) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r2, &(0x7f0000000380)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r8, &(0x7f0000000540)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000cc0)={&(0x7f0000000100)='ext4_es_find_extent_range_exit\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000080)='ext4_es_find_extent_range_exit\x00', r0}, 0x10) openat$cgroup_ro(r1, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r9, 0x107, 0xf, &(0x7f0000000080)=0x2490, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) kernel console output (not intermixed with test programs): red forwarding state [ 25.180055][ T353] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.186911][ T353] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.194023][ T353] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.200818][ T353] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.210939][ T352] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.217779][ T352] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.224894][ T352] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.231665][ T352] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.288020][ T107] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.295601][ T107] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.302759][ T107] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.309784][ T107] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.317450][ T107] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.324416][ T107] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.332739][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 25.340555][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.379306][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.387665][ T24] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.394481][ T24] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.402286][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.410366][ T24] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.417295][ T24] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.449359][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.488139][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.495946][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.504474][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 25.511823][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.519706][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 25.527150][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.534471][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 25.543160][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.551423][ T24] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.558269][ T24] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.565795][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 25.574337][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.582390][ T24] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.589217][ T24] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.596813][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.605104][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.613523][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 25.621733][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.629905][ T24] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.636736][ T24] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.644285][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.652411][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.660629][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 25.684571][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 25.693369][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.701471][ T356] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.708385][ T356] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.715564][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 25.723977][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.732027][ T356] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.738866][ T356] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.746210][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 25.754571][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.762562][ T356] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.769395][ T356] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.786512][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 25.794479][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.802493][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.810604][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.818425][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 25.825681][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.833163][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 25.841703][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.849961][ T107] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.856807][ T107] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.864241][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 25.884286][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 25.892797][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.901306][ T24] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.908171][ T24] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.922968][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.931998][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.952121][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.960378][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.968354][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.976561][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.004433][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.013117][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.022952][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.031835][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.040104][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 26.048041][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 26.055816][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 26.063865][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 26.103008][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.112343][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 26.121526][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.133496][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 26.141842][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 26.150198][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 26.158381][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.187986][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.195830][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 26.207429][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.215266][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 26.224843][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.258380][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.268034][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.276152][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 26.285678][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.295268][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.304742][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.313539][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.322167][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.368941][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.379548][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.389433][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.398607][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.407782][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.416200][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.425259][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.433851][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.442222][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.450609][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.474769][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.485034][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.503182][ T383] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 26.525355][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.557693][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.578961][ T397] binder: BINDER_SET_CONTEXT_MGR already set [ 26.611688][ T397] binder: 392:397 ioctl 4018620d 20000100 returned -16 [ 26.632138][ T402] usb usb8: usbfs: process 402 (syz.3.4) did not claim interface 0 before use [ 26.656944][ T393] netlink: 180 bytes leftover after parsing attributes in process `syz.4.7'. [ 26.677986][ T397] netlink: 180 bytes leftover after parsing attributes in process `syz.4.7'. [ 26.701849][ T393] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7'. [ 26.716623][ T397] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7'. [ 26.847656][ T412] ====================================================== [ 26.847656][ T412] WARNING: the mand mount option is being deprecated and [ 26.847656][ T412] will be removed in v5.15! [ 26.847656][ T412] ====================================================== [ 26.876433][ T107] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 27.017674][ T412] EXT4-fs (loop3): Mount option "data_err=ignore" incompatible with ext2 [ 27.065726][ T433] netlink: 104 bytes leftover after parsing attributes in process `syz.1.15'. [ 27.094578][ T434] cgroup: syz.4.13 (434) created nested cgroup for controller "memory" which has incomplete hierarchy support. Nested cgroups may change behavior in the future. [ 27.115471][ T434] cgroup: "memory" requires setting use_hierarchy to 1 on the root [ 27.157926][ T412] FAT-fs (loop3): Unrecognized mount option "dos1xfloppy.uni_xlate=" or missing value [ 27.187159][ T107] usb 3-1: Using ep0 maxpacket: 16 [ 27.269875][ T437] EXT4-fs (loop1): mounted filesystem without journal. Opts: user_xattr,noquota,barrier=0x0000000000000002,jqfmt=vfsv1,block_validity,max_dir_size_kb=0x00000000000007b1,stripe=0x0000000000000020,bsdgroups,max_batch_time=0x00000000000003fe,user_xattr,quota,,errors=continue [ 27.307304][ T107] usb 3-1: config 1 interface 0 altsetting 63 bulk endpoint 0x82 has invalid maxpacket 8 [ 27.338266][ T107] usb 3-1: config 1 interface 0 has no altsetting 0 [ 27.516790][ T107] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 27.538863][ T107] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.540138][ T454] netlink: 324 bytes leftover after parsing attributes in process `syz.3.20'. [ 27.560500][ T107] usb 3-1: Product: Э [ 27.564722][ T107] usb 3-1: Manufacturer: à  [ 27.582750][ T107] usb 3-1: SerialNumber: и [ 27.607071][ T389] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 27.676824][ T405] F2FS-fs (loop0): Test dummy encryption mode enabled [ 27.685011][ T405] F2FS-fs (loop0): invalid crc value [ 27.693377][ T405] F2FS-fs (loop0): Found nat_bits in checkpoint [ 27.731630][ T405] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 27.789070][ T469] sit: non-ECT from 172.30.0.4 with TOS=0x1 [ 27.795304][ T405] F2FS-fs (loop0): f2fs_fill_dentries: corrupted namelen=1025, run fsck to fix. [ 27.798916][ T469] Zero length message leads to an empty skb [ 27.829588][ T405] fscrypt: AES-256-CTS-CBC using implementation "cts(cbc-aes-aesni)" [ 27.961571][ T107] usblp 3-1:1.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 63 proto 3 vid 0x0525 pid 0xA4A8 [ 27.997693][ T486] xt_TCPMSS: Only works on TCP SYN packets [ 28.041377][ T107] usb 3-1: USB disconnect, device number 2 [ 28.082451][ T107] usblp0: removed [ 28.132929][ T486] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 28.267931][ T497] sch_tbf: burst 1399 is lower than device veth0_to_team mtu (1514) ! [ 28.446436][ T124] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 28.532316][ T510] netlink: 324 bytes leftover after parsing attributes in process `syz.1.33'. [ 28.544907][ T510] capability: warning: `syz.1.33' uses deprecated v2 capabilities in a way that may be insecure [ 28.680666][ T516] EXT4-fs (loop1): required journal recovery suppressed and not mounted read-only [ 28.853576][ T5] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 28.866951][ T23] kauditd_printk_skb: 82 callbacks suppressed [ 28.866961][ T23] audit: type=1400 audit(1719800705.129:158): avc: denied { append } for pid=144 comm="syslogd" name="messages" dev="tmpfs" ino=998 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 28.895427][ T23] audit: type=1400 audit(1719800705.129:159): avc: denied { open } for pid=144 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=998 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 28.918287][ T23] audit: type=1400 audit(1719800705.129:160): avc: denied { getattr } for pid=144 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=998 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 29.016594][ T124] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 29.027638][ T124] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 29.038579][ T124] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 29.051617][ T124] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 29.060542][ T124] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.079430][ T124] usb 4-1: config 0 descriptor?? [ 29.124978][ T493] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 29.236534][ T5] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 29.247856][ T5] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 29.257694][ T5] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 29.270890][ T5] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 29.279808][ T5] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.288745][ T5] usb 3-1: config 0 descriptor?? [ 29.398602][ T124] plantronics 0003:047F:FFFF.0001: unknown main item tag 0xd [ 29.410521][ T124] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 29.468926][ T124] plantronics 0003:047F:FFFF.0001: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 29.489408][ T23] audit: type=1400 audit(1719800705.749:161): avc: denied { write } for pid=531 comm="syz.0.38" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 29.529553][ T534] sch_tbf: burst 1399 is lower than device veth0_to_team mtu (1514) ! [ 29.556952][ T536] fuse: Bad value for 'user_id' [ 29.599066][ T23] audit: type=1400 audit(1719800705.859:162): avc: denied { read } for pid=492 comm="syz.3.25" name="rtc0" dev="devtmpfs" ino=870 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 29.622634][ T23] audit: type=1400 audit(1719800705.859:163): avc: denied { open } for pid=492 comm="syz.3.25" path="/dev/rtc0" dev="devtmpfs" ino=870 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 29.658402][ T541] 9pnet: Insufficient options for proto=fd [ 29.671526][ T124] usb 4-1: USB disconnect, device number 2 [ 29.677624][ T23] audit: type=1400 audit(1719800705.919:164): avc: denied { write } for pid=537 comm="syz.0.41" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 29.716691][ T18] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 29.726562][ T23] audit: type=1400 audit(1719800705.969:165): avc: denied { read write } for pid=542 comm="syz.3.42" name="uhid" dev="devtmpfs" ino=873 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 29.727455][ T18] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 29.757424][ T18] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 29.764850][ T18] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 29.768462][ T5] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 29.775772][ T18] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 29.779656][ T23] audit: type=1400 audit(1719800705.969:166): avc: denied { open } for pid=542 comm="syz.3.42" path="/dev/uhid" dev="devtmpfs" ino=873 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 29.800932][ T18] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 29.817740][ T18] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 29.825125][ T18] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 29.834986][ T5] plantronics 0003:047F:FFFF.0003: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 29.840806][ T18] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 29.855364][ T18] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 29.863095][ T18] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 29.880425][ T18] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 29.888316][ T18] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 29.895825][ T18] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 29.903617][ T18] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 29.911582][ T18] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 29.913733][ T544] loop3: p1 < > p2 p3 p4 < p5 > [ 29.919412][ T18] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 29.931489][ T18] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 29.939885][ T18] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 29.946832][ T544] loop3: p3 size 16744448 extends beyond EOD, truncated [ 29.947681][ T18] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 29.961592][ T18] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 29.968195][ T162] loop3: p1 < > p2 p3 p4 < p5 > [ 29.971626][ T18] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 29.976526][ T162] loop3: p3 size 16744448 extends beyond EOD, truncated [ 29.984033][ T18] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 29.995285][ T18] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 30.002949][ T18] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 30.012800][ T18] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 30.012847][ T544] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 30.020907][ T18] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 30.027053][ T544] IPv6: NLM_F_CREATE should be set when creating new route [ 30.027080][ T544] IPv6: NLM_F_CREATE should be set when creating new route [ 30.054250][ T18] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 30.058957][ T23] audit: type=1400 audit(1719800706.319:167): avc: denied { getopt } for pid=548 comm="syz.1.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 30.061757][ T18] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 30.089898][ T18] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 30.097714][ T18] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 30.105216][ T18] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 30.112561][ T18] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 30.120016][ T18] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 30.127445][ T18] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 30.134807][ T18] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 30.146118][ T18] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 30.157718][ T18] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 30.165677][ T18] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 30.173312][ T18] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 30.181161][ T18] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 30.188895][ T18] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 30.196146][ T18] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 30.209569][ T18] hid-generic 0000:0000:0000.0002: hidraw1: HID v0.00 Device [syz0] on syz0 [ 30.220610][ T18] usb 3-1: USB disconnect, device number 3 [ 30.278827][ T391] blk_update_request: I/O error, dev loop3, sector 2 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 30.282448][ T386] blk_update_request: I/O error, dev loop3, sector 1536 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 30.297868][ T391] blk_update_request: I/O error, dev loop3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 30.302541][ T386] blk_update_request: I/O error, dev loop3, sector 1536 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 30.313133][ T391] Buffer I/O error on dev loop3p1, logical block 0, async page read [ 30.325194][ T386] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 30.331291][ T391] blk_update_request: I/O error, dev loop3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 30.339121][ T386] blk_update_request: I/O error, dev loop3, sector 1537 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 30.351582][ T391] Buffer I/O error on dev loop3p1, logical block 0, async page read [ 30.362004][ T466] blk_update_request: I/O error, dev loop3, sector 7940 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 30.368427][ T391] blk_update_request: I/O error, dev loop3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 30.385513][ T467] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 30.391859][ T351] blk_update_request: I/O error, dev loop3, sector 1536 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 30.412624][ T355] __loop_clr_fd: partition scan of loop3 failed (rc=-16) [ 30.424467][ T529] F2FS-fs (loop4): Test dummy encryption mode enabled [ 30.448212][ T529] F2FS-fs (loop4): invalid crc value [ 30.462759][ T391] Buffer I/O error on dev loop3p1, logical block 0, async page read [ 30.479560][ T386] Buffer I/O error on dev loop3p2, logical block 1, async page read [ 30.486482][ T467] Buffer I/O error on dev loop3p4, logical block 0, async page read [ 30.508211][ T351] Buffer I/O error on dev loop3p5, logical block 0, async page read [ 30.516060][ T351] Buffer I/O error on dev loop3p5, logical block 1, async page read [ 30.526070][ T391] Buffer I/O error on dev loop3p1, logical block 0, async page read [ 30.535184][ T386] Buffer I/O error on dev loop3p2, logical block 2, async page read [ 30.722441][ T529] F2FS-fs (loop4): Found nat_bits in checkpoint [ 30.785946][ T529] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 30.830211][ T578] sch_tbf: burst 1399 is lower than device veth0_to_team mtu (1514) ! [ 30.845189][ T529] F2FS-fs (loop4): f2fs_fill_dentries: corrupted namelen=1025, run fsck to fix. [ 30.882277][ T589] request_module fs-sysv succeeded, but still no fs? [ 31.083066][ T592] xt_TCPMSS: Only works on TCP SYN packets [ 31.246549][ T124] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 31.321764][ T589] F2FS-fs (loop0): Found nat_bits in checkpoint [ 31.339207][ T596] fuse: Bad value for 'fd' [ 31.375450][ T589] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 31.486412][ T124] usb 4-1: Using ep0 maxpacket: 16 [ 31.606729][ T124] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 31.617736][ T124] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 31.627327][ T124] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 31.636106][ T124] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.644917][ T124] usb 4-1: config 0 descriptor?? [ 31.687921][ T380] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 31.699886][ T616] tipc: Enabling of bearer rejected, media not registered [ 32.046604][ T380] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 32.076439][ T380] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 32.086015][ T380] usb 2-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 32.099701][ T582] [ 32.101852][ T582] ********************************************************** [ 32.105061][ T380] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.116426][ T582] ** NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE ** [ 32.118386][ T380] usb 2-1: config 0 descriptor?? [ 32.129282][ T582] ** ** [ 32.136675][ T582] ** trace_printk() being used. Allocating extra memory. ** [ 32.143836][ T582] ** ** [ 32.151380][ T582] ** This means that this is a DEBUG kernel and it is ** [ 32.164474][ T633] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 32.172977][ T582] ** unsafe for production use. ** [ 32.180590][ T582] ** ** [ 32.199656][ T124] hid-generic 0003:0158:0100.0004: unknown main item tag 0x1 [ 32.207768][ T624] F2FS-fs (loop0): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 32.215398][ T624] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 32.223602][ T582] ** If you see this message and you are not debugging ** [ 32.231397][ T624] F2FS-fs (loop0): Unrecognized mount option "nobarrier"mode=lfs" or missing value [ 32.243763][ T124] hid-generic 0003:0158:0100.0004: unexpected long global item [ 32.246710][ T582] ** the kernel, report this immediately to your vendor! ** [ 32.259801][ T124] hid-generic: probe of 0003:0158:0100.0004 failed with error -22 [ 32.276442][ T582] ** ** [ 32.293167][ T582] ** NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE ** [ 32.300602][ T582] ********************************************************** [ 32.414756][ T631] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 32.428972][ T124] usb 4-1: USB disconnect, device number 3 [ 32.437782][ T631] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 32.479366][ T639] fuse: Unknown parameter '0x0000000000000006' [ 32.485765][ T640] fuse: Unknown parameter '0x0000000000000006' [ 32.493561][ T631] F2FS-fs (loop4): Found nat_bits in checkpoint [ 32.536703][ T631] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 32.543742][ T631] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 32.596765][ T380] hid (null): global environment stack underflow [ 32.604648][ T380] uclogic 0003:5543:0522.0005: global environment stack underflow [ 32.624259][ T380] uclogic 0003:5543:0522.0005: item 0 1 1 11 parsing failed [ 32.640330][ T380] uclogic 0003:5543:0522.0005: parse failed [ 32.646113][ T380] uclogic: probe of 0003:5543:0522.0005 failed with error -22 [ 32.782278][ T651] SELinux: security_context_str_to_sid() failed for (dev debugfs, type debugfs) errno=-22 [ 32.810668][ T629] F2FS-fs (loop2): Test dummy encryption mode enabled [ 32.826974][ T629] F2FS-fs (loop2): invalid crc value [ 32.855082][ T612] device wg2 entered promiscuous mode [ 32.867920][ T629] F2FS-fs (loop2): Found nat_bits in checkpoint [ 32.919230][ T629] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 33.026052][ T629] F2FS-fs (loop2): f2fs_fill_dentries: corrupted namelen=1025, run fsck to fix. [ 33.262250][ T669] xt_TCPMSS: Only works on TCP SYN packets [ 33.818464][ T677] FAT-fs (loop4): bogus logical sector size 65535 [ 33.824951][ T677] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 33.835588][ T677] FAT-fs (loop4): Can't find a valid FAT filesystem [ 33.905759][ T23] kauditd_printk_skb: 15 callbacks suppressed [ 33.905767][ T23] audit: type=1400 audit(1719800710.159:183): avc: denied { name_bind } for pid=679 comm="syz.3.79" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 34.117089][ T693] xt_CT: You must specify a L4 protocol and not use inversions on it [ 34.394582][ T699] netlink: 264 bytes leftover after parsing attributes in process `syz.4.83'. [ 34.430731][ T704] netlink: 8 bytes leftover after parsing attributes in process `syz.0.86'. [ 34.558225][ T704] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue [ 34.568857][ T704] ext4 filesystem being mounted at /root/syzkaller.m4EjfK/23/file0 supports timestamps until 2038 (0x7fffffff) [ 34.586484][ T23] audit: type=1400 audit(1719800710.839:184): avc: denied { ioctl } for pid=703 comm="syz.0.86" path="socket:[13480]" dev="sockfs" ino=13480 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.615087][ T23] audit: type=1400 audit(1719800710.839:185): avc: denied { ioctl } for pid=703 comm="syz.0.86" path="/dev/rtc0" dev="devtmpfs" ino=870 ioctlcmd=0x700b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 34.730590][ T18] usb 2-1: USB disconnect, device number 2 [ 34.836443][ T24] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 34.869039][ T721] EXT4-fs (loop0): Mount option "noacl" will be removed by 3.5 [ 34.869039][ T721] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 34.869039][ T721] [ 34.887301][ T721] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 35.142259][ T721] EXT4-fs (loop0): 1 truncate cleaned up [ 35.148305][ T721] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,resgid=0x000000000000ee00,noacl,noload,data_err=ignore,data_err=ignore,,errors=continue [ 35.198024][ T23] audit: type=1400 audit(1719800711.459:186): avc: denied { setattr } for pid=720 comm="syz.0.90" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 35.319406][ T705] F2FS-fs (loop3): Test dummy encryption mode enabled [ 35.345042][ T705] F2FS-fs (loop3): invalid crc value [ 35.353728][ T705] F2FS-fs (loop3): Found nat_bits in checkpoint [ 35.376652][ T24] usb 3-1: config 1 interface 0 altsetting 224 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 35.376679][ T24] usb 3-1: config 1 interface 0 has no altsetting 0 [ 35.421165][ T705] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 35.450335][ T23] audit: type=1400 audit(1719800711.709:187): avc: denied { block_suspend } for pid=720 comm="syz.0.90" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 35.473271][ T705] F2FS-fs (loop3): f2fs_fill_dentries: corrupted namelen=1025, run fsck to fix. [ 35.606551][ T24] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 35.615513][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.623605][ T24] usb 3-1: Product: syz [ 35.675602][ T24] usb 3-1: Manufacturer: syz [ 35.700404][ T741] xt_TCPMSS: Only works on TCP SYN packets [ 35.833531][ T24] usb 3-1: SerialNumber: syz [ 35.949850][ T24] cdc_ncm 3-1:1.1: bind() failure [ 36.077915][ T744] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 36.085465][ T744] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 36.097759][ T744] F2FS-fs (loop1): Found nat_bits in checkpoint [ 36.135964][ T744] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 36.150163][ T744] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 36.157079][ T744] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 36.188176][ T23] audit: type=1400 audit(1719800712.449:188): avc: denied { listen } for pid=743 comm="syz.1.93" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 36.216517][ T5] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 36.404496][ T391] print_req_error: 286 callbacks suppressed [ 36.404510][ T391] blk_update_request: I/O error, dev loop3, sector 2 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 36.421843][ T391] blk_update_request: I/O error, dev loop3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 36.428762][ T760] F2FS-fs (loop4): Fix alignment : internally, start(4096) end(16896) block(12288) [ 36.433111][ T391] buffer_io_error: 242 callbacks suppressed [ 36.433120][ T391] Buffer I/O error on dev loop3p1, logical block 0, async page read [ 36.461444][ T558] blk_update_request: I/O error, dev loop3, sector 1536 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 36.476535][ T391] blk_update_request: I/O error, dev loop3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 36.492291][ T558] blk_update_request: I/O error, dev loop3, sector 1536 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 36.505322][ T760] F2FS-fs (loop4): invalid crc value [ 36.514441][ T765] EXT4-fs: Warning: mounting with data=journal disables delayed allocation and O_DIRECT support! [ 36.525245][ T391] Buffer I/O error on dev loop3p1, logical block 0, async page read [ 36.525504][ T765] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 36.534408][ T760] F2FS-fs (loop4): Found nat_bits in checkpoint [ 36.543255][ T765] EXT4-fs (loop3): group descriptors corrupted! [ 36.548906][ T5] usb 1-1: too many configurations: 47, using maximum allowed: 8 [ 36.555360][ T558] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 36.589500][ T767] fuse: Unknown parameter '' [ 36.607146][ T760] F2FS-fs (loop4): recover fsync data on readonly fs [ 36.613833][ T760] F2FS-fs (loop4): Cannot turn on quotas: -2 on 2 [ 36.621452][ T760] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 36.673478][ T558] blk_update_request: I/O error, dev loop3, sector 2 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 36.673610][ T568] blk_update_request: I/O error, dev loop3, sector 1536 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 36.695956][ T558] blk_update_request: I/O error, dev loop3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 36.695974][ T558] Buffer I/O error on dev loop3p1, logical block 0, async page read [ 36.708391][ T466] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 36.718746][ T386] blk_update_request: I/O error, dev loop3, sector 7940 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 36.725577][ T5] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 36.741244][ T467] Buffer I/O error on dev loop3p5, logical block 0, async page read [ 36.751940][ T5] usb 1-1: can't read configurations, error -61 [ 36.758247][ T558] Buffer I/O error on dev loop3p1, logical block 0, async page read [ 36.764858][ T467] Buffer I/O error on dev loop3p5, logical block 1, async page read [ 36.766068][ T558] Buffer I/O error on dev loop3p1, logical block 0, async page read [ 36.787284][ T466] Buffer I/O error on dev loop3p4, logical block 0, async page read [ 36.787591][ T386] Buffer I/O error on dev loop3p3, logical block 1984, async page read [ 36.916419][ T24] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 36.926496][ T5] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 37.184947][ T777] netlink: 264 bytes leftover after parsing attributes in process `syz.1.101'. [ 37.308630][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 37.436938][ T5] usb 1-1: too many configurations: 47, using maximum allowed: 8 [ 37.496504][ T24] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 37.504585][ T24] usb 4-1: config 179 has no interface number 0 [ 37.510754][ T24] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 37.521649][ T24] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 37.532731][ T24] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 37.543785][ T24] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 37.554982][ T24] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 37.568367][ T24] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 37.576493][ T5] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 37.577190][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.584988][ T5] usb 1-1: can't read configurations, error -61 [ 37.598572][ T5] usb usb1-port1: attempt power cycle [ 37.616535][ T765] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 37.636323][ T124] usb 3-1: USB disconnect, device number 4 [ 37.877727][ T24] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input5 [ 38.006424][ T5] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 38.019877][ T794] F2FS-fs (loop1): invalid crc value [ 38.082200][ T794] F2FS-fs (loop1): Found nat_bits in checkpoint [ 38.147774][ T794] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 38.166747][ T5] usb 1-1: too many configurations: 47, using maximum allowed: 8 [ 38.360777][ T23] audit: type=1400 audit(1719800714.609:189): avc: denied { bind } for pid=793 comm="syz.1.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 38.476020][ T5] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 38.483492][ T5] usb 1-1: can't read configurations, error -61 [ 38.493614][ T24] usb 4-1: USB disconnect, device number 4 [ 38.499312][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 38.499333][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 38.586446][ T792] F2FS-fs (loop2): Test dummy encryption mode enabled [ 38.612430][ T792] F2FS-fs (loop2): invalid crc value [ 38.635625][ T792] F2FS-fs (loop2): Found nat_bits in checkpoint [ 38.641788][ T5] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 38.686003][ T792] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 38.725385][ T792] F2FS-fs (loop2): f2fs_fill_dentries: corrupted namelen=1025, run fsck to fix. [ 38.778030][ T23] audit: type=1400 audit(1719800715.039:190): avc: denied { write } for pid=812 comm="syz.4.109" path="socket:[14901]" dev="sockfs" ino=14901 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 38.806541][ T5] usb 1-1: too many configurations: 47, using maximum allowed: 8 [ 38.820189][ T815] FAT-fs (loop1): Directory bread(block 64) failed [ 38.827274][ T815] FAT-fs (loop1): Directory bread(block 65) failed [ 38.833680][ T815] FAT-fs (loop1): Directory bread(block 66) failed [ 38.840041][ T815] FAT-fs (loop1): Directory bread(block 67) failed [ 38.853257][ T815] FAT-fs (loop1): Directory bread(block 68) failed [ 38.860434][ T815] FAT-fs (loop1): Directory bread(block 69) failed [ 38.867062][ T815] FAT-fs (loop1): Directory bread(block 70) failed [ 38.873468][ T815] FAT-fs (loop1): Directory bread(block 71) failed [ 38.880009][ T815] FAT-fs (loop1): Directory bread(block 72) failed [ 38.893174][ T815] FAT-fs (loop1): Directory bread(block 73) failed [ 38.919610][ T824] FAULT_INJECTION: forcing a failure. [ 38.919610][ T824] name failslab, interval 1, probability 0, space 0, times 1 [ 38.931670][ T23] audit: type=1400 audit(1719800715.179:191): avc: denied { map } for pid=823 comm="syz.4.111" path="socket:[14959]" dev="sockfs" ino=14959 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 38.941845][ T824] CPU: 1 PID: 824 Comm: syz.4.111 Not tainted 5.4.276-syzkaller-00020-g4275fce9fe94 #0 [ 38.959459][ T5] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 38.964293][ T824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 38.981669][ T824] Call Trace: [ 38.984854][ T824] dump_stack+0x1d8/0x241 [ 38.988954][ T824] ? panic+0x89d/0x89d [ 38.992861][ T824] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 38.998544][ T824] should_fail+0x71f/0x880 [ 39.002748][ T824] ? setup_fault_attr+0x3d0/0x3d0 [ 39.003404][ T5] usb 1-1: can't read configurations, error -61 [ 39.007629][ T824] ? anon_vma_clone+0x9d/0x4d0 [ 39.007656][ T824] should_failslab+0x5/0x20 [ 39.022632][ T824] kmem_cache_alloc+0x28/0x250 [ 39.024429][ T5] usb usb1-port1: unable to enumerate USB device [ 39.027219][ T824] anon_vma_clone+0x9d/0x4d0 [ 39.027231][ T824] __split_vma+0x19f/0x440 [ 39.027246][ T824] __do_munmap+0x3b6/0x850 [ 39.033615][ T23] audit: type=1400 audit(1719800715.179:192): avc: denied { read } for pid=823 comm="syz.4.111" path="socket:[14959]" dev="sockfs" ino=14959 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 39.037809][ T824] mmap_region+0x802/0x16f0 [ 39.037820][ T824] ? get_unmapped_area+0x317/0x380 [ 39.037828][ T824] do_mmap+0x822/0xd30 [ 39.037855][ T824] vm_mmap_pgoff+0x1b5/0x260 [ 39.086013][ T828] xt_TCPMSS: Only works on TCP SYN packets [ 39.086874][ T824] ? account_locked_vm+0x1b0/0x1b0 [ 39.086916][ T824] ? fget_many+0x20/0x20 [ 39.101538][ T824] ? debug_smp_processor_id+0x20/0x20 [ 39.106740][ T824] ? __ia32_sys_read+0x80/0x80 [ 39.111328][ T824] ksys_mmap_pgoff+0x168/0x1e0 [ 39.115963][ T824] do_syscall_64+0xca/0x1c0 [ 39.120283][ T824] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 39.126000][ T824] RIP: 0033:0x7fd6ce220b99 [ 39.130247][ T824] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 39.149688][ T824] RSP: 002b:00007fd6cd4a2048 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 39.157924][ T824] RAX: ffffffffffffffda RBX: 00007fd6ce3aefa0 RCX: 00007fd6ce220b99 [ 39.165734][ T824] RDX: 0000000000000000 RSI: 0000000000030000 RDI: 0000000020001000 [ 39.173547][ T824] RBP: 00007fd6cd4a20a0 R08: 0000000000000005 R09: 0000000000000000 [ 39.181358][ T824] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000001 [ 39.189256][ T824] R13: 000000000000000b R14: 00007fd6ce3aefa0 R15: 00007ffd89976908 [ 39.315409][ T23] audit: type=1400 audit(1719800715.569:193): avc: denied { create } for pid=834 comm="syz.3.114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 39.345284][ T839] Bluetooth: hci0: sending frame failed (-49) [ 39.367897][ T837] EXT4-fs warning (device loop1): read_mmp_block:111: Error -117 while reading MMP block 1 [ 39.416563][ T23] audit: type=1400 audit(1719800715.599:194): avc: denied { setopt } for pid=834 comm="syz.3.114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 39.437350][ T23] audit: type=1400 audit(1719800715.599:195): avc: denied { bind } for pid=834 comm="syz.3.114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 39.457242][ T23] audit: type=1400 audit(1719800715.599:196): avc: denied { create } for pid=834 comm="syz.3.114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 39.464352][ T827] F2FS-fs (loop0): invalid crc value [ 39.484183][ T827] F2FS-fs (loop0): Found nat_bits in checkpoint [ 39.510355][ T827] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 39.609702][ T843] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 39.667646][ T23] audit: type=1400 audit(1719800715.929:197): avc: denied { read write } for pid=841 comm="syz.4.117" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 39.690151][ T23] audit: type=1400 audit(1719800715.929:198): avc: denied { open } for pid=841 comm="syz.4.117" path="/root/syzkaller.1oq623/29/file0/file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 39.770977][ T827] device syzkaller0 entered promiscuous mode [ 39.984568][ T23] audit: type=1400 audit(1719800716.239:199): avc: denied { name_bind } for pid=857 comm="syz.2.116" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 40.034661][ T858] netlink: 4 bytes leftover after parsing attributes in process `syz.2.116'. [ 40.073597][ T862] erofs: (device loop4): mounted with opts: , root inode @ nid 36. [ 40.090169][ T862] erofs: (device loop4): z_erofs_lz4_decompress: failed to decompress, in[4096, 0] out[9000] [ 40.092354][ T852] F2FS-fs (loop1): invalid crc value [ 40.100436][ T862] ------------[ cut here ]------------ [ 40.108816][ T852] F2FS-fs (loop1): Found nat_bits in checkpoint [ 40.110701][ T862] WARNING: CPU: 1 PID: 862 at fs/erofs/decompressor.c:170 z_erofs_lz4_decompress+0x910/0xc70 [ 40.126705][ T862] Modules linked in: [ 40.130460][ T862] CPU: 1 PID: 862 Comm: syz.4.121 Not tainted 5.4.276-syzkaller-00020-g4275fce9fe94 #0 [ 40.139898][ T862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 40.147464][ T852] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 40.149811][ T862] RIP: 0010:z_erofs_lz4_decompress+0x910/0xc70 [ 40.149825][ T862] Code: b6 04 03 84 c0 0f 85 da 02 00 00 45 8b 0f 48 89 ef 48 c7 c6 72 fd 5a 85 48 c7 c2 a0 c3 f7 84 44 89 e9 45 89 f0 e8 80 ec fe ff <0f> 0b 44 89 e8 48 c7 c7 00 c4 f7 84 48 c7 c6 20 c4 f7 84 ba 02 00 [ 40.182612][ T862] RSP: 0018:ffff8881ecc06d18 EFLAGS: 00010246 [ 40.188501][ T862] RAX: 302f2fd484c32600 RBX: 1ffff1103d980e60 RCX: 302f2fd484c32600 [ 40.196310][ T862] RDX: ffffc9000194a000 RSI: 0000000000000b34 RDI: 0000000000000b35 [ 40.204125][ T862] RBP: ffff8881d60a1000 R08: ffffffff814d59b2 R09: ffffed103edea9b8 [ 40.211935][ T862] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff8881e450a000 [ 40.219748][ T862] R13: 0000000000001000 R14: 0000000000000000 R15: ffff8881ecc07300 [ 40.227560][ T862] FS: 00007fd6cd4a26c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 40.236431][ T862] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 40.242844][ T862] CR2: 00007fd6ce3ab0e0 CR3: 00000001ef7e3000 CR4: 00000000003406a0 [ 40.250653][ T862] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 40.258464][ T862] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 40.266273][ T862] Call Trace: [ 40.269435][ T862] ? __warn+0x162/0x250 [ 40.273411][ T862] ? report_bug+0x3a1/0x4e0 [ 40.277738][ T862] ? z_erofs_lz4_decompress+0x910/0xc70 [ 40.283124][ T862] ? z_erofs_lz4_decompress+0x910/0xc70 [ 40.288528][ T862] ? do_invalid_op+0x6e/0x110 [ 40.293115][ T862] ? invalid_op+0x1e/0x30 [ 40.297279][ T862] ? wake_up_klogd+0xb2/0xf0 [ 40.301693][ T862] ? z_erofs_lz4_decompress+0x910/0xc70 [ 40.307073][ T862] ? z_erofs_lz4_decompress+0x910/0xc70 [ 40.312456][ T862] ? z_erofs_lz4_prepare_destpages+0x690/0x690 [ 40.318525][ T862] z_erofs_decompress+0xba6/0xfc0 [ 40.323394][ T862] z_erofs_vle_unzip_all+0x1147/0x1bf0 [ 40.328688][ T862] ? z_erofs_onlinepage_endio+0x140/0x140 [ 40.334276][ T862] ? _raw_spin_lock_irqsave+0xf9/0x210 [ 40.339535][ T862] ? _raw_spin_lock+0x1b0/0x1b0 [ 40.344264][ T862] ? prepare_to_wait_event+0x3c1/0x420 [ 40.349529][ T862] ? autoremove_wake_function+0xf0/0xf0 [ 40.354904][ T862] ? finish_wait+0xa5/0x1a0 [ 40.359246][ T862] z_erofs_submit_and_unzip+0x12d2/0x13d0 [ 40.364813][ T862] ? z_erofs_attach_page+0x4d7/0x710 [ 40.369921][ T862] ? z_erofs_do_read_page+0x2580/0x2580 [ 40.375300][ T862] ? init_wait_entry+0xd0/0xd0 [ 40.379899][ T862] ? z_erofs_vle_normalaccess_readpages+0xc70/0xc70 [ 40.386435][ T862] ? debug_smp_processor_id+0x20/0x20 [ 40.391642][ T862] z_erofs_vle_normalaccess_readpages+0x901/0xc70 [ 40.397900][ T862] ? _raw_spin_unlock_irq+0x4a/0x60 [ 40.402922][ T862] ? z_erofs_vle_normalaccess_readpage+0x630/0x630 [ 40.409264][ T862] ? setup_fault_attr+0x3d0/0x3d0 [ 40.414120][ T862] ? preempt_schedule_common+0xa6/0xd0 [ 40.419428][ T862] ? preempt_schedule+0xd9/0xe0 [ 40.424128][ T862] ? schedule_preempt_disabled+0x20/0x20 [ 40.429580][ T862] ? z_erofs_vle_normalaccess_readpage+0x630/0x630 [ 40.435922][ T862] read_pages+0x119/0x400 [ 40.440076][ T862] ? __do_page_cache_readahead+0x4f0/0x4f0 [ 40.445774][ T862] ? find_get_entry+0x569/0x600 [ 40.450399][ T862] __do_page_cache_readahead+0x448/0x4f0 [ 40.455957][ T862] ? read_cache_pages_invalidate_pages+0x1b0/0x1b0 [ 40.462289][ T862] generic_file_read_iter+0x673/0x21f0 [ 40.467616][ T862] ? futex_wait+0x890/0x890 [ 40.471930][ T862] ? find_get_pages_range_tag+0xae0/0xae0 [ 40.477502][ T862] ? iov_iter_init+0x82/0x160 [ 40.481993][ T862] __vfs_read+0x5cd/0x730 [ 40.486164][ T862] ? rw_verify_area+0x360/0x360 [ 40.490870][ T862] ? __fsnotify_update_child_dentry_flags+0x290/0x290 [ 40.497459][ T862] ? security_file_permission+0x1dc/0x2f0 [ 40.502996][ T862] vfs_read+0x148/0x360 [ 40.506987][ T862] ksys_read+0x199/0x2c0 [ 40.511066][ T862] ? vfs_write+0x4e0/0x4e0 [ 40.515320][ T862] do_syscall_64+0xca/0x1c0 [ 40.519663][ T862] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 40.525506][ T862] RIP: 0033:0x7fd6ce220b99 [ 40.529762][ T862] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 40.549193][ T862] RSP: 002b:00007fd6cd4a2048 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 40.557586][ T862] RAX: ffffffffffffffda RBX: 00007fd6ce3aefa0 RCX: 00007fd6ce220b99 [ 40.565392][ T862] RDX: 0000000000000010 RSI: 0000000020001c40 RDI: 0000000000000004 [ 40.573203][ T862] RBP: 00007fd6ce2a177e R08: 0000000000000000 R09: 0000000000000000 [ 40.581012][ T862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 40.588821][ T862] R13: 000000000000000b R14: 00007fd6ce3aefa0 R15: 00007ffd89976908 [ 40.596633][ T862] ---[ end trace 9bbd2dbd345bba77 ]--- [ 40.621842][ T23] audit: type=1400 audit(1719800716.879:200): avc: denied { remove_name } for pid=144 comm="syslogd" name="messages" dev="tmpfs" ino=998 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 41.098706][ T901] IPv6: sit1: Disabled Multicast RS [ 41.244842][ T907] mmap: syz.2.135 (907) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 41.376426][ T384] Bluetooth: hci0: command 0x1003 tx timeout [ 41.392547][ T839] Bluetooth: hci0: sending frame failed (-49) [ 41.483823][ T909] EXT4-fs (loop2): 1 orphan inode deleted [ 41.496624][ T909] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 41.520585][ T909] ext4 filesystem being mounted at /root/syzkaller.LemgN6/14/file1 supports timestamps until 2038 (0x7fffffff) [ 41.630428][ T903] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 41.644347][ T903] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 41.658185][ T903] F2FS-fs (loop0): Found nat_bits in checkpoint [ 41.728434][ T903] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 41.763990][ T903] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 41.781045][ T903] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 41.812258][ T935] EXT4-fs error (device loop2): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 41.828662][ T935] EXT4-fs (loop2): Remounting filesystem read-only [ 41.861040][ T935] EXT4-fs error (device loop2): ext4_clear_blocks:858: inode #13: comm syz.2.139: attempt to clear invalid blocks 1024 len 1 [ 41.879635][ T935] EXT4-fs error (device loop2): ext4_free_branches:1022: inode #13: comm syz.2.139: invalid indirect mapped block 1819239214 (level 0) [ 41.894150][ T935] EXT4-fs error (device loop2): ext4_free_branches:1022: inode #13: comm syz.2.139: invalid indirect mapped block 67174400 (level 2) [ 41.916894][ T935] EXT4-fs (loop2): 1 truncate cleaned up [ 41.926620][ T935] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,resgid=0x0000000000000000, [ 42.027255][ T929] F2FS-fs (loop1): invalid crc value [ 42.037780][ T929] F2FS-fs (loop1): Found nat_bits in checkpoint [ 42.077329][ T929] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 43.099475][ T962] netlink: 264 bytes leftover after parsing attributes in process `syz.2.145'. [ 43.446517][ T780] Bluetooth: hci0: command 0x1001 tx timeout [ 43.453088][ T839] Bluetooth: hci0: sending frame failed (-49) [ 43.666685][ T978] erofs: (device loop1): mounted with opts: , root inode @ nid 36. [ 43.690640][ T978] erofs: (device loop1): z_erofs_map_blocks_iter: invalid logical cluster 0 at nid 36 [ 43.713671][ T978] erofs: (device loop1): z_erofs_vle_normalaccess_readpage: failed to read, err [-117] [ 43.743567][ T1000] syz.4.155 (pid 1000) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 43.869371][ T1001] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 44.015235][ T1022] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 44.293767][ T1007] F2FS-fs (loop4): invalid crc value [ 44.314904][ T1007] F2FS-fs (loop4): Found nat_bits in checkpoint [ 44.358981][ T1007] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 44.791749][ T23] kauditd_printk_skb: 18 callbacks suppressed [ 44.791758][ T23] audit: type=1400 audit(1719800721.049:219): avc: denied { write } for pid=1041 comm="syz.2.166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 44.866447][ T23] audit: type=1400 audit(1719800721.079:220): avc: denied { name_bind } for pid=1041 comm="syz.2.166" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 44.888334][ T23] audit: type=1400 audit(1719800721.079:221): avc: denied { map } for pid=1041 comm="syz.2.166" path="socket:[15516]" dev="sockfs" ino=15516 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 44.912188][ T23] audit: type=1400 audit(1719800721.079:222): avc: denied { read } for pid=1041 comm="syz.2.166" path="socket:[15516]" dev="sockfs" ino=15516 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 44.937135][ T23] audit: type=1400 audit(1719800721.099:223): avc: denied { remount } for pid=1050 comm="syz.2.169" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 44.956987][ T23] audit: type=1400 audit(1719800721.109:224): avc: denied { unmount } for pid=353 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 44.981478][ T23] audit: type=1400 audit(1719800721.239:225): avc: denied { connect } for pid=1053 comm="syz.1.172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 44.990787][ T1062] netlink: 'syz.2.173': attribute type 6 has an invalid length. [ 45.000923][ T23] audit: type=1400 audit(1719800721.239:226): avc: denied { wake_alarm } for pid=1058 comm="syz.2.173" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 45.179792][ T23] audit: type=1400 audit(1719800721.439:227): avc: denied { create } for pid=1065 comm="syz.4.167" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=chr_file permissive=1 [ 45.291667][ T1063] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 45.299252][ T1063] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 45.319710][ T23] audit: type=1400 audit(1719800721.579:228): avc: denied { mount } for pid=1058 comm="syz.2.173" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 45.348043][ T1063] F2FS-fs (loop0): Found nat_bits in checkpoint [ 45.387439][ T1063] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 45.394329][ T1063] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 45.407925][ T1069] F2FS-fs (loop4): Mismatch start address, segment0(0) cp_blkaddr(512) [ 45.416006][ T1069] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 45.426013][ T1069] F2FS-fs (loop4): Ignore s_resuid=0, s_resgid=60929 w/o reserve_root [ 45.438106][ T1069] F2FS-fs (loop4): Found nat_bits in checkpoint [ 45.462952][ T1069] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 45.469819][ T1069] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 45.518907][ T5] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 45.526496][ T384] Bluetooth: hci0: command 0x1009 tx timeout [ 45.637162][ T1080] attempt to access beyond end of device [ 45.637162][ T1080] loop4: rw=2049, want=45104, limit=40427 [ 45.778107][ T5] usb 2-1: Using ep0 maxpacket: 32 [ 45.906577][ T5] usb 2-1: New USB device found, idVendor=05ac, idProduct=023f, bcdDevice=e0.d8 [ 45.915468][ T5] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.923941][ T352] syz-executor (352) used greatest stack depth: 20760 bytes left [ 45.936879][ T5] usb 2-1: config 0 descriptor?? [ 45.977226][ T5] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 46.113748][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.120692][ T1088] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.128309][ T1088] device bridge_slave_0 entered promiscuous mode [ 46.135939][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.143039][ T1088] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.148246][ T1093] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1093 comm=syz.2.178 [ 46.163530][ T1088] device bridge_slave_1 entered promiscuous mode [ 46.231266][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.238137][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.245552][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.252430][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.293179][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 46.301909][ T380] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.310237][ T380] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.331589][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.340019][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.346871][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.354666][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 46.362915][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.369762][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.387047][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 46.394909][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 46.421939][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 46.440576][ T456] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 46.461513][ T456] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 46.477582][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 46.493471][ T456] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 46.536712][ T24] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 46.692702][ T1116] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 46.700419][ T1116] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 46.708740][ T179] device bridge_slave_1 left promiscuous mode [ 46.708825][ T179] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.709431][ T179] device bridge_slave_0 left promiscuous mode [ 46.709493][ T179] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.714247][ T1116] F2FS-fs (loop4): Found nat_bits in checkpoint [ 46.776404][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 46.781826][ T1116] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 46.793953][ T1116] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 46.802329][ T1116] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 46.819076][ T1116] Trying to write to read-only block-device loop4 (partno 0) [ 46.826250][ T1116] attempt to access beyond end of device [ 46.826250][ T1116] loop4: rw=2049, want=78904, limit=40427 [ 46.840763][ T354] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 46.840766][ T354] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 46.848500][ T354] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 46.855871][ T354] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 46.864065][ T354] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 46.872715][ T354] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 46.880602][ T354] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 46.888989][ T380] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 46.904114][ T380] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 46.906890][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 46.922631][ T380] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz0] on syz1 [ 46.932063][ T24] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 46.932089][ T24] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice= 3.ac [ 46.957733][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.959316][ T728] Trying to write to read-only block-device loop4 (partno 0) [ 46.967574][ T24] usb 3-1: config 0 descriptor?? [ 47.017250][ T24] usb 3-1: bad CDC descriptors [ 47.027590][ T24] usb 3-1: unsupported MDLM descriptors [ 47.049133][ T24] usb 2-1: USB disconnect, device number 3 [ 47.152879][ T1149] netlink: 'syz.0.191': attribute type 4 has an invalid length. [ 47.160591][ T1149] netlink: 17 bytes leftover after parsing attributes in process `syz.0.191'. [ 47.225723][ T1152] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 47.319809][ T747] usb 3-1: USB disconnect, device number 5 [ 47.637907][ T1159] EXT4-fs (loop1): mounted filesystem without journal. Opts: user_xattr,noquota,barrier=0x0000000000000002,jqfmt=vfsv1,block_validity,max_dir_size_kb=0x00000000000007b1,stripe=0x0000000000000020,bsdgroups,max_batch_time=0x00000000000003fe,user_xattr,quota,,errors=continue [ 47.703459][ T350] EXT4-fs error (device loop1): ext4_map_blocks:617: inode #2: block 16: comm syz-executor: lblock 0 mapped to illegal pblock 16 (length 1) [ 47.717989][ T350] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6099: Corrupt filesystem [ 47.769691][ T350] syz-executor (350) used greatest stack depth: 20184 bytes left [ 47.874415][ T1165] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.881727][ T1165] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.889467][ T1165] device bridge_slave_0 entered promiscuous mode [ 47.898131][ T1165] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.904961][ T1165] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.912791][ T1165] device bridge_slave_1 entered promiscuous mode [ 48.075073][ T747] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 48.082987][ T747] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.095859][ T747] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.262845][ T747] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.270995][ T747] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.277845][ T747] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.285252][ T747] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.293762][ T747] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.301807][ T747] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.308657][ T747] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.316958][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 48.342122][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 48.351900][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 48.369745][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 48.381760][ T747] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 48.395036][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 48.409960][ T747] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 48.420609][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 48.457561][ T728] device bridge_slave_1 left promiscuous mode [ 48.463554][ T728] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.466494][ T374] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 48.477742][ T728] device bridge_slave_0 left promiscuous mode [ 48.483704][ T728] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.606508][ T124] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 48.856761][ T124] usb 5-1: Using ep0 maxpacket: 16 [ 48.908271][ T1205] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 48.917179][ T1205] ext4 filesystem being mounted at /root/syzkaller.R2gyPA/10/bus supports timestamps until 2038 (0x7fffffff) [ 48.976799][ T124] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 48.987657][ T124] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 48.997581][ T374] usb 3-1: New USB device found, idVendor=1bc7, idProduct=1071, bcdDevice=6e.9b [ 49.006625][ T124] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 49.019281][ T374] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.027077][ T374] usb 3-1: Product: syz [ 49.027088][ T374] usb 3-1: Manufacturer: syz [ 49.027102][ T374] usb 3-1: SerialNumber: syz [ 49.039928][ T124] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 49.039939][ T124] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.041749][ T124] usb 5-1: config 0 descriptor?? [ 49.062436][ T374] usb 3-1: config 0 descriptor?? [ 49.108502][ T374] cdc_mbim 3-1:0.0: bind() failure [ 49.423232][ T1226] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.432364][ T1226] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.443842][ T1226] device bridge_slave_0 entered promiscuous mode [ 49.452188][ T1226] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.459195][ T1226] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.467243][ T1226] device bridge_slave_1 entered promiscuous mode [ 49.537993][ T124] savu 0003:1E7D:2D5A.0007: unknown main item tag 0x0 [ 49.548002][ T124] savu 0003:1E7D:2D5A.0007: unknown main item tag 0x0 [ 49.568802][ T124] savu 0003:1E7D:2D5A.0007: unknown main item tag 0x0 [ 49.583704][ T1226] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.589530][ T124] savu 0003:1E7D:2D5A.0007: unknown main item tag 0x0 [ 49.590574][ T1226] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.604340][ T1226] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.611208][ T1226] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.612401][ T124] savu 0003:1E7D:2D5A.0007: unknown main item tag 0x0 [ 49.637040][ T124] savu 0003:1E7D:2D5A.0007: unknown main item tag 0x0 [ 49.646944][ T124] savu 0003:1E7D:2D5A.0007: unknown main item tag 0x0 [ 49.653929][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.660030][ T124] savu 0003:1E7D:2D5A.0007: unknown main item tag 0x0 [ 49.668054][ T24] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.676450][ T124] savu 0003:1E7D:2D5A.0007: unknown main item tag 0x0 [ 49.689671][ T124] savu 0003:1E7D:2D5A.0007: unknown main item tag 0x0 [ 49.697432][ T24] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.703932][ T124] savu 0003:1E7D:2D5A.0007: unknown main item tag 0x0 [ 49.716709][ T780] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.720176][ T124] savu 0003:1E7D:2D5A.0007: hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0 [ 49.739195][ T1194] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 49.750114][ T780] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.756986][ T780] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.788567][ T780] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.797770][ T1241] ------------[ cut here ]------------ [ 49.803075][ T1241] WARNING: CPU: 0 PID: 1241 at fs/inode.c:302 drop_nlink+0xbb/0x100 [ 49.810849][ T1241] Modules linked in: [ 49.814596][ T1241] CPU: 0 PID: 1241 Comm: syz.0.215 Tainted: G W 5.4.276-syzkaller-00020-g4275fce9fe94 #0 [ 49.825523][ T1241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 49.835437][ T1241] RIP: 0010:drop_nlink+0xbb/0x100 [ 49.840276][ T1241] Code: 49 8b 1e 48 8d bb d0 04 00 00 be 08 00 00 00 e8 7b 9a f2 ff f0 48 ff 83 d0 04 00 00 5b 41 5c 41 5e 41 5f 5d c3 e8 d5 e1 c2 ff <0f> 0b eb 89 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c 62 ff ff ff 4c [ 49.859803][ T1241] RSP: 0018:ffff8881d155fbd0 EFLAGS: 00010287 [ 49.865701][ T1241] RAX: ffffffff81a1572b RBX: 1ffff1103afe9154 RCX: 0000000000040000 [ 49.873511][ T1241] RDX: ffffc90003759000 RSI: 0000000000000b0e RDI: 0000000000000b0f [ 49.881348][ T1241] RBP: 0000000000000000 R08: ffffffff81a156af R09: ffffed103cbb3d41 [ 49.889136][ T1241] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff8881d7f48aa0 [ 49.896954][ T1241] R13: ffff8881e7d79398 R14: ffff8881d7f48a58 R15: dffffc0000000000 [ 49.904761][ T1241] FS: 00007fc859c1f6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 49.913525][ T1241] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 49.919948][ T1241] CR2: 0000000020001000 CR3: 00000001da378000 CR4: 00000000003406b0 [ 49.927760][ T1241] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 49.935568][ T1241] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 49.943377][ T1241] Call Trace: [ 49.946525][ T1241] ? __warn+0x162/0x250 [ 49.950506][ T1241] ? report_bug+0x3a1/0x4e0 [ 49.954840][ T1241] ? drop_nlink+0xbb/0x100 [ 49.959093][ T1241] ? drop_nlink+0xbb/0x100 [ 49.963348][ T1241] ? do_invalid_op+0x6e/0x110 [ 49.967865][ T1241] ? invalid_op+0x1e/0x30 [ 49.972026][ T1241] ? drop_nlink+0x3f/0x100 [ 49.976277][ T1241] ? drop_nlink+0xbb/0x100 [ 49.980531][ T1241] ? drop_nlink+0xbb/0x100 [ 49.984806][ T1241] ovl_do_remove+0x91f/0xc80 [ 49.989303][ T1241] ? ovl_permission+0xd4/0x1f0 [ 49.993908][ T1241] ? ovl_set_redirect+0x5f0/0x5f0 [ 49.998764][ T1241] ? may_delete+0x53b/0x760 [ 50.003108][ T1241] ? security_inode_unlink+0xca/0x110 [ 50.008306][ T1241] vfs_unlink+0x315/0x510 [ 50.012480][ T1241] do_unlinkat+0x430/0x8b0 [ 50.016726][ T1241] ? fsnotify_link_count+0x80/0x80 [ 50.021678][ T1241] ? getname_flags+0x1ec/0x4e0 [ 50.026365][ T1241] do_syscall_64+0xca/0x1c0 [ 50.030710][ T1241] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 50.036428][ T1241] RIP: 0033:0x7fc85a99db99 [ 50.040682][ T1241] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 50.060121][ T1241] RSP: 002b:00007fc859c1f048 EFLAGS: 00000246 ORIG_RAX: 0000000000000057 [ 50.068364][ T1241] RAX: ffffffffffffffda RBX: 00007fc85ab2bfa0 RCX: 00007fc85a99db99 [ 50.076175][ T1241] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 50.083986][ T1241] RBP: 00007fc85aa1e77e R08: 0000000000000000 R09: 0000000000000000 [ 50.091808][ T1241] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 50.099610][ T1241] R13: 000000000000000b R14: 00007fc85ab2bfa0 R15: 00007ffea34aba28 [ 50.107429][ T1241] ---[ end trace 9bbd2dbd345bba78 ]--- [ 50.116672][ T780] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.123525][ T780] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.148477][ T780] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 50.156989][ T780] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.176595][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 50.184642][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 50.196626][ T124] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 50.207714][ T1194] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 50.216768][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 50.225036][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 50.255031][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 50.267975][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 50.290426][ T780] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 50.299500][ T780] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 50.326854][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 50.335085][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 50.344646][ T23] kauditd_printk_skb: 20 callbacks suppressed [ 50.344668][ T23] audit: type=1400 audit(1719800726.599:249): avc: denied { mounton } for pid=1193 comm="syz.4.203" path="/root/syzkaller.1oq623/47/file0/file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 50.357189][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 50.386790][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 50.446470][ T124] usb 2-1: Using ep0 maxpacket: 8 [ 50.471110][ T391] print_req_error: 160 callbacks suppressed [ 50.471122][ T391] blk_update_request: I/O error, dev loop3, sector 2 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 50.495454][ T391] blk_update_request: I/O error, dev loop3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 50.514091][ T391] buffer_io_error: 133 callbacks suppressed [ 50.514100][ T391] Buffer I/O error on dev loop3p1, logical block 0, async page read [ 50.542925][ T24] usb 5-1: USB disconnect, device number 2 [ 50.566657][ T124] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 50.575521][ T124] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.589373][ T124] usb 2-1: config 0 descriptor?? [ 50.600773][ T1247] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 50.757984][ T1256] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 50.778647][ T1256] ext4 filesystem being mounted at /root/syzkaller.R2gyPA/19/bus supports timestamps until 2038 (0x7fffffff) [ 50.835108][ T23] audit: type=1400 audit(1719800727.089:250): avc: denied { setattr } for pid=1255 comm="syz.0.218" path="/root/syzkaller.R2gyPA/19/bus/bus" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 50.883079][ T9] device bridge_slave_1 left promiscuous mode [ 50.889756][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.904664][ T9] device bridge_slave_0 left promiscuous mode [ 50.912956][ T1260] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 50.921762][ T1260] overlayfs: missing 'lowerdir' [ 50.927278][ T23] audit: type=1400 audit(1719800727.189:251): avc: denied { getopt } for pid=1255 comm="syz.0.218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 50.928984][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.979534][ T780] usb 3-1: USB disconnect, device number 6 [ 51.055046][ T1265] capability: warning: `syz.2.221' uses 32-bit capabilities (legacy support in use) [ 51.068743][ T391] blk_update_request: I/O error, dev loop3, sector 2 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 51.088186][ T354] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 34: comm syz-executor: path /root/syzkaller.1oq623/47/file0/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1025, size=2048 fake=0 [ 51.094909][ T1266] EXT4-fs (loop3): required journal recovery suppressed and not mounted read-only [ 51.118588][ T23] audit: type=1400 audit(1719800727.379:252): avc: denied { rmdir } for pid=354 comm="syz-executor" name="lost+found" dev="loop4" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 51.165365][ T354] EXT4-fs error (device loop4): ext4_empty_dir:3034: inode #11: block 34: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=4096, inode=0, rec_len=1025, size=2048 fake=0 [ 51.221231][ T354] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 34: comm syz-executor: path /root/syzkaller.1oq623/47/file0/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1025, size=2048 fake=0 [ 51.244711][ T354] EXT4-fs error (device loop4): ext4_empty_dir:3034: inode #11: block 34: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=4096, inode=0, rec_len=1025, size=2048 fake=0 [ 51.265626][ T354] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 34: comm syz-executor: path /root/syzkaller.1oq623/47/file0/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1025, size=2048 fake=0 [ 51.314802][ T354] EXT4-fs error (device loop4): ext4_empty_dir:3034: inode #11: block 34: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=4096, inode=0, rec_len=1025, size=2048 fake=0 [ 51.335627][ T354] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 34: comm syz-executor: path /root/syzkaller.1oq623/47/file0/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1025, size=2048 fake=0 [ 51.410461][ T354] EXT4-fs error (device loop4): ext4_empty_dir:3034: inode #11: block 34: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=4096, inode=0, rec_len=1025, size=2048 fake=0 [ 51.443258][ T467] blk_update_request: I/O error, dev loop3, sector 1536 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 51.444868][ T568] blk_update_request: I/O error, dev loop3, sector 1536 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 51.459520][ T391] blk_update_request: I/O error, dev loop3, sector 2 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 51.467795][ T386] blk_update_request: I/O error, dev loop3, sector 7940 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 51.488848][ T466] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 51.492668][ T467] blk_update_request: I/O error, dev loop3, sector 1536 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 51.500418][ T466] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 51.512772][ T1286] EXT4-fs error (device loop2): ext4_orphan_get:1260: comm syz.2.226: bad orphan inode 15 [ 51.522036][ T386] Buffer I/O error on dev loop3p3, logical block 1984, async page read [ 51.539984][ T568] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 51.540874][ T391] Buffer I/O error on dev loop3p1, logical block 0, async page read [ 51.547859][ T568] Buffer I/O error on dev loop3p2, logical block 1, async page read [ 51.556343][ T354] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 34: comm syz-executor: path /root/syzkaller.1oq623/47/file0/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1025, size=2048 fake=0 [ 51.563468][ T466] Buffer I/O error on dev loop3p4, logical block 0, async page read [ 51.586251][ T391] Buffer I/O error on dev loop3p1, logical block 0, async page read [ 51.593504][ T386] Buffer I/O error on dev loop3p3, logical block 1985, async page read [ 51.602116][ T1286] ext4_test_bit(bit=14, block=18) = 1 [ 51.609571][ T467] Buffer I/O error on dev loop3p5, logical block 0, async page read [ 51.615583][ T391] Buffer I/O error on dev loop3p1, logical block 0, async page read [ 51.630270][ T1286] is_bad_inode(inode)=0 [ 51.634397][ T1286] NEXT_ORPHAN(inode)=1023 [ 51.636450][ T354] EXT4-fs error (device loop4): ext4_empty_dir:3034: inode #11: block 34: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=4096, inode=0, rec_len=1025, size=2048 fake=0 [ 51.640036][ T1286] max_ino=32 [ 51.662397][ T1286] i_nlink=0 [ 51.665519][ T1286] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2930: inode #15: comm syz.2.226: corrupted xattr block 19 [ 51.678743][ T1286] EXT4-fs warning (device loop2): ext4_evict_inode:321: xattr delete (err -117) [ 51.704791][ T1286] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 51.714073][ T1286] ext4 filesystem being mounted at /root/syzkaller.LemgN6/43/bus supports timestamps until 2038 (0x7fffffff) [ 51.738719][ T1291] EXT4-fs (loop0): external journal device major/minor numbers have changed [ 51.754847][ T1291] EXT4-fs (loop0): couldn't read superblock of external journal [ 51.794978][ T23] audit: type=1400 audit(1719800728.049:253): avc: denied { write } for pid=1293 comm="syz.2.228" name="vga_arbiter" dev="devtmpfs" ino=1041 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 51.819646][ T23] audit: type=1400 audit(1719800728.049:254): avc: denied { open } for pid=1293 comm="syz.2.228" path="/dev/vga_arbiter" dev="devtmpfs" ino=1041 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 51.850163][ T23] audit: type=1400 audit(1719800728.049:255): avc: denied { ioctl } for pid=1293 comm="syz.2.228" path="/dev/vga_arbiter" dev="devtmpfs" ino=1041 ioctlcmd=0x9367 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 51.883981][ T23] audit: type=1400 audit(1719800728.059:256): avc: denied { mounton } for pid=1293 comm="syz.2.228" path="/root/syzkaller.LemgN6/44/file0" dev="incremental-fs" ino=1970 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 51.912931][ T23] audit: type=1400 audit(1719800728.059:257): avc: denied { write } for pid=1293 comm="syz.2.228" name="/" dev="incremental-fs" ino=1970 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 51.935613][ T23] audit: type=1400 audit(1719800728.059:258): avc: denied { add_name } for pid=1293 comm="syz.2.228" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 52.174553][ T1310] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.191965][ T1318] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 52.202172][ T1318] ext4 filesystem being mounted at /root/syzkaller.LemgN6/49/file0 supports timestamps until 2038 (0x7fffffff) [ 52.223782][ T1318] EXT4-fs error (device loop2): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 52.227245][ T1310] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.256478][ T1318] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 1 with error 28 [ 52.276259][ T1318] EXT4-fs (loop2): This should not happen!! Data will be lost [ 52.276259][ T1318] [ 52.290404][ T1310] device bridge_slave_0 entered promiscuous mode [ 52.298370][ T1310] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.305264][ T1318] EXT4-fs (loop2): Total free blocks count 0 [ 52.314666][ T1310] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.317612][ T1318] EXT4-fs (loop2): Free/Dirty block details [ 52.322576][ T1310] device bridge_slave_1 entered promiscuous mode [ 52.336754][ T1318] EXT4-fs (loop2): free_blocks=65280 [ 52.341854][ T1318] EXT4-fs (loop2): dirty_blocks=1 [ 52.366403][ T1318] EXT4-fs (loop2): Block reservation details [ 52.383652][ T1318] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 52.404927][ T1339] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 10 with error 28 [ 52.428146][ T1339] EXT4-fs (loop2): This should not happen!! Data will be lost [ 52.428146][ T1339] [ 52.484118][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 52.495811][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.516446][ T1344] netlink: 4 bytes leftover after parsing attributes in process `syz.2.243'. [ 52.525855][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 52.534561][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.542920][ T374] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.549773][ T374] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.556998][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.565648][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.573916][ T374] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.580787][ T374] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.588060][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.598785][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 52.627548][ T1325] F2FS-fs (loop3): Found nat_bits in checkpoint [ 52.637817][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 52.639367][ C1] TCP: request_sock_TCP: Possible SYN flooding on port 20001. Dropping request. Check SNMP counters. [ 52.677861][ T9] device bridge_slave_1 left promiscuous mode [ 52.677948][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.688598][ T1325] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 52.693142][ T9] device bridge_slave_0 left promiscuous mode [ 52.714230][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.715977][ T1325] tmpfs: Unknown parameter '^±Û¼‡Ñ·i/þ‚åØ ÜøŽ½ÕR4&¸¡'Aƒsø±|Ï93i夥ï¼<\-•úM"°à‚·Ùs›ŠßADW6KÐΈ N8*S¶Û SlDSÈ6A¤ÛóÑG¶¤Ìí•' [ 52.740828][ T1355] process 'syz.3.238' launched '/dev/fd/6' with NULL argv: empty string added [ 52.806958][ T747] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 52.826934][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 52.834681][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 52.847119][ T747] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 52.875389][ T747] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 52.931408][ T1226] attempt to access beyond end of device [ 52.931408][ T1226] loop3: rw=524288, want=45072, limit=40427 [ 52.953271][ T1226] attempt to access beyond end of device [ 52.953271][ T1226] loop3: rw=0, want=45072, limit=40427 [ 53.008823][ T1226] attempt to access beyond end of device [ 53.008823][ T1226] loop3: rw=2049, want=45104, limit=40427 [ 53.319178][ T1397] F2FS-fs (loop2): Mismatch start address, segment0(0) cp_blkaddr(512) [ 53.327384][ T1397] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 53.337491][ T1397] F2FS-fs (loop2): Ignore s_resuid=0, s_resgid=60929 w/o reserve_root [ 53.347738][ T1397] F2FS-fs (loop2): Found nat_bits in checkpoint [ 53.384919][ T1397] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 53.391890][ T1397] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 53.443386][ T747] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 53.540348][ T1412] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.547416][ T1412] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.554731][ T1412] device bridge_slave_0 entered promiscuous mode [ 53.561904][ T1412] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.569595][ T1412] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.576929][ T1412] device bridge_slave_1 entered promiscuous mode [ 53.622898][ T1412] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.629754][ T1412] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.636922][ T1412] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.643738][ T1412] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.669217][ T456] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.676968][ T456] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.684026][ T456] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.695108][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.703375][ T380] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.710230][ T380] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.725910][ T456] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.734975][ T456] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.741844][ T456] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.759332][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.776571][ T124] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 53.787251][ T124] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 53.798211][ T124] asix: probe of 2-1:0.0 failed with error -71 [ 53.802365][ T1419] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 53.805075][ T124] usb 2-1: USB disconnect, device number 4 [ 53.816247][ T1419] EXT4-fs (loop2): Mount option "dioread_nolock" incompatible with ext3 [ 53.826532][ T747] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 53.833212][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.837363][ T747] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 53.856542][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 53.858725][ T747] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 53.867062][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 53.876916][ T13] cfg80211: failed to load regulatory.db [ 53.889210][ T747] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.903376][ T747] usb 5-1: config 0 descriptor?? [ 53.929893][ T780] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 53.946334][ T1423] netlink: 8 bytes leftover after parsing attributes in process `syz.0.262'. [ 53.966162][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 53.974814][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 54.076705][ T398] device bridge_slave_1 left promiscuous mode [ 54.089161][ T398] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.100072][ T398] device bridge_slave_0 left promiscuous mode [ 54.105341][ T1435] netlink: 8 bytes leftover after parsing attributes in process `syz.0.266'. [ 54.111717][ T398] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.187212][ T1437] netlink: 76 bytes leftover after parsing attributes in process `syz.3.269'. [ 54.378048][ T747] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 54.385945][ T747] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving [ 54.395033][ T1437] netlink: 76 bytes leftover after parsing attributes in process `syz.3.269'. [ 54.408820][ T747] plantronics 0003:047F:FFFF.0008: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 54.834383][ T1446] device bridge_slave_0 left promiscuous mode [ 54.842405][ T1446] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.852045][ T1446] syz.1.268 (1446) used greatest stack depth: 18872 bytes left [ 54.970802][ T1457] EXT4-fs (loop1): Unsupported blocksize for fs encryption [ 55.086417][ T456] usb 3-1: new low-speed USB device number 7 using dummy_hcd [ 55.186578][ T780] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 55.356524][ T456] usb 3-1: device descriptor read/64, error 18 [ 55.377131][ T1476] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 55.386002][ T1476] ext4 filesystem being mounted at /root/syzkaller.pOIk33/12/file0 supports timestamps until 2038 (0x7fffffff) [ 55.474657][ T1481] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 3: comm syz.1.278: path /root/syzkaller.pOIk33/12/file0: bad entry in directory: rec_len is smaller than minimal - offset=60, inode=113, rec_len=0, size=2048 fake=0 [ 55.502918][ T1481] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 12: comm syz.1.278: path /root/syzkaller.pOIk33/12/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 55.530335][ T1481] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 13: comm syz.1.278: path /root/syzkaller.pOIk33/12/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 55.555813][ T1481] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 14: comm syz.1.278: path /root/syzkaller.pOIk33/12/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 55.579472][ T1481] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 15: comm syz.1.278: path /root/syzkaller.pOIk33/12/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 55.602579][ T780] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 55.614486][ T1481] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 16: comm syz.1.278: path /root/syzkaller.pOIk33/12/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 55.637919][ T780] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 55.650975][ T780] usb 4-1: New USB device found, idVendor=0757, idProduct=0a00, bcdDevice=ff.00 [ 55.661669][ T1481] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 17: comm syz.1.278: path /root/syzkaller.pOIk33/12/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 55.684175][ T780] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.684746][ T1484] input: syz0 as /devices/virtual/input/input17 [ 55.693141][ T1481] EXT4-fs error (device loop1): ext4_map_blocks:617: inode #2: block 18: comm syz.1.278: lblock 23 mapped to illegal pblock 18 (length 1) [ 55.715987][ T780] usb 4-1: config 0 descriptor?? [ 55.716648][ T23] kauditd_printk_skb: 22 callbacks suppressed [ 55.716658][ T23] audit: type=1400 audit(1719800731.969:281): avc: denied { read } for pid=147 comm="acpid" name="event3" dev="devtmpfs" ino=19319 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 55.780783][ T780] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 55.826514][ T456] usb 3-1: device descriptor read/64, error 18 [ 55.857845][ T23] audit: type=1400 audit(1719800732.119:282): avc: denied { ioctl } for pid=1488 comm="syz.0.281" path="socket:[19340]" dev="sockfs" ino=19340 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 55.890931][ T1490] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.912845][ T1494] EXT4-fs (loop1): external journal device major/minor numbers have changed [ 55.921596][ T1494] print_req_error: 125 callbacks suppressed [ 55.921605][ T1494] blk_update_request: I/O error, dev loop75, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 55.939056][ T1494] EXT4-fs (loop1): couldn't read superblock of external journal [ 56.127327][ T1499] netlink: 76 bytes leftover after parsing attributes in process `syz.1.284'. [ 56.136284][ T1499] netlink: 76 bytes leftover after parsing attributes in process `syz.1.284'. [ 56.166601][ T747] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 56.201744][ T124] usb 5-1: USB disconnect, device number 3 [ 56.292981][ T456] usb 3-1: new low-speed USB device number 8 using dummy_hcd [ 56.426450][ T747] usb 1-1: Using ep0 maxpacket: 8 [ 56.546501][ T747] usb 1-1: config 135 has an invalid interface number: 230 but max is 0 [ 56.554861][ T747] usb 1-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 56.565080][ T747] usb 1-1: config 135 has no interface number 0 [ 56.571150][ T747] usb 1-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 56.576561][ T456] usb 3-1: device descriptor read/64, error 18 [ 56.746588][ T747] usb 1-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 56.756572][ T747] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.764408][ T747] usb 1-1: Product: syz [ 56.768436][ T747] usb 1-1: Manufacturer: syz [ 56.772810][ T747] usb 1-1: SerialNumber: syz [ 56.817331][ T747] uvcvideo: Found UVC 0.00 device syz (18ec:3288) [ 56.823658][ T747] uvcvideo: No valid video chain found. [ 56.898648][ T1508] netlink: 12 bytes leftover after parsing attributes in process `syz.1.287'. [ 56.986417][ T456] usb 3-1: device descriptor read/64, error 18 [ 57.018583][ T124] usb 1-1: USB disconnect, device number 6 [ 57.106648][ T456] usb usb3-port1: attempt power cycle [ 57.516414][ T456] usb 3-1: new low-speed USB device number 9 using dummy_hcd [ 57.686588][ T456] usb 3-1: device descriptor read/8, error -61 [ 57.788172][ T1523] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 57.796991][ T1523] ext4 filesystem being mounted at /root/syzkaller.pOIk33/18/file0 supports timestamps until 2038 (0x7fffffff) [ 57.891935][ T1529] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 3: comm syz.1.292: path /root/syzkaller.pOIk33/18/file0: bad entry in directory: rec_len is smaller than minimal - offset=60, inode=113, rec_len=0, size=2048 fake=0 [ 57.916690][ T24] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 57.917461][ T1529] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 12: comm syz.1.292: path /root/syzkaller.pOIk33/18/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 57.924048][ T456] usb 3-1: device descriptor read/8, error -71 [ 57.947899][ T1529] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 13: comm syz.1.292: path /root/syzkaller.pOIk33/18/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 57.960272][ T373] usb 4-1: USB disconnect, device number 5 [ 57.999456][ T1529] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 14: comm syz.1.292: path /root/syzkaller.pOIk33/18/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 58.068781][ T23] audit: type=1400 audit(1719800734.329:283): avc: denied { connect } for pid=1534 comm="syz.3.294" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 58.107261][ T1528] erofs: (device loop2): erofs_parse_options: Unrecognized mount option "ÿÿÿÿt’5Æ;Àâ} ï7_cŠúÏèðÎîËN”Øü÷û"LŽõ‚öaÂm)p÷«ñ„°ƒº'6~—" or missing value [ 58.108940][ T1529] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 15: comm syz.1.292: path /root/syzkaller.pOIk33/18/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 58.164938][ T23] audit: type=1400 audit(1719800734.419:284): avc: denied { create } for pid=1534 comm="syz.3.294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 58.187972][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 58.201505][ T1529] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 16: comm syz.1.292: path /root/syzkaller.pOIk33/18/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 58.226273][ T1529] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 17: comm syz.1.292: path /root/syzkaller.pOIk33/18/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 58.248989][ T1529] EXT4-fs error (device loop1): ext4_map_blocks:617: inode #2: block 18: comm syz.1.292: lblock 23 mapped to illegal pblock 18 (length 1) [ 58.326711][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 58.343830][ T1543] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 58.363272][ T24] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 58.374058][ T1543] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 58.387764][ T1548] netlink: 76 bytes leftover after parsing attributes in process `syz.2.297'. [ 58.396607][ T1548] netlink: 76 bytes leftover after parsing attributes in process `syz.2.297'. [ 58.422473][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.528518][ T24] usb 1-1: config 0 descriptor?? [ 58.696470][ T124] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 59.032043][ T23] audit: type=1400 audit(1719800735.289:285): avc: denied { bind } for pid=1520 comm="syz.0.291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 59.036657][ T1521] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 59.059131][ T124] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 59.069935][ T124] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 59.082689][ T124] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 59.087091][ T24] hid (null): invalid report_size 29535 [ 59.091576][ T124] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.101879][ T24] hid-generic 0003:0158:0100.0009: unknown main item tag 0x1 [ 59.130412][ T24] hid-generic 0003:0158:0100.0009: unexpected long global item [ 59.139175][ T24] hid-generic: probe of 0003:0158:0100.0009 failed with error -22 [ 59.141950][ T124] usb 5-1: config 0 descriptor?? [ 59.268231][ T1560] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.271659][ T1562] EXT4-fs (loop2): mounted filesystem without journal. Opts: noauto_da_alloc,max_dir_size_kb=0x0000000000000001,dioread_lock,norecovery,discard,lazytime,noload,usrquota,noauto_da_alloc,,errors=continue [ 59.275275][ T1560] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.308002][ T1560] device bridge_slave_0 entered promiscuous mode [ 59.310445][ T1521] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 59.315361][ T1560] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.329467][ T1560] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.335654][ T5] usb 1-1: USB disconnect, device number 7 [ 59.337619][ T1560] device bridge_slave_1 entered promiscuous mode [ 59.358655][ T1562] tipc: Started in network mode [ 59.363329][ T1562] tipc: Own node identity , cluster identity 4711 [ 59.370214][ T1562] tipc: Failed to obtain node identity [ 59.379945][ T1562] tipc: Enabling of bearer rejected, failed to enable media [ 59.480047][ T23] audit: type=1400 audit(1719800735.739:286): avc: denied { accept } for pid=1575 comm="syz.1.304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 59.485040][ T1560] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.506796][ T1560] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.513906][ T1560] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.520690][ T1560] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.552290][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.582638][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.591881][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.606840][ T384] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.614905][ T384] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.621757][ T384] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.629010][ T384] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.637673][ T384] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.644501][ T384] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.822745][ T124] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 59.830004][ T747] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 59.838004][ T124] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving [ 59.848126][ T124] plantronics 0003:047F:FFFF.000A: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 59.861134][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.873545][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.882520][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.890814][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.898742][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.907040][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.914762][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.054759][ T1588] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 60.064224][ T1588] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 60.076499][ T747] usb 3-1: Using ep0 maxpacket: 16 [ 60.207000][ T747] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 60.218599][ T747] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 60.230871][ T747] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 60.253235][ T747] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.262434][ T747] usb 3-1: config 0 descriptor?? [ 60.327091][ T9] device bridge_slave_1 left promiscuous mode [ 60.333286][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.340647][ T9] device bridge_slave_0 left promiscuous mode [ 60.346697][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.596527][ T747] usbhid 3-1:0.0: can't add hid device: -71 [ 60.602352][ T747] usbhid: probe of 3-1:0.0 failed with error -71 [ 60.613069][ T747] usb 3-1: USB disconnect, device number 11 [ 60.906952][ T1599] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 60.923590][ T1599] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2221: inode #15: comm syz.1.312: corrupted in-inode xattr [ 60.935644][ T1599] EXT4-fs error (device loop1): ext4_orphan_get:1240: comm syz.1.312: couldn't read orphan inode 15 (err -117) [ 60.947557][ T1599] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsold,journal_dev=0x0000000000001007,nodiscard,noload,data_err=ignore,resgid=0x000000000000ee00,,errors=continue [ 61.206819][ T24] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 61.224732][ T456] usb 5-1: USB disconnect, device number 4 [ 61.482217][ T1626] xt_CT: You must specify a L4 protocol and not use inversions on it [ 61.628426][ T1626] erofs: (device loop4): mounted with opts: , root inode @ nid 36. [ 61.666515][ T24] usb 1-1: config index 0 descriptor too short (expected 45, got 36) [ 61.674511][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 61.684381][ T24] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 61.693678][ T24] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 61.709800][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.718655][ T24] usb 1-1: config 0 descriptor?? [ 61.869113][ T23] audit: type=1400 audit(1719800738.129:287): avc: denied { create } for pid=1632 comm="syz.1.321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 61.892081][ T23] audit: type=1400 audit(1719800738.129:288): avc: denied { setopt } for pid=1632 comm="syz.1.321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 62.213796][ T23] audit: type=1400 audit(1719800738.449:289): avc: denied { mounton } for pid=1638 comm="syz.1.323" path="/root/syzkaller.pOIk33/28/file0/bus" dev="tmpfs" ino=20059 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 62.238871][ T1310] erofs: (device loop4): erofs_read_inode: bogus i_mode (0) @ nid 305 [ 62.247313][ T1310] erofs: (device loop4): erofs_read_inode: bogus i_mode (0) @ nid 305 [ 62.278059][ T1642] EXT4-fs (loop2): mounted filesystem without journal. Opts: noauto_da_alloc,max_dir_size_kb=0x0000000000000001,dioread_lock,norecovery,discard,lazytime,noload,usrquota,noauto_da_alloc,,errors=continue [ 62.322488][ T1646] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 62.336900][ T1642] tipc: Started in network mode [ 62.343407][ T1642] tipc: Own node identity , cluster identity 4711 [ 62.350464][ T1642] tipc: Failed to obtain node identity [ 62.362874][ T1642] tipc: Enabling of bearer rejected, failed to enable media [ 62.376473][ T24] usb 1-1: string descriptor 0 read error: -71 [ 62.387505][ T24] usb 1-1: USB disconnect, device number 8 [ 62.437367][ T1648] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.444257][ T1648] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.452203][ T1648] device bridge_slave_0 entered promiscuous mode [ 62.460652][ T1648] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.467604][ T1648] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.474768][ T1648] device bridge_slave_1 entered promiscuous mode [ 62.523750][ T1648] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.530621][ T1648] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.537756][ T1648] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.544576][ T1648] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.571981][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.580173][ T380] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.587653][ T380] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.601520][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.610094][ T124] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.616982][ T124] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.670487][ T747] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 62.684245][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.692887][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.701731][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 62.710446][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 62.718861][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 62.727533][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.735616][ T380] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.742471][ T380] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.750647][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.758857][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.827679][ T398] device bridge_slave_1 left promiscuous mode [ 62.833721][ T398] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.841610][ T398] device bridge_slave_0 left promiscuous mode [ 62.847707][ T398] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.917252][ T23] audit: type=1400 audit(1719800739.179:290): avc: denied { create } for pid=1662 comm="syz.0.331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 62.936271][ T747] usb 3-1: Using ep0 maxpacket: 16 [ 63.046418][ T456] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 63.187762][ T1668] erofs: (device loop1): mounted with opts: , root inode @ nid 36. [ 63.189905][ T162] udevd[162]: worker [391] terminated by signal 33 (Unknown signal 33) [ 63.204625][ T162] udevd[162]: worker [391] failed while handling '/devices/virtual/block/loop1' [ 63.216566][ T747] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 63.227410][ T747] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 63.237352][ T747] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 63.246315][ T747] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.255180][ T747] usb 3-1: config 0 descriptor?? [ 63.486748][ T456] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 63.497846][ T456] usb 4-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 63.508948][ T456] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.520413][ T456] usb 4-1: config 0 descriptor?? [ 63.557873][ T456] uvcvideo: Found UVC 0.00 device (046d:08c1) [ 63.564679][ T456] uvcvideo: No valid video chain found. [ 63.616645][ T747] usbhid 3-1:0.0: can't add hid device: -71 [ 63.622540][ T747] usbhid: probe of 3-1:0.0 failed with error -71 [ 63.649763][ T747] usb 3-1: USB disconnect, device number 12 [ 63.758214][ T456] usb 4-1: USB disconnect, device number 6 [ 64.142196][ T1683] xt_CT: You must specify a L4 protocol and not use inversions on it [ 64.244858][ T1683] erofs: (device loop0): mounted with opts: , root inode @ nid 36. [ 64.365852][ T1693] 9pnet: Insufficient options for proto=fd [ 64.370438][ T1692] 9pnet: Insufficient options for proto=fd [ 64.463645][ T1697] fscrypt (sda1, inode 2010): Unsupported encryption flags (0xcb) [ 64.622081][ T1697] device syzkaller0 entered promiscuous mode [ 64.632779][ T23] audit: type=1400 audit(1719800740.889:291): avc: denied { relabelfrom } for pid=1696 comm="syz.3.341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 64.646132][ T1702] netlink: 44 bytes leftover after parsing attributes in process `syz.4.342'. [ 64.655230][ T23] audit: type=1400 audit(1719800740.909:292): avc: denied { relabelto } for pid=1696 comm="syz.3.341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 64.666096][ T1702] netlink: 43 bytes leftover after parsing attributes in process `syz.4.342'. [ 64.691642][ T1697] erspan0: refused to change device tx_queue_len [ 64.698630][ T1697] netlink: 'syz.3.341': attribute type 1 has an invalid length. [ 64.709095][ T1702] netlink: 'syz.4.342': attribute type 5 has an invalid length. [ 64.717216][ T1702] netlink: 43 bytes leftover after parsing attributes in process `syz.4.342'. [ 64.728134][ T1088] erofs: (device loop0): erofs_read_inode: bogus i_mode (0) @ nid 305 [ 64.737636][ T1088] erofs: (device loop0): erofs_read_inode: bogus i_mode (0) @ nid 305 [ 64.756466][ T373] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 64.773531][ T23] audit: type=1400 audit(1719800741.029:293): avc: denied { setopt } for pid=1704 comm="syz.4.344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 65.436590][ T373] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 65.531107][ T1714] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.538069][ T1714] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.545442][ T1714] device bridge_slave_0 entered promiscuous mode [ 65.553062][ T1714] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.560355][ T1714] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.657828][ T1714] device bridge_slave_1 entered promiscuous mode [ 65.836510][ T373] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 65.849608][ T373] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.870504][ T373] usb 3-1: Product: syz [ 65.874554][ T373] usb 3-1: Manufacturer: syz [ 65.879093][ T373] usb 3-1: SerialNumber: syz [ 65.919502][ T1727] erofs: (device loop3): mounted with opts: , root inode @ nid 36. [ 65.963233][ T1727] overlayfs: './bus' not a directory [ 66.065114][ T747] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.075222][ T747] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.126283][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.137556][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.149663][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.154074][ T23] audit: type=1400 audit(1719800742.409:294): avc: denied { unlink } for pid=144 comm="syslogd" name="messages.0" dev="tmpfs" ino=998 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 66.156531][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.198903][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.207123][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.215244][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.222089][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.244145][ T1734] erofs: (device loop3): mounted with opts: , root inode @ nid 36. [ 66.244237][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.260886][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.348307][ T1747] fscrypt (sda1, inode 2009): Unsupported encryption flags (0xcb) [ 66.372491][ T456] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.388250][ T568] blk_update_request: I/O error, dev loop3, sector 1536 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 66.388365][ T558] blk_update_request: I/O error, dev loop3, sector 2 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 66.406544][ T568] blk_update_request: I/O error, dev loop3, sector 1536 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 66.415418][ T562] blk_update_request: I/O error, dev loop3, sector 1536 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 66.432101][ T568] buffer_io_error: 103 callbacks suppressed [ 66.432111][ T568] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 66.435601][ T466] blk_update_request: I/O error, dev loop3, sector 7940 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 66.440442][ T1748] xt_CT: You must specify a L4 protocol and not use inversions on it [ 66.448126][ T467] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 66.476427][ T558] blk_update_request: I/O error, dev loop3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 66.478617][ T1747] device syzkaller0 entered promiscuous mode [ 66.494181][ T1748] erofs: (device loop3): mounted with opts: , root inode @ nid 36. [ 66.495210][ T558] Buffer I/O error on dev loop3p1, logical block 0, async page read [ 66.510281][ T9] device bridge_slave_1 left promiscuous mode [ 66.527695][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.535173][ T9] device bridge_slave_0 left promiscuous mode [ 66.541356][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.642287][ T1747] erspan0: refused to change device tx_queue_len [ 66.652042][ T1747] netlink: 'syz.1.355': attribute type 1 has an invalid length. [ 66.671354][ T456] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.684290][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.698555][ T456] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.714575][ T456] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.727962][ T456] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.916787][ T1755] EXT4-fs error (device sda1): ext4_remount:5517: Abort forced by user [ 67.163386][ T1755] EXT4-fs (sda1): Remounting filesystem read-only [ 67.172816][ T1755] Aborting journal on device sda1-8. [ 67.178488][ T1560] erofs: (device loop3): erofs_read_inode: bogus i_mode (0) @ nid 305 [ 67.187153][ T1560] erofs: (device loop3): erofs_read_inode: bogus i_mode (0) @ nid 305 [ 67.187931][ T373] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 67.202240][ T373] cdc_ncm 3-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 67.213177][ T1760] EXT4-fs error (device sda1): ext4_journal_check_start:61: Detected aborted journal [ 67.222540][ T373] cdc_ncm 3-1:1.0: setting rx_max = 2048 [ 67.225463][ T1760] EXT4-fs (sda1): Remounting filesystem read-only [ 67.396717][ T373] cdc_ncm 3-1:1.0: setting tx_max = 184 [ 67.429307][ T1755] EXT4-fs error (device sda1): ext4_remount:5517: Abort forced by user [ 67.442891][ T373] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM, 42:42:42:42:42:42 [ 67.474947][ T373] usb 3-1: USB disconnect, device number 13 [ 67.489214][ T373] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM [ 67.525755][ T23] audit: type=1400 audit(1719800743.779:295): avc: denied { read } for pid=201 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 68.102734][ T9] device bridge_slave_1 left promiscuous mode [ 68.109309][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.121931][ T9] device bridge_slave_0 left promiscuous mode [ 68.128026][ T9] bridge0: port 1(bridge_slave_0) entered disabled state SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: repeatedly failed to execute the program proc=1 req=362 state=1 status=67 (errno 9: Bad file descriptor)