last executing test programs: 20.495573251s ago: executing program 0 (id=6487): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r0}, 0x18) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000002700)=@base={0xb, 0x8, 0x10001, 0x9, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800007f0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r5}, 0x10) r6 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r6, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) sendmsg(r6, &(0x7f00000000c0)={0x0, 0x953b, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r8}, &(0x7f0000000080), &(0x7f0000000240)=r7}, 0x20) syz_usb_connect(0x2, 0xb71, &(0x7f00000024c0)=ANY=[@ANYBLOB="12010003390f1d4021042d0405080102030109025f0b0300055003090447000a0202ff051024020202008f01069b3daa266385500b24020105010203d9d6580924020101030d02170b24020207000500f4a08c1124020204007c160e5786a0099bcfbbb80e240201080108b24eba5495600e0a24020100040209f42d0724015f0602000f2402027c00000005a78e8d1e95b510240202ff00000208fbc20a76f25ad4"], &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}) 19.223758757s ago: executing program 4 (id=6481): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r4, 0x11, 0x1, &(0x7f0000000040)=0x6, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r5, 0x107, 0x16, 0x0, 0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000007e40), 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x9}, 0x8) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r7, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) connect$inet(r7, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmmsg$inet(r7, &(0x7f0000003b00)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000037c0)='-', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000004200)=[{&(0x7f0000003e80)='Z', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000500)='x', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000002340)="d4", 0x1}], 0x1}}], 0x4, 0x60cd894) 18.341681429s ago: executing program 4 (id=6482): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0xa) socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) sched_setaffinity(r0, 0x8, &(0x7f0000000380)=0x2) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c80)={0xffffffffffffffff, 0xe0, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840), 0x0, 0xd, &(0x7f0000000880), 0x0, 0x10, &(0x7f00000008c0), &(0x7f0000000940), 0x8, 0xe0, 0x8, 0x0, 0x0}}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c02000019000100000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000a00000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000016000000000000000000000000000000000000000000000084010500ac1414aa000000000000000000000000000000003c00000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb000000003c00000000000000fe80000000000000000000000000000000000000000000000000000000000000000000007f000001000000000000000000000000000000006c00000000000000ac1414aa0000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000aa000000003300"/339], 0x23c}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) 17.457403181s ago: executing program 4 (id=6488): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x1, 0x56a, &(0x7f00000015c0)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000059c0)='./bus\x00', 0x1400e, &(0x7f0000005a00), 0x1, 0x42f, &(0x7f0000000940)="$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") prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r5, 0x400455c8, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000200)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000180)=@v2, 0x14, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$get_security(0x11, r6, &(0x7f0000000280)=""/78, 0x4e) 16.408786951s ago: executing program 0 (id=6491): r0 = syz_open_dev$mouse(&(0x7f0000000240), 0x8000, 0x44001) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x142, 0x142, 0x4, [@enum={0x5, 0x1, 0x0, 0x6, 0x4, [{0xb, 0x8000}]}, @datasec={0xb, 0x5, 0x0, 0xf, 0x2, [{0x2, 0x8000, 0x8}, {0x3, 0xc, 0x4ec5}, {0x3, 0x8, 0xa}, {0x4, 0x8, 0x8}, {0x1, 0x9, 0xde1}], 'W\r'}, @enum={0x5, 0x5, 0x0, 0x6, 0x4, [{0xf, 0xc}, {0xf}, {0x3, 0x1}, {0xc, 0xb21c}, {0xe, 0x80000000}]}, @struct={0xc, 0x8, 0x0, 0x4, 0x0, 0x2, [{0xe, 0x0, 0x8}, {0x3, 0x0, 0x4}, {0x8, 0x0, 0x8}, {0xd, 0x0, 0x7}, {0x0, 0x3, 0x1}, {0x6, 0x0, 0x4}, {0xf, 0x0, 0x4}, {0x0, 0x1, 0x7fffffff}]}, @func_proto={0x0, 0x7, 0x0, 0xd, 0x0, [{0x9, 0x3}, {0xb, 0x5}, {0xe, 0x4}, {0x3, 0x2}, {0xb}, {0x3, 0x2}, {0x5, 0x3}]}]}, {0x0, [0x30, 0xe]}}, &(0x7f0000000540)=""/174, 0x160, 0xae, 0x0, 0x9, 0x0, @void, @value}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x16, 0xfffffffb, 0xffffffff, 0x4, 0x4b2, r0, 0x2, '\x00', r1, r2, 0x5, 0x1, 0x5, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x256c, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000001440)={0xfffffffffffffd87, 0x0, 0x0, &(0x7f00000013c0)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x0, "741cb976"}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000001840)={0x24, 0x0, &(0x7f0000001740)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f00000001c0)={0x14, &(0x7f0000000000)={0x0, 0x31, 0x1d, {0x1d, 0x1, "f3377e40bfcbdc78d22bd28263512ac8b5afd97b043e6b17197b4a"}}, &(0x7f0000000180)={0x0, 0x3, 0x29, @string={0x29, 0x3, "8bdc64d86d9ae2b07f82556202a54d0b29e4fbb950a630f17d3b6fcdc10ee4272dba8650ee960b"}}}, &(0x7f0000000600)={0x34, &(0x7f0000000300)={0x60, 0x14, 0x70, "7cad44e1f538fc6c5752fc8e64454528e8e85da5c90efa819b8d1830723ba32db4dd414980c851d2660edb740dfbf93fc692ea90a1c0ee6f77b90a942d1012f74970ba8ed2957b56558c6d0c1fdbb54a787d7c86b7b937a7238284001319b9d1a4ed9308ab4afbc97e80bbf687adfb7e"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x4}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x7f}, &(0x7f00000004c0)={0x20, 0x0, 0xbf, {0xbd, "f464413476818f24f95dba7854527d1d89ddba4b2351029b3febce1ce73b6ada0eb891906b55ab18c24f9400876ac8e8721813f6a8f406ba657860f33f95c0e6e7a4c6952c1a005e275fc049de8ec33dcaa3e49c648c46a1faa6d9d387929c473ea72181f7871b715e318fb56c4d2c9b3091370446fcf8bcb42def75cfefbc194f29461f91d72f6164c2114a2c494745e2a83fd8aa531857874b91dda8d6c28f42b9635b617987db6db674c8c0d77f7e7190f4d3ec1ed3afeb3dd06a34"}}, &(0x7f0000000400)={0x20, 0x1, 0x1, 0xf9}, &(0x7f00000005c0)={0x20, 0x0, 0x1, 0x58}}) syz_usb_control_io(r5, 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000100000000000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000640)='io_uring_req_failed\x00', r6}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000004080)={{r7}, &(0x7f0000004000), &(0x7f0000004040)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x6f) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_usb_control_io$hid(r5, &(0x7f0000000040)={0x24, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x36) r8 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r10 = dup2(r9, r9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r10}, 0x10) pwrite64(r8, &(0x7f0000000080)='3', 0x1, 0x0) 16.388891224s ago: executing program 4 (id=6492): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000080)='kfree\x00'}, 0x3d) read$FUSE(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x6, 0x8, 0x40, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r0, &(0x7f00000000c0), 0x0}, 0x20) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x10) ptrace(0x10, 0x1) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x5}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r2, &(0x7f00000074c0)={0x2020}, 0x2020) getdents(r2, &(0x7f00000013c0)=""/4096, 0x1000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = gettid() timer_create(0x0, &(0x7f0000000440)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = getpgid(0x0) ptrace$setopts(0x4206, r5, 0x0, 0x20004c) recvmsg(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000200)=""/78, 0x4e}], 0x1}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) gettid() syz_usb_connect(0x0, 0x24, &(0x7f0000000700)=ANY=[], &(0x7f0000000180)={0x0, 0x0, 0xc, &(0x7f0000000380)=ANY=[]}) 12.019296146s ago: executing program 0 (id=6504): socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioprio_get$uid(0x3, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$inet6(0x10, 0x3, 0x0) r3 = socket(0x2, 0x3, 0xff) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$unix(r3, &(0x7f0000002fc0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)="643c87cf2bd21d995e613d73613b1e78334efea0", 0x14}], 0x1}}], 0x1, 0xa00) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x10000000, 0x0, 0x20008090}, 0x2404c810) setxattr(0x0, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0) listxattr(0x0, 0x0, 0x0) sendto$inet6(r2, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) syz_open_dev$usbfs(0x0, 0x2000000b, 0x101301) 11.629184691s ago: executing program 0 (id=6505): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={0x0, 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0x9, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0xfffffffc, '\x00', 0x0, r3, 0x2, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x4}, 0x38) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e) close(r5) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000540)={{{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in=@local}}, 0xe8) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r6, 0x80487436, &(0x7f0000005280)) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 11.132154418s ago: executing program 0 (id=6507): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r0}, 0x18) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='sched_switch\x00', r4}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) bind$tipc(0xffffffffffffffff, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_proto_private(r6, 0x8b0d, &(0x7f0000000000)) close(r5) getrusage(0x1, &(0x7f0000000440)) 9.621682712s ago: executing program 0 (id=6510): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00', r0}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc250d40f7535f7866907dc6751dfb265a0e3ccae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c9837d5ac03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce935b0f327cb3f011a7d06602e2fd52347125907000000000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df262ad0a97aec7291c25447c106a9b893e10db21901eb397b2f5fd71d20fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada12f7a1525320e716660000000000b02b001500a710eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d3294000000000000000000000000000000000000000000000000000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18a904c0e585a66c3b84b138efc20a546d3d5227e23b03f2a834391ad24fe7d9b20cf92cb151763d41f5c76e2ff3e93ee296c4082ee73e7e197253a2b66c353312c9d75711ce1623e9c5452f42e09b388a14b22bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1c77a211bfa02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0843b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f04c7f0be31491eb8c9ff68236c8600000000000000000000000066e034c81c3cab4e33fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f2243471221c15fa12313ffbfa7c2730302b66cf8aeb1f98bd67bfd38ec2beac3ca99f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94d81150c68ab27987655e1dd676ceef54ad4d663f88b6f82a65f7c94a0e40cbb782ff536bd67ba81125f8e0af199094b407f630dc6eb3b79615a4e63f75ab30b1e475748cb5dce6581dc92f740a21fb8dec725b4f2a0b0972f852504245d5ce11cfdead09c9b6e094261084cd20c2294525061a4638c0bfd08dfa70d24bf85d9cfd940e1a4f1509bed8233f22506e5b000000000000862a01def6c9e879a87688ad151c14ae7ff8a090aebe7e4f936c26e565ae96d38ee5f794468caa17419e22ff13df60a95596490358a3b8121511e427d619ad87fe998702ea0b659eff3f5cd8f4094fdd6b1d45facfe6629846170d99de670a9e72e21ed7363876612bf58a17142abccbbe4762f531067f"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r4}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000d00)=@newtaction={0x108, 0x1e, 0x109, 0x0, 0x0, {}, [{0xf4, 0x1, [@m_csum={0xf0, 0x1a, 0x0, 0x0, {{0x9}, {0xac, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xe, 0x9, 0x6, 0x2, 0xaa}, 0x22}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x4, 0x0, 0x6, 0x3}, 0x47}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0x5204, 0x7, 0x5, 0x4}, 0x12}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xf837, 0x7ff, 0xffffffffffffffff, 0x8, 0x8}, 0x5}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xc6, 0xff, 0x8, 0x80000000, 0x38}, 0x37}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x3ff, 0xffffffffffffffff, 0x1, 0xfffff00e}, 0x6}}]}, {0x19, 0x6, "2c64dd6b4667626d0dd7c557813fd15714f9373cdf"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}, 0x108}, 0x1, 0x2b1e, 0x0, 0x4000}, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x10) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4b, &(0x7f0000001300)=""/193) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mtu(r8, 0x0, 0xa, &(0x7f0000000240)=0x2, 0x4) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0xf) r9 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000380)=ANY=[@ANYBLOB="08000000000000003b0a000000000000000000800000000011090000000000000000000000000080da0200000000000000000000000000002f030000000000000700000000000000ad0b00000000000006000000000000008a09000000000000d0050000000000008105000000000000070000000000000096030000010000000100000000000000"]) ioctl$TCFLSH(r6, 0x400455c8, 0x0) ioctl$sock_bt_hci(r5, 0x400448ca, 0x0) 7.855068366s ago: executing program 2 (id=6514): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, 0x0, &(0x7f0000000040)) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x7fff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)) r5 = epoll_create(0x7e) epoll_pwait(r5, &(0x7f0000000380)=[{}, {}], 0x2, 0x9, &(0x7f00000003c0)={[0x9]}, 0x8) socket$nl_route(0x10, 0x3, 0x0) socket(0x24, 0x0, 0x0) r6 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000580)=[{}], 0x8, 0x10, &(0x7f00000002c0), &(0x7f0000000340), 0x8, 0x10, 0x8, 0x0, 0x0}}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000180000003d030100000000009500f000000000006926000000000000bf67000000000000560602000fff07006706000020000000170200000ee60000bf250000000000002d350000000000006507000002080000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad35010000000000840400000000000014000000000000009500000000000000db13d5d8b741f2cdaabc8383c8f56b8c2b84a800ea6553f304000000815dcf00c3eebc52267b042d19"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r7, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500), 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="300000001c00070c000000150000000007000000", @ANYRES32=r9, @ANYBLOB="000000000a000200aaaaaaaaaabb000006000500"], 0x30}}, 0x0) 7.364289152s ago: executing program 3 (id=6516): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001c000100000000000000000007000000", @ANYRES32=r3, @ANYBLOB="4000aa000a00020035"], 0x28}}, 0x0) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffff78d, '\x00', r3, r4, 0x5, 0x400, 0x3, 0x0, @void, @value, @void, @value}, 0x48) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xa, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x83000000}, {0x85, 0x0, 0x0, 0x71}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='percpu_free_percpu\x00', r6}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x417c, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x89901) close(r7) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000b00)={"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"}) fsconfig$FSCONFIG_CMD_RECONFIGURE(r7, 0x7, 0x0, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000009000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sys_enter\x00', r9}, 0x10) request_key(0x0, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)={0x50, 0x3, 0x1, 0x101, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @local}}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0xd05}]}]}, 0x50}}, 0x0) syz_emit_ethernet(0xb6, &(0x7f0000000200)={@link_local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "081f20", 0x80, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96489269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "020000000400000126000400"}, {0x18, 0x1, '\x00\x00\x00\x00\x00\x00'}, {0x18, 0x1, "45976e75e433"}]}}}}}}, 0x0) syz_clone3(&(0x7f0000000600)={0x22000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000580)=[r0], 0x1}, 0x58) 7.048484618s ago: executing program 1 (id=6518): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r0}, 0x18) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000002700)=@base={0xb, 0x8, 0x10001, 0x9, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800007f0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r5}, 0x10) r6 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r6, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) sendmsg(r6, &(0x7f00000000c0)={0x0, 0x953b, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r8}, &(0x7f0000000080), &(0x7f0000000240)=r7}, 0x20) syz_usb_connect(0x2, 0xb71, &(0x7f00000024c0)=ANY=[@ANYBLOB="12010003390f1d4021042d0405080102030109025f0b0300055003090447000a0202ff051024020202008f01069b3daa266385500b24020105010203d9d6580924020101030d02170b24020207000500f4a08c1124020204007c160e5786a0099bcfbbb80e240201080108b24eba5495600e0a24020100040209f42d0724015f0602000f2402027c00000005a78e8d1e95b510240202ff00000208fbc20a76f25ad40905060000"], &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}) 6.966089188s ago: executing program 2 (id=6519): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000480, &(0x7f0000000280), 0x1, 0x76a, &(0x7f0000001b00)="$eJzs3d9rW1UcAPDvTdt17aatIOh8KghaGEvtrJuCDxMfRHAw0Ge3kGZlNm1Gk461FNwQwRdBxQdBX/bsj/nmqz9e9b/wQTamdsOJD1K5adJla9KlW5MI+XzgNOfce9Nzvjn3nnuSe0kC6FsT6Z9MxKGI+CiJGKstTyJiqJobjDixud3t9bV8mpLY2Hjzj6S6za31tXw0PCd1oFZ4MiJ+fD/icGZ7veWV1flcsVhYqpWnKgvnp8orq0fOLeTmCnOFxWPTMzNHj79w/NjexfrXL6sHr3/82rPfnPjnvSeufvhTEifiYG1dYxx7ZSImaq/JUPoS3uXVva6sx5JeN4AHkh6aA5tHeRyKsRio5loY6WbLAIBOeTciNgCAPpM4/wNAn6l/DnBrfS1fT739RKK7brwSEfs3469f39xcM1i7Zre/eh109FZy15WRJCLG96D+iYj44ru3v0pTdOg6JEAzly5HxJnxie3jf7LtnoXdeq6NbSbuKRv/oHu+T+c/Lzab/2W25j/RZP4z3OTYfRD3P/4z1/agmpbS+d/LDfe23W6Iv2Z8oFZ6pDrnG0rOnisW0rHt0YiYjKHhtDy9Qx2TN/+92Wpd4/zvz0/e+TKtP328s0Xm2uDw3c+ZzVVyDxNzoxuXI54abBZ/stX/SYv576k263j9pQ8+b7UujT+Nt562x99ZG1cinmna/3fuaEt2vD9xqro7TNV3iia+/fWz0Vb1N/Z/mtL66+8FuiHt/9Gd4x9PGu/XLO++jp+vjP3Qat3942++/+9L3qrm99WWXcxVKkvTEfuSN7YvP3rnufVyffs0/smnmx//O+3/6XvCM23GP3j9968fPP7OSuOf3VX/7z5z9fb8QKv62+v/mWpusraknfGv3QY+zGsHAAAAAAAAAAAAAAAAAAAAAAAAAO3KRMTBSDLZrXwmk81u/ob34zGaKZbKlcNnS8uLs1H9rezxGMrUv+pyrOH7UKdr34dfLx+9p/x8RDwWEZ8Oj1TL2XypONvr4AEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg5kCL3/9P/Tbc69YBAB2zv9cNAAC6zvkfAPrP7s7/Ix1rBwDQPd7/A0D/cf4HgP7j/A8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAECHnTp5Mk0bf6+v5dPy7IWV5fnShSOzhfJ8dmE5n82Xls5n50qluWIhmy8ttPxHlzYfiqXS+ZlYXL44VSmUK1PlldXTC6Xlxcrpcwu5ucLpwlDXIgMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA9pVXVudzxWJhSUZGRmYr0zhKjPRugAIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4n/svAAD//9EyKso=") bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000]}, 0x45c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0}, 0x18) r6 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendto$inet6(r6, &(0x7f00000002c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xfffffffffffffe88) setsockopt$inet6_udp_int(r6, 0x11, 0x1, &(0x7f0000000080), 0x4) ioctl$UI_SET_PROPBIT(r2, 0x5501, 0x0) write$input_event(r2, &(0x7f00000005c0), 0x200005d8) 5.943950836s ago: executing program 2 (id=6521): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000480, &(0x7f0000000280), 0x1, 0x76a, &(0x7f0000001b00)="$eJzs3d9rW1UcAPDvTdt17aatIOh8KghaGEvtrJuCDxMfRHAw0Ge3kGZlNm1Gk461FNwQwRdBxQdBX/bsj/nmqz9e9b/wQTamdsOJD1K5adJla9KlW5MI+XzgNOfce9Nzvjn3nnuSe0kC6FsT6Z9MxKGI+CiJGKstTyJiqJobjDixud3t9bV8mpLY2Hjzj6S6za31tXw0PCd1oFZ4MiJ+fD/icGZ7veWV1flcsVhYqpWnKgvnp8orq0fOLeTmCnOFxWPTMzNHj79w/NjexfrXL6sHr3/82rPfnPjnvSeufvhTEifiYG1dYxx7ZSImaq/JUPoS3uXVva6sx5JeN4AHkh6aA5tHeRyKsRio5loY6WbLAIBOeTciNgCAPpM4/wNAn6l/DnBrfS1fT739RKK7brwSEfs3469f39xcM1i7Zre/eh109FZy15WRJCLG96D+iYj44ru3v0pTdOg6JEAzly5HxJnxie3jf7LtnoXdeq6NbSbuKRv/oHu+T+c/Lzab/2W25j/RZP4z3OTYfRD3P/4z1/agmpbS+d/LDfe23W6Iv2Z8oFZ6pDrnG0rOnisW0rHt0YiYjKHhtDy9Qx2TN/+92Wpd4/zvz0/e+TKtP328s0Xm2uDw3c+ZzVVyDxNzoxuXI54abBZ/stX/SYv576k263j9pQ8+b7UujT+Nt562x99ZG1cinmna/3fuaEt2vD9xqro7TNV3iia+/fWz0Vb1N/Z/mtL66+8FuiHt/9Gd4x9PGu/XLO++jp+vjP3Qat3942++/+9L3qrm99WWXcxVKkvTEfuSN7YvP3rnufVyffs0/smnmx//O+3/6XvCM23GP3j9968fPP7OSuOf3VX/7z5z9fb8QKv62+v/mWpusraknfGv3QY+zGsHAAAAAAAAAAAAAAAAAAAAAAAAAO3KRMTBSDLZrXwmk81u/ob34zGaKZbKlcNnS8uLs1H9rezxGMrUv+pyrOH7UKdr34dfLx+9p/x8RDwWEZ8Oj1TL2XypONvr4AEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg5kCL3/9P/Tbc69YBAB2zv9cNAAC6zvkfAPrP7s7/Ix1rBwDQPd7/A0D/cf4HgP7j/A8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAECHnTp5Mk0bf6+v5dPy7IWV5fnShSOzhfJ8dmE5n82Xls5n50qluWIhmy8ttPxHlzYfiqXS+ZlYXL44VSmUK1PlldXTC6Xlxcrpcwu5ucLpwlDXIgMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA9pVXVudzxWJhSUZGRmYr0zhKjPRugAIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4n/svAAD//9EyKso=") bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000]}, 0x45c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0}, 0x18) r6 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendto$inet6(r6, &(0x7f00000002c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xfffffffffffffe88) setsockopt$inet6_udp_int(r6, 0x11, 0x1, &(0x7f0000000080), 0x4) ioctl$UI_SET_PROPBIT(r2, 0x5501, 0x0) write$input_event(r2, &(0x7f00000005c0), 0x200005d8) 5.81632291s ago: executing program 3 (id=6517): syz_mount_image$ext4(&(0x7f0000000ac0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x3810744, &(0x7f0000000700)={[{@noauto_da_alloc}, {@user_xattr}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10000}}, {@jqfmt_vfsv0}, {@delalloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x400000}}, {@noauto_da_alloc}, {@test_dummy_encryption}]}, 0x1, 0x451, &(0x7f0000000d00)="$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") r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x0, &(0x7f0000000100)}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000000)=ANY=[@ANYRESDEC=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000440)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000004000000000000000000850000002300000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000380)='sched_switch\x00', r4}, 0x10) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000180)=0x221a, 0x4) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) r6 = socket$inet_tcp(0x2, 0x1, 0x0) dup3(r5, r6, 0x0) sendmmsg$inet(r6, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000000540)="679512f062b8d965651edd4c06c901784e56aa174403ad4134742b71d211c6a85d8bc563c27f754fc2af5351f2f41e867c71c19837f2feba7862e511a47c446cd11c960f018962a53f6cf31a1123ff8092c9ff560701bfc579fa80f9149acafe2a225fed70d9173f0243a55be3c4028da556cf126da9c1b9b8f8e113", 0x7c}, {&(0x7f00000003c0)="5a268f4785bba0774702365bf4469155da654cbe1ea17e28716b296b91c331d001fdb2018e7f32be7178d9e28e4f62931f6fe1209a7ec4edbc9e8791150d3b53dd0568cfa9755b27e0", 0x49}], 0x2}}, {{0x0, 0x0, &(0x7f0000001100)=[{&(0x7f00000012c0)="c89339f96fa636ba2f527aaa37159cc815448e015b23284d531bdd25a86c02e88b8f962021a37fd9614193094b27b21bf40bc7b43441ae5179a127ea80e91899e1f10a7045c4412bb7997ff8838923521fe0754832209cd546f4ed81500298511e080ec7059b1c32c07fd26f721c6611b8cb344a3fd8f7a889c50a42881e09d4d7ee7ee6c308a13ae6436c858933dc99f71924b68ae0faf95b0afcd3533bcc32840737f434728a12e99aea5c4ee6a603636560b8d9de530d395181e440c1a025ff8d6f33062f14ba2403a178e32ff2d4ec5d0d2c83233b01a41103ef38daeed650987abebe0e8ba7effc07bb5dbbc9a38a11f082f2c99937942f017c37a59572f5069ca709702ef133aa9730ebb5b72687f6175906dbc32289108cc93e5c84284bc701a0629e12eca8c15e763acd011323b758fdb82a63665c906b176042a6c601b5428722c8f6b795a4effc0d4c9a4b4963ae30e77afa0b473d27f4938b1f081765f30aee60de80b1154e3afc3593cad6a146f1c4e954a6b7535f7c4f1baf0e7280ae8957eb14aecb29cc42be434b6a73840fb4668ab11c7ad5f300d7561aa60619fc26a1bfe8fa4858b8b4282d0c9a86c8c2eed644303c1213114081f9cd2358f6609ed25113de321db6b3efbfea341c7318fdcf6776383d3329f080e2386a708679852ee2c28c2ab423163be97f818424b862486791ce5b8b25836a4f07079b65c7c3b2e797eee7f267e5cf37fb63bb89f6b15c332da46b2a313ff6cd958152701a73601c7d02b74622ba7ff9c2fccb1826a3238b95163edcf5dbb381c666fcd8f0ce22eb182135bd8a32c627e20354f2253edb77efadbb48d512ca030763df825c1dd71d34295dc2e75e0a3054354ca6674e2d16ae319c8f3bf7a7fe1e1e596cc2679444c2b5e84a5caaa40136a41a3a35e2ca053d8e4ff2134c2bd7dc2c5c7ef55579a7b569b5face778afba93a877b622f473d942fef36d909b7c17e2ba3948fc889f377f0bce583835ce70b86ee8c419f77c9fa9da33d5f3fd2f994c2229b59db0670a15d7ba9b8b3245c7c2f83953c046528db1d9626877752071b0389bb18edd4d3797b6846e8746911526b6cfb1da1a206f5d13f69d7a8a76f5dfaf02abdfde171ed51a80ca2146fe8a181df5f9c9e969c1e2113bb355a956dd0139446d7e5b1ae338513459753977c245177ed5ae398bb23ad503739c2d75b99d70af19a2faf0a6922585378c0c881298f5af7dc63f99b40be3aea8c25bb8f599ffc4d47caec400357f2fa0675c5a81141d6b1697a92f7ab1e465361bdec4bc837595cc257aac0bcd3333eef2199c622268f0aafdccf73b3fda6ddef6102aa03c1a07a85509025be45443e71d63e4a8b54cde98554b1dd9a2f431b62d29f0cf67e069c15988b8b78c6c66f7f1d831e6307473250bf66b88c1c326faa8f093f03824980bbddc34e2324754fdaafa45ea1a1cc4baaef3104108c8e7987696d3634aa61cd9af0f2b5e427eff51cc66792a37a6e09278c6457a92a84d2fd23f7a753120758e5ca80582848d537d2704315ee55374ca8204c427c8f1138c901a29f83c0b63fb00dca30a90aa0b81d09fad2bf556100a3f762dcafd44d89936f8d5e037bff746a3d7f769ef8045ca50b1f7e8b24b723f06b5582564133e8d6b9f78c0e0d19c6808b65aa19e0dbd18527e5cf4f1c2a7e9b9dcf996d781b0851b925a02a02a9ec2887fa049d10bf8e3cf99157df4f6708c9b3673e565ad47f3518d45c69e4c18f511a9973938279a0c607d4d5b010b83b7edf9dc91ac7b9dabcabf45f4abf863c87c9671b22421600e6358ab3798afeabb0021b587e125b4f599271228944365b1333e3a9f5cc7211fde35179bc2237a26d11b9ed5387644e34efbffb54c615c7e52efc06b425d43d85227f73d7d7a7435c4bf35c76be6e5daf24785f197710503a7cf3c6bde5d5f9ac3312f50af0bcd4e05313bf02e8737761c47957cdb07f1efe8468502e58e1ef9d02582fdfe2db9c1300d99d97b2b339b73a78ef91206a8f08a21988076987ca3b6e361bdd86fb74a9184789586a1815935d837fa7590ec4ae", 0x5c3}], 0x1}}], 0x2, 0x0) 4.973687587s ago: executing program 2 (id=6522): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e02000000000000000000000000000005040000"], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0x9, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0xfffffffc, '\x00', 0x0, r3, 0x2, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x4}, 0x38) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e) close(r5) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000540)={{{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in=@local}}, 0xe8) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r6, 0x80487436, &(0x7f0000005280)) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 4.797702748s ago: executing program 3 (id=6523): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000480)='./file0\x00', r0, 0x0) setxattr$system_posix_acl(&(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000740)={{}, {}, [{0x2, 0x5, r0}, {0x2, 0x0, r0}], {}, [], {0x10, 0x6}}, 0x34, 0x0) creat(&(0x7f0000000040)='./file0/file0\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0xfff, 0x5, 0x315c, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) write(r3, &(0x7f0000000000)="fa", 0xfffffdef) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) mlock(&(0x7f0000186000/0x4000)=nil, 0x4000) getsockopt$nfc_llcp(r4, 0x6, 0x12, 0x0, 0x2000e881) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000400)='ext4_allocate_inode\x00'}, 0x10) close(0xffffffffffffffff) getrandom(&(0x7f0000000080)=""/240, 0xfffffffffffffe77, 0x0) 4.08509135s ago: executing program 4 (id=6520): r0 = socket(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x3) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYRES32=r2], 0x68}}, 0x84) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x4000080) r7 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCSCLOCKID(r7, 0x400445a0, &(0x7f00000000c0)=0x3) write$selinux_access(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="73797374656d723a69706d695f6465766963655f743a7330202f696e2f637570736420303030303030303030303030303030303336373300731d10f7d1ea45c16c4880032b04ca419e540dfb565e9aa7c0ca6c445712c36e6b6a0054cb2b57"], 0x48) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}, {0x0, 0x0, 0x9}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0x33}, 0x2, @in6=@dev, 0x0, 0x4, 0x0, 0x1}}, 0xe8) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f00000000c0)=0xffff, 0x4) write(r0, &(0x7f0000000000)="240000001a005f0314f9f407000904000200000001000000000000000800040001000000", 0x24) recvmmsg(r0, &(0x7f0000006340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001740)=""/17, 0x11}}], 0x1, 0x0, 0x0) 3.960723344s ago: executing program 1 (id=6524): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) stat(&(0x7f00000004c0)='./file0\x00', 0x0) lchown(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) setxattr$system_posix_acl(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000740)={{}, {}, [{0x2, 0x5}, {}], {}, [], {0x10, 0x6}}, 0x34, 0x0) creat(&(0x7f0000000040)='./file0/file0\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0xfff, 0x5, 0x315c, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) write(r2, &(0x7f0000000000)="fa", 0xfffffdef) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) mlock(&(0x7f0000186000/0x4000)=nil, 0x4000) getsockopt$nfc_llcp(r3, 0x6, 0x12, 0x0, 0x2000e881) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000400)='ext4_allocate_inode\x00'}, 0x10) close(0xffffffffffffffff) getrandom(&(0x7f0000000080)=""/240, 0xfffffffffffffe77, 0x0) 3.609382924s ago: executing program 3 (id=6525): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x2810000, &(0x7f0000000380)={[{@user_xattr}, {@noquota}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@jqfmt_vfsv1}, {@block_validity}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@noquota}, {@min_batch_time={'min_batch_time', 0x3d, 0x8}}, {@delalloc}, {@user_xattr}, {@quota}]}, 0x1, 0x562, &(0x7f0000001080)="$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") fallocate(r0, 0x60, 0x0, 0x40) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002021702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$netlink(0x10, 0x3, 0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r3 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) ioctl$EVIOCGRAB(r3, 0x40044590, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0xfe3b) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@delchain={0x24, 0x25, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) pwritev2(r3, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wake_lock', 0x202, 0x0) write$binfmt_misc(r7, &(0x7f0000000100), 0x4c) 3.313169069s ago: executing program 1 (id=6526): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) mount$bind(0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000008, 0x50, 0xffffffffffffffff, 0x5738d000) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) open(0x0, 0x121342, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000005e00)=@newqdisc={0x60, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0xa4}}, @TCA_TBF_BURST={0x8, 0x6, 0xd206}]}}]}, 0x60}}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r4) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r5 = inotify_init1(0x0) fcntl$setown(r5, 0x8, 0xffffffffffffffff) fcntl$getownex(r5, 0x10, &(0x7f0000000140)={0x0, 0x0}) r7 = syz_open_procfs(r6, &(0x7f0000000600)='fd/4\x00') ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r7, 0x8004587d, &(0x7f0000001ec0)={@id={0x2, 0x0, @auto="de60e4b8e8c640437d02438081fc0e47"}}) 3.150624547s ago: executing program 4 (id=6527): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000401e04012810000000000109022400010000000009040000020300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f0000000040)=0x18, &(0x7f0000000140)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b70300000000ecff850000000400000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r4, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) r6 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x802) write$evdev(r6, &(0x7f0000000000), 0x100000008) ioctl$F2FS_IOC_GARBAGE_COLLECT(r6, 0x80004506, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r8, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018400110800395032303030"], 0x15) r9 = dup(r8) write$FUSE_BMAP(r9, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r9, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r8]) lchown(&(0x7f0000000100)='./file0\x00', 0xffffffffffffffff, 0x0) r10 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) getdents64(r10, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="0000f0"], 0x0, 0x0, 0x0, 0x0}, 0x0) 3.000004504s ago: executing program 1 (id=6528): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000480)='./file0\x00', r0, 0x0) setxattr$system_posix_acl(&(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000740)={{}, {}, [{0x2, 0x5, r0}, {0x2, 0x0, r0}], {}, [], {0x10, 0x6}}, 0x34, 0x0) creat(&(0x7f0000000040)='./file0/file0\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0xfff, 0x5, 0x315c, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) write(r3, &(0x7f0000000000)="fa", 0xfffffdef) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) mlock(&(0x7f0000186000/0x4000)=nil, 0x4000) getsockopt$nfc_llcp(r4, 0x6, 0x12, 0x0, 0x2000e881) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000400)='ext4_allocate_inode\x00'}, 0x10) close(0xffffffffffffffff) getrandom(&(0x7f0000000080)=""/240, 0xfffffffffffffe77, 0x0) 2.545538186s ago: executing program 3 (id=6529): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000d00000000080000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x4f8, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000000000000046, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r6}, 0x0, &(0x7f00000002c0)}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r8 = dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x12, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYBLOB, @ANYRESHEX=r8]) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, r2, 0x3559482e553b8fc3, 0x0, 0x0, {{0x5}, {@val={0x8, 0xe}, @void}}}, 0x1c}}, 0x0) syz_open_dev$usbmon(&(0x7f00000002c0), 0x2, 0x101642) r9 = syz_open_dev$usbfs(&(0x7f0000000000), 0x200, 0x102) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') dup(r9) 1.99881015s ago: executing program 1 (id=6530): syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f00000000c0)='./bus\x00', 0x4002, &(0x7f0000000700)={[{@iocharset={'iocharset', 0x3d, 'iso8859-2'}}, {@numtail}, {@fat=@codepage={'codepage', 0x3d, '852'}}, {@shortname_mixed}, {@uni_xlate}, {@uni_xlate}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'iso8859-7'}}, {@shortname_win95}, {@shortname_lower}]}, 0x1, 0x227, &(0x7f0000001980)="$eJzs3TFrU1EUAOATm2opSDIIRRF84uIU2op7i1QQA4qSQSeLTVGaWrAQ0KF180/oX9DRVXAQV/+ACFIFF7t1UCLmJTVpEwxq8sR+35Cc3HfPe+e+hFySkPtunVxdWVpbX97e3oqJiVzk52IudnJRjEMxFqlHAQD8T3YajfjSSGVdCwAwGs35/1s+Isz/AHBQDPj5/+oISwIAhsz3/wBw8Fy/cfPyfLm8cC1JJiJWH9cr9Up6n26fX467UYtqTEchvkY0dqXxxUvlhenkh4/FqKxutvI365Wx7vyZKESxd/5MkurOH4/JVv67yajGbBTiWO/82Z75h+PsmY7jl6IQb2/HWtRiqfVrRzt/YyZJLlwp78k/0uwHAAAAAAAAAAAAAAAAAAAAAADDUEp29Vy/p1Tqtz3NH3x9oL3r8+TjRD7bsQMAAAAAAAAAAAAAAAAAAMC/Yv3Bw5XFWq2ai1zzcfV+u6UjuPfm2avult8K0iMWm7d/sp+/Exw9/eFJvz5j+87PCAt7eSrL0zJg8HrrzvFz61PnMytjPCL2t/R9aX0uRAypnueZPhftUf+y89TTucUXG+8/Dbrn0b4PAQAAAAAAAAAAAAAAAAAAnf9vz7oSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMjOz+v/Dy/IeowAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPA9AAD//8Q3lJU=") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000002c0)='kfree\x00', r5}, 0x10) socket$inet(0x2, 0x2, 0x1) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r6}, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1000002, 0x0) r7 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r7, 0x5412, &(0x7f00000000c0)=0x8f) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000140)=0x15) 1.864259755s ago: executing program 2 (id=6531): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000480, &(0x7f0000000280), 0x1, 0x76a, &(0x7f0000001b00)="$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") bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000]}, 0x45c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0}, 0x18) r6 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendto$inet6(r6, &(0x7f00000002c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xfffffffffffffe88) setsockopt$inet6_udp_int(r6, 0x11, 0x1, &(0x7f0000000080), 0x4) ioctl$UI_SET_PROPBIT(r2, 0x5501, 0x0) write$input_event(r2, &(0x7f00000005c0), 0x200005d8) 1.550405001s ago: executing program 3 (id=6532): r0 = open(0x0, 0x14507e, 0x0) ftruncate(r0, 0x9) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x103042, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() accept4$vsock_stream(r1, &(0x7f0000000240)={0x28, 0x0, 0x0, @host}, 0x10, 0x80800) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, 0x0, 0x0) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70200001400894fb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d) r7 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') r8 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x0) mmap(&(0x7f000001a000/0x3000)=nil, 0x3000, 0xf, 0x11012, r8, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pread64(r7, &(0x7f000001a240)=""/102400, 0x19000, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 55.788303ms ago: executing program 1 (id=6533): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_freezer_state(r5, &(0x7f0000000140), 0x2, 0x0) r7 = openat$cgroup_procs(r5, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f00000000c0), 0x12) write$cgroup_freezer_state(r6, &(0x7f0000000400)='FROZEN\x00', 0x7) write$cgroup_freezer_state(r6, &(0x7f0000000080)='THAWED\x00', 0x7) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r8}, 0x0, &(0x7f0000000380)}, 0x20) 0s ago: executing program 2 (id=6534): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) move_mount(0xffffffffffffffff, &(0x7f0000000340)='./file1\x00', 0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='br_fdb_add\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='br_fdb_add\x00', r6}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001c000100000000000000000007000000", @ANYRES32=r9, @ANYBLOB="4000aa000a0002"], 0x28}}, 0x0) kernel console output (not intermixed with test programs): _slave_1) entered blocking state [ 2303.721962][T27715] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2303.729090][T27715] bridge0: port 1(bridge_slave_0) entered blocking state [ 2303.735933][T27715] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2303.861543][T24264] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2303.874440][T24264] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2303.921912][T24264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2303.949358][T20470] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2303.968440][T24264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2303.988447][T20470] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2304.089929][ T9597] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2304.103469][T20470] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2304.112244][T20470] usb 3-1: config 0 descriptor?? [ 2304.118238][ T9597] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2305.922013][T13877] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 2305.953133][T27715] device veth0_vlan entered promiscuous mode [ 2305.967449][T27715] device veth1_macvtap entered promiscuous mode [ 2306.020870][T24264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2306.033282][T24264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2306.043083][T24264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2306.052169][T24264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2306.068458][T24264] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2306.076329][T24264] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2306.084264][T24264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2306.166192][T27750] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6005'. [ 2306.279208][ T30] audit: type=1400 audit(2000000047.670:4983): avc: denied { create } for pid=27748 comm="syz.3.6005" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 2306.318039][T27755] tipc: Started in network mode [ 2306.322920][T27755] tipc: Node identity b84, cluster identity 4711 [ 2306.329404][T27755] tipc: Node number set to 2948 [ 2306.490590][T16732] device bridge_slave_1 left promiscuous mode [ 2306.501298][T16732] bridge0: port 2(bridge_slave_1) entered disabled state [ 2306.509189][T16732] device bridge_slave_0 left promiscuous mode [ 2306.515327][T16732] bridge0: port 1(bridge_slave_0) entered disabled state [ 2306.535134][T16732] device veth1_macvtap left promiscuous mode [ 2306.546144][T16732] device veth0_vlan left promiscuous mode [ 2306.589702][T13877] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 2306.599552][T13877] usb 1-1: can't read configurations, error -71 [ 2306.693144][T27757] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=27757 comm=syz.0.6012 [ 2307.519119][T20470] usbhid 3-1:0.0: can't add hid device: -71 [ 2307.537430][T20470] usbhid: probe of 3-1:0.0 failed with error -71 [ 2307.584132][T20470] usb 3-1: USB disconnect, device number 67 [ 2307.617457][T27775] bridge0: port 1(dummy0) entered blocking state [ 2307.920967][T27772] syz.4.6016[27772] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2307.921060][T27772] syz.4.6016[27772] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2307.949143][ T30] audit: type=1400 audit(2000000049.310:4984): avc: denied { bind } for pid=27767 comm="syz.4.6016" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2307.980234][T27775] bridge0: port 1(dummy0) entered disabled state [ 2307.993034][T27775] device dummy0 entered promiscuous mode [ 2308.047070][ T30] audit: type=1400 audit(2000000049.310:4985): avc: denied { name_bind } for pid=27767 comm="syz.4.6016" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 2308.354740][ T30] audit: type=1400 audit(2000000049.320:4986): avc: denied { node_bind } for pid=27767 comm="syz.4.6016" saddr=ff02::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 2309.288582][ T39] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 2309.309061][ T9652] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 2309.849351][ T39] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2309.920115][ T39] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2310.008826][ T39] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2310.078126][ T39] usb 2-1: config 0 descriptor?? [ 2310.426976][ T9652] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 2310.469273][T13846] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 2310.479069][ T39] usbhid 2-1:0.0: can't add hid device: -71 [ 2310.484849][ T39] usbhid: probe of 2-1:0.0 failed with error -71 [ 2310.491080][T20470] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 2310.501337][ T39] usb 2-1: USB disconnect, device number 52 [ 2310.619124][ T9652] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2310.628077][ T9652] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2310.635999][ T9652] usb 3-1: Product: syz [ 2310.640056][ T9652] usb 3-1: Manufacturer: syz [ 2310.644402][ T9652] usb 3-1: SerialNumber: syz [ 2310.650028][ T9652] usb 3-1: config 0 descriptor?? [ 2310.739033][T20470] usb 5-1: Using ep0 maxpacket: 16 [ 2310.829150][T13846] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2310.840019][T13846] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2310.849012][T13846] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2310.866690][T20470] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 2310.948002][T13846] usb 4-1: config 0 descriptor?? [ 2310.964083][T20470] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 2310.975142][T20470] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 2310.988626][T20470] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 2311.004320][T20470] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 2311.016307][T20470] usb 5-1: config 1 interface 0 has no altsetting 0 [ 2311.022931][T20470] usb 5-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 2311.032245][T20470] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2311.139702][T27824] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6029'. [ 2311.149393][T27824] SELinux: Context system_u:object_r:gpg_agent_exec_t:s0 is not valid (left unmapped). [ 2311.184280][ T30] audit: type=1400 audit(2000000052.560:4987): avc: denied { relabelto } for pid=27821 comm="syz.1.6029" name="file1" dev="tmpfs" ino=228 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:gpg_agent_exec_t:s0" [ 2311.213625][T20470] ums-sddr09 5-1:1.0: USB Mass Storage device detected [ 2311.229227][ T30] audit: type=1400 audit(2000000052.560:4988): avc: denied { associate } for pid=27821 comm="syz.1.6029" name="file1" dev="tmpfs" ino=228 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:gpg_agent_exec_t:s0" [ 2311.412094][ T39] usb 3-1: USB disconnect, device number 68 [ 2311.459992][T27815] UDC core: couldn't find an available UDC or it's busy: -16 [ 2311.542302][T27815] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2312.318259][T20470] ums-sddr09: probe of 5-1:1.0 failed with error -22 [ 2312.369348][ T30] audit: type=1400 audit(2000000053.740:4989): avc: denied { rmdir } for pid=27079 comm="syz-executor" name="file1" dev="tmpfs" ino=228 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:gpg_agent_exec_t:s0" [ 2312.438868][T20470] usb 5-1: USB disconnect, device number 85 [ 2313.219030][T13846] usbhid 4-1:0.0: can't add hid device: -71 [ 2313.225419][T13846] usbhid: probe of 4-1:0.0 failed with error -71 [ 2313.242630][T13846] usb 4-1: USB disconnect, device number 84 [ 2318.438072][T27889] input: syz0 as /devices/virtual/input/input133 [ 2318.691263][T27883] bridge0: port 3(dummy0) entered blocking state [ 2318.697436][T27883] bridge0: port 3(dummy0) entered disabled state [ 2318.714640][T27883] device dummy0 entered promiscuous mode [ 2319.701611][T27912] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6046'. [ 2319.710983][T27912] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6046'. [ 2319.719987][T16732] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2319.742721][T16732] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2319.856072][ T30] audit: type=1400 audit(2000000061.250:4990): avc: denied { create } for pid=27916 comm="syz.2.6051" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 2319.950844][T27920] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 2319.981459][ T30] audit: type=1400 audit(2000000061.380:4991): avc: denied { create } for pid=27921 comm="syz.3.6053" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 2320.383006][ T30] audit: type=1326 audit(2000000061.780:4992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27921 comm="syz.3.6053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d1777bff9 code=0x7ffc0000 [ 2320.431693][T27926] tipc: Failed to remove unknown binding: 66,1,1/0:3384625777/3384625779 [ 2320.438648][ T30] audit: type=1326 audit(2000000061.780:4993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27921 comm="syz.3.6053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d1777bff9 code=0x7ffc0000 [ 2320.463062][T27926] tipc: Failed to remove unknown binding: 66,1,1/0:3384625777/3384625779 [ 2320.469070][ T30] audit: type=1326 audit(2000000061.780:4994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27921 comm="syz.3.6053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f6d1777bff9 code=0x7ffc0000 [ 2320.511252][ T30] audit: type=1326 audit(2000000061.780:4995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27921 comm="syz.3.6053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d1777bff9 code=0x7ffc0000 [ 2320.555047][ T30] audit: type=1326 audit(2000000061.780:4996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27921 comm="syz.3.6053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d1777bff9 code=0x7ffc0000 [ 2320.957984][ T30] audit: type=1326 audit(2000000061.800:4997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27921 comm="syz.3.6053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f6d1777a897 code=0x7ffc0000 [ 2320.981451][ T30] audit: type=1326 audit(2000000061.800:4998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27921 comm="syz.3.6053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d1777bff9 code=0x7ffc0000 [ 2321.006427][ T30] audit: type=1326 audit(2000000061.800:4999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27921 comm="syz.3.6053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d1777bff9 code=0x7ffc0000 [ 2322.521554][T27955] input: syz0 as /devices/virtual/input/input134 [ 2325.942383][T28003] binder: 27997:28003 ioctl c0306201 0 returned -14 [ 2325.949477][T28003] binder: 27997:28003 ioctl c0306201 200002c0 returned -14 [ 2325.974867][T28008] overlayfs: failed to resolve './file0': -2 [ 2326.499168][T28011] bridge0: port 3(dummy0) entered blocking state [ 2326.505348][T28011] bridge0: port 3(dummy0) entered disabled state [ 2326.689608][T28011] device dummy0 entered promiscuous mode [ 2326.695379][T28011] bridge0: port 3(dummy0) entered blocking state [ 2326.701578][T28011] bridge0: port 3(dummy0) entered forwarding state [ 2326.937368][T28023] 9pnet: p9_fd_create_tcp (28023): problem connecting socket to 127.0.0.1 [ 2327.453766][T28043] input: syz0 as /devices/virtual/input/input135 [ 2329.891711][T28057] syz.4.6085[28057] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2329.891809][T28057] syz.4.6085[28057] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2330.620541][T28061] device pim6reg1 entered promiscuous mode [ 2331.249768][T28067] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 2331.965525][ T1494] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 2332.583032][T20470] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 2333.658998][T20470] usb 1-1: Using ep0 maxpacket: 8 [ 2333.804344][T20470] usb 1-1: config 0 has no interfaces? [ 2333.809869][T20470] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 2333.819011][T20470] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2333.843613][T20470] usb 1-1: config 0 descriptor?? [ 2333.864667][T28105] input: syz0 as /devices/virtual/input/input137 [ 2334.456626][ T1494] usb 5-1: device not accepting address 86, error -71 [ 2334.467150][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 2334.467168][ T30] audit: type=1400 audit(2000000075.860:5001): avc: denied { remount } for pid=28097 comm="syz.3.6094" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 2334.494254][T28100] SELinux: security_context_str_to_sid(unconfined_u) failed for (dev ?, type ?) errno=-22 [ 2334.546337][T28100] SELinux: duplicate or incompatible mount options [ 2334.697140][ T9652] usb 1-1: USB disconnect, device number 91 [ 2335.110441][ T30] audit: type=1400 audit(2000000076.510:5002): avc: denied { mount } for pid=28120 comm="syz.3.6101" name="/" dev="configfs" ino=13275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 2335.134830][T28121] overlayfs: missing 'lowerdir' [ 2335.143136][T28121] overlayfs: missing 'lowerdir' [ 2335.149661][ T30] audit: type=1400 audit(2000000076.530:5003): avc: denied { mounton } for pid=28120 comm="syz.3.6101" path="/19/file0" dev="configfs" ino=13275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 2335.216569][ T30] audit: type=1400 audit(2000000076.610:5004): avc: denied { setattr } for pid=28126 comm="syz.4.6103" name="/" dev="configfs" ino=13275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 2335.246044][ T30] audit: type=1400 audit(2000000076.640:5005): avc: denied { unmount } for pid=26825 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 2335.979101][ T26] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 2336.246330][T28147] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=28147 comm=syz.4.6105 [ 2336.409565][ T26] usb 1-1: config 0 has an invalid descriptor of length 169, skipping remainder of the config [ 2336.725904][ T26] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2337.007811][ T26] usb 1-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 2337.027008][ T26] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2337.376216][ T26] usb 1-1: config 0 descriptor?? [ 2338.039098][ T26] usb 1-1: string descriptor 0 read error: -71 [ 2338.051170][ T26] usb 1-1: USB disconnect, device number 92 [ 2339.162559][ T30] audit: type=1326 audit(2000000080.560:5006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28177 comm="syz.4.6117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc57e2cfff9 code=0x7ffc0000 [ 2339.206088][ T30] audit: type=1326 audit(2000000080.560:5007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28177 comm="syz.4.6117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=36 compat=0 ip=0x7fc57e2cfff9 code=0x7ffc0000 [ 2339.508331][ T30] audit: type=1326 audit(2000000080.560:5008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28177 comm="syz.4.6117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc57e2cfff9 code=0x7ffc0000 [ 2339.532221][ T30] audit: type=1326 audit(2000000080.580:5009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28177 comm="syz.4.6117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc57e2cfff9 code=0x7ffc0000 [ 2339.557120][ T30] audit: type=1326 audit(2000000080.580:5010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28177 comm="syz.4.6117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc57e2cfff9 code=0x7ffc0000 [ 2339.589358][ T30] audit: type=1326 audit(2000000080.580:5011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28177 comm="syz.4.6117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc57e2cfff9 code=0x7ffc0000 [ 2339.637347][ T30] audit: type=1326 audit(2000000080.580:5012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28177 comm="syz.4.6117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc57e2cfff9 code=0x7ffc0000 [ 2339.686498][ T30] audit: type=1326 audit(2000000080.580:5013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28177 comm="syz.4.6117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fc57e2cfff9 code=0x7ffc0000 [ 2339.735791][ T30] audit: type=1326 audit(2000000080.580:5014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28177 comm="syz.4.6117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc57e2cfff9 code=0x7ffc0000 [ 2339.784572][ T30] audit: type=1326 audit(2000000080.580:5015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28177 comm="syz.4.6117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=225 compat=0 ip=0x7fc57e2cfff9 code=0x7ffc0000 [ 2339.810427][ T30] audit: type=1326 audit(2000000080.580:5016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28177 comm="syz.4.6117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc57e2cfff9 code=0x7ffc0000 [ 2339.834501][ T30] audit: type=1326 audit(2000000080.580:5017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28177 comm="syz.4.6117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc57e2cfff9 code=0x7ffc0000 [ 2339.900144][T28185] tipc: Failed to remove unknown binding: 66,1,1/0:3901932652/3901932654 [ 2339.912770][T28185] tipc: Failed to remove unknown binding: 66,1,1/0:3901932652/3901932654 [ 2339.929018][T13846] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 2341.279251][T13846] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2341.298995][T13846] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2341.308340][T13846] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2341.422538][T28203] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 2341.582496][T13846] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2341.591676][T13846] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2341.599938][T13846] usb 5-1: Product: syz [ 2341.604000][T13846] usb 5-1: Manufacturer: syz [ 2341.608533][T13846] usb 5-1: SerialNumber: syz [ 2341.653629][T13846] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 2341.957943][T20470] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 2341.984247][T13846] cdc_ncm 5-1:1.0: bind() failure [ 2342.226268][T14641] usb 5-1: USB disconnect, device number 88 [ 2345.311674][T20470] usb 3-1: device descriptor read/all, error -71 [ 2345.329222][T28230] input: syz1 as /devices/virtual/input/input138 [ 2345.630377][T28234] Invalid ELF header magic: != ELF [ 2345.699318][ T30] kauditd_printk_skb: 65 callbacks suppressed [ 2345.699380][ T30] audit: type=1400 audit(2000000087.030:5083): avc: denied { module_load } for pid=28224 comm="syz.2.6129" path="/sys/kernel/notes" dev="sysfs" ino=1141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 2346.856184][ T30] audit: type=1400 audit(2000000087.820:5084): avc: denied { accept } for pid=28239 comm="syz.0.6132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 2348.780532][ T30] audit: type=1400 audit(2000000088.000:5085): avc: denied { ioctl } for pid=28239 comm="syz.0.6132" path="socket:[164448]" dev="sockfs" ino=164448 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 2351.175192][T28279] tipc: Started in network mode [ 2351.180241][T28279] tipc: Node identity 7f000001, cluster identity 4711 [ 2351.187037][T28279] tipc: Enabled bearer , priority 10 [ 2351.916675][T28290] input: syz0 as /devices/virtual/input/input139 [ 2352.109158][T20470] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 2352.270400][T13877] tipc: Node number set to 2130706433 [ 2354.378026][T20470] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2354.439053][ T30] audit: type=1400 audit(2000000095.410:5086): avc: denied { bind } for pid=28296 comm="syz.2.6146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 2354.462784][T20470] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2354.473332][ T30] audit: type=1400 audit(2000000095.410:5087): avc: denied { listen } for pid=28296 comm="syz.2.6146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 2354.528989][ T30] audit: type=1400 audit(2000000095.410:5088): avc: denied { connect } for pid=28296 comm="syz.2.6146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 2354.684123][T20470] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2354.850290][T20470] usb 2-1: config 0 descriptor?? [ 2354.932966][T20470] usb 2-1: can't set config #0, error -71 [ 2354.939729][T20470] usb 2-1: USB disconnect, device number 53 [ 2355.145700][T28320] input: syz0 as /devices/virtual/input/input140 [ 2355.371909][ T30] audit: type=1400 audit(2000000096.770:5089): avc: denied { wake_alarm } for pid=28325 comm="syz.2.6152" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 2356.989027][T13877] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 2357.029131][ T20] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 2357.059043][T20470] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 2357.379184][T13877] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2357.395033][T13877] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2357.405388][ T20] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2357.421828][ T20] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2357.436964][T13877] usb 3-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.00 [ 2357.439194][T20470] usb 4-1: config 0 interface 0 altsetting 248 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2357.450326][ T20] usb 5-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 2357.468970][T13877] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2357.481879][T20470] usb 4-1: config 0 interface 0 altsetting 248 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2357.485699][ T20] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2357.500238][T13877] usb 3-1: config 0 descriptor?? [ 2357.517838][T20470] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2357.520565][ T20] usb 5-1: config 0 descriptor?? [ 2357.539107][T20470] usb 4-1: New USB device found, idVendor=0b0e, idProduct=ffff, bcdDevice= 0.00 [ 2357.567635][T20470] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2357.595620][T20470] usb 4-1: config 0 descriptor?? [ 2357.950082][T28364] overlayfs: unrecognized mount option "/" or missing value [ 2358.628349][ T30] audit: type=1400 audit(2000000099.950:5090): avc: denied { listen } for pid=28372 comm="syz.0.6163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 2358.633135][ T20] samsung 0003:0419:0600.0096: item fetching failed at offset 1/5 [ 2358.656028][T13877] usbhid 3-1:0.0: can't add hid device: -71 [ 2358.661837][T13877] usbhid: probe of 3-1:0.0 failed with error -71 [ 2358.666262][ T30] audit: type=1400 audit(2000000099.950:5091): avc: denied { getopt } for pid=28372 comm="syz.0.6163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 2358.668841][T13877] usb 3-1: USB disconnect, device number 71 [ 2358.693841][ T20] samsung 0003:0419:0600.0096: parse failed [ 2358.699827][ T20] samsung: probe of 0003:0419:0600.0096 failed with error -22 [ 2359.039218][T28376] input: syz0 as /devices/virtual/input/input141 [ 2359.718372][ T30] audit: type=1400 audit(2000000100.960:5092): avc: denied { connect } for pid=28380 comm="syz.2.6165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 2359.755967][ T30] audit: type=1400 audit(2000000100.960:5093): avc: denied { read } for pid=28380 comm="syz.2.6165" lport=22 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 2359.823566][T13846] usb 5-1: USB disconnect, device number 89 [ 2360.047824][T28397] input: syz0 as /devices/virtual/input/input142 [ 2360.142263][T20470] usb 4-1: string descriptor 0 read error: -71 [ 2360.269068][T20470] usbhid 4-1:0.0: can't add hid device: -71 [ 2360.275552][T20470] usbhid: probe of 4-1:0.0 failed with error -71 [ 2360.329099][T20470] usb 4-1: USB disconnect, device number 85 [ 2361.854924][T28417] futex_wake_op: syz.3.6170 tries to shift op by -1; fix this program [ 2362.531868][T28410] device bridge1 entered promiscuous mode [ 2362.624878][ T30] audit: type=1400 audit(2000000104.020:5094): avc: denied { mounton } for pid=28409 comm="syz.4.6172" path="/76/file0" dev="tmpfs" ino=450 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 2364.219263][T28432] binder: 28427:28432 ioctl 40046205 0 returned -22 [ 2364.281167][ T30] audit: type=1400 audit(2000000105.680:5095): avc: denied { create } for pid=28430 comm="syz.1.6176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 2364.375269][T28432] binder: 28427:28432 ioctl 4018620d 0 returned -22 [ 2364.645669][ T30] audit: type=1400 audit(2000000105.830:5096): avc: denied { mounton } for pid=28430 comm="syz.1.6176" path="/70/file0" dev="tmpfs" ino=439 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 2364.680256][T28442] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2364.690994][T28442] FAT-fs (loop3): unable to read boot sector [ 2364.926512][T28432] sch_tbf: burst 53766 is lower than device lo mtu (65550) ! [ 2365.009315][T28438] input: syz0 as /devices/virtual/input/input143 [ 2365.524861][T28456] overlayfs: failed to resolve './file0': -2 [ 2367.907299][T28474] binder: 28472:28474 ioctl 4018620d 0 returned -22 [ 2368.627790][ T30] audit: type=1400 audit(2000000110.020:5097): avc: denied { name_bind } for pid=28482 comm="syz.4.6187" src=512 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 2369.083364][ T30] audit: type=1326 audit(2000000110.450:5098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28480 comm="syz.1.6188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71a28b4ff9 code=0x7ffc0000 [ 2369.114141][T28496] loop3: detected capacity change from 0 to 512 [ 2369.183277][T28496] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 2369.218866][T28496] EXT4-fs (loop3): 1 truncate cleaned up [ 2369.224759][T28496] EXT4-fs (loop3): mounted filesystem without journal. Opts: resuid=0x0000000000000000,init_itable,bsdgroups,noblock_validity,,errors=continue. Quota mode: none. [ 2369.253934][ T30] audit: type=1326 audit(2000000110.450:5099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28480 comm="syz.1.6188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71a28b4ff9 code=0x7ffc0000 [ 2369.395661][ T30] audit: type=1326 audit(2000000110.450:5100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28480 comm="syz.1.6188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f71a28b4ff9 code=0x7ffc0000 [ 2369.463630][ T30] audit: type=1326 audit(2000000110.450:5101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28480 comm="syz.1.6188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71a28b4ff9 code=0x7ffc0000 [ 2370.214919][T28507] x_tables: duplicate underflow at hook 1 [ 2370.555647][ T30] audit: type=1326 audit(2000000110.450:5102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28480 comm="syz.1.6188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71a28b4ff9 code=0x7ffc0000 [ 2370.668465][ T30] audit: type=1326 audit(2000000110.450:5103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28480 comm="syz.1.6188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f71a28b4ff9 code=0x7ffc0000 [ 2370.739088][ T30] audit: type=1326 audit(2000000110.450:5104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28480 comm="syz.1.6188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71a28b4ff9 code=0x7ffc0000 [ 2370.793090][ T30] audit: type=1326 audit(2000000110.450:5105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28480 comm="syz.1.6188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71a28b4ff9 code=0x7ffc0000 [ 2370.848023][ T30] audit: type=1326 audit(2000000110.450:5106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28480 comm="syz.1.6188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f71a28b4ff9 code=0x7ffc0000 [ 2372.688691][T13846] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 2372.735979][T28545] loop3: detected capacity change from 0 to 2048 [ 2373.056746][T28545] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 2373.199080][T13846] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2373.242403][T13846] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2373.289558][T28554] input: syz0 as /devices/virtual/input/input144 [ 2373.699164][T13846] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2373.838876][T13846] usb 1-1: config 0 descriptor?? [ 2373.961824][T28560] input: syz0 as /devices/virtual/input/input145 [ 2375.137234][T28577] futex_wake_op: syz.2.6202 tries to shift op by -1; fix this program [ 2375.429352][T13846] usbhid 1-1:0.0: can't add hid device: -71 [ 2375.435134][T13846] usbhid: probe of 1-1:0.0 failed with error -71 [ 2375.474896][T28584] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6207'. [ 2375.515921][T13846] usb 1-1: USB disconnect, device number 93 [ 2375.959080][ T9652] usb 2-1: new full-speed USB device number 54 using dummy_hcd [ 2376.229025][ T9652] usb 2-1: device descriptor read/64, error -71 [ 2376.270022][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 2376.270041][ T30] audit: type=1400 audit(2000000117.670:5118): avc: denied { map } for pid=28585 comm="syz.2.6210" path="socket:[165579]" dev="sockfs" ino=165579 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 2376.642781][T28599] hub 6-0:1.0: USB hub found [ 2376.648668][T28599] hub 6-0:1.0: 1 port detected [ 2376.718691][ T30] audit: type=1400 audit(2000000118.110:5119): avc: denied { setopt } for pid=28591 comm="syz.4.6211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2376.859071][ T9652] usb 2-1: device descriptor read/64, error -71 [ 2377.153554][T28605] binder: 28601:28605 ioctl c0306201 20000580 returned -14 [ 2377.309350][ T30] audit: type=1400 audit(2000000118.510:5120): avc: denied { set_context_mgr } for pid=28601 comm="syz.3.6213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 2377.369102][ T9652] usb 2-1: new full-speed USB device number 55 using dummy_hcd [ 2378.399754][T28618] input: syz0 as /devices/virtual/input/input146 [ 2378.634662][ T20] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 2380.755271][T28632] syz.0.6219[28632] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2380.755362][T28632] syz.0.6219[28632] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2381.600948][T28640] binder: 28636:28640 ioctl 40046205 0 returned -22 [ 2382.043090][ T30] audit: type=1400 audit(2000000123.370:5121): avc: denied { accept } for pid=28646 comm="syz.0.6224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 2382.124534][T28645] binder: 28636:28645 ioctl 4018620d 0 returned -22 [ 2382.255961][T28656] netlink: 'syz.3.6225': attribute type 2 has an invalid length. [ 2382.600760][ T20] usb 5-1: Using ep0 maxpacket: 8 [ 2384.140703][ T30] audit: type=1400 audit(2000000125.540:5122): avc: denied { connect } for pid=28670 comm="syz.1.6230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 2384.203674][ T30] audit: type=1400 audit(2000000125.600:5123): avc: denied { map } for pid=28670 comm="syz.1.6230" path="socket:[166055]" dev="sockfs" ino=166055 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 2384.214178][ T312] tipc: Subscription rejected, illegal request [ 2384.227632][ T20] usb 5-1: unable to read config index 0 descriptor/all [ 2384.240147][ T20] usb 5-1: can't read configurations, error -61 [ 2384.246769][ T30] audit: type=1400 audit(2000000125.610:5124): avc: denied { read } for pid=28670 comm="syz.1.6230" path="socket:[166055]" dev="sockfs" ino=166055 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 2384.270619][ T30] audit: type=1400 audit(2000000125.610:5125): avc: denied { ioctl } for pid=28670 comm="syz.1.6230" path="socket:[165646]" dev="sockfs" ino=165646 ioctlcmd=0x943a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 2384.389047][ T456] usb 1-1: new full-speed USB device number 94 using dummy_hcd [ 2384.396588][ T20] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 2384.408988][ T39] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 2384.678999][ T456] usb 1-1: device descriptor read/64, error -71 [ 2385.408064][ T20] usb 5-1: device descriptor read/64, error -71 [ 2387.289069][ T39] usb 4-1: unable to read config index 0 descriptor/all [ 2387.295966][ T39] usb 4-1: can't read configurations, error -71 [ 2388.128992][T22189] usb 2-1: new full-speed USB device number 56 using dummy_hcd [ 2388.136691][ T20] usb usb5-port1: attempt power cycle [ 2388.623036][T28714] input: syz0 as /devices/virtual/input/input147 [ 2390.329013][T22189] usb 2-1: device descriptor read/all, error -71 [ 2390.378067][T28723] device bridge1 entered promiscuous mode [ 2391.616013][T28750] loop3: detected capacity change from 0 to 1024 [ 2391.663541][T28750] EXT4-fs (loop3): Ignoring removed orlov option [ 2391.681481][T28750] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 2391.724878][T28751] input: syz0 as /devices/virtual/input/input148 [ 2393.040812][T28750] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 2393.065529][ T30] audit: type=1400 audit(2000000134.460:5126): avc: denied { setattr } for pid=28749 comm="syz.3.6249" name="file0" dev="loop3" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 2393.119045][T13910] usb 3-1: new full-speed USB device number 73 using dummy_hcd [ 2393.219426][T16732] tipc: Subscription rejected, illegal request [ 2396.049323][T28776] hub 6-0:1.0: USB hub found [ 2396.054466][T28776] hub 6-0:1.0: 1 port detected [ 2396.208450][T28783] loop3: detected capacity change from 0 to 2048 [ 2396.346022][T28791] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6258'. [ 2396.661733][T28793] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2396.672561][T28793] FAT-fs (loop9): unable to read boot sector [ 2397.010847][T28783] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 2397.032021][ T30] audit: type=1400 audit(2000000138.430:5127): avc: denied { getopt } for pid=28799 comm="syz.1.6260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 2397.125955][ T30] audit: type=1400 audit(2000000138.520:5128): avc: denied { create } for pid=28802 comm="syz.2.6261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 2397.671217][T28808] input: syz0 as /devices/virtual/input/input149 [ 2398.211826][ T30] audit: type=1400 audit(2000000139.610:5129): avc: denied { unlink } for pid=28799 comm="syz.1.6260" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 2398.511088][ T30] audit: type=1400 audit(2000000139.900:5130): avc: denied { setopt } for pid=28805 comm="syz.4.6263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 2398.936352][ T30] audit: type=1400 audit(2000000140.330:5131): avc: denied { write } for pid=28813 comm="syz.2.6264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 2402.854990][T28847] hub 6-0:1.0: USB hub found [ 2402.860468][T28847] hub 6-0:1.0: 1 port detected [ 2403.508314][T28857] loop3: detected capacity change from 0 to 512 [ 2403.787808][T28857] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 2403.821726][T28857] ext4 filesystem being mounted at /52/bus supports timestamps until 2038 (0x7fffffff) [ 2404.459163][T28866] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6275'. [ 2404.468353][ T30] audit: type=1400 audit(2000000145.850:5132): avc: denied { write } for pid=28856 comm="syz.3.6274" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 2404.540576][ T30] audit: type=1400 audit(2000000145.850:5133): avc: denied { add_name } for pid=28856 comm="syz.3.6274" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 2404.563364][ T30] audit: type=1400 audit(2000000145.890:5134): avc: denied { write } for pid=28856 comm="syz.3.6274" name="bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 2404.587368][ T30] audit: type=1400 audit(2000000145.890:5135): avc: denied { add_name } for pid=28856 comm="syz.3.6274" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 2404.612675][ T30] audit: type=1400 audit(2000000145.890:5136): avc: denied { setattr } for pid=28856 comm="syz.3.6274" name="file0" dev="loop3" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 2404.635119][ T30] audit: type=1400 audit(2000000145.890:5137): avc: denied { remove_name } for pid=28856 comm="syz.3.6274" name="file0" dev="loop3" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 2404.674299][ T30] audit: type=1400 audit(2000000145.890:5138): avc: denied { rmdir } for pid=28856 comm="syz.3.6274" name="file0" dev="loop3" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 2405.742696][ T30] audit: type=1400 audit(2000000146.470:5139): avc: denied { create } for pid=28880 comm="syz.3.6278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 2405.779000][ T30] audit: type=1400 audit(2000000146.580:5140): avc: denied { getopt } for pid=28880 comm="syz.3.6278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 2406.904105][T28893] loop3: detected capacity change from 0 to 40427 [ 2407.032483][T28893] F2FS-fs (loop3): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 2407.057122][T28893] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 2407.117838][T28908] overlayfs: failed to resolve './file0': -2 [ 2407.285590][T28893] F2FS-fs (loop3): invalid crc value [ 2407.372007][T28893] F2FS-fs (loop3): Found nat_bits in checkpoint [ 2407.455558][T28893] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 2407.462597][T28893] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 2407.529435][ T312] device bridge_slave_1 left promiscuous mode [ 2407.536659][ T312] bridge0: port 2(bridge_slave_1) entered disabled state [ 2407.546226][ T312] device bridge_slave_0 left promiscuous mode [ 2408.062889][T28923] input: syz0 as /devices/virtual/input/input151 [ 2408.672863][ T30] audit: type=1400 audit(2000000150.010:5141): avc: denied { mounton } for pid=28891 comm="syz.3.6282" path="/54/file0/file0" dev="loop3" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 2408.707581][ T312] bridge0: port 1(bridge_slave_0) entered disabled state [ 2408.791464][ T312] device veth1_macvtap left promiscuous mode [ 2408.797325][ T312] device veth0_vlan left promiscuous mode [ 2410.603514][T27715] F2FS-fs (loop3): access invalid blkaddr:2048 [ 2410.613241][T27715] CPU: 0 PID: 27715 Comm: syz-executor Not tainted 5.15.167-syzkaller-02003-g5e4635681cf1 #0 [ 2410.623242][T27715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2410.633136][T27715] Call Trace: [ 2410.636273][T27715] [ 2410.639037][T27715] dump_stack_lvl+0x151/0x1c0 [ 2410.643560][T27715] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2410.649110][T27715] dump_stack+0x15/0x20 [ 2410.653097][T27715] f2fs_is_valid_blkaddr+0xcc3/0x12d0 [ 2410.658308][T27715] f2fs_map_blocks+0x1622/0x3ab0 [ 2410.663091][T27715] ? f2fs_do_map_lock+0x70/0x70 [ 2410.667774][T27715] f2fs_mpage_readpages+0xc9a/0x21a0 [ 2410.672899][T27715] ? dquot_release_reservation_block+0xa0/0xa0 [ 2410.678874][T27715] ? workingset_activation+0x3f0/0x3f0 [ 2410.684188][T27715] f2fs_readahead+0xfd/0x250 [ 2410.688592][T27715] ? blk_start_plug+0x5a/0x170 [ 2410.693198][T27715] read_pages+0x15e/0xb00 [ 2410.697365][T27715] ? lru_cache_add+0x279/0x540 [ 2410.701962][T27715] ? page_cache_ra_unbounded+0x920/0x920 [ 2410.707426][T27715] ? add_to_page_cache_lru+0x225/0x2c0 [ 2410.712733][T27715] ? add_to_page_cache_locked+0x40/0x40 [ 2410.718105][T27715] ? __stack_depot_save+0x34/0x470 [ 2410.723053][T27715] page_cache_ra_unbounded+0x6cb/0x920 [ 2410.728355][T27715] ? read_cache_pages_invalidate_pages+0x1c0/0x1c0 [ 2410.734686][T27715] ? _raw_spin_unlock+0x4d/0x70 [ 2410.739365][T27715] ? wp_page_reuse+0xff/0x120 [ 2410.743880][T27715] ondemand_readahead+0x9c8/0xfa0 [ 2410.748751][T27715] ? page_cache_sync_ra+0x4d0/0x4d0 [ 2410.753776][T27715] ? debug_smp_processor_id+0x17/0x20 [ 2410.758984][T27715] ? selinux_inode_getattr+0x11f/0x3f0 [ 2410.764276][T27715] ? fault_around_bytes_set+0xc0/0xc0 [ 2410.769494][T27715] page_cache_sync_ra+0x2e9/0x4d0 [ 2410.774345][T27715] ? force_page_cache_ra+0x420/0x420 [ 2410.779469][T27715] ? do_handle_mm_fault+0x1807/0x2400 [ 2410.784675][T27715] f2fs_readdir+0x52d/0xba0 [ 2410.789108][T27715] ? f2fs_fill_dentries+0xd60/0xd60 [ 2410.794133][T27715] ? avc_policy_seqno+0x1b/0x70 [ 2410.798822][T27715] ? __kasan_check_read+0x11/0x20 [ 2410.803682][T27715] ? security_file_permission+0x86/0xb0 [ 2410.809059][T27715] iterate_dir+0x265/0x600 [ 2410.813312][T27715] ? f2fs_fill_dentries+0xd60/0xd60 [ 2410.818351][T27715] __se_sys_getdents64+0x1c1/0x460 [ 2410.823300][T27715] ? __x64_sys_getdents64+0x90/0x90 [ 2410.828334][T27715] ? filldir+0x680/0x680 [ 2410.832414][T27715] __x64_sys_getdents64+0x7b/0x90 [ 2410.837272][T27715] x64_sys_call+0x5ae/0x9a0 [ 2410.841611][T27715] do_syscall_64+0x3b/0xb0 [ 2410.845859][T27715] ? clear_bhb_loop+0x35/0x90 [ 2410.850376][T27715] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2410.856103][T27715] RIP: 0033:0x7f6d177ae193 [ 2410.860367][T27715] Code: c1 66 0f 1f 44 00 00 48 83 c4 08 48 89 ef 5b 5d e9 42 43 f8 ff 66 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 a8 ff ff ff f7 d8 [ 2410.879798][T27715] RSP: 002b:00007ffde86c7328 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 2410.888040][T27715] RAX: ffffffffffffffda RBX: 00005555901374e0 RCX: 00007f6d177ae193 [ 2410.895859][T27715] RDX: 0000000000008000 RSI: 00005555901374e0 RDI: 0000000000000005 [ 2410.903668][T27715] RBP: 00005555901374b4 R08: 0000000000000000 R09: 0000000000000000 [ 2410.911476][T27715] R10: 0000000000001000 R11: 0000000000000293 R12: ffffffffffffffa8 [ 2410.919286][T27715] R13: 0000000000000010 R14: 00005555901374b0 R15: 00007ffde86c95d0 [ 2410.927114][T27715] [ 2411.433851][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 2411.433932][ T30] audit: type=1400 audit(2000000152.830:5144): avc: denied { connect } for pid=28948 comm="syz.1.6292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 2411.854821][T28958] binder: 28951:28958 ioctl c0306201 200003c0 returned -22 [ 2411.870057][T27715] attempt to access beyond end of device [ 2411.870057][T27715] loop3: rw=524288, want=45072, limit=40427 [ 2412.116830][T27715] attempt to access beyond end of device [ 2412.116830][T27715] loop3: rw=0, want=45072, limit=40427 [ 2412.214970][T27715] attempt to access beyond end of device [ 2412.214970][T27715] loop3: rw=2049, want=45104, limit=40427 [ 2412.663754][T28977] binder: 28974:28977 ioctl 4018620d 0 returned -22 [ 2412.690992][T28977] netlink: 76 bytes leftover after parsing attributes in process `syz.1.6300'. [ 2413.152523][ T312] device bridge_slave_1 left promiscuous mode [ 2413.159355][ T312] bridge0: port 2(bridge_slave_1) entered disabled state [ 2413.188404][ T312] device bridge_slave_0 left promiscuous mode [ 2413.215145][ T312] bridge0: port 1(bridge_slave_0) entered disabled state [ 2413.246336][ T312] device veth1_macvtap left promiscuous mode [ 2413.266324][T28963] futex_wake_op: syz.2.6296 tries to shift op by 32; fix this program [ 2413.266828][ T312] device veth0_vlan left promiscuous mode [ 2413.415056][T28985] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 2413.424317][T28985] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 2413.488972][ T30] audit: type=1400 audit(2000000154.880:5145): avc: denied { create } for pid=28984 comm="syz.2.6304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 2413.611639][T28979] bridge0: port 1(bridge_slave_0) entered blocking state [ 2413.627372][T28979] bridge0: port 1(bridge_slave_0) entered disabled state [ 2413.640280][T28979] device bridge_slave_0 entered promiscuous mode [ 2413.657405][T28979] bridge0: port 2(bridge_slave_1) entered blocking state [ 2413.665421][T28979] bridge0: port 2(bridge_slave_1) entered disabled state [ 2413.678131][T28979] device bridge_slave_1 entered promiscuous mode [ 2414.368802][T28979] bridge0: port 2(bridge_slave_1) entered blocking state [ 2414.375771][T28979] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2414.771467][ T606] bridge0: port 2(bridge_slave_1) entered disabled state [ 2414.874797][ T606] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2414.882856][ T606] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2414.907403][ T606] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2415.066717][ T606] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2415.169269][ T606] bridge0: port 1(bridge_slave_0) entered blocking state [ 2415.176272][ T606] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2415.185673][ T606] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2415.207169][ T606] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2415.219223][ T606] bridge0: port 2(bridge_slave_1) entered blocking state [ 2415.226109][ T606] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2415.300731][T28979] device veth0_vlan entered promiscuous mode [ 2415.338650][T28979] device veth1_macvtap entered promiscuous mode [ 2415.371043][ T606] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2415.686068][ T606] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2415.818024][ T606] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2415.830392][ T606] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2415.844499][ T606] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2415.856900][ T606] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2415.865550][ T606] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2415.873697][ T606] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2415.889336][ T606] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2415.906018][ T606] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2415.923089][ T606] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2415.930906][ T606] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2415.939310][ T606] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2415.947741][ T606] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2415.956269][ T606] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2415.964669][ T606] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2415.980047][ T606] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2416.099205][T29036] loop3: detected capacity change from 0 to 2048 [ 2416.385227][T29036] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 2416.387382][T29034] udevd[29034]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 2416.428796][T29034] udevd[29034]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 2417.078370][T29048] input: syz0 as /devices/virtual/input/input152 [ 2419.886423][T19598] Bluetooth: hci0: Frame reassembly failed (-84) [ 2420.210745][T29072] loop3: detected capacity change from 0 to 256 [ 2420.254036][T29073] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 2420.262002][T29073] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 2420.289439][T29072] exfat: Unknown parameter ' [ 2420.289439][T29072] ' [ 2420.629079][ T26] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 2420.719661][T11694] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 2421.094841][T11694] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2421.107281][T11694] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2421.116638][T11694] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2421.125664][T11694] usb 3-1: config 0 descriptor?? [ 2421.909059][ T4896] Bluetooth: hci0: command 0x1003 tx timeout [ 2421.915131][T12226] Bluetooth: hci0: sending frame failed (-49) [ 2422.511762][T29097] device syzkaller0 entered promiscuous mode [ 2422.583188][ T30] audit: type=1400 audit(2000000163.980:5146): avc: denied { relabelfrom } for pid=29096 comm="syz.3.6328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 2422.603104][ T30] audit: type=1400 audit(2000000163.980:5147): avc: denied { relabelto } for pid=29096 comm="syz.3.6328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 2423.339011][T11694] usbhid 3-1:0.0: can't add hid device: -71 [ 2423.344918][T11694] usbhid: probe of 3-1:0.0 failed with error -71 [ 2423.360339][T11694] usb 3-1: USB disconnect, device number 74 [ 2423.989138][T11694] Bluetooth: hci0: command 0x1001 tx timeout [ 2423.995433][T12226] Bluetooth: hci0: sending frame failed (-49) [ 2424.280856][T29115] loop3: detected capacity change from 0 to 256 [ 2424.352081][T29115] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 2424.392601][ T30] audit: type=1400 audit(2000000165.790:5148): avc: denied { create } for pid=29114 comm="syz.3.6332" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 2424.432383][ T30] audit: type=1400 audit(2000000165.810:5149): avc: denied { write } for pid=29114 comm="syz.3.6332" path="/6/file0/bus" dev="loop3" ino=1049842 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 2424.458191][ T30] audit: type=1400 audit(2000000165.810:5150): avc: denied { mounton } for pid=29114 comm="syz.3.6332" path="/6/file0/bus" dev="loop3" ino=1049842 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 2424.658849][T29119] input: syz0 as /devices/virtual/input/input153 [ 2424.690362][T11694] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 2424.958954][T11694] usb 4-1: Using ep0 maxpacket: 16 [ 2425.079105][T11694] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2425.090318][T11694] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2425.099914][T11694] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2425.112510][T11694] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2425.121334][T11694] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2425.130693][T11694] usb 4-1: config 0 descriptor?? [ 2425.696609][ T30] audit: type=1400 audit(2000000166.850:5151): avc: denied { getopt } for pid=29123 comm="syz.0.6335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 2425.748550][T11694] microsoft 0003:045E:07DA.0097: unknown main item tag 0x0 [ 2425.813825][T11694] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0097/input/input154 [ 2425.902469][T11694] microsoft 0003:045E:07DA.0097: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 2425.936871][T11694] usb 4-1: USB disconnect, device number 88 [ 2426.068997][ T4896] Bluetooth: hci0: command 0x1009 tx timeout [ 2426.710821][T29138] bridge0: port 3(erspan0) entered blocking state [ 2426.717196][T29138] bridge0: port 3(erspan0) entered disabled state [ 2426.734128][T29138] device erspan0 entered promiscuous mode [ 2426.741508][T29138] bridge0: port 3(erspan0) entered blocking state [ 2426.747756][T29138] bridge0: port 3(erspan0) entered forwarding state [ 2427.258988][ T30] audit: type=1400 audit(2000000168.650:5152): avc: denied { rmdir } for pid=28979 comm="syz-executor" name="file2" dev="loop3" ino=1049847 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 2427.286514][ T30] audit: type=1400 audit(2000000168.650:5153): avc: denied { unmount } for pid=28979 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 2428.420270][T29160] bridge0: port 1(bridge_slave_0) entered blocking state [ 2428.458975][T29160] bridge0: port 1(bridge_slave_0) entered disabled state [ 2428.470841][T29160] device bridge_slave_0 entered promiscuous mode [ 2428.643268][T29160] bridge0: port 2(bridge_slave_1) entered blocking state [ 2428.696430][T29160] bridge0: port 2(bridge_slave_1) entered disabled state [ 2428.769876][T29160] device bridge_slave_1 entered promiscuous mode [ 2429.194251][T29161] bridge0: port 1(bridge_slave_0) entered blocking state [ 2429.211282][T29161] bridge0: port 1(bridge_slave_0) entered disabled state [ 2429.218684][T29161] device bridge_slave_0 entered promiscuous mode [ 2429.273551][T29161] bridge0: port 2(bridge_slave_1) entered blocking state [ 2429.288960][T29161] bridge0: port 2(bridge_slave_1) entered disabled state [ 2429.307065][T29161] device bridge_slave_1 entered promiscuous mode [ 2429.377826][T29158] loop3: detected capacity change from 0 to 40427 [ 2429.511398][T29158] F2FS-fs (loop3): invalid crc value [ 2429.543872][T29158] F2FS-fs (loop3): Found nat_bits in checkpoint [ 2429.569488][T19598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2429.578044][T19598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2429.758354][T19598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2429.781631][T29158] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 2429.820826][T19598] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2429.847590][T19598] bridge0: port 1(bridge_slave_0) entered blocking state [ 2429.854643][T19598] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2429.864154][T19598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2429.872778][T19598] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2429.881228][T19598] bridge0: port 2(bridge_slave_1) entered blocking state [ 2429.888110][T19598] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2429.895705][T19598] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2429.950701][T19598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2429.958773][T19598] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2429.967921][T19598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2429.976016][T19598] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2429.984119][T19598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2429.992490][T19598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2430.123592][T29184] input: syz0 as /devices/virtual/input/input156 [ 2430.173907][T29184] attempt to access beyond end of device [ 2430.173907][T29184] loop3: rw=34817, want=77952, limit=40427 [ 2430.203907][ T30] audit: type=1400 audit(2000000171.490:5154): avc: denied { read write open } for pid=29157 comm="syz.3.6344" path="/8/file0/bus" dev="loop3" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 2430.303608][T19598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2430.319898][ T30] audit: type=1400 audit(2000000171.560:5155): avc: denied { ioctl } for pid=29157 comm="syz.3.6344" path="/8/file0/bus" dev="loop3" ino=10 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 2430.394618][T28979] attempt to access beyond end of device [ 2430.394618][T28979] loop3: rw=2049, want=45104, limit=40427 [ 2430.406444][T19598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2430.416672][T19598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2430.426785][T19598] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2430.434910][T19598] bridge0: port 1(bridge_slave_0) entered blocking state [ 2430.441795][T19598] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2430.525365][T29160] device veth0_vlan entered promiscuous mode [ 2430.535236][T19598] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2430.560201][T19598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2430.568089][T19598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2430.595228][T19598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2430.665006][T19598] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2430.705021][T19598] bridge0: port 2(bridge_slave_1) entered blocking state [ 2430.711932][T19598] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2430.855375][T29160] device veth1_macvtap entered promiscuous mode [ 2430.934346][T19598] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2430.946881][T19598] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2430.954554][T19598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2430.962909][T19598] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2430.971431][T19598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2430.979885][T19598] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2430.987927][T19598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2430.996898][T19598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2431.005328][T19598] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2432.239366][T19598] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2432.292952][T19598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2432.361197][T19598] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2432.369503][T19598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2432.428443][ T606] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2432.449495][ T606] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2432.467825][T29161] device veth0_vlan entered promiscuous mode [ 2432.540989][ T606] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2432.556710][ T606] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2432.583453][ T606] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2432.591797][ T606] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2432.604346][ T606] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2432.631529][ T606] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2432.881862][T29161] device veth1_macvtap entered promiscuous mode [ 2432.953674][T22189] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 2434.134127][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2434.154625][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2434.169420][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2434.177451][ T30] audit: type=1326 audit(2000000175.570:5156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29214 comm="syz.4.6342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71c04ddff9 code=0x7ffc0000 [ 2434.204690][ T30] audit: type=1326 audit(2000000175.570:5157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29214 comm="syz.4.6342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71c04ddff9 code=0x7ffc0000 [ 2434.228626][ T30] audit: type=1326 audit(2000000175.570:5158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29214 comm="syz.4.6342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f71c04ddff9 code=0x7ffc0000 [ 2434.269513][ T30] audit: type=1326 audit(2000000175.570:5159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29214 comm="syz.4.6342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71c04ddff9 code=0x7ffc0000 [ 2434.285158][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2434.293409][ T30] audit: type=1326 audit(2000000175.570:5160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29214 comm="syz.4.6342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71c04ddff9 code=0x7ffc0000 [ 2434.324580][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2434.332769][ T30] audit: type=1326 audit(2000000175.570:5161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29214 comm="syz.4.6342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f71c04ddff9 code=0x7ffc0000 [ 2434.356524][T22189] usb 4-1: device descriptor read/64, error -71 [ 2434.373859][ T30] audit: type=1326 audit(2000000175.570:5162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29214 comm="syz.4.6342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71c04ddff9 code=0x7ffc0000 [ 2434.462707][ T30] audit: type=1326 audit(2000000175.570:5163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29214 comm="syz.4.6342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71c04ddff9 code=0x7ffc0000 [ 2434.638325][T29230] binder: 29227:29230 ioctl 4018620d 0 returned -22 [ 2434.657914][T29230] netlink: 76 bytes leftover after parsing attributes in process `syz.2.6356'. [ 2434.740454][T20793] device bridge_slave_1 left promiscuous mode [ 2434.749287][T20793] bridge0: port 2(bridge_slave_1) entered disabled state [ 2434.769043][T20793] device bridge_slave_0 left promiscuous mode [ 2434.776748][T20793] bridge0: port 1(bridge_slave_0) entered disabled state [ 2434.807487][T20793] device veth1_macvtap left promiscuous mode [ 2434.816408][T20793] device veth0_vlan left promiscuous mode [ 2434.838956][T22189] usb 4-1: device descriptor read/64, error -71 [ 2435.358952][T22189] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 2435.374867][T29238] device pim6reg1 entered promiscuous mode [ 2435.396191][T29243] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6358'. [ 2435.638968][T22189] usb 4-1: device descriptor read/64, error -71 [ 2436.078955][T29248] input: syz0 as /devices/virtual/input/input157 [ 2436.854872][T13846] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 2437.432198][T29270] input: syz0 as /devices/virtual/input/input158 [ 2438.174603][T22189] usb 4-1: device descriptor read/64, error -71 [ 2438.299074][T22189] usb usb4-port1: attempt power cycle [ 2438.309177][T13846] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 2438.318752][T13846] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 2438.338535][T13846] usb 5-1: config 1 has no interface number 1 [ 2438.350924][T13846] usb 5-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 2438.382236][T13846] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2438.769071][T13846] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2438.781278][T13846] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2438.797567][T13846] usb 5-1: Product: syz [ 2438.806090][T13846] usb 5-1: Manufacturer: syz [ 2438.815172][T13846] usb 5-1: SerialNumber: syz [ 2438.924994][T13846] usb 5-1: can't set config #1, error -71 [ 2438.934883][T13846] usb 5-1: USB disconnect, device number 94 [ 2438.978977][T22189] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 2439.659037][T22189] usb 4-1: device descriptor read/8, error -71 [ 2440.248994][T22189] usb 4-1: device descriptor read/8, error -71 [ 2440.510897][T29306] overlayfs: failed to resolve './file1': -2 [ 2441.176809][ T312] tipc: Left network mode [ 2441.831428][T29328] input: syz0 as /devices/virtual/input/input159 [ 2442.362848][T29333] input: syz0 as /devices/virtual/input/input160 [ 2444.221777][T29343] EXT4-fs warning (device sda1): verify_group_input:147: Cannot add at group 25 (only 8 groups) [ 2444.232648][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 2444.232669][ T30] audit: type=1400 audit(2000000185.300:5178): avc: denied { read write } for pid=29338 comm="syz.4.6382" name="uhid" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 2444.263750][ T30] audit: type=1400 audit(2000000185.300:5179): avc: denied { open } for pid=29338 comm="syz.4.6382" path="/dev/uhid" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 2444.395665][T29346] bridge0: port 1(bridge_slave_0) entered blocking state [ 2444.402622][T29346] bridge0: port 1(bridge_slave_0) entered disabled state [ 2444.410573][T29346] device bridge_slave_0 entered promiscuous mode [ 2444.417864][T29346] bridge0: port 2(bridge_slave_1) entered blocking state [ 2444.425084][T29346] bridge0: port 2(bridge_slave_1) entered disabled state [ 2444.432796][T29346] device bridge_slave_1 entered promiscuous mode [ 2444.590218][ T312] device dummy0 left promiscuous mode [ 2444.595894][ T312] bridge0: port 3(dummy0) entered disabled state [ 2444.603250][ T312] device bridge_slave_1 left promiscuous mode [ 2444.619180][ T312] bridge0: port 2(bridge_slave_1) entered disabled state [ 2444.626858][ T312] device bridge_slave_0 left promiscuous mode [ 2444.636508][ T312] bridge0: port 1(bridge_slave_0) entered disabled state [ 2444.648521][ T312] device veth1_macvtap left promiscuous mode [ 2444.657344][ T312] device veth0_vlan left promiscuous mode [ 2444.873768][T29346] bridge0: port 2(bridge_slave_1) entered blocking state [ 2444.880655][T29346] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2444.887801][T29346] bridge0: port 1(bridge_slave_0) entered blocking state [ 2444.894683][T29346] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2444.931932][ T30] audit: type=1400 audit(2000000186.330:5180): avc: denied { append } for pid=29352 comm="syz.2.6384" name="001" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 2445.101444][T20793] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2445.121852][T20793] bridge0: port 1(bridge_slave_0) entered disabled state [ 2445.141106][T20793] bridge0: port 2(bridge_slave_1) entered disabled state [ 2445.170245][T20793] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2445.270245][T20793] bridge0: port 1(bridge_slave_0) entered blocking state [ 2445.277287][T20793] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2445.552640][T20793] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2445.571597][T20793] bridge0: port 2(bridge_slave_1) entered blocking state [ 2445.578458][T20793] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2445.685378][T20793] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2445.725925][T20793] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2445.784784][T20793] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2445.796686][T20793] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2447.005547][T20793] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2447.082287][T20793] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2447.205483][T29346] device veth0_vlan entered promiscuous mode [ 2447.217921][T20793] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2447.226391][T20793] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2447.227135][T29382] overlayfs: failed to resolve './file0': -2 [ 2447.242665][T20793] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2447.493071][T20793] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2447.563521][ T30] audit: type=1326 audit(2000000188.960:5181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29387 comm="syz.2.6392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a6d36eff9 code=0x7ffc0000 [ 2447.593761][ T30] audit: type=1326 audit(2000000188.960:5182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29387 comm="syz.2.6392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f0a6d36eff9 code=0x7ffc0000 [ 2448.250428][T29390] input: syz0 as /devices/virtual/input/input161 [ 2448.772936][ T30] audit: type=1326 audit(2000000188.960:5183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29387 comm="syz.2.6392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f0a6d36f033 code=0x7ffc0000 [ 2448.796437][ T30] audit: type=1326 audit(2000000188.960:5184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29387 comm="syz.2.6392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f0a6d36dadf code=0x7ffc0000 [ 2448.830352][T20793] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2448.838259][ T30] audit: type=1326 audit(2000000188.960:5185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29387 comm="syz.2.6392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f0a6d36f087 code=0x7ffc0000 [ 2448.861633][ T30] audit: type=1326 audit(2000000188.960:5186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29387 comm="syz.2.6392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0a6d36d990 code=0x7ffc0000 [ 2448.893615][ T30] audit: type=1326 audit(2000000188.960:5187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29387 comm="syz.2.6392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f0a6d36dc8a code=0x7ffc0000 [ 2448.926541][T20793] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2448.948470][T29346] device veth1_macvtap entered promiscuous mode [ 2448.968211][T20793] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2448.980915][T29402] input: syz0 as /devices/virtual/input/input162 [ 2449.045903][T20793] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2449.265437][T20793] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2449.296638][ T30] audit: type=1326 audit(2000000188.960:5188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29387 comm="syz.2.6392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a6d36eff9 code=0x7ffc0000 [ 2449.402797][ T30] audit: type=1326 audit(2000000188.960:5189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29387 comm="syz.2.6392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f0a6d36eff9 code=0x7ffc0000 [ 2449.473615][ T30] audit: type=1326 audit(2000000188.960:5190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29387 comm="syz.2.6392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a6d36eff9 code=0x7ffc0000 [ 2449.548526][ T30] audit: type=1326 audit(2000000188.960:5191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29387 comm="syz.2.6392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f0a6d36eff9 code=0x7ffc0000 [ 2449.603051][T29411] binder: 29406:29411 ioctl 4018620d 0 returned -22 [ 2449.655213][ T30] audit: type=1326 audit(2000000188.960:5192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29387 comm="syz.2.6392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a6d36eff9 code=0x7ffc0000 [ 2449.682779][ T30] audit: type=1326 audit(2000000188.970:5193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29387 comm="syz.2.6392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a6d36eff9 code=0x7ffc0000 [ 2449.708190][T20793] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2449.725129][T20793] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2449.764424][ T30] audit: type=1326 audit(2000000188.970:5194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29387 comm="syz.2.6392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0a6d36eff9 code=0x7ffc0000 [ 2449.828184][ T30] audit: type=1326 audit(2000000188.970:5195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29387 comm="syz.2.6392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a6d36eff9 code=0x7ffc0000 [ 2449.932946][ T30] audit: type=1326 audit(2000000188.970:5196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29387 comm="syz.2.6392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a6d36eff9 code=0x7ffc0000 [ 2449.959547][ T30] audit: type=1326 audit(2000000188.970:5197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29387 comm="syz.2.6392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7f0a6d36eff9 code=0x7ffc0000 [ 2450.469879][ T312] device bridge_slave_1 left promiscuous mode [ 2450.478101][ T312] bridge0: port 2(bridge_slave_1) entered disabled state [ 2450.493295][ T312] device bridge_slave_0 left promiscuous mode [ 2450.509240][ T312] bridge0: port 1(bridge_slave_0) entered disabled state [ 2450.535849][ T312] device veth1_macvtap left promiscuous mode [ 2450.541869][ T312] device veth0_vlan left promiscuous mode [ 2451.766093][T29449] input: syz0 as /devices/virtual/input/input163 [ 2452.431504][T29456] loop3: detected capacity change from 0 to 2048 [ 2452.517305][T29464] usb usb7: usbfs: process 29464 (syz.4.6405) did not claim interface 0 before use [ 2453.044212][T29456] EXT4-fs (loop3): Ignoring removed bh option [ 2453.057284][T29456] EXT4-fs (loop3): Ignoring removed nobh option [ 2453.123826][T29066] udevd[29066]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 2453.185403][T29456] EXT4-fs (loop3): mounted filesystem without journal. Opts: abort,bh,sysvgroups,stripe=0x0000000000050001,norecovery,minixdf,nobh,,errors=continue. Quota mode: none. [ 2454.286560][T29473] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6408'. [ 2454.460008][T29482] overlayfs: failed to resolve './file0': -2 [ 2455.651692][T29498] loop3: detected capacity change from 0 to 512 [ 2455.678946][T29066] udevd[29066]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 2455.692494][T29498] EXT4-fs (loop3): orphan cleanup on readonly fs [ 2455.701052][T29498] EXT4-fs error (device loop3): ext4_ext_check_inode:501: inode #4: comm syz.3.6415: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 2048(2048) [ 2455.720163][T29498] EXT4-fs error (device loop3): ext4_quota_enable:6381: comm syz.3.6415: Bad quota inode: 4, type: 1 [ 2455.732090][T29498] EXT4-fs warning (device loop3): ext4_enable_quotas:6422: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 2455.780465][T29498] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 2455.787005][T29498] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 2456.224005][T29066] udevd[29066]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 2460.215696][T29521] loop3: detected capacity change from 0 to 512 [ 2460.284404][T29066] udevd[29066]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 2460.299243][T29521] EXT4-fs error (device loop3): ext4_do_update_inode:5205: inode #3: comm syz.3.6418: corrupted inode contents [ 2460.311241][T29521] EXT4-fs error (device loop3): ext4_dirty_inode:6038: inode #3: comm syz.3.6418: mark_inode_dirty error [ 2460.323017][T29521] EXT4-fs error (device loop3): ext4_do_update_inode:5205: inode #3: comm syz.3.6418: corrupted inode contents [ 2460.347211][T29521] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #3: comm syz.3.6418: mark_inode_dirty error [ 2460.358620][T29521] __quota_error: 17 callbacks suppressed [ 2460.358637][T29521] Quota error (device loop3): write_blk: dquota write failed [ 2460.372928][T29521] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 2460.383148][T29521] EXT4-fs error (device loop3): ext4_acquire_dquot:6187: comm syz.3.6418: Failed to acquire dquot type 0 [ 2460.794824][T29562] input: syz0 as /devices/virtual/input/input164 [ 2460.817747][T29563] binfmt_misc: register: failed to install interpreter file ./file0/../file0 [ 2460.989421][T29521] EXT4-fs error (device loop3): ext4_do_update_inode:5205: inode #16: comm syz.3.6418: corrupted inode contents [ 2461.052577][T29521] EXT4-fs error (device loop3): ext4_dirty_inode:6038: inode #16: comm syz.3.6418: mark_inode_dirty error [ 2461.070428][T29521] EXT4-fs error (device loop3): ext4_do_update_inode:5205: inode #16: comm syz.3.6418: corrupted inode contents [ 2461.103641][T29521] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #16: comm syz.3.6418: mark_inode_dirty error [ 2462.189090][T29521] EXT4-fs error (device loop3): ext4_do_update_inode:5205: inode #16: comm syz.3.6418: corrupted inode contents [ 2462.219618][T29521] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 2462.248519][T29521] EXT4-fs error (device loop3): ext4_do_update_inode:5205: inode #16: comm syz.3.6418: corrupted inode contents [ 2462.280893][T29521] EXT4-fs error (device loop3): ext4_truncate:4303: inode #16: comm syz.3.6418: mark_inode_dirty error [ 2462.332297][T29521] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 2462.349678][T29521] EXT4-fs (loop3): 1 truncate cleaned up [ 2462.359098][T29521] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 2462.379079][T29521] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038 (0x7fffffff) [ 2462.568113][T29569] overlayfs: invalid origin (00000079004c000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 2463.601921][T29593] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6431'. [ 2463.819831][T29593] loop3: detected capacity change from 0 to 512 [ 2463.953329][T29593] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 2464.079254][T29066] udevd[29066]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 2464.220324][T29593] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.6431: casefold flag without casefold feature [ 2464.330405][T29607] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6437'. [ 2464.356277][T29593] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.6431: couldn't read orphan inode 15 (err -117) [ 2464.630998][T29593] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_nolock,journal_dev=0x0000000000000007,quota,noinit_itable,errors=continue,errors=continue,errors=remount-ro,delalloc,auto_da_alloc,norecovery,errors=continue,journal_ioprio=0x0000000000000001,. Quota mode: writeback. [ 2464.857199][T29066] udevd[29066]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 2465.133536][T29617] input: syz0 as /devices/virtual/input/input165 [ 2465.815665][T29624] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 2466.082981][T29627] syz.2.6444[29627] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2466.083071][T29627] syz.2.6444[29627] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2466.103670][ T30] audit: type=1326 audit(2000000207.500:5215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29626 comm="syz.2.6444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a6d36eff9 code=0x7ffc0000 [ 2466.114924][T29627] tipc: Started in network mode [ 2466.114938][T29627] tipc: Node identity 400101, cluster identity 4711 [ 2466.114948][T29627] tipc: Node number set to 4194561 [ 2466.115031][T29627] tipc: Cannot configure node identity twice [ 2466.164995][ T30] audit: type=1326 audit(2000000207.510:5216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29626 comm="syz.2.6444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=36 compat=0 ip=0x7f0a6d36eff9 code=0x7ffc0000 [ 2466.192990][ T30] audit: type=1326 audit(2000000207.510:5217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29626 comm="syz.2.6444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a6d36eff9 code=0x7ffc0000 [ 2466.227745][ T30] audit: type=1326 audit(2000000207.510:5218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29626 comm="syz.2.6444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0a6d36eff9 code=0x7ffc0000 [ 2466.257603][ T30] audit: type=1326 audit(2000000207.510:5219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29626 comm="syz.2.6444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a6d36eff9 code=0x7ffc0000 [ 2466.301097][ T30] audit: type=1326 audit(2000000207.510:5220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29626 comm="syz.2.6444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0a6d370f17 code=0x7ffc0000 [ 2466.339584][ T30] audit: type=1326 audit(2000000207.510:5221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29626 comm="syz.2.6444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f0a6d370e8c code=0x7ffc0000 [ 2466.365281][ T30] audit: type=1326 audit(2000000207.510:5222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29626 comm="syz.2.6444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f0a6d370dc4 code=0x7ffc0000 [ 2466.399377][ T30] audit: type=1326 audit(2000000207.510:5223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29626 comm="syz.2.6444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f0a6d370dc4 code=0x7ffc0000 [ 2466.432486][ T30] audit: type=1326 audit(2000000207.510:5224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29626 comm="syz.2.6444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f0a6d36dc8a code=0x7ffc0000 [ 2467.810497][T29640] loop3: detected capacity change from 0 to 40427 [ 2467.943158][T29640] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 2467.949385][T29640] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 2468.519506][T29663] binder: 29662:29663 ioctl 4018620d 0 returned -22 [ 2468.529315][T29661] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6452'. [ 2468.541410][T29640] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 2468.585001][T29640] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 2468.592108][T29640] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 2469.160019][T29346] attempt to access beyond end of device [ 2469.160019][T29346] loop3: rw=524288, want=45072, limit=40427 [ 2469.177882][T29346] attempt to access beyond end of device [ 2469.177882][T29346] loop3: rw=0, want=45072, limit=40427 [ 2469.197611][T29682] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6454'. [ 2469.208398][T16732] attempt to access beyond end of device [ 2469.208398][T16732] loop3: rw=2049, want=45120, limit=40427 [ 2469.486205][T29689] input: syz0 as /devices/virtual/input/input166 [ 2471.290878][T28276] device bridge_slave_1 left promiscuous mode [ 2471.297340][T28276] bridge0: port 2(bridge_slave_1) entered disabled state [ 2471.305665][T28276] device bridge_slave_0 left promiscuous mode [ 2471.337788][T28276] bridge0: port 1(bridge_slave_0) entered disabled state [ 2471.346835][T28276] device veth1_macvtap left promiscuous mode [ 2471.353047][T28276] device veth0_vlan left promiscuous mode [ 2472.242113][T29725] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6467'. [ 2472.252593][T29725] netlink: 172 bytes leftover after parsing attributes in process `syz.4.6467'. [ 2472.302121][T29714] bridge0: port 1(bridge_slave_0) entered blocking state [ 2472.315853][T29714] bridge0: port 1(bridge_slave_0) entered disabled state [ 2472.317682][T29729] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6466'. [ 2472.338802][T29732] binder: 29731:29732 ioctl 40046205 0 returned -22 [ 2472.342808][T29714] device bridge_slave_0 entered promiscuous mode [ 2472.361174][T29714] bridge0: port 2(bridge_slave_1) entered blocking state [ 2472.371135][T29714] bridge0: port 2(bridge_slave_1) entered disabled state [ 2472.382306][T29714] device bridge_slave_1 entered promiscuous mode [ 2472.414381][T29735] binder: 29731:29735 ioctl 4018620d 0 returned -22 [ 2472.486871][T29737] sch_tbf: burst 53766 is lower than device lo mtu (65550) ! [ 2472.572791][T29714] bridge0: port 2(bridge_slave_1) entered blocking state [ 2472.579735][T29714] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2472.587085][T29714] bridge0: port 1(bridge_slave_0) entered blocking state [ 2472.594122][T29714] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2472.717739][T28276] bridge0: port 1(bridge_slave_0) entered disabled state [ 2472.726980][T28276] bridge0: port 2(bridge_slave_1) entered disabled state [ 2472.748035][T28276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2472.761470][T28276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2472.794075][T28276] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2472.812020][T28276] bridge0: port 1(bridge_slave_0) entered blocking state [ 2472.818974][T28276] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2472.833734][T28276] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2472.849738][T28276] bridge0: port 2(bridge_slave_1) entered blocking state [ 2472.856692][T28276] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2472.904552][T28276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2472.931267][T28276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2472.964502][T28276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2472.990334][T28276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2473.002591][T28276] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2473.016562][T28276] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2473.041530][T29714] device veth0_vlan entered promiscuous mode [ 2473.089571][T28276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2473.108592][T29714] device veth1_macvtap entered promiscuous mode [ 2473.144999][T28276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2473.172209][T28276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2473.250452][T29745] loop3: detected capacity change from 0 to 512 [ 2473.381294][T29066] udevd[29066]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 2473.723604][T29745] EXT4-fs (loop3): 1 orphan inode deleted [ 2473.731441][T29745] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota,. Quota mode: writeback. [ 2473.754497][T29745] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038 (0x7fffffff) [ 2473.773451][T29066] udevd[29066]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 2474.598635][T29764] loop3: detected capacity change from 0 to 2048 [ 2475.076691][T29066] udevd[29066]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 2475.101097][T29764] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.6474: bad orphan inode 8192 [ 2475.111755][T29764] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 2475.168297][T29066] udevd[29066]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 2476.668943][ T456] usb 1-1: new full-speed USB device number 95 using dummy_hcd [ 2477.277003][ T26] hid-generic 0000:0000:0000.0098: unknown main item tag 0x7 [ 2477.289429][ T26] hid-generic 0000:0000:0000.0098: unknown main item tag 0x3 [ 2477.296880][ T26] hid-generic 0000:0000:0000.0098: unknown main item tag 0x0 [ 2477.304858][ T26] hid-generic 0000:0000:0000.0098: unknown main item tag 0x0 [ 2477.312743][ T26] hid-generic 0000:0000:0000.0098: unknown main item tag 0x2 [ 2477.320281][ T26] hid-generic 0000:0000:0000.0098: unknown main item tag 0x0 [ 2477.327682][ T26] hid-generic 0000:0000:0000.0098: unknown main item tag 0x0 [ 2477.335103][ T26] hid-generic 0000:0000:0000.0098: unknown main item tag 0x0 [ 2477.391448][ T26] hid-generic 0000:0000:0000.0098: unknown main item tag 0x0 [ 2477.398829][ T26] hid-generic 0000:0000:0000.0098: unknown main item tag 0x0 [ 2477.413204][ T26] hid-generic 0000:0000:0000.0098: unknown main item tag 0x0 [ 2477.421138][ T26] hid-generic 0000:0000:0000.0098: unknown main item tag 0x0 [ 2477.441248][ T26] hid-generic 0000:0000:0000.0098: unknown main item tag 0x0 [ 2477.448541][ T26] hid-generic 0000:0000:0000.0098: unknown main item tag 0x0 [ 2477.468951][ T26] hid-generic 0000:0000:0000.0098: unknown main item tag 0x0 [ 2477.495292][ T26] hid-generic 0000:0000:0000.0098: unknown main item tag 0x0 [ 2477.575074][ T26] hid-generic 0000:0000:0000.0098: unknown main item tag 0x0 [ 2477.601422][ T26] hid-generic 0000:0000:0000.0098: unknown main item tag 0x0 [ 2477.642875][ T26] hid-generic 0000:0000:0000.0098: unknown main item tag 0x0 [ 2477.680570][ T26] hid-generic 0000:0000:0000.0098: unknown main item tag 0x0 [ 2477.694716][T29799] loop3: detected capacity change from 0 to 8192 [ 2477.704427][ T26] hid-generic 0000:0000:0000.0098: unknown main item tag 0x0 [ 2477.740996][ T26] hid-generic 0000:0000:0000.0098: unknown main item tag 0x0 [ 2477.775442][ T26] hid-generic 0000:0000:0000.0098: unknown main item tag 0x0 [ 2477.783141][ T26] hid-generic 0000:0000:0000.0098: unknown main item tag 0x0 [ 2477.791497][ T26] hid-generic 0000:0000:0000.0098: unknown main item tag 0x0 [ 2477.798930][ T456] usb 1-1: unable to get BOS descriptor or descriptor too short [ 2477.799259][ T26] hid-generic 0000:0000:0000.0098: unknown main item tag 0x0 [ 2477.814745][T29799] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 2477.818518][T29066] udevd[29066]: symlink '../../loop3' '/dev/disk/by-label/SYZKALLER.tmp-b7:3' failed: Read-only file system [ 2477.825695][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 2477.825708][ T30] audit: type=1400 audit(2000000219.230:5234): avc: denied { mount } for pid=29793 comm="syz.3.6479" name="/" dev="loop3" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 2477.865882][ T26] hid-generic 0000:0000:0000.0098: unknown main item tag 0x0 [ 2477.873282][ T26] hid-generic 0000:0000:0000.0098: unknown main item tag 0x0 [ 2477.875316][T29066] udevd[29066]: symlink '../../loop3' '/dev/disk/by-label/SYZKALLER.tmp-b7:3' failed: Read-only file system [ 2477.880593][ T26] hid-generic 0000:0000:0000.0098: unknown main item tag 0x0 [ 2477.880619][ T26] hid-generic 0000:0000:0000.0098: unknown main item tag 0x0 [ 2477.880686][ T26] hid-generic 0000:0000:0000.0098: unknown main item tag 0x0 [ 2477.880751][ T26] hid-generic 0000:0000:0000.0098: unknown main item tag 0x0 [ 2477.880820][ T26] hid-generic 0000:0000:0000.0098: unknown main item tag 0x0 [ 2477.880884][ T26] hid-generic 0000:0000:0000.0098: unknown main item tag 0x0 [ 2477.880947][ T26] hid-generic 0000:0000:0000.0098: unknown main item tag 0x0 [ 2477.881011][ T26] hid-generic 0000:0000:0000.0098: unknown main item tag 0x0 [ 2477.902756][ T26] hid-generic 0000:0000:0000.0098: hidraw0: HID v0.00 Device [syz0] on syz0 [ 2477.906916][ T456] usb 1-1: not running at top speed; connect to a high speed hub [ 2478.099025][ T456] usb 1-1: config 0 has an invalid interface number: 71 but max is 2 [ 2478.106995][ T456] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2478.116895][ T456] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 2478.125821][ T456] usb 1-1: config 0 has no interface number 0 [ 2478.131780][ T456] usb 1-1: config 0 interface 71 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 10 [ 2478.386706][T29806] netlink: 388 bytes leftover after parsing attributes in process `syz.4.6482'. [ 2478.539574][ T456] usb 1-1: New USB device found, idVendor=0421, idProduct=042d, bcdDevice= 8.05 [ 2478.548431][ T456] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2478.556549][ T456] usb 1-1: Product: syz [ 2478.560567][ T456] usb 1-1: Manufacturer: syz [ 2478.564962][ T456] usb 1-1: SerialNumber: syz [ 2478.570233][ T456] usb 1-1: config 0 descriptor?? [ 2478.604926][ T30] audit: type=1400 audit(2000000220.000:5235): avc: denied { unmount } for pid=29714 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 2479.183525][T16732] tipc: Left network mode [ 2479.208788][T29817] bridge0: port 1(bridge_slave_0) entered blocking state [ 2479.216619][T29817] bridge0: port 1(bridge_slave_0) entered disabled state [ 2479.225121][T29817] device bridge_slave_0 entered promiscuous mode [ 2479.232780][T29817] bridge0: port 2(bridge_slave_1) entered blocking state [ 2479.239969][T29817] bridge0: port 2(bridge_slave_1) entered disabled state [ 2479.247523][T29817] device bridge_slave_1 entered promiscuous mode [ 2479.449325][T29826] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6489'. [ 2479.458282][T29826] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6489'. [ 2479.480339][T29826] device gretap1 entered promiscuous mode [ 2479.601929][T29817] bridge0: port 2(bridge_slave_1) entered blocking state [ 2479.608906][T29817] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2479.616057][T29817] bridge0: port 1(bridge_slave_0) entered blocking state [ 2479.622922][T29817] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2479.648874][T29828] loop3: detected capacity change from 0 to 256 [ 2479.674411][T28276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2479.682417][T28276] bridge0: port 1(bridge_slave_0) entered disabled state [ 2479.689980][T28276] bridge0: port 2(bridge_slave_1) entered disabled state [ 2479.706305][T20793] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2479.716148][T29828] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010253, chksum : 0xa98551aa, utbl_chksum : 0xe619d30d) [ 2479.716465][T20793] bridge0: port 1(bridge_slave_0) entered blocking state [ 2479.735108][T20793] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2479.803502][T28276] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2479.811818][T28276] bridge0: port 2(bridge_slave_1) entered blocking state [ 2479.818664][T28276] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2479.826654][T28276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2479.834915][T28276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2480.148068][T20793] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2480.176924][T20793] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2480.185303][T20793] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2480.193356][ T456] usb 1-1: bad CDC descriptors [ 2480.193774][T20793] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2480.205871][ T456] usb 1-1: USB disconnect, device number 95 [ 2480.207962][T20793] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2480.220772][T29817] device veth0_vlan entered promiscuous mode [ 2480.235499][T20793] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2480.243871][T20793] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2480.256169][T29817] device veth1_macvtap entered promiscuous mode [ 2480.266461][T20793] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2480.274556][T20793] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2480.282836][T20793] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2480.295228][T20793] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2480.303358][T20793] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2480.399141][T16732] device dummy0 left promiscuous mode [ 2480.404537][T16732] bridge0: port 1(dummy0) entered disabled state [ 2480.413285][T16732] device veth1_macvtap left promiscuous mode [ 2480.419329][T16732] device veth0_vlan left promiscuous mode [ 2480.756845][T13910] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 2480.764701][T29844] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 2480.836328][T29849] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6493'. [ 2480.837156][ T456] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 2480.877594][T29849] loop3: detected capacity change from 0 to 512 [ 2480.896167][T29066] udevd[29066]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 2480.920611][T29849] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 2480.959419][T29849] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.6493: casefold flag without casefold feature [ 2480.980392][T29849] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.6493: couldn't read orphan inode 15 (err -117) [ 2481.006448][T29849] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_nolock,journal_dev=0x0000000000000007,quota,noinit_itable,errors=continue,errors=continue,errors=remount-ro,delalloc,auto_da_alloc,norecovery,errors=continue,journal_ioprio=0x0000000000000001,. Quota mode: writeback. [ 2481.045452][T29066] udevd[29066]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 2481.118964][T13910] usb 5-1: device descriptor read/64, error -71 [ 2481.211687][ T456] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2481.222689][ T456] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2481.232509][ T456] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 2481.241664][ T456] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2481.252125][ T456] usb 1-1: config 0 descriptor?? [ 2481.609394][ T30] audit: type=1400 audit(2000000222.810:5236): avc: denied { write } for pid=29850 comm="syz.1.6494" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 2481.647820][ T30] audit: type=1400 audit(2000000222.810:5237): avc: denied { open } for pid=29850 comm="syz.1.6494" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 2481.778972][T13910] usb 5-1: device descriptor read/64, error -71 [ 2482.983021][ T30] audit: type=1326 audit(2000000224.380:5238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29873 comm="syz.3.6499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4924cb3ff9 code=0x7ffc0000 [ 2483.016735][ T30] audit: type=1326 audit(2000000224.400:5239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29873 comm="syz.3.6499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4924cb3ff9 code=0x7ffc0000 [ 2483.041193][ T30] audit: type=1326 audit(2000000224.400:5240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29873 comm="syz.3.6499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4924cb3ff9 code=0x7ffc0000 [ 2483.065695][ T30] audit: type=1326 audit(2000000224.400:5241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29873 comm="syz.3.6499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4924cb3ff9 code=0x7ffc0000 [ 2483.109309][ T30] audit: type=1326 audit(2000000224.400:5242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29873 comm="syz.3.6499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4924cb3ff9 code=0x7ffc0000 [ 2483.133135][ T30] audit: type=1326 audit(2000000224.400:5243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29873 comm="syz.3.6499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4924cb3ff9 code=0x7ffc0000 [ 2483.590613][ T30] audit: type=1326 audit(2000000224.400:5244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29873 comm="syz.3.6499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4924cb3ff9 code=0x7ffc0000 [ 2483.832616][T13910] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 2483.840914][ T30] audit: type=1326 audit(2000000224.400:5245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29873 comm="syz.3.6499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4924cb3ff9 code=0x7ffc0000 [ 2483.865009][ T30] audit: type=1326 audit(2000000224.400:5246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29873 comm="syz.3.6499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4924cb3ff9 code=0x7ffc0000 [ 2483.888824][ T30] audit: type=1326 audit(2000000224.400:5247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29873 comm="syz.3.6499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4924cb3ff9 code=0x7ffc0000 [ 2483.949096][ T456] uclogic 0003:256C:006D.0099: failed retrieving Huion firmware version: -71 [ 2483.958033][ T456] uclogic 0003:256C:006D.0099: failed probing parameters: -71 [ 2483.966306][ T456] uclogic: probe of 0003:256C:006D.0099 failed with error -71 [ 2483.980993][ T456] usb 1-1: USB disconnect, device number 96 [ 2484.418936][T13910] usb 5-1: device descriptor read/64, error -71 [ 2484.425052][ T1494] usb 2-1: new full-speed USB device number 58 using dummy_hcd [ 2484.448957][T11694] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 2484.771566][T29893] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29893 comm=syz.0.6504 [ 2484.998375][T11694] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2485.023162][T11694] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2485.345960][T11694] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2485.403052][T11694] usb 4-1: config 0 descriptor?? [ 2485.639166][T13910] usb 5-1: device descriptor read/64, error -71 [ 2485.679016][ T1494] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2485.718990][ T1494] usb 2-1: not running at top speed; connect to a high speed hub [ 2485.759098][T13910] usb usb5-port1: attempt power cycle [ 2485.838993][ T1494] usb 2-1: config 0 has an invalid interface number: 71 but max is 2 [ 2485.846949][ T1494] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2485.857058][ T1494] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 2485.865832][ T1494] usb 2-1: config 0 has no interface number 0 [ 2485.871711][ T1494] usb 2-1: config 0 interface 71 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 2485.881582][ T1494] usb 2-1: config 0 interface 71 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 10 [ 2486.049144][ T1494] usb 2-1: New USB device found, idVendor=0421, idProduct=042d, bcdDevice= 8.05 [ 2486.058174][ T1494] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2486.066059][ T1494] usb 2-1: Product: syz [ 2486.070061][ T1494] usb 2-1: Manufacturer: syz [ 2486.074426][ T1494] usb 2-1: SerialNumber: syz [ 2486.079682][ T1494] usb 2-1: config 0 descriptor?? [ 2486.121689][ T1494] usb 2-1: can't set config #0, error -71 [ 2486.128525][ T1494] usb 2-1: USB disconnect, device number 58 [ 2486.188965][T13910] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 2486.331397][T29913] input: syz0 as /devices/virtual/input/input167 [ 2487.403463][T20793] Bluetooth: hci0: Frame reassembly failed (-84) [ 2487.469463][T11694] usbhid 4-1:0.0: can't add hid device: -71 [ 2487.502323][T20793] Bluetooth: hci0: Frame reassembly failed (-84) [ 2487.514346][T11694] usbhid: probe of 4-1:0.0 failed with error -71 [ 2487.628999][T13910] usb 5-1: device descriptor read/8, error -71 [ 2487.698441][T11694] usb 4-1: USB disconnect, device number 93 [ 2487.707831][T29923] loop3: detected capacity change from 0 to 1024 [ 2487.752174][T29923] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 2487.757755][T29080] udevd[29080]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 2488.068616][T29923] EXT4-fs (loop3): mounted filesystem without journal. Opts: user_xattr,data_err=abort,resuid=0x0000000000000000,errors=remount-ro,norecovery,max_dir_size_kb=0x00000000000007b1,stripe=0x0000000000000005,noinit_itable,nomblk_io_submit,grpquota,nogrpid,. Quota mode: writeback. [ 2488.102529][ T30] kauditd_printk_skb: 73 callbacks suppressed [ 2488.102544][ T30] audit: type=1400 audit(2000000229.500:5321): avc: denied { mount } for pid=29922 comm="syz.3.6512" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 2488.109096][T13910] usb 5-1: device descriptor read/8, error -71 [ 2488.139211][T29066] udevd[29066]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 2488.143623][ T30] audit: type=1400 audit(2000000229.540:5322): avc: denied { mounton } for pid=29922 comm="syz.3.6512" path="/10/file1/file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 2488.173774][ T30] audit: type=1400 audit(2000000229.540:5323): avc: denied { mount } for pid=29922 comm="syz.3.6512" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 2488.196085][ T30] audit: type=1400 audit(2000000229.540:5324): avc: denied { mounton } for pid=29922 comm="syz.3.6512" path="/10/file1/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 2488.480902][ T30] audit: type=1400 audit(2000000229.780:5325): avc: denied { create } for pid=29922 comm="syz.3.6512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 2488.624259][ T30] audit: type=1400 audit(2000000229.810:5326): avc: denied { write } for pid=29922 comm="syz.3.6512" name="snmp" dev="proc" ino=4026532502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 2488.649584][ T30] audit: type=1400 audit(2000000229.870:5327): avc: denied { write } for pid=29922 comm="syz.3.6512" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 2488.671617][ T30] audit: type=1400 audit(2000000229.870:5328): avc: denied { add_name } for pid=29922 comm="syz.3.6512" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 2488.695387][ T30] audit: type=1400 audit(2000000229.870:5329): avc: denied { create } for pid=29922 comm="syz.3.6512" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 2488.715704][ T30] audit: type=1400 audit(2000000229.980:5330): avc: denied { read write } for pid=29922 comm="syz.3.6512" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 2489.358961][T20470] Bluetooth: hci0: command 0x1003 tx timeout [ 2489.365148][T12226] Bluetooth: hci0: sending frame failed (-49) [ 2489.412620][T29942] bridge0: port 1(bridge_slave_0) entered blocking state [ 2489.428982][T29942] bridge0: port 1(bridge_slave_0) entered disabled state [ 2489.436420][T29942] device bridge_slave_0 entered promiscuous mode [ 2489.468440][T29942] bridge0: port 2(bridge_slave_1) entered blocking state [ 2489.475796][T29942] bridge0: port 2(bridge_slave_1) entered disabled state [ 2489.483288][T29942] device bridge_slave_1 entered promiscuous mode [ 2489.595002][T29942] bridge0: port 2(bridge_slave_1) entered blocking state [ 2489.601903][T29942] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2489.609101][T29942] bridge0: port 1(bridge_slave_0) entered blocking state [ 2489.615947][T29942] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2489.900210][T29954] input: syz0 as /devices/virtual/input/input168 [ 2490.206817][T20793] bridge0: port 1(bridge_slave_0) entered disabled state [ 2490.217219][T20793] bridge0: port 2(bridge_slave_1) entered disabled state [ 2490.255499][T20793] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2490.278488][T20793] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2490.302584][T20793] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2490.324176][T20793] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2490.336438][T20793] bridge0: port 1(bridge_slave_0) entered blocking state [ 2490.343356][T20793] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2490.353061][ T312] device bridge_slave_1 left promiscuous mode [ 2490.359217][ T312] bridge0: port 2(bridge_slave_1) entered disabled state [ 2490.366936][ T312] device bridge_slave_0 left promiscuous mode [ 2490.373364][ T312] bridge0: port 1(bridge_slave_0) entered disabled state [ 2490.381861][ T312] device veth1_macvtap left promiscuous mode [ 2490.387730][ T312] device veth0_vlan left promiscuous mode [ 2490.550156][T20793] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2490.561781][T20793] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2490.570444][T20793] bridge0: port 2(bridge_slave_1) entered blocking state [ 2490.577297][T20793] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2490.610255][T20793] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2490.618409][T20793] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2490.626726][T20793] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2490.628957][T20470] usb 2-1: new full-speed USB device number 59 using dummy_hcd [ 2490.635686][T20793] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2490.659301][T20793] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2490.667636][T20793] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2490.681830][T29942] device veth0_vlan entered promiscuous mode [ 2490.698351][T29942] device veth1_macvtap entered promiscuous mode [ 2490.743448][T20793] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2490.748578][T29962] loop3: detected capacity change from 0 to 512 [ 2490.752487][T20793] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2490.765149][T20793] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2490.773411][T20793] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2490.777570][T29962] EXT4-fs (loop3): Test dummy encryption mode enabled [ 2490.784117][T20793] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2490.793734][T29962] EXT4-fs error (device loop3): __ext4_iget:4903: inode #11: block 1: comm syz.3.6517: invalid block [ 2490.795684][T20793] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2490.806330][T29962] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.6517: couldn't read orphan inode 11 (err -117) [ 2490.826703][T29962] EXT4-fs (loop3): mounted filesystem without journal. Opts: noauto_da_alloc,user_xattr,max_dir_size_kb=0x0000000000000009,inode_readahead_blks=0x0000000000010000,jqfmt=vfsv0,delalloc,inode_readahead_blks=0x0000000000400000,noauto_da_alloc,test_dummy_encryption,,errors=continue. Quota mode: none. [ 2490.882153][T29965] input: syz0 as /devices/virtual/input/input169 [ 2490.913789][T20793] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2491.050300][T20793] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2491.058538][T20793] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2491.077282][T20793] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2491.091261][T20793] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2491.198303][T29956] bridge0: port 1(bridge_slave_0) entered blocking state [ 2491.205384][T29956] bridge0: port 1(bridge_slave_0) entered disabled state [ 2491.213041][T29956] device bridge_slave_0 entered promiscuous mode [ 2491.220535][T29956] bridge0: port 2(bridge_slave_1) entered blocking state [ 2491.227417][T29956] bridge0: port 2(bridge_slave_1) entered disabled state [ 2491.483708][T11694] Bluetooth: hci0: command 0x1001 tx timeout [ 2491.491905][T12226] Bluetooth: hci0: sending frame failed (-49) [ 2491.503884][T29956] device bridge_slave_1 entered promiscuous mode [ 2491.562060][T20470] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2491.749090][T20470] usb 2-1: not running at top speed; connect to a high speed hub [ 2491.869414][T20470] usb 2-1: config 0 has an invalid interface number: 71 but max is 2 [ 2491.877399][T20470] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2491.926360][T20470] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 2492.022486][T20470] usb 2-1: config 0 has no interface number 0 [ 2492.030523][T20470] usb 2-1: config 0 interface 71 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 2492.041014][T20470] usb 2-1: config 0 interface 71 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 10 [ 2492.119335][T16732] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2492.137801][T16732] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2492.153369][T16732] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2492.165925][T16732] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2492.174984][T16732] bridge0: port 1(bridge_slave_0) entered blocking state [ 2492.181880][T16732] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2492.207736][T16732] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2492.209042][ T26] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 2492.215389][T16732] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2492.229075][T20470] usb 2-1: New USB device found, idVendor=0421, idProduct=042d, bcdDevice= 8.05 [ 2492.231303][T16732] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2492.247947][T16732] bridge0: port 2(bridge_slave_1) entered blocking state [ 2492.254835][T16732] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2492.255671][T20470] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2492.263394][T16732] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2492.278488][T16732] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2492.296890][T20470] usb 2-1: Product: syz [ 2492.301816][T16732] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2492.310760][T20470] usb 2-1: Manufacturer: syz [ 2492.316317][T16732] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2492.326246][T16732] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2492.327168][T20470] usb 2-1: SerialNumber: syz [ 2492.334910][T16732] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2492.347645][T29956] device veth0_vlan entered promiscuous mode [ 2492.355016][T20470] usb 2-1: config 0 descriptor?? [ 2492.374685][T16732] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2492.392019][T29956] device veth1_macvtap entered promiscuous mode [ 2492.404583][T16732] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2492.428063][T16732] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2492.639876][T20470] usb 2-1: bad CDC descriptors [ 2492.760771][ T26] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2492.773668][T20470] usb 2-1: USB disconnect, device number 59 [ 2492.894646][ T26] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2492.911017][ T26] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2492.928423][ T26] usb 3-1: config 0 descriptor?? [ 2492.950382][T29990] loop3: detected capacity change from 0 to 1024 [ 2493.041085][ T312] device bridge_slave_1 left promiscuous mode [ 2493.050442][ T312] bridge0: port 2(bridge_slave_1) entered disabled state [ 2493.061109][ T312] device bridge_slave_0 left promiscuous mode [ 2493.068975][T29990] EXT4-fs (loop3): mounted filesystem without journal. Opts: user_xattr,noquota,barrier=0x0000000000000002,jqfmt=vfsv1,block_validity,max_dir_size_kb=0x00000000000007b1,noquota,min_batch_time=0x0000000000000008,delalloc,user_xattr,quota,,errors=continue. Quota mode: writeback. [ 2493.074009][ T312] bridge0: port 1(bridge_slave_0) entered disabled state [ 2493.111771][ T30] kauditd_printk_skb: 34 callbacks suppressed [ 2493.111787][ T30] audit: type=1400 audit(2000000234.510:5365): avc: denied { create } for pid=29989 comm="syz.3.6525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 2493.138291][ T312] device veth1_macvtap left promiscuous mode [ 2493.144358][ T312] device veth0_vlan left promiscuous mode [ 2493.270960][ T30] audit: type=1400 audit(2000000234.670:5366): avc: denied { mounton } for pid=29995 comm="syz.1.6526" path="/proc/172/task" dev="proc" ino=171791 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 2493.295458][T29997] EXT4-fs (sda1): shut down requested (2) [ 2493.301394][T29997] Aborting journal on device sda1-8. [ 2493.377864][T29999] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6525'. [ 2493.399077][ T30] audit: type=1400 audit(2000000234.770:5367): avc: denied { read write open } for pid=29989 comm="syz.3.6525" path="/2/bus/bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 2493.493755][ T30] audit: type=1400 audit(2000000234.770:5368): avc: denied { ioctl } for pid=29989 comm="syz.3.6525" path="/2/bus/bus" dev="loop3" ino=18 ioctlcmd=0x4590 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 2493.508933][ T4896] Bluetooth: hci0: command 0x1009 tx timeout [ 2493.524420][ T30] audit: type=1400 audit(2000000234.870:5369): avc: denied { block_suspend } for pid=29989 comm="syz.3.6525" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 2493.708967][ T20] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 2494.109336][ T20] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2494.140500][ T20] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2494.161764][ T20] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2494.190950][ T20] usb 5-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.10 [ 2494.299636][T30010] 9pnet: Insufficient options for proto=fd [ 2494.382841][ T30] audit: type=1400 audit(2000000235.720:5370): avc: denied { read append } for pid=30007 comm="syz.3.6529" name="usbmon2" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 2494.415995][ T20] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2494.490376][ T20] usb 5-1: config 0 descriptor?? [ 2494.495411][ T30] audit: type=1400 audit(2000000235.720:5371): avc: denied { open } for pid=30007 comm="syz.3.6529" path="/dev/usbmon2" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 2494.519291][ T30] audit: type=1400 audit(2000000235.750:5372): avc: denied { write } for pid=30007 comm="syz.3.6529" name="001" dev="devtmpfs" ino=143 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 2494.829215][ T26] usbhid 3-1:0.0: can't add hid device: -71 [ 2494.835653][ T26] usbhid: probe of 3-1:0.0 failed with error -71 [ 2494.867437][ T30] audit: type=1400 audit(2000000236.130:5373): avc: denied { create } for pid=30011 comm="syz.1.6530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 2495.026407][ T26] usb 3-1: USB disconnect, device number 75 [ 2495.164441][T30021] input: syz0 as /devices/virtual/input/input170 [ 2496.465347][ T30] audit: type=1400 audit(2000000237.740:5374): avc: denied { map } for pid=30018 comm="syz.3.6532" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=155 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 2497.232859][T30035] bridge: RTM_NEWNEIGH with invalid ether address SYZFAIL: posix_spawn failed (errno 5: Input/output error) [ 2498.229227][ T20] usbhid 5-1:0.0: can't add hid device: -71 [ 2498.235009][ T20] usbhid: probe of 5-1:0.0 failed with error -71 [ 2498.247499][ T20] usb 5-1: USB disconnect, device number 99 [ 2498.469728][ T312] device bridge_slave_1 left promiscuous mode [ 2498.475702][ T312] bridge0: port 2(bridge_slave_1) entered disabled state [ 2498.483163][ T312] device bridge_slave_0 left promiscuous mode [ 2498.489213][ T312] bridge0: port 1(bridge_slave_0) entered disabled state [ 2498.496960][ T312] device veth1_macvtap left promiscuous mode [ 2498.502855][ T312] device veth0_vlan left promiscuous mode [ 2500.050584][ T312] device bridge_slave_1 left promiscuous mode [ 2500.056560][ T312] bridge0: port 2(bridge_slave_1) entered disabled state [ 2500.064060][ T312] device bridge_slave_0 left promiscuous mode [ 2500.070136][ T312] bridge0: port 1(bridge_slave_0) entered disabled state [ 2500.078195][ T312] device bridge_slave_1 left promiscuous mode [ 2500.084290][ T312] bridge0: port 2(bridge_slave_1) entered disabled state [ 2500.091884][ T312] device bridge_slave_0 left promiscuous mode [ 2500.097898][ T312] bridge0: port 1(bridge_slave_0) entered disabled state [ 2500.106139][ T312] device bridge_slave_1 left promiscuous mode [ 2500.112126][ T312] bridge0: port 2(bridge_slave_1) entered disabled state [ 2500.119591][ T312] device bridge_slave_0 left promiscuous mode [ 2500.125518][ T312] bridge0: port 1(bridge_slave_0) entered disabled state [ 2500.134129][ T312] device veth1_macvtap left promiscuous mode [ 2500.140003][ T312] device veth0_vlan left promiscuous mode [ 2500.145791][ T312] device veth1_macvtap left promiscuous mode [ 2500.151744][ T312] device veth0_vlan left promiscuous mode [ 2500.157408][ T312] device veth1_macvtap left promiscuous mode [ 2500.163251][ T312] device veth0_vlan left promiscuous mode