last executing test programs: 6.155673889s ago: executing program 0 (id=590): r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000004900)={0x6, 0x0, [{0x0, 0xd0, &(0x7f0000003f80)=""/208}, {0x0, 0xfb, &(0x7f00000041c0)=""/251}, {0x0, 0x0, 0x0}, {0x0, 0x6f, &(0x7f0000000900)=""/111}, {0x0, 0xce, &(0x7f00000046c0)=""/206}, {0x0, 0x0, 0x0}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mkdir(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0xfffffffffffffebd) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00', r4}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) getresgid(&(0x7f0000000240), &(0x7f0000000280), &(0x7f0000000340)) read$FUSE(0xffffffffffffffff, &(0x7f0000004180)={0x2020, 0x0, 0x0, 0x0}, 0x2020) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x1210020, &(0x7f0000000440)=ANY=[@ANYBLOB="68020000001000000079732c687567653d77697468696e5f73697a652c6e725f626c6f636b733d2c687567653d6e657665722c687567653d77697468696e5f73697a652c73697a653d352c6e725f696e6f6465733d00650038332d69643d0000", @ANYRESHEX=r5, @ANYBLOB=',\x00']) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(0xffffffffffffffff, &(0x7f0000002140)={0x2020}, 0x2020) syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x1}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) 5.725808394s ago: executing program 1 (id=592): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setresuid(0x0, r3, 0xee01) (async, rerun: 64) bind$bt_hci(r1, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) (async, rerun: 64) io_setup(0x8, &(0x7f00000002c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r1, &(0x7f0000000040)="0a00ffff0000", 0x6}]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_RCVMTU(r5, 0x11, 0xd, 0x0, &(0x7f0000000800)) (async) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @empty}, {0x300, 0x22eb, 0xc, 0x0, @opaque="7ed62bcb"}}}}}, 0x0) 5.702822316s ago: executing program 1 (id=593): bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{0x1, 0xffffffffffffffff}, 0x0, &(0x7f0000000040)='%pi6 \x00'}, 0x20) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000380)={0x2c, &(0x7f0000000300)=ANY=[@ANYRES8=r0], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0003020000000203"], 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000004c0)={0x2c, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000003380)) r4 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_ERR(r3, 0x4008af22, &(0x7f00000001c0)={0x0, r4}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f00000016c0)=""/175, 0x0}) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000000)={0x0, r4}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r3, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r5, 0x28, 0x2, &(0x7f0000000280), 0x8) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00'}, 0x10) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000100)={{}, 'syz1\x00'}) socket$netlink(0x10, 0x3, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) syz_usb_control_io(r1, &(0x7f0000000500)={0x2c, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0003"], 0x0, 0x0, 0x0}, 0x0) 5.279842231s ago: executing program 3 (id=595): socket(0x800000018, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) fcntl$setlease(r1, 0x400, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/4\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x800, &(0x7f00000004c0)={[{@shortname_mixed}, {@shortname_lower}, {@shortname_mixed}, {@shortname_win95}, {@uni_xlateno}, {@uni_xlate}, {@fat=@codepage={'codepage', 0x3d, '775'}}, {@shortname_winnt}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'iso8859-7'}}, {@uni_xlateno}]}, 0x1, 0x28d, &(0x7f0000000840)="$eJzs3cFLG1kcB/BfTNZEYUkOC7LLwmbZy55EXfawp1UWF5YNtLTk0J4qNdJirKAg1IN6k/ZvaP+F9throYfSa/+BUii20Iv25KGQkk6iiU2jsYbU8vkc9PHy+zov42OcGZmXaz8vLc4vry7s7e1ELpeKzHRE7KeiEEORjsRWAADfkv1aLXZriVPEh/owJACgz/Zrf92NOPXffwDgHOpw/X9wTZ/aOui7OJjRAQD98EX3/939B4Bz6fKVq//PlEqzl4rFXMTS9lp5rZx8T16fWYibUY1KTEQ+3jf/U5CcLdS//vtfaXaiWPe6ELmlzUZ+c62cbs9PRj4KnfOTxUSUW/PfxWgj/2I0KjEV+fihc36qY344fv+tZfvjkY/n12M5qjEf9WySz0bExmSx+M+F0mG+fl5Tzn6sAwAAAAAAAAAAAAAAAAAAAACAfhgvNuUaPe3r94wfFhTa19dJqlvXBxrpuj7Q0fV5MvFTZnDvGwAAAAAAAAAAAAAAAAAAAL4mq7fXF+eq1cpKt8atZw+e7GSTwFy1+dT+camOjVQj3Ftq+6TFf598PN//+ure0Zcysb6Y7X3/nG3j8S8D2GhlJTK9pJ7u3Pjxj9WxPz9XE5nWnjv16dJWU59IHX5y5ix3+FDLFH2bjxg+7aTt3njYbEy/+6SmOZkqKyOD+J22NsbuT8892nj5ptGTjmNSXQ4atfTZH4gAAAAAAAAAAAAAAAAAAICWx60HPRIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGJzDz//vtZGNtp5cW83wwQZ2awN9fwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAUPchAAD//26KiX0=") getpid() sched_setscheduler(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) setuid(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r0, 0x4068aea3, &(0x7f0000000080)) preadv(r2, &(0x7f0000000340)=[{&(0x7f00000008c0)=""/201, 0xc9}], 0x1, 0x0, 0x0) 5.27727769s ago: executing program 0 (id=596): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000008c0)='./file1\x00', 0x2000040, &(0x7f0000000900)={[{@errors_remount}, {@nouser_xattr}, {@noquota}, {@init_itable}, {@stripe={'stripe', 0x3d, 0x79}}, {@resgid}, {@sysvgroups}, {@delalloc}, {@usrquota}]}, 0x10, 0x4d2, &(0x7f00000002c0)="$eJzs3c9rHG8ZAPBnJtlvf+VrUvVQC7bFVtKi3U0a2wYPtYLYU8Fa7zUmmxCyyYbspm1CkRTvCiIqePLkRfAPEKR/gggFvUsVRbTVgwd1ZWdnaxt3m0i3OzX5fGA67zvv7j7P27Az88687ARwaJ2LiJsRMRIRlyJiPN+e5sutdvudzutePH80316SaLXu/jmJJN/W/awkX5+IiJ2IOBoRX70V8Y3kv+M2trZX5mq16kZerzRX1yuNre3Ly6tzS9Wl6trMzPS12euzV2enBtLPiYi48aXff/87P/nyjV989sFv7/3x4jfbaY3l7a/2Y5A6XS9l/xddoxGx8S6CFWAkX5f6tH97ZIjJAACwp/Y5/kcj4lPZ+f94jGRnpwAAAMBB0vrCWPwjiWgBAAAAB1aazYFN0nI+F2As0rRc7szh/XgcT2v1RvMzi/XNtYXOXNmJKKWLy7XqVD5XeCJKSbs+nc+x7dav7KrPRMTJiPje+LGsXp6v1xaKvvgBAAAAh8SJXeP/v41n4/8jRecFAAAADNhE0QkAAAAA75zxPwAAABx8xv8AAABwoH3l9u320uo+/3rh/tbmSv3+5YVqY6W8ujlfnq9vrJeX6vWl7Df7Vvf6vFq9vv65WNt8WGlWG81KY2v73mp9c615b/m1R2ADAAAAQ3Ty7JPfJBGx8/lj2dL2QdFJAUOR7NGePSTkWV753RASAoZmpOgEgMKMFp0AUJhS0QkAhdvrOkDfyTu/HHwuAADAuzH5if73/10bgIMtLToBAGDo3P+Hw6v0+gzAq8VlAhTlI3u0v/39/1brf0oIAAAYuLFsSdJyfi9wLNK0XI74MHssQClZXK5Vp/Lxwa/HS0fa9ensncmec4YBAAAAAAAAAAAAAAAAAAAAAAAAgI5WK4kWAAAAcKBFpH9Isl/zj5gcvzC2+/rAB8nfx7N1RDz40d0fPJxrNjem29v/8nJ784f59itFXMEAAAAAduuO07vjeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYpBfPH813l2HG/dMXI2KiZ/yzR7PV0ShFxPG/JjH6yvuSiBgZQPydxxFxqlf8pJ1WTEQni17xjxUYP42IEwOID4fZk/b+52av718a57J17+/faL68rf77vzS6+7+RPvufD/cZ4/TTn1X6xn8ccXq09/6nGz/pE//8PuN//Wvb2/3aWj+OmOx5/Elei1Vprq5XGlvbl5dX55aqS9W1mZnpa7PXZ6/OTlUWl2vV/N+eMb77yZ//6039P94n/sQe/b+wz/7/8+nD5x/rFEu94l883/v4e6pP/DQ/9n06L7fbJ7vlnU75VWd++qszb+r/Qp/+v/z79zjQtmNe3Gf/L9351rN9vhQAGILG1vbKXK1W3fh/LKTxXqShMJDCkfcjDYVOoeg9EwAAMGj/OekvOhMAAAAAAAAAAAAAAAAAAAA4vIbxc2K7Y+4U01UAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgDf6dwAAAP//sf7Zeg==") (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x200000000000008d}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) socket$inet6(0xa, 0x80002, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/zoneinfo\x00', 0x0, 0x0) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000440)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r2}, 0x8) ioctl$SIOCSIFHWADDR(r1, 0x89f0, &(0x7f0000000900)={'bridge0\x00', @random='\x00\x00\x00 \x00'}) (async) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000880)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$netlink(0x10, 0x3, 0x0) (async) r5 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r5, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYRES8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) 5.267766452s ago: executing program 0 (id=597): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'gre0\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000240)='./file0\x00') r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b6fffec850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=@newtaction={0x84, 0x30, 0x2d, 0x0, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc, 0xa}, {0xc}}}]}]}, 0x84}}, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000016000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) r7 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000740), 0xfe, 0x4a1, &(0x7f00000001c0)="$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") setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000140)=0x8, 0x4) pwritev2(r7, &(0x7f0000000980)=[{&(0x7f00000007c0)="0f978cb5385ada8b5eb00d2f42025065b32c2434997b88f5e4ccca216a58e419dcb72ff99a6d696e1de28a46c3a174457af44968e1c748a4fb238c2b13e339ed90dfe547b1de03162e3365cce3500b11aa83b29c330ac495801190934748a5389b53742e26b6f750a1d0ae0175fc8098c1696a8955278f17ea47bd08f823448163836d1c6aa5821900dc609007be52b6699de68005158b563e4cb8047ff41bb89ad0c70fba0cc6895706217f1511fc6365754f32432714ab1637dc5986c4ae7149c935ed1f09444426f655381b2d94c653e00501b400e64103c7197be369ff4e0d7c4803dc32b07b991f2b851773a1d5d3fa0515de2fa5", 0xf7}, {&(0x7f0000000680)="0684527d7246c96d8510df2ac33dd3f23d68a0ae03a2f5a35159b5ab16547850ea04f1ad915f2e206f10a921673828962e47513140a373eaff5dbbeb68f18b34fa8a4951cd9902c2b966d7610dabea4d44cde4", 0x53}, {&(0x7f00000008c0)="afb47417269ec140cd0c905f832ffcbeb8eab6f450aa54a4d5f282bc7f97398e9f5055b039aedbabb89d831a07fa10b5d2c433c7563ed5b703f524de488b23d7cd0a671f82c242704bdf0c2263b26756f7570053a25fa42032ca54039d03ab147b97f94ca882083aa95801651777ddf103feae8d765b715756f8141a39b14c8be3f708d4f5805ce764d1652dbdc8109049a54a5bd79aa4d3e1f945455907475eb488e66b401bb545e0ecf012b96d7d1cdb475b", 0xb3}], 0x3, 0x4, 0x8, 0x3) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r8 = socket(0x2, 0x2, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x400, 0x8, 0x5}, 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r10}, 0x10) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r8, 0x400448dc, 0x0) setsockopt$SO_ATTACH_FILTER(r11, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bind$bt_hci(r11, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) close_range(r8, 0xffffffffffffffff, 0x0) sendto$packet(r0, &(0x7f0000000340)="05040006e8fe091c6202a0ffffffff006003000000007f141434e3177f43055762cb80948864113b3a2543424aa608", 0xfef2, 0x0, &(0x7f0000000a80)={0x11, 0x8100, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 4.481563556s ago: executing program 0 (id=599): sched_setscheduler(0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r1}, 0x10) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) connect$unix(r2, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) syz_open_pts(r3, 0x101801) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000540)='inet_sock_set_state\x00', r4}, 0x10) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/12, @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b702000000000000850000008400"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) times(0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r7, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) 4.477405766s ago: executing program 3 (id=600): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x2}, &(0x7f0000000180)='\t', 0x1, 0xffffffffffffffff) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000240)={r1}, &(0x7f0000000280)={'enc=', 'pkcs1', ' hash=', {'blake2s-128-generic\x00'}}, 0x0, 0x0) inotify_init() syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x2d, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "0100"}, @main=@item_4={0x3, 0x0, 0x0, "cbe03604"}, @local=@item_012={0x2, 0x2, 0x0, "9f00"}, @global=@item_4={0x3, 0x1, 0x3, "0200"}, @local=@item_012={0x0, 0x2, 0x1}, @local=@item_012={0x1, 0x2, 0x0, ','}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}, @main=@item_012={0x0, 0x0, 0xb}, @main=@item_4={0x3, 0x0, 0xc, "56813742"}, @global=@item_012={0x1, 0x1, 0xb, '\a'}, @global=@item_4={0x3, 0x1, 0x1, "e3c68452"}, @local=@item_4={0x3, 0x2, 0x2, "abf78ea7"}]}}, 0x0}, 0x0) 4.400903082s ago: executing program 0 (id=601): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000004200)={{0x12, 0x1, 0x0, 0xe2, 0x79, 0x3b, 0x10, 0x5d1, 0x2001, 0x900, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4d, 0x2f, 0x9c}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000d8ffffffb703000008000000b70400000000925e850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c01250000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x4, 0x4, 0x5}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x12, r3, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, &(0x7f0000000580)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) madvise(&(0x7f0000169000/0x1000)=nil, 0x1000, 0x16) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000044700000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0xe) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e"], 0x80}}, 0x0) sendmmsg(r8, &(0x7f0000000180), 0x400008a, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r4}, &(0x7f0000000000), &(0x7f0000000040)=r5}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) 3.338453198s ago: executing program 2 (id=605): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x18, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f00000003c0)={[{@user_xattr}, {@nobarrier}, {@sysvgroups}, {@norecovery}, {@errors_continue}, {@nomblk_io_submit}, {@quota}, {@noauto_da_alloc}, {@lazytime}]}, 0x3, 0x56a, &(0x7f0000000ec0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r3, 0x5412, &(0x7f0000000140)=0x13) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x5412, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000000102010100000000000000000a000000300001802c00018004000300000000000000000000001b000000000014040400ff0200000000000000000000000000010c0019800800010000000000"], 0x50}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000004c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0xfffffffd, {{0x2b, 0x4, 0x0, 0x0, 0xac, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp_prespec={0x44, 0x44, 0x0, 0x3, 0x0, [{@private=0x3}, {@multicast1}, {@remote}, {@dev={0xac, 0x14, 0x14, 0xfe}, 0x2000}, {@broadcast}, {@empty}, {@multicast1}, {@private}]}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@remote}, {@multicast2}, {@private}, {}, {@broadcast}, {@multicast1}]}, @noop, @noop, @lsrr={0x83, 0xf, 0x0, [@private, @rand_addr=0x1, @multicast1]}, @rr={0x7, 0xf, 0x0, [@remote, @multicast1, @remote]}]}}}}}) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) 2.681866852s ago: executing program 1 (id=607): getresgid(&(0x7f0000000140)=0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0, r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f0000000080)=ANY=[@ANYBLOB="02000000000000000800008028000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000ffffffff00"/86]) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) rt_tgsigqueueinfo(r3, r3, 0x1d, &(0x7f00000003c0)={0x26, 0x8, 0x18d}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f0000002240)=[{{&(0x7f0000000680)=@nfc, 0x80, &(0x7f0000001c00)=[{&(0x7f0000001940)=""/213, 0xd5}, {&(0x7f0000001a40)=""/79, 0x4f}, {&(0x7f0000001d00)=""/61, 0x3d}, {&(0x7f0000001b40)=""/177, 0xb1}, {&(0x7f0000005940)=""/4103, 0x1007}], 0x5, &(0x7f0000006980)=""/4097, 0x1001}, 0xe}, {{&(0x7f0000000440)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000040)=[{&(0x7f0000001c80)=""/87, 0x57}, {&(0x7f0000000540)=""/188, 0xbc}, {&(0x7f0000000940)=""/4096, 0x1000}], 0x3, &(0x7f0000002940)=""/4081, 0xff1}, 0x3}, {{&(0x7f00000004c0)=@pptp={0x18, 0x2, {0x0, @dev}}, 0x80, &(0x7f00000021c0)=[{&(0x7f0000001d80)=""/165, 0xa5}, {&(0x7f0000001e40)=""/230, 0xe6}, {&(0x7f0000001f40)=""/230, 0xe6}, {&(0x7f0000002040)=""/179, 0xb3}, {&(0x7f0000002100)=""/157, 0x9d}], 0x5, &(0x7f0000000280)=""/17, 0x11}, 0x6}], 0x3, 0x40012061, 0x0) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r9, 0x8941, &(0x7f0000000080)={0x0, 0x0, "00fa00"}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, 0x0) r11 = syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000200)='./file0\x00', 0x10814, &(0x7f0000000340)=ANY=[@ANYBLOB='umask=00000000000000000000000,flush,nodots,dots,gid=', @ANYRESHEX, @ANYBLOB="00006b746769643d0092", @ANYRESHEX=0x0, @ANYRESDEC=r0], 0x1, 0x20b, &(0x7f0000000700)="$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") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x2, &(0x7f0000000640)={&(0x7f00000001c0)=ANY=[@ANYRESHEX=r9], 0x30}, 0x1, 0x0, 0x0, 0x40004}, 0x4008804) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xa, 0x810, r11, 0xcb903000) r12 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r12, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) 2.471702939s ago: executing program 2 (id=608): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x20000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x52}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=@base={0x1, 0x0, 0x0, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000240)=ANY=[@ANYBLOB="81000000000000002000004000000000d60000000000000000"]) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = getpid() sched_setscheduler(r6, 0x1, &(0x7f0000000100)=0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r2, 0x4004662b, &(0x7f0000000200)=0x2) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r9, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r9, &(0x7f00000021c0)={0x2020}, 0x2020) 2.228523759s ago: executing program 4 (id=609): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000140), 0x1, 0x787, &(0x7f0000001000)="$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") (async) mount$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fadvise64(r3, 0x0, 0xff39, 0x3) (async) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)={'#! ', './file1', [{0x20, '*#]'}]}, 0xf) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) (async) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="c40000", @ANYRESOCT=r4, @ANYBLOB="010000000000000000008900000008000300", @ANYBLOB], 0xc4}}, 0x20000080) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x6}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) (async) r8 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r9 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r9, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) (async) connect$pppl2tp(r8, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r9, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) (async) writev(r8, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) 2.20922435s ago: executing program 4 (id=610): bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0x1}, 0x48) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000002840)={'syztnl2\x00', &(0x7f00000027c0)={'syztnl0\x00', 0x0, 0x4, 0x6, 0x8, 0xb5, 0x4c, @mcast2, @private2, 0x8, 0x40, 0x3ff, 0xfeb1}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000200)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002280)=ANY=[@ANYBLOB="7400009f00278de2c5542af76068fc987dba096a741aefb5bfc26fbe7a9b9fa2b3be447d39b92ab112e973d097721120ba29491ba6a110b70a67b81c922fcd4a15f5442a21ec7cc12d0436b4ac15a14633ab8413c249daa83012d4581628327dc1a9b0c0174ea3a04510a21e5cfe222d55654a96356d953f04988c14fe780339def94dc2ace6fa86bada3cf4efddfdfb56e8f61d72a115d3d942d42faa4be8ecb81e711c", @ANYRES16=r5, @ANYBLOB="0100000000000000000001000000580008805400008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c2c00098028000080060001000a000000140002000000000000000000000000000000000105000300ff00000008000100", @ANYRES32=r6, @ANYBLOB], 0x74}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000002a00)={&(0x7f0000002240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000029c0)={&(0x7f0000002880)={0x104, 0x0, 0x400, 0x80, 0x25dfdbfc, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x4}, 0x1) mkdir(&(0x7f0000000140)='./control\x00', 0x0) close(r2) r7 = inotify_init1(0x0) read$FUSE(r2, &(0x7f0000004a80)={0x2020}, 0x2020) fcntl$setstatus(r2, 0x4, 0x2c00) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) r8 = inotify_add_watch(r7, &(0x7f0000000180)='./control\x00', 0xa4000960) r9 = inotify_init1(0x80800) inotify_rm_watch(r9, r8) rmdir(&(0x7f0000000100)='./control\x00') sendmsg$NL80211_CMD_GET_SURVEY(r1, &(0x7f0000000400)={&(0x7f0000000140), 0xc, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=r0, @ANYBLOB="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"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) r10 = dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r0, 0x1}, 0x14}}, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x2, 0x1a, &(0x7f0000000640)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0xffff0000}, {}, {}, [@map_idx_val={0x18, 0x1, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r10}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x800}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000380)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x27, r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r11, 0xfca804a0, 0x10, 0x10, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4}, 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r12, 0x89f1, &(0x7f0000000900)={'ip6gre0\x00', @random='\a\x00\x00 \x00'}) 1.947661991s ago: executing program 3 (id=611): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0xa, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003680)={{0x0, 0x0, 0x80}, "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", "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"}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x5, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r4}, 0x10) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_delete(0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000001240)=[@textreal={0x8, &(0x7f0000000000)="0f780600280f20e06635200000000f22e066b90504000066b8f107000066ba000000000f302a85ff9b0f2262ba410066ed6666f4660fd6150fc77420660f7d9aa885", 0x42}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000080)={0x10000, 0x4, 0x1, 0x8, 0x7}) 1.878533567s ago: executing program 4 (id=612): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000c40)={[{@nodelalloc}, {@block_validity}, {@sysvgroups}]}, 0xa, 0x4e4, &(0x7f0000001400)="$eJzs3c9vG1kdAPDvTOKStClJgUOpRFvRorSCOklD24hDKRKip0pAuZeQOFEUJ45ip22iClLxByAhBEiceuLSvwAk1AN/AEJCgjvix65Wu+3uYQ+765XtcZqmdhztOnGVfD7SdN57Huf7fVN5PDPvyRPAkXU+Im5FRF9EXI6I4aw9zZbbtcpmY7sXzx/N1JYkqtW77yaRZG07/+aJxltiICJ+fDviZ8nrccvrG4vTxWJhNauPVZZWxsrrG1cWlqbnC/OF5cnJietTN6auTY13pZ+1ft38/v9++6s//uDmX7714N/33r7081paQ9nrrfrRDY2u5+r7oqk/Ilb3I1gP9GXrXMct/7rvuQAA0FntHP9LEfH1+vn/cPTVz04BAACAw6T63aH4KImoAgAAAIdWWp8Dm6T5bC7AUKRpPt+Yw/uVOJ4WS+XKN+dKa8uzjbmyI5FL5xaKhfFsTu1I5JJafaJeflm/uqM+GRGnIuI3w4P1en6mVJzt9c0PAAAAOCJO7Lj+/2C4cf0PAAAAHDIjvU4AAAAA2HevXP8/6V0eAAAAwP4x/g8AAACH2g/v3Kkt1ebzr2fvr68tlu5fmS2UF/NLazP5mdLqSn6+VJqv/2bfUqe/VyyVVr4dy2sPxyqFcmWsvL5xb6m0tlwZXHjlEdgAAADAATp17tm/kojY/M5gfak51uukgAORdNpg+127/+5vLsDB6svWT//U40SAA9ff6wSAnsn1OgGg5zrdB2g7eedv3c8FAADYH6Nf3Rr/H2y2Ncf/O98b6Dh6CLzB0l4nAAAcOOP/cHTltmYAAkfVF3c2JBGb26qff/y/Wv0seQEAAN0zVF+SNJ+NBQ5FmubzESfrjwXIJXMLxcJ4dn3wz+HcF2r1ifo7E6P/AAAAAAAAAAAAAAAAAAAAAAAAALBH1WoSVQAAAOBQi0jfSrIn+Y8OXxzaeX/gWPLhcH0dEQ/+cPd3D6crldWJWvt7W+2V32ftVz1PHAAAAN4Ezev05nU8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHTTi+ePZprLay8e27+473wvIkZaxe+Pgfp6IHIRcfz9JPq3vS+JiL4uxN98HBGnW8VPamnFSJZFq/iDPYyfRsSJLsSHo+xZ7fhzq9XnL43z9XXrz1+t/P8uxG9//Eu3jn99bY4/J/cY48zmLvEfR5zpb338acZP2sS/sMf4P/3Jxka716pPIkZbfv8kr8QaqyytjJXXN64sLE3PF+YLy5OTE9enbkxdmxofm1soFrJ/W8b49df+/Mlu/T/eJv5Io//n2vX/4h77//E/Hj7/cqOYaxX/0oXW37+nG/Ff2/9p9t33jaz8olr9xWhWTjYb+3O7s0//fna3/s+26X+n//9Le+z/5R/98j973BQAOADl9Y3F6WKxsKrQulCt2lEKh7IQA7tt0+sjEwAA0G0vT/p7nQkAAAAAAAAAAAAAAAAAAAAcXQfxS2M7Y+7yc9QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD3zaQAAAP//6ajYQw==") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) open(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x1, 0x3, 0xff, 0x2000, 0x1}, 0x48) pipe2$watch_queue(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000900)=ANY=[@ANYRES64], 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffff}, 0x90) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000140)='./file1\x00', 0x3000040, &(0x7f0000000940)={[{@lazytime}, {@errors_remount}, {@oldalloc}, {@init_itable}, {@stripe={'stripe', 0x3d, 0x79}}, {@lazytime}, {@sysvgroups}, {@delalloc}, {@sysvgroups}, {@prjquota}, {@grpquota}, {@auto_da_alloc}, {@nolazytime}], [{@euid_lt={'euid<', 0xee00}}, {@seclabel}, {@obj_user={'obj_user', 0x3d, 'errors=remount-ro'}}]}, 0x10, 0x4d2, &(0x7f00000002c0)="$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") sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x80) sched_setscheduler(r3, 0x0, &(0x7f0000000200)=0x4) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000000000000959800001801000020a0702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x78}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) socketpair$unix(0x1, 0x3, 0x0, 0x0) 1.84526741s ago: executing program 3 (id=613): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x3000cd0, &(0x7f0000000440)=ANY=[], 0x1, 0x1509, &(0x7f0000002d40)="$eJzs3Am4TmX3MPC17vveHDI8Sea97rV5kuEmSUJJMiRJEpI5IUmSJEkcMiUhCRlPkjlkTicd8zxkTjp5JUkSkinc33VUn7f3fft6p//n/b9n/a5rX+deZ++1nrXPup7z7L2v65xvuwyt1rB65XrMDP8M/esCf/6SCAAJADAAALIDQAAAZXKUyZG2P5PGxH/qRcT/kPrTr3YH4mqS+advMv/0Teafvsn80zeZf/om80/fZP7pm8xfiHRtZt5rZUu/mzz//19O/SvJ8vmfLuDv7ZD5/7fR/9DRMv/0Teafvsn80zeZf/pz5RYsuKp9iKtP3v/pm8xfiHTt3/5Mef3Zq/1MW7Z/YBNCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIf4/OOuvMADw6/pq9yWEEEIIIYQQQoh/H//+1e5ACCGEEEIIIYQQ//MQFGgwEEAGyAgJkAkywzWQBbJCNsgOMbgWcsB1kBOuh1yQG/JAXsgH+aEAhEBggSGCglAI4nADFIYboQgUhWJQHByUgJJwE5SCm6E03AJl4FYoC7dBOSh/+TXT3AmV4C6oDHdDFagK1aA63AM14F6oCfdBLbgfasMDUAcehLrwENSD+tAAHoaG8Ag0gsbQBJpCM2gOLf4gPyn738p/EbrDS9ADekIi9ILe8DL0gb7QD/rDAHgFBsKrMAheg8EwBIbC6zAM3oDh8CaMgJEwCt6C0TAGxsI4GA8TIAnehonwDkyCdx/JClNgKkyD6TADZsJ7MAtmwxx4H+bCPJgPSZkWwiJYDB/AEvgQkuEjWAofQwosg+WwAlbCKlgNa2AtrIP1sAE2wibYDFtgK3wC22A77ICdsAt2wx74FPbCZ7APPodU/OIfzD/z23zoioCAChUaNJgBM2ACJmBmzIxZMAtmw2wYwxjmwByYE3NiLsyFeTAPJmI+LIAFkJCQkbEgFsQ4xrEwFsYiWASLYTF06LAklsRSeNF7XxrLYBksi2WxHJbH8ng73o4VsSJWwkpYGStjFayC1bAa3oP34L1YE2tiLayFtbE21sE6WBfrYj2shw2wATbEhtgIG2ETbILNsBm2wBbYEltiK2yFbbANtsW22A7bYXtsjx2wA3bEjtgJO2Fn7IxdsAt2xRfwBXwRX8SX8CXsiVVUL+yNvbEP9sF+2B/74ys4EF/FV/E1HIxDcCi+jq/jGzgcT+MIHImjcBRWVGNwLI5DVhMwCZMwI0zESTgJJ+MUnILTcDrOwJk4E2fhbJyN7+NcnIfzcAEuwEW4GBfjEvwQkzEZl+IZTMFluBxX4EpchStxDa7FNbgeN+B63ISbcAtuwU/wE9yO23En7sTduBs/xU/xM/wMB2MqpuJ+3I8H8AAexIN4CA/hYTyMR/AIHsWjeAyP4XE8gSfxBJ7CU3gaz+BZADiP5/ECXsBLeCntza/SGGVUBpVBJagElVllVllUFpVNZVMxFVM5VA6VU+VUuVQulUflUflUPlVAFVCkSLGKVEFVUMVVXBVWhVURVUQVU8WUU06VVCVVKVVKlValVRl1qyqrblPlVHnV2t2ublcVVRtXSd2lKqvKqoqqqqqp6qq6qqFqqJqqpqqlaqnaqraqox5UdVUv7If1VdpkGqoh2EgNxSaqqWqmmqs38FHVUg3HVqq1aqMeVyNxBLZTLV179ZTqoMZiR/WMGofPqs5qAnZRz6uu6gXVTb2ouqtWrofqqSZjL9VbTcM+qq/qp/qrWVhVpU2smnpNvZhxiBqqXleL8A01XL2pRqiRapR6S41WY9RYNU6NVxNUknpbTVTvqEnqXTVZTVFT1TQ1Xc1QM9V7apaareao99VcNU+DWqAWqkVqsfpALVEfqmT1kVqqPlYpaplarlaolWqVWq3WqLVqnVqvNqiNapParLaoreoTtU1tVzvUTrVL7VZ71Kdqr/pM7VOfq1T1hdqv/qQOqC/VQfWVOqS+VofVN+qI+lYdVd+pY+p7dVydUCfVD+qU+lGdVmfUWXVOnVc/qQvqorqkvAKNWmmtjQ50Bp1RJ+hMOrO+RmfRWXU2nV3H9LU6h75O59TX61w6t85j8up8Or8uoENN2mrWkS6oC+m4vkEX1jfqIrqoLqaLa6dL6JL6Jl1K36xL61t0GX2rLqtv0+V0eV3Bg75DV9R36kr6Ll1Z362r6Kq6mq6u79E19L26pr5P19L369r6AV1HP6jr6od0PV1fN9AP64b6Ed1IN9ZNdFPdTDfXLfSjuqV+TLfSrXUb/bhuq5/Q7fSTur1+SnfQT+uO+hndST+rO+vndBf9vO6qX9Dd9EV9SXvdQ/fUibqX7q1f1n10X91P99cD9Ct6oH5VD9Kv6cF6iB6qX9fD9Bt6uH5Tj9Aj9Sj9lh6tx+ixepweryfoJP22nqjf0ZP0u3qynqKn6ml6up6h+/1Sac7fkf/O38gfdPnVt+it+hO9TW/XO/ROvUvv1nv0Hr1X79X79D6dqlP1fr1fH9AH9EF9UB/Sh/RhfVgf0Uf0UX1UH9PH9HF9Qp/TP+hT+kd9Wp/RZ/Q5fV6f1xd++RmAQaOMNsYEJoPJaBJMJpPZXGOymKwmm8luYuZak8NcZ3Ka600uk9vkMXlNPpPfFDChIWMNm8gUNIVM3NxgCpsbTRFT1BQzxY0zJUxJc9O/nP9H/bUwLUxL09K0Mq1MG9PGtDVtTTvTzrQ37U0H08F0NB1NJ9PJdDadTRfTxXQ1XU030810N91ND9PDJJpE09u8bPqYvqaf6W8GmFfMQDPQDDKDzGAz2Aw1Q80wM8wMN8PNCDPCjDKjzGgz2ow1Y814M94k+exmoploJplJZrKZbKYOyG6mm+lmpplpZplZZo6ZY+aauWa+mW8WmoVmsVlslpglJtkkm6VmqUkxy8wys8KsMKvMKrPGrDHrzDqzwWwwm8wmk2K2mq1mm9lmdpgdZpfZZfaYPWav2Wv2mX0m1aSa/Wa/OWAOmIPmoDlkDpnD5rA5Yo6Yo+aoOWaOmePmuDlpTppT5pQ5bU6bs+asOW/OmwvmgrlkLqVd9gUqUIEJTJAhyBAkBAlB5iBzkCXIEmQLsgWxIBbkCHIEOYPrg1xB7iBPkDfIF+QPCgRhQIENOIiCgkGhIB7cEBQObgyKBEWDYkHxwAUlgpLBTUGp4OagdHBLUCa4NSgb3BaUC8oHFYLbgzuCisGdQaXgrqBycHdQJagaVAuqB/cENYJ7g5rBfUGt4P6gdvBAUCd4MKgbPBTUC+oHDYKHg4bBI0GjoHHQJGgaNAuaBy3+rfW9P537Mdcj7Bkmhr3C3uHLYZ+wb9gv7B8OCF8JB4avhoPC18LB4ZBwaPh6OCx8IxwevhmOCEeGo8K3wtHhmHBsOC4cH04Ik8K3w4nhO+Gk8N1wcjglnBpMC6eHM8KZ4XvhrHB2OCd8P5wbzgvnhwvCheGiEH++JIbk8KNwafhxmBIuC5eHK8KV4apwdbgmXBuuC9eHG8KN4aYyA38+NNwWbg93hDvDXeHucE/4abg3/CzcF34epoZfhPvDP4UHwi/Dg+FX4aHw6/Bw+E14JPw2PBp+Fx4Lvw+PhyfCk+EP4anwx/B0eCY8G54Lz4c/hRfCi+Gl0Kdd3Kd9vJMhQxkoAyVQAmWmzJSFslA2ykYxilEOykE5KSflolyUh/JQPspHBagApWFiKkgFKU5xKkyFqQgVoWJUjBw5KkklqRSVotJUmspQGSpLZakclaMKVIHuoDvoTrqT7qK76G66m6pSVapO1akG1aCaVJNqUS2qTbWpDtWhulSX6lE9akANqCE1pEbUiJpQE2pGzagFtaCW1JJaUStqQ22oLbWldtSO2lN76kAdqCN1pE7UiTpTZ+pCXagrdaVu1I26U3fqQT0okRKpN/WmPtSH+lE/GkADaCANpEE0iAbTYBpKQ2kYDaPhNJxG0EgaRW/RaBpDY2kcjacJlERJNJEm0iSaRJNpMk2lqTSdptNMmkmzaBbNoTk0l+bSfJpPC2khLabFtISWUDIl01JaSimUQstpOa2klbSaVtNaWkvraT1tpI20mTbTVtpK22gb7aAdtIt20R7aQ3tpL+2jfZRKqbSf9tMBOkAH6SAdokN0mA7TETpCR+koHaNjdJyO00k6SafoFJ2m03SWztJ5+oku0EW6RJ4SbCab2V5js9isNpvNbv8yzmPz2nw2vy1gQ5vL5v5NTNbaIraoLWaLW2dL2JL2pr+Ky9nytoK93d5hK9o7bSVbzmaCP49r2HttTXufrWXvt9XtPb+Ja9sHbB37iK1rG9t6tqltYJvbhvYR28g2tk1sU9vMNrdt7RO2nX3StrdPJXSwT/95bNPiJfZDu9aus+vtBrvXfmbP2nP2iP3Wnrc/2R62px1gX7ED7at2kH3NDrZDfhsD2FH2LTvajrFj7Tg73k74q3iqnWan2xl2pn3PzrKz/ypebD+wc22ynW8X2IV20eU4radk+5Fdaj+2KXaZXW5X2JV2lV1t1/zfXlfYTXaz3WL32E/tNrvd7rA77S67+3Kcdh777Oc21X5hD9tv7AH7pT1oj9pD9uvLcdr5HbXf2WP2e3vcnrAn7Q/2lP3RnrZnLp9/2rn/YC/aS9ZbYGTFmg0HnIEzcgJn4sx8DWfhrJyNs3OMr+UcfB3n5Os5F+fmPJyX83F+LsAhE1tmjrggF+I438CF+UYuwkW5GBdnxyW4JN/EpfhmLs23cBm+lcvybVyOy3MFvp3v4Ip8J1fiu7gy381VuCpX4+p8D9fge7km38e1+H6uzQ9wHX6Q6/JDXI/rcwN+mBvyI9yIG3MTbsrNuDm34Ee5JT/Grbg1t+HHuS0/we34SW7PT3EHfpo78jPciZ/lzvwcd+HnuSu/wN34Re7OL3EP7smJ3It788vch/tyP+7PA/gVHsiv8iB+jQfzEB7Kr/MwfoOH85s8gkfyKH6LR/MYHsvjeDxP4CR+myfyOzyJ3+XJPIWn8jSezjN4Jr/Hs3g2z+H3eS7P4/m8gBfyIl7MH/AS/pCT+SNeyh9zCi/j5byCV/IqXs1reC2v4/W8gTfyJt7MW3grf8LbeDvv4J28i3fzHv6U9/JnvI8/51T+gvfzn/gAf8kH+Ss+xF/zYf6Gj/C3fJS/42P8PR/nE3ySf+BT/COf5jN8ls/xef6JL/BFvsSeIcJIRToyURBliDJGCVGmKHN0TZQlyhpli7JHsejaKEd0XZQzuj7KFeWO8kR5o3xR/qhAFEYU2YijKCoYFYri0Q1R4ejGqEhUNCoWFY9cVCIqGd0UlYpujkpHt0RlolujstFtUbmofFQhuj26I6oY3RlViu6KKkd3R1WiqlG1qHp0T1QjujeqGd0X1Yruj0pHD0R1ogejutFDUb2oftQgejhqGD0SNYoaR02iplGzqHnUIno0ahk9FrWKWkdtosejttETUbvoyah99FTUIXr6yv6iwc+fpn+xPzHqFelfnpDdpxfGF8UXxz+IL4l/GE+OfxRfGv84nhJfFl8eXxFfGV8VXx1fE18bXxdfH98Q3xjfFN8c3xL3vnpGcJh2IwzGBS6Dy+gSXCaX2V3jsrisLpvL7mLuWpfDXedyuutdLpfb5XF5XT6X3xVwoSNnHbvIFXSFXNzd4Aq7G10RV9QVc8WdcyVcSdfctXAtXEv3mGvlWrs27nH3uHvCPeGeTPilcdfRPeM6uWddZ/ece84977q6F1w396Lr7l5yPVxPl+gSXW/X2/VxfVw/188NcAPcQDfQDXKD3GA32A11Q90wN8wNd8PdCDfCjXKj3Gg32o11Y914N94luSQ30U10k9wkN9lNdlPdVDfdTXcz3Uw3y81yc9wcN9fNdfPdfLfQLXSL3WK3xC1xyS7ZLXVLXYpLccvdcrfSrXSr3Wq31q116916t9FtdJvdZrfVbXXb3Da3w+1wu9wut8ftcXvdXrfP7XOpLtXtd/vdAXfAHXRfuUPua3fYfeOOuG/dUfedO+a+d8fdCXfSeX3K/ehOuzPurDvnzruf3AV30V1y3iXF3o5NjL0TmxR7NzY5NiU2NTYtNj02IzYz9l5sVmx2bE7s/djc2LzY/NiC2MLYotji2AexJbEPY8mxj2JLYx/HUmLLYstjK2IrY6ti3uffFvmCvpCP+xt8YX+jL+KL+mK+uHe+hC/pb/Kl/M2+tL/Fl/G3+rL+Nl/Ol/cVfGPfxDf1zXxz38I/6lv6x3wr39q38Y/7tv4J384/6dv7p3wH/7Tv6J/xnfyzvrN/znfxz8/7Zcq+u3/J9/A9faLv5Xv7l30f39f38/39AP+KH+hf9YP8a36wH+KH+tf9MP+GH+7f9CP8SD/Kv+VH+zF+rB/nx/sJPsm/7Sf6d/wk/66f7Kf4qX6an+5n+Jn+PT/Lz/Zz/Pt+rp/n5/sFfqFf5Bf7D/wS/6FP9h/5pf5jn+KX+eV+hV/pV/nVfo1f69f59X6D3+g3+c1+i9/qP/Hb/Ha/w+/0u/xuv8d/6vf6z/w+/7lP9V/4/f5P/oD/0h/0X/lD/mt/2H/jj/hv/VH/nT/mv/fH/Ql/0v/gT/kf/Wl/xp/15/x5/5O/4C/6S/I3a0IIIYQQfxf9B/t7/Y3vqV+2NL0BIOv2vIf+subGXD+v+6q9HWIA8FTPLvV/3erXT0xM/OXYFA1BoQUAELuSnwGuxMugDTwB7aE1lPqb/fVVFS5f9/2/6sdvBcgMkOnXnLTbo1/jK/Vv/p36jT/g362/7Of6CwCKFLqSk1b41/hK/dK/U39329+vf7n/TF8mAbT6s5wscCW+Ur8kPAZPQ/vfHCmEEEIIIYQQQvysrzrf9Q/uPy/fn+czv837Nf6j+/M/UOlf7V8IIYQQQgghhBB/7NkXuj35aPv2rTv9Ny8y/me08R+wQAD4D2hDFv/5i6v9m0kIIYQQQgjx73blov9qdyKEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQqRf//x/CFN/98FX+xyFEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEKIq+3/BAAA//+0FVXr") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socket$inet_icmp_raw(0x2, 0x3, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000006c59850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) r5 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) shutdown(r5, 0x0) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r7, 0x29, 0x20, &(0x7f00000003c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d41000000000000000290000000b000000", 0x30) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0x3f7, 0x800, 0x70bd28, 0x25dfdbff, {0x6, 0x7, './file0', './file0'}, ["", "", ""]}, 0x28}}, 0xc080) write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000029c0)={0xc, {"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", 0x1000}}, 0x1006) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ac0)={0x0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={&(0x7f00000002c0), 0x0, &(0x7f00000001c0), &(0x7f0000003a00), 0x0, r6}, 0x38) syz_emit_ethernet(0x45, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffff0000000000000800450300370000000000049078000000000000000000000000002390780e0000000000000000000000000000005cd3ffd7e219acb6496df1"], 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x9, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x9}, [@map_idx={0x18, 0xb, 0x5, 0x0, 0x6}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x0, 0x5, 0x0, &(0x7f00000003c0)="4c8ca73236", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 1.731746369s ago: executing program 1 (id=614): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r2 = socket$inet6(0xa, 0x80002, 0xffffffff) sendto$inet6(r2, 0x0, 0x0, 0x200c8804, &(0x7f0000000280)={0xa, 0xce20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0x200}, 0x1c) setsockopt$inet6_udp_int(r2, 0x11, 0xa, &(0x7f0000000080), 0x4) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000000000061116000000000006804000000000000"], 0x0}, 0x90) (async) r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r3, &(0x7f0000000400)={'#! ', './file0', [], 0xa, "1f411d2552ad52cb07410969e814977e4f2c4a80522094786c8673fb61cf8b86bda4de504f5a3c7c04055f1f70e4064d46b2bb9e5100d446bb6a"}, 0x2) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000040)=ANY=[@ANYBLOB='\t'], 0x28) (async) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000feff17110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, 0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x20, 0x36b, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES16], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) (async, rerun: 64) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r4, &(0x7f0000000080), &(0x7f0000000340)=""/166}, 0x20) (async, rerun: 64) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x80205b, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) (async) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f00000000c0)={0x14c}, 0x137) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000004c0), 0x801084, &(0x7f0000000500)=ANY=[]) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x7, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r8}, 0x10) (async) chdir(&(0x7f0000000040)='./file0\x00') syz_mount_image$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 1.726576449s ago: executing program 1 (id=615): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) syz_open_pts(r0, 0x808c0) (async, rerun: 64) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0xf, &(0x7f0000000040)=ANY=[@ANYBLOB="85100000030000009500000000000000185500000c0000000000000000000000d5db20000100000057800400ebffffff18110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000003b8af8ff00000000bfa21ac9e100000000000007020000f8ffffffb703000008000000b7040000010008000500000000"], &(0x7f00000004c0)='syzkaller\x00', 0x7f, 0x1000, &(0x7f0000000d40)=""/4096, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000300)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000000340)=[{0x5, 0x4, 0x20000009, 0xc}, {0x1, 0x5, 0xb, 0x3}, {0x0, 0x1, 0xb, 0x6}], 0x10, 0x3}, 0x90) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f00000004c0)=ANY=[], &(0x7f0000000d00)='GPL\x00', 0x0, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1}, 0x90) (async, rerun: 32) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async, rerun: 32) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES8=r2, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='task_rename\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='task_rename\x00', r5}, 0x10) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000001880), 0x2, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000800000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r7 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x4) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r9, &(0x7f0000000b40), 0x2b842ac, 0x0) (async) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xd, 0xe, &(0x7f0000001d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x90) (rerun: 32) 1.726027959s ago: executing program 1 (id=616): bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e2793510d1f51032330336b2985ebb54e812000100000000090400000800"/49], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth0_to_batadv\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC=0x0, @ANYRES32=r1, @ANYRES8=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_control_io(r0, 0x0, 0x0) 1.403503756s ago: executing program 2 (id=617): syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="120100009b23fd406d04c1088dee000000410902240001fa0000000904000000ff01000007240100002e000b240201064dbd81"], 0x0) (async) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400000bb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f00000001c0)='kfree\x00', r1}, 0x10) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) (async) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x167401) (async) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r3, 0x802c550a, &(0x7f0000000500)=ANY=[@ANYRES8=0x0, @ANYRES64=0x0, @ANYRES32=r2, @ANYRES64, @ANYRES16=r1, @ANYBLOB="70eca266aeba17c081de5c13542c053000d502db133c0f792dbc3485c82f3d919a87199d3278317f9dff49faae655d804fc93a3d49f878f9552875027725f6fc61e5a6625753aa471a300ac941ba67772577a169c1136eb83c"]) (async) ioctl$USBDEVFS_RELEASE_PORT(r3, 0x551f, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000f40)=ANY=[@ANYBLOB="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"], 0xfc}}, 0x0) (async) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f00000015c0)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x0, 0x0, 0x1f}, 0x0, 0x0}) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000), 0x4) (async) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x13, 0x0, &(0x7f0000000280)='GPL\x00', 0x4508, 0x1000, &(0x7f0000000ac0)=""/4096, 0x40f00, 0x26, '\x00', 0x0, 0x1e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[0x1, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x90) (async) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_tracing={0x1a, 0x15, &(0x7f0000002600)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x9, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x1d5ca, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)=[0x1], 0x0, 0x10, 0x4ff04941}, 0x90) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) (async) socket$pptp(0x18, 0x1, 0x2) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r6, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async) creat(&(0x7f0000000300)='./bus\x00', 0x0) (async) mount(&(0x7f00000004c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) open(&(0x7f00000005c0)='./bus\x00', 0x50800, 0x84) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000600)='./bus\x00', 0x800421, &(0x7f0000000100), 0xff, 0x490, &(0x7f0000000f40)="$eJzs3M9vFFUcAPDvTLf8VFoRf4AkVtHY+KOlBZSDHjSaeNBEowc81rYQZKGG1kQI0WIMHg2Jd+PRxL/Akyejnky8eNC7ISFKTAAvrpndmba77lT6cxf380kW3tt5M+99++btvr632wB61lD2TxJxR0T8EhEDjWxzgaHGfzeuXZi8ee3CZBK12hu/J/Vy169dmCyKFuftzDPDaUT6cZJX0mz23PlTE9Xq9Nk8Pzp3+t3R2XPnnzp5euLE9InpM+NHjx4+NPbM0+NHms47sso4s/iu7/tgZv/el9+6/Orksctvf/9V1t40P740jvUylAX+R62u9dij611Zh/1dW4wzqXS6NdyqvojIuqu/Pv4Hoi8WO28gXvqoo40DNlT2mr21/PB8DfgfS6LTLQA6o3ijz37/zR/9mzT16ApXn2/8ApTFfiN/NI5UFtYGNvIHMhQRx+b/+jx7RMs6RK3NugEAwFp9k81/nmya/+XzjzTuXVJuV743NBgRd0XE7oi4OyL2RMQ9EfWy90XE/Susv3Vr6N/7MOmVVQV2i7L537P53lbz/K+Y/cVgX567sx5/f3L8ZHX6YP4zGY7+rVl+rN3Fi0u8+NOnZfUvnf9lj6z+Yi6YX+RKpWWBbmpibmK9JqVXL0bsq7SLP1nYCUgiYm9E7FvZpXcViZOPf7m/rNB/x7+Mddhnqn0R8Vij/+ejJf5Csvz+5Oi2qE4fHG3cFX1t6vjhx0uvldW/pvjXQdb/O5rv/5YSA38mS/drZ1dex6VfPyndW62s8v7fkrxZ39Pdkj/3/sTc3NmxiC3JK/V80/Pji+cW+aJ8Fv/wgfbjf3d+Thb/AxGxP+LnYtg9mPfdQxHxcEQcWCb+71545J2yY93Q/1NtX/8W7v/B5v5feaLv1Ldfl9XfGn+S5xdLZP1/uJ4azp+pv/7ltpdct7w52/ISq72bAQAA4PaT1j8bn6QjC+k0HRlpfIZ/T+xIqzOzc08cn3nvzFTjM/SD0Z8W658DS9ZDx5L5/IqN/Hi+VlwcP5SvG3/Wtz1Jojo9MjlTnepw7NDrdpaM/8xv7RazI+K5TW0hsKF8Xwt6V+v4TzvUDmDzef+H3mX8Q+8y/qF3FeP/9SXPfdhSpmQvALjNef+H3mX8Q+9aGP8XO9sOYPN5/4ee1O5L8sXfOFjDV/7XlKgs8+39Lk0Uq6Pd0p5TSURsbBWRdkekpYnI/4hFt7Rn5YmbtVWeXllmdN9qojOvRwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOvtnwAAAP//aP7lHQ==") 1.336170471s ago: executing program 2 (id=618): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000006, &(0x7f0000000600)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@data_err_abort}, {@noblock_validity}, {@journal_checksum}, {@nomblk_io_submit}, {@auto_da_alloc}, {@orlov}, {@bsdgroups}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@user_xattr}, {@init_itable_val={'init_itable', 0x3d, 0x7ff}}]}, 0x1, 0x54f, &(0x7f0000000b00)="$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") r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mounts\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() rt_tgsigqueueinfo(r2, 0x0, 0x39, &(0x7f0000000240)={0x0, 0x0, 0x414}) sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)={0x15, 0x65, 0xffff, 0x0, 0x8, '9P2000.L'}, 0x15) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) mount$fuse(0x0, &(0x7f0000000440)='./file0/../file0\x00', &(0x7f0000000480), 0x3000000, &(0x7f0000000780)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}, 0x2c, {[], [{@fscontext={'fscontext', 0x3d, 'system_u'}}]}}) open(0x0, 0x4482, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0xa, &(0x7f0000000240)=0x0) io_submit(r6, 0x1, &(0x7f0000000280)=[0x0]) open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) ptrace$ARCH_SHSTK_ENABLE(0x1e, r2, 0x2, 0x5001) mount$bind(0x0, &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x1217880, 0x0) 787.728736ms ago: executing program 3 (id=619): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x0, 0x7fe4, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='kfree\x00', r1}, 0x10) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc222, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb}}}}]}}]}}, 0x0) (async) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc222, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@enum, @struct={0x0, 0x1, 0x0, 0x5, 0x1, 0x0, [{0x0, 0x1, 0x1000000}]}]}}, 0x0, 0x3e}, 0x20) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@enum, @struct={0x0, 0x1, 0x0, 0x5, 0x1, 0x0, [{0x0, 0x1, 0x1000000}]}]}}, 0x0, 0x3e}, 0x20) syz_usb_control_io$hid(r2, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00228b00000003881a000000c075069608"], 0x0}, 0x0) (async) syz_usb_control_io$hid(r2, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00228b00000003881a000000c075069608"], 0x0}, 0x0) 779.211416ms ago: executing program 4 (id=620): ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000380)={'tunl0\x00', &(0x7f0000000240)={'gretap0\x00', 0x0, 0x17, 0x40, 0x8c, 0xb53, {{0xf, 0x4, 0x3, 0x7, 0x3c, 0x66, 0x0, 0xf9, 0x29, 0x0, @multicast1, @broadcast, {[@end, @end, @timestamp={0x44, 0x1c, 0x89, 0x0, 0x9, [0x8, 0x7, 0x0, 0x800, 0x10000, 0x7]}, @cipso={0x86, 0x8, 0x3, [{0x0, 0x2}]}, @end]}}}}}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x6, 0x7, 0x5, 0xbc5, 0x1, 0x10001, '\x00', r0, 0xffffffffffffffff, 0x3, 0x3, 0x2}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) ptrace$ARCH_FORCE_TAGGED_SVA(0x1e, r2, 0x0, 0x4004) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getdents(0xffffffffffffffff, &(0x7f0000000300)=""/115, 0x73) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg$sock(r6, &(0x7f0000000500)=[{{&(0x7f0000000080)=@phonet={0x23, 0x0, 0x0, 0x6}, 0x80, 0x0}}, {{&(0x7f0000000100)=@caif=@dgm, 0x80, 0x0}}], 0x2, 0x0) pipe2$watch_queue(&(0x7f0000000000), 0x80) r7 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r7, 0x0, 0x0) sendmsg$can_bcm(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="05000000020800"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="00000000010000008f00000000aa818746000000cb7d30284728e8a4004b789607ed47dfdf3536741848cc6cb65c6e77aad78d7b92bf856fcdd536f9d9655dcf800549436e96000000000000000000000000000001109e8f499c51acb19d2ac88e56a153eb4820c76c292c035327d6"], 0x80}}, 0x0) sendmsg$can_bcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="0700000000000000000000000000000000fa55a33a67f1de844431dde0fe94df700157080b7e2e67d3c74be20cd8e3ff0f96c7ce0983df8a6d87439e9dbfbf8f7f82ca461b", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="00000000010000000000000000000000b16df9f80fedfa09", @ANYRESHEX=r1, @ANYRES8=r0], 0x48}}, 0x8010) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, &(0x7f0000000680)="170000000200010000ffbe8c5ee17688a2006c000301000a000002a2576e5ed9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000fc0607bdca67a622c45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dfc060115003901000000000000ea000000000000000062068f5ee50ce5af9b1c56835382e9d969ba5149e9e90539062a80e605007f71174aa951f3c63e5a1b47b63a6323ded241482cfe17", 0xb5) socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) 595.061891ms ago: executing program 3 (id=621): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000e27b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa1"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r0}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='htcp\x00', 0x5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x4, 0x4010, 0xffffffffffffffff, 0x203ba000) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x0, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) getuid() sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r6}, 0x10) mkdir(&(0x7f0000000540)='./file0\x00', 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x4000}}) write$FUSE_INIT(r7, &(0x7f0000004200)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x207601a}}, 0x50) 539.826796ms ago: executing program 0 (id=622): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x8, &(0x7f0000000000), 0x1, 0x51a, &(0x7f0000001200)="$eJzs3U9sI1cZAPBvJsnam6ZNCj0AKnQphQWt1k68bVT1QjlVCFVC9MhhGxInimLHUeyUJuwhe+SORCVOcOLMAYkDUk/ckTjAjUs5IBVYgRokJFx5bGedP06sbGJv499PGvnNvLG/93Y071mfN/MCGFu3ImI/Im5ExLsRMds5nnS2eLO9tc775NGD5YNHD5aTaDbf+WeS1beORc97Wp7pfGY+In7wVsSPkmNB/xRR393bWKpUytudQ8VGdatY3927u15dWiuvlTdLpcWFxfnX771WurS+vlT9zcc3I+L3v/vyR3/c/9ZPWs2a6dT19uMytbs+dRinZTIivncVwUZgotOfGxd584XexGVKI+JzEfFydv/PxkR2NY86epm+PcTWAQBXodmcjeZs7z4AcN2lWQ4sSQudXMBMpGmh0M7hvRDTaaVWb9xZre1srrRzZXMxla6uV8rznVzhXEwlq+uT5YWs3N2vlEvH9u9FxPMR8bPczWy/sFyrrIzyiw8AjLFnjs3//8m1538A4JrLPy7mRtkOAGB48qNuAAAwdOZ/ABg/5n8AGD/mfwAYP+Z/ABg/5n8AGCvff/vt1tY86Dz/euW93Z2N2nt3V8r1jUJ1Z7mwXNveKqzVamvZM3uq531epVbbWng1dt4vNsr1RrG+u3e/WtvZbNzPnut9vzw1lF4BAGd5/qUP/5JExP4bN7Mtep73f+5c/eJVtw64SumoGwCMzMSoGwCMzMnVvoBxIR8P4+v/zWYzetbujYiHh6Weh4H2/S9CHwwUJrVuKDx9bn/xCfL/wGea/D+Mr4vl/32Xh+tA/h/GV7OZWPMfAMaMHD+QnFPf+/v/fLNnZ7Df/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBamsm2JC101gKfiTQtFCKejYi5mEpW1yvl+Yh4LiL+nJvKtfYXIsK6QQDwWZb+Pems/3V79pWZ47U3cv/NZa8R8eNfvPPz95caje2FiBvJvw6PNz7oHC+Nov0AwHm683R3Hu/65NGD5e42zPZ8/J324qKtuAedrV0zGZPZaz7LNUz/O+nst7W+r0xcQvz9hxHxhdP6n2S5kbnOyqfH47diPzvU+OmR+GlW135t/Vt8/hLaAuPmw9b48+Zp918at7LX0+//fDZCPbnu+HdwYvxLD8e/iT7j361BY7z6h++eONicbdc9jPjSZMRB98N7xp9u/KRP/FcGjP/XF7/ycr+65i8jbsdp/U+OxCo2qlvF+u7e3fXq0lp5rbxZKi0uLM6/fu+1UjHLURe7meqT/vHGnef6xW/1f7pP/Pw5/f/6gP3/1f/e/eFXz4j/za+dfv1fOCN+a078xoDxl6Z/m+9X14q/0qf/513/OwPG/+hveysDngoADEF9d29jqVIpbz95IX/mOellhBigkETsX3GIx4Xcr3/61vkn54bWngsWol/VxNPSwmtTyD0dzRigMOqRCbhqj2/6UbcEAAAAAAAAAAAAAADoZxh/TjTqPgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHB9fRoAAP//j4/W2A==") r0 = syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) faccessat(r0, &(0x7f00000001c0)='./bus\x00', 0xf5) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mknodat(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = open(&(0x7f00000002c0)='./bus\x00', 0x60102, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0xa0842, 0x0) splice(r1, 0x0, r2, 0x0, 0xffffffe1, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x43, 0x4, @thr={&(0x7f0000000200)="6eb14e81d526f9cc8bcabad549e9fd51111ebd2049e145fbd9ecb19c3be0abe2d9df323b4b3955ecdecfd865a44751b0460a5089d0d8e229ce36f1b001765e", &(0x7f0000000440)="8a2f4de900db0263e0a804385dfcc69d4170d3e5a63635d7e831080cb99245bdad26936aa617da82663833f4f74580d8e300fe15ec1142a298026d05ae7b42204664a6db0f0f7b2d871bdd2944afb6121e51dd3b58da9ed7b29c5c5caba6a2818b06f187f49068c150c7e5aa7e13c221bcf0e3a9dcdd32bc270d41225cc717fb165939cbe59b4b63382aa82e1629a93e9cfcdbdfc33389bf1fb3f53c070019e11d198cd79e49ca9311d6b42ff7689691a3910809ef497df1f40f905f1174db848e"}}, &(0x7f0000bbdffc)) poll(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000100)={'veth0_to_batadv\x00', @remote}) mknod(&(0x7f0000000040)='./file0\x00', 0x1000, 0x0) mprotect(&(0x7f0000605000/0x3000)=nil, 0x3000, 0x200000a) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)}, 0x40000100) 216.095742ms ago: executing program 2 (id=623): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x0) close(r0) inotify_init1(0x0) fcntl$setstatus(r0, 0x4, 0x2c00) r1 = gettid() fcntl$setown(r0, 0x8, r1) rt_sigprocmask(0x0, &(0x7f00000000c0)={[0x7fffffffffffffff]}, 0x0, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='xprtrdma_post_recv\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x8, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000004000000000000000700000f9110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000001dc0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000100)) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$DEVLINK_CMD_RATE_DEL(r7, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="240000007809e45f8d1415e4d92149bdef13d9a4871f67d2877f05dacd041fac7f0770cdffff41ffffffff0000000000002000e2efeb", @ANYRES16=0x0, @ANYBLOB="010026bd7000ffdbdf254d0000000f00a8007365636f6e646e616d650000"], 0x24}, 0x1, 0x0, 0x0, 0x14}, 0x4000001) socket(0x3, 0xa, 0x1) 166.277586ms ago: executing program 4 (id=624): r0 = socket$netlink(0x10, 0x3, 0xf) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00') openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) preadv(r1, &(0x7f00000026c0)=[{&(0x7f0000000240)=""/4088, 0xff8}], 0x1, 0x7f, 0x2) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x75) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000480, &(0x7f0000000000), 0x1, 0x784, &(0x7f00000007c0)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_sys\x00', 0x275a, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r4 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)=r4) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x1, r4}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000980)) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_LOG_BASE(r3, 0x4008af04, &(0x7f0000000500)=&(0x7f0000000340)) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x1) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4008004) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040), 0x208e24b) write$binfmt_script(r2, &(0x7f0000000040)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) clock_gettime(0x0, &(0x7f0000000340)) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r5, &(0x7f00000000c0)='cpu.stat\x00', 0x275a, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) preadv(r1, &(0x7f0000000080), 0x4, 0x6, 0x10005) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) 71.729374ms ago: executing program 2 (id=625): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) r1 = socket(0x1e, 0x4, 0x0) (async) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r5}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f00000005c0)=@req={0x3709, 0xd, 0x8597, 0xb3}, 0x10) (async) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) (async) r6 = dup3(r2, r1, 0x0) recvmmsg$unix(r6, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000001700)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000"], 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r7}, 0x10) (async) r8 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="13010000000000402505a8a440000102030109021b00010100000009040000020701010009050102"], 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r4, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000002c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x94, 0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0), &(0x7f0000000500), 0x8, 0xbd, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) (async) syz_usb_control_io$printer(r8, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) (async) r9 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r9, 0x604, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom0\x00', 0x2, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 0s ago: executing program 4 (id=627): socket$tipc(0x1e, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'ip_vti0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0x20, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, @empty, @multicast2}}}}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"/787], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000f2ff850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000070000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000740)='kmem_cache_free\x00', r2}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x1f2f, 0xf, 0x2f, &(0x7f00000007c0)="9f44948721919580684010a49e66", 0x0, 0x241, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39"}, 0x23) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000040)) kernel console output (not intermixed with test programs): ignoring hub [ 74.793587][ T739] hub: probe of 1-1:0.0 failed with error -5 [ 74.989036][ T1727] syz.2.283[1727] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 74.989093][ T1727] syz.2.283[1727] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 75.000706][ T1728] syz.2.283[1728] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 75.012807][ T1728] syz.2.283[1728] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 75.137454][ T53] usb 1-1: USB disconnect, device number 19 [ 75.149157][ T1727] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 75.162025][ T1727] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 75.172750][ T1727] F2FS-fs (loop2): Found nat_bits in checkpoint [ 75.203566][ T1727] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 75.210592][ T1727] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 75.481111][ T741] Bluetooth: hci0: command 0x1003 tx timeout [ 75.486993][ T1711] Bluetooth: hci0: sending frame failed (-49) [ 75.717002][ T1737] EXT4-fs (loop2): orphan cleanup on readonly fs [ 75.723681][ T1737] __quota_error: 31 callbacks suppressed [ 75.723694][ T1737] Quota error (device loop2): find_block_dqentry: Quota for id 0 referenced but not present [ 75.739795][ T1737] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 75.749255][ T1737] EXT4-fs error (device loop2): ext4_acquire_dquot:6219: comm syz.2.284: Failed to acquire dquot type 1 [ 75.761235][ T1737] EXT4-fs (loop2): 1 truncate cleaned up [ 75.766863][ T1737] EXT4-fs (loop2): mounted filesystem without journal. Opts: barrier,,errors=continue [ 76.647355][ T738] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 76.814868][ T24] audit: type=1400 audit(2000000039.030:693): avc: denied { ioctl } for pid=1755 comm="syz.0.288" path="socket:[19591]" dev="sockfs" ino=19591 ioctlcmd=0x8903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 76.887814][ T1761] FAT-fs (loop0): Unrecognized mount option "uni_xl`te=1" or missing value [ 77.007410][ T738] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.019100][ T738] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 77.028955][ T738] usb 3-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 77.037864][ T738] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.048932][ T738] usb 3-1: config 0 descriptor?? [ 77.387371][ T53] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 77.510264][ T24] audit: type=1400 audit(2000000039.730:694): avc: denied { listen } for pid=1747 comm="syz.2.286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 77.547382][ T741] Bluetooth: hci0: command 0x1001 tx timeout [ 77.553203][ T1711] Bluetooth: hci0: sending frame failed (-49) [ 77.747444][ T53] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.758445][ T53] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 77.767961][ T53] usb 1-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 77.776807][ T53] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.785523][ T53] usb 1-1: config 0 descriptor?? [ 77.807402][ T738] usbhid 3-1:0.0: can't add hid device: -71 [ 77.813217][ T738] usbhid: probe of 3-1:0.0 failed with error -71 [ 77.824518][ T738] usb 3-1: USB disconnect, device number 11 [ 78.249400][ T53] usbhid 1-1:0.0: can't add hid device: -71 [ 78.252066][ T1781] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.255209][ T53] usbhid: probe of 1-1:0.0 failed with error -71 [ 78.262175][ T1781] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.275500][ T1781] device bridge_slave_0 entered promiscuous mode [ 78.283108][ T1781] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.289117][ T53] usb 1-1: USB disconnect, device number 20 [ 78.290045][ T1781] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.303280][ T1781] device bridge_slave_1 entered promiscuous mode [ 78.357507][ T1781] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.364383][ T1781] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.371515][ T1781] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.378370][ T1781] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.399864][ T851] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 78.407221][ T851] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.414761][ T1787] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 78.423958][ T851] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.433882][ T738] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 78.442140][ T738] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.448993][ T738] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.473089][ T738] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 78.481675][ T738] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 78.489888][ T738] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.496720][ T738] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.504201][ T738] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 78.512084][ T738] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 78.583416][ T1781] device veth0_vlan entered promiscuous mode [ 78.596253][ T1781] device veth1_macvtap entered promiscuous mode [ 78.651744][ T743] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 78.671058][ T1790] EXT4-fs error (device loop1): ext4_fill_super:4955: inode #2: comm syz.1.294: casefold flag without casefold feature [ 78.683904][ T1790] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 78.694482][ T1790] EXT4-fs (loop1): Errors on filesystem, clearing orphan list. [ 78.694482][ T1790] [ 78.704706][ T1790] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 78.715743][ T24] audit: type=1400 audit(2000000040.930:695): avc: denied { bind } for pid=1789 comm="syz.1.294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 78.743549][ T743] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 78.753307][ T743] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 78.772906][ T743] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 78.780575][ T743] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 78.787344][ T53] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 78.795686][ T743] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 79.003718][ T24] audit: type=1400 audit(2000000041.220:696): avc: denied { mounton } for pid=1802 comm="syz.2.297" path="/45/bus" dev="devtmpfs" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 79.009981][ T1805] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 79.035325][ T1805] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 79.045903][ T1805] F2FS-fs (loop2): Found nat_bits in checkpoint [ 79.077423][ T1805] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 79.084324][ T1805] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 79.217396][ T53] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 79.228254][ T53] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 79, changing to 10 [ 79.239174][ T53] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 79.248642][ T53] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 79.261462][ T332] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 79.268815][ T53] usb 1-1: New USB device found, idVendor=044f, idProduct=b653, bcdDevice= 0.00 [ 79.277682][ T53] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.286252][ T53] usb 1-1: config 0 descriptor?? [ 79.517350][ T332] usb 2-1: Using ep0 maxpacket: 32 [ 79.627569][ T739] Bluetooth: hci0: command 0x1009 tx timeout [ 79.657455][ T332] usb 2-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 79.667419][ T332] usb 2-1: config 7 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 79.678164][ T332] usb 2-1: config 7 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 79.687661][ T332] usb 2-1: config 7 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 79.700280][ T332] usb 2-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 79.709093][ T332] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.751457][ T1780] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1780 comm=syz.0.293 [ 79.768414][ T53] thrustmaster 0003:044F:B653.000E: unknown main item tag 0x0 [ 79.776391][ T53] thrustmaster 0003:044F:B653.000E: unknown main item tag 0x1 [ 79.783717][ T53] thrustmaster 0003:044F:B653.000E: unknown main item tag 0x0 [ 79.791057][ T53] thrustmaster 0003:044F:B653.000E: item fetching failed at offset 3/7 [ 79.799208][ T53] thrustmaster 0003:044F:B653.000E: parse failed [ 79.805378][ T53] thrustmaster: probe of 0003:044F:B653.000E failed with error -22 [ 79.969518][ T53] usb 1-1: USB disconnect, device number 21 [ 80.177859][ T1808] : Can't open blockdev [ 80.198256][ T332] ntrig 0003:1B96:000A.000F: unknown main item tag 0x0 [ 80.204985][ T332] ntrig 0003:1B96:000A.000F: unknown main item tag 0x0 [ 80.211703][ T332] ntrig 0003:1B96:000A.000F: unknown main item tag 0x0 [ 80.218625][ T332] ntrig 0003:1B96:000A.000F: unknown main item tag 0x0 [ 80.225290][ T332] ntrig 0003:1B96:000A.000F: unknown main item tag 0x0 [ 80.232730][ T332] ntrig 0003:1B96:000A.000F: hidraw0: USB HID v0.00 Device [HID 1b96:000a] on usb-dummy_hcd.1-1/input0 [ 80.519251][ T332] usb 2-1: USB disconnect, device number 12 [ 80.598847][ T1832] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.611182][ T1832] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.618175][ T1710] Bluetooth: hci1: sending frame failed (-49) [ 80.621759][ T1832] device bridge_slave_0 entered promiscuous mode [ 80.630960][ T1832] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.638049][ T1832] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.645213][ T1832] device bridge_slave_1 entered promiscuous mode [ 80.682365][ T24] audit: type=1400 audit(2000000042.900:697): avc: denied { watch_reads } for pid=1818 comm="syz.0.299" path="/61/file0" dev="tmpfs" ino=353 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 80.686991][ T1832] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.711612][ T1832] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.718723][ T1832] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.725484][ T1832] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.745958][ T851] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.753537][ T851] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.760837][ T851] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 80.768543][ T851] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 80.777866][ T851] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.785835][ T851] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.792689][ T851] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.808172][ T851] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.816150][ T851] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.823005][ T851] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.830723][ T851] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 80.839164][ T851] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 80.853128][ T739] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 80.865096][ T1832] device veth0_vlan entered promiscuous mode [ 80.871368][ T739] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 80.879172][ T739] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 80.886371][ T739] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 80.899403][ T1832] device veth1_macvtap entered promiscuous mode [ 80.908839][ T743] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 80.918839][ T851] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 80.928368][ T739] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 81.228300][ T851] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 81.627584][ T851] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 81.638243][ T851] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 81.649127][ T851] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 81.658768][ T851] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 81.671487][ T851] usb 5-1: New USB device found, idVendor=044f, idProduct=b653, bcdDevice= 0.00 [ 81.680355][ T851] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.688702][ T851] usb 5-1: config 0 descriptor?? [ 81.717357][ T332] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 81.864684][ T1852] device syzkaller0 entered promiscuous mode [ 81.967429][ T332] usb 1-1: Using ep0 maxpacket: 16 [ 82.108586][ T332] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.119299][ T332] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 82.128861][ T332] usb 1-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 82.137679][ T332] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.193628][ T332] usb 1-1: config 0 descriptor?? [ 82.316687][ T1856] netlink: 8 bytes leftover after parsing attributes in process `syz.4.300'. [ 82.371095][ T851] thrustmaster 0003:044F:B653.0010: unknown main item tag 0x0 [ 82.378985][ T851] thrustmaster 0003:044F:B653.0010: item fetching failed at offset 4/7 [ 82.387467][ T851] thrustmaster 0003:044F:B653.0010: parse failed [ 82.394135][ T851] thrustmaster: probe of 0003:044F:B653.0010 failed with error -22 [ 82.667498][ T739] Bluetooth: hci1: command 0x1003 tx timeout [ 82.673435][ T1841] Bluetooth: hci1: sending frame failed (-49) [ 82.688563][ T332] hid-steam 0003:28DE:1142.0011: item fetching failed at offset 2/5 [ 82.696623][ T332] hid-steam 0003:28DE:1142.0011: steam_probe:parse of hid interface failed [ 82.705294][ T332] hid-steam: probe of 0003:28DE:1142.0011 failed with error -22 [ 82.889377][ T332] usb 1-1: USB disconnect, device number 22 [ 83.482714][ T1866] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.491135][ T1866] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.498506][ T1866] device bridge_slave_0 entered promiscuous mode [ 83.505438][ T1866] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.512509][ T1866] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.519811][ T1866] device bridge_slave_1 entered promiscuous mode [ 83.575336][ T1866] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.582211][ T1866] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.589326][ T1866] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.596079][ T1866] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.622002][ T851] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 83.630194][ T851] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.638140][ T851] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.655038][ T851] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 83.663144][ T851] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.669996][ T851] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.677223][ T851] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 83.685510][ T851] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.692391][ T851] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.710987][ T739] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 83.719718][ T739] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 83.728361][ T739] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 83.736285][ T739] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 83.750296][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 83.758652][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 83.770934][ T1866] device veth0_vlan entered promiscuous mode [ 83.777780][ T743] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 83.785479][ T743] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 83.793907][ T739] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 83.801995][ T739] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 83.814644][ T739] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 83.823221][ T739] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 83.832970][ T1866] device veth1_macvtap entered promiscuous mode [ 83.846060][ T739] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 83.853564][ T739] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 83.861879][ T739] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 83.873111][ T739] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 83.881208][ T739] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 83.969227][ T332] usb 5-1: USB disconnect, device number 9 [ 83.987346][ T851] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 84.227373][ T739] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 84.247548][ T851] usb 1-1: Using ep0 maxpacket: 32 [ 84.317974][ T465] device bridge_slave_1 left promiscuous mode [ 84.323944][ T465] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.331341][ T465] device bridge_slave_0 left promiscuous mode [ 84.337533][ T465] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.345147][ T465] device veth1_macvtap left promiscuous mode [ 84.351303][ T465] device veth0_vlan left promiscuous mode [ 84.457466][ T851] usb 1-1: config 1 interface 0 has no altsetting 0 [ 84.463950][ T332] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 84.477442][ T739] usb 4-1: Using ep0 maxpacket: 16 [ 84.597441][ T739] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.608299][ T739] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 84.618025][ T739] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 84.627464][ T851] usb 1-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.40 [ 84.639556][ T739] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 84.640073][ T851] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.656193][ T739] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.656206][ T851] usb 1-1: Product: syz [ 84.656221][ T851] usb 1-1: Manufacturer: syz [ 84.665047][ T739] usb 4-1: config 0 descriptor?? [ 84.668634][ T851] usb 1-1: SerialNumber: syz [ 84.717464][ T332] usb 5-1: Using ep0 maxpacket: 16 [ 84.747730][ T738] Bluetooth: hci1: command 0x1001 tx timeout [ 84.753642][ T40] Bluetooth: hci1: sending frame failed (-49) [ 84.837438][ T332] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.848359][ T332] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 84.857868][ T332] usb 5-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 84.870470][ T332] usb 5-1: config 0 interface 0 has no altsetting 0 [ 84.876825][ T332] usb 5-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00 [ 84.885709][ T332] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.894097][ T332] usb 5-1: config 0 descriptor?? [ 84.921611][ T24] audit: type=1400 audit(2000000047.140:698): avc: denied { bind } for pid=1876 comm="syz.0.310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 84.940802][ T24] audit: type=1400 audit(2000000047.150:699): avc: denied { setopt } for pid=1876 comm="syz.0.310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 85.168441][ T739] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 85.175758][ T739] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 85.177473][ T851] usbhid 1-1:1.0: can't add hid device: -71 [ 85.183475][ T739] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 85.188949][ T851] usbhid: probe of 1-1:1.0 failed with error -71 [ 85.196011][ T739] microsoft 0003:045E:07DA.0012: global environment stack underflow [ 85.207599][ T851] usb 1-1: USB disconnect, device number 23 [ 85.210307][ T739] microsoft 0003:045E:07DA.0012: item 0 4 1 11 parsing failed [ 85.222972][ T739] microsoft 0003:045E:07DA.0012: parse failed [ 85.229013][ T739] microsoft: probe of 0003:045E:07DA.0012 failed with error -22 [ 85.378791][ T332] hid (null): usage index exceeded [ 85.385019][ T332] hid-generic 0003:045E:05DA.0013: ignoring exceeding usage max [ 85.393737][ T332] hid-generic 0003:045E:05DA.0013: usage index exceeded [ 85.400508][ T332] hid-generic 0003:045E:05DA.0013: item 0 4 2 0 parsing failed [ 85.408208][ T332] hid-generic: probe of 0003:045E:05DA.0013 failed with error -22 [ 86.501435][ T24] audit: type=1326 audit(2000000048.720:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1896 comm="syz.0.315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faade500299 code=0x7ffc0000 [ 86.524746][ T24] audit: type=1326 audit(2000000048.720:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1896 comm="syz.0.315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faade500299 code=0x7ffc0000 [ 86.548097][ T24] audit: type=1326 audit(2000000048.720:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1896 comm="syz.0.315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=4 compat=0 ip=0x7faade500299 code=0x7ffc0000 [ 86.571188][ T24] audit: type=1326 audit(2000000048.720:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1896 comm="syz.0.315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faade500299 code=0x7ffc0000 [ 86.594717][ T24] audit: type=1326 audit(2000000048.720:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1896 comm="syz.0.315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faade500299 code=0x7ffc0000 [ 86.617966][ T24] audit: type=1326 audit(2000000048.740:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1896 comm="syz.0.315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7faade500299 code=0x7ffc0000 [ 86.641182][ T24] audit: type=1326 audit(2000000048.840:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1896 comm="syz.0.315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faade500299 code=0x7ffc0000 [ 86.664385][ T24] audit: type=1326 audit(2000000048.840:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1896 comm="syz.0.315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faade500299 code=0x7ffc0000 [ 86.827455][ T851] Bluetooth: hci1: command 0x1009 tx timeout [ 86.908981][ T851] usb 4-1: USB disconnect, device number 11 [ 86.989206][ T1904] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=1904 comm=syz.3.317 [ 87.060611][ T308] usb 5-1: USB disconnect, device number 10 [ 87.123021][ T1922] process 'syz.3.325' launched './file0' with NULL argv: empty string added [ 87.835203][ T1942] netlink: 8 bytes leftover after parsing attributes in process `syz.4.334'. [ 87.866265][ T1946] device pim6reg1 entered promiscuous mode [ 87.968782][ T1953] netlink: 8 bytes leftover after parsing attributes in process `syz.4.338'. [ 88.250106][ T1969] netlink: 'syz.0.344': attribute type 31 has an invalid length. [ 89.447343][ T743] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 89.632842][ T1986] netlink: 'syz.4.350': attribute type 4 has an invalid length. [ 89.640359][ T1986] netlink: 17 bytes leftover after parsing attributes in process `syz.4.350'. [ 89.727444][ T743] usb 1-1: too many configurations: 58, using maximum allowed: 8 [ 89.857454][ T743] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 89.864954][ T743] usb 1-1: can't read configurations, error -61 [ 90.017386][ T743] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 90.088550][ T2014] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 90.157380][ T332] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 90.297434][ T743] usb 1-1: too many configurations: 58, using maximum allowed: 8 [ 90.417366][ T743] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 90.424759][ T743] usb 1-1: can't read configurations, error -61 [ 90.430940][ T743] usb usb1-port1: attempt power cycle [ 90.567398][ T332] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 90.707042][ T24] kauditd_printk_skb: 13 callbacks suppressed [ 90.707056][ T24] audit: type=1400 audit(2000000052.920:721): avc: denied { mounton } for pid=2020 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 90.767978][ T2020] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.774827][ T2020] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.782019][ T332] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 90.791188][ T332] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.799126][ T332] usb 4-1: Product: syz [ 90.799761][ T2020] device bridge_slave_0 entered promiscuous mode [ 90.803178][ T332] usb 4-1: Manufacturer: syz [ 90.813878][ T332] usb 4-1: SerialNumber: syz [ 90.819823][ T2020] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.826792][ T2020] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.835284][ T2020] device bridge_slave_1 entered promiscuous mode [ 90.837356][ T743] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 90.857902][ T332] cdc_ncm 4-1:1.0: skipping garbage [ 90.895399][ T2020] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.902274][ T2020] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.909393][ T2020] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.916138][ T2020] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.945408][ T20] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.953400][ T20] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.961194][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 90.968786][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 90.997269][ T739] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 91.005351][ T739] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.012228][ T739] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.019408][ T743] usb 1-1: too many configurations: 58, using maximum allowed: 8 [ 91.027435][ T744] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 91.035404][ T739] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 91.043650][ T739] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.050525][ T739] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.058105][ T739] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 91.069171][ T739] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 91.087397][ T332] cdc_ncm 4-1:1.0: bind() failure [ 91.088473][ T741] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 91.097715][ T332] cdc_ncm 4-1:1.1: bind() failure [ 91.106351][ T2020] device veth0_vlan entered promiscuous mode [ 91.114025][ T738] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 91.114609][ T332] usb 4-1: USB disconnect, device number 12 [ 91.132436][ T738] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 91.139829][ T743] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 91.147186][ T743] usb 1-1: can't read configurations, error -61 [ 91.155903][ T24] audit: type=1400 audit(2000000053.370:722): avc: denied { append } for pid=2027 comm="syz.3.358" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 91.159307][ T738] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 91.194825][ T2020] device veth1_macvtap entered promiscuous mode [ 91.202085][ T741] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 91.218104][ T738] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 91.226572][ T738] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 91.307531][ T743] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 91.397500][ T744] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 91.427863][ T744] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 91.436716][ T744] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.447498][ T743] usb 1-1: too many configurations: 58, using maximum allowed: 8 [ 91.508082][ T744] aiptek 5-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 91.554769][ T2029] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 91.570283][ T2029] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 91.578671][ T743] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 91.586216][ T743] usb 1-1: can't read configurations, error -61 [ 91.593584][ T743] usb usb1-port1: unable to enumerate USB device [ 91.601765][ T2029] F2FS-fs (loop3): Found nat_bits in checkpoint [ 91.647986][ T9] device bridge_slave_1 left promiscuous mode [ 91.654076][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.661708][ T2029] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 91.661819][ T9] device bridge_slave_0 left promiscuous mode [ 91.674666][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.677322][ T2029] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 91.694979][ T9] device veth1_macvtap left promiscuous mode [ 91.704966][ T9] device veth0_vlan left promiscuous mode [ 91.837376][ T332] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 91.959154][ T2052] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.966004][ T2052] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.976194][ T2052] device bridge_slave_0 entered promiscuous mode [ 91.983335][ T2052] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.990735][ T2052] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.998040][ T2052] device bridge_slave_1 entered promiscuous mode [ 92.018975][ T2049] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 92.047771][ T2049] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038 (0x7fffffff) [ 92.051376][ T2052] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.064449][ T2052] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.071631][ T2052] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.078502][ T2052] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.105749][ T744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 92.116612][ T744] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.133119][ T744] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.175222][ T2052] device veth0_vlan entered promiscuous mode [ 92.188253][ T2052] device veth1_macvtap entered promiscuous mode [ 92.227235][ T743] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 92.237154][ T743] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 92.246380][ T743] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 92.255613][ T743] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 92.264463][ T743] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 92.308180][ T332] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.360397][ T332] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 92.403896][ T332] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 92.445277][ T332] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.509080][ T332] usb 2-1: config 0 descriptor?? [ 92.523718][ T743] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 92.531196][ T743] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 92.539348][ T743] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 92.547423][ T743] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.554270][ T743] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.561545][ T743] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 92.569928][ T743] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.576776][ T743] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.584031][ T743] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 92.592044][ T743] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 92.821711][ T2078] device pim6reg1 entered promiscuous mode [ 92.921955][ T110] Bluetooth: hci0: Frame reassembly failed (-84) [ 93.011511][ T332] hid (null): bogus close delimiter [ 93.137842][ T9] device bridge_slave_1 left promiscuous mode [ 93.143852][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.151601][ T9] device bridge_slave_0 left promiscuous mode [ 93.157774][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.165491][ T9] device veth1_macvtap left promiscuous mode [ 93.171633][ T9] device veth0_vlan left promiscuous mode [ 93.217386][ T332] usb 2-1: string descriptor 0 read error: -22 [ 93.477427][ T332] uclogic 0003:256C:006D.0014: interface is invalid, ignoring [ 93.678639][ T743] usb 2-1: USB disconnect, device number 13 [ 93.769067][ T744] usb 5-1: USB disconnect, device number 11 [ 93.797466][ T332] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 93.870379][ T2089] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 94.077360][ T332] usb 3-1: Using ep0 maxpacket: 32 [ 94.177359][ T743] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 94.277578][ T24] audit: type=1326 audit(2000000056.500:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2106 comm="syz.1.372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0a0ae8299 code=0x7ffc0000 [ 94.301142][ T24] audit: type=1326 audit(2000000056.500:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2106 comm="syz.1.372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0a0ae8299 code=0x7ffc0000 [ 94.324409][ T332] usb 3-1: config 1 interface 0 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 94.334661][ T24] audit: type=1326 audit(2000000056.500:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2106 comm="syz.1.372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=187 compat=0 ip=0x7fb0a0ae8299 code=0x7ffc0000 [ 94.358649][ T332] usb 3-1: config 1 interface 0 has no altsetting 0 [ 94.365258][ T24] audit: type=1326 audit(2000000056.500:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2106 comm="syz.1.372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0a0ae8299 code=0x7ffc0000 [ 94.388478][ T24] audit: type=1326 audit(2000000056.500:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2106 comm="syz.1.372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fb0a0ae8299 code=0x7ffc0000 [ 94.411578][ T24] audit: type=1326 audit(2000000056.500:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2106 comm="syz.1.372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0a0ae8299 code=0x7ffc0000 [ 94.435018][ T24] audit: type=1326 audit(2000000056.500:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2106 comm="syz.1.372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0a0ae8299 code=0x7ffc0000 [ 94.458899][ T24] audit: type=1326 audit(2000000056.520:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2106 comm="syz.1.372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb0a0ae8299 code=0x7ffc0000 [ 94.557377][ T743] usb 4-1: config 1 has an invalid descriptor of length 80, skipping remainder of the config [ 94.567382][ T332] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 94.567403][ T332] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.576380][ T743] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 94.594361][ T332] usb 3-1: Product: 넘ꬮ쮌Ěᄔ郥솬뉟넔딺甼ⅎ戈翵ᛋ銚硶뛈쐉䶬뒁괭燴ℨُ鄓脂칑탩탗ꕯ뫐⨜⣗빘싩냄鑋ꚃ⵽䃯ꪭ˳챱㍶낔菜꧐煅炝灾匮 [ 94.613459][ T332] usb 3-1: Manufacturer: ఉ [ 94.618072][ T332] usb 3-1: SerialNumber: syz [ 94.647397][ T2087] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 94.669542][ T743] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 94.678573][ T743] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 94.686413][ T743] usb 4-1: SerialNumber: syz [ 94.827421][ T2117] SELinux: Context system_u:object_r:gpg_agent_exec_t:s0 is not valid (left unmapped). [ 94.977482][ T2095] udc-core: couldn't find an available UDC or it's busy [ 94.977486][ T2094] udc-core: couldn't find an available UDC or it's busy [ 94.977507][ T2094] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 94.984245][ T2095] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 95.007348][ T53] Bluetooth: hci0: command 0x1003 tx timeout [ 95.013241][ T40] Bluetooth: hci0: sending frame failed (-49) [ 95.057999][ T743] usb 4-1: 0:2 : does not exist [ 95.064236][ T743] usb 4-1: USB disconnect, device number 13 [ 95.118579][ T2087] Unknown ioctl 44609 [ 95.122633][ T2087] Unknown ioctl -1072933430 [ 95.147447][ T744] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 95.197446][ T332] cdc_ether: probe of 3-1:1.0 failed with error -71 [ 95.205519][ T332] usb 3-1: USB disconnect, device number 12 [ 95.510803][ T2127] kernel profiling enabled (shift: 0) [ 95.527389][ T744] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 95.538263][ T744] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.549285][ T744] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 95.559006][ T744] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 95.575013][ T744] usb 5-1: New USB device found, idVendor=044f, idProduct=b653, bcdDevice= 0.00 [ 95.584150][ T744] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.595197][ T744] usb 5-1: config 0 descriptor?? [ 95.605429][ T2126] device wg2 entered promiscuous mode [ 95.647748][ T2129] exfat: Unknown parameter '@' [ 95.826660][ T2137] device pim6reg1 entered promiscuous mode [ 95.894942][ T2137] FAT-fs (loop2): IO charset asciirodir not found [ 96.300782][ T2148] netlink: 8 bytes leftover after parsing attributes in process `syz.4.374'. [ 96.378297][ T744] thrustmaster 0003:044F:B653.0015: unknown main item tag 0x0 [ 96.385617][ T744] thrustmaster 0003:044F:B653.0015: item fetching failed at offset 4/7 [ 96.401435][ T744] thrustmaster 0003:044F:B653.0015: parse failed [ 96.408142][ T744] thrustmaster: probe of 0003:044F:B653.0015 failed with error -22 [ 96.877386][ T53] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 96.977396][ T20] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 97.067413][ T25] Bluetooth: hci0: command 0x1001 tx timeout [ 97.073388][ T40] Bluetooth: hci0: sending frame failed (-49) [ 97.217431][ T20] usb 4-1: Using ep0 maxpacket: 16 [ 97.225603][ T24] kauditd_printk_skb: 8 callbacks suppressed [ 97.225618][ T24] audit: type=1326 audit(2000000059.440:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2164 comm="syz.2.385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac56b92299 code=0x7ffc0000 [ 97.254979][ T24] audit: type=1326 audit(2000000059.440:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2164 comm="syz.2.385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac56b92299 code=0x7ffc0000 [ 97.278106][ T24] audit: type=1326 audit(2000000059.440:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2164 comm="syz.2.385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7fac56b92299 code=0x7ffc0000 [ 97.301300][ T24] audit: type=1326 audit(2000000059.440:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2164 comm="syz.2.385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac56b92299 code=0x7ffc0000 [ 97.324529][ T53] usb 2-1: New USB device found, idVendor=1235, idProduct=000e, bcdDevice=f0.ee [ 97.324544][ T53] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.325352][ T53] usb 2-1: config 0 descriptor?? [ 97.341507][ T24] audit: type=1326 audit(2000000059.440:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2164 comm="syz.2.385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fac56b92299 code=0x7ffc0000 [ 97.369583][ T24] audit: type=1326 audit(2000000059.440:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2164 comm="syz.2.385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac56b92299 code=0x7ffc0000 [ 97.393243][ T24] audit: type=1326 audit(2000000059.440:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2164 comm="syz.2.385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fac56b92299 code=0x7ffc0000 [ 97.417345][ T53] snd-usb-audio: probe of 2-1:0.0 failed with error -2 [ 97.420695][ T24] audit: type=1326 audit(2000000059.440:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2164 comm="syz.2.385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac56b92299 code=0x7ffc0000 [ 97.424100][ T20] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 97.447508][ T24] audit: type=1326 audit(2000000059.440:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2164 comm="syz.2.385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fac56b92299 code=0x7ffc0000 [ 97.464689][ T20] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 97.480564][ T24] audit: type=1326 audit(2000000059.440:748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2164 comm="syz.2.385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac56b92299 code=0x7ffc0000 [ 97.489271][ T20] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 97.521236][ T20] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.531789][ T20] usb 4-1: config 0 descriptor?? [ 97.792314][ T742] usb 4-1: USB disconnect, device number 14 [ 98.094069][ T2170] incfs: Backing dir is not set, filesystem can't be mounted. [ 98.101542][ T2170] incfs: mount failed -2 [ 98.115855][ T20] usb 5-1: USB disconnect, device number 12 [ 98.194763][ T2170] EXT4-fs (loop2): Unrecognized mount option "subj_type=" or missing value [ 98.580619][ T2194] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 98.592855][ T2194] fs-verity: sha512 using implementation "sha512-avx2" [ 98.604452][ T2194] fs-verity (loop4, inode 13): Error -27 writing Merkle tree block 8709239245 [ 98.613269][ T2194] fs-verity (loop4, inode 13): Error -27 building Merkle tree [ 98.637381][ T744] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 98.877340][ T744] usb 4-1: Using ep0 maxpacket: 8 [ 98.997382][ T744] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.008135][ T744] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 99.017662][ T744] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 99.027160][ T744] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 99.148870][ T25] Bluetooth: hci0: command 0x1009 tx timeout [ 99.157454][ T20] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 99.187469][ T744] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 99.196662][ T744] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.204775][ T744] usb 4-1: Product: syz [ 99.209021][ T744] usb 4-1: Manufacturer: syz [ 99.213458][ T744] usb 4-1: SerialNumber: syz [ 99.501431][ T2162] usb 2-1: USB disconnect, device number 14 [ 99.547493][ T25] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 99.668094][ T2232] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 99.767416][ T20] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 99.776321][ T20] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.784214][ T20] usb 3-1: Product: syz [ 99.788537][ T20] usb 3-1: Manufacturer: syz [ 99.792986][ T20] usb 3-1: SerialNumber: syz [ 99.907520][ T25] usb 5-1: config 0 interface 0 has no altsetting 0 [ 99.920314][ T25] usb 5-1: New USB device found, idVendor=0582, idProduct=00c4, bcdDevice=ac.5f [ 99.977706][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.015044][ T25] usb 5-1: config 0 descriptor?? [ 100.058234][ T25] usb 5-1: selecting invalid altsetting 0 [ 100.260135][ T742] usb 5-1: USB disconnect, device number 13 [ 100.877025][ T2244] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 100.894525][ T2244] fs-verity (loop4, inode 13): Error -27 writing Merkle tree block 8709239245 [ 100.903740][ T2244] fs-verity (loop4, inode 13): Error -27 building Merkle tree [ 101.807405][ T744] cdc_ncm 4-1:1.0: bind() failure [ 101.830337][ T744] cdc_ncm: probe of 4-1:1.1 failed with error -71 [ 101.837385][ T738] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 101.857429][ T744] cdc_mbim: probe of 4-1:1.1 failed with error -71 [ 101.866565][ T744] usb 4-1: USB disconnect, device number 15 [ 101.889693][ T25] usb 3-1: USB disconnect, device number 13 [ 102.081668][ T2272] netlink: 84 bytes leftover after parsing attributes in process `syz.4.412'. [ 102.093343][ T2263] F2FS-fs (loop2): Unrecognized mount option "nobarrimr" or missing value [ 102.127413][ T738] usb 2-1: too many configurations: 65, using maximum allowed: 8 [ 102.227427][ T744] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 102.541609][ T2263] 9pnet: Insufficient options for proto=fd [ 102.643146][ T24] kauditd_printk_skb: 18 callbacks suppressed [ 102.643161][ T24] audit: type=1400 audit(2000000064.860:767): avc: denied { read } for pid=2278 comm="syz.2.413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 102.694591][ T2280] netlink: 224 bytes leftover after parsing attributes in process `syz.2.413'. [ 102.694603][ T24] audit: type=1400 audit(2000000064.910:768): avc: denied { nlmsg_read } for pid=2278 comm="syz.2.413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 102.791441][ T2279] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable,,errors=continue [ 102.896312][ T24] audit: type=1400 audit(2000000065.000:769): avc: denied { setopt } for pid=2284 comm="syz.4.414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 102.915850][ T744] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.926672][ T744] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.936929][ T744] usb 4-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 102.946717][ T744] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.965705][ T744] usb 4-1: config 0 descriptor?? [ 103.079654][ T2287] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.086506][ T2287] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.093999][ T2287] device bridge_slave_0 entered promiscuous mode [ 103.100376][ T738] usb 2-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 103.110022][ T2287] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.116934][ T738] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.125509][ T2287] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.133129][ T2287] device bridge_slave_1 entered promiscuous mode [ 103.185292][ T2287] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.192163][ T2287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.199263][ T2287] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.206038][ T2287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.232004][ T742] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 103.241806][ T742] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.250570][ T742] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.274876][ T742] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 103.283043][ T742] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.289915][ T742] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.297362][ T742] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 103.305413][ T742] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.312261][ T742] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.327835][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 103.335639][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 103.350090][ T2287] device veth0_vlan entered promiscuous mode [ 103.350670][ T744] logitech-hidpp-device 0003:046D:C086.0016: hidraw0: USB HID v0.00 Device [HID 046d:c086] on usb-dummy_hcd.3-1/input0 [ 103.359194][ T24] audit: type=1400 audit(2000000065.460:770): avc: denied { unlink } for pid=75 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 103.392931][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 103.401131][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 103.408621][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 103.415902][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 103.429722][ T2287] device veth1_macvtap entered promiscuous mode [ 103.437924][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 103.452381][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 103.461763][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 103.489289][ T24] audit: type=1400 audit(2000000065.590:771): avc: denied { accept } for pid=2299 comm="syz.0.415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 103.528488][ T2302] netlink: 4 bytes leftover after parsing attributes in process `syz.0.417'. [ 103.549057][ T2260] SELinux: security_context_str_to_sid(u) failed for (dev incremental-fs, type incremental-fs) errno=-22 [ 103.564446][ T324] usb 4-1: USB disconnect, device number 16 [ 103.667383][ T738] uvcvideo: Found UVC 0.00 device (046d:08c1) [ 103.674271][ T738] uvcvideo: No valid video chain found. [ 103.707386][ T744] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 103.868513][ T2254] udc-core: couldn't find an available UDC or it's busy [ 103.875306][ T2254] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 103.883658][ T25] usb 2-1: USB disconnect, device number 15 [ 104.096157][ T24] audit: type=1326 audit(2000000066.190:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2310 comm="syz.3.420" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6cd387c299 code=0x0 [ 104.127848][ T744] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 104.138918][ T744] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 104.150711][ T744] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 104.163448][ T744] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 104.172269][ T744] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.180854][ T744] usb 3-1: config 0 descriptor?? [ 104.197421][ T2298] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 104.250744][ T2316] EXT4-fs (loop3): Mount option "nouser_xattr" will be removed by 3.5 [ 104.250744][ T2316] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 104.250744][ T2316] [ 104.279425][ T2316] EXT4-fs error (device loop3) in ext4_do_update_inode:5275: error 27 [ 104.287742][ T2316] EXT4-fs (loop3): Remounting filesystem read-only [ 104.294130][ T2316] EXT4-fs error (device loop3): ext4_dirty_inode:6079: inode #3: comm syz.3.421: mark_inode_dirty error [ 104.305619][ T2316] EXT4-fs error (device loop3) in ext4_do_update_inode:5275: error 27 [ 104.313813][ T2316] EXT4-fs error (device loop3): __ext4_ext_dirty:182: inode #3: comm syz.3.421: mark_inode_dirty error [ 104.325107][ T2316] Quota error (device loop3): write_blk: dquota write failed [ 104.332358][ T2316] Quota error (device loop3): qtree_write_dquot: Error -27 occurred while creating quota [ 104.342007][ T2316] EXT4-fs error (device loop3): ext4_acquire_dquot:6219: comm syz.3.421: Failed to acquire dquot type 0 [ 104.353210][ T2316] EXT4-fs (loop3): 1 truncate cleaned up [ 104.358675][ T2316] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,nouser_xattr, [ 104.368921][ T2316] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038 (0x7fffffff) [ 104.650735][ T24] audit: type=1326 audit(2000000066.750:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2335 comm="syz.4.426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa453a20299 code=0x7ffc0000 [ 104.658463][ T744] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0 [ 104.674979][ T24] audit: type=1326 audit(2000000066.750:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2335 comm="syz.4.426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7fa453a20299 code=0x7ffc0000 [ 104.693601][ T744] plantronics 0003:047F:FFFF.0017: No inputs registered, leaving [ 104.714898][ T744] plantronics 0003:047F:FFFF.0017: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 104.768390][ T2339] EXT4-fs (loop4): Project quota feature not enabled. Cannot enable project quota enforcement. [ 104.817441][ T738] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 105.328242][ T2346] EXT4-fs (loop1): error: journal path ./file1 is not a block device [ 105.347370][ T738] usb 4-1: device descriptor read/64, error -71 [ 105.472977][ T2346] EXT4-fs (loop1): mounted filesystem without journal. Opts: discard,bsdgroups,resuid=0x0000000000000000,noblock_validity,minixdf,errors=remount-ro,journal_ioprio=0x0000000000000006,data_err=abort, [ 105.515949][ T2353] EXT4-fs error (device loop1): ext4_xattr_ibody_list:748: inode #2: comm syz.1.428: corrupted in-inode xattr [ 105.527649][ T2353] EXT4-fs (loop1): Remounting filesystem read-only [ 105.534016][ T2353] EXT4-fs error (device loop1): ext4_xattr_ibody_list:748: inode #2: comm syz.1.428: corrupted in-inode xattr [ 105.541766][ T2351] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.553381][ T2353] EXT4-fs error (device loop1): ext4_xattr_ibody_list:748: inode #2: comm syz.1.428: corrupted in-inode xattr [ 105.554018][ T2351] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.565665][ T2353] EXT4-fs error (device loop1): ext4_xattr_ibody_list:748: inode #2: comm syz.1.428: corrupted in-inode xattr [ 105.572532][ T2351] device bridge_slave_0 entered promiscuous mode [ 105.618771][ T2351] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.625756][ T2351] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.633599][ T2351] device bridge_slave_1 entered promiscuous mode [ 105.723799][ T2351] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.730694][ T2351] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.737778][ T2351] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.744535][ T2351] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.773903][ T2162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 105.781327][ T2162] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.788690][ T2162] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.799815][ T744] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 105.807901][ T744] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.814723][ T744] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.821973][ T738] usb 4-1: device descriptor read/64, error -71 [ 105.851900][ T2351] device veth0_vlan entered promiscuous mode [ 105.865735][ T2351] device veth1_macvtap entered promiscuous mode [ 105.956455][ T743] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 105.965769][ T743] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 105.974899][ T743] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 105.984626][ T743] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 105.992685][ T743] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 106.000432][ T743] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 106.008028][ T743] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 106.016244][ T743] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 106.024589][ T743] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.031451][ T743] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.039051][ T740] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 106.046868][ T743] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 106.055081][ T743] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 106.117880][ T738] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 106.198077][ T2385] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 106.210150][ T2385] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 106.221011][ T2385] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842e12c, mo2=0002] [ 106.229635][ T2385] EXT4-fs (loop0): orphan cleanup on readonly fs [ 106.236346][ T2385] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.436: bg 0: block 361: padding at end of block bitmap is not set [ 106.250953][ T2385] EXT4-fs (loop0): Remounting filesystem read-only [ 106.257906][ T2385] EXT4-fs error (device loop0) in ext4_mb_clear_bb:5648: Corrupt filesystem [ 106.274195][ T2385] EXT4-fs error (device loop0): ext4_free_branches:1026: inode #11: comm syz.0.436: invalid indirect mapped block 2185560079 (level 1) [ 106.288367][ T2385] EXT4-fs (loop0): 1 truncate cleaned up [ 106.293868][ T2385] EXT4-fs (loop0): mounted filesystem without journal. Opts: noload,dioread_nolock,noblock_validity,errors=remount-ro,nolazytime [ 106.308202][ T9] device bridge_slave_1 left promiscuous mode [ 106.315022][ T2385] EXT4-fs warning (device loop0): dx_probe:859: inode #2: comm syz.0.436: dx entry: limit 0 != root limit 125 [ 106.326888][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.334588][ T9] device bridge_slave_0 left promiscuous mode [ 106.340695][ T2385] EXT4-fs warning (device loop0): dx_probe:945: inode #2: comm syz.0.436: Corrupt directory, running e2fsck is recommended [ 106.353507][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.362237][ T9] device veth1_macvtap left promiscuous mode [ 106.368114][ T9] device veth0_vlan left promiscuous mode [ 106.371239][ T2385] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 5: comm syz.0.436: path /1/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 106.407332][ T738] usb 4-1: device descriptor read/64, error -71 [ 106.457423][ T740] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 24, changing to 8 [ 106.468710][ T740] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.478420][ T740] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 106.491076][ T740] usb 5-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 106.500414][ T740] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.502306][ T2390] F2FS-fs (loop2): Unrecognized mount option "whint뛗e=user-based" or missing value [ 106.511854][ T740] usb 5-1: config 0 descriptor?? [ 106.668801][ T2390] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 106.809580][ T738] usb 4-1: device descriptor read/64, error -71 [ 106.917391][ T2162] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 107.087940][ T743] usb 3-1: USB disconnect, device number 14 [ 107.093856][ T740] acrux 0003:1A34:0802.0018: hidraw1: USB HID v0.00 Device [HID 1a34:0802] on usb-dummy_hcd.4-1/input0 [ 107.105199][ T738] usb usb4-port1: attempt power cycle [ 107.110838][ T740] acrux 0003:1A34:0802.0018: no inputs found [ 107.117682][ T740] acrux 0003:1A34:0802.0018: Failed to enable force feedback support, error: -19 [ 107.200127][ T324] usb 5-1: USB disconnect, device number 14 [ 107.327447][ T2162] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.338251][ T2162] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 107.447468][ T2162] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 107.456576][ T2162] usb 2-1: New USB device strings: Mfr=0, Product=9, SerialNumber=0 [ 107.464458][ T2162] usb 2-1: Product: syz [ 107.469259][ T2162] usb 2-1: config 0 descriptor?? [ 107.474255][ T2419] F2FS-fs (loop0): Unrecognized mount option "lazytime" or missing value [ 107.517514][ T738] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 107.661517][ T2432] device syzkaller0 entered promiscuous mode [ 107.805146][ T9] Bluetooth: hci0: Frame reassembly failed (-84) [ 107.817345][ T2162] usbhid 2-1:0.0: can't add hid device: -71 [ 107.823146][ T2162] usbhid: probe of 2-1:0.0 failed with error -71 [ 107.841651][ T2162] usb 2-1: USB disconnect, device number 16 [ 107.847956][ T2448] exfat: Bad value for 'uid' [ 108.007305][ T738] usb 4-1: device not accepting address 19, error -71 [ 108.072849][ T24] kauditd_printk_skb: 55 callbacks suppressed [ 108.072864][ T24] audit: type=1400 audit(2000000070.170:830): avc: denied { write } for pid=2457 comm="syz.2.451" name="hwrng" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 108.197436][ T25] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 108.400062][ T2465] syz.2.452[2465] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 108.400169][ T2465] syz.2.452[2465] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 108.558935][ T2468] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 108.689066][ T2473] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 108.698443][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 108.700348][ T2473] EXT4-fs (loop1): mounted filesystem without journal. Opts: stripe=0x0000000000000800,debug_want_extra_isize=0x0000000000000084,data=ordered,max_batch_time=0x0000000000000007,lazytime,jqfmt=vfsold,usrquota,data_err=abort,data_err=ignore,,errors=continue [ 108.709535][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 108.747164][ T25] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 108.768476][ T25] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 108.777456][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.785855][ T25] usb 1-1: config 0 descriptor?? [ 108.807808][ T2452] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 108.866073][ T2484] device syz_tun entered promiscuous mode [ 109.156226][ T2480] device syz_tun left promiscuous mode [ 109.180787][ T24] audit: type=1400 audit(2000000071.280:831): avc: denied { write } for pid=2489 comm="syz.3.459" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 109.288518][ T25] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 109.296020][ T25] plantronics 0003:047F:FFFF.0019: No inputs registered, leaving [ 109.305688][ T25] plantronics 0003:047F:FFFF.0019: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 109.537423][ T24] audit: type=1400 audit(2000000071.560:832): avc: denied { bind } for pid=2487 comm="syz.1.458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 109.716171][ T2505] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 109.725245][ T2505] ext4 filesystem being mounted at /21/file0 supports timestamps until 2038 (0x7fffffff) [ 109.747585][ T2505] EXT4-fs error (device loop2) in ext4_do_update_inode:5275: error 27 [ 109.755849][ T2505] EXT4-fs error (device loop2): ext4_dirty_inode:6079: inode #2: comm syz.2.463: mark_inode_dirty error [ 109.767574][ T2505] EXT4-fs error (device loop2) in ext4_do_update_inode:5275: error 27 [ 109.775784][ T2505] EXT4-fs error (device loop2): __ext4_ext_dirty:182: inode #2: comm syz.2.463: mark_inode_dirty error [ 109.876053][ T738] Bluetooth: hci0: command 0x1003 tx timeout [ 109.890151][ T40] Bluetooth: hci0: sending frame failed (-49) [ 110.327379][ T738] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 110.687389][ T738] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 110.697550][ T738] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 110.777476][ T738] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 110.786453][ T738] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 110.794312][ T738] usb 2-1: SerialNumber: syz [ 111.078085][ T738] usb 2-1: 0:2 : does not exist [ 111.084323][ T738] usb 2-1: USB disconnect, device number 17 [ 111.177393][ T739] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 111.287776][ T370] udevd[370]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 111.467833][ T743] usb 1-1: USB disconnect, device number 28 [ 111.530943][ T24] audit: type=1400 audit(2000000073.630:833): avc: denied { create } for pid=2541 comm="syz.0.470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 111.537457][ T739] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 777 [ 111.561158][ T739] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 111.571227][ T739] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 111.581019][ T739] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.99 [ 111.590072][ T739] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.612230][ T2544] netlink: 8 bytes leftover after parsing attributes in process `syz.1.471'. [ 111.621127][ T2539] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 111.638747][ T739] snd-usb-audio: probe of 3-1:27.0 failed with error -12 [ 111.911331][ T739] usb 3-1: USB disconnect, device number 15 [ 111.948018][ T743] Bluetooth: hci0: command 0x1001 tx timeout [ 111.954074][ T40] Bluetooth: hci0: sending frame failed (-49) [ 112.321548][ T938] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 112.446304][ T24] audit: type=1400 audit(2000000074.540:834): avc: denied { view } for pid=2562 comm="syz.3.476" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 112.717495][ T938] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x91, skipping [ 112.728148][ T938] usb 2-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 112.736918][ T938] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.746121][ T938] usb 2-1: config 0 descriptor?? [ 112.762060][ T2578] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2578 comm=syz.2.481 [ 112.779049][ T2578] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 112.788909][ T938] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 112.798119][ T2578] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 112.817752][ T2578] EXT4-fs (loop2): can't mount with data=, fs mounted w/o journal [ 112.907324][ T743] usb 1-1: new low-speed USB device number 29 using dummy_hcd [ 112.989627][ T2560] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=39 sclass=netlink_route_socket pid=2560 comm=syz.1.475 [ 113.056135][ T738] usb 2-1: USB disconnect, device number 18 [ 113.197406][ T743] usb 1-1: device descriptor read/64, error -71 [ 113.258813][ T2588] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 113.322682][ T24] audit: type=1400 audit(2000000075.420:835): avc: denied { ioctl } for pid=2587 comm="syz.3.483" path="/36/file0/.log" dev="loop3" ino=19 ioctlcmd=0x662b scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 113.620434][ T24] audit: type=1326 audit(2000000075.720:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2596 comm="syz.2.485" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fac56b92299 code=0x0 [ 113.642998][ T743] usb 1-1: device descriptor read/64, error -71 [ 113.917356][ T743] usb 1-1: new low-speed USB device number 30 using dummy_hcd [ 114.027345][ T739] Bluetooth: hci0: command 0x1009 tx timeout [ 114.128135][ T2600] exfat: Unknown parameter '' [ 114.169574][ T24] audit: type=1400 audit(2000000076.270:837): avc: denied { mounton } for pid=2599 comm="syz.3.486" path="/37/file0" dev="ramfs" ino=25078 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 114.187587][ T743] usb 1-1: device descriptor read/64, error -71 [ 114.617329][ T743] usb 1-1: device descriptor read/64, error -71 [ 114.838068][ T743] usb usb1-port1: attempt power cycle [ 115.049850][ T2619] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.056712][ T2619] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.064202][ T2619] device bridge_slave_0 entered promiscuous mode [ 115.073143][ T2619] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.080034][ T2619] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.087190][ T2619] device bridge_slave_1 entered promiscuous mode [ 115.126487][ T2619] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.133457][ T2619] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.140539][ T2619] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.147344][ T2619] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.167769][ T2162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 115.175089][ T2162] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.182387][ T2162] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.193949][ T2162] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 115.202037][ T2162] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.208984][ T2162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.219838][ T2162] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 115.227865][ T2162] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.234701][ T2162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.247479][ T743] usb 1-1: new low-speed USB device number 31 using dummy_hcd [ 115.255726][ T741] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 115.263562][ T741] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 115.276767][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 115.288771][ T741] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 115.296721][ T741] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 115.304661][ T741] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 115.317467][ T2619] device veth0_vlan entered promiscuous mode [ 115.329467][ T2162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 115.338936][ T2619] device veth1_macvtap entered promiscuous mode [ 115.349939][ T2162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 115.367810][ T2162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 115.406980][ T24] audit: type=1400 audit(2000000077.500:838): avc: denied { setattr } for pid=2630 comm="syz.3.492" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 115.507443][ T743] usb 1-1: device descriptor read/8, error -71 [ 115.526781][ T2638] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 115.536751][ T2638] ext4 filesystem being mounted at /2/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 115.696573][ T2643] fuse: Bad value for 'fd' [ 115.703667][ T465] device bridge_slave_1 left promiscuous mode [ 115.712516][ T465] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.783002][ T465] device bridge_slave_0 left promiscuous mode [ 115.786278][ T2645] 9pnet: Insufficient options for proto=fd [ 115.789827][ T465] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.795263][ T743] usb 1-1: device descriptor read/8, error -71 [ 115.808679][ T465] device veth1_macvtap left promiscuous mode [ 115.814578][ T465] device veth0_vlan left promiscuous mode [ 116.108043][ T739] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 116.307437][ T743] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 116.467533][ T739] usb 4-1: config 1 has an invalid descriptor of length 129, skipping remainder of the config [ 116.477839][ T739] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 22 [ 116.517398][ T743] usb 1-1: config index 0 descriptor too short (expected 9417, got 36) [ 116.525832][ T743] usb 1-1: config 20 has too many interfaces: 252, using maximum allowed: 32 [ 116.534733][ T743] usb 1-1: config 20 has 1 interface, different from the descriptor's value: 252 [ 116.543712][ T743] usb 1-1: config 20 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.554660][ T744] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 116.562041][ T743] usb 1-1: config 20 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.571771][ T739] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 116.580648][ T739] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 116.588467][ T743] usb 1-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 116.597336][ T739] usb 4-1: SerialNumber: syz [ 116.601949][ T743] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.647879][ T739] cdc_acm 4-1:1.0: Control and data interfaces are not separated! [ 116.655514][ T739] cdc_acm 4-1:1.0: This needs exactly 3 endpoints [ 116.662533][ T739] cdc_acm: probe of 4-1:1.0 failed with error -22 [ 116.817401][ T744] usb 3-1: Using ep0 maxpacket: 16 [ 116.948479][ T739] usb 4-1: USB disconnect, device number 21 [ 117.097449][ T744] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=d8.08 [ 117.106424][ T744] usb 3-1: New USB device strings: Mfr=40, Product=98, SerialNumber=3 [ 117.114455][ T744] usb 3-1: Product: syz [ 117.118502][ T744] usb 3-1: Manufacturer: syz [ 117.122796][ T744] usb 3-1: SerialNumber: syz [ 117.127976][ T744] usb 3-1: config 0 descriptor?? [ 117.137378][ T743] usbhid 1-1:20.0: can't add hid device: -71 [ 117.143255][ T743] usbhid: probe of 1-1:20.0 failed with error -71 [ 117.150821][ T743] usb 1-1: USB disconnect, device number 32 [ 117.167997][ T744] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 117.175641][ T744] usb 3-1: Detected FT-X [ 117.387513][ T744] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 117.407349][ T744] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 117.427382][ T744] ftdi_sio 3-1:0.0: GPIO initialisation failed: -71 [ 117.434438][ T744] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 117.443477][ T744] usb 3-1: USB disconnect, device number 16 [ 117.450944][ T744] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 117.460466][ T744] ftdi_sio 3-1:0.0: device disconnected [ 117.540458][ T2659] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 117.559435][ T2659] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1047: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 117.574004][ T2659] EXT4-fs (loop3): 1 truncate cleaned up [ 117.579500][ T2659] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 118.287906][ T2672] syz.0.502[2672] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 118.288042][ T2672] syz.0.502[2672] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 119.441975][ T2677] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.460039][ T2677] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.467470][ T2677] device bridge_slave_0 entered promiscuous mode [ 119.475957][ T2677] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.483156][ T2677] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.486869][ T2692] FAT-fs (loop0): Unrecognized mount option "shortname=lo$er" or missing value [ 119.504335][ T2677] device bridge_slave_1 entered promiscuous mode [ 119.549776][ T2677] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.556621][ T2677] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.563760][ T2677] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.570523][ T2677] bridge0: port 1(bridge_slave_0) entered forwarding state [ 119.603609][ T738] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 119.611455][ T738] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.618790][ T738] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.633829][ T738] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 119.644133][ T738] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.651032][ T738] bridge0: port 1(bridge_slave_0) entered forwarding state [ 119.658909][ T738] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 119.666967][ T738] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.673843][ T738] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.691594][ T744] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 119.699497][ T744] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 119.715258][ T738] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 119.729175][ T738] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 119.737186][ T738] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 119.745623][ T738] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 119.753894][ T2711] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 119.754319][ T2677] device veth0_vlan entered promiscuous mode [ 119.768583][ T2711] ext4 filesystem being mounted at /42/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 119.829756][ T2162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 119.917023][ T2677] device veth1_macvtap entered promiscuous mode [ 119.927867][ T2714] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 119.943980][ T2714] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 119.958930][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 119.973597][ T2714] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 119.973770][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 119.980772][ T2714] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 120.012982][ T2714] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,delalloc,jqfmt=vfsv1,init_itable,dioread_nolock,jqfmt=vfsold,nomblk_io_submit,data_err=abort,,errors=continue [ 120.044225][ T2162] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 120.070181][ T2162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 120.085384][ T2711] fuse: Bad value for 'fd' [ 120.093021][ T465] device bridge_slave_1 left promiscuous mode [ 120.099675][ T465] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.110448][ T465] device bridge_slave_0 left promiscuous mode [ 120.116437][ T465] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.124525][ T465] device veth1_macvtap left promiscuous mode [ 120.130462][ T465] device veth0_vlan left promiscuous mode [ 120.419148][ T743] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 120.698660][ T2729] FAT-fs (loop0): Directory bread(block 64) failed [ 120.716534][ T2729] FAT-fs (loop0): Directory bread(block 65) failed [ 120.724331][ T2729] FAT-fs (loop0): Directory bread(block 66) failed [ 120.731860][ T2729] FAT-fs (loop0): Directory bread(block 67) failed [ 120.758808][ T2729] FAT-fs (loop0): Directory bread(block 68) failed [ 120.767548][ T2729] FAT-fs (loop0): Directory bread(block 69) failed [ 120.779820][ T2729] FAT-fs (loop0): Directory bread(block 70) failed [ 120.786220][ T2729] FAT-fs (loop0): Directory bread(block 71) failed [ 120.787444][ T743] usb 3-1: config 1 has an invalid descriptor of length 129, skipping remainder of the config [ 120.792848][ T2729] FAT-fs (loop0): Directory bread(block 72) failed [ 120.802651][ T743] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 22 [ 120.822794][ T2729] FAT-fs (loop0): Directory bread(block 73) failed [ 120.897390][ T743] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 120.914990][ T743] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 120.923766][ T743] usb 3-1: SerialNumber: syz [ 121.071309][ T24] audit: type=1400 audit(2000000083.140:839): avc: denied { bind } for pid=2728 comm="syz.0.512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 121.457019][ T24] audit: type=1400 audit(2000000083.150:840): avc: denied { name_bind } for pid=2728 comm="syz.0.512" src=512 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 121.516202][ T24] audit: type=1400 audit(2000000083.150:841): avc: denied { node_bind } for pid=2728 comm="syz.0.512" src=512 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 121.536760][ T24] audit: type=1400 audit(2000000083.300:842): avc: denied { listen } for pid=2728 comm="syz.0.512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 121.717363][ T2162] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 121.757196][ T743] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 121.764873][ T743] cdc_acm 3-1:1.0: This needs exactly 3 endpoints [ 121.771486][ T743] cdc_acm: probe of 3-1:1.0 failed with error -22 [ 121.778968][ T743] usb 3-1: USB disconnect, device number 17 [ 121.987641][ T24] audit: type=1400 audit(2000000084.080:843): avc: denied { accept } for pid=2754 comm="syz.3.519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 122.167793][ T2162] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.194471][ T2162] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 122.207639][ T2162] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 122.216646][ T2162] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.225808][ T2162] usb 5-1: config 0 descriptor?? [ 122.267219][ T2760] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.274213][ T2760] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.281635][ T2760] device bridge_slave_0 entered promiscuous mode [ 122.288481][ T2760] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.295317][ T2760] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.302579][ T2760] device bridge_slave_1 entered promiscuous mode [ 122.351842][ T2760] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.358735][ T2760] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.365796][ T2760] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.372621][ T2760] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.401415][ T20] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.409000][ T20] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.416586][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 122.424458][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 122.435672][ T938] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 122.443720][ T938] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.450572][ T938] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.465934][ T938] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 122.474032][ T938] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.480910][ T938] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.488421][ T938] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 122.496452][ T938] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 122.512192][ T938] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 122.523602][ T738] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 122.531314][ T744] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 122.539553][ T738] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 122.546774][ T738] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 122.557068][ T2760] device veth0_vlan entered promiscuous mode [ 122.567892][ T738] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 122.576882][ T2760] device veth1_macvtap entered promiscuous mode [ 122.589247][ T938] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 122.599457][ T738] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 122.657774][ T743] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 122.787514][ T744] usb 3-1: Using ep0 maxpacket: 32 [ 122.799276][ T2162] plantronics 0003:047F:FFFF.001A: item fetching failed at offset 5/15 [ 122.807573][ T2779] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 122.815305][ T2779] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 122.823358][ T2779] F2FS-fs (loop1): Unrecognized mount option "" or missing value [ 122.868274][ T9] device bridge_slave_1 left promiscuous mode [ 122.874432][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.882319][ T9] device bridge_slave_0 left promiscuous mode [ 122.886157][ T2162] plantronics 0003:047F:FFFF.001A: parse failed [ 122.888910][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.894934][ T2162] plantronics: probe of 0003:047F:FFFF.001A failed with error -22 [ 122.910935][ T9] device veth1_macvtap left promiscuous mode [ 122.916772][ T9] device veth0_vlan left promiscuous mode [ 122.917434][ T743] usb 1-1: Using ep0 maxpacket: 16 [ 123.199817][ T20] usb 5-1: USB disconnect, device number 15 [ 123.317337][ T2162] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 123.337606][ T743] usb 1-1: config 0 has no interfaces? [ 123.343248][ T743] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 123.352173][ T743] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.361007][ T743] usb 1-1: config 0 descriptor?? [ 123.377444][ T744] usb 3-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 123.386337][ T744] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.394268][ T744] usb 3-1: Product: syz [ 123.399197][ T744] usb 3-1: Manufacturer: syz [ 123.403610][ T744] usb 3-1: SerialNumber: syz [ 123.408901][ T744] usb 3-1: config 0 descriptor?? [ 123.587404][ T2162] usb 2-1: device descriptor read/64, error -71 [ 123.655214][ T24] audit: type=1400 audit(2000000085.750:844): avc: denied { mount } for pid=2776 comm="syz.0.524" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 123.833729][ T2795] EXT4-fs error (device loop4): ext4_find_inline_data_nolock:163: inode #12: comm syz.4.527: inline data xattr refers to an external xattr inode [ 123.852103][ T2795] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.527: couldn't read orphan inode 12 (err -117) [ 123.864216][ T2795] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 124.067661][ T2162] usb 2-1: device descriptor read/64, error -71 [ 124.337323][ T2162] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 124.420771][ T24] audit: type=1400 audit(2000000086.520:845): avc: denied { mount } for pid=2803 comm="syz.2.528" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 124.467598][ T24] audit: type=1400 audit(2000000086.550:846): avc: denied { unmount } for pid=2052 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 124.578110][ T24] audit: type=1400 audit(2000000086.680:847): avc: denied { create } for pid=2809 comm="syz.2.529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 124.607408][ T2162] usb 2-1: device descriptor read/64, error -71 [ 124.656082][ T24] audit: type=1400 audit(2000000086.680:848): avc: denied { write } for pid=2809 comm="syz.2.529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 125.047774][ T2162] usb 2-1: device descriptor read/64, error -71 [ 125.167989][ T2162] usb usb2-port1: attempt power cycle [ 125.404203][ T25] usb 1-1: USB disconnect, device number 33 [ 125.481471][ T2831] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 125.505660][ T2831] EXT4-fs (loop0): 1 truncate cleaned up [ 125.511405][ T2831] EXT4-fs (loop0): mounted filesystem without journal. Opts: resuid=0x0000000000000000,init_itable,stripe=0x0000000000000000,noblock_validity,,errors=continue [ 125.609142][ T2162] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 125.729607][ T2837] EXT4-fs (loop4): 1 orphan inode deleted [ 125.735171][ T2837] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota, [ 125.747421][ T2162] usb 2-1: device descriptor read/8, error -71 [ 125.754552][ T2837] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038 (0x7fffffff) [ 126.041786][ T2844] erofs: Unknown parameter ')|' [ 126.127368][ T2162] usb 2-1: device descriptor read/8, error -71 [ 126.137245][ T2844] EXT4-fs (loop1): Mount option "nouser_xattr" will be removed by 3.5 [ 126.137245][ T2844] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 126.137245][ T2844] [ 126.161887][ T24] kauditd_printk_skb: 2 callbacks suppressed [ 126.162031][ T24] audit: type=1400 audit(2000000088.260:851): avc: denied { map } for pid=2836 comm="syz.4.535" path="pipe:[25733]" dev="pipefs" ino=25733 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 126.189597][ T2844] EXT4-fs (loop1): 1 orphan inode deleted [ 126.190613][ T24] audit: type=1400 audit(2000000088.260:852): avc: denied { execute } for pid=2836 comm="syz.4.535" path="pipe:[25733]" dev="pipefs" ino=25733 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 126.196004][ T2844] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000006,nodiscard,quota,init_itable,stripe=0x0000000000000003,resgid=0x0000000000000000,block_validity,nouser_xattr,usrquota,,errors=continue [ 126.241240][ T2844] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038 (0x7fffffff) [ 126.387321][ T25] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 126.404221][ T24] audit: type=1400 audit(2000000088.500:853): avc: denied { map } for pid=2871 comm="syz.4.542" path="socket:[26884]" dev="sockfs" ino=26884 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 126.428588][ T24] audit: type=1400 audit(2000000088.500:854): avc: denied { read } for pid=2871 comm="syz.4.542" path="socket:[26884]" dev="sockfs" ino=26884 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 126.556871][ T2874] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 126.570075][ T2874] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 126.579075][ T2874] F2FS-fs (loop4): invalid crc value [ 126.584438][ T2874] F2FS-fs (loop4): invalid crc value [ 126.589696][ T2874] F2FS-fs (loop4): Failed to get valid F2FS checkpoint [ 126.637330][ T25] usb 1-1: Using ep0 maxpacket: 8 [ 126.762494][ T2878] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 126.774446][ T2878] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 126.788368][ T2878] F2FS-fs (loop1): invalid crc value [ 126.800759][ T2878] F2FS-fs (loop1): Found nat_bits in checkpoint [ 126.807377][ T25] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 126.816311][ T25] usb 1-1: config 1 has no interface number 1 [ 126.827363][ T744] rtl8150 3-1:0.0: couldn't reset the device [ 126.833326][ T744] rtl8150: probe of 3-1:0.0 failed with error -5 [ 126.840943][ T744] usb 3-1: USB disconnect, device number 18 [ 126.852885][ T25] usb 1-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 126.871295][ T2878] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 126.878231][ T2878] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 126.965986][ T24] audit: type=1400 audit(2000000089.060:855): avc: denied { setopt } for pid=2894 comm="syz.1.547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 127.047414][ T25] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 127.056303][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.064307][ T25] usb 1-1: Product: syz [ 127.068219][ T25] usb 1-1: Manufacturer: syz [ 127.072604][ T25] usb 1-1: SerialNumber: syz [ 127.217323][ T744] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 127.267329][ T938] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 127.442358][ T25] usb 1-1: USB disconnect, device number 34 [ 127.507343][ T938] usb 5-1: Using ep0 maxpacket: 32 [ 127.637398][ T938] usb 5-1: New USB device found, idVendor=cdc9, idProduct=0b7e, bcdDevice=cb.6e [ 127.646304][ T938] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.654922][ T938] usb 5-1: config 0 descriptor?? [ 127.657389][ T744] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.660986][ T370] udevd[370]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 127.670749][ T744] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.695813][ T744] usb 3-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00 [ 127.704694][ T744] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.713195][ T744] usb 3-1: config 0 descriptor?? [ 127.718016][ T938] usb-storage 5-1:0.0: USB Mass Storage device detected [ 127.868587][ T741] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 127.880099][ T2915] EXT4-fs (loop0): 1 truncate cleaned up [ 127.885567][ T2915] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro, [ 127.919563][ T24] audit: type=1400 audit(2000000090.020:856): avc: denied { mount } for pid=2899 comm="syz.4.548" name="/" dev="configfs" ino=1764 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 127.945595][ T938] usb 5-1: USB disconnect, device number 16 [ 127.981484][ T24] audit: type=1400 audit(2000000090.020:857): avc: denied { mounton } for pid=2899 comm="syz.4.548" path="/8/file0" dev="configfs" ino=1764 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 128.005579][ T24] audit: type=1400 audit(2000000090.040:858): avc: denied { read } for pid=2899 comm="syz.4.548" name="/" dev="configfs" ino=1764 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 128.028336][ T24] audit: type=1400 audit(2000000090.040:859): avc: denied { open } for pid=2899 comm="syz.4.548" path="/8/file0" dev="configfs" ino=1764 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 128.270971][ T24] audit: type=1400 audit(2000000090.340:860): avc: denied { bind } for pid=2926 comm="syz.1.554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 128.291352][ T741] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.319605][ T741] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.413550][ T741] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 128.478051][ T741] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.537529][ T741] usb 4-1: config 0 descriptor?? [ 128.558268][ T2934] device pim6reg1 entered promiscuous mode [ 128.597354][ T744] usbhid 3-1:0.0: can't add hid device: -71 [ 128.603149][ T744] usbhid: probe of 3-1:0.0 failed with error -71 [ 128.612817][ T744] usb 3-1: USB disconnect, device number 19 [ 129.043416][ T938] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 129.243191][ T741] hid (null): bogus close delimiter [ 129.327372][ T741] usb 4-1: language id specifier not provided by device, defaulting to English [ 129.327381][ T938] usb 5-1: too many configurations: 38, using maximum allowed: 8 [ 129.447391][ T938] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 129.454804][ T938] usb 5-1: can't read configurations, error -61 [ 129.472237][ T2979] device pim6reg1 entered promiscuous mode [ 129.540132][ T2985] device veth1_macvtap left promiscuous mode [ 129.546081][ T2985] device macsec0 entered promiscuous mode [ 129.554423][ T2985] device veth1_macvtap entered promiscuous mode [ 129.560669][ T744] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 129.561009][ T2985] device macsec0 left promiscuous mode [ 129.607373][ T938] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 129.768474][ T741] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.001B/input/input15 [ 129.781467][ T741] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.001B/input/input16 [ 129.837365][ T25] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 129.897880][ T938] usb 5-1: too many configurations: 38, using maximum allowed: 8 [ 130.029321][ T741] uclogic 0003:256C:006D.001B: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.3-1/input0 [ 130.077383][ T938] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 130.099371][ T938] usb 5-1: can't read configurations, error -61 [ 130.129162][ T938] usb usb5-port1: attempt power cycle [ 130.143856][ T308] usb 4-1: USB disconnect, device number 22 [ 130.207364][ T25] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 130.207373][ T744] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 130.207402][ T744] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 130.337323][ T744] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 130.377428][ T25] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 130.400760][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.439628][ T25] usb 2-1: Product: syz [ 130.458039][ T25] usb 2-1: Manufacturer: syz [ 130.477465][ T25] usb 2-1: SerialNumber: syz [ 130.517356][ T2985] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 130.547339][ T938] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 130.568252][ T744] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 130.577207][ T744] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.584949][ T744] usb 3-1: Product: syz [ 130.588999][ T744] usb 3-1: Manufacturer: syz [ 130.593324][ T744] usb 3-1: SerialNumber: syz [ 130.758244][ T25] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 23 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 130.769034][ T938] usb 5-1: too many configurations: 38, using maximum allowed: 8 [ 130.838753][ T2975] udc-core: couldn't find an available UDC or it's busy [ 130.845580][ T2975] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 130.887389][ T938] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 130.894785][ T938] usb 5-1: can't read configurations, error -61 [ 130.904155][ T2975] netlink: 4 bytes leftover after parsing attributes in process `syz.2.564'. [ 130.914913][ T2975] netlink: 48 bytes leftover after parsing attributes in process `syz.2.564'. [ 130.967376][ T743] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 131.047329][ T938] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 131.177426][ T938] usb 5-1: too many configurations: 38, using maximum allowed: 8 [ 131.229731][ T3022] fuse: Unknown parameter 'JH$k0 [ 131.229731][ T3022] 6+8fhpUN|UR' [ 131.241474][ T3022] device bridge1 entered promiscuous mode [ 131.297382][ T938] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 131.304945][ T938] usb 5-1: can't read configurations, error -61 [ 131.311423][ T938] usb usb5-port1: unable to enumerate USB device [ 131.347376][ T743] usb 1-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b [ 131.363126][ T743] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.384496][ T743] usb 1-1: config 0 descriptor?? [ 131.599091][ T25] usb 2-1: USB disconnect, device number 23 [ 131.609002][ T25] usblp0: removed [ 131.755676][ T3031] erofs: (device loop4): mounted with root inode @ nid 36. [ 131.962543][ T3028] F2FS-fs (loop1): Found nat_bits in checkpoint [ 132.080463][ T3028] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 132.473315][ T3008] udc-core: couldn't find an available UDC or it's busy [ 132.499156][ T2760] handle_bad_sector: 186 callbacks suppressed [ 132.499190][ T2760] attempt to access beyond end of device [ 132.499190][ T2760] loop1: rw=2049, want=45104, limit=40427 [ 132.541931][ T3035] udc-core: couldn't find an available UDC or it's busy [ 132.548911][ T3035] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 132.556253][ T3008] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 132.597528][ T743] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 132.617596][ T743] asix: probe of 1-1:0.0 failed with error -71 [ 132.624352][ T743] usb 1-1: USB disconnect, device number 35 [ 132.637444][ T744] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor [ 132.647166][ T744] usb 3-1: 2:1 : unknown format tag 0x0 is detected. processed as MPEG. [ 132.737347][ T744] usb 3-1: found format II with max.bitrate = 0, frame size=0 [ 133.025383][ T744] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor [ 133.033501][ T744] usb 3-1: 2:1 : unknown format tag 0x0 is detected. processed as MPEG. [ 133.045028][ T744] usb 3-1: found format II with max.bitrate = 0, frame size=0 [ 133.048143][ T3054] FAT-fs (loop2): Unrecognized mount option "00000000000000000000FҁZ\҆I~$u 0b e8 3a 49 8c ff e8 51 1c 22 ff eb 9b e8 2e 49 8c ff e8 45 1c [ 140.322955][ T9] RSP: 0018:ffffc900000970a0 EFLAGS: 00010293 [ 140.329466][ T3270] device bridge_slave_0 entered promiscuous mode [ 140.335604][ T9] [ 140.335615][ T9] RAX: ffffffff81de5fbf RBX: 0000008000000000 RCX: ffff8881002513c0 [ 140.335622][ T9] RDX: 0000000000000000 RSI: 0000008000000000 RDI: 0000000000000000 [ 140.335641][ T9] RBP: ffffc90000097490 R08: ffffffff81de2a33 R09: ffffed102478576d [ 140.339095][ T3270] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.343309][ T9] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000001 [ 140.343317][ T9] R13: ffffc900000977d0 R14: 000000c410000000 R15: ffffc90000097360 [ 140.343337][ T9] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 140.363031][ T3270] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.368824][ T9] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 140.368833][ T9] CR2: 0000000000000002 CR3: 000000011fa2e000 CR4: 00000000003526b0 [ 140.368849][ T9] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 140.375560][ T3270] device bridge_slave_1 entered promiscuous mode [ 140.377158][ T9] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 140.377163][ T9] Call Trace: [ 140.377187][ T9] ? __die_body+0x62/0xb0 [ 140.437901][ T3270] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.438793][ T9] ? die+0x88/0xb0 [ 140.438812][ T9] ? do_trap+0x1a4/0x310 [ 140.445212][ T3270] bridge0: port 2(bridge_slave_1) entered forwarding state [ 140.453019][ T9] ? ext4_writepages+0x3bdf/0x3c00 [ 140.453030][ T9] ? handle_invalid_op+0x95/0xc0 [ 140.453039][ T9] ? ext4_writepages+0x3bdf/0x3c00 [ 140.453052][ T9] ? exc_invalid_op+0x32/0x50 [ 140.453073][ T9] ? asm_exc_invalid_op+0x12/0x20 [ 140.460922][ T3270] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.467002][ T9] ? ext4_writepages+0x653/0x3c00 [ 140.474851][ T3270] bridge0: port 1(bridge_slave_0) entered forwarding state [ 140.477938][ T9] ? ext4_writepages+0x3bdf/0x3c00 [ 140.477958][ T9] ? ext4_writepages+0x3bdf/0x3c00 [ 140.503423][ T2162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 140.503731][ T9] ? __kasan_check_write+0x14/0x20 [ 140.568791][ T9] ? _raw_spin_lock+0xa4/0x1b0 [ 140.573389][ T9] ? _raw_spin_trylock_bh+0x190/0x190 [ 140.578594][ T9] ? pagecache_get_page+0x86c/0x950 [ 140.583625][ T9] ? __kasan_check_write+0x14/0x20 [ 140.588565][ T9] ? __find_get_block+0xfbe/0x1320 [ 140.593517][ T9] ? write_boundary_block+0x150/0x150 [ 140.598734][ T9] ? ext4_readpage+0x230/0x230 [ 140.603320][ T9] ? __getblk_gfp+0x3d/0x7e0 [ 140.607754][ T9] ? bpf_send_signal_common+0x31d/0x420 [ 140.613128][ T9] ? ext4_get_group_desc+0x260/0x2b0 [ 140.618259][ T9] ? __update_load_avg_cfs_rq+0xb1/0x2f0 [ 140.623717][ T9] ? ext4_readpage+0x230/0x230 [ 140.628319][ T9] do_writepages+0x12e/0x270 [ 140.632741][ T9] ? __writepage+0x130/0x130 [ 140.637168][ T9] ? __kasan_check_write+0x14/0x20 [ 140.642119][ T9] ? _raw_spin_lock+0xa4/0x1b0 [ 140.646712][ T9] ? __kasan_check_write+0x14/0x20 [ 140.651659][ T9] ? _raw_spin_lock+0xa4/0x1b0 [ 140.656258][ T9] __writeback_single_inode+0xd7/0xac0 [ 140.661552][ T9] writeback_sb_inodes+0x99c/0x16b0 [ 140.666595][ T9] ? _raw_spin_lock+0xa4/0x1b0 [ 140.671191][ T9] ? queue_io+0x520/0x520 [ 140.675350][ T9] ? writeback_sb_inodes+0x16b0/0x16b0 [ 140.680645][ T9] ? queue_io+0x3d3/0x520 [ 140.684812][ T9] wb_writeback+0x404/0xc60 [ 140.689155][ T9] ? wb_io_lists_depopulated+0x180/0x180 [ 140.694619][ T9] ? set_worker_desc+0x158/0x1c0 [ 140.699480][ T9] ? update_load_avg+0x541/0x1690 [ 140.704357][ T9] ? __kasan_check_write+0x14/0x20 [ 140.709292][ T9] wb_workfn+0x3d9/0x1110 [ 140.713463][ T9] ? inode_wait_for_writeback+0x280/0x280 [ 140.719012][ T9] ? _raw_spin_unlock_irq+0x4e/0x70 [ 140.724133][ T9] ? finish_task_switch+0x130/0x5a0 [ 140.729164][ T9] ? __switch_to_asm+0x34/0x60 [ 140.733765][ T9] ? __kasan_check_read+0x11/0x20 [ 140.738621][ T9] ? read_word_at_a_time+0x12/0x20 [ 140.743570][ T9] ? strscpy+0x9c/0x260 [ 140.747566][ T9] process_one_work+0x6dc/0xbd0 [ 140.752253][ T9] worker_thread+0xaea/0x1510 [ 140.756853][ T9] kthread+0x34b/0x3d0 [ 140.760757][ T9] ? worker_clr_flags+0x180/0x180 [ 140.765787][ T9] ? kthread_blkcg+0xd0/0xd0 [ 140.770214][ T9] ret_from_fork+0x1f/0x30 [ 140.774462][ T9] Modules linked in: [ 140.779302][ T2162] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.788024][ T9] ---[ end trace b44608a831907795 ]--- [ 140.793312][ T9] RIP: 0010:ext4_writepages+0x3bdf/0x3c00 [ 140.799128][ T9] Code: 4b 8c ff 31 ff 89 de e8 ef 4b 8c ff 45 84 f6 75 27 e8 55 49 8c ff 49 be 00 00 00 00 00 fc ff df e9 0e f7 ff ff e8 41 49 8c ff <0f> 0b e8 3a 49 8c ff e8 51 1c 22 ff eb 9b e8 2e 49 8c ff e8 45 1c [ 140.809354][ T2162] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.847367][ T9] RSP: 0018:ffffc900000970a0 EFLAGS: 00010293 [ 140.857714][ T9] RAX: ffffffff81de5fbf RBX: 0000008000000000 RCX: ffff8881002513c0 [ 140.865509][ T9] RDX: 0000000000000000 RSI: 0000008000000000 RDI: 0000000000000000 [ 140.878875][ T9] RBP: ffffc90000097490 R08: ffffffff81de2a33 R09: ffffed102478576d [ 140.889493][ T9] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000001 [ 140.897385][ T9] R13: ffffc900000977d0 R14: 000000c410000000 R15: ffffc90000097360 [ 140.905106][ T9] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 140.914290][ T9] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 140.920840][ T9] CR2: 00005648c8dba238 CR3: 000000010ca55000 CR4: 00000000003526a0 [ 140.928980][ T9] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 140.936768][ T9] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 140.944675][ T9] Kernel panic - not syncing: Fatal exception [ 140.950754][ T9] Kernel Offset: disabled [ 140.954882][ T9] Rebooting in 86400 seconds..