last executing test programs: 1m6.795406446s ago: executing program 4 (id=38): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000640)='./bus\x00', 0x0, &(0x7f0000000080)=ANY=[], 0x1, 0x1268, &(0x7f0000002500)="$eJzs3U9rI2UcB/Bf2vTv2qbquroL4oNeFCFue/DkpcguiAWl2gUVhFmbamialCYUIuLWkyfBlyHq0ZsgvoFevHgWBJFePO5BHGmT1aZJu7ptU5HP5zIPzzzfeWYyzMCE+TF7L32+sb7WLK9lrRgpFKK4ORbFuylSjMRodOzEc7d+/OnJN956+9XFpaUbyyndXHxz/sWU0uxT373z0ddPf9+6dOub2W8nYnfu3b3fFn7evbJ7de+Pr6LaTNVmqjdaKUu3G41WdrtWSavV5no5pddrlaxZSdV6s7LVs36t1tjcbKesvjozvblVaTZTVm+n9Uo7tQqptdVO2ftZtZ7K5XKamQ5OY+XLu3meR+T5WIxHnuf5VEzHpXgoZmI2SjEXD8cj8WhcjsfiSjweT8TVg1EXvd8AAAAAAAAAAAAAAAAAAADw/3Kf+v+C+n8AAAAAAAAAAAAAAAAAAAA4f0fr/4sRvv8PAAAAAAAAAAAAAAAAAAAAQ3af7/8fqf9/Xv0/AAAAAAAAAAAAAAAAAAAAnIfJzmI5pcmIjU+3V7ZXOstO/+JaVKMWlbgepfg9Dqr/Ozrtm68s3bieDszFCxt3uvk72yujvfn5sVLMFQbm5zv51JufiOnD+YUoxeXB8y8MzE/Gs8/s5z/p5MtRih/ei0bUYjWi0D36g/zH8ym9/NrSVG/+2v64Y42e82kBAACAs1ROf+l/ft/pDhq4vrOq+3yeuiMLJ/w/cOT5vBjXihd11NzTbH+4ntVqla0HbIwfv53x0225r1GIiCwO98xO/7K8P/mZTfGgjdGhTjp28phTnNMo/gd+zDNo/PrFoZ7JGO7sI91LIqvt3z//WSp28vxcd2zgxThxUur4e0ZhCPclhuPvk37RewIAAAAAAAAAAMC/MfDtv6mI6Hsf8IO+nnuvh/fG+7d8/OyfDeEIAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/mQHjgUAAAAAhPlbp9GxAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwFcBAAD///ME0UM=") (async) open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) (async) statfs(&(0x7f0000000180)='./file0/file0/..\x00', &(0x7f00000001c0)=""/103) (async) r0 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) openat$cgroup(r0, &(0x7f0000000300)='syz0\x00', 0x200002, 0x0) (async) recvmsg(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x42) listen(0xffffffffffffffff, 0x5) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e8500000001"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r5}, &(0x7f0000000380), &(0x7f00000003c0)=r6}, 0x20) (async) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) r7 = socket$inet(0x2, 0xa, 0x0) (async) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (async) r9 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r9}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) splice(r7, 0x0, r8, 0x0, 0x7ffff000, 0x2) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r10}, 0x10) 1m6.574869557s ago: executing program 4 (id=39): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000080), 0x1, 0x527, &(0x7f0000000f80)="$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") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002a40)={0x18, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MON={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4c080}, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000060000000500000000100000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = socket$inet(0x2, 0x2, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'syztnl2\x00', 0x0, 0x2f, 0x3b, 0x4, 0x7, 0x78, @private0, @local, 0x7, 0x20, 0xd1200, 0x54bdac2a}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC=r0, @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r7, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) sendmsg$inet(r5, &(0x7f0000000600)={&(0x7f0000000000), 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb58", 0x6}], 0x2, &(0x7f0000000680)=[@ip_tos_u8={{0x11, 0x0, 0x7}}], 0x18}, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000001c0)=ANY=[@ANYBLOB="0002000000000000f7000000000000000a00000000000000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB="000000000100"/28, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r0, @ANYBLOB='\x00'/28, @ANYRES32=r3, @ANYBLOB="00000000000400"/28, @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00\x00@\x00'/28, @ANYRES32=r0, @ANYBLOB="000000000500"/28, @ANYRES32=r0, @ANYBLOB="000000000300"/28, @ANYRES32=r0, @ANYBLOB="000000000300"/28, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\n3\x00'/28]) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000080), 0x1, 0x527, &(0x7f0000000f80)="$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") (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002a40)={0x18, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MON={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4c080}, 0x0) (async) socket$can_raw(0x1d, 0x3, 0x1) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000060000000500000000100000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) socket$inet(0x2, 0x2, 0x1) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'syztnl2\x00', 0x0, 0x2f, 0x3b, 0x4, 0x7, 0x78, @private0, @local, 0x7, 0x20, 0xd1200, 0x54bdac2a}}) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC=r0, @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r7, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) (async) sendmsg$inet(r5, &(0x7f0000000600)={&(0x7f0000000000), 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb58", 0x6}], 0x2, &(0x7f0000000680)=[@ip_tos_u8={{0x11, 0x0, 0x7}}], 0x18}, 0x0) (async) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) (async) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000001c0)=ANY=[@ANYBLOB="0002000000000000f7000000000000000a00000000000000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB="000000000100"/28, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r0, @ANYBLOB='\x00'/28, @ANYRES32=r3, @ANYBLOB="00000000000400"/28, @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00\x00@\x00'/28, @ANYRES32=r0, @ANYBLOB="000000000500"/28, @ANYRES32=r0, @ANYBLOB="000000000300"/28, @ANYRES32=r0, @ANYBLOB="000000000300"/28, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\n3\x00'/28]) (async) 1m6.387104698s ago: executing program 4 (id=44): r0 = syz_usb_connect$uac1(0x0, 0xdc, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYBLOB="5f35373b6fb028b4"], 0x0) syz_usb_control_io(r0, &(0x7f0000001bc0)={0x2c, 0x0, &(0x7f00000003c0)={0x0, 0x3, 0xf3, @string={0xf3, 0x3, "bbc9f5fa43708f31395d970aa6fa53a438130cfe1bbd7f02e19ec45d4afa7777d4ab1413a84a63f7469028e69cdf9fb3b5cee4926bbb67b3914c6c26424fd19ef992e3c149a8a75a1c365c0b8cb5402e428321abca6335e43b28b74ffae7513ae440a7a01eab23b37f767652c47b1fa8359146a6a4e085e717f19082804226979a1ae3fc5258fbe3fbc7d2eda4a51ffe7bc8e66bac67922f0905760e796cc07e27a2374a842ce5be6a51dbbc0a4b01078880d9e887ce7b6a9b013b76c33389ec425ab896cc58803043e5253b20f1d67f27fd795bc505ee6586b4b663a74607415b35337a5d06f1dd56291a7681f39786c8"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x18, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@bridge_delneigh={0x1c, 0x1e, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x52}}, 0x1c}}, 0x0) unshare(0x22020600) r2 = socket$inet6(0xa, 0x2, 0x0) fsync(r2) syz_usb_control_io$uac1(r0, &(0x7f0000000300)={0x14, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1809}}, 0x0, 0x0, 0x0}, 0x0) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e2793b10d10501200006010203010902120008000000000904"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000000240)=ANY=[@ANYBLOB="200607000000b5a2"], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r3, &(0x7f0000000080)={0x14, &(0x7f0000000140)={0x20, 0x31, 0xb3, {0xb3, 0x2, "9caf44463146f4cb6718576ede82f3233b1fe6072476dc164b56170a902a44abfb92c3f8b3afdce974ac6b7db600476f207e68b7be2b9a3b92a680a6f316bbb6ba6dda06433828276bd3522e55bd251d76096c1944edd98510c5b9b22e3833a9a166407b654dc1dd18333ed015b1699957be19f5c4d48c513f378966ab86fa48e3c94e319755f84d840751d5b6f06c1a7e93690faa9242a20781bc313eb716edb6204408db4eb56f1075c7aeca74a7ea59"}}, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000380)={0x1c, &(0x7f00000000c0)={0x0, 0x16, 0x34, "a0930cfa4843cce2bcd9a587e53199bc98592ad33d71a4a85533866109df405162d9fa2f8d30a7d7b414fe1ceb29ba3fc3db4e98"}, &(0x7f0000000200)={0x0, 0xa, 0x1}, &(0x7f0000000280)={0x0, 0x8, 0x1}}) syz_usb_connect$uac1(0x0, 0xdc, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYBLOB="5f35373b6fb028b4"], 0x0) (async) syz_usb_control_io(r0, &(0x7f0000001bc0)={0x2c, 0x0, &(0x7f00000003c0)={0x0, 0x3, 0xf3, @string={0xf3, 0x3, "bbc9f5fa43708f31395d970aa6fa53a438130cfe1bbd7f02e19ec45d4afa7777d4ab1413a84a63f7469028e69cdf9fb3b5cee4926bbb67b3914c6c26424fd19ef992e3c149a8a75a1c365c0b8cb5402e428321abca6335e43b28b74ffae7513ae440a7a01eab23b37f767652c47b1fa8359146a6a4e085e717f19082804226979a1ae3fc5258fbe3fbc7d2eda4a51ffe7bc8e66bac67922f0905760e796cc07e27a2374a842ce5be6a51dbbc0a4b01078880d9e887ce7b6a9b013b76c33389ec425ab896cc58803043e5253b20f1d67f27fd795bc505ee6586b4b663a74607415b35337a5d06f1dd56291a7681f39786c8"}}, 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_control_io(r0, &(0x7f00000002c0)={0x18, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@bridge_delneigh={0x1c, 0x1e, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x52}}, 0x1c}}, 0x0) (async) unshare(0x22020600) (async) socket$inet6(0xa, 0x2, 0x0) (async) fsync(r2) (async) syz_usb_control_io$uac1(r0, &(0x7f0000000300)={0x14, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1809}}, 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e2793b10d10501200006010203010902120008000000000904"], 0x0) (async) syz_usb_control_io(r3, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r3, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000000240)=ANY=[@ANYBLOB="200607000000b5a2"], 0x0, 0x0}) (async) syz_usb_control_io$cdc_ecm(r3, &(0x7f0000000080)={0x14, &(0x7f0000000140)={0x20, 0x31, 0xb3, {0xb3, 0x2, "9caf44463146f4cb6718576ede82f3233b1fe6072476dc164b56170a902a44abfb92c3f8b3afdce974ac6b7db600476f207e68b7be2b9a3b92a680a6f316bbb6ba6dda06433828276bd3522e55bd251d76096c1944edd98510c5b9b22e3833a9a166407b654dc1dd18333ed015b1699957be19f5c4d48c513f378966ab86fa48e3c94e319755f84d840751d5b6f06c1a7e93690faa9242a20781bc313eb716edb6204408db4eb56f1075c7aeca74a7ea59"}}, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000380)={0x1c, &(0x7f00000000c0)={0x0, 0x16, 0x34, "a0930cfa4843cce2bcd9a587e53199bc98592ad33d71a4a85533866109df405162d9fa2f8d30a7d7b414fe1ceb29ba3fc3db4e98"}, &(0x7f0000000200)={0x0, 0xa, 0x1}, &(0x7f0000000280)={0x0, 0x8, 0x1}}) (async) 1m3.607540374s ago: executing program 4 (id=60): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000780)={0x2, 0x3, 0x0, 0x3, 0xf, 0x0, 0x700, 0x0, [@sadb_key={0x2, 0x9, 0x8, 0x0, "e9"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xd}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_key={0x2, 0x8, 0x8, 0x0, 'o'}, @sadb_x_nat_t_type={0x1, 0x14, 0x9}]}, 0x78}, 0x1, 0x7}, 0x0) r1 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000380)={[{@test_dummy_encryption}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x84}}, {@stripe={'stripe', 0x3d, 0x7}}, {@commit={'commit', 0x3d, 0x5}}, {@orlov}, {@barrier_val={'barrier', 0x3d, 0x5}}, {@min_batch_time={'min_batch_time', 0x3d, 0x5}}, {@data_err_abort}]}, 0xd, 0x5d8, &(0x7f0000000c00)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x0, 0x0, &(0x7f0000000000)) chdir(&(0x7f00000003c0)='./bus\x00') sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x880) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r2, 0x0, 0xbb) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000001d40)={&(0x7f00000000c0)=@bridge_getlink={0x3c, 0x12, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x31164}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'gre0\x00'}, @IFLA_NET_NS_PID={0x8, 0x13, r3}]}, 0x3c}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) r5 = openat$incfs(r4, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000001c0)='kmem_cache_free\x00'}, 0x10) ioctl$TIOCL_GETKMSGREDIRECT(r5, 0x40046721, &(0x7f00000001c0)) syz_open_dev$usbmon(&(0x7f0000000000), 0x1f1, 0x90000) 1m3.362126715s ago: executing program 4 (id=61): munmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000) (async) munmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000) openat$kvm(0x0, 0x0, 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000f, 0x11, r0, 0x0) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (async) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, 0xffffffffffffffff) ustat(0x1, &(0x7f0000000480)) 1m3.280469465s ago: executing program 4 (id=62): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0x28800d, 0x0, 0x0, 0x0, 0x0) (async) r2 = inotify_init() (async) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) inotify_add_watch(r2, &(0x7f00000000c0)='./file0\x00', 0x20000002) (async) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) pipe2(0x0, 0x0) (async) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000380)={[{@test_dummy_encryption}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x84}}, {@stripe={'stripe', 0x3d, 0x7}}, {@commit={'commit', 0x3d, 0x5}}, {@orlov}, {@barrier_val={'barrier', 0x3d, 0x5}}, {@max_batch_time}, {@data_err_abort}]}, 0xd, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) (async) r5 = getpid() (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r7, &(0x7f0000000bc0)=[{{&(0x7f0000000240)=@abs={0x7f367b0d5fa958ad, 0x0, 0x4e23}, 0x6e, &(0x7f0000000980)=[{&(0x7f0000000600)="1f132132f89bf1e1a4f4c4fd851dc0d865140cbd2e3fc204046aca0da4a9be1a709773330da19cdd2e329b8a6c84d5a357ef6c34b7f039c6bdac923322f95454be26b7961a589e625c777472c3d19f565662a8fa21b73015b2b4dd9f28d59394696ca63aa1f9b5bc490f17c9843ba2fbc2f12335deab77e3b880a86c23fa41db79fee85145645074b310274ff5b370b153a8cf45ec8ec1c7ee395af5968f19f0a324d7d63a5a561d297cbaef5f3eefa0dff4546e257020a09c46560bc9d8b2cd66c7ca1658ab50eb6a974a672a29430744", 0xd1}, {&(0x7f0000000700)="68e241057c7dae684c495f5ae8db19580fda4b1464983df1ec18674e59f96915d06291be388261fb8d51d1fbe22d3c7d07fed01e44133f341261d1ee1d1f3eeacd76cd29817851faa39983bd9939487612498a4c3a25976ad4845e7dd01ecd722fdbfe046b92b991bee641ecda3f67f9bf92c3ea5616c24a7b699955da3bf6a284f8e5308c6f192fbad25a48d304032717dfef271420841f547e950b87", 0x9d}, {&(0x7f0000000840)="1531c40f43565fe50608e0067c325002e15329b1de9fb3e0cfff27ee9c79385715352fc12d29f5194debe29d0bffc5fbe8381c5096f7e2031216c28bab83cc0768b2f7d3c247dce0ef78ddb0398a5c", 0x4f}, {&(0x7f0000000000)="05d572", 0x3}, {&(0x7f0000000300)="3a3ba3b462003b0feacfa7d507c09de8464a33e4bbd6081840d96bd84dfc22a6f552", 0x22}, {&(0x7f00000008c0)="b60a1fb25c7c427c9a0bc49a8ff36b5dcbbf2750f3b34f2adaa147f1e6a81def49d77ccda72988b345286f557118833a404969f3393d2b9c96e56f3266ff8a2d3d3ca0c3433ee8f6a1dda1cd8fca28844fa99daa3507aca85a84571301c4d1f93df8252dc042fdca68908088223bb968fc6dee3e76da8a24506c9f4d7baabf5ddfc13166d9e4f392df2d29c9139906a2fb017df0b10ef342dfe0cb69dbab37f5e96607", 0xa3}, {&(0x7f0000002100)="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", 0x1000}], 0x7, &(0x7f0000001300)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r3, r2, r7, r3, r2]}}, @cred={{0x1c, 0x1, 0x2, {r5}}}, @cred={{0x1c, 0x1, 0x2, {r5}}}, @cred={{0x1c, 0x1, 0x2, {r5, 0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {r5}}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r7, r0, r2, r1]}}], 0xd0, 0x40}}], 0x1, 0x20000000) (async) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x18) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b07, &(0x7f0000000440)={'wlan1\x00', @random="8dffffffebff"}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r9}, 0x10) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_selinux(r10, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x0) 1m3.245129246s ago: executing program 32 (id=62): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0x28800d, 0x0, 0x0, 0x0, 0x0) (async) r2 = inotify_init() (async) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) inotify_add_watch(r2, &(0x7f00000000c0)='./file0\x00', 0x20000002) (async) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) pipe2(0x0, 0x0) (async) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000380)={[{@test_dummy_encryption}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x84}}, {@stripe={'stripe', 0x3d, 0x7}}, {@commit={'commit', 0x3d, 0x5}}, {@orlov}, {@barrier_val={'barrier', 0x3d, 0x5}}, {@max_batch_time}, {@data_err_abort}]}, 0xd, 0x5d8, &(0x7f0000000c00)="$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") (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) (async) r5 = getpid() (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r7, &(0x7f0000000bc0)=[{{&(0x7f0000000240)=@abs={0x7f367b0d5fa958ad, 0x0, 0x4e23}, 0x6e, &(0x7f0000000980)=[{&(0x7f0000000600)="1f132132f89bf1e1a4f4c4fd851dc0d865140cbd2e3fc204046aca0da4a9be1a709773330da19cdd2e329b8a6c84d5a357ef6c34b7f039c6bdac923322f95454be26b7961a589e625c777472c3d19f565662a8fa21b73015b2b4dd9f28d59394696ca63aa1f9b5bc490f17c9843ba2fbc2f12335deab77e3b880a86c23fa41db79fee85145645074b310274ff5b370b153a8cf45ec8ec1c7ee395af5968f19f0a324d7d63a5a561d297cbaef5f3eefa0dff4546e257020a09c46560bc9d8b2cd66c7ca1658ab50eb6a974a672a29430744", 0xd1}, {&(0x7f0000000700)="68e241057c7dae684c495f5ae8db19580fda4b1464983df1ec18674e59f96915d06291be388261fb8d51d1fbe22d3c7d07fed01e44133f341261d1ee1d1f3eeacd76cd29817851faa39983bd9939487612498a4c3a25976ad4845e7dd01ecd722fdbfe046b92b991bee641ecda3f67f9bf92c3ea5616c24a7b699955da3bf6a284f8e5308c6f192fbad25a48d304032717dfef271420841f547e950b87", 0x9d}, {&(0x7f0000000840)="1531c40f43565fe50608e0067c325002e15329b1de9fb3e0cfff27ee9c79385715352fc12d29f5194debe29d0bffc5fbe8381c5096f7e2031216c28bab83cc0768b2f7d3c247dce0ef78ddb0398a5c", 0x4f}, {&(0x7f0000000000)="05d572", 0x3}, {&(0x7f0000000300)="3a3ba3b462003b0feacfa7d507c09de8464a33e4bbd6081840d96bd84dfc22a6f552", 0x22}, {&(0x7f00000008c0)="b60a1fb25c7c427c9a0bc49a8ff36b5dcbbf2750f3b34f2adaa147f1e6a81def49d77ccda72988b345286f557118833a404969f3393d2b9c96e56f3266ff8a2d3d3ca0c3433ee8f6a1dda1cd8fca28844fa99daa3507aca85a84571301c4d1f93df8252dc042fdca68908088223bb968fc6dee3e76da8a24506c9f4d7baabf5ddfc13166d9e4f392df2d29c9139906a2fb017df0b10ef342dfe0cb69dbab37f5e96607", 0xa3}, {&(0x7f0000002100)="e75e70d2d6d92354e614540f53b0b4988b38a19cb9eaed4238ffb3fae7b2184dcf0473960ad8a5aa2cf751be6e011d6e40e3da11611b9274a0a25dc03a6aebe7be561b5f8b1d7b171db24b5181733b435ae62f10929bb6fb868c8a1cf4a702a05a12a7f2b8350f438f567a8c457a0979a6be368a6b03892fd25fb23ae59771944f9580e66b20a4b30ee4b95f30281d929320fdad529999795c5d3edeb24b343fbaa84bfe31b992c1e86646954b7a0f57a2813392cab934de2322ee647a003cf4402f0a5512a8e5fda6ff36bb0023fdde87110a9ca3e25a1059d9a6e63b650b9f5c03764a1038d03944f9a655d37af1251e19294a02ae27916a24706d3059efb67985fb709fb2abc885765de3269ab50670fe21bb4d3f73782e210bf7934b95e424fb52d1578b4536163c03db12c7a14062ef8993eb896eb132fa67a0d49fc62db29742bf1769fb98f0d3f25fa28e949cc55d09fc2e8a456ab496eba266b6a3fc7083dc485e7e7d5307865285042dc3523651f4aa04cef89aee122382f5f771dd3ced9a1779e4e13a695dbc70ade99c470643fca321a7c458160f1fc849ffcff39a54bee5f39dcc7d343365561e8bb70c8db7cbf2f484a5c4649e716648a8f751d33d8df82d59aca03befe215b56db38c1e1bd05247f85002ecefd7b388a84c8692cc397af215fade4b99220fda74a3373cf2e9e57d77385b678135461916b8da1bbff7cb1791785015b9ce0e1866619c5ed30a5283a0767dc2c26f8211e6ddb3d1d98ea243707b2de12a8ffa35092620087467f11ed3360493f5fd3442ecab95d2421db25cfe2274542dfce49185adb96f91780e29f314328eda3afa51bda87bfb362fe0d652df2b7e09a63e531b4f2f34122095334bc1b653bb8039381c7b9256aae8ff83aa7924913fd191831366b2c016fffc320c5882dcc61df7db99d05a9e22a288c09dbee20b6160a13c854229d9c9645081a9995309bf4f5afd212c111f34aa832703c7341adf2bb6e051219e100ac7f8fcb7887f00ee29c8ac270103219f023b72ecab5fe6a64f07dba63ae0a78f798c138c8e573c8977d45b0eb35edf87f11b9e0f3820c1ae1680c1296e5b5b4f52c1844c709c73031d480e555ba1cb68291cfb699e1d7df87d6fa50fc564c4db7632849e81d5068811ca6041a982247ebf7829ee0c7afe394bd1af3311caaffc8c1f60848f8c99c49b2d3e803c273f6a0217c0d4bc9aa9ebbd609407c3197a1cf17c2049cb0d4d8a00398ae9ff732a87e378207881d7f357969300da5cde81df3dd388f15cab1ff9e0a5314940194902d617652ea54855ce25bf866f3596b8a81ed11306077279f704c758e082b3adb512c2cffefda1da5b455388c173636314dfae51209eb6473d6120ae522e5e8cab2141dcddf1f2dcbc5fd7b1496f08461e4223e23745c16e066e9906ab99d53465756d29e00ac28aa1e0965f121b4116ab79e69f44d49cbf32145e28b97b4298e948801a31ecac8b5618d3b6c2e179bd9cba70144b6b8b0d54ab0617f2965731fe5569477f7ccc6e2898eb3e0378e5750d643def614973fc338065e8680d2d8aa6c8a4b0d9d5a54567d3b3939f1c9bfb49bd85b736527e5c186ece4772bb94f309be35ed9b77ac38dc843543b10907e89178014b567c15cdf18cd97fac6f2f209f929ad2aa66b0d91bde712bdf03b0aac111ff0b7a61342390c9777d2feb31cde788f423f231867b1f3557e2a70fb7c6ce4a450d91b5515c5a957d700353ca0d4b136359ca4530f619cfe5331404ef748ba7544d345fceb9fab33a7082a40d2ae9a603c0a1195023cfa8ab1e49d4739e99b6f616c3341381d9fcdeb78c243a76c02ea1e96778ef7bebe9f5b04a578b4c5fe14437a3b1ec9ab41ec5fab8c50319bfd82d5dc0ab52315c5c87ac52d33de7ab8a69f5d5d7b856e6fcf3f9f262586d6728024d27820a2112b4428e56c3697ddc674cf0217548a862b0e109ee41e8042465b8ee5654d076da8713de0cd68070693b43d36e707e3549a6e477ed342e86a809a1f058d17b4f19c23b0c91761e2cacbef31f6136ff7574481cf26806421bacd8d1d4c7140a20e0f05d7e4048664dbe64a83eefff7f107c59c040e11b393eaa466bbd8f68a8a8f3ee9557cde1d5a94b1e9c54b6766429d6be002f742d4ef24aa20c82f27db59ddfba39aaa6185cb549baba09c71492472797008ba0fd8229b15b85f514640e6fc62d859f2bef874f566f7fc2871dc02ddd0b9748dfa9e3366ea0be2128958ea8f98bcf0f6ac00c215be2bb65a2821a599ff56332462707a25d18b44aff98615a367d5c0615337803e74dc84721c3423d3671ddfc09985c52c55d817edccd009ec13667a4ea68fe84bf957a045ae1612422e09f067464087ec6d283c34f3adfa6cd35e5e8efd3a93beae5f90339cccdaecf7eaba41abe00c4f4506fccf4067b674828dcbc0f03018cd8329008264570238eaf38cf39d53c6f0cf45144b69c385c94b29c7149e904cbb6ab91c23aa4369a34cc6d41c6fc02743ce5f046bb664f7f0748eadf3224d810034aad86e426a0456656376995d7e5433d3edeac3b4e90b17d7e79a89a57c35074f66916ab65c16905449d88f3f5fcd262b9c84a07b714d9fcc23fac4cce1d6fddc3eef281f74e885c34fb51b377ebf5c85ea35c7ef3a5e9014a13ac07bac6a158532f777e131a3b561535e82b50aa383189372fc0103f2d262c22285494e5bc340a942430c868b5bd87311f6aed81be5cecf23aafac12be81a98df1d9b14cb30930c8589a0890c6a3c02fd84a47401064ed32208644ede063120c0168833cdd2c414190413dafde182a31cbfdf70726f19021e75cf6bc4baba18d44a6ba46a5ab50c7c0b534d1810379298aa5776fadd5589cea93b5f34f5d6fd9feb8e528ae322f05527dbadbc3c8243b52e6753f85e9d41e759aef478136c4d578b2fc25a4a8e67ccdacba5e0c0a3ebe5bc3d4956d97e0b4f97f540db4579a9b6b6ac99f47f1ff0e7ec06ce1eb98fdf1b3d99bc06812e946e06f36942d4296dea16a102d35af82686b70103bcc8001d6b4aa89e377fdde4943dc8c83e068dbb560d8b29f00a7b14bbe4d803d1c38be7401d138ca545df22bbdbabe7162418d969be0760fdda1185194bdca06b2b3e4dcd419e154a9ccbd7ac8f1fb62c74400c7440cc24b285e2c3454e3c8822451410f159ac4d6023aadc01d5e42dc71157fce1b33fc7bc6bb6b957cc8be1bde2b4aa802a9af380d782e1317fa94da9eb6e861185d4fb35992ce5cd6b66164c3cd0814f3bdb8aa1dffa2fbf959f92223eba4e04a55e70117b87add45ba0b12d5316e930f4eee6b3198fa2a326ae417f3bea7af0845c89f4c1929a2ef9db6ee4181c4dc62676c3edb2de246c9e50febe83382dc24d7b2acc3b2c0702a07107cfa847aff74794f546b738e2fa3b901c2b84afaaa700b6dda586e66f5f4a89df588240664a855d48502b96ffb5376625a3adf786ac1cfefa8a8174be4adb40946cd963ddf4a13cb6bd83c4475d08762b307fdc791e38edf82acfdfb35f8dc0b36b9dd79e9f294b6fa7cb2955cf46423f5a951736964aa80800a0cced2f0e5c6f899f8469f3809b5bbd8b3ada64528db7c9c88b93c81b3f563413d4087ad208b5b7e5ee6c1ab609d601747c5eee21aa441c8d6da0a7c77f995d65e40323d3709d83a4e1c6fde415c0ef3a8d9613a3b7756bd77bfb33ac9949316815fbadf663b661a6ce7315580b57575a4b51336a491054bb15ac39448901b710b3234c384c1d3b40d6fd4c39a17379598d1350b194f91b3be59f2b1709ef4fc51ef5cdb5e170dcdf609566d44a1db7138225f7548b5524d23c071cf72f41c7701c7eebcbf574df237d12b445d8f58ba925d2c54e44836896374df495a40011b5aa4afe6e1c22f3409d37b3b6c72567f8b473e12855fec9f9592d9c1a533b6a12efe54aa75a2402e67c5753a9c75d4ddfd388c8dae572939278fe27fae19935cf10542630f2e8d2f81648d5562089f2fffb70978a982539f7f262acd6eabc6be447b19d2aa9dc89309e6f0a5404efcd0841e5d9180137bedb91c38a3dbbd23c95f3d552af8575682081fc15de901a10c449477b57441d91d03ce008ea4330e0843008bc9970955d353c54e804cf2ae1a13072c8ebca6e5be58eeb92aaa9c2eef0f7616f0162c24c3215268409fdbd08cf67c22c6bf750acb74a6119b36e4edf59bda11fd2b37f7d311ff22d93cb0d04a5a4791d4ccab40817514f603f609530a7a028734656143bb0463e95899aeac74a98a4869e7a37b7a2fb34387a946cac5e6803ce7af7be810a6fa3b2e962b3670112a51ca0cd0dd1fa6d287442a441deb28e2e54096f524bf7706d9f54b1af1cfa066d5cac6c3368af713471b34e4b59c2a35b0e583e03c30186818be8468287854a0707ef59f461907724a9a25c158099f570e435878ad7434595542599695d67706827e0575f4de3b44a075524c43df4ccb429740cfc03803c47a602c054b56cd32e2a66dd9d22bad5d41c67ae2c90c5b4644649795e033dbc7ccfa87b98fd7c971b051676cea9b82d58d32d533f251ecb05b8901258f77b3a6fb9150ab5992aaae11b68e3082a92ed4946a6a5722db7d8e0b15959f5f4ef04ad7901a2d9eecdbb00da183f7140114f71559f68dabfd630665a681f47172838621882885b802e745f5859d01c80bd118caad23b3a3373800e6112259c315f1d216e4d482ffb0485537ca89cd7f8834564f34364c354c74504cb68df5f73f5e724fb48d8b6440e3694736446f7fd2c2f22abef23b0a5677a84ae62036cdaddf7cade610fa9f56412be4bd9a81b2d40316d8045becf286dbba6992ad92a57643c89a027df27c43965544eb1a946f3f5e2d92e80cf3c38fd1e7058d43366cdb119d02821476b24e2ab9d7c57812829a4f146ba8b7aa83ef151e9ba9a9bdeef3ba43327734773f37e66365d0cadb439345b335a0c55fb39d933678a9c0e404d66e7d55e15d187235e2aa1dc7bc7a5eb83ca974822c491dae62f2a023cda7ba36547d37b435c719a27986cc251c8cbfe5189522576c167a54ddf94320bc94d4da0bf4f2065ef3fdfd7fc9d4b2bd63da3829e7d50ced288d7ab2d0899c2bcc8883eb1daee8e3e2c0dfd6bcba335a087027f3a1faf8fb58504ac02050f6b12d8026ccfd21c0e928ab1b80c87356b6fe55747f66c1d82b2ee5c838276c7bb2bf4029dadd0c241e4dbb93edb1843055e31d9c898be4cee7328fa678473bc8cb56c588a777ec1750346b182f4265fb2c8a4f734e5b3828436d7f52a539fd2f3e2686b7f4a556c43e4d81faf5979da01e9d9b2a385ab885c477568c0229faa6a08a134657bf1461a510b581d075dde582920fb133b043cfc32725ce7b260eb45d9cad3a8008a3fb3bbc20e62012440790b8423c0be1af0de827180553d50fce4bac03738c14277303c6a92502efb0d2513e3d03af9f5f5c5e80ce7b8c8adf69521db1ca820178f03a8c14692ac0710c943fce9d7a0176a5768ee024e53c633b27cb7bf4ad142a237eb45b3890b6a5edf87a38513e97ab44748c60e31b67da96b07a134746964a955a2bde2e1d6ff1f548314774802a114371549a2fe4396712264c237b0fd83f725a4b72730fc07e7f384b29877ad135df525b8be2c07a288631fa372ff0fc424822e3c3c17d8af697b0f1fa8acdcda9b2b030d45db55f294a33c413dff2d25d367740bbede24715153b0fca7273eaa8205469a08768d503201cee6e214f363357467675", 0x1000}], 0x7, &(0x7f0000001300)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r3, r2, r7, r3, r2]}}, @cred={{0x1c, 0x1, 0x2, {r5}}}, @cred={{0x1c, 0x1, 0x2, {r5}}}, @cred={{0x1c, 0x1, 0x2, {r5, 0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {r5}}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r7, r0, r2, r1]}}], 0xd0, 0x40}}], 0x1, 0x20000000) (async) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x18) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b07, &(0x7f0000000440)={'wlan1\x00', @random="8dffffffebff"}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r9}, 0x10) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_selinux(r10, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x0) 3.243483752s ago: executing program 3 (id=1324): r0 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) fstat(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$erofs(&(0x7f0000000200), &(0x7f0000000140)='./file0\x00', 0x400, &(0x7f0000000500)=ANY=[@ANYRES32=r2, @ANYRES8=0x0, @ANYRES32, @ANYRES16=r0, @ANYBLOB='\x00\v', @ANYRESOCT=r1, @ANYBLOB="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"/531, @ANYRESOCT=r0], 0x2, 0x1cb, &(0x7f0000000300)="$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") syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x105340, 0x1a) 3.201679712s ago: executing program 5 (id=1325): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@RTM_NEWNSID={0x2c, 0x58, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NETNSA_PID={0x8, 0x2, 0xffffffffffffffff}, @NETNSA_PID={0x8}, @NETNSA_FD={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4001}, 0x8000) 2.998771703s ago: executing program 1 (id=1327): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH") chmod(&(0x7f0000000180)='./file1\x00', 0x1a1) 2.998584703s ago: executing program 3 (id=1328): socket$netlink(0x10, 0x3, 0x15) r0 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x2100) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_getattr(r1, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$nl_route(r0, 0x0, 0x0) 2.998422793s ago: executing program 5 (id=1329): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x94) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000500000008040000cd00000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000340)='qdisc_reset\x00', r3}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r1}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) 2.866721304s ago: executing program 5 (id=1330): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x3}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, 0x0) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) 2.791016854s ago: executing program 5 (id=1331): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@usrquota}, {@grpjquota}, {@nodelalloc}]}, 0x1, 0x4bc, &(0x7f0000000a40)="$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") open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x21081e, &(0x7f0000000680), 0x1, 0x4fe, &(0x7f0000000080)="$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") bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000400)={0xffffffffffffffff, 0x0, 0x20000000}, 0x20) r1 = open(&(0x7f00000001c0)='.\x00', 0x0, 0x0) getdents(r1, 0x0, 0x0) 2.523389116s ago: executing program 0 (id=1333): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x200000000000009b, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)}], 0x1, 0x0, 0x0, 0x2044}, 0x60) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x40047451, &(0x7f0000000180)) 2.523213296s ago: executing program 3 (id=1334): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file1\x00', 0x101880a, &(0x7f0000005a80)=ANY=[], 0x1, 0x550b, &(0x7f0000005bc0)="$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") r0 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x22) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x1, 0x7800, 0x0, 0x3) ioctl$F2FS_IOC_SEC_TRIM_FILE(r0, 0x4018f514, &(0x7f0000000100)={0x1004, 0x800010, 0x2}) 2.413050186s ago: executing program 1 (id=1336): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x1d, &(0x7f00000001c0), 0x4) 2.372265426s ago: executing program 5 (id=1337): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8901, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110c23003f) write$cgroup_type(r2, &(0x7f0000000080), 0x9) 2.291142667s ago: executing program 0 (id=1339): creat(0x0, 0x6) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x100, 0x0) mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) unshare(0x60480) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpid() syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x84a3, 0x204100) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) fsmount(0xffffffffffffffff, 0x0, 0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioprio_get$uid(0x3, 0x0) 2.027035249s ago: executing program 1 (id=1341): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./bus\x00', 0x1000840, &(0x7f0000000280)={[{@shortname_winnt}, {@shortname_mixed}, {@fat=@codepage={'codepage', 0x3d, '850'}}, {@shortname_win95}, {@utf8no}, {@uni_xlate}, {@utf8no}, {@shortname_winnt}, {@shortname_mixed}, {@iocharset={'iocharset', 0x3d, 'macroman'}}, {@utf8}, {@uni_xlate}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'iso8859-2'}}, {@fat=@tz_utc}]}, 0x3, 0x350, &(0x7f0000000580)="$eJzs3U9oW3UcAPBv9tKkHcz2IAwF4elN0LJWPOipZXQwzEUl+OcgBtepNHXQYLA7NKsX8Sh41JM3D3rwsLMIinjz4NUJMhUPutvA4ZMkL81Lk3adkM3i53MI331/329+v7c8mtfX5tdXV2LjwkxcvHHjeszOlqK8cnYlbpZiIZIYuBLjKhNyAMDxcDPL4s+s74gtpSkvCQCYst77/+unCpl3vz6sPvPuDwDHXv79/9xhNbMHDVyaypIAgCkbu///yMhwZfRH/eXCbwUAAMfV8y+9/MxqLeK5NJ2N2HyvXW/X4+nh+OrFeDOasR5nYj5uRfQvFLoPpd7jufO1tTNpmnbil4Wodzva9YjNTrvev1JYTXr91ViK+VjI+/OrjSzLknNf1NaW0p6IuNLpzR+bpXZ9Jk7m8/94MtZjOdK4f6w/4nxtbTnNn6C+OejvROwO71t0178Y8/H9a3EpmnEhur2Dy5ra2s5Smp7NaiP97Xq1V9d34B0QAAAAAAAAAAAAAAAAAAAAAAD4VxbTPQt7+99kw/17FhcnjPf2x+n35/sD7fb3B8qqWWTZH+88Xn8/iZH9gfbvz9Oul+PEvT10AAAAAAAAAAAAAAAAAAAA+M9obVei0Wyub7W2L28Ug85Wa/tERHQzb3372VdzMV5zm6Ccz1EYSvPU5Y1GlgyKs2SkJg+S7uSDzKdX91ZcrKnuHcXEZVQPHmo2Tz3880fDzEPJ4Jn/HtYkMfkAk33LKAab9/WXdCf/UXvB8m1qrmVZdlD7zivjXVGKKN/5C3d4kHWDb66/8cATrdNP9jJfZn2PPjb/wrUPP/lto9Hszhy9V7Cy1bqVbTTyf08+2Q4OksL5U4p+UCqeCeXD2ndHM43kh99ffPCD7442e1bMvD2hJukfzuf7hyr9oLvMfUNzk+aamXDyTyE4/fFK4+rOT78etavwRcJGHQAAAAAAAAAAAAAAAAAAcFcUPiueyz/sO3NY11PPTn9lAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHD3DP/+fyHYHcscJfirE+ND1fWtVkTlXh8mAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/c/8EAAD//9HQbnk=") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0) 1.799334959s ago: executing program 0 (id=1342): bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x27}, 0x62) 1.69761191s ago: executing program 2 (id=1343): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r3}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)}], 0x1, 0x0, 0x0, 0x2044}, 0x60) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x40047451, &(0x7f0000000180)) 1.67106638s ago: executing program 0 (id=1344): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000580)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2}}, {@noquota}, {@dioread_nolock}, {@test_dummy_encryption}, {@nobarrier}, {@nodelalloc}, {@minixdf}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0xff, 0xba6, &(0x7f0000000c00)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000e80)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x0, 0x0, 0x0, 0x0) chdir(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') syz_emit_ethernet(0x6e, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec85000000750000000400000007000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) r6 = openat$incfs(r5, &(0x7f0000000080)='.log\x00', 0x40000, 0x0) preadv(r6, &(0x7f0000000340)=[{&(0x7f0000000200)=""/54, 0x36}], 0x1, 0x0, 0x0) close(r0) r7 = socket$inet(0x2, 0x200000003, 0x84) bind$inet(r0, 0x0, 0x0) connect$inet(r0, 0x0, 0x0) writev(r7, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) 1.575159421s ago: executing program 1 (id=1345): syz_open_dev$vcsa(0x0, 0xc69, 0x8e000) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0xe0c73d38d350a625, &(0x7f0000000180)=ANY=[], 0x1, 0x31e, &(0x7f0000000e80)="$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") prlimit64(0x0, 0x9, &(0x7f0000000140)={0x8, 0x80000000008b}, 0x0) io_setup(0x9, &(0x7f0000000340)) 1.575012191s ago: executing program 2 (id=1346): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r1 = inotify_init1(0x0) close(0x3) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) syz_open_procfs(r2, &(0x7f0000000600)='fd/4\x00') ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r0, 0x40086607, &(0x7f0000000180)={@desc={0x1, 0x0, @auto="f5b5a7f8bb527187"}}) 1.554576741s ago: executing program 5 (id=1347): r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) 1.534489891s ago: executing program 33 (id=1347): r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) 1.532784501s ago: executing program 2 (id=1349): bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)='%pI4 \x00'}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={0x0, 0x0, 0x42, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00'}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 1.470357461s ago: executing program 2 (id=1350): openat$ppp(0xffffffffffffff9c, &(0x7f0000000b40), 0x600, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) write$tcp_mem(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e486dd6372ce22fdb911"], 0xfdef) 1.419182942s ago: executing program 1 (id=1351): sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x1c, 0x0, 0x1, 0x8000000, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000340)={0xf97cff8c, 0x8}, 0x2000) 1.418966652s ago: executing program 3 (id=1352): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x553, &(0x7f0000001080)="$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") r0 = open(&(0x7f0000000200)='./file1\x00', 0x14927e, 0x91) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$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") r1 = open(&(0x7f0000000000)='./file1\x00', 0x109042, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r2 = open(&(0x7f0000000100)='./bus\x00', 0x14113e, 0x1a1) write$binfmt_script(r2, &(0x7f0000000080), 0x208e24b) lseek(r1, 0x4, 0x4) fallocate(r0, 0x11, 0x0, 0x8800000) 1.313176142s ago: executing program 1 (id=1353): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x6666, 0x8804, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000500)={0x24, 0x0, 0x0, &(0x7f0000000580)={0x0, 0x22, 0x8, {[@global=@item_012={0x2, 0x1, 0x1, "5ace"}, @global=@item_4={0x3, 0x1, 0x2, "e4f94354"}]}}, 0x0}, 0x0) 1.004210594s ago: executing program 2 (id=1354): bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x27}, 0x62) 923.108744ms ago: executing program 2 (id=1355): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28de, 0x1102, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xd0, 0x0, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x1, 0xf9, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x50}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="200b4000000028b1"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f00000005c0)={0x14, &(0x7f00000001c0)={0x0, 0x0, 0xe, {0xe, 0x0, "6c46936e41c5838bf3d423ab"}}, 0x0}, 0x0) write$char_usb(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000002300), 0x1, 0x14a042) syz_open_dev$hidraw(&(0x7f0000002300), 0x0, 0x0) 787.886525ms ago: executing program 0 (id=1356): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x20c006, &(0x7f0000000200)={[{@i_version}, {@mblk_io_submit}, {@dax_never}, {@lazytime}, {@block_validity}, {@data_err_abort}], [{@seclabel}]}, 0x1, 0x43d, &(0x7f0000000900)="$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") syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000080)='./file1\x00', 0x8, &(0x7f0000000380)=ANY=[@ANYBLOB='errors=remou\tt-ro,errors=continue,check=relaxed,dots,dots,nodots,nodots,nodots,dots,dots,nodots,nodots,dots,discard,dots,dots,tz=UTC,errors=continue,nodots,sys_immutable,quiet,dots,\x00'], 0xfd, 0x1bf, &(0x7f0000000840)="$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") socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r0, &(0x7f0000000000)={0xfc, {"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", 0x1000}}, 0x1006) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000340)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001040)='cgroup.kill\x00', 0x0, 0x0) bind$vsock_stream(r4, &(0x7f0000001080)={0x28, 0x0, 0xffffffff, @local}, 0x10) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mprotect(&(0x7f0000ffc000/0x2000)=nil, 0xfaff, 0x0) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000001440)={0x1, 0x0, 0x6, 0x13, 0x1be, 0x0}) 737.480996ms ago: executing program 3 (id=1357): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r3}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)}], 0x1, 0x0, 0x0, 0x2044}, 0x60) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x40047451, &(0x7f0000000180)) 516.786117ms ago: executing program 0 (id=1358): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8901, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110c23003f) write$cgroup_type(r2, &(0x7f0000000080), 0x9) 513.419167ms ago: executing program 34 (id=1358): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8901, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110c23003f) write$cgroup_type(r2, &(0x7f0000000080), 0x9) 466.354507ms ago: executing program 3 (id=1360): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000580)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@noauto_da_alloc}, {@dioread_nolock}, {@test_dummy_encryption}, {@nobarrier}, {@nodelalloc}, {@minixdf}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x1, 0xba6, &(0x7f0000000c00)="$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") r0 = open(&(0x7f0000000200)='./file1\x00', 0x14927e, 0x91) fallocate(r0, 0x11, 0xfff, 0x8800000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) pwritev2(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) 379.105227ms ago: executing program 35 (id=1360): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000580)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@noauto_da_alloc}, {@dioread_nolock}, {@test_dummy_encryption}, {@nobarrier}, {@nodelalloc}, {@minixdf}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x1, 0xba6, &(0x7f0000000c00)="$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") r0 = open(&(0x7f0000000200)='./file1\x00', 0x14927e, 0x91) fallocate(r0, 0x11, 0xfff, 0x8800000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) pwritev2(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) 278.013868ms ago: executing program 6 (id=1365): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000002400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 277.570678ms ago: executing program 6 (id=1366): r0 = socket$xdp(0x2c, 0x3, 0x0) sendmsg$xdp(r0, &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40080}, 0x2048000) 175.071969ms ago: executing program 6 (id=1367): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) close$binfmt(r0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x823000, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) r2 = dup(r1) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) 174.815579ms ago: executing program 6 (id=1368): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r3}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)}], 0x1, 0x0, 0x0, 0x2044}, 0x60) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x40047451, &(0x7f0000000180)) 85.438479ms ago: executing program 6 (id=1369): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x1810754, &(0x7f0000000380)={[{@jqfmt_vfsold}, {@errors_continue}, {@usrquota}, {@prjquota}, {@usrquota}, {@resuid={'resuid', 0x3d, 0xee00}}, {@test_dummy_encryption, 0x5}, {@min_batch_time={'min_batch_time', 0x3d, 0xffffffff}}, {@delalloc}, {@test_dummy_encryption}]}, 0xff, 0x478, &(0x7f0000000480)="$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") syz_open_procfs(r0, &(0x7f0000000040)='smaps\x00') 0s ago: executing program 6 (id=1370): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) pselect6(0x0, 0x0, &(0x7f0000000340), &(0x7f0000000380), &(0x7f00000003c0), 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0, r3}, 0x18) r4 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDGKBDIACR(r4, 0x4b4a, &(0x7f0000000000)=""/176) kernel console output (not intermixed with test programs): ][ T613] loop3: p45 start 131072 is beyond EOD, truncated [ 35.039567][ T613] loop3: p46 start 131072 is beyond EOD, truncated [ 35.046566][ T613] loop3: p47 start 131072 is beyond EOD, truncated [ 35.054955][ T323] usb 3-1: device descriptor read/64, error -71 [ 35.062033][ T613] loop3: p48 start 131072 is beyond EOD, truncated [ 35.072752][ T613] loop3: p49 start 131072 is beyond EOD, truncated [ 35.080622][ T613] loop3: p50 start 131072 is beyond EOD, truncated [ 35.088518][ T613] loop3: p51 start 131072 is beyond EOD, truncated [ 35.095948][ T613] loop3: p52 start 131072 is beyond EOD, truncated [ 35.104922][ T613] loop3: p53 start 131072 is beyond EOD, truncated [ 35.117613][ T613] loop3: p54 start 131072 is beyond EOD, truncated [ 35.125358][ T613] loop3: p55 start 131072 is beyond EOD, truncated [ 35.133053][ T613] loop3: p56 start 131072 is beyond EOD, truncated [ 35.139933][ T613] loop3: p57 start 131072 is beyond EOD, truncated [ 35.155657][ T613] loop3: p58 start 131072 is beyond EOD, truncated [ 35.163652][ T613] loop3: p59 start 131072 is beyond EOD, truncated [ 35.172242][ T613] loop3: p60 start 131072 is beyond EOD, truncated [ 35.179343][ T613] loop3: p61 start 131072 is beyond EOD, truncated [ 35.186521][ T613] loop3: p62 start 131072 is beyond EOD, truncated [ 35.193894][ T613] loop3: p63 start 131072 is beyond EOD, truncated [ 35.200881][ T613] loop3: p64 start 131072 is beyond EOD, truncated [ 35.207646][ T613] loop3: p65 start 131072 is beyond EOD, truncated [ 35.219338][ T613] loop3: p66 start 131072 is beyond EOD, truncated [ 35.226368][ T613] loop3: p67 start 131072 is beyond EOD, truncated [ 35.233617][ T613] loop3: p68 start 131072 is beyond EOD, truncated [ 35.240448][ T613] loop3: p69 start 131072 is beyond EOD, truncated [ 35.248616][ T613] loop3: p70 start 131072 is beyond EOD, truncated [ 35.255265][ T613] loop3: p71 start 131072 is beyond EOD, truncated [ 35.262566][ T613] loop3: p72 start 131072 is beyond EOD, truncated [ 35.269880][ T613] loop3: p73 start 131072 is beyond EOD, truncated [ 35.278518][ T613] loop3: p74 start 131072 is beyond EOD, truncated [ 35.285821][ T613] loop3: p75 start 131072 is beyond EOD, truncated [ 35.292800][ T613] loop3: p76 start 131072 is beyond EOD, truncated [ 35.300069][ T613] loop3: p77 start 131072 is beyond EOD, truncated [ 35.307357][ T613] loop3: p78 start 131072 is beyond EOD, truncated [ 35.314573][ T613] loop3: p79 start 131072 is beyond EOD, truncated [ 35.321659][ T613] loop3: p80 start 131072 is beyond EOD, truncated [ 35.328667][ T613] loop3: p81 start 131072 is beyond EOD, truncated [ 35.335778][ T613] loop3: p82 start 131072 is beyond EOD, truncated [ 35.342543][ T613] loop3: p83 start 131072 is beyond EOD, truncated [ 35.353096][ T613] loop3: p84 start 131072 is beyond EOD, truncated [ 35.360025][ T613] loop3: p85 start 131072 is beyond EOD, truncated [ 35.366875][ T613] loop3: p86 start 131072 is beyond EOD, truncated [ 35.373648][ T613] loop3: p87 start 131072 is beyond EOD, truncated [ 35.380936][ T613] loop3: p88 start 131072 is beyond EOD, truncated [ 35.388394][ T613] loop3: p89 start 131072 is beyond EOD, truncated [ 35.394930][ T613] loop3: p90 start 131072 is beyond EOD, truncated [ 35.401516][ T613] loop3: p91 start 131072 is beyond EOD, truncated [ 35.408600][ T613] loop3: p92 start 131072 is beyond EOD, truncated [ 35.415514][ T613] loop3: p93 start 131072 is beyond EOD, truncated [ 35.422272][ T613] loop3: p94 start 131072 is beyond EOD, truncated [ 35.429002][ T613] loop3: p95 start 131072 is beyond EOD, truncated [ 35.436518][ T613] loop3: p96 start 131072 is beyond EOD, truncated [ 35.443688][ T613] loop3: p97 start 131072 is beyond EOD, truncated [ 35.450624][ T613] loop3: p98 start 131072 is beyond EOD, truncated [ 35.457239][ T323] usb 3-1: device descriptor read/64, error -71 [ 35.458639][ T613] loop3: p99 start 131072 is beyond EOD, truncated [ 35.471700][ T613] loop3: p100 start 131072 is beyond EOD, truncated [ 35.479676][ T613] loop3: p101 start 131072 is beyond EOD, truncated [ 35.486645][ T613] loop3: p102 start 131072 is beyond EOD, truncated [ 35.495938][ T613] loop3: p103 start 131072 is beyond EOD, truncated [ 35.503249][ T613] loop3: p104 start 131072 is beyond EOD, truncated [ 35.510697][ T613] loop3: p105 start 131072 is beyond EOD, truncated [ 35.520354][ T613] loop3: p106 start 131072 is beyond EOD, truncated [ 35.527850][ T613] loop3: p107 start 131072 is beyond EOD, truncated [ 35.536013][ T613] loop3: p108 start 131072 is beyond EOD, truncated [ 35.543138][ T613] loop3: p109 start 131072 is beyond EOD, truncated [ 35.549973][ T613] loop3: p110 start 131072 is beyond EOD, truncated [ 35.556700][ T613] loop3: p111 start 131072 is beyond EOD, truncated [ 35.563898][ T613] loop3: p112 start 131072 is beyond EOD, truncated [ 35.571387][ T613] loop3: p113 start 131072 is beyond EOD, truncated [ 35.578406][ T323] usb usb3-port1: attempt power cycle [ 35.579580][ T613] loop3: p114 start 131072 is beyond EOD, truncated [ 35.591170][ T613] loop3: p115 start 131072 is beyond EOD, truncated [ 35.598813][ T613] loop3: p116 start 131072 is beyond EOD, truncated [ 35.605620][ T613] loop3: p117 start 131072 is beyond EOD, truncated [ 35.612880][ T613] loop3: p118 start 131072 is beyond EOD, truncated [ 35.619915][ T613] loop3: p119 start 131072 is beyond EOD, truncated [ 35.627731][ T613] loop3: p120 start 131072 is beyond EOD, truncated [ 35.634750][ T613] loop3: p121 start 131072 is beyond EOD, truncated [ 35.648366][ T613] loop3: p122 start 131072 is beyond EOD, truncated [ 35.660042][ T613] loop3: p123 start 131072 is beyond EOD, truncated [ 35.667816][ T613] loop3: p124 start 131072 is beyond EOD, truncated [ 35.675513][ T613] loop3: p125 start 131072 is beyond EOD, truncated [ 35.683675][ T613] loop3: p126 start 131072 is beyond EOD, truncated [ 35.691382][ T613] loop3: p127 start 131072 is beyond EOD, truncated [ 35.700600][ T613] loop3: p128 start 131072 is beyond EOD, truncated [ 35.709200][ T613] loop3: p129 start 131072 is beyond EOD, truncated [ 35.717613][ T613] loop3: p130 start 131072 is beyond EOD, truncated [ 35.724503][ T613] loop3: p131 start 131072 is beyond EOD, truncated [ 35.732366][ T613] loop3: p132 start 131072 is beyond EOD, truncated [ 35.740432][ T613] loop3: p133 start 131072 is beyond EOD, truncated [ 35.748335][ T613] loop3: p134 start 131072 is beyond EOD, truncated [ 35.755703][ T613] loop3: p135 start 131072 is beyond EOD, truncated [ 35.763720][ T613] loop3: p136 start 131072 is beyond EOD, truncated [ 35.771568][ T613] loop3: p137 start 131072 is beyond EOD, truncated [ 35.779319][ T613] loop3: p138 start 131072 is beyond EOD, truncated [ 35.786840][ T613] loop3: p139 start 131072 is beyond EOD, truncated [ 35.797976][ T613] loop3: p140 start 131072 is beyond EOD, truncated [ 35.799154][ T655] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.76: inode #1: comm syz.0.76: iget: illegal inode # [ 35.804533][ T613] loop3: p141 start 131072 is beyond EOD, truncated [ 35.826716][ T613] loop3: p142 start 131072 is beyond EOD, truncated [ 35.834539][ T613] loop3: p143 start 131072 is beyond EOD, truncated [ 35.841505][ T613] loop3: p144 start 131072 is beyond EOD, truncated [ 35.844644][ T655] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.76: error while reading EA inode 1 err=-117 [ 35.851236][ T613] loop3: p145 start 131072 is beyond EOD, truncated [ 35.874409][ T655] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2806: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 35.888844][ T613] loop3: p146 start 131072 is beyond EOD, truncated [ 35.896462][ T613] loop3: p147 start 131072 is beyond EOD, truncated [ 35.903458][ T655] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.76: inode #1: comm syz.0.76: iget: illegal inode # [ 35.903629][ T613] loop3: p148 start 131072 is beyond EOD, truncated [ 35.924740][ T613] loop3: p149 start 131072 is beyond EOD, truncated [ 35.933010][ T613] loop3: p150 start 131072 is beyond EOD, truncated [ 35.941099][ T613] loop3: p151 start 131072 is beyond EOD, truncated [ 35.950296][ T613] loop3: p152 start 131072 is beyond EOD, truncated [ 35.956861][ T613] loop3: p153 start 131072 is beyond EOD, truncated [ 35.964849][ T613] loop3: p154 start 131072 is beyond EOD, truncated [ 35.973686][ T613] loop3: p155 start 131072 is beyond EOD, truncated [ 36.009210][ T655] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.76: error while reading EA inode 1 err=-117 [ 36.027377][ T613] loop3: p156 start 131072 is beyond EOD, truncated [ 36.035469][ T613] loop3: p157 start 131072 is beyond EOD, truncated [ 36.043912][ T613] loop3: p158 start 131072 is beyond EOD, truncated [ 36.052034][ T613] loop3: p159 start 131072 is beyond EOD, truncated [ 36.061257][ T613] loop3: p160 start 131072 is beyond EOD, truncated [ 36.070988][ T613] loop3: p161 start 131072 is beyond EOD, truncated [ 36.080430][ T655] EXT4-fs (loop0): 1 orphan inode deleted [ 36.091648][ T613] loop3: p162 start 131072 is beyond EOD, truncated [ 36.099855][ T655] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,nogrpid,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,sysvgroups,usrjquota=,,errors=continue [ 36.127748][ T613] loop3: p163 start 131072 is beyond EOD, truncated [ 36.143457][ T613] loop3: p164 start 131072 is beyond EOD, truncated [ 36.152513][ T613] loop3: p165 start 131072 is beyond EOD, truncated [ 36.161573][ T613] loop3: p166 start 131072 is beyond EOD, truncated [ 36.169688][ T613] loop3: p167 start 131072 is beyond EOD, truncated [ 36.176691][ T613] loop3: p168 start 131072 is beyond EOD, truncated [ 36.184707][ T613] loop3: p169 start 131072 is beyond EOD, truncated [ 36.194002][ T661] EXT4-fs (loop1): Ignoring removed oldalloc option [ 36.262789][ T613] loop3: p170 start 131072 is beyond EOD, truncated [ 36.339622][ T613] loop3: p171 start 131072 is beyond EOD, truncated [ 36.372852][ T613] loop3: p172 start 131072 is beyond EOD, truncated [ 36.383470][ T613] loop3: p173 start 131072 is beyond EOD, truncated [ 36.405082][ T613] loop3: p174 start 131072 is beyond EOD, truncated [ 36.412982][ T613] loop3: p175 start 131072 is beyond EOD, truncated [ 36.420481][ T613] loop3: p176 start 131072 is beyond EOD, truncated [ 36.428425][ T613] loop3: p177 start 131072 is beyond EOD, truncated [ 36.438504][ T613] loop3: p178 start 131072 is beyond EOD, truncated [ 36.445560][ T613] loop3: p179 start 131072 is beyond EOD, truncated [ 36.454107][ T613] loop3: p180 start 131072 is beyond EOD, truncated [ 36.461855][ T613] loop3: p181 start 131072 is beyond EOD, truncated [ 36.470220][ T613] loop3: p182 start 131072 is beyond EOD, truncated [ 36.482880][ T613] loop3: p183 start 131072 is beyond EOD, truncated [ 36.492704][ T613] loop3: p184 start 131072 is beyond EOD, truncated [ 36.503739][ T613] loop3: p185 start 131072 is beyond EOD, truncated [ 36.512498][ T613] loop3: p186 start 131072 is beyond EOD, truncated [ 36.520164][ T613] loop3: p187 start 131072 is beyond EOD, truncated [ 36.528335][ T613] loop3: p188 start 131072 is beyond EOD, truncated [ 36.535737][ T613] loop3: p189 start 131072 is beyond EOD, truncated [ 36.547047][ T613] loop3: p190 start 131072 is beyond EOD, truncated [ 36.554974][ T613] loop3: p191 start 131072 is beyond EOD, truncated [ 36.563303][ T613] loop3: p192 start 131072 is beyond EOD, truncated [ 36.572007][ T613] loop3: p193 start 131072 is beyond EOD, truncated [ 36.595208][ T613] loop3: p194 start 131072 is beyond EOD, truncated [ 36.602140][ T613] loop3: p195 start 131072 is beyond EOD, truncated [ 36.602787][ T661] EXT4-fs (loop1): orphan cleanup on readonly fs [ 36.608894][ T613] loop3: p196 start 131072 is beyond EOD, truncated [ 36.615800][ T661] __quota_error: 78 callbacks suppressed [ 36.615813][ T661] Quota error (device loop1): find_tree_dqentry: Getting block too big (196613 >= 6) [ 36.622249][ T613] loop3: p197 start 131072 is beyond EOD, truncated [ 36.622259][ T613] loop3: p198 start 131072 is beyond EOD, truncated [ 36.628003][ T661] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 36.638185][ T613] loop3: p199 start 131072 is beyond EOD, [ 36.644639][ T661] EXT4-fs error (device loop1): ext4_acquire_dquot:6219: comm syz.1.78: Failed to acquire dquot type 1 [ 36.652549][ T613] truncated [ 36.661549][ T661] EXT4-fs (loop1): 1 truncate cleaned up [ 36.667634][ T323] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 36.679443][ T661] EXT4-fs (loop1): mounted filesystem without journal. Opts: user_xattr,nodiscard,oldalloc,grpjquota=,nobarrier,noquota,abort,nodiscard,nodiscard,,errors=continue [ 36.687467][ T613] loop3: p200 start 131072 is beyond EOD, truncated [ 36.730027][ T613] loop3: p201 start 131072 is beyond EOD, truncated [ 36.740427][ T24] audit: type=1400 audit(1741330597.940:338): avc: denied { map } for pid=671 comm="syz.2.81" path="socket:[16193]" dev="sockfs" ino=16193 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 36.766289][ T613] loop3: p202 start 131072 is beyond EOD, truncated [ 36.777337][ T613] loop3: p203 start 131072 is beyond EOD, truncated [ 36.785997][ T24] audit: type=1400 audit(1741330597.980:339): avc: denied { read accept } for pid=671 comm="syz.2.81" path="socket:[16193]" dev="sockfs" ino=16193 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 36.796650][ T613] loop3: p204 start 131072 is beyond EOD, truncated [ 36.822217][ T24] audit: type=1400 audit(1741330597.980:340): avc: denied { ioctl } for pid=671 comm="syz.2.81" path="socket:[16193]" dev="sockfs" ino=16193 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 36.822284][ T613] loop3: p205 start 131072 is beyond EOD, truncated [ 36.858953][ T613] loop3: p206 start 131072 is beyond EOD, truncated [ 36.867656][ T660] EXT4-fs error (device loop1): ext4_lookup:1834: inode #2: comm syz.1.78: deleted inode referenced: 12 [ 36.867962][ T613] loop3: p207 start 131072 is beyond EOD, truncated [ 36.890008][ T613] loop3: p208 start 131072 is beyond EOD, truncated [ 36.898119][ T613] loop3: p209 start 131072 is beyond EOD, truncated [ 36.905426][ T613] loop3: p210 start 131072 is beyond EOD, truncated [ 36.913543][ T613] loop3: p211 start 131072 is beyond EOD, truncated [ 36.920981][ T613] loop3: p212 start 131072 is beyond EOD, truncated [ 36.928666][ T613] loop3: p213 start 131072 is beyond EOD, truncated [ 36.935423][ T613] loop3: p214 start 131072 is beyond EOD, truncated [ 36.943243][ T24] audit: type=1400 audit(1741330598.140:341): avc: denied { remove_name } for pid=77 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 36.943588][ T613] loop3: p215 start 131072 is beyond EOD, truncated [ 36.974958][ T24] audit: type=1400 audit(1741330598.140:342): avc: denied { rename } for pid=77 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 36.978862][ T613] loop3: p216 start 131072 is beyond EOD, [ 37.012711][ T24] audit: type=1400 audit(1741330598.140:343): avc: denied { create } for pid=77 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 37.039076][ T613] truncated [ 37.051650][ T613] loop3: p217 start 131072 is beyond EOD, truncated [ 37.058589][ T613] loop3: p218 start 131072 is beyond EOD, truncated [ 37.065597][ T613] loop3: p219 start 131072 is beyond EOD, truncated [ 37.072638][ T613] loop3: p220 start 131072 is beyond EOD, truncated [ 37.082086][ T613] loop3: p221 start 131072 is beyond EOD, truncated [ 37.090358][ T613] loop3: p222 start 131072 is beyond EOD, truncated [ 37.099396][ T613] loop3: p223 start 131072 is beyond EOD, truncated [ 37.106518][ T613] loop3: p224 start 131072 is beyond EOD, truncated [ 37.113409][ T613] loop3: p225 start 131072 is beyond EOD, truncated [ 37.120932][ T613] loop3: p226 start 131072 is beyond EOD, truncated [ 37.138696][ T613] loop3: p227 start 131072 is beyond EOD, truncated [ 37.145407][ T613] loop3: p228 start 131072 is beyond EOD, truncated [ 37.152559][ T613] loop3: p229 start 131072 is beyond EOD, truncated [ 37.159647][ T613] loop3: p230 start 131072 is beyond EOD, truncated [ 37.167844][ T613] loop3: p231 start 131072 is beyond EOD, truncated [ 37.174395][ T613] loop3: p232 start 131072 is beyond EOD, truncated [ 37.184864][ T613] loop3: p233 start 131072 is beyond EOD, truncated [ 37.192699][ T613] loop3: p234 start 131072 is beyond EOD, truncated [ 37.200535][ T613] loop3: p235 start 131072 is beyond EOD, truncated [ 37.207779][ T613] loop3: p236 start 131072 is beyond EOD, truncated [ 37.214581][ T613] loop3: p237 start 131072 is beyond EOD, truncated [ 37.221506][ T613] loop3: p238 start 131072 is beyond EOD, truncated [ 37.230464][ T613] loop3: p239 start 131072 is beyond EOD, truncated [ 37.237719][ T613] loop3: p240 start 131072 is beyond EOD, truncated [ 37.245096][ T613] loop3: p241 start 131072 is beyond EOD, truncated [ 37.254164][ T613] loop3: p242 start 131072 is beyond EOD, truncated [ 37.263116][ T613] loop3: p243 start 131072 is beyond EOD, truncated [ 37.272403][ T613] loop3: p244 start 131072 is beyond EOD, truncated [ 37.280326][ T613] loop3: p245 start 131072 is beyond EOD, truncated [ 37.289392][ T613] loop3: p246 start 131072 is beyond EOD, truncated [ 37.296234][ T613] loop3: p247 start 131072 is beyond EOD, truncated [ 37.297200][ T323] usb 3-1: device not accepting address 5, error -71 [ 37.303454][ T613] loop3: p248 start 131072 is beyond EOD, truncated [ 37.327512][ T613] loop3: p249 start 131072 is beyond EOD, truncated [ 37.337438][ T613] loop3: p250 start 131072 is beyond EOD, truncated [ 37.350720][ T613] loop3: p251 start 131072 is beyond EOD, truncated [ 37.362895][ T613] loop3: p252 start 131072 is beyond EOD, truncated [ 37.375894][ T613] loop3: p253 start 131072 is beyond EOD, truncated [ 37.384976][ T613] loop3: p254 start 131072 is beyond EOD, truncated [ 37.391898][ T613] loop3: p255 start 131072 is beyond EOD, truncated [ 37.551428][ T679] F2FS-fs (loop1): fault_injection options not supported [ 37.561966][ T308] udevd[308]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 37.609279][ T679] F2FS-fs (loop1): invalid crc value [ 37.635532][ T679] F2FS-fs (loop1): Found nat_bits in checkpoint [ 37.645861][ T24] audit: type=1400 audit(1741330598.840:344): avc: denied { ioctl } for pid=697 comm="syz.3.87" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=16241 ioctlcmd=0xaa06 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 37.790588][ T700] EXT4-fs (loop2): Test dummy encryption mode enabled [ 37.804950][ T700] EXT4-fs (loop2): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000010000,noauto_da_alloc,dioread_nolock,test_dummy_encryption,nobarrier,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue [ 37.837878][ T679] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 37.883071][ T698] EXT4-fs (loop3): Mount option "norecovery" incompatible with ext2 [ 37.905767][ T24] audit: type=1326 audit(1741330599.100:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=696 comm="syz.2.86" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88d3c58169 code=0x7ffc0000 [ 37.934560][ T700] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 37.943696][ T679] F2FS-fs (loop1): Unrecognized mount option "" or missing value [ 38.029811][ T710] FAT-fs (loop5): Directory bread(block 64) failed [ 38.036795][ T710] FAT-fs (loop5): Directory bread(block 65) failed [ 38.044006][ T710] FAT-fs (loop5): Directory bread(block 66) failed [ 38.052189][ T710] FAT-fs (loop5): Directory bread(block 67) failed [ 38.059554][ T710] FAT-fs (loop5): Directory bread(block 68) failed [ 38.066694][ T710] FAT-fs (loop5): Directory bread(block 69) failed [ 38.400000][ T719] EXT4-fs (loop0): Ignoring removed oldalloc option [ 38.471354][ T719] EXT4-fs (loop0): orphan cleanup on readonly fs [ 38.481834][ T719] EXT4-fs error (device loop0): ext4_acquire_dquot:6219: comm syz.0.90: Failed to acquire dquot type 1 [ 38.496947][ T719] EXT4-fs (loop0): 1 truncate cleaned up [ 38.503615][ T719] EXT4-fs (loop0): mounted filesystem without journal. Opts: bsdgroups,nodiscard,oldalloc,grpjquota=,nobarrier,noquota,abort,nodiscard,nodiscard,,errors=continue [ 38.671744][ T710] FAT-fs (loop5): Directory bread(block 70) failed [ 38.760983][ T710] FAT-fs (loop5): Directory bread(block 71) failed [ 38.929954][ T710] FAT-fs (loop5): Directory bread(block 72) failed [ 38.968725][ T710] FAT-fs (loop5): Directory bread(block 73) failed [ 39.107444][ T285] attempt to access beyond end of device [ 39.107444][ T285] loop1: rw=2049, want=45104, limit=40427 [ 39.230508][ T728] F2FS-fs (loop3): Unrecognized mount option "diable_ext_identify" or missing value [ 39.525539][ T323] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 39.862863][ T728] EXT4-fs (loop3): journaled quota format not specified [ 39.871046][ T323] usb 3-1: config 0 has no interfaces? [ 39.974825][ T550] hid (null): unknown global tag 0xe [ 39.981866][ T550] hid (null): unknown global tag 0xd [ 39.994266][ T550] hid-generic 0001:2B28:0007.0002: collection stack underflow [ 40.022531][ T550] hid-generic 0001:2B28:0007.0002: item 0 4 0 12 parsing failed [ 40.038119][ T550] hid-generic: probe of 0001:2B28:0007.0002 failed with error -22 [ 40.061007][ T323] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 40.092307][ T323] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 40.092317][ T323] usb 3-1: SerialNumber: syz [ 40.109240][ T323] usb 3-1: config 0 descriptor?? [ 40.110876][ T746] EXT4-fs (loop5): Unrecognized mount option "audit" or missing value [ 40.124871][ T748] xt_TCPMSS: Only works on TCP SYN packets [ 40.289341][ T755] netlink: 76 bytes leftover after parsing attributes in process `syz.1.99'. [ 40.449499][ T722] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 40.460288][ T722] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.545835][ T758] FAT-fs (loop3): Directory bread(block 64) failed [ 40.564397][ T758] FAT-fs (loop3): Directory bread(block 65) failed [ 40.577327][ T758] FAT-fs (loop3): Directory bread(block 66) failed [ 40.585620][ T758] FAT-fs (loop3): Directory bread(block 67) failed [ 40.603849][ T758] FAT-fs (loop3): Directory bread(block 68) failed [ 40.623385][ T758] FAT-fs (loop3): Directory bread(block 69) failed [ 40.642745][ T758] FAT-fs (loop3): Directory bread(block 70) failed [ 40.662750][ T758] FAT-fs (loop3): Directory bread(block 71) failed [ 40.683129][ T758] FAT-fs (loop3): Directory bread(block 72) failed [ 40.707477][ T758] FAT-fs (loop3): Directory bread(block 73) failed [ 41.237869][ T777] exfat: Bad value for 'fmask' [ 41.339070][ T789] netlink: 40 bytes leftover after parsing attributes in process `syz.3.107'. [ 41.350449][ T789] netlink: 40 bytes leftover after parsing attributes in process `syz.3.107'. [ 41.477230][ T343] usb 2-1: new low-speed USB device number 2 using dummy_hcd [ 41.628174][ T323] usb 3-1: USB disconnect, device number 6 [ 41.747269][ T343] usb 2-1: Invalid ep0 maxpacket: 32 [ 41.907304][ T343] usb 2-1: new low-speed USB device number 3 using dummy_hcd [ 42.097222][ T323] usb 3-1: new low-speed USB device number 7 using dummy_hcd [ 42.152840][ T343] usb 2-1: Invalid ep0 maxpacket: 32 [ 42.158245][ T343] usb usb2-port1: attempt power cycle [ 42.221105][ T24] kauditd_printk_skb: 57 callbacks suppressed [ 42.221115][ T24] audit: type=1326 audit(1741330603.420:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=815 comm="syz.0.114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8664ef5169 code=0x7ffc0000 [ 42.273782][ T24] audit: type=1326 audit(1741330603.420:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=815 comm="syz.0.114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8664ef5169 code=0x7ffc0000 [ 42.299921][ T24] audit: type=1326 audit(1741330603.420:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=815 comm="syz.0.114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f8664ef5169 code=0x7ffc0000 [ 42.327908][ T24] audit: type=1326 audit(1741330603.420:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=815 comm="syz.0.114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8664ef5169 code=0x7ffc0000 [ 42.357275][ T24] audit: type=1326 audit(1741330603.420:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=815 comm="syz.0.114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8664ef5169 code=0x7ffc0000 [ 42.388421][ T24] audit: type=1326 audit(1741330603.420:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=815 comm="syz.0.114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8664ef5169 code=0x7ffc0000 [ 42.414235][ T323] usb 3-1: device descriptor read/64, error -71 [ 42.418185][ T24] audit: type=1326 audit(1741330603.430:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=815 comm="syz.0.114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8664ef5169 code=0x7ffc0000 [ 42.447002][ T24] audit: type=1326 audit(1741330603.430:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=815 comm="syz.0.114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8664ef5169 code=0x7ffc0000 [ 42.476035][ T24] audit: type=1400 audit(1741330603.460:409): avc: denied { bind } for pid=821 comm="syz.0.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 42.503064][ T24] audit: type=1400 audit(1741330603.500:410): avc: denied { write } for pid=823 comm="syz.3.116" name="001" dev="devtmpfs" ino=179 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 42.567290][ T550] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 42.607352][ T343] usb 2-1: new low-speed USB device number 4 using dummy_hcd [ 42.755291][ T835] device bridge1 entered promiscuous mode [ 42.857296][ T323] usb 3-1: device descriptor read/64, error -71 [ 42.877261][ T343] usb 2-1: Invalid ep0 maxpacket: 32 [ 43.037498][ T343] usb 2-1: new low-speed USB device number 5 using dummy_hcd [ 43.117325][ T550] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 43.127287][ T323] usb 3-1: new low-speed USB device number 8 using dummy_hcd [ 43.129325][ T550] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 43.138189][ T343] usb 2-1: Invalid ep0 maxpacket: 32 [ 43.150268][ T550] usb 6-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 43.154473][ T343] usb usb2-port1: unable to enumerate USB device [ 43.164134][ T550] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.182440][ T550] usb 6-1: config 0 descriptor?? [ 43.417215][ T323] usb 3-1: device descriptor read/64, error -71 [ 43.460819][ T840] EXT4-fs (loop0): Unrecognized mount option "smackfsroot={" or missing value [ 43.490508][ T812] fuse: root generation should be zero [ 43.587354][ T550] usbhid 6-1:0.0: can't add hid device: -71 [ 43.595936][ T550] usbhid: probe of 6-1:0.0 failed with error -71 [ 43.597336][ T343] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 43.609821][ T550] usb 6-1: USB disconnect, device number 2 [ 43.807245][ T323] usb 3-1: device descriptor read/64, error -71 [ 43.857193][ T343] usb 4-1: Using ep0 maxpacket: 8 [ 43.927298][ T323] usb usb3-port1: attempt power cycle [ 43.977282][ T343] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 43.988547][ T343] usb 4-1: config 0 has no interface number 0 [ 44.147317][ T343] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 44.163933][ T343] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.177792][ T343] usb 4-1: Product: syz [ 44.182183][ T343] usb 4-1: Manufacturer: syz [ 44.188599][ T343] usb 4-1: SerialNumber: syz [ 44.194963][ T343] usb 4-1: config 0 descriptor?? [ 44.289179][ T852] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 44.307952][ T852] EXT4-fs (loop1): 1 truncate cleaned up [ 44.317139][ T852] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 44.390337][ T856] EXT4-fs (loop0): 1 orphan inode deleted [ 44.396952][ T856] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 44.407684][ T856] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.425124][ T323] usb 3-1: new low-speed USB device number 9 using dummy_hcd [ 44.497093][ T838] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d) [ 44.521441][ T838] tipc: Enabling not permitted [ 44.528424][ T838] tipc: Enabling of bearer rejected, failed to enable media [ 44.617736][ T343] uvcvideo: Found UVC 0.04 device syz (046d:08c3) [ 44.668066][ T323] usb 3-1: device descriptor read/8, error -71 [ 44.791668][ T343] uvcvideo: No streaming interface found for terminal 6. [ 44.792228][ T343] uvcvideo: Failed to create links for entity 5 [ 44.836609][ T874] tipc: Enabling of bearer rejected, failed to enable media [ 44.841549][ T343] uvcvideo: Failed to register entities (-22). [ 44.869774][ T874] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 44.879618][ T874] ext4 filesystem being mounted at /31/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 44.908086][ T343] usb 4-1: USB disconnect, device number 2 [ 45.030707][ T889] netlink: 76 bytes leftover after parsing attributes in process `syz.2.129'. [ 45.044997][ T323] usb 3-1: device descriptor read/8, error -71 [ 45.320672][ T895] syz.5.134 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 45.416950][ T898] FAT-fs (loop0): Directory bread(block 64) failed [ 45.424084][ T898] FAT-fs (loop0): Directory bread(block 65) failed [ 45.434263][ T898] FAT-fs (loop0): Directory bread(block 66) failed [ 45.442433][ T898] FAT-fs (loop0): Directory bread(block 67) failed [ 45.450664][ T898] FAT-fs (loop0): Directory bread(block 68) failed [ 45.460103][ T898] FAT-fs (loop0): Directory bread(block 69) failed [ 45.493645][ T898] FAT-fs (loop0): Directory bread(block 70) failed [ 45.585190][ T898] FAT-fs (loop0): Directory bread(block 71) failed [ 45.593966][ T898] FAT-fs (loop0): Directory bread(block 72) failed [ 45.602919][ T898] FAT-fs (loop0): Directory bread(block 73) failed [ 45.680208][ T903] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 45.693306][ T903] ext4 filesystem being mounted at /27/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.797214][ T296] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 45.954951][ T914] F2FS-fs (loop2): Found nat_bits in checkpoint [ 45.992677][ T914] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 46.057216][ T296] usb 6-1: Using ep0 maxpacket: 16 [ 46.298159][ T926] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 46.311064][ T926] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 46.325565][ T926] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 46.342636][ T926] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 46.359399][ T926] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 46.371606][ T926] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c040e118, mo2=0000] [ 46.377352][ T296] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 46.389964][ T296] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.403407][ T296] usb 6-1: Product: syz [ 46.405297][ T941] 9pnet: Insufficient options for proto=fd [ 46.407802][ T296] usb 6-1: Manufacturer: syz [ 46.418899][ T296] usb 6-1: SerialNumber: syz [ 46.429668][ T296] usb 6-1: config 0 descriptor?? [ 46.437564][ T926] EXT4-fs (loop3): orphan cleanup on readonly fs [ 46.471052][ T926] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.138: bg 0: block 34: padding at end of block bitmap is not set [ 46.495053][ T296] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 46.507613][ T296] usb 6-1: Detected FT232H [ 46.509055][ T926] EXT4-fs error (device loop3): ext4_acquire_dquot:6219: comm syz.3.138: Failed to acquire dquot type 1 [ 46.525220][ T926] EXT4-fs (loop3): 1 truncate cleaned up [ 46.534924][ T926] EXT4-fs (loop3): mounted filesystem without journal. Opts: noload,discard,nogrpid,noblock_validity,jqfmt=vfsv1,,errors=continue [ 46.817754][ T296] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 47.097277][ T296] ftdi_sio 6-1:0.0: GPIO initialisation failed: -5 [ 47.105199][ T296] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 47.127222][ T343] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 47.289773][ T24] kauditd_printk_skb: 15 callbacks suppressed [ 47.289784][ T24] audit: type=1400 audit(1741330608.490:424): avc: denied { read write } for pid=958 comm="syz.1.146" name="ppp" dev="devtmpfs" ino=149 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 47.337262][ T24] audit: type=1400 audit(1741330608.490:425): avc: denied { open } for pid=958 comm="syz.1.146" path="/dev/ppp" dev="devtmpfs" ino=149 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 47.376632][ T24] audit: type=1326 audit(1741330608.570:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=961 comm="syz.1.147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff101c7c169 code=0x7ffc0000 [ 47.405378][ T24] audit: type=1326 audit(1741330608.570:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=961 comm="syz.1.147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff101c7c169 code=0x7ffc0000 [ 47.405786][ T343] usb 4-1: Using ep0 maxpacket: 16 [ 47.431643][ T24] audit: type=1326 audit(1741330608.570:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=961 comm="syz.1.147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff101c7c169 code=0x7ffc0000 [ 47.452135][ T895] udc-core: couldn't find an available UDC or it's busy [ 47.466771][ T296] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 47.475784][ T895] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 47.481604][ T24] audit: type=1326 audit(1741330608.570:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=961 comm="syz.1.147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff101c7c169 code=0x7ffc0000 [ 47.490729][ T962] Zero length message leads to an empty skb [ 47.522353][ T24] audit: type=1326 audit(1741330608.570:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=961 comm="syz.1.147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff101c7c169 code=0x7ffc0000 [ 47.522373][ T24] audit: type=1326 audit(1741330608.570:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=961 comm="syz.1.147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7ff101c7c169 code=0x7ffc0000 [ 47.578133][ T24] audit: type=1326 audit(1741330608.570:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=961 comm="syz.1.147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff101c7c169 code=0x7ffc0000 [ 47.607441][ T343] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 47.609342][ T24] audit: type=1326 audit(1741330608.570:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=961 comm="syz.1.147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff101c7c169 code=0x7ffc0000 [ 47.621029][ T343] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 47.662034][ T343] usb 4-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00 [ 47.676986][ T343] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.692104][ T343] usb 4-1: config 0 descriptor?? [ 47.739244][ T963] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 47.756467][ T963] EXT4-fs (loop1): 1 truncate cleaned up [ 47.757031][ T966] FAT-fs (loop0): Directory bread(block 64) failed [ 47.763224][ T963] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 47.770475][ T966] FAT-fs (loop0): Directory bread(block 65) failed [ 47.780818][ T963] SELinux: security_context_str_to_sid(system_u) failed for (dev loop1, type ext4) errno=-22 [ 47.788494][ T966] FAT-fs (loop0): Directory bread(block 66) failed [ 47.806591][ T966] FAT-fs (loop0): Directory bread(block 67) failed [ 47.815220][ T966] FAT-fs (loop0): Directory bread(block 68) failed [ 47.823154][ T966] FAT-fs (loop0): Directory bread(block 69) failed [ 47.832872][ T966] FAT-fs (loop0): Directory bread(block 70) failed [ 47.841510][ T966] FAT-fs (loop0): Directory bread(block 71) failed [ 47.852153][ T966] FAT-fs (loop0): Directory bread(block 72) failed [ 47.863785][ T966] FAT-fs (loop0): Directory bread(block 73) failed [ 47.910869][ T962] usb usb8: usbfs: process 962 (syz.1.147) did not claim interface 3 before use [ 47.927423][ T296] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 47.946452][ T296] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 47.957976][ T296] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.970566][ T296] usb 3-1: config 0 descriptor?? [ 48.007808][ T296] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 48.068810][ T972] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 48.081973][ T972] ext4 filesystem being mounted at /38/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.228554][ T343] ntrig 0003:1B96:0008.0003: unknown main item tag 0x0 [ 48.237943][ T972] FAULT_INJECTION: forcing a failure. [ 48.237943][ T972] name failslab, interval 1, probability 0, space 0, times 1 [ 48.257122][ T343] ntrig 0003:1B96:0008.0003: item fetching failed at offset 6/7 [ 48.263864][ T972] CPU: 0 PID: 972 Comm: syz.1.149 Not tainted 5.10.234-syzkaller-00023-g3f5f2283d684 #0 [ 48.268761][ T343] ntrig 0003:1B96:0008.0003: parse failed [ 48.277355][ T972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 48.277372][ T972] Call Trace: [ 48.277400][ T972] dump_stack_lvl+0x1e2/0x24b [ 48.277409][ T972] ? panic+0x812/0x812 [ 48.277417][ T972] ? bfq_pos_tree_add_move+0x43b/0x43b [ 48.277437][ T972] ? __schedule+0xbee/0x1330 [ 48.283803][ T343] ntrig: probe of 0003:1B96:0008.0003 failed with error -22 [ 48.293929][ T972] dump_stack+0x15/0x17 [ 48.293940][ T972] should_fail+0x3c6/0x510 [ 48.293951][ T972] ? getname_flags+0xba/0x520 [ 48.293961][ T972] __should_failslab+0xa4/0xe0 [ 48.293972][ T972] should_failslab+0x9/0x20 [ 48.293990][ T972] kmem_cache_alloc+0x3d/0x2e0 [ 48.325493][ T343] usb 6-1: USB disconnect, device number 3 [ 48.333658][ T972] ? preempt_schedule_irq+0xe7/0x140 [ 48.333673][ T972] getname_flags+0xba/0x520 [ 48.333682][ T972] user_path_at_empty+0x2d/0x50 [ 48.333691][ T972] __se_sys_chdir+0xa7/0x1f0 [ 48.333699][ T972] ? __x64_sys_chdir+0x40/0x40 [ 48.333710][ T972] ? syscall_enter_from_user_mode+0x1a/0x1a0 [ 48.333729][ T972] __x64_sys_chdir+0x38/0x40 [ 48.348860][ T343] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 48.350351][ T972] do_syscall_64+0x34/0x70 [ 48.350371][ T972] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 48.357425][ T343] ftdi_sio 6-1:0.0: device disconnected [ 48.360631][ T972] RIP: 0033:0x7ff101c7c169 [ 48.360642][ T972] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 48.360658][ T972] RSP: 002b:00007ff1002e6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000050 [ 48.481835][ T972] RAX: ffffffffffffffda RBX: 00007ff101e94fa0 RCX: 00007ff101c7c169 [ 48.490561][ T972] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00004000000001c0 [ 48.499128][ T972] RBP: 00007ff1002e6090 R08: 0000000000000000 R09: 0000000000000000 [ 48.508038][ T972] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 48.516499][ T972] R13: 0000000000000000 R14: 00007ff101e94fa0 R15: 00007ffdab9fb498 [ 48.579299][ T285] EXT4-fs error (device loop1): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 48.703623][ T988] netlink: 12 bytes leftover after parsing attributes in process `syz.0.150'. [ 48.940681][ T986] FAT-fs (loop5): Directory bread(block 64) failed [ 48.960557][ T986] FAT-fs (loop5): Directory bread(block 65) failed [ 48.970707][ T986] FAT-fs (loop5): Directory bread(block 66) failed [ 48.979917][ T986] FAT-fs (loop5): Directory bread(block 67) failed [ 48.988094][ T986] FAT-fs (loop5): Directory bread(block 68) failed [ 48.995445][ T986] FAT-fs (loop5): Directory bread(block 69) failed [ 49.002531][ T986] FAT-fs (loop5): Directory bread(block 70) failed [ 49.011533][ T986] FAT-fs (loop5): Directory bread(block 71) failed [ 49.020039][ T986] FAT-fs (loop5): Directory bread(block 72) failed [ 49.027820][ T986] FAT-fs (loop5): Directory bread(block 73) failed [ 49.043172][ T1002] binfmt_misc: register: failed to install interpreter file ./file0 [ 49.131427][ T1007] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=259 sclass=netlink_route_socket pid=1007 comm=syz.1.158 [ 49.345780][ T1015] netlink: 48 bytes leftover after parsing attributes in process `syz.1.160'. [ 49.427316][ T343] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 49.591785][ T1019] syz.0.161[1019] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 49.591847][ T1019] syz.0.161[1019] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 49.797306][ T343] usb 6-1: unable to get BOS descriptor or descriptor too short [ 49.808992][ T1024] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 49.830563][ T1024] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.853895][ T593] EXT4-fs error (device loop5): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 49.877413][ T805] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 49.927240][ T343] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 49.936956][ T343] usb 6-1: can't read configurations, error -71 [ 49.960480][ T616] usb 4-1: USB disconnect, device number 3 [ 49.992573][ T1034] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 50.004633][ T1034] ext4 filesystem being mounted at /19/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.035767][ T593] EXT4-fs error (device loop5): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 50.124509][ T1041] FAT-fs (loop3): Directory bread(block 64) failed [ 50.137437][ T1041] FAT-fs (loop3): Directory bread(block 65) failed [ 50.154057][ T1041] FAT-fs (loop3): Directory bread(block 66) failed [ 50.177272][ T1041] FAT-fs (loop3): Directory bread(block 67) failed [ 50.184487][ T1041] FAT-fs (loop3): Directory bread(block 68) failed [ 50.208891][ T349] usb 3-1: USB disconnect, device number 11 [ 50.216116][ T1041] FAT-fs (loop3): Directory bread(block 69) failed [ 50.226875][ T1041] FAT-fs (loop3): Directory bread(block 70) failed [ 50.233922][ T1041] FAT-fs (loop3): Directory bread(block 71) failed [ 50.238929][ T1050] mmap: syz.5.168 (1050): VmData 25030656 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 50.240813][ T805] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 50.266618][ T1041] FAT-fs (loop3): Directory bread(block 72) failed [ 50.268974][ T805] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 50.275623][ T1041] FAT-fs (loop3): Directory bread(block 73) failed [ 50.287891][ T805] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 50.407699][ T1058] EXT4-fs (loop3): Ignoring removed bh option [ 50.438357][ T1058] EXT4-fs (loop3): 1 orphan inode deleted [ 50.445796][ T1058] EXT4-fs (loop3): mounted filesystem without journal. Opts: bh,nodiscard,noquota,init_itable,stripe=0x0000000000000401,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota,,errors=continue [ 50.471446][ T1058] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.492637][ T805] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 50.526174][ T805] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.555094][ T805] usb 1-1: Product: syz [ 50.561950][ T805] usb 1-1: Manufacturer: syz [ 50.576442][ T805] usb 1-1: SerialNumber: syz [ 50.780825][ T1065] FAT-fs (loop3): Directory bread(block 64) failed [ 50.793133][ T1065] FAT-fs (loop3): Directory bread(block 65) failed [ 50.804502][ T1065] FAT-fs (loop3): Directory bread(block 66) failed [ 50.814572][ T1065] FAT-fs (loop3): Directory bread(block 67) failed [ 50.821587][ T1065] FAT-fs (loop3): Directory bread(block 68) failed [ 50.829499][ T1065] FAT-fs (loop3): Directory bread(block 69) failed [ 50.836044][ T1065] FAT-fs (loop3): Directory bread(block 70) failed [ 50.843364][ T1065] FAT-fs (loop3): Directory bread(block 71) failed [ 50.849745][ T1065] FAT-fs (loop3): Directory bread(block 72) failed [ 50.856950][ T1065] FAT-fs (loop3): Directory bread(block 73) failed [ 51.298577][ T1069] EXT4-fs (loop5): orphan cleanup on readonly fs [ 51.319417][ T1069] EXT4-fs (loop5): 1 orphan inode deleted [ 51.337378][ T1069] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 51.927220][ T1079] EXT4-fs (loop3): Journaled quota options ignored when QUOTA feature is enabled [ 51.944550][ T1079] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 51.959908][ T1079] EXT4-fs (loop3): Ignoring removed orlov option [ 51.967348][ T1079] EXT4-fs (loop3): test_dummy_encryption requires encrypt feature [ 52.057645][ T1084] netlink: 8 bytes leftover after parsing attributes in process `syz.5.176'. [ 52.129370][ T1079] overlayfs: overlapping lowerdir path [ 52.140717][ T1077] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 52.153679][ T1077] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 52.166699][ T1077] F2FS-fs (loop2): invalid crc value [ 52.178659][ T1077] F2FS-fs (loop2): Found nat_bits in checkpoint [ 52.194943][ T1086] FAT-fs (loop1): Directory bread(block 64) failed [ 52.211703][ T1086] FAT-fs (loop1): Directory bread(block 65) failed [ 52.221313][ T1086] FAT-fs (loop1): Directory bread(block 66) failed [ 52.227092][ T1077] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 52.228521][ T1086] FAT-fs (loop1): Directory bread(block 67) failed [ 52.237536][ T1077] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 52.244574][ T1086] FAT-fs (loop1): Directory bread(block 68) failed [ 52.260103][ T1086] FAT-fs (loop1): Directory bread(block 69) failed [ 52.270117][ T1086] FAT-fs (loop1): Directory bread(block 70) failed [ 52.273909][ T1092] erofs: (device loop3): mounted with root inode @ nid 36. [ 52.277976][ T1086] FAT-fs (loop1): Directory bread(block 71) failed [ 52.299039][ T1092] attempt to access beyond end of device [ 52.299039][ T1092] loop3: rw=0, want=14552337264, limit=16 [ 52.300355][ T1086] FAT-fs (loop1): Directory bread(block 72) failed [ 52.320000][ T1086] FAT-fs (loop1): Directory bread(block 73) failed [ 52.322145][ T1092] attempt to access beyond end of device [ 52.322145][ T1092] loop3: rw=0, want=14552337264, limit=16 [ 52.343543][ T24] kauditd_printk_skb: 210 callbacks suppressed [ 52.343554][ T24] audit: type=1400 audit(1741330614.534:644): avc: denied { add_name } for pid=1076 comm="syz.2.174" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 52.345307][ T1092] attempt to access beyond end of device [ 52.345307][ T1092] loop3: rw=0, want=14552337264, limit=16 [ 52.350154][ T24] audit: type=1400 audit(1741330614.534:645): avc: denied { create } for pid=1076 comm="syz.2.174" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 53.135723][ T24] audit: type=1326 audit(1741330615.284:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1076 comm="syz.2.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88d3c58169 code=0x7ffc0000 [ 53.193136][ T1098] EXT4-fs (loop3): 1 orphan inode deleted [ 53.646280][ T1098] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 53.646354][ T1098] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.715654][ T24] audit: type=1326 audit(1741330615.284:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1076 comm="syz.2.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88d3c58169 code=0x7ffc0000 [ 53.715672][ T24] audit: type=1326 audit(1741330615.284:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1076 comm="syz.2.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f88d3c58169 code=0x7ffc0000 [ 53.715688][ T24] audit: type=1400 audit(1741330615.284:649): avc: denied { write } for pid=1076 comm="syz.2.174" name="file0" dev="loop2" ino=455 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 53.715718][ T24] audit: type=1400 audit(1741330615.284:650): avc: denied { add_name } for pid=1076 comm="syz.2.174" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 53.715734][ T24] audit: type=1400 audit(1741330615.284:651): avc: denied { create } for pid=1076 comm="syz.2.174" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 53.715750][ T24] audit: type=1400 audit(1741330615.314:652): avc: denied { write open } for pid=1076 comm="syz.2.174" path="/20/file0/file0/file0" dev="loop2" ino=456 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 53.715765][ T24] audit: type=1326 audit(1741330615.314:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1076 comm="syz.2.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88d3c58169 code=0x7ffc0000 [ 53.748923][ T805] cdc_ncm 1-1:1.0: bind() failure [ 53.749784][ T805] cdc_ncm 1-1:1.1: bind() failure [ 53.835867][ T1110] FAT-fs (loop1): Directory bread(block 64) failed [ 53.835884][ T1110] FAT-fs (loop1): Directory bread(block 65) failed [ 53.835912][ T1110] FAT-fs (loop1): Directory bread(block 66) failed [ 53.835924][ T1110] FAT-fs (loop1): Directory bread(block 67) failed [ 53.835951][ T1110] FAT-fs (loop1): Directory bread(block 68) failed [ 53.835964][ T1110] FAT-fs (loop1): Directory bread(block 69) failed [ 53.835993][ T1110] FAT-fs (loop1): Directory bread(block 70) failed [ 53.836005][ T1110] FAT-fs (loop1): Directory bread(block 71) failed [ 53.836032][ T1110] FAT-fs (loop1): Directory bread(block 72) failed [ 53.836044][ T1110] FAT-fs (loop1): Directory bread(block 73) failed [ 53.837961][ T805] usb 1-1: USB disconnect, device number 2 [ 53.845472][ T9] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 53.845480][ T9] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 54.304417][ T1112] EXT4-fs (loop5): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 54.525027][ T1122] netlink: 16 bytes leftover after parsing attributes in process `syz.3.184'. [ 54.622220][ T1108] FAT-fs (loop5): Directory bread(block 64) failed [ 54.630273][ T1108] FAT-fs (loop5): Directory bread(block 65) failed [ 55.153226][ T1108] FAT-fs (loop5): Directory bread(block 66) failed [ 55.161969][ T1108] FAT-fs (loop5): Directory bread(block 67) failed [ 55.170518][ T1108] FAT-fs (loop5): Directory bread(block 68) failed [ 55.177764][ T1108] FAT-fs (loop5): Directory bread(block 69) failed [ 55.185389][ T1108] FAT-fs (loop5): Directory bread(block 70) failed [ 55.192707][ T1108] FAT-fs (loop5): Directory bread(block 71) failed [ 55.200434][ T1108] FAT-fs (loop5): Directory bread(block 72) failed [ 55.524186][ T1108] FAT-fs (loop5): Directory bread(block 73) failed [ 55.648955][ T1147] EXT4-fs (loop0): mounted filesystem without journal. Opts: usrquota,grpjquota=,nodelalloc,,errors=continue [ 55.661422][ T1147] ext4 filesystem being mounted at /38/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.676927][ T1153] FAT-fs (loop3): Directory bread(block 64) failed [ 55.707545][ T1153] FAT-fs (loop3): Directory bread(block 65) failed [ 55.715158][ T1153] FAT-fs (loop3): Directory bread(block 66) failed [ 55.732491][ T1153] FAT-fs (loop3): Directory bread(block 67) failed [ 55.739612][ T1153] FAT-fs (loop3): Directory bread(block 68) failed [ 55.753886][ T1153] FAT-fs (loop3): Directory bread(block 69) failed [ 55.762007][ T1153] FAT-fs (loop3): Directory bread(block 70) failed [ 55.769531][ T1153] FAT-fs (loop3): Directory bread(block 71) failed [ 55.777948][ T1153] FAT-fs (loop3): Directory bread(block 72) failed [ 55.785991][ T1153] FAT-fs (loop3): Directory bread(block 73) failed [ 55.799785][ T1163] FAT-fs (loop1): Directory bread(block 64) failed [ 55.811016][ T1163] FAT-fs (loop1): Directory bread(block 65) failed [ 55.836239][ T1163] FAT-fs (loop1): Directory bread(block 66) failed [ 55.843682][ T1163] FAT-fs (loop1): Directory bread(block 67) failed [ 55.868032][ T1163] FAT-fs (loop1): Directory bread(block 68) failed [ 55.883552][ T1163] FAT-fs (loop1): Directory bread(block 69) failed [ 55.891269][ T15] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 55.897343][ T1163] FAT-fs (loop1): Directory bread(block 70) failed [ 55.908342][ T1163] FAT-fs (loop1): Directory bread(block 71) failed [ 55.915468][ T1163] FAT-fs (loop1): Directory bread(block 72) failed [ 55.922802][ T1163] FAT-fs (loop1): Directory bread(block 73) failed [ 56.407241][ T15] usb 3-1: device descriptor read/64, error -71 [ 57.007415][ T1197] netlink: 'syz.1.202': attribute type 27 has an invalid length. [ 57.147301][ T15] usb 3-1: device descriptor read/64, error -71 [ 57.215044][ T1203] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 57.233330][ T1203] EXT4-fs error (device loop5): __ext4_iget:4986: inode #16: block 2: comm syz.5.204: invalid block [ 57.245749][ T1203] EXT4-fs (loop5): Remounting filesystem read-only [ 57.253231][ T1203] EXT4-fs error (device loop5): ext4_orphan_get:1400: comm syz.5.204: couldn't read orphan inode 16 (err -117) [ 57.266442][ T1203] EXT4-fs (loop5): 1 orphan inode deleted [ 57.273411][ T1203] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=remount-ro,nodelalloc,debug_want_extra_isize=0x000000000000002e,nogrpid,block_validity,quota, [ 57.292290][ T1205] exfat: Deprecated parameter 'namecase' [ 57.293074][ T1203] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1203 comm=syz.5.204 [ 57.301162][ T1205] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xabdedc71, utbl_chksum : 0xe619d30d) [ 57.413425][ T24] kauditd_printk_skb: 69 callbacks suppressed [ 57.413436][ T24] audit: type=1400 audit(1741330619.614:723): avc: denied { bind } for pid=1216 comm="syz.0.208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 57.442740][ T15] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 57.471142][ T1224] FAT-fs (loop0): Directory bread(block 64) failed [ 57.478834][ T1224] FAT-fs (loop0): Directory bread(block 65) failed [ 57.488541][ T1224] FAT-fs (loop0): Directory bread(block 66) failed [ 57.496164][ T1224] FAT-fs (loop0): Directory bread(block 67) failed [ 57.507731][ T1224] FAT-fs (loop0): Directory bread(block 68) failed [ 57.516556][ T1224] FAT-fs (loop0): Directory bread(block 69) failed [ 57.526504][ T1224] FAT-fs (loop0): Directory bread(block 70) failed [ 57.536486][ T1224] FAT-fs (loop0): Directory bread(block 71) failed [ 57.543845][ T1224] FAT-fs (loop0): Directory bread(block 72) failed [ 57.552029][ T1224] FAT-fs (loop0): Directory bread(block 73) failed [ 58.312684][ T24] audit: type=1400 audit(1741330620.504:724): avc: denied { name_bind } for pid=1221 comm="syz.5.205" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 58.336231][ T20] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 58.375590][ T24] audit: type=1400 audit(1741330620.574:725): avc: denied { unmount } for pid=285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 58.417275][ T15] usb 3-1: device descriptor read/64, error -71 [ 58.426035][ T24] audit: type=1400 audit(1741330620.624:726): avc: denied { read } for pid=1232 comm="syz.0.210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 58.498233][ T1241] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 58.506894][ T1241] System zones: 0-2, 18-18, 34-34 [ 58.514322][ T1241] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.212: bg 0: block 248: padding at end of block bitmap is not set [ 58.530695][ T1241] Quota error (device loop1): write_blk: dquota write failed [ 58.538989][ T1241] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 58.550855][ T1241] EXT4-fs error (device loop1): ext4_acquire_dquot:6219: comm syz.1.212: Failed to acquire dquot type 1 [ 58.565055][ T1241] EXT4-fs (loop1): 1 truncate cleaned up [ 58.571809][ T1241] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 58.582404][ T1241] ext4 filesystem being mounted at /58/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.622790][ T24] audit: type=1400 audit(1741330620.824:727): avc: denied { block_suspend } for pid=1250 comm="syz.2.214" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 58.651222][ T1241] netlink: 'syz.1.212': attribute type 27 has an invalid length. [ 58.659391][ T24] audit: type=1400 audit(1741330620.854:728): avc: denied { read } for pid=1250 comm="syz.2.214" name="uinput" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 58.695758][ T1251] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 58.719266][ T24] audit: type=1400 audit(1741330620.924:729): avc: denied { write } for pid=1253 comm="syz.5.215" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 58.757517][ T20] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 58.777124][ T20] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 58.785213][ T1255] device veth0_vlan left promiscuous mode [ 58.796112][ T1255] device veth0_vlan entered promiscuous mode [ 58.804387][ T1255] device veth1_macvtap left promiscuous mode [ 58.813627][ T1255] device veth1_macvtap entered promiscuous mode [ 58.821254][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.829121][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.845012][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.854036][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.866296][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.874709][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.884773][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.893354][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.901807][ T20] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 58.911599][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.919403][ T20] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 58.927462][ T20] usb 4-1: SerialNumber: syz [ 58.928107][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.940265][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 58.950428][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.959440][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 58.970029][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.985453][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.995640][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.006124][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.015642][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.043120][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready [ 59.053894][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 59.157864][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 59.225066][ T24] audit: type=1400 audit(1741330621.424:730): avc: denied { getopt } for pid=1265 comm="syz.1.216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 59.377937][ T1277] FAT-fs (loop5): Directory bread(block 64) failed [ 59.384949][ T1284] 9pnet: Insufficient options for proto=fd [ 59.386307][ T1277] FAT-fs (loop5): Directory bread(block 65) failed [ 59.391219][ T1283] 9pnet: Insufficient options for proto=fd [ 59.398056][ T1277] FAT-fs (loop5): Directory bread(block 66) failed [ 59.410859][ T1277] FAT-fs (loop5): Directory bread(block 67) failed [ 59.418092][ T1277] FAT-fs (loop5): Directory bread(block 68) failed [ 59.429907][ T1277] FAT-fs (loop5): Directory bread(block 69) failed [ 59.438152][ T1277] FAT-fs (loop5): Directory bread(block 70) failed [ 59.447776][ T1277] FAT-fs (loop5): Directory bread(block 71) failed [ 59.454991][ T1277] FAT-fs (loop5): Directory bread(block 72) failed [ 59.467358][ T1277] FAT-fs (loop5): Directory bread(block 73) failed [ 59.498498][ T1289] cgroup: syz.3.207 (1289) created nested cgroup for controller "memory" which has incomplete hierarchy support. Nested cgroups may change behavior in the future. [ 59.557678][ T1289] cgroup: "memory" requires setting use_hierarchy to 1 on the root [ 59.618674][ T1302] syz.1.226[1302] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 59.618731][ T1302] syz.1.226[1302] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 59.942267][ T1317] device batadv_slave_1 entered promiscuous mode [ 59.963447][ T1317] netlink: 'syz.0.230': attribute type 1 has an invalid length. [ 59.971631][ T1317] netlink: 4 bytes leftover after parsing attributes in process `syz.0.230'. [ 59.983977][ T1316] device batadv_slave_1 left promiscuous mode [ 59.997278][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 60.001343][ T20] usb 4-1: 0:2 : does not exist [ 60.077902][ T15] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 60.089470][ T1309] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 60.095947][ T20] usb 4-1: USB disconnect, device number 4 [ 60.119969][ T1331] syz.1.235[1331] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 60.120034][ T1331] syz.1.235[1331] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 60.133166][ T1331] syz.1.235[1331] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 60.145064][ T1331] syz.1.235[1331] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 60.353293][ T308] udevd[308]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 60.753149][ T1352] EXT4-fs (loop0): mounted filesystem without journal. Opts: usrquota,grpjquota=,nodelalloc,,errors=continue [ 60.779652][ T1352] ext4 filesystem being mounted at /48/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.847220][ T550] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 61.099509][ T1370] kvm: emulating exchange as write [ 61.117217][ T550] usb 6-1: Using ep0 maxpacket: 8 [ 61.122730][ T15] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 61.136801][ T15] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 61.237585][ T1368] xt_bpf: check failed: parse error [ 61.282445][ T1373] netlink: 8 bytes leftover after parsing attributes in process `syz.2.246'. [ 61.517446][ T550] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 61.536578][ T550] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 61.707264][ T550] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 61.721805][ T1381] device pim6reg1 entered promiscuous mode [ 61.726372][ T550] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.737537][ T550] usb 6-1: Product: ᑫè¢å­ƒæ¢œà©„ᔋé²äº•æ°“〒ᑗ衭䋭ퟋ龩娃ᎇꇉ኷忇Fᭀ뾙齴朂 [ 61.753138][ T550] usb 6-1: Manufacturer: 㤽ë—D䇓鎲ힼႤﻤ쫶 [ 61.760739][ T550] usb 6-1: SerialNumber: à¡  [ 61.777923][ T1383] FAT-fs (loop1): Directory bread(block 64) failed [ 61.786064][ T1383] FAT-fs (loop1): Directory bread(block 65) failed [ 61.799630][ T1383] FAT-fs (loop1): Directory bread(block 66) failed [ 61.814456][ T1383] FAT-fs (loop1): Directory bread(block 67) failed [ 61.823354][ T1383] FAT-fs (loop1): Directory bread(block 68) failed [ 61.832246][ T1383] FAT-fs (loop1): Directory bread(block 69) failed [ 61.844333][ T1383] FAT-fs (loop1): Directory bread(block 70) failed [ 61.853390][ T1383] FAT-fs (loop1): Directory bread(block 71) failed [ 61.861123][ T1383] FAT-fs (loop1): Directory bread(block 72) failed [ 61.874866][ T1383] FAT-fs (loop1): Directory bread(block 73) failed [ 61.917253][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 62.487901][ T24] kauditd_printk_skb: 121 callbacks suppressed [ 62.487941][ T24] audit: type=1400 audit(1741330624.424:852): avc: denied { name_bind } for pid=1388 comm="syz.3.251" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 62.679567][ T1396] FAT-fs (loop2): Directory bread(block 64) failed [ 62.686908][ T1396] FAT-fs (loop2): Directory bread(block 65) failed [ 62.716051][ T1396] FAT-fs (loop2): Directory bread(block 66) failed [ 62.728719][ T24] audit: type=1400 audit(1741330624.424:853): avc: denied { node_bind } for pid=1388 comm="syz.3.251" saddr=224.0.0.1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 62.736268][ T1396] FAT-fs (loop2): Directory bread(block 67) failed [ 62.762065][ T1396] FAT-fs (loop2): Directory bread(block 68) failed [ 62.764099][ T24] audit: type=1400 audit(1741330624.624:854): avc: denied { write } for pid=1388 comm="syz.3.251" name="hwrng" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 62.795848][ T1396] FAT-fs (loop2): Directory bread(block 69) failed [ 62.803170][ T15] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 62.816439][ T1396] FAT-fs (loop2): Directory bread(block 70) failed [ 62.842424][ T1350] udc-core: couldn't find an available UDC or it's busy [ 62.851984][ T1396] FAT-fs (loop2): Directory bread(block 71) failed [ 62.864298][ T1350] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 62.881496][ T24] audit: type=1400 audit(1741330625.024:855): avc: denied { setopt } for pid=1403 comm="syz.1.254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 62.892318][ T1396] FAT-fs (loop2): Directory bread(block 72) failed [ 62.903243][ T24] audit: type=1400 audit(1741330625.034:856): avc: denied { name_bind } for pid=1403 comm="syz.1.254" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 62.938466][ T1350] udc-core: couldn't find an available UDC or it's busy [ 62.956620][ T24] audit: type=1400 audit(1741330625.154:857): avc: denied { write } for pid=1403 comm="syz.1.254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 62.979767][ T1350] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 62.979908][ T1396] FAT-fs (loop2): Directory bread(block 73) failed [ 63.020925][ T24] audit: type=1400 audit(1741330625.224:858): avc: denied { create } for pid=1349 comm="syz.5.241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 63.044967][ T24] audit: type=1400 audit(1741330625.224:859): avc: denied { ioctl } for pid=1349 comm="syz.5.241" path="socket:[19524]" dev="sockfs" ino=19524 ioctlcmd=0x671e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 63.076125][ T550] cdc_ncm 6-1:1.0: bind() failure [ 63.084475][ T550] cdc_ncm 6-1:1.1: bind() failure [ 63.097088][ T550] usb 6-1: USB disconnect, device number 6 [ 63.117216][ T15] usb 1-1: Using ep0 maxpacket: 8 [ 63.129701][ T1416] ÿÿÿÿÿÿ: renamed from vlan1 [ 63.159787][ T1411] EXT4-fs (loop3): Ignoring removed bh option [ 63.163813][ T1414] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,quota,,errors=continue [ 63.165991][ T1411] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 63.181431][ T1414] ext4 filesystem being mounted at /71/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 63.198636][ T1411] EXT4-fs (loop3): mounted filesystem without journal. Opts: delalloc,data_err=abort,user_xattr,dioread_lock,nouid32,max_dir_size_kb=0x000000000000090e,errors=continue,resuid=0x000000000000ee01,sysvgroups,user_xattr,bh,dioread_nolock,,errors=continue [ 63.360618][ T24] audit: type=1400 audit(1741330625.564:860): avc: denied { write } for pid=1410 comm="syz.3.257" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 63.389763][ T24] audit: type=1400 audit(1741330625.584:861): avc: denied { add_name } for pid=1410 comm="syz.3.257" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 63.420031][ T15] usb 1-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 63.432403][ T15] usb 1-1: config 0 interface 0 has no altsetting 0 [ 63.442280][ T15] usb 1-1: New USB device found, idVendor=056a, idProduct=032f, bcdDevice= 0.00 [ 63.453130][ T15] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.464650][ T15] usb 1-1: config 0 descriptor?? [ 63.482946][ T1411] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3342: comm syz.3.257: Allocating blocks 497-513 which overlap fs metadata [ 63.500266][ T1411] EXT4-fs (loop3): pa ffff88812c5a89d8: logic 128, phys. 385, len 8 [ 63.508952][ T1411] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:4359: group 0, free 0, pa_free 1 [ 63.597767][ T1427] device pim6reg1 entered promiscuous mode [ 64.667242][ T15] usbhid 1-1:0.0: can't add hid device: -71 [ 64.676940][ T15] usbhid: probe of 1-1:0.0 failed with error -71 [ 64.721023][ T15] usb 1-1: USB disconnect, device number 3 [ 64.797231][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 65.097795][ T1457] EXT4-fs (loop2): Unrecognized mount option "appraise" or missing value [ 65.352701][ T1462] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 65.369484][ T1462] System zones: 0-2, 18-18, 34-34 [ 65.376873][ T1462] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.269: bg 0: block 248: padding at end of block bitmap is not set [ 65.377091][ T1462] EXT4-fs error (device loop5): ext4_acquire_dquot:6219: comm syz.5.269: Failed to acquire dquot type 1 [ 65.377906][ T1462] EXT4-fs (loop5): 1 truncate cleaned up [ 65.377918][ T1462] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 65.377993][ T1462] ext4 filesystem being mounted at /41/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.753837][ T1462] netlink: 'syz.5.269': attribute type 27 has an invalid length. [ 65.786395][ T1465] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 65.786408][ T1465] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 65.789123][ T1465] F2FS-fs (loop1): invalid crc value [ 65.813471][ T1465] F2FS-fs (loop1): Found nat_bits in checkpoint [ 65.863783][ T1462] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.873846][ T1462] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.917275][ T1465] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 65.956968][ T1465] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 66.039329][ T1491] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.046885][ T1491] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.056116][ T1491] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.063442][ T1491] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.079316][ T1491] device veth0_vlan left promiscuous mode [ 66.086800][ T1491] device veth0_vlan entered promiscuous mode [ 66.094293][ T1491] device veth1_macvtap left promiscuous mode [ 66.101855][ T1491] device veth1_macvtap entered promiscuous mode [ 66.117308][ T616] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 66.147363][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.163757][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.192244][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.207002][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.216121][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.226280][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.236988][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.280757][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.290105][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.300006][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.310108][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.321321][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 66.334046][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.345997][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 66.355762][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.364565][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.376517][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.388637][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.399447][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.482573][ T616] usb 4-1: Using ep0 maxpacket: 8 [ 66.514439][ T1507] @ÿ: renamed from bond_slave_0 [ 66.548208][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 66.558147][ T15] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 66.632717][ T616] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 66.657465][ T616] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 66.668176][ T616] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 66.798981][ T1522] netlink: 'syz.0.279': attribute type 12 has an invalid length. [ 66.867938][ T616] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 66.945064][ T616] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.388254][ T616] usb 4-1: Product: syz [ 67.410939][ T1515] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 67.517236][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 67.741113][ T616] usb 4-1: Manufacturer: syz [ 67.746894][ T1515] ext4 filesystem being mounted at /42/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.759185][ T616] usb 4-1: SerialNumber: syz [ 67.890760][ T349] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 68.439598][ T24] kauditd_printk_skb: 26 callbacks suppressed [ 68.439611][ T24] audit: type=1400 audit(1741330630.638:886): avc: denied { unlink } for pid=1546 comm="syz.0.283" name="#3" dev="tmpfs" ino=356 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 68.516867][ T349] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 68.534819][ T1548] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 68.536302][ T1557] netlink: 12 bytes leftover after parsing attributes in process `syz.1.287'. [ 68.555213][ T1557] netlink: 16 bytes leftover after parsing attributes in process `syz.1.287'. [ 68.568013][ T1557] netlink: 16 bytes leftover after parsing attributes in process `syz.1.287'. [ 68.578896][ T1548] EXT4-fs (loop0): 1 truncate cleaned up [ 68.585672][ T1548] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota=,min_batch_time=0x0000000000000001,noload,data_err=ignore,usrjquota="init_itable=0x0000000000000601,init_itable=0x0000000000000101,max_dir_size_kb=0x0000000000000003,,errors=continue [ 68.767263][ T25] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 68.787228][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 68.820624][ T1565] netlink: 'syz.5.285': attribute type 12 has an invalid length. [ 69.048097][ T616] usb 4-1: 0:2 : does not exist [ 69.160347][ T25] usb 3-1: Using ep0 maxpacket: 32 [ 69.217858][ T24] audit: type=1400 audit(1741330631.418:887): avc: denied { listen } for pid=1562 comm="syz.0.288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 69.280309][ T616] usb 4-1: USB disconnect, device number 5 [ 69.347467][ T25] usb 3-1: unable to get BOS descriptor or descriptor too short [ 69.394018][ T1577] netlink: 12 bytes leftover after parsing attributes in process `syz.3.291'. [ 69.443419][ T24] audit: type=1400 audit(1741330631.538:888): avc: denied { map } for pid=1574 comm="syz.3.291" path="socket:[18987]" dev="sockfs" ino=18987 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 69.546711][ T24] audit: type=1400 audit(1741330631.558:889): avc: denied { read accept } for pid=1574 comm="syz.3.291" path="socket:[18987]" dev="sockfs" ino=18987 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 69.627307][ T25] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 69.673294][ T24] audit: type=1400 audit(1741330631.868:890): avc: denied { mount } for pid=1592 comm="syz.0.293" name="/" dev="configfs" ino=1645 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 69.714081][ T1593] incfs: Error accessing: ./file0. [ 69.723807][ T1593] incfs: mount failed -20 [ 69.737996][ T24] audit: type=1400 audit(1741330631.928:891): avc: denied { search } for pid=1592 comm="syz.0.293" name="/" dev="configfs" ino=1645 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 69.765738][ T24] audit: type=1400 audit(1741330631.928:892): avc: denied { write } for pid=1592 comm="syz.0.293" name="/" dev="configfs" ino=1645 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 69.799862][ T24] audit: type=1400 audit(1741330631.928:893): avc: denied { add_name } for pid=1592 comm="syz.0.293" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 69.832757][ T24] audit: type=1400 audit(1741330631.928:894): avc: denied { create } for pid=1592 comm="syz.0.293" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=file permissive=1 [ 69.861531][ T308] udevd[308]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 69.881747][ T25] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 69.901846][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.926854][ T25] usb 3-1: Product: syz [ 69.943776][ T25] usb 3-1: Manufacturer: syz [ 69.979461][ T25] usb 3-1: SerialNumber: syz [ 70.013949][ T1607] xt_hashlimit: max too large, truncated to 1048576 [ 70.260709][ T24] audit: type=1400 audit(1741330632.458:895): avc: denied { setopt } for pid=1551 comm="syz.2.286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 70.387338][ T25] usb 3-1: 2:1 : format type 0 is detected, processed as PCM [ 70.404430][ T25] usb 3-1: 2:1 : sample bitwidth 10 in over sample bytes 1 [ 70.460659][ T25] usb 3-1: USB disconnect, device number 14 [ 70.627291][ T15] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 70.743323][ T442] udevd[442]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 71.147952][ T1638] exfat: Deprecated parameter 'namecase' [ 71.207276][ T15] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 71.233198][ T15] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 71.244290][ T1638] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x8ce3369d, utbl_chksum : 0xe619d30d) [ 71.245922][ T15] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 71.271186][ T15] usb 2-1: New USB device found, idVendor=056a, idProduct=00f0, bcdDevice= 0.00 [ 71.280474][ T15] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.581522][ T1647] xt_CT: You must specify a L4 protocol and not use inversions on it [ 71.591305][ T1647] x_tables: unsorted entry at hook 1 [ 71.669447][ T1649] netlink: 'syz.3.306': attribute type 12 has an invalid length. [ 71.947328][ T616] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 71.948257][ T15] usb 2-1: config 0 descriptor?? [ 72.397333][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 72.451665][ T1671] netlink: 'syz.0.313': attribute type 12 has an invalid length. [ 72.477276][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 72.637489][ T616] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 72.665957][ T616] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 72.687331][ T343] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 72.714946][ T616] usb 3-1: too many endpoints for config 1 interface 0 altsetting 0: 64, using maximum allowed: 30 [ 72.769537][ T616] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 64 [ 72.947514][ T616] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 72.971099][ T616] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 72.980260][ T343] usb 6-1: Using ep0 maxpacket: 8 [ 73.016681][ T616] usb 3-1: SerialNumber: syz [ 73.155016][ T1670] sched: RT throttling activated [ 73.207521][ T343] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 252, using maximum allowed: 30 [ 73.220151][ T616] usb 3-1: 0:2 : does not exist [ 73.237104][ T15] wacom 0003:056A:00F0.0004: item fetching failed at offset 10/11 [ 73.250759][ T15] wacom 0003:056A:00F0.0004: parse failed [ 73.258390][ T15] wacom: probe of 0003:056A:00F0.0004 failed with error -22 [ 73.266043][ T343] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 73.302650][ T343] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 252 [ 73.323881][ T343] usb 6-1: New USB device found, idVendor=0700, idProduct=1713, bcdDevice= 0.00 [ 73.338349][ T343] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.354786][ T343] usb 6-1: config 0 descriptor?? [ 73.410002][ T1561] usb 2-1: USB disconnect, device number 6 [ 73.417706][ T15] usb 3-1: USB disconnect, device number 15 [ 73.458317][ T24] kauditd_printk_skb: 15 callbacks suppressed [ 73.458328][ T24] audit: type=1400 audit(1741330635.648:911): avc: denied { read } for pid=1693 comm="syz.3.319" name="rtc0" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 73.495963][ T24] audit: type=1400 audit(1741330635.648:912): avc: denied { open } for pid=1693 comm="syz.3.319" path="/dev/rtc0" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 73.521005][ T24] audit: type=1400 audit(1741330635.658:913): avc: denied { ioctl } for pid=1693 comm="syz.3.319" path="/dev/rtc0" dev="devtmpfs" ino=254 ioctlcmd=0x7003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 73.549643][ T24] audit: type=1400 audit(1741330635.748:914): avc: denied { map } for pid=1698 comm="syz.3.320" path="socket:[19803]" dev="sockfs" ino=19803 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 73.576996][ T24] audit: type=1400 audit(1741330635.748:915): avc: denied { read accept } for pid=1698 comm="syz.3.320" path="socket:[19803]" dev="sockfs" ino=19803 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 73.609725][ T24] audit: type=1326 audit(1741330635.808:916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1704 comm="syz.3.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39642f9169 code=0x7ffc0000 [ 73.637427][ T24] audit: type=1326 audit(1741330635.808:917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1704 comm="syz.3.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39642f9169 code=0x7ffc0000 [ 73.684683][ T1710] netlink: 96 bytes leftover after parsing attributes in process `syz.3.322'. [ 74.028141][ T24] audit: type=1400 audit(1741330636.038:918): avc: denied { watch_reads } for pid=1711 comm="syz.3.323" path="/65" dev="tmpfs" ino=375 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 74.059701][ T343] hid-generic 0003:0700:1713.0005: item fetching failed at offset 1/5 [ 74.068779][ T343] hid-generic: probe of 0003:0700:1713.0005 failed with error -22 [ 74.107124][ T24] audit: type=1400 audit(1741330636.298:919): avc: denied { bind } for pid=1716 comm="syz.1.325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 74.149689][ T24] audit: type=1400 audit(1741330636.348:920): avc: denied { create } for pid=1723 comm="syz.1.326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 74.153640][ T1719] EXT4-fs (loop2): orphan cleanup on readonly fs [ 74.178948][ T1719] EXT4-fs error (device loop2): ext4_acquire_dquot:6219: comm syz.2.324: Failed to acquire dquot type 1 [ 74.194219][ T1719] EXT4-fs (loop2): 1 truncate cleaned up [ 74.197515][ T343] usb 6-1: USB disconnect, device number 7 [ 74.202151][ T1719] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsdgroups,nodiscard,norecovery,grpjquota=,grpjquota=,noquota,abort,noload,nodiscard,,errors=continue [ 74.241999][ T1720] netlink: 28 bytes leftover after parsing attributes in process `syz.2.324'. [ 74.251623][ T1720] tipc: Started in network mode [ 74.256658][ T1720] tipc: Own node identity 7ffd39, cluster identity 5 [ 74.260755][ T1729] EXT4-fs (loop5): 1 orphan inode deleted [ 74.264860][ T1720] tipc: 32-bit node address hash set to 7ffd39 [ 74.270871][ T1729] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 74.288158][ T1729] ext4 filesystem being mounted at /49/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.417202][ T1561] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 74.780114][ T15] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 74.847326][ T1561] usb 2-1: config index 0 descriptor too short (expected 2340, got 36) [ 74.884708][ T1561] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 74.936462][ T1561] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 74.971754][ T1561] usb 2-1: config 0 interface 0 has no altsetting 0 [ 75.047741][ T1561] usb 2-1: New USB device found, idVendor=17ef, idProduct=6085, bcdDevice= 0.00 [ 75.119346][ T1561] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.187481][ T15] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 75.226611][ T1561] usb 2-1: config 0 descriptor?? [ 75.244020][ T15] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 75.367446][ T15] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 75.780212][ T15] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 75.789674][ T15] usb 6-1: SerialNumber: syz [ 76.175762][ T1561] hid-rmi 0003:17EF:6085.0006: unknown main item tag 0x1 [ 76.184084][ T1561] hid-rmi 0003:17EF:6085.0006: item fetching failed at offset 1/3 [ 76.192487][ T1561] hid-rmi 0003:17EF:6085.0006: parse failed [ 76.199497][ T15] usb 6-1: 0:2 : does not exist [ 76.205745][ T1561] hid-rmi: probe of 0003:17EF:6085.0006 failed with error -22 [ 76.214727][ T15] usb 6-1: USB disconnect, device number 8 [ 76.284919][ T1561] usb 2-1: USB disconnect, device number 7 [ 77.188004][ T1813] device sit0 entered promiscuous mode [ 77.459285][ T1855] device pim6reg1 entered promiscuous mode [ 77.753796][ T1910] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.761203][ T1910] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.786834][ T1910] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.794212][ T1910] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.801679][ T1910] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.809569][ T1910] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.828334][ T1910] device bridge0 entered promiscuous mode [ 77.918719][ T1931] device pim6reg1 entered promiscuous mode [ 77.962797][ T1944] device pim6reg1 entered promiscuous mode [ 78.078389][ T1962] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.085999][ T1962] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.099123][ T1962] device bridge_slave_1 left promiscuous mode [ 78.117536][ T1962] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.148864][ T1962] device bridge_slave_0 left promiscuous mode [ 78.154922][ T1962] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.200810][ T1975] syz.3.422[1975] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 78.200864][ T1975] syz.3.422[1975] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 78.426541][ T2001] device syzkaller0 entered promiscuous mode [ 78.488180][ T2008] device pim6reg1 entered promiscuous mode [ 78.801537][ T2077] device pim6reg1 entered promiscuous mode [ 79.412775][ T2192] device wg2 entered promiscuous mode [ 79.624437][ T2235] syz.3.540[2235] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 79.624487][ T2235] syz.3.540[2235] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 79.643461][ T2235] device pim6reg1 entered promiscuous mode [ 79.837572][ T2263] device pim6reg1 entered promiscuous mode [ 80.564427][ T2358] device pim6reg1 entered promiscuous mode [ 80.717295][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 80.829224][ T2395] device pim6reg1 entered promiscuous mode [ 80.978818][ T2423] device pim6reg1 entered promiscuous mode [ 80.993719][ T2427] device pim6reg1 entered promiscuous mode [ 81.048051][ T2433] device pim6reg1 entered promiscuous mode [ 81.187713][ T2455] device pim6reg1 entered promiscuous mode [ 81.308719][ T2477] device pim6reg1 entered promiscuous mode [ 81.509472][ T2508] device pim6reg1 entered promiscuous mode [ 81.551797][ T2518] device sit0 entered promiscuous mode [ 81.807620][ T2561] device pim6reg1 entered promiscuous mode [ 82.391997][ T24] kauditd_printk_skb: 28 callbacks suppressed [ 82.392007][ T24] audit: type=1400 audit(1741330644.588:947): avc: denied { create } for pid=2678 comm="syz.2.744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 82.860218][ T2753] device pim6reg1 entered promiscuous mode [ 83.002298][ T2778] device pim6reg1 entered promiscuous mode [ 83.098616][ T2794] device pim6reg1 entered promiscuous mode [ 83.134151][ T2807] syz.5.806[2807] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 83.134204][ T2807] syz.5.806[2807] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 83.298913][ T2832] device pim6reg1 entered promiscuous mode [ 83.635901][ T2901] syz.1.850[2901] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 83.635986][ T2901] syz.1.850[2901] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 83.685481][ T24] audit: type=1400 audit(1741330645.878:948): avc: denied { ioctl } for pid=2906 comm="syz.5.853" path="socket:[23325]" dev="sockfs" ino=23325 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 83.816541][ T2922] syz.1.860[2922] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 83.816595][ T2922] syz.1.860[2922] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 83.977831][ T2946] device veth1_macvtap left promiscuous mode [ 84.003887][ T2946] device macsec0 entered promiscuous mode [ 84.027846][ T24] audit: type=1400 audit(1741330646.228:949): avc: denied { write } for pid=2959 comm="syz.2.878" name="ppp" dev="devtmpfs" ino=149 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 84.734820][ T3080] device syzkaller0 entered promiscuous mode [ 84.802829][ T3094] ÿÿÿÿÿÿ: renamed from vlan1 [ 85.384977][ T3196] ÿÿÿÿÿÿ: renamed from vlan1 [ 85.438911][ T3205] device pim6reg1 entered promiscuous mode [ 85.633286][ T3226] device pim6reg1 entered promiscuous mode [ 86.068728][ T3310] device pim6reg1 entered promiscuous mode [ 86.477220][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 86.658101][ T3412] device pim6reg1 entered promiscuous mode [ 86.907859][ T3453] device pim6reg1 entered promiscuous mode [ 87.114120][ T3497] device pim6reg1 entered promiscuous mode [ 87.650858][ T3575] device pim6reg1 entered promiscuous mode [ 87.687664][ T3582] device pim6reg1 entered promiscuous mode [ 87.881463][ T3606] device veth0_vlan left promiscuous mode [ 87.887758][ T3606] device veth0_vlan entered promiscuous mode [ 87.906408][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 87.934024][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 87.942193][ T3618] syz.1.1191[3618] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 87.942231][ T3618] syz.1.1191[3618] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 87.954956][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): ÿÿÿÿÿÿ: link becomes ready [ 88.022317][ T3612] device pim6reg1 entered promiscuous mode [ 88.161482][ T3646] syz.2.1206[3646] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 88.161536][ T3646] syz.2.1206[3646] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 88.294253][ T3658] device pim6reg1 entered promiscuous mode [ 88.342375][ T3661] device pim6reg1 entered promiscuous mode [ 88.455977][ T3677] syz.2.1221[3677] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 88.456032][ T3677] syz.2.1221[3677] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 88.694980][ T3707] syz.3.1236[3707] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 88.755998][ T3707] syz.3.1236[3707] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 88.985596][ T3750] syz.5.1254[3750] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 89.008176][ T3746] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 89.053948][ T3750] syz.5.1254[3750] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 89.054467][ T3746] EXT4-fs (loop1): 1 truncate cleaned up [ 89.081141][ T3746] EXT4-fs (loop1): mounted filesystem without journal. Opts: barrier,min_batch_time=0x0000000000000fff,inode_readahead_blks=0x0000000000000080,stripe=0x0000000000004000,resgid=0x0000000000000000,max_batch_time=0x0000000000000004,,errors=continue [ 89.140295][ T24] audit: type=1400 audit(1741330651.338:950): avc: denied { write open } for pid=3745 comm="syz.1.1256" path="/275/file1/bus" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 89.331402][ T24] audit: type=1400 audit(1741330651.528:951): avc: denied { create } for pid=3745 comm="syz.1.1256" name=E91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 89.751220][ T24] audit: type=1400 audit(1741330651.948:952): avc: denied { wake_alarm } for pid=3772 comm="syz.2.1263" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 90.002236][ T3777] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 90.044305][ T3777] ext4 filesystem being mounted at /290/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.114613][ T24] audit: type=1400 audit(1741330652.308:953): avc: denied { mounton } for pid=3776 comm="syz.0.1265" path="/290/file0/file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 90.237265][ T24] audit: type=1400 audit(1741330652.358:954): avc: denied { mount } for pid=3776 comm="syz.0.1265" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 90.305866][ T24] audit: type=1400 audit(1741330652.358:955): avc: denied { unmount } for pid=3776 comm="syz.0.1265" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 90.375390][ T3796] device pim6reg1 entered promiscuous mode [ 90.400939][ T3764] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 90.425314][ T3764] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 90.447010][ T3764] F2FS-fs (loop5): invalid crc value [ 90.470234][ T24] audit: type=1400 audit(1741330652.668:956): avc: denied { map } for pid=3803 comm="syz.2.1275" path="/dev/ashmem" dev="devtmpfs" ino=259 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 90.499582][ T3764] F2FS-fs (loop5): Found nat_bits in checkpoint [ 90.524974][ T3764] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 90.534170][ T3764] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 90.554566][ T3807] FAT-fs (loop0): Directory bread(block 64) failed [ 90.564783][ T3807] FAT-fs (loop0): Directory bread(block 65) failed [ 90.573942][ T3807] FAT-fs (loop0): Directory bread(block 66) failed [ 90.593813][ T24] audit: type=1400 audit(1741330652.788:957): avc: denied { create } for pid=3763 comm="syz.5.1260" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 90.622103][ T3807] FAT-fs (loop0): Directory bread(block 67) failed [ 90.635281][ T3742] F2FS-fs (loop3): Invalid segment/section count (33048 != 24 * 1) [ 90.644503][ T3742] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 90.651396][ T3807] FAT-fs (loop0): Directory bread(block 68) failed [ 90.660305][ T3742] F2FS-fs (loop3): invalid crc value [ 90.662279][ T3807] FAT-fs (loop0): Directory bread(block 69) failed [ 90.675708][ T3807] FAT-fs (loop0): Directory bread(block 70) failed [ 90.682502][ T3807] FAT-fs (loop0): Directory bread(block 71) failed [ 90.689555][ T3807] FAT-fs (loop0): Directory bread(block 72) failed [ 90.698228][ T3807] FAT-fs (loop0): Directory bread(block 73) failed [ 90.725786][ T3742] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 275811881701387) [ 90.762945][ T3742] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 90.773351][ T3742] F2FS-fs (loop3): Mounted with checkpoint version = 753bd00b [ 90.948926][ T3839] device pim6reg1 entered promiscuous mode [ 91.089673][ T24] audit: type=1400 audit(1741330653.288:958): avc: denied { setopt } for pid=3851 comm="syz.2.1294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 91.130713][ T24] audit: type=1400 audit(1741330653.318:959): avc: denied { shutdown } for pid=3851 comm="syz.2.1294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 91.250136][ T3843] F2FS-fs (loop5): invalid crc value [ 91.264107][ T3849] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 91.274807][ T3849] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 91.285676][ T3843] F2FS-fs (loop5): Found nat_bits in checkpoint [ 91.326413][ T3843] F2FS-fs (loop5): Start checkpoint disabled! [ 91.335956][ T3849] F2FS-fs (loop0): Found nat_bits in checkpoint [ 91.350624][ T3843] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 91.397536][ T3849] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 91.404467][ T3849] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 91.524284][ T3880] F2FS-fs (loop5): Unexpected flush for atomic writes: ino=10, npages=4075 [ 91.578805][ T3880] attempt to access beyond end of device [ 91.578805][ T3880] loop5: rw=2049, want=79872, limit=40427 [ 91.614279][ T3880] attempt to access beyond end of device [ 91.614279][ T3880] loop5: rw=2049, want=81920, limit=40427 [ 91.638526][ T3884] EXT4-fs (loop1): Mount option "data_err=abort" incompatible with ext2 [ 91.681745][ T3880] attempt to access beyond end of device [ 91.681745][ T3880] loop5: rw=2049, want=52736, limit=40427 [ 91.702622][ T3880] attempt to access beyond end of device [ 91.702622][ T3880] loop5: rw=2049, want=53248, limit=40427 [ 91.753117][ T3880] attempt to access beyond end of device [ 91.753117][ T3880] loop5: rw=2049, want=61440, limit=40427 [ 91.908306][ T3880] attempt to access beyond end of device [ 91.908306][ T3880] loop5: rw=2049, want=69096, limit=40427 [ 91.963897][ T3880] attempt to access beyond end of device [ 91.963897][ T3880] loop5: rw=2049, want=69632, limit=40427 [ 91.989585][ T3880] attempt to access beyond end of device [ 91.989585][ T3880] loop5: rw=2049, want=69640, limit=40427 [ 92.008841][ T3880] attempt to access beyond end of device [ 92.008841][ T3880] loop5: rw=2049, want=69648, limit=40427 [ 92.021209][ T3880] attempt to access beyond end of device [ 92.021209][ T3880] loop5: rw=2049, want=69656, limit=40427 [ 92.820289][ T3916] EXT4-fs error (device loop0) in ext4_do_update_inode:5303: error 27 [ 92.829622][ T3916] EXT4-fs error (device loop0): ext4_dirty_inode:6110: inode #16: comm syz.0.1316: mark_inode_dirty error [ 92.841861][ T3916] EXT4-fs error (device loop0) in ext4_do_update_inode:5303: error 27 [ 92.851239][ T3916] EXT4-fs error (device loop0): __ext4_ext_dirty:182: inode #16: comm syz.0.1316: mark_inode_dirty error [ 92.863622][ T3916] EXT4-fs error (device loop0) in ext4_do_update_inode:5303: error 27 [ 92.872454][ T3916] EXT4-fs error (device loop0) in ext4_orphan_del:3292: error 27 [ 92.881533][ T3916] EXT4-fs error (device loop0) in ext4_do_update_inode:5303: error 27 [ 92.906466][ T3916] EXT4-fs error (device loop0): ext4_truncate:4389: inode #16: comm syz.0.1316: mark_inode_dirty error [ 92.947472][ T3916] EXT4-fs error (device loop0) in ext4_orphan_cleanup:3108: error 27 [ 92.964752][ T3916] EXT4-fs (loop0): 1 truncate cleaned up [ 92.977329][ T3916] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 92.986786][ T3916] ext4 filesystem being mounted at /307/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.164714][ T3933] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1320'. [ 93.517748][ T3916] EXT4-fs error (device loop0): mb_free_blocks:1524: group 0, inode 16: block 38:freeing already freed block (bit 38); block bitmap corrupt. [ 93.677863][ T3916] EXT4-fs error (device loop0) in ext4_do_update_inode:5303: error 27 [ 93.824528][ T3941] EXT4-fs (loop0): shut down requested (2) [ 93.856171][ T7] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 93.876676][ T7] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 93.916303][ T3940] erofs: (device loop3): mounted with root inode @ nid 36. [ 93.928201][ T3946] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1325'. [ 93.943265][ T7] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started [ 93.963402][ T3940] erofs: (device loop3): erofs_read_inode: unsupported i_format 36 of nid 37 [ 93.997712][ T7] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 94.173700][ T3948] EXT4-fs (loop1): Ignoring removed orlov option [ 94.207420][ T3948] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 94.455928][ T24] kauditd_printk_skb: 16 callbacks suppressed [ 94.455939][ T24] audit: type=1400 audit(1741330656.648:969): avc: denied { connect } for pid=3966 comm="syz.2.1332" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 94.485997][ T24] audit: type=1400 audit(1741330656.668:970): avc: denied { write } for pid=3966 comm="syz.2.1332" path="socket:[27108]" dev="sockfs" ino=27108 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 94.513011][ T24] audit: type=1400 audit(1741330656.678:971): avc: denied { read } for pid=3966 comm="syz.2.1332" laddr=::1 lport=255 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 94.518537][ T3948] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue [ 94.546564][ T3960] EXT4-fs (loop5): mounted filesystem without journal. Opts: usrquota,grpjquota=,nodelalloc,,errors=continue [ 94.569753][ T3960] ext4 filesystem being mounted at /212/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.591117][ T24] audit: type=1400 audit(1741330656.768:972): avc: denied { setattr } for pid=3947 comm="syz.1.1327" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 94.624139][ T24] audit: type=1400 audit(1741330656.778:973): avc: denied { mounton } for pid=3959 comm="syz.5.1331" path="/212/file0/bus" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 94.629595][ T593] EXT4-fs warning (device loop5): ext4_dirblock_csum_set:425: inode #2: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 94.648326][ T24] audit: type=1400 audit(1741330656.778:974): avc: denied { map } for pid=3959 comm="syz.5.1331" path="/212/file0/bus" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 94.689281][ T24] audit: type=1400 audit(1741330656.828:975): avc: denied { remove_name } for pid=593 comm="syz-executor" name="file2" dev="loop5" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 94.712246][ T24] audit: type=1400 audit(1741330656.828:976): avc: denied { unlink } for pid=593 comm="syz-executor" name="file2" dev="loop5" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 94.735222][ T593] EXT4-fs warning (device loop5): ext4_dirblock_csum_set:425: inode #2: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 94.751578][ T593] EXT4-fs warning (device loop5): ext4_dirblock_csum_verify:404: inode #12: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 94.768395][ T593] EXT4-fs error (device loop5): htree_dirblock_to_tree:1063: inode #12: comm syz-executor: Directory block failed checksum [ 94.849602][ T593] EXT4-fs warning (device loop5): ext4_dirblock_csum_verify:404: inode #12: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 94.877214][ T593] EXT4-fs error (device loop5): ext4_empty_dir:3077: inode #12: comm syz-executor: Directory block failed checksum [ 94.905583][ T593] EXT4-fs warning (device loop5): ext4_dirblock_csum_verify:404: inode #12: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 94.926260][ T593] EXT4-fs error (device loop5): htree_dirblock_to_tree:1063: inode #12: comm syz-executor: Directory block failed checksum [ 94.946650][ T24] audit: type=1400 audit(1741330657.048:977): avc: denied { rmdir } for pid=593 comm="syz-executor" name="file0" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 94.980944][ T593] EXT4-fs warning (device loop5): ext4_dirblock_csum_verify:404: inode #12: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 95.033154][ T3986] EXT4-fs (loop2): Unrecognized mount option "fsname=$}^" or missing value [ 95.069811][ T3990] FAT-fs (loop1): Directory bread(block 64) failed [ 95.081995][ T593] EXT4-fs error (device loop5): ext4_empty_dir:3077: inode #12: comm syz-executor: Directory block failed checksum [ 95.085392][ T24] audit: type=1400 audit(1741330657.178:978): avc: denied { connect } for pid=3984 comm="syz.2.1340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 95.095685][ T593] EXT4-fs warning (device loop5): ext4_dirblock_csum_verify:404: inode #12: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 95.127277][ T3990] FAT-fs (loop1): Directory bread(block 65) failed [ 95.133725][ T593] EXT4-fs error (device loop5): htree_dirblock_to_tree:1063: inode #12: comm syz-executor: Directory block failed checksum [ 95.153612][ T593] EXT4-fs warning (device loop5): ext4_dirblock_csum_verify:404: inode #12: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 95.170188][ T593] EXT4-fs error (device loop5): ext4_empty_dir:3077: inode #12: comm syz-executor: Directory block failed checksum [ 95.183039][ T593] EXT4-fs warning (device loop5): ext4_dirblock_csum_verify:404: inode #12: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 95.187338][ T3990] FAT-fs (loop1): Directory bread(block 66) failed [ 95.199949][ T593] EXT4-fs error (device loop5): htree_dirblock_to_tree:1063: inode #12: comm syz-executor: Directory block failed checksum [ 95.200272][ T593] EXT4-fs warning (device loop5): ext4_dirblock_csum_verify:404: inode #12: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 95.236809][ T593] EXT4-fs error (device loop5): ext4_empty_dir:3077: inode #12: comm syz-executor: Directory block failed checksum [ 95.243946][ T3990] FAT-fs (loop1): Directory bread(block 67) failed [ 95.251820][ T593] EXT4-fs error (device loop5): htree_dirblock_to_tree:1063: inode #12: comm syz-executor: Directory block failed checksum [ 95.266177][ T3990] FAT-fs (loop1): Directory bread(block 68) failed [ 95.275732][ T3990] FAT-fs (loop1): Directory bread(block 69) failed [ 95.275965][ T593] EXT4-fs error (device loop5): ext4_empty_dir:3077: inode #12: comm syz-executor: Directory block failed checksum [ 95.295715][ T3990] FAT-fs (loop1): Directory bread(block 70) failed [ 95.304288][ T3990] FAT-fs (loop1): Directory bread(block 71) failed [ 95.321757][ T3973] F2FS-fs (loop3): invalid crc value [ 95.348032][ T3990] FAT-fs (loop1): Directory bread(block 72) failed [ 95.367772][ T3990] FAT-fs (loop1): Directory bread(block 73) failed [ 95.396332][ T3973] F2FS-fs (loop3): Found nat_bits in checkpoint [ 95.437798][ T3973] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 95.547519][ T4000] EXT4-fs (loop0): Test dummy encryption mode enabled [ 95.585165][ T4000] EXT4-fs (loop0): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000002,noquota,dioread_nolock,test_dummy_encryption,nobarrier,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue [ 95.588074][ T4015] SELinux: policydb table sizes (0,0) do not match mine (6,7) [ 95.617421][ T4015] SELinux: failed to load policy [ 95.625650][ T4007] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.642075][ T4007] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.667580][ T4007] device bridge_slave_0 entered promiscuous mode [ 95.698198][ T4007] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.714578][ T4007] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.738590][ T4007] device bridge_slave_1 entered promiscuous mode [ 96.075919][ T4007] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.084115][ T4007] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.092292][ T4007] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.101270][ T4007] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.135292][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 96.144075][ T4030] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 96.154099][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.162463][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.177600][ T550] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 96.187930][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 96.196709][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.204167][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.212627][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 96.222845][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.230801][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.256132][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 96.267748][ T4030] EXT4-fs error (device loop3): __ext4_get_inode_loc:4437: comm syz.3.1352: Invalid inode table block 0 in block_group 0 [ 96.282019][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 96.297832][ T288] EXT4-fs error (device loop3): ext4_map_blocks:629: inode #2: block 16: comm syz-executor: lblock 0 mapped to illegal pblock 16 (length 1) [ 96.315991][ T288] EXT4-fs warning (device loop3): htree_dirblock_to_tree:1063: inode #2: lblock 0: comm syz-executor: error -117 reading directory block [ 96.337241][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 96.347148][ T288] EXT4-fs error (device loop3): __ext4_get_inode_loc:4437: comm syz-executor: Invalid inode table block 0 in block_group 0 [ 96.365211][ T288] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5900: Corrupt filesystem [ 96.376333][ T288] EXT4-fs error (device loop3): ext4_dirty_inode:6110: inode #2: comm syz-executor: mark_inode_dirty error [ 96.389454][ T9] EXT4-fs error (device loop3): __ext4_get_inode_loc:4437: comm kworker/u4:1: Invalid inode table block 0 in block_group 0 [ 96.397299][ T2090] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 96.402861][ T9] EXT4-fs error (device loop3): __ext4_get_inode_loc:4437: comm kworker/u4:1: Invalid inode table block 0 in block_group 0 [ 96.413054][ T4007] device veth0_vlan entered promiscuous mode [ 96.431193][ T1504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 96.442979][ T1504] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 96.452269][ T1504] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 96.460397][ T550] usb 2-1: Using ep0 maxpacket: 8 [ 96.481639][ T4007] device veth1_macvtap entered promiscuous mode [ 96.493067][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 96.502103][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 96.511043][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 96.527894][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 96.536735][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 96.545806][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 96.554696][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 96.577350][ T550] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.599405][ T550] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 96.609728][ T550] usb 2-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 96.620148][ T550] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.632491][ T550] usb 2-1: config 0 descriptor?? [ 96.638578][ T305] device veth0_vlan left promiscuous mode [ 96.767073][ T4037] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.775010][ T4037] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.782944][ T4037] device bridge_slave_0 entered promiscuous mode [ 96.787308][ T2090] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 96.791049][ T4037] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.809407][ T4037] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.818039][ T4037] device bridge_slave_1 entered promiscuous mode [ 96.820720][ T2090] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 96.845173][ T2090] usb 3-1: config 0 interface 0 has no altsetting 0 [ 96.853881][ T2090] usb 3-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 96.863983][ T2090] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.878007][ T2090] usb 3-1: config 0 descriptor?? [ 96.885029][ T4043] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.894754][ T4043] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.903792][ T4043] device bridge_slave_0 entered promiscuous mode [ 96.914140][ T4043] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.921414][ T4043] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.931763][ T4043] device bridge_slave_1 entered promiscuous mode [ 97.001441][ T4037] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.009318][ T4037] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.017099][ T4037] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.026935][ T4037] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.039767][ T4043] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.047210][ T4043] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.055049][ T4043] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.063116][ T4043] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.127776][ T4043] device veth0_vlan entered promiscuous mode [ 97.141925][ T1504] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.153268][ T1504] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.161531][ T1504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 97.162032][ T550] smartjoyplus 0003:6666:8804.0007: item fetching failed at offset 3/7 [ 97.169598][ T1504] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 97.180181][ T550] smartjoyplus 0003:6666:8804.0007: parse failed [ 97.193440][ T1504] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 97.193807][ T550] smartjoyplus: probe of 0003:6666:8804.0007 failed with error -22 [ 97.213177][ T1504] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 97.222271][ T1504] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 97.231593][ T1504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 97.242696][ T1504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 97.253035][ T1504] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 97.263440][ T1504] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 97.328550][ T1504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 97.351000][ T4043] device veth1_macvtap entered promiscuous mode [ 97.371797][ T2090] hid-steam 0003:28DE:1102.0008: unknown main item tag 0x0 [ 97.383418][ T2090] hid-steam 0003:28DE:1102.0008: unknown main item tag 0x0 [ 97.393368][ T2090] hid-steam 0003:28DE:1102.0008: : USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.2-1/input0 [ 97.411575][ T550] usb 2-1: USB disconnect, device number 8 [ 97.411779][ T2090] hid-steam 0003:28DE:1102.0009: unknown main item tag 0x0 [ 97.430563][ T2090] hid-steam 0003:28DE:1102.0009: unknown main item tag 0x0 [ 97.459113][ T2090] hid-steam 0003:28DE:1102.0009: hidraw0: USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.2-1/input0 [ 97.547733][ T2090] hid-steam 0003:28DE:1102.0008: Steam Controller 'XXXXXXXXXX' connected [ 97.561748][ T2090] input: Steam Controller as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:28DE:1102.0008/input/input6 [ 97.565429][ T1504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 97.585950][ T1504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 97.586483][ T4032] input: Steam Controller as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:28DE:1102.0008/input/input7 [ 97.609494][ T1504] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 97.629487][ T2090] usb 3-1: USB disconnect, device number 16 [ 97.637054][ T1504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 97.698821][ T1504] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 97.709763][ T1504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 97.709988][ T2090] hid-steam 0003:28DE:1102.0008: Steam Controller 'XXXXXXXXXX' disconnected [ 97.754212][ T442] ================================================================== [ 97.763100][ T442] BUG: KASAN: use-after-free in mutex_lock+0x98/0x110 [ 97.771524][ T442] Write of size 8 at addr ffff888114f9b840 by task udevd/442 [ 97.779751][ T442] [ 97.782098][ T442] CPU: 0 PID: 442 Comm: udevd Not tainted 5.10.234-syzkaller-00023-g3f5f2283d684 #0 [ 97.793902][ T442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 97.812980][ T442] Call Trace: [ 97.816366][ T442] dump_stack_lvl+0x1e2/0x24b [ 97.821629][ T442] ? bfq_pos_tree_add_move+0x43b/0x43b [ 97.829114][ T442] ? panic+0x812/0x812 [ 97.834498][ T442] ? exit_to_user_mode_loop+0xbf/0xd0 [ 97.840310][ T442] print_address_description+0x81/0x3b0 [ 97.846516][ T442] kasan_report+0x179/0x1c0 [ 97.851249][ T442] ? mutex_lock+0x98/0x110 [ 97.855962][ T442] ? mutex_lock+0x98/0x110 [ 97.860842][ T442] kasan_check_range+0x293/0x2a0 [ 97.867741][ T442] __kasan_check_write+0x14/0x20 [ 97.872898][ T442] mutex_lock+0x98/0x110 [ 97.878141][ T442] ? mutex_trylock+0xa0/0xa0 [ 97.882688][ T442] ? kfree+0xc3/0x270 [ 97.887699][ T442] steam_input_close+0x90/0x1e0 [ 97.892850][ T442] ? steam_input_open+0x1a0/0x1a0 [ 97.898052][ T442] ? __kasan_check_write+0x14/0x20 [ 97.903342][ T442] ? mutex_lock+0xa5/0x110 [ 97.908129][ T442] ? mutex_trylock+0xa0/0xa0 [ 97.913852][ T442] ? steam_input_open+0x1a0/0x1a0 [ 97.919167][ T442] input_close_device+0x269/0x300 [ 97.925610][ T442] evdev_release+0x7be/0x850 [ 97.925619][ T442] ? evdev_open+0x5c0/0x5c0 [ 97.925629][ T442] __fput+0x33d/0x7b0 [ 97.925647][ T442] ____fput+0x15/0x20 [ 97.944341][ T442] task_work_run+0x129/0x190 [ 97.949770][ T442] exit_to_user_mode_loop+0xbf/0xd0 [ 97.955756][ T442] syscall_exit_to_user_mode+0xa2/0x1a0 [ 97.961275][ T442] do_syscall_64+0x40/0x70 [ 97.965833][ T442] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 97.972634][ T442] RIP: 0033:0x7fdeb37a90a8 [ 97.977935][ T442] Code: 48 8b 05 83 9d 0d 00 64 c7 00 16 00 00 00 83 c8 ff 48 83 c4 20 5b c3 64 8b 04 25 18 00 00 00 85 c0 75 20 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 76 5b 48 8b 15 51 9d 0d 00 f7 d8 64 89 02 48 83 [ 98.001449][ T442] RSP: 002b:00007fff531a29e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 98.011066][ T442] RAX: 0000000000000000 RBX: 00007fdeb367dae0 RCX: 00007fdeb37a90a8 [ 98.020376][ T442] RDX: 00007fff531a2b1c RSI: 0000000000000001 RDI: 0000000000000008 [ 98.029295][ T442] RBP: 0000556b444e27e0 R08: 0000556b444f15b0 R09: 00007fdeb3883b10 [ 98.038003][ T442] R10: 0000000000000010 R11: 0000000000000246 R12: 0000000000000002 [ 98.047560][ T442] R13: 0000000000000000 R14: 00007fff531a2b1c R15: 00007fff531a2b10 [ 98.056463][ T442] [ 98.058919][ T442] Allocated by task 0: [ 98.063041][ T442] (stack is not available) [ 98.067881][ T442] [ 98.070514][ T442] Freed by task 2090: [ 98.074706][ T442] kasan_set_track+0x4b/0x70 [ 98.079844][ T442] kasan_set_free_info+0x23/0x40 [ 98.085046][ T442] ____kasan_slab_free+0x121/0x160 [ 98.090188][ T442] __kasan_slab_free+0x11/0x20 [ 98.095241][ T442] slab_free_freelist_hook+0xc0/0x190 [ 98.102267][ T442] kfree+0xc3/0x270 [ 98.106404][ T442] release_nodes+0x873/0x8f0 [ 98.110926][ T442] devres_release_all+0x7b/0xa0 [ 98.115894][ T442] device_release_driver_internal+0x515/0x7c0 [ 98.122045][ T442] device_release_driver+0x19/0x20 [ 98.127913][ T442] bus_remove_device+0x2f8/0x360 [ 98.133072][ T442] device_del+0x68b/0xf00 [ 98.137426][ T442] hid_destroy_device+0x68/0x110 [ 98.142835][ T442] usbhid_disconnect+0x9e/0xc0 [ 98.148469][ T442] usb_unbind_interface+0x1fa/0x8c0 [ 98.154442][ T442] device_release_driver_internal+0x506/0x7c0 [ 98.160574][ T442] device_release_driver+0x19/0x20 [ 98.166018][ T442] bus_remove_device+0x2f8/0x360 [ 98.171180][ T442] device_del+0x68b/0xf00 [ 98.175595][ T442] usb_disable_device+0x380/0x720 [ 98.180607][ T442] usb_disconnect+0x32a/0x890 [ 98.185556][ T442] hub_event+0x1e73/0x47c0 [ 98.189872][ T442] process_one_work+0x6dc/0xbd0 [ 98.194779][ T442] worker_thread+0xe18/0x1510 [ 98.199377][ T442] kthread+0x34b/0x3d0 [ 98.203277][ T442] ret_from_fork+0x1f/0x30 [ 98.207632][ T442] [ 98.209892][ T442] The buggy address belongs to the object at ffff888114f9b800 [ 98.209892][ T442] which belongs to the cache kmalloc-512 of size 512 [ 98.224314][ T442] The buggy address is located 64 bytes inside of [ 98.224314][ T442] 512-byte region [ffff888114f9b800, ffff888114f9ba00) [ 98.237919][ T442] The buggy address belongs to the page: [ 98.244295][ T442] page:ffffea000453e600 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x114f98 [ 98.255113][ T442] head:ffffea000453e600 order:2 compound_mapcount:0 compound_pincount:0 [ 98.264120][ T442] flags: 0x4000000000010200(slab|head) [ 98.270156][ T442] raw: 4000000000010200 dead000000000100 dead000000000122 ffff888100043080 [ 98.279187][ T442] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 98.289421][ T442] page dumped because: kasan: bad access detected [ 98.296494][ T442] page_owner tracks the page as allocated [ 98.302128][ T442] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x1d2a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 305, ts 97382706930, free_ts 97322426840 [ 98.325049][ T442] prep_new_page+0x166/0x180 [ 98.329804][ T442] get_page_from_freelist+0x2d8c/0x2f30 [ 98.335776][ T442] __alloc_pages_nodemask+0x435/0xaf0 [ 98.342026][ T442] new_slab+0x80/0x400 [ 98.346328][ T442] ___slab_alloc+0x302/0x4b0 [ 98.351221][ T442] __slab_alloc+0x63/0xa0 [ 98.355493][ T442] __kmalloc_track_caller+0x1f8/0x320 [ 98.361161][ T442] __alloc_skb+0xbc/0x510 [ 98.365498][ T442] __ipv6_ifa_notify+0x2e1/0x11c0 [ 98.370822][ T442] addrconf_ifdown+0xe14/0x1a60 [ 98.375712][ T442] addrconf_notify+0x378/0xe90 [ 98.380387][ T442] raw_notifier_call_chain+0x8c/0xf0 [ 98.385568][ T442] dev_close_many+0x37f/0x530 [ 98.390529][ T442] unregister_netdevice_many+0x492/0x17d0 [ 98.396551][ T442] ip6_tnl_exit_batch_net+0x3c4/0x410 [ 98.402683][ T442] cleanup_net+0x6e9/0xcb0 [ 98.407200][ T442] page last free stack trace: [ 98.412061][ T442] __free_pages_ok+0x82c/0x850 [ 98.417539][ T442] free_the_page+0x76/0x370 [ 98.421949][ T442] __free_pages+0x67/0xc0 [ 98.426552][ T442] __free_slab+0xcf/0x190 [ 98.430684][ T442] unfreeze_partials+0x15e/0x190 [ 98.436388][ T442] put_cpu_partial+0xbf/0x180 [ 98.440997][ T442] __slab_free+0x2c8/0x3a0 [ 98.446720][ T442] ___cache_free+0x111/0x130 [ 98.451224][ T442] qlink_free+0x50/0x90 [ 98.455665][ T442] qlist_free_all+0x47/0xb0 [ 98.460273][ T442] kasan_quarantine_reduce+0x15a/0x170 [ 98.466220][ T442] __kasan_slab_alloc+0x2f/0xe0 [ 98.471083][ T442] slab_post_alloc_hook+0x61/0x2f0 [ 98.476732][ T442] kmem_cache_alloc+0x168/0x2e0 [ 98.481907][ T442] __alloc_skb+0x80/0x510 [ 98.487364][ T442] inet_netconf_notify_devconf+0x173/0x220 [ 98.493053][ T442] [ 98.495316][ T442] Memory state around the buggy address: [ 98.501037][ T442] ffff888114f9b700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 98.509264][ T442] ffff888114f9b780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 98.517741][ T442] >ffff888114f9b800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 98.526428][ T442] ^ [ 98.533449][ T442] ffff888114f9b880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 98.542067][ T442] ffff888114f9b900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 98.550790][ T442] ================================================================== [ 98.558690][ T442] Disabling lock debugging due to kernel taint [ 98.627410][ T1504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 98.672405][ T1504] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 98.685955][ T442] hid 0003:28DE:1102.0008: No HID_FEATURE_REPORT submitted - nothing to read [ 98.696003][ T442] hid 0003:28DE:1102.0008: No HID_FEATURE_REPORT submitted - nothing to read [ 98.706053][ T442] hid 0003:28DE:1102.0008: No HID_FEATURE_REPORT submitted - nothing to read [ 98.716641][ T1504] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.724812][ T1504] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.736373][ T80] hid 0003:28DE:1102.0008: No HID_FEATURE_REPORT submitted - nothing to read [ 98.751097][ T80] hid 0003:28DE:1102.0008: No HID_FEATURE_REPORT submitted - nothing to read [ 98.767467][ T80] hid 0003:28DE:1102.0008: No HID_FEATURE_REPORT submitted - nothing to read [ 98.777431][ T80] hid 0003:28DE:1102.0008: No HID_FEATURE_REPORT submitted - nothing to read [ 98.787688][ T80] hid 0003:28DE:1102.0008: No HID_FEATURE_REPORT submitted - nothing to read [ 99.052864][ T305] device bridge_slave_1 left promiscuous mode [ 99.059494][ T305] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.068065][ T305] device bridge_slave_0 left promiscuous mode [ 99.077062][ T305] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.088194][ T305] device bridge_slave_1 left promiscuous mode [ 99.094676][ T305] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.104059][ T305] device bridge_slave_0 left promiscuous mode [ 99.111567][ T305] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.120328][ T305] device veth1_macvtap left promiscuous mode [ 99.128321][ T305] device veth1_macvtap left promiscuous mode [ 99.137989][ T305] device veth0_vlan left promiscuous mode [ 99.998801][ T305] tipc: Left network mode [ 100.719633][ T305] device bridge_slave_1 left promiscuous mode [ 100.727109][ T305] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.735609][ T305] device bridge_slave_0 left promiscuous mode [ 100.741950][ T305] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.754421][ T305] device bridge_slave_1 left promiscuous mode [ 100.761471][ T305] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.771287][ T305] device bridge_slave_0 left promiscuous mode [ 100.778722][ T305] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.788387][ T305] device bridge_slave_1 left promiscuous mode [ 100.795806][ T305] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.803689][ T305] device bridge_slave_0 left promiscuous mode [ 100.812657][ T305] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.822944][ T305] device bridge_slave_1 left promiscuous mode [ 100.829630][ T305] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.837036][ T305] device bridge_slave_0 left promiscuous mode [ 100.843533][ T305] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.852154][ T305] device veth1_macvtap left promiscuous mode [ 100.859214][ T305] device veth0_vlan left promiscuous mode [ 100.865042][ T305] device veth1_macvtap left promiscuous mode [ 100.871877][ T305] device veth0_vlan left promiscuous mode [ 100.878042][ T305] device veth1_macvtap left promiscuous mode [ 100.884152][ T305] device veth1_macvtap left promiscuous mode [ 100.890102][ T305] device veth0_vlan left promiscuous mode