last executing test programs: 2m23.692500268s ago: executing program 32 (id=27): r0 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x16, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10001}, [@btf_id={0x18, 0x8, 0x3, 0x0, 0x1}, @jmp={0x5, 0x0, 0x3, 0x9, 0xa, 0xfffffffffffffffc, 0x8}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @tail_call, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xf}, @jmp={0x5, 0x0, 0x1, 0x0, 0x2, 0xfffffffffffffff4}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffd}, @exit, @map_fd={0x18, 0xc76f608d3150787d}]}, &(0x7f0000000140)='syzkaller\x00', 0x1400, 0x22, &(0x7f0000000180)=""/34, 0x40f00, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x0, 0x3, 0x75c46280, 0x3}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000000240)=[0xffffffffffffffff], &(0x7f0000000280)=[{0x2, 0x5, 0x6, 0x1}, {0x4, 0x4, 0xb, 0x9}, {0x2, 0x3, 0xa, 0x2}, {0x0, 0x1, 0x3, 0x7}, {0x1, 0x3, 0x4, 0x3}, {0x2, 0x4, 0x6, 0x7}, {0x0, 0x4, 0x5, 0xb}, {0x5, 0x1, 0x7, 0x4}, {0x2, 0x2, 0x5, 0x9}], 0x10, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='xen_cpu_set_ldt\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) write$selinux_access(r0, &(0x7f0000000440)={'system_u:object_r:systemd_passwd_agent_exec_t:s0', 0x20, '/usr/sbin/ntpd', 0x20, 0x9}, 0x55) faccessat2(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x0, 0x100) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@filter={'filter\x00', 0xe, 0x4, 0x4f8, 0xffffffff, 0x0, 0x0, 0x358, 0xffffffff, 0xffffffff, 0x428, 0x428, 0x428, 0xffffffff, 0x4, &(0x7f0000000500), {[{{@uncond, 0x0, 0x210, 0x238, 0x0, {}, [@common=@rt={{0x138}, {0x2, [0x1, 0x1], 0x8d, 0x10, 0x1, [@private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @empty}, @mcast1, @mcast1, @dev={0xfe, 0x80, '\x00', 0x2a}, @ipv4={'\x00', '\xff\xff', @multicast2}, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast2, @private1, @loopback, @private1, @mcast2, @private2={0xfc, 0x2, '\x00', 0x1}, @private1, @empty], 0x10}}, @common=@ah={{0x30}, {[0x4d2, 0x4d6], 0x7ff, 0x4}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@ipv6header={{0x28}, {0xc6, 0x5, 0x1}}, @common=@mh={{0x28}, {"d1e0", 0x1}}]}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x5}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x1a}, @empty, [0xff000000, 0x0, 0xffffff00], [0xffffffff, 0xffffffff, 0xffffffff, 0xff000000], 'ip6gretap0\x00', 'batadv_slave_0\x00', {}, {0xff}, 0x11, 0x4, 0x0, 0x40}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x558) ptrace$ARCH_MAP_VDSO_32(0x1e, 0x0, 0x7598b2bd, 0x2002) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000b00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r3, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x80040000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x44, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1e}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xb}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x19}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x22}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xb}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000044}, 0x80) r5 = accept$inet(0xffffffffffffffff, &(0x7f0000000c40)={0x2, 0x0, @multicast1}, &(0x7f0000000c80)=0x10) bind$inet(r5, &(0x7f0000000cc0)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10) r6 = socket$inet6(0xa, 0x80000, 0x1) r7 = fcntl$dupfd(r2, 0x0, r6) sendmsg$NFT_MSG_GETCHAIN(r7, &(0x7f0000000f40)={&(0x7f0000000d00), 0xc, &(0x7f0000000f00)={&(0x7f0000000d40)={0x1bc, 0x4, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_CHAIN_USERDATA={0xb4, 0xc, "67ba2790780a031806eadf03e159062c7f9ed377a9cba955a80265051b585ac7872690e593e43303424aec66c7b7332f8862e762e8da3088a61f2e9e912ad2c626d998e7c3490c2847695d5c376a092dd16563d065a9b74f093977e52e3cdbd594c6950059396fdecb8e9a7e96c06d513a20f5ebdb35bcf2432df53ad85c24bc78f75220264de70fea0513520d9000976668003d08873a44c618b3f0b53609dfc6ccc550061938b61e525ed2fb09ea11"}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_USERDATA={0xb7, 0xc, "c3c69b1a9e807062aafbf04a2933613456b257f1f73b7c7b08f765535129451628b350bb00835d0cf7d9e6495ec57435ffce08f5c3e0a1d1b2d73562312e8ded5b7459feff6afaf387243394de27fd11505d9acc071353e1e714ca6c71ca94331094aeedccc4a43f155ee49d239bc831de2c4ba49f785258fccd0bfbe0c77bb51b0e0ddc714e8fd865d1a948d9904bb410d83d32e953b9589155ca9c75974f2ffe44f662223a4ba0b6dc119fe5165b936b2241"}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x80}, 0x4001) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) writev(r8, &(0x7f00000011c0)=[{&(0x7f0000000f80)="3015ebe866f6861f2951217c9d220f57f7c49f235e9f985c61c998d21bcb740e7a6aa77c2fd4a54a76af38ad3906491de64e204beef38e45c641aff903175aaec1b02e443a9220e63de97305db99516de23ef53b385487c099f3f1783b9fdf9a9e93e7ec3518b2d23d6c07cd2715b17a13b65e5d478795d5a32864a43af958308664422a8c008ae96fb8945587eb34b81f62fda30d7acb12383277233e4cc901c77761a3e22c80d17469d56398df746c4905ac8b237cb17cc70b6dbb4b3a1c406b85524394c6eec12916bc88fbd2336400e839e64e74b7cad52b6e4ab7466dd80a220ce14675bc805aee5b96", 0xec}, {&(0x7f0000001080)="2f5757aac06ffd18cfe6b627d5817dcb35349af916fdeac6d6ca7aa32a83604a8c391724d6ed7a4993af2ae887e49e6018de3209663b12904e936ba85f9fe11b7b27b221c5ce8ea6a05360c10e24b73d0e1c752b1aa9d7a7b5e976d30a54d6f475a790cf12f5f5c446adf676a027d13116ae6e1226641cb83ee5887d42c45dcb74581f1f1d1429dc", 0x88}, {&(0x7f0000001140)="0a883e8ac0ac6b5ddf92be7cde472c941fa021b5025095d9b66b70a2293e392ab817b394e30d9f69c0c21843799a1a2df658c50ffea1372aa88f31d087f52a7269405e8c6698a0dee4d48835cc0e169313800e2d21300bd8", 0x58}], 0x3) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001200), 0x0, 0x0) ppoll(&(0x7f0000001240)=[{r9, 0x8600}], 0x1, &(0x7f0000001280)={0x0, 0x989680}, &(0x7f00000012c0)={[0x6]}, 0x8) sendmsg$NFT_MSG_GETTABLE(r7, &(0x7f00000015c0)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001580)={&(0x7f0000001340)={0x238, 0x1, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0x77, 0x6, "cae775ff04471c94845e08b4ef76eec149ee7db61b15ef4521a6a745fc9c9b02e034bbc2248a937836097b14ed98ce7313c3362829da4e9271c6fc791a077e5b990d386c46deff9c4ef1b9735228a506438f88a7a7fb8ba9ce854dc1a589dc8e23b87b63c300c41df1fe91896627ad3094b105"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_USERDATA={0x6d, 0x6, "463b046c6b6c61f308f44541194f7a928b168d9d093267120ab245a9e500ddcd0534639af88899f66760852b55b7bda0d5fc7ad4ebb5ab1a7aa65313a35754ee112189b598b0a887160ed7bf4cb0e94bba9742733413912f09ede298867df90f8a922f2b058370a556"}, @NFTA_TABLE_USERDATA={0x3f, 0x6, "9ba59ec343c7bab3eab60e06430c6c7e107740c586417e47fb3cae6a66b0520ec417815558b2234f075ce4b4cd83574b0c85b0defb7a29b393f9ff"}, @NFTA_TABLE_USERDATA={0xb9, 0x6, "e9b42afacc96c31d26a653a62d02aa1b5de6e3f9acf00b54d0d713e6c3d7365d9e4d5765e31bb0345ebb0915d0dfea9b0b4e698fc21901bc533b2b07855c101e6bba7e1b16bc72d82e90f9a73b653704561b59037cb7f2814bb9732546a0ea71f31c20ff4f6f9271b408595cc814acb90ce56319300849345bd4dbb688d2f8789da3f884ef329646445ab48a83cbb6680ffbe318d7db25529d70ea6c2dd75f28050be2d3983ad0b41aac6ecc03cd61346229104456"}]}, 0x238}, 0x1, 0x0, 0x0, 0x84}, 0x8000) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000001600)=0x0) fcntl$lock(r7, 0x6, &(0x7f0000001640)={0x0, 0xc, 0xb8c6, 0x4, r10}) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r11, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x34, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x34}}, 0x40) sched_setaffinity(r10, 0x8, &(0x7f0000001780)=0x1) r12 = accept4$unix(r7, &(0x7f00000017c0), &(0x7f0000001840)=0x6e, 0x0) connect$unix(r12, &(0x7f0000001880)=@abs={0x0, 0x0, 0x4e24}, 0x6e) inotify_init1(0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001d80)={&(0x7f0000001900)='ext4_da_write_pages\x00', 0xffffffffffffffff, 0x0, 0x68e}, 0x18) 2m20.942364119s ago: executing program 33 (id=35): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0xffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) syz_emit_ethernet(0x76, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0) (async) syz_emit_ethernet(0x76, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0) 1m56.631607298s ago: executing program 34 (id=177): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f00000000c0)=ANY=[@ANYBLOB="020082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0xd, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x8}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000240)={0x0, 0x14, 0x2, 'HG'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m32.830567748s ago: executing program 35 (id=243): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000300)={[{@test_dummy_encryption}], [{@appraise_type}, {@smackfshat}, {@subj_type={'subj_type', 0x3d, '\x80\xb1\x92P\x83*\x14X\x97\xb2\xd1N\xa7\x85\xa6Q\x95e\xb0\x17\x81\x8fG\x93\xc2\xed\xbf#\xfe\xc4\xe1\x8cN\xd7\xa60xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6(0xa, 0x3, 0x6) pread64(r2, &(0x7f0000000200)=""/95, 0x5f, 0x3) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e2a, 0xfffffffc, @mcast2, 0x2}, 0x1c) io_setup(0x58, &(0x7f00000001c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000080)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) write(r1, 0x0, 0x0) recvmmsg$unix(r1, &(0x7f00000031c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x180, 0x0) connect$unix(r2, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) 1m13.276684983s ago: executing program 6 (id=455): bpf$MAP_CREATE(0x0, 0x0, 0xfffffffffffffd7e) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x549, &(0x7f0000001800)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) ioctl$F2FS_IOC_DEFRAGMENT(0xffffffffffffffff, 0xc010f508, &(0x7f0000000180)={0x4, 0x8000000000000000}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, &(0x7f0000000000)=0x10, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f00000001c0)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0x69df}, {0x28, 0x0, 0x0, 0x6ebf}, {0x6}]}, 0x10) 1m12.351685711s ago: executing program 6 (id=462): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x17ef, 0x6047, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) gettid() (async) gettid() 1m10.132863753s ago: executing program 6 (id=474): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe15, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8, 0xffffffffffffff4b, 0x0}}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b6f100007000000d7c9000009000000010000007117cd01bcb4889e0bc2f171ff7cf97f4a50c615448eeb7f25287eee4589f5ceb10faabc9e1ff338dc7ea7b8055e8c9309a031066a1295640cf6d75ae4f895c2eb43d0ddd34973fcf22a6d185dd7d4b7663445c1029a4d0dd9a33199ec67cd6c6845fc407a9e649ab43e6921268ac98175fce48ce8ef1b3b99dde3a484437780171d8805134316c330823ec607815eb73ac3dac9e6f1528c1921975899dbf6b3efe1c02dfe2de52a77fe5c80049ce013278a77aa7567", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYRESDEC=r0], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r1, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYRES32=r4], &(0x7f0000000200)='GPL\x00', 0x3804, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r6}, 0x10) syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) open(&(0x7f00000002c0)='./file0/file0\x00', 0x141840, 0x0) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, 0x0) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) open(&(0x7f0000000200)='./file0/file0\x00', 0x0, 0x0) pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000380)='./file0\x00') unshare(0x46060480) 1m10.068518873s ago: executing program 6 (id=475): r0 = getpid() syz_pidfd_open(r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) futex(&(0x7f0000000000)=0x2, 0xc, 0x0, &(0x7f00000001c0), &(0x7f0000000280)=0x2, 0x1) 1m9.933317693s ago: executing program 6 (id=477): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x1432ca, 0x0, 0x0, 0x0, &(0x7f00000002c0)) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, 0x0) ioctl$HIDIOCGUSAGE(r5, 0xc018480b, &(0x7f00000002c0)={0x3, 0x3, 0x1, 0x1, 0x80000002, 0x3}) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}}) statfs(&(0x7f0000000380)='./file0\x00', 0x0) 1m9.897032123s ago: executing program 36 (id=477): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x1432ca, 0x0, 0x0, 0x0, &(0x7f00000002c0)) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, 0x0) ioctl$HIDIOCGUSAGE(r5, 0xc018480b, &(0x7f00000002c0)={0x3, 0x3, 0x1, 0x1, 0x80000002, 0x3}) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}}) statfs(&(0x7f0000000380)='./file0\x00', 0x0) 43.223498984s ago: executing program 3 (id=653): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10) r4 = socket(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000800)=@newqdisc={0x50, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x20, 0x2, {{}, [@TCA_NETEM_DELAY_DIST={0x4}]}}}]}, 0x50}}, 0x0) write$UHID_INPUT(r1, &(0x7f0000001040)={0xe, {"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", 0x1000}}, 0x1006) mkdir(&(0x7f0000000000)='./file0\x00', 0x4) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) close(0x3) r8 = epoll_create(0x5) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x3) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = socket(0x22, 0x3, 0x0) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r9) sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="20002bbd7000fddbdf250e0000000c0001800800080071000000080004000600000008000400090000002400038008000500ac1414bb080005000a010100080003000165e70008000500ac1414aa150c438355b302eff377474d1ee747bb43988b5d9e833731df813e8c825a6f52593267589a03a85b6de9af631f3b716fda01293304b62f1d8f0b442000fabe0df6022b849b6f720222c50abb2433158a9ff238bccba923f7289ae1d674dfeb48f3b67c1a30db4b2883c6500247d4bd1200f1ffd12f71ce879f41be9bc9c087a6393b4b24b5098c8f953c28704ae2fc67252dc8abe9872098df2c9ded84c2357d7dfa3775fcc81a03b15e8695a3aaa92c"], 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x20044000) 41.92963875s ago: executing program 3 (id=658): r0 = syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1900000004000000040000000500000000000000", @ANYRES32, @ANYBLOB="000000007e969781ee7387fc5d03658d52ca00000000e9ffffff00", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xfffffff8, 0xfffffffffffffeec, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x200020, 0x0, 0x5, 0x0, &(0x7f0000000000)) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000140)='./file0\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000200), 0x208e24b) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r5, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="180000006800090300000000000000000a000000000000000dce"], 0x18}}, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r7}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0700000000000000080000000800000005000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0300"/28], 0x50) r8 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001580), 0x0, 0x0) ioctl$KDADDIO(r8, 0x4b34, 0xffffffffffffff7f) pread64(r8, &(0x7f0000000040)=""/43, 0x2b, 0x4) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000000200)=0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x10) 40.513620035s ago: executing program 3 (id=668): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = fcntl$getown(r1, 0x9) ptrace$pokeuser(0x6, r2, 0xd9e, 0x8000) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r3}, 0x10) r4 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r4, &(0x7f00000003c0)={&(0x7f0000000140), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x20, r5, 0x800, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001a000100000000000000000002000000ef0000000000000008000100e000000108000300", @ANYRES32=0x0, @ANYBLOB="08000200ac"], 0x34}}, 0x400c840) r7 = inotify_init1(0x0) r8 = inotify_add_watch(r7, &(0x7f0000000200)='.\x00', 0x400) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@updpolicy={0xc4, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in=@multicast2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x30, 0x2f, 0x0, 0xee01}, {0x6}, {}, 0x4}, [@policy_type={0xa}]}, 0xc4}, 0x1, 0x0, 0x0, 0x8000}, 0x8004) r10 = dup(r7) inotify_rm_watch(r10, r8) getsockopt$SO_COOKIE(r10, 0x1, 0x39, &(0x7f0000000080), &(0x7f00000000c0)=0x8) 40.506686735s ago: executing program 3 (id=670): mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$bind(0x0, 0x0, 0x0, 0x101091, 0x0) mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0) openat(0xffffffffffffff9c, 0x0, 0x8042, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000000700)={[{@grpid}, {@orlov}]}, 0xff, 0x48f, &(0x7f0000000b80)="$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") openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x26e1, 0x109) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000080)={[{@errors_remount}]}, 0x3, 0x500, &(0x7f0000000500)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x42, 0x0) pwrite64(r0, 0x0, 0x0, 0x8080c61) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="1b87040000000000140012800b00010062726964676500000400028008000a00", @ANYRES32], 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000010}, 0x0) mount(&(0x7f00000004c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r4 = open(&(0x7f0000000440)='./bus\x00', 0x14113e, 0x0) write$binfmt_script(r4, &(0x7f0000000280), 0x208e24b) fallocate(r0, 0x3, 0x5000000, 0x8000c62) unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0) 40.129572274s ago: executing program 3 (id=672): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f0000000000)={0x3, 0x3, 0x80000000, 0xc0}, 0x10) fsetxattr$security_capability(r0, &(0x7f0000000040), &(0x7f0000000080)=@v1={0x1000000, [{0xa, 0xfffffffb}]}, 0xc, 0x2) setrlimit(0x1, &(0x7f00000000c0)={0x1, 0x8}) chdir(&(0x7f0000000100)='./file0\x00') getrlimit(0x3, &(0x7f0000000140)) setrlimit(0x4, &(0x7f0000000180)={0x4, 0x6}) getrlimit(0x3, &(0x7f00000001c0)) unshare(0x40000000) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0xc) quotactl$Q_GETNEXTQUOTA(0xffffffff80000902, &(0x7f0000000200)=@nullb, r2, &(0x7f00000002c0)) getrlimit(0x2, &(0x7f0000000340)) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000002, 0x10, r0, 0x4edfc000) r4 = accept$unix(r0, 0x0, &(0x7f0000000380)) bind$unix(r4, &(0x7f00000003c0)=@file={0x1, './file0\x00'}, 0x6e) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000440)={0x1, 0xffffffffffffffff}, 0x4) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000640)={r5, &(0x7f0000000480)="c1b292e4f9082e56e40b795bf529045019ccc72a73abec5cb0a14203a46d12e2bd63bb43c46ffbc6142914f48d08978b3698e1cb7b21848024bd014f6631e0196ae22058c5a0f7f003bbe0ad979c5c23f3feda07647bec07ce6e86b5547dc933d1b01f281c3ec2a0ecdaeefbddd53e7f5ad422708e17f7ac32661fcb4569f4b0d8d01d4290be9a1f088032f2183daad67ea026b52b290709a80f7822022ed48671cedc664b7305279328a88157ff911d4150ebbbcc220daa930949a712b85b1645dd46d96ec953b20dcd6f7abfa9fcf15f9cc89263b7726806814d7885572213d8f1d7f6ecf2597aacdce7240bef89f0286c27", &(0x7f0000000580)=""/129}, 0x20) getrlimit(0x6, &(0x7f0000000680)) r6 = openat$null(0xffffffffffffff9c, &(0x7f00000006c0), 0x20040, 0x0) r7 = open(&(0x7f0000000800)='./file1\x00', 0x602, 0x8a) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x1a, 0x11, &(0x7f0000000700)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xd52}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xf}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x23, '\x00', 0x0, @fallback=0xd, r7, 0x8, &(0x7f0000000840)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000880)={0x1, 0xd, 0x2, 0x2f400}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, &(0x7f00000008c0)=[r5, r5, r5, r5, r5, r5, r5, r5], &(0x7f0000000900)=[{0x4, 0x2, 0xe}], 0x10, 0x2, @void, @value}, 0x94) r9 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000a00)={0x0, r8}, 0x10) ioctl$EXT4_IOC_MIGRATE(r9, 0x6609) sendto$inet6(r7, &(0x7f0000000a40)="d01e600ca0ed02929bcb83216ef37538e570157c1508e5f580fed84db72ba60e30cad42fc9e6592b7b9d5ac5749852e3d267b3e07f1d65a34974026f00189869206d6c8522f0d56216f4a6ca2698e66854886226a565cb4ad34f0e6c513bdf849b3609c31c0258112d5ca385f93417d1996e9f119fff01be751b31dd36e7e6891973c722e64bdce8d4d1168032ee4389a90e002f0f97ca06aad7c09b43409967edc02649d30d08ca8f2330116f3ecad00a1ab89be4a01daaab101fed7c0d533f4f6e76741e27f897af8bc86e9dc3e31273a35b69a907b187f5d654f8477500b1f04df0d44abfdb", 0xe7, 0x4000, &(0x7f0000000b40)={0xa, 0x4e24, 0x5, @local, 0x7}, 0x1c) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r0, 0xc0406619, &(0x7f0000000b80)={@desc={0x1, 0x0, @desc2}}) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000bc0)={0xaa, 0x1}) recvmsg$can_bcm(r6, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000c00)=""/130, 0x82}], 0x1, &(0x7f0000000d00)=""/243, 0xf3}, 0x2000) r10 = openat$full(0xffffffffffffff9c, &(0x7f0000000e40), 0x28081, 0x0) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001240)={&(0x7f0000001080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc8, 0xc8, 0x4, [@enum={0x7, 0x4, 0x0, 0x6, 0x4, [{0x6, 0x200}, {0x5, 0x80000001}, {0x8, 0x4}, {0x1, 0x3}]}, @volatile={0xa, 0x0, 0x0, 0x9, 0x4}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x4}]}, @restrict={0xf}, @int={0x7, 0x0, 0x0, 0x1, 0x0, 0x4c, 0x0, 0x54, 0x1}, @union={0x1, 0x7, 0x0, 0x5, 0x0, 0x9, [{0x8, 0x4, 0x1ff}, {0xc, 0x0, 0x7fffffff}, {0xb, 0x1, 0x7}, {0xc, 0x4, 0x1}, {0x5, 0x1, 0xf49c}, {0x4, 0x3, 0x1a922014}, {0x5, 0x2, 0x8}]}]}, {0x0, [0x61, 0x5f]}}, &(0x7f0000001180)=""/138, 0xe4, 0x8a, 0x0, 0x7fffffff, 0x10000, @value=r7}, 0x28) sendmsg$unix(r10, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f0000000e80)="9b8f85b697186c0b233e4f9f87e658dfe2b3022e6bae259103975b1a0f43d946d232f572383bda7432d8660a7976e2bad993aa40b537d29b8037e799f05927ac1495fbb606cebccfdb45437469593cb792a47c157b1edfb0382629300d1ac0517f885d9335c1349934c83929c155cfbbd5512d72b8cd9082a599badc152af9c84d456e11ff6903bb4b56b4dfac89c3a2559a76c3fc6461a05020b844cb2588864a6082b8f625ded3f42b11bb2238924239a1dbe1e18a7e92b19924e3451fdd5cae08dc80587ca9cd94a4fa8d26080c91", 0xd0}, {&(0x7f0000000f80)="e3cf65023e5562e18d42d084c0c49950af3f91356d0517dd1b50020950c85332622e63eacdca09cd1909e331511d7e8cb08b1eb78bd6d0cf767d8dec82fc429eb5806b4835f17c69ca3ce1abcd773497d5961e8fa4ae683ba48f11b2da5f6a9c16e0a5c0fc65083a7dff1f400952bffbffc8175e78014c82bbe9", 0x7a}, {&(0x7f0000001000)}], 0x3, &(0x7f0000001380)=[@cred={{0x1c, 0x1, 0x2, {r1, r2, r3}}}, @rights={{0x24, 0x1, 0x1, [r11, r0, r8, r7, r5]}}, @rights={{0x24, 0x1, 0x1, [r4, r8, 0xffffffffffffffff, r9, r7]}}, @rights={{0x34, 0x1, 0x1, [r8, r4, 0xffffffffffffffff, r9, r7, r9, 0xffffffffffffffff, 0xffffffffffffffff, r5]}}], 0xa8, 0x8010}, 0x4000000) 40.054665633s ago: executing program 3 (id=675): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b405000000000000611077000000000007000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x18) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000000)={0x2b, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast2}}}, 0x108) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@RTM_NEWMDB={0x38, 0x54, 0x1e5, 0x0, 0x0, {0x7, r7}, [@MDBA_SET_ENTRY={0x7, 0x1, {0x0, 0x1, 0x3, 0x2, {@in6_addr=@dev={0xfe, 0x80, '\x00', 0x1d}, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4800}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000014c0)=@newtaction={0x48, 0x30, 0xffff, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x1300}, [{0x34, 0x1, [@m_mirred={0x30, 0x0, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 40.005985303s ago: executing program 37 (id=675): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b405000000000000611077000000000007000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x18) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000000)={0x2b, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast2}}}, 0x108) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@RTM_NEWMDB={0x38, 0x54, 0x1e5, 0x0, 0x0, {0x7, r7}, [@MDBA_SET_ENTRY={0x7, 0x1, {0x0, 0x1, 0x3, 0x2, {@in6_addr=@dev={0xfe, 0x80, '\x00', 0x1d}, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4800}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000014c0)=@newtaction={0x48, 0x30, 0xffff, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x1300}, [{0x34, 0x1, [@m_mirred={0x30, 0x0, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 35.052881166s ago: executing program 5 (id=699): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_open_dev$vcsa(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000400)={r2, &(0x7f0000000000), 0x20000000}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r1}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r3}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 35.032487916s ago: executing program 5 (id=700): openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) writev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)="64c0de", 0x3}], 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000180)={0x0, 0xdddd0000, 0x4, 0xffffffffffffffff, 0x3}) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f00000003c0)={0x4595, 0x5000, 0x8, 0xffffffffffffffff, 0x11}) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000100)={0x0, 0x0, 0x1}) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioperm(0x0, 0x7, 0x4000000000000a) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xa0}}, 0x0) r7 = socket(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@can_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0x1d, 0x1, 0x2}, [@CGW_DST_IF={0x8}, @CGW_SRC_IF={0x8, 0x9, r9}]}, 0x24}}, 0x0) rt_tgsigqueueinfo(0x0, r1, 0x2e, &(0x7f0000000300)={0x10, 0xffffffff, 0x7}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYRESDEC=r5, @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x24}, 0x1, 0x0, 0x0, 0x4048855}, 0x30004016) sendmmsg(r7, &(0x7f0000000000), 0x400000000000235, 0x0) syz_usb_connect$uac1(0x5, 0xa5, &(0x7f0000003c40)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x93, 0x3, 0x1, 0xff, 0x60, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x800, 0x3}, [@extension_unit={0x7, 0x24, 0x8, 0x1, 0xf, 0x1}, @processing_unit={0x8, 0x24, 0x7, 0x5, 0x3, 0x1, "b5"}, @processing_unit={0xb, 0x24, 0x7, 0x1, 0x1, 0x40, "8e201d53"}, @mixer_unit={0xb, 0x24, 0x4, 0x1, 0x7, "f9dc2bdfc56a"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0xdf, 0x5, 0x4, {0x7, 0x25, 0x1, 0x2, 0x7, 0xfffd}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x3, 0x3, 0xbf, 0x1}, @as_header={0x7, 0x24, 0x1, 0xab, 0x50, 0x1}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0xd, 0xd0, 0x3, {0x7, 0x25, 0x1, 0x81, 0x6, 0x7}}}}}}}]}}, &(0x7f0000003f80)={0x0, 0x0, 0x0, 0x0}) 31.753541565s ago: executing program 5 (id=717): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'lo\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) r5 = syz_open_procfs(r1, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x20200, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r6, 0x0, 0x4830) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) read$FUSE(r5, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f00000008c0)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@journal_dev={'journal_dev', 0x3d, 0x8000}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@minixdf}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x9}}, {@mblk_io_submit}]}, 0x3, 0x44a, &(0x7f0000000400)="$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") r7 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000400180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r7}, 0x10) chown(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) listxattr(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000002000010300000000000010000200"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x40) r9 = socket(0x10, 0x803, 0x0) sendto(r9, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) 30.864144693s ago: executing program 5 (id=723): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000380)={[{@test_dummy_encryption}, {@i_version}, {@stripe={'stripe', 0x3d, 0x7}}, {@commit={'commit', 0x3d, 0x5}}, {@inlinecrypt}, {@data_err_ignore}, {@max_batch_time}, {@noblock_validity}]}, 0xd, 0x5d8, &(0x7f0000000c00)="$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") open(0x0, 0x64842, 0x0) open(0x0, 0x14927e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) renameat2(0xffffffffffffffff, &(0x7f0000000800)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000840)='./file0\x00', 0x7) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001300)={0x2020}, 0x2020) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000080000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000880)=ANY=[@ANYBLOB="1500000065ffffff7f000008003950323030302e4c37416d8f21c5ae62b863520117ae50a5ceeeb7e5b4d0fbbd12084682ae54b4949d874763d1a95264cfd6921c66cd7d0d5e6d3edf37433a82127b75b22c4e63144170b05cf7147d7d914ad5eef1542ecd65d90519aa669f1c80b8e994765e299e425685baf23839dcfb2100629f94f0632c74313e96de9a47a2d2b85024677cad89eb8c1d59a7bdb5ea4a81443111c63bfb91c1c66d6923e652bd9951fa670cd6d681e1cde2e74e254cc090b514d43b0eea2b4d4d606aa546e0fea2054981ff4321eb96a51b590a4f4a3557f63897317b"], 0x15) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f00000012c0)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e24, 0x2}, 0xfffffffffffffedf) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000140)=[{&(0x7f0000000900)="580000001400192340834b80040d8c560a066e0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000007000200060c10000000010000000000", 0x58}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70200001400f400b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000240035b900000000000000000000000006000300"], 0x1c}}, 0x0) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000240)=0xc) sched_rr_get_interval(r0, &(0x7f00000000c0)) 29.831287089s ago: executing program 5 (id=728): socket$nl_audit(0x10, 0x3, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000d40)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sched_setscheduler(0x0, 0x2, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000002c0)=0x3) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x4) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000240)=0x2242000) pwritev(r0, &(0x7f0000000080)=[{&(0x7f00000003c0)="00214717a707000000000306746234e4c00ff65da772a6eb2e166800710a5e31163ceb9d0471200000000500000000000000ff422b5e57805c7a71136300d4031b141d15ef873241998242eb181f35e746549c1a1eb8e4e50ff4869f4e91532d294f08b16b86be5c4590dc8c0aaf5f32779ff75448331fbb0b1867daee50c15340cc041f16a09699b6ceda51460cf5f1812f16810e12d3b8156f62d1fd926fbae910a1cd2b56d104c459b5603e4bcaa0fcaf6fca919f484eb1d9dbea8d64abd2e290d3ba1f18f147df21", 0x8a}], 0x1, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) openat2(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) socket(0x28, 0x5, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x8001, 0x0) ioctl$RTC_RD_TIME(r3, 0x40187013, &(0x7f00000000c0)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fc00000}]}) openat$sysfs(0xffffffffffffff9c, 0x0, 0x40000, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x37, 0x7fffffff}]}) epoll_create1(0x80000) close_range(r4, 0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)=@o_path={&(0x7f0000000000)='./file1\x00', 0x0, 0x8, r6}, 0x18) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) 29.741665359s ago: executing program 5 (id=730): r0 = syz_create_resource$binfmt(&(0x7f0000000080)='./file0\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r3}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xb, 0x8, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001580), 0x0, 0x0) ioctl$KDADDIO(r4, 0x4b34, 0xffffffffffffff7f) pread64(r4, &(0x7f0000000040)=""/43, 0x2b, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000000200)=0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7ffffffd}]}) sendto$inet6(0xffffffffffffffff, 0x0, 0x5c4, 0x404c844, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @local}, 0x1c) write$cgroup_subtree(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd63"], 0x36) ioctl$TUNGETIFF(r2, 0x800454d2, &(0x7f0000000100)={'sit0\x00'}) close(r1) r6 = openat$binfmt(0xffffffffffffff9c, r0, 0x2, 0x0) write(r6, &(0x7f0000000180)="01", 0x1) close(r6) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) 29.735422109s ago: executing program 38 (id=730): r0 = syz_create_resource$binfmt(&(0x7f0000000080)='./file0\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r3}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xb, 0x8, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001580), 0x0, 0x0) ioctl$KDADDIO(r4, 0x4b34, 0xffffffffffffff7f) pread64(r4, &(0x7f0000000040)=""/43, 0x2b, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000000200)=0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7ffffffd}]}) sendto$inet6(0xffffffffffffffff, 0x0, 0x5c4, 0x404c844, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @local}, 0x1c) write$cgroup_subtree(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd63"], 0x36) ioctl$TUNGETIFF(r2, 0x800454d2, &(0x7f0000000100)={'sit0\x00'}) close(r1) r6 = openat$binfmt(0xffffffffffffff9c, r0, 0x2, 0x0) write(r6, &(0x7f0000000180)="01", 0x1) close(r6) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) 28.995306676s ago: executing program 1 (id=736): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) write$UHID_DESTROY(r0, &(0x7f0000000680), 0x4) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000002a00)={0xd, {"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", 0x1000}}, 0x1006) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x26e1, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x19, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x179, 0x11, 0x100000}]}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r3, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 28.774647156s ago: executing program 1 (id=737): pipe2(0x0, 0x0) syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000009c0)={0x2, &(0x7f0000000480)=[{0x200, 0x54, 0x0, 0x100}, {0x3, 0x0, 0x5, 0x7}]}) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r4, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="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", 0xd24}, {0x0, 0x4000}, {0x0, 0x21}, {0x0}, {&(0x7f00000020c0)}], 0x5}, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unlink(&(0x7f0000000280)='./file0\x00') r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/13, @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa2000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) writev(r6, &(0x7f0000000940)=[{&(0x7f0000000580)="d37dca12be49aa3d03f6a90cca369012ad79f45968004fc15daa2d6af7c5399058be70bbd63eb4f3c1d7be65359a87cde49cef886175b2b22614ec2b3beb973a2883c27a78d9eb287d8159574adfc4bff8ffd4490bbb48017e20eed5bfda1ec7b3c1956e7252aabefdaef73bbd97541f35703d3e022f91e16d2e2da2768c802c685be6fffdf92f9be7e016535e5b5a50acc234903f3a3623e3f8a43bc25a0a7b39a74343181b639973136acd4658c4b210e8beecb9fa3f41c85f5d2695f658467c22699447ff4d73dfc582d511ec886017a21a8cff38f4d96290", 0xda}, {&(0x7f0000000680)="d26e64b8388985060a4a161f3a31739af59ba42970fa1f0f46557741189001a54775bb83973a969eda00da19b388a88900df2b69037a042d9f4812b63e6613875b3cfffa664335d6ed65720e9df77f0dbbdc84b2e3b7242e33858b4e224c907fa4517aae87c603d0eba73d3c9d9370aded72b052c6c60c0610c50ae39a535dc44f1f815780cd0733f3aa062a3de123e8e61574fa5ee3f87353a698c15ebe009a49841732066701eb7da982c2859fa1c0462e324bc6", 0xb5}, {&(0x7f0000000740)="2d7a4ba7173fc6c30d5f99c1a51f6fa407c3964724744330f9efa061956c7e2eb04ba65dced217115bfcaeb8fe9292b9ebc40fb6f2c942331ecad2dec3fa78fbf3fe248fe7f3f3f8f3f1", 0x4a}, {&(0x7f00000007c0)="209a32afb5e20f8d528b6cb8102d576756fe7f8393c2dc0a4ca5e0103401f1e0e5a817bcb7c5eedcf9fb358ee02a8080f7090cbd0f958f95b1f4246d3661065f24b2075865fa870b31e2e8a8605312a44071087170c31e9d7148ca1ab0951e019105dbbd1a0afd12a345e3264307e821e7bf0b4260f632aad006", 0x7a}, {&(0x7f0000000840)="462d1cd98455b04ec8008ca61d935561ccfa4bda360883b408b157a7d8e822776e326a1ab9362847677080c3f49b221669b4218fc8769e30d096aeb1db8c588156b50e41cef93555f8cd006f89a587cc579996ef2b2aec0942b735fa341e4ec0a362f604dfd1d86e4855540a90ae657a311ff63d94c14acd323ee49540cfb34b332ec4c2f7712b8ee505a63a524f52439d4b950a60d469d399dab3c915e5763349d49baa6e1ae21d07d647d892fda5c245e9afcd9fa356fe7f254c038ff28ed55d4cea153e095a31", 0xc8}, {&(0x7f0000000400)="6bc3e1acce4d0421ec23ebfc32c78a14b2", 0x11}], 0x6) r7 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000ffffffff000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xd, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r9}, 0x10) bpf$OBJ_GET_PROG(0x7, &(0x7f00000002c0)=@generic={&(0x7f0000000300)='./file0/file0\x00'}, 0x18) 27.935767073s ago: executing program 1 (id=742): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_LBT_MODE(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x28}}, 0x81) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = dup2(r4, r3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r5}, 0x10) uname(&(0x7f0000000100)) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r6}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x4, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000060000000400000000000008020000000000000000000001050000018000000000000000010000850200000000000000010000000000000400000000da"], 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan1\x00'}) (async) sendmsg$NL802154_CMD_SET_LBT_MODE(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x28}}, 0x81) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) dup2(r4, r3) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r5}, 0x10) (async) uname(&(0x7f0000000100)) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r6}, 0x10) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x4, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000060000000400000000000008020000000000000000000001050000018000000000000000010000850200000000000000010000000000000400000000da"], 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) (async) 27.877750783s ago: executing program 1 (id=743): syz_mount_image$ext4(&(0x7f0000000880)='ext2\x00', &(0x7f0000000500)='./file0\x00', 0x21000e, &(0x7f0000000280), 0xfe, 0x504, &(0x7f0000000a40)="$eJzs3V9rZGcZAPDnTDJrtpuaVL2ohdZiK9miO5M0tg1etBXFu4JS79eQTELIJBMyk3YTiqT4AQQRXfDKK28EP4Ag+xFkYcG9FxVFdFcvvFCPnDMn2ex4ZpPQ+bMkvx+8M+9555zzPG+yOfOeP3tOAJfWyxHxbkRMRMRrETFTtFeKEofdks338MFHK1nJPnn/b0kkRVtEXj12rVhsqvtWqr1/sLncbDZ2i+l6Z2un3t4/uLGxtbzeWG9sLy4uvLn01tIbS/MD6WfWr7e/+aef/PAX33r7N1/58Pc3/3L9+1nS3yg+L/oxcPfz12r2szg2GRG7wwg2BhNFf6rjTgQAgDPJxvifiYgv5uP/mZjIR3O53iHd1OizAwAAAAYhfWc6/p1EpAAAAMCF9U5ETEdSqRXXAkxHpVKrda/h/Vw8U2m22p0vr7X2tlezzyJmo1pZ22g25otramejmmTTC3n90fTrPdOLEfFcRPx45mo+XVtpNVfHffADAAAALolrPfv//5zp7v8DAAAAF8zsuBMAAAAAhq7f/n8y4jwAAACA4XH+HwAAAC60b7/3XlbSo+dfr36wv7fZ+uDGaqO9WdvaW6mttHZ3auut1np+z76t09bXbLV2vhrbe7fqnUa7U2/vH9zcau1td25ueH4gAAAAjMtzX7hzP4mIw69dzUvmSvYy0WcB1wrAhVE5z8x/HF4ewOj1+5oHLr7JcScAjM/huBMAxu2xW32UDApOXrzz2DGD3w4vJwAAYLDmPl9+/j/bBaiOOzlgqM51/h+4UJz/h8vrnOf/7w4rD2D0qkYAcOmd9qiPvjfvKDv/f6VsxjQ9dV0AAMBQTeclqdSKc4HTUanUahHP5v/Vv5qsbTQb8xHx6Yj43Uz1U9n0Qr5k4vGAAAAAAAAAAAAAAAAAAAAAAAAAAHBGaZpECgAAAFxoEZU/J8Xzv+ZmXp3uPT5wJfnXTBSP9PrwZ+//9NZyp7O7kLX//bi9c7tof30cRzAAAACAXkf76Uf78QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwSA8ffLRyVEYZ969fj4jZsviTMZW/T0U1Ip75RxKTJ5ZLImJiAPEPP46I58viJ1laMVtk0Ru/EhFXRxP/xTRNS+NfG0B8uMzuZNufd8v+/irxcv5e/vc/WZRPqv/2r3K8/Zvos/179owxXrj3q3rf+B9HvDBZvv05ip/0if9K2QpLfijf++7Bwf81dlce6c8j5kq/f5LHYtU7Wzv19v7BjY2t5fXGemN7cXHhzaW3lt5Ymq+vbTQbxWtpH3/04q//29P0n7Qr73/0iT97Sv9fzSrVE41pb5gi2L1bDz7brVZ7VpHHv/5K+e//+SfEz/5NfKn4Hsg+nzuqH3brJ730y7svlSZWxF/t0//Tfv/X+620x2vf+cEfzjgrADAC7f2DzeVms7E79MrtNE1HFUvl/JWj0d3QQkw9LT1VOa0yiCNbAADA0+bRoH/cmQAAAAAAAAAAAAAAAAAAAMDl1d6PyrBvJ9Yb83A8XQUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeKL/BQAA//9PHd4N") bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), r3) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e27f00000100000000000001", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000400)={r4, &(0x7f0000000380), 0x20000000}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000181100000733284f721658ca79cdf26caf1985", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000030000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, 0x0, 0x0, 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r6}, 0x10) open(&(0x7f0000000200)='./file0/file0\x00', 0x0, 0x0) 26.900023649s ago: executing program 1 (id=746): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'dvmrp0\x00', 0x2}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x6c, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x10503, 0x0) r4 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x80000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f0000000200)={r4, r5, 0x5, 0x13, &(0x7f0000000180)="fa03b224d292630aba21fd1d3c7475a8499b40", 0x42, 0x5, 0x1, 0xffff, 0x5, 0x3, 0x9, 'syz0\x00'}) close(r0) 26.202931077s ago: executing program 1 (id=751): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000004000000020000000000000c02000000000000000200000d000000000a08001000000000000000000000000000005f"], 0x0, 0x44, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) 25.285904364s ago: executing program 39 (id=751): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000004000000020000000000000c02000000000000000200000d000000000a08001000000000000000000000000000005f"], 0x0, 0x44, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) 9.598259631s ago: executing program 2 (id=940): r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) socket$packet(0x11, 0x2, 0x300) 7.921734206s ago: executing program 2 (id=961): prlimit64(0x0, 0x2, &(0x7f0000000040), 0x0) prctl$PR_SET_MM(0x23, 0x3, &(0x7f0000ffc000/0x4000)=nil) 7.893929856s ago: executing program 2 (id=962): write(0xffffffffffffffff, &(0x7f0000000200)="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", 0x148) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x77359400}, 0x0) 7.876573856s ago: executing program 2 (id=964): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000000)='./file1\x00', 0x210852, &(0x7f00000006c0)={[{@fat=@debug}, {@fat=@nfs}, {@dots}, {@nodots}, {@fat=@codepage={'codepage', 0x3d, '866'}}, {@fat=@nfs_nostale_ro}, {@nodots}, {@dots}, {@dots}, {@nodots}, {@nodots}, {@fat=@codepage={'codepage', 0x3d, '852'}}, {@dots}, {@fat=@errors_remount}, {@dots}, {@dots}, {@dots}, {@fat=@dos1xfloppy}, {@fat=@tz_utc}, {@nodots}, {@fat=@discard}, {@dots}]}, 0x1, 0x1c0, &(0x7f0000000500)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x88700a, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2100) 7.762363985s ago: executing program 2 (id=969): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in=@local, 0x0, 0x0, 0x0, 0xfffd, 0xa, 0x0, 0x20, 0x2c, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x8001, 0x400000000000, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000}}}, 0xb8}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="a0000000210001000000000000000000fe8000000000000000000000000000aafc02000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000500011"], 0xa0}}, 0x0) 7.543031554s ago: executing program 2 (id=972): writev(0xffffffffffffffff, &(0x7f0000000140)=[{0x0}], 0x1) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000280), &(0x7f0000000840)}, 0x20) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/fscaps', 0x141b82, 0x0) write$cgroup_int(r1, &(0x7f0000000000)=0x700, 0x12) 7.508612835s ago: executing program 40 (id=972): writev(0xffffffffffffffff, &(0x7f0000000140)=[{0x0}], 0x1) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000280), &(0x7f0000000840)}, 0x20) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/fscaps', 0x141b82, 0x0) write$cgroup_int(r1, &(0x7f0000000000)=0x700, 0x12) 1.469742825s ago: executing program 4 (id=1048): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x5c, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}]}, 0x5c}}, 0x0) 1.469395044s ago: executing program 4 (id=1050): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0xdc, &(0x7f0000000040)={[{@minixdf}, {@norecovery}, {@init_itable}, {@jqfmt_vfsv1}, {@dioread_lock}, {@jqfmt_vfsold}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xf3eb}}]}, 0x1, 0x45d, &(0x7f0000000580)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000001f80)=""/70, 0x46) 1.265768424s ago: executing program 4 (id=1054): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000048, &(0x7f0000000080)={[{@nobarrier}, {@nodioread_nolock}]}, 0x1, 0x4f3, &(0x7f00000012c0)="$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") r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) ppoll(&(0x7f0000000180), 0x0, 0x0, 0x0, 0x0) ioctl$TCSETA(r1, 0x402c542d, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, "dac7a15f305b57a3"}) 1.077705313s ago: executing program 0 (id=1060): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0}, 0x18) socket$netlink(0x10, 0x3, 0x10) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) 1.066012953s ago: executing program 0 (id=1061): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) 1.057080723s ago: executing program 0 (id=1062): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xd, 0xf, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x6, 0x0, 0xb}, {0x65}}, [], {{0x7, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1.005791923s ago: executing program 0 (id=1063): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)=ANY=[@ANYBLOB="3400000012000100000000000009"], 0x34}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000a40)="1c0000005e000faeefc0a6fa998757b6f17d700800f60b17d409", 0x1a}], 0x1}, 0x4000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0x7f, 0x0, 0x0, 0xb9ff}) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x17) 801.773562ms ago: executing program 7 (id=1069): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000180)={@private1={0xfc, 0x1, '\x00', 0xfd}, 0x8000000, 0x0, 0x3, 0x1, 0xfffc}, 0x20) 725.615152ms ago: executing program 7 (id=1071): r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000200)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) syz_emit_ethernet(0x1bf, &(0x7f0000000780)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbb3bbbb0800490901b19beb0003092f9078ac14142c00000000440840f3beac46388307cde0000001000421"], 0x0) 725.490262ms ago: executing program 0 (id=1072): ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xffffff08, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r1, 0x80047453, 0x0) 711.350502ms ago: executing program 8 (id=1073): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x5, 0x0, 0x1, {0x0, 0xea60}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "3fae8a9ad451a727"}}, 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="050000000808"], 0x80}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8044}, 0x4000000) sendmsg$can_bcm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="05"], 0x48}}, 0x80) 686.428182ms ago: executing program 0 (id=1074): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg$unix(r0, &(0x7f00000043c0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000002c0)=""/240, 0xf0}], 0x1}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000640)=""/187, 0xbb}], 0x1}}, {{0x0, 0x0, &(0x7f0000002d00)=[{&(0x7f0000000900)=""/174, 0xae}], 0x1}}], 0x3, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f00000018c0)={0x2, 0x4e22, @broadcast}, 0x10) 670.689992ms ago: executing program 7 (id=1075): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001400) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) ioctl$PPPIOCGDEBUG(r0, 0x80047441, &(0x7f00000001c0)) 609.824972ms ago: executing program 8 (id=1076): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000a40)=""/4096) 609.491061ms ago: executing program 8 (id=1077): pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000180)='./file0\x00', 0x8818, &(0x7f00000000c0)=ANY=[], 0x1, 0x302, &(0x7f00000001c0)="$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") write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x2, 0x4, 0x368, 0xffffffff, 0xf8, 0x1f0, 0xf8, 0xfeffffff, 0xffffffff, 0x2c0, 0x2c0, 0x2c0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'bond_slave_1\x00', 'sit0\x00', {}, {}, 0x0, 0x0, 0x1}, 0x2f2, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@state={{0x28}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@remote, @remote, [], [], 'sit0\x00', 'dvmrp0\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'gretap0\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c8) write$P9_RLERRORu(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB='S\x00\x00\x00\a\x00\x00F'], 0x53) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) 578.199382ms ago: executing program 7 (id=1078): socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) 463.152691ms ago: executing program 7 (id=1079): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) syz_open_procfs$pagemap(0x0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) syz_clone(0x1801100, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0) 377.775571ms ago: executing program 4 (id=1080): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c0000001900010000000000000000000a00003f"], 0x3c}}, 0x0) 377.535671ms ago: executing program 8 (id=1081): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000200)={[{@usrjquota}, {@journal_dev={'journal_dev', 0x3d, 0x8000}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@minixdf}, {@resgid}, {@grpquota}, {@usrjquota}, {@journal_dev={'journal_dev', 0x3d, 0xdcc}}]}, 0x3, 0x44a, &(0x7f0000000400)="$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") chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000600)={0x23e3}) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xffffff19) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) 369.182081ms ago: executing program 7 (id=1082): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @random="e7b3470f71c3", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x40, 0x4}}}}}}, 0x0) 270.39283ms ago: executing program 4 (id=1085): syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000580)='./file2\x00', 0x2000000, &(0x7f00000004c0)=ANY=[], 0x1, 0x21d, &(0x7f0000000b40)="$eJzsmL9rFEEUx78zu7e5FRFtUthYGDCi2cvuoaQ5NIJgJULir0oPs4Z4m5xcVjAHgsHGRjsLwcbCf8AiRSoLO/8BQQsVBAuvsLCxGZmd2b1JJnGPNVa+TzF8Z9978+a9233FgSCI/5Yvn39+enJuZv4kgP2YwJh+/s0BGFOaG/4fn9878ax1/sXrD6/erhx4sLn9PBkixNYH9T/kdwG8mXWQFpmK6F9STOjNPHihL4PjuNZXwRBofRMcV7SOwXBd6zuG7kr/ILi9lMTBrW6yIMW0XEK5RHJpbr/fYJ1hQe+FEIIZ9tW1fqedJHHPEK627WCqJIpknXGrfzV4GMxytIz7yS5ee/xoXe7z3kwb/QvBEeoimmCY089nMJb3RrXEqP+wOzzfserfsVrpKg1lRdaVaP3Yk2aZ4tBUtfBJWc5Z23QQVa6BrVE1DE2yk3tbsvXqZMItfxfP6B+0Qq6Lo1bx1Afwjyo1RaUqcjE+2Hxnm76WhQtWnoKN/v7UR71z/iFW75iPfof/Tcd2u9j7DTU/xEuGY8Z8co350UiX7zZW1/pTS8vtxXgxXomi5mkGPDwVNbJBpFZr7g3ns5/Np33G+bVdfD3u4X47TXuhWj3mwUea9qJsHxmfzdxG9/sNHZbiAoCjaiPHplec6Fg5mKd8eOYr1aTtRBAEQRAEQRAEQRAEQRAEUYkjYNm/oCVElzLv3wEAAP//0Ixjlw==") chdir(&(0x7f0000000240)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) 259.90866ms ago: executing program 9 (id=1088): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in=@multicast2, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {0x0, 0x9}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x4d5, 0x32}, 0x0, @in6=@mcast1, 0x0, 0x0, 0x0, 0xb7}}, 0xe8) sendmmsg(r0, &(0x7f0000000180), 0x400000000000077, 0x0) 242.10433ms ago: executing program 9 (id=1089): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close_range(r0, 0xffffffffffffffff, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x17, 0xf, &(0x7f0000000080)=ANY=[@ANYBLOB="1800004200000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000bb000000bf0900000000000055090100000000009500000000000000bf91000000000000b70200000000000085000000ba000000b70000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 163.70936ms ago: executing program 9 (id=1090): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) capget(&(0x7f0000000040)={0x20080522}, &(0x7f0000000240)={0x3, 0x100, 0x9, 0x9, 0x4, 0x3}) 163.46696ms ago: executing program 4 (id=1091): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040), 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ced4fbd44e24eb0d34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3a06d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796efea77aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2acb72e7ead0509d380578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece72f2090000f44a3210223fdae7ed04935c3c90941576aebc8619d73415cda2130f5011e4845505000001000000004f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c040035cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bf463261135e24d154114df1381b02a0dcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4e62b445c00f576b2b5cc7f819abd0f884cc4806f40300966fcf1e54f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e1700000000000000000000000000000000000000000000000000000520500002952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9a33c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a62415f78000000005f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c81c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b40824095135861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac00000b0000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e5dd921a5eadd4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293d5c833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e602c28ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f257aac5af18d8c6b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e29b10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe8e4cd14dc5c1eb98b63198f6f830745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b51c34a5384f2cf51180c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af243b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380ecf1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb79f558982d57c556ca1427b5960b79990565ca2a20996fcba472213744d3a156979651596afde2b0089f023fcfccd072bd6ea8445fc787390d71ec61d5b7b0f05f6931914bf49aa0d66eff294271a93e32f54f281068514a4cd2d0700a43df59e9924e4affdbd22405e675e9d7cdc10546571131831d4dc8c8363077a908d9ae4f27ff095f5b07667f93a3573d3fabfca58ee0a6b6a691102bb3c7be4dc5b816853275e7ae8c13ec341bad15353fad794b46c4fd73e1b4cc78de2156cb158870d5b8446dae9ba5f7f244e6cf8f6791671057347208a313ebbcb72b04706005670f2b0055e440d72c7c3316982c6ebe8675458cf6bb393b007f5cedb7bc411834600000000000000000000000000a20071b07d568a8150ed646b4978d0226d9651647a5999ae7c7c85322a215fcdb1adbad63499518fe0d10145d430422c78367dfa941f74b63f3884565ac89c673da2c2b1172be5f2cd1f3f453ebddd432bd24c73fa773b739e20fcec16a821230654a383ac1868495f67d942c772ca75e09073dbe9307ff5cac7c2c411149a4d989a8a019e068da218d4bc34e4102fd2f97397331e4cd70b4915582b635f07ca87f00dc929f902540f565c20add8675b79e005cf0277d954697317b907b77fa5d6b7feaebaf676a2a37de8aa70748fee4bc198ffd3e2de11eb0eff896fd94de0805ba6b1054a7b3e300d4581e9af62a1ecaee96d2819b3d192e5b9561eb622da25450f586be14017a1cf74f89a1dd18af004decfe266134c3d036ae7996931fe6008a73ed34c35f0da4ffee1fe63bc1af6ef1b4731d50b8ceb582a1e9c6e8d97f8290cc105754f592d16ccdb1df8636d7ca5e372cea97dd0f005cc7092b126dd46758917fb0d94b8483d403bd451429cc1660f0b5a529d8134dc2702f6d8e2f943d98fbe50a3ba653f13f98a00fcbf311f9758ade8e4eb87b4b9fb2d387f5d8c4bdcab2fff9ed8c9de961fd831a070381c8020352fea7c334b2959ddd956701a7ea415e224a81c9fa1ebbabe74f7743e09b6c8b72650b51d5c2000ef3679c039b3604374fc1af7ab354204afbd24f0e701bc08a98452ce2668617e85e0d876f5a8b6d9b777f1c384d8a9883e4262defb6b9aab8d5b76bc91ca50f87966797da2499ca0ac76707c0408a7b6d8708fe7714988babdc11f"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r1, 0x18000000000002a0, 0x26, 0x0, &(0x7f0000000000)="b9ff03076808268cb89e14f089061be0ffff00fe4000632f77fbac141416e000002062079f7d", 0x0, 0x4896, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 163.31442ms ago: executing program 9 (id=1092): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv6_newaddr={0x40, 0x14, 0x1, 0xffffffff, 0x25dfdbff, {0xa, 0x0, 0xa1, 0x0, r2}, [@IFA_ADDRESS={0x14, 0x1, @mcast1}, @IFA_CACHEINFO={0x14, 0x6, {0x1, 0x9, 0x3, 0xc78}}]}, 0x40}}, 0x24005040) 153.63607ms ago: executing program 9 (id=1093): bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x10, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756e6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000aa000000850000000f00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 142.74122ms ago: executing program 9 (id=1094): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x42, &(0x7f00000000c0)=ANY=[@ANYBLOB="6673796e635f6d6f64653d706f7369782c6e6f696e6c696e655f646174612c6469736361726400aa19fd46b492dc6cf59d696e6c696e655f64656e7472792c00"], 0x1, 0x54f3, &(0x7f000000ab40)="$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") openat(0xffffffffffffff9c, 0x0, 0x1e3340, 0x14a) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x0, 0x80) getdents64(r1, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x80000) 53.80691ms ago: executing program 8 (id=1095): syz_open_procfs(0x0, &(0x7f0000000080)='net/vlan/vlan0\x00') r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8923, &(0x7f0000000040)={'vlan0\x00', 0x40}) pselect6(0x40, &(0x7f0000000000)={0x8, 0x0, 0x4, 0x800, 0x3e, 0x8, 0x200, 0x10000}, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 8 (id=1096): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xf}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x5, 0x1, 0x8005, 0x401}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x0) kernel console output (not intermixed with test programs): _r:user_home_t tclass=dir permissive=1 [ 99.553448][ T24] audit: type=1400 audit(1737286590.479:2210): avc: denied { mount } for pid=2330 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 99.558367][ T2335] lowmem_reserve[]: [ 99.576268][ T2338] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 99.576830][ T24] audit: type=1400 audit(1737286590.479:2211): avc: denied { mount } for pid=2330 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 99.580129][ T2338] ext4 filesystem being mounted at /82/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.610438][ T24] audit: type=1400 audit(1737286590.479:2212): avc: denied { mounton } for pid=2330 comm="syz-executor" path="/root/syzkaller.9RxEkq/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 99.610455][ T24] audit: type=1400 audit(1737286590.479:2213): avc: denied { mounton } for pid=2330 comm="syz-executor" path="/root/syzkaller.9RxEkq/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=22582 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 99.610471][ T24] audit: type=1400 audit(1737286590.499:2214): avc: denied { mounton } for pid=2330 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=509 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 99.610489][ T24] audit: type=1400 audit(1737286590.499:2215): avc: denied { mounton } for pid=2330 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 99.610504][ T24] audit: type=1400 audit(1737286590.499:2216): avc: denied { mount } for pid=2330 comm="syz-executor" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 99.610523][ T24] audit: type=1400 audit(1737286590.529:2217): avc: denied { mount } for pid=2337 comm="syz.2.479" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 99.650799][ T2335] 0 [ 99.721661][ T24] audit: type=1400 audit(1737286590.659:2218): avc: denied { map_read map_write } for pid=2343 comm="syz.9.478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 99.837931][ T2335] 3941 3941 [ 99.841056][ T2335] Normal free:3135064kB min:84828kB low:106032kB high:127236kB reserved_highatomic:0KB active_anon:640kB inactive_anon:138092kB active_file:56008kB inactive_file:43808kB unevictable:0kB writepending:672kB present:5242880kB managed:4035856kB mlocked:0kB pagetables:2460kB bounce:0kB free_pcp:1856kB local_pcp:940kB free_cma:0kB [ 99.871884][ T2335] lowmem_reserve[]: 0 0 0 [ 99.876046][ T2335] DMA32: 6*4kB (UM) 7*8kB (M) 6*16kB (M) 7*32kB (UM) 7*64kB (UM) 7*128kB (UM) 7*256kB (UM) 5*512kB (M) 4*1024kB (UM) 3*2048kB (UM) 724*4096kB (M) = 2981840kB [ 99.896988][ T2335] Normal: 2*4kB (ME) 6*8kB (UM) 6*16kB (U) 43*32kB (UME) 15*64kB (U) 5*128kB (U) 18*256kB (UE) 4*512kB (UM) 4*1024kB (UME) 2*2048kB (UE) 761*4096kB (M) = 3135032kB [ 99.936886][ T2335] 47301 total pagecache pages [ 99.941386][ T2335] 1 pages in swap cache [ 99.955280][ T2335] Swap cache stats: add 1857, delete 1856, find 1853/1854 [ 99.970818][ T2335] Free swap = 124692kB [ 99.978475][ T2335] Total swap = 124996kB [ 99.999928][ T2335] 2097051 pages RAM [ 100.008051][ T2335] 0 pages HighMem/MovableOnly [ 100.023209][ T2335] 341900 pages reserved [ 100.033872][ T2335] 0 pages cma reserved [ 100.046736][ T25] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 100.087976][ T2355] netlink: 20 bytes leftover after parsing attributes in process `syz.3.481'. [ 100.097221][ T2355] netlink: 20 bytes leftover after parsing attributes in process `syz.3.481'. [ 100.105982][ T2355] netlink: 20 bytes leftover after parsing attributes in process `syz.3.481'. [ 100.115267][ T2355] netlink: 20 bytes leftover after parsing attributes in process `syz.3.481'. [ 100.124018][ T2355] netlink: 20 bytes leftover after parsing attributes in process `syz.3.481'. [ 100.132696][ T2355] netlink: 20 bytes leftover after parsing attributes in process `syz.3.481'. [ 100.141429][ T2355] netlink: 20 bytes leftover after parsing attributes in process `syz.3.481'. [ 100.150194][ T2355] netlink: 20 bytes leftover after parsing attributes in process `syz.3.481'. [ 100.158970][ T2355] netlink: 20 bytes leftover after parsing attributes in process `syz.3.481'. [ 100.167634][ T2355] netlink: 20 bytes leftover after parsing attributes in process `syz.3.481'. [ 100.198635][ T2355] device syzkaller0 entered promiscuous mode [ 100.367062][ T2362] tipc: Started in network mode [ 100.371867][ T2362] tipc: Own node identity 7e03b95838bc, cluster identity 4711 [ 100.379225][ T25] usb 10-1: Using ep0 maxpacket: 32 [ 100.384602][ T2362] tipc: Enabled bearer , priority 0 [ 100.393175][ T2363] tipc: Enabling of bearer rejected, already enabled [ 100.422711][ T2362] device syzkaller0 entered promiscuous mode [ 100.496736][ T25] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 35451, setting to 1024 [ 100.511271][ T25] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 100.537820][ T2361] tipc: Resetting bearer [ 100.553878][ T2361] tipc: Disabling bearer [ 100.676835][ T25] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 100.691610][ T2384] device pim6reg1 entered promiscuous mode [ 100.691817][ T25] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.713581][ T25] usb 10-1: Product: syz [ 100.717965][ T25] usb 10-1: Manufacturer: syz [ 100.722525][ T25] usb 10-1: SerialNumber: syz [ 100.729281][ T391] Bluetooth: hci0: command 0x1001 tx timeout [ 100.735341][ T2291] Bluetooth: hci0: sending frame failed (-49) [ 100.746799][ T2346] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 100.874656][ T2395] xt_bpf: check failed: parse error [ 101.146133][ T25] usblp 10-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 101.298782][ T2402] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 101.307765][ T2402] ext4 filesystem being mounted at /104/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.566899][ T2408] overlayfs: failed to resolve './file0': -2 [ 101.727699][ T2413] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 101.749036][ T2413] EXT4-fs (loop8): 1 truncate cleaned up [ 101.754570][ T2413] EXT4-fs (loop8): mounted filesystem without journal. Opts: dioread_lock,min_batch_time=0x0000000000000fff,journal_dev=0x0000000000000005,user_xattr,abort,max_batch_time=0x0000000000000004,,errors=continue [ 101.882821][ T2428] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=2428 comm=syz.2.497 [ 102.208282][ T2431] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 102.217310][ T2431] ext4 filesystem being mounted at /105/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.389363][ T2436] netlink: 'syz.3.499': attribute type 4 has an invalid length. [ 102.776716][ T429] Bluetooth: hci0: command 0x1009 tx timeout [ 102.799754][ T2447] syz.2.502[2447] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 102.799792][ T2447] syz.2.502[2447] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 103.121883][ T25] usb 10-1: USB disconnect, device number 2 [ 103.148255][ T25] usblp0: removed [ 103.190630][ T2451] FAT-fs (loop2): Directory bread(block 64) failed [ 103.205546][ T2451] FAT-fs (loop2): Directory bread(block 65) failed [ 103.212250][ T2451] FAT-fs (loop2): Directory bread(block 66) failed [ 103.218786][ T2451] FAT-fs (loop2): Directory bread(block 67) failed [ 103.225174][ T2451] FAT-fs (loop2): Directory bread(block 68) failed [ 103.232297][ T2451] FAT-fs (loop2): Directory bread(block 69) failed [ 103.239127][ T2451] FAT-fs (loop2): Directory bread(block 70) failed [ 103.245490][ T2451] FAT-fs (loop2): Directory bread(block 71) failed [ 103.252173][ T2451] FAT-fs (loop2): Directory bread(block 72) failed [ 103.258659][ T2451] FAT-fs (loop2): Directory bread(block 73) failed [ 103.383963][ T2456] F2FS-fs (loop9): Invalid log blocks per segment (4278190089) [ 103.396952][ T2456] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 103.414049][ T2456] F2FS-fs (loop9): invalid crc value [ 103.437638][ T2456] F2FS-fs (loop9): Found nat_bits in checkpoint [ 103.537170][ T2456] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 103.552013][ T2456] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 103.779383][ T2459] F2FS-fs (loop3): Invalid log blocks per segment (4278190089) [ 103.786947][ T2459] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 103.821423][ T2459] F2FS-fs (loop3): invalid crc value [ 104.009671][ T2459] F2FS-fs (loop3): Found nat_bits in checkpoint [ 104.220446][ T2459] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 104.228511][ T2459] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 105.241786][ T24] kauditd_printk_skb: 113 callbacks suppressed [ 105.241797][ T24] audit: type=1400 audit(1737286596.189:2332): avc: denied { read } for pid=2487 comm="syz.9.509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 105.430333][ T24] audit: type=1400 audit(1737286596.379:2333): avc: denied { write } for pid=2487 comm="syz.9.509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 105.476885][ T25] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 105.632675][ T2501] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 105.666709][ T447] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 105.749214][ T24] audit: type=1400 audit(1737286596.699:2334): avc: denied { add_name } for pid=2500 comm="syz.3.514" name="control" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 105.771402][ T24] audit: type=1400 audit(1737286596.699:2335): avc: denied { associate } for pid=2500 comm="syz.3.514" name="control" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 105.776714][ T25] usb 9-1: Using ep0 maxpacket: 16 [ 105.916914][ T25] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 105.927671][ T25] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 105.938204][ T25] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 106.086767][ T447] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.103302][ T447] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.123314][ T447] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 106.132362][ T447] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.143907][ T447] usb 3-1: config 0 descriptor?? [ 106.153359][ T25] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 106.163988][ T25] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.171873][ T25] usb 9-1: Product: syz [ 106.175790][ T25] usb 9-1: Manufacturer: syz [ 106.176434][ T24] audit: type=1400 audit(1737286597.119:2336): avc: denied { connect } for pid=2512 comm="syz.9.517" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 106.180543][ T25] usb 9-1: SerialNumber: syz [ 106.213194][ T24] audit: type=1400 audit(1737286597.159:2337): avc: denied { bind } for pid=2513 comm="syz.3.516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 106.232691][ T24] audit: type=1400 audit(1737286597.159:2338): avc: denied { listen } for pid=2513 comm="syz.3.516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 106.253668][ T2523] __nla_validate_parse: 55 callbacks suppressed [ 106.253676][ T2523] netlink: 8 bytes leftover after parsing attributes in process `syz.9.518'. [ 106.254333][ T24] audit: type=1400 audit(1737286597.199:2339): avc: denied { accept } for pid=2513 comm="syz.3.516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 106.287828][ T24] audit: type=1400 audit(1737286597.199:2340): avc: denied { read } for pid=2513 comm="syz.3.516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 106.307283][ T24] audit: type=1400 audit(1737286597.209:2341): avc: denied { create } for pid=2521 comm="syz.9.518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 106.377026][ T2527] exfat: Deprecated parameter 'utf8' [ 106.386493][ T2527] exfat: Deprecated parameter 'namecase' [ 106.392152][ T2527] exfat: Deprecated parameter 'utf8' [ 106.432584][ T2527] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 106.461848][ T2530] F2FS-fs (loop9): Invalid log blocks per segment (4278190089) [ 106.472908][ T2530] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 106.483614][ T2530] F2FS-fs (loop9): invalid crc value [ 106.490455][ T2530] F2FS-fs (loop9): Found nat_bits in checkpoint [ 106.512067][ T2530] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 106.519068][ T2530] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 106.727180][ T25] usb 9-1: 2:1 : format type 0 is detected, processed as PCM [ 106.806768][ T429] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 107.047029][ T429] usb 4-1: Using ep0 maxpacket: 32 [ 107.167209][ T429] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 107.315830][ T429] usb 4-1: config 0 has no interface number 0 [ 107.420031][ T2550] 9pnet: Insufficient options for proto=fd [ 107.547064][ T25] usb 9-1: 2:1: cannot get freq at ep 0x82 [ 107.576575][ T447] playstation 0003:054C:0DF2.000A: unknown main item tag 0x0 [ 107.584069][ T447] playstation 0003:054C:0DF2.000A: unknown main item tag 0x0 [ 107.594496][ T447] playstation 0003:054C:0DF2.000A: unknown main item tag 0x0 [ 107.601912][ T447] playstation 0003:054C:0DF2.000A: unknown main item tag 0x0 [ 107.609303][ T447] playstation 0003:054C:0DF2.000A: unknown main item tag 0x0 [ 107.617925][ T447] playstation 0003:054C:0DF2.000A: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.2-1/input0 [ 107.656749][ T429] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 107.665793][ T429] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.673636][ T429] usb 4-1: Product: syz [ 107.677962][ T429] usb 4-1: Manufacturer: syz [ 107.682409][ T429] usb 4-1: SerialNumber: syz [ 107.688343][ T429] usb 4-1: config 0 descriptor?? [ 107.716737][ T447] playstation 0003:054C:0DF2.000A: Failed to retrieve feature with reportID 9: -71 [ 107.725915][ T447] playstation 0003:054C:0DF2.000A: Failed to retrieve DualSense pairing info: -71 [ 107.727399][ T429] smsc95xx v2.0.0 [ 107.735006][ T447] playstation 0003:054C:0DF2.000A: Failed to get MAC address from DualSense [ 107.746994][ T447] playstation 0003:054C:0DF2.000A: Failed to create dualsense. [ 107.755216][ T447] playstation: probe of 0003:054C:0DF2.000A failed with error -71 [ 107.764367][ T447] usb 3-1: USB disconnect, device number 15 [ 107.834015][ T498] usb 9-1: USB disconnect, device number 4 [ 107.916744][ T15] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 107.976733][ T429] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 107.987726][ T429] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 107.998808][ T2560] FAT-fs (loop3): bogus number of FAT sectors [ 108.004749][ T2560] FAT-fs (loop3): Can't find a valid FAT filesystem [ 108.016757][ T429] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 108.027561][ T429] smsc95xx: probe of 4-1:0.67 failed with error -71 [ 108.035205][ T429] usb 4-1: USB disconnect, device number 15 [ 108.180111][ T15] usb 10-1: Using ep0 maxpacket: 16 [ 108.203524][ T2575] blk_update_request: I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 108.214321][ T2575] FAT-fs (loop5): unable to read boot sector [ 108.296823][ T447] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 108.516748][ T15] usb 10-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 108.525913][ T15] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.534120][ T15] usb 10-1: Product: syz [ 108.538224][ T15] usb 10-1: Manufacturer: syz [ 108.542655][ T15] usb 10-1: SerialNumber: syz [ 108.548044][ T15] usb 10-1: config 0 descriptor?? [ 108.576712][ T429] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 108.587236][ T15] ums-onetouch 10-1:0.0: USB Mass Storage device detected [ 108.696773][ T447] usb 3-1: New USB device found, idVendor=056a, idProduct=0028, bcdDevice= 0.00 [ 108.705687][ T447] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.714326][ T447] usb 3-1: config 0 descriptor?? [ 108.788276][ T25] usb 10-1: USB disconnect, device number 3 [ 108.846720][ T286] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 108.936744][ T429] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 108.946830][ T429] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 109.026782][ T429] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 109.035788][ T429] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 109.043563][ T429] usb 4-1: SerialNumber: syz [ 109.266793][ T286] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 10 [ 109.277670][ T286] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 109.327224][ T429] usb 4-1: 0:2 : does not exist [ 109.334631][ T429] usb 4-1: USB disconnect, device number 16 [ 109.358304][ T2594] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12 [ 109.366043][ T2594] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 109.382178][ T2594] F2FS-fs (loop8): invalid crc value [ 109.398250][ T2594] F2FS-fs (loop8): Found nat_bits in checkpoint [ 109.434879][ T2594] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 109.441801][ T2594] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 109.466792][ T286] usb 6-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=7e.66 [ 109.475759][ T286] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.483763][ T286] usb 6-1: Product: syz [ 109.487837][ T286] usb 6-1: Manufacturer: syz [ 109.492153][ T286] usb 6-1: SerialNumber: syz [ 109.501256][ T286] usb 6-1: config 0 descriptor?? [ 109.520329][ T2606] netlink: 20 bytes leftover after parsing attributes in process `syz.2.538'. [ 109.529452][ T2606] netlink: 20 bytes leftover after parsing attributes in process `syz.2.538'. [ 109.538841][ T286] snd-usb-audio: probe of 6-1:0.0 failed with error -90 [ 109.557225][ T325] udevd[325]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 109.841103][ T447] usbhid 3-1:0.0: can't add hid device: -71 [ 109.847152][ T447] usbhid: probe of 3-1:0.0 failed with error -71 [ 109.853494][ T391] usb 6-1: USB disconnect, device number 13 [ 109.854110][ T447] usb 3-1: USB disconnect, device number 16 [ 109.881139][ T2618] device batadv_slave_1 entered promiscuous mode [ 109.890501][ T2618] syz.3.540 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 109.901386][ T2617] device batadv_slave_1 left promiscuous mode [ 109.916759][ T286] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 109.934348][ T2625] netlink: 12 bytes leftover after parsing attributes in process `syz.2.542'. [ 109.938325][ T2621] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_dev=0x0000000000000003,usrquota,,errors=continue [ 109.955451][ T2621] ext4 filesystem being mounted at /117/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.979950][ T2621] overlayfs: upper fs needs to support d_type. [ 110.176779][ T286] usb 10-1: Using ep0 maxpacket: 16 [ 110.222222][ T2640] syz.3.547[2640] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 110.222300][ T2640] syz.3.547[2640] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 110.257038][ T24] kauditd_printk_skb: 312 callbacks suppressed [ 110.257049][ T24] audit: type=1326 audit(1737286601.209:2654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2597 comm="syz.9.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9cf656e92b code=0x7ffc0000 [ 110.310885][ T24] audit: type=1400 audit(1737286601.249:2655): avc: denied { connect } for pid=2645 comm="syz.8.544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 110.333977][ T2651] exfat: Unknown parameter 'zero_size_dir' [ 110.342666][ T24] audit: type=1326 audit(1737286601.259:2656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2597 comm="syz.9.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9cf656e92b code=0x7ffc0000 [ 110.366227][ T286] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.377261][ T286] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 110.390288][ T286] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 110.390448][ T24] audit: type=1326 audit(1737286601.279:2657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2597 comm="syz.9.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9cf656e92b code=0x7ffc0000 [ 110.404166][ T447] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 110.430853][ T286] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.442351][ T286] usb 10-1: config 0 descriptor?? [ 110.447736][ T24] audit: type=1326 audit(1737286601.309:2658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2597 comm="syz.9.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9cf656e92b code=0x7ffc0000 [ 110.494739][ T2640] netlink: 12 bytes leftover after parsing attributes in process `syz.3.547'. [ 110.495255][ T24] audit: type=1326 audit(1737286601.419:2659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2597 comm="syz.9.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9cf656e92b code=0x7ffc0000 [ 110.526801][ T24] audit: type=1326 audit(1737286601.419:2660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2597 comm="syz.9.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9cf656e92b code=0x7ffc0000 [ 110.550664][ T24] audit: type=1326 audit(1737286601.419:2661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2597 comm="syz.9.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9cf656e92b code=0x7ffc0000 [ 110.573733][ T24] audit: type=1326 audit(1737286601.419:2662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2597 comm="syz.9.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9cf656e92b code=0x7ffc0000 [ 110.597224][ T24] audit: type=1326 audit(1737286601.419:2663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2623 comm="syz.2.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc515cd392b code=0x7ffc0000 [ 110.929080][ T2640] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.547: bg 0: block 5: invalid block bitmap [ 110.941653][ T2640] EXT4-fs error (device loop3) in ext4_mb_clear_bb:5645: Corrupt filesystem [ 110.950596][ T2640] EXT4-fs error (device loop3): ext4_free_branches:1026: inode #11: comm syz.3.547: invalid indirect mapped block 3 (level 2) [ 110.963812][ T2640] EXT4-fs (loop3): 1 orphan inode deleted [ 110.969427][ T2640] EXT4-fs (loop3): 1 truncate cleaned up [ 110.974961][ T2640] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 111.056771][ T447] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 111.066923][ T447] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 111.075716][ T447] usb 3-1: config 1 has no interface number 0 [ 111.081769][ T447] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.092872][ T447] usb 3-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 111.101979][ T447] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 111.117470][ T286] microsoft 0003:045E:07DA.000B: item fetching failed at offset 31/34 [ 111.125645][ T286] microsoft 0003:045E:07DA.000B: parse failed [ 111.131824][ T286] microsoft: probe of 0003:045E:07DA.000B failed with error -22 [ 111.296798][ T447] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 111.299198][ T2669] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 111.306349][ T447] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.321287][ T447] usb 3-1: Product: syz [ 111.325254][ T447] usb 3-1: Manufacturer: syz [ 111.329720][ T447] usb 3-1: SerialNumber: syz [ 111.347359][ T286] usb 10-1: USB disconnect, device number 4 [ 111.487841][ T2693] device pim6reg1 entered promiscuous mode [ 111.716795][ T2669] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.727580][ T2669] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.744167][ T2717] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 111.763001][ T2669] usb 4-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 111.772400][ T2669] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.788289][ T2717] fuse: Bad value for 'group_id' [ 111.788724][ T2669] usb 4-1: config 0 descriptor?? [ 111.806735][ T447] cdc_ncm 3-1:1.1: failed GET_NTB_PARAMETERS [ 111.812644][ T447] cdc_ncm 3-1:1.1: bind() failure [ 111.818989][ T2722] syz.8.560[2722] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 111.819044][ T2722] syz.8.560[2722] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 111.834699][ T447] usb 3-1: USB disconnect, device number 17 [ 112.139466][ T2741] EXT4-fs (loop8): Unrecognized mount option "mb_optimize_scan=0x0000000000000001" or missing value [ 112.216718][ T2668] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 112.277612][ T2669] hid-led 0003:0FC5:B080.000C: unknown main item tag 0x0 [ 112.390278][ T2744] EXT4-fs (loop2): invalid inodes per group: 2424864 [ 112.390278][ T2744] [ 112.466680][ T286] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 112.486708][ T2668] usb 10-1: device descriptor read/64, error -71 [ 112.517494][ T2756] 9pnet: Insufficient options for proto=fd [ 112.716773][ T2669] hid-led: probe of 0003:0FC5:B080.000C failed with error -71 [ 112.726100][ T2669] usb 4-1: USB disconnect, device number 17 [ 112.736702][ T2663] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 112.866755][ T286] usb 9-1: New USB device found, idVendor=056a, idProduct=00b2, bcdDevice= 0.00 [ 112.875687][ T286] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.876682][ T2668] usb 10-1: device descriptor read/64, error -71 [ 112.884487][ T286] usb 9-1: config 0 descriptor?? [ 113.096773][ T2663] usb 3-1: New USB device found, idVendor=046d, idProduct=c08a, bcdDevice= 0.00 [ 113.105715][ T2663] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.114070][ T2663] usb 3-1: config 0 descriptor?? [ 113.156737][ T2668] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 113.375760][ T2772] netlink: 72 bytes leftover after parsing attributes in process `syz.5.574'. [ 113.389734][ T2772] netlink: 96 bytes leftover after parsing attributes in process `syz.5.574'. [ 113.416804][ T286] usbhid 9-1:0.0: can't add hid device: -71 [ 113.422691][ T286] usbhid: probe of 9-1:0.0 failed with error -71 [ 113.430674][ T286] usb 9-1: USB disconnect, device number 5 [ 113.446686][ T2668] usb 10-1: device descriptor read/64, error -71 [ 113.494449][ T2663] usbhid 3-1:0.0: can't add hid device: -71 [ 113.500554][ T2663] usbhid: probe of 3-1:0.0 failed with error -71 [ 113.507570][ T2663] usb 3-1: USB disconnect, device number 18 [ 113.866688][ T2668] usb 10-1: device descriptor read/64, error -71 [ 113.896739][ T312] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 113.986760][ T2668] usb usb10-port1: attempt power cycle [ 114.493157][ T2794] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 114.518401][ T2794] EXT4-fs (loop3): mounted filesystem without journal. Opts: acl,dioread_nolock,,errors=continue [ 114.557726][ T2797] loop2: p1 [ 114.606744][ T312] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.617468][ T312] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 114.627082][ T312] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 114.639763][ T312] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 114.648824][ T312] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.657221][ T312] usb 6-1: config 0 descriptor?? [ 114.665687][ T1075] udevd[1075]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 114.726728][ T2668] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 114.896708][ T2668] usb 10-1: device descriptor read/8, error -71 [ 115.136717][ T2668] usb 10-1: device descriptor read/8, error -71 [ 115.147909][ T312] plantronics 0003:047F:FFFF.000D: No inputs registered, leaving [ 115.158094][ T312] plantronics 0003:047F:FFFF.000D: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 115.269301][ T2838] erofs: (device loop2): mounted with root inode @ nid 36. [ 115.279972][ T2838] attempt to access beyond end of device [ 115.279972][ T2838] loop2: rw=0, want=24, limit=16 [ 115.643223][ T2838] attempt to access beyond end of device [ 115.643223][ T2838] loop2: rw=0, want=24, limit=16 [ 115.655068][ T2838] attempt to access beyond end of device [ 115.655068][ T2838] loop2: rw=0, want=24, limit=16 [ 115.666532][ T2838] attempt to access beyond end of device [ 115.666532][ T2838] loop2: rw=0, want=24, limit=16 [ 115.678057][ T2838] attempt to access beyond end of device [ 115.678057][ T2838] loop2: rw=0, want=24, limit=16 [ 115.689420][ T2838] attempt to access beyond end of device [ 115.689420][ T2838] loop2: rw=0, want=24, limit=16 [ 115.700717][ T2838] attempt to access beyond end of device [ 115.700717][ T2838] loop2: rw=0, want=24, limit=16 [ 115.751172][ T2666] usb 6-1: USB disconnect, device number 14 [ 116.023293][ T24] kauditd_printk_skb: 510 callbacks suppressed [ 116.023306][ T24] audit: type=1400 audit(1737286606.969:3174): avc: denied { read write } for pid=2841 comm="syz.9.597" name="uinput" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 116.058486][ T2845] input: syz1 as /devices/virtual/input/input8 [ 116.144956][ T24] audit: type=1400 audit(1737286607.009:3175): avc: denied { open } for pid=2841 comm="syz.9.597" path="/dev/uinput" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 116.171586][ T24] audit: type=1400 audit(1737286607.009:3176): avc: denied { ioctl } for pid=2841 comm="syz.9.597" path="/dev/uinput" dev="devtmpfs" ino=253 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 116.227017][ T24] audit: type=1326 audit(1737286607.019:3177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2842 comm="syz.3.595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa00a846d29 code=0x7ffc0000 [ 116.318051][ T24] audit: type=1326 audit(1737286607.019:3178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2842 comm="syz.3.595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa00a846d29 code=0x7ffc0000 [ 116.342803][ T24] audit: type=1326 audit(1737286607.019:3179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2842 comm="syz.3.595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa00a846d29 code=0x7ffc0000 [ 116.377775][ T24] audit: type=1326 audit(1737286607.019:3180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2842 comm="syz.3.595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fa00a846d29 code=0x7ffc0000 [ 116.401363][ T24] audit: type=1326 audit(1737286607.019:3181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2842 comm="syz.3.595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa00a846d29 code=0x7ffc0000 [ 116.424639][ T24] audit: type=1326 audit(1737286607.019:3182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2842 comm="syz.3.595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fa00a846d29 code=0x7ffc0000 [ 116.447821][ T24] audit: type=1326 audit(1737286607.019:3183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2842 comm="syz.3.595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa00a846d63 code=0x7ffc0000 [ 116.487660][ T2850] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 116.495400][ T2850] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=2802c018, mo2=0002] [ 116.503282][ T2850] System zones: 0-2, 18-18, 34-35 [ 116.508485][ T2850] EXT4-fs (loop8): mounted filesystem without journal. Opts: lazytime,noinit_itable,debug,,errors=continue [ 116.554465][ T2843] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=2843 comm=syz.3.595 [ 116.797541][ T2874] Module has invalid ELF structures [ 116.797546][ T2873] Module has invalid ELF structures [ 116.821415][ T2877] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 116.948899][ T2886] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 116.957414][ T2886] EXT4-fs (loop2): orphan cleanup on readonly fs [ 116.963645][ T2886] EXT4-fs error (device loop2): ext4_ext_check_inode:500: inode #3: comm syz.2.605: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 2(4), depth 0(0) [ 116.981401][ T2886] EXT4-fs error (device loop2): ext4_quota_enable:6426: comm syz.2.605: Bad quota inode: 3, type: 0 [ 116.992393][ T2886] EXT4-fs warning (device loop2): ext4_enable_quotas:6467: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 117.006847][ T2886] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 117.013316][ T2886] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 117.057090][ T2895] exfat: Deprecated parameter 'utf8' [ 117.062325][ T2895] exfat: Deprecated parameter 'namecase' [ 117.076111][ T2895] exfat: Deprecated parameter 'utf8' [ 117.116505][ T2895] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 117.154510][ T2902] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 117.362504][ T2907] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=2907 comm=syz.5.608 [ 117.849169][ T2913] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 117.896197][ T2913] EXT4-fs (loop2): 1 orphan inode deleted [ 117.902331][ T2913] EXT4-fs (loop2): mounted filesystem without journal. Opts: nomblk_io_submit,nodiscard,noquota,init_itable,sb=0x0000000000000007,resgid=0x0000000000000000,sysvgroups,max_dir_size_kb=0x0000000000000004,dioread_lock,,errors=continue [ 117.924824][ T2913] ext4 filesystem being mounted at /109/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.947839][ T2916] 9pnet: Insufficient options for proto=fd [ 117.972942][ T2930] syz.5.615[2930] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 117.973005][ T2930] syz.5.615[2930] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 118.017153][ T2933] FAT-fs (loop3): Unrecognized mount option "nodotsots" or missing value [ 118.037891][ T2936] netlink: 76 bytes leftover after parsing attributes in process `syz.5.615'. [ 118.107362][ T2938] ipt_REJECT: TCP_RESET invalid for non-tcp [ 118.220510][ T2941] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue [ 118.231132][ T2941] ext4 filesystem being mounted at /60/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.241711][ T2663] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 118.486693][ T498] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 118.676754][ T2663] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 118.686813][ T2663] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 118.726692][ T498] usb 3-1: Using ep0 maxpacket: 16 [ 118.786770][ T2663] usb 10-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 118.795798][ T2663] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 118.803640][ T2663] usb 10-1: SerialNumber: syz [ 118.926732][ T498] usb 3-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 118.939553][ T498] usb 3-1: config 1 interface 0 has no altsetting 0 [ 119.051981][ T2955] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 119.059950][ T2955] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 119.068911][ T2955] F2FS-fs (loop3): invalid crc value [ 119.075462][ T2955] F2FS-fs (loop3): Found nat_bits in checkpoint [ 119.084288][ T2958] erofs: (device loop8): mounted with root inode @ nid 36. [ 119.087291][ T2663] usb 10-1: 0:2 : does not exist [ 119.095721][ T2958] attempt to access beyond end of device [ 119.095721][ T2958] loop8: rw=524288, want=24, limit=16 [ 119.105580][ T2663] usb 10-1: USB disconnect, device number 9 [ 119.109434][ T498] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 119.124966][ T498] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.135054][ T498] usb 3-1: Product: syz [ 119.140652][ T498] usb 3-1: Manufacturer: syz [ 119.142520][ T2955] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 119.145422][ T498] usb 3-1: SerialNumber: syz [ 119.152383][ T2955] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 119.208947][ T2955] attempt to access beyond end of device [ 119.208947][ T2955] loop3: rw=2049, want=53376, limit=40427 [ 119.221615][ T2955] attempt to access beyond end of device [ 119.221615][ T2955] loop3: rw=2049, want=40968, limit=40427 [ 119.307364][ T1075] udevd[1075]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 119.407112][ T2948] udc-core: couldn't find an available UDC or it's busy [ 119.413885][ T2948] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 119.421358][ T2948] udc-core: couldn't find an available UDC or it's busy [ 119.428192][ T2948] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 119.435684][ T2948] udc-core: couldn't find an available UDC or it's busy [ 119.442386][ T2948] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 119.449763][ T2948] udc-core: couldn't find an available UDC or it's busy [ 119.456695][ T2948] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 119.464701][ T2948] udc-core: couldn't find an available UDC or it's busy [ 119.473046][ T2948] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 119.480733][ T2666] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 119.727198][ T2974] exfat: Unknown parameter '1 k0x0000000000000000' [ 119.859361][ T2986] netlink: 'syz.9.628': attribute type 6 has an invalid length. [ 119.870296][ T498] usb 3-1: USB disconnect, device number 19 [ 119.907658][ T2666] usb 9-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 119.918798][ T2666] usb 9-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 119.929901][ T2666] usb 9-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 119.938807][ T2666] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.976872][ T2968] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 120.146700][ T2663] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 120.288347][ T2990] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 120.446762][ T2663] usb 10-1: Using ep0 maxpacket: 32 [ 120.686996][ T2663] usb 10-1: unable to get BOS descriptor or descriptor too short [ 120.767503][ T2663] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 120.793589][ T2663] usb 10-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 120.837677][ T2663] usb 10-1: config 1 has no interface number 1 [ 121.047035][ T2663] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 121.056182][ T2666] aiptek 9-1:17.0: Aiptek using 400 ms programming speed [ 121.064737][ T2666] input: Aiptek as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:17.0/input/input9 [ 121.110735][ T2663] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.119734][ T2663] usb 10-1: Product: 뻏昝엾ꝿ칫䍞䥝ޛ×郈⦊뗗㌹캵낱魹㣭Ţꚴ》咤띢얫㳎뀡饇鯢ꇬ⦋䰏鹼抢ᵝ쳬琂鉀摒쟉ᵩ묔౔萘ꬢ䚾旒揲謄져銧ᏢʵϮ쬈ᯘ⣰易ᓁ霼缫冎掿薁笝蕴㲹⟘๴嵽㽞ꙿ畉ꞟ왭ᘓ夔䀠웙㪳恖֟▌䌆鸰㸉㞱㓮᧭烤䍓읾勊챎ᔇ쁑病Ðջ⥼ [ 121.151485][ T24] kauditd_printk_skb: 393 callbacks suppressed [ 121.151495][ T24] audit: type=1400 audit(1737286612.099:3577): avc: denied { relabelfrom } for pid=2967 comm="syz.8.624" name="" dev="pipefs" ino=24691 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 121.181096][ T2663] usb 10-1: Manufacturer: 오鑿꒭￫鷱瑶⽰喀࿀ᄷꝧ鯹퇫穴﹵왒녲蹡৷錍⻮鿯숈Î鐻쳎扝暇鵠臵䱌姱上밚虣꯬랕齤ժ蹜맬޺蜺킣䇽榣ギ鬴슾杀᷎赲뫦㥃輁浛鷅胪䚕ኴ혁䀓뺍謻넅嫁儴⚷䆐摯軀귤㕈ﵙ膓ｗꇃⵋ䰔ゾ颅斳狪荺⫑ᕷ磑걲﷌鸠돻䌆ꖑᨳ现 [ 121.212175][ T2663] usb 10-1: SerialNumber:  [ 121.260636][ T5] usb 9-1: USB disconnect, device number 6 [ 121.267540][ T287] EXT4-fs error (device loop3): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 121.291780][ T24] audit: type=1400 audit(1737286612.239:3578): avc: denied { unlink } for pid=287 comm="syz-executor" name="file0" dev="loop3" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 121.314692][ T24] audit: type=1400 audit(1737286612.259:3579): avc: denied { unlink } for pid=287 comm="syz-executor" name="file1" dev="loop3" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 121.379458][ T3000] F2FS-fs (loop2): Found nat_bits in checkpoint [ 121.424134][ T3000] F2FS-fs (loop2): Mounted with checkpoint version = 753bd00b [ 121.666743][ T2663] usb 10-1: 2:130: cannot set enable PITCH [ 121.687144][ T2663] usb 10-1: 2:1: cannot set freq 14372013 to ep 0x82 [ 121.708810][ T2663] usb 10-1: USB disconnect, device number 10 [ 121.757211][ T3015] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 121.764171][ T3015] EXT4-fs (loop3): Ignoring removed bh option [ 121.770349][ T3015] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 121.781433][ T3015] EXT4-fs (loop3): 1 truncate cleaned up [ 121.787196][ T3015] EXT4-fs (loop3): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000002,mblk_io_submit,bh,auto_da_alloc,barrier,quota,nogrpid,,errors=continue [ 121.820088][ T24] audit: type=1400 audit(1737286612.769:3580): avc: denied { map } for pid=3014 comm="syz.3.634" path="/138/bus/memory.stat" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 121.842911][ T498] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 121.861053][ T24] audit: type=1400 audit(1737286612.809:3581): avc: denied { remount } for pid=3014 comm="syz.3.634" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 121.907466][ T325] udevd[325]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 121.932377][ T24] audit: type=1326 audit(1737286612.879:3582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3027 comm="syz.8.637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9edc54d29 code=0x7ffc0000 [ 121.966322][ T24] audit: type=1326 audit(1737286612.899:3583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3027 comm="syz.8.637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9edc54d29 code=0x7ffc0000 [ 122.012089][ T24] audit: type=1326 audit(1737286612.899:3584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3027 comm="syz.8.637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb9edc54d29 code=0x7ffc0000 [ 122.043021][ T24] audit: type=1326 audit(1737286612.899:3585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3027 comm="syz.8.637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9edc54d29 code=0x7ffc0000 [ 122.087483][ T24] audit: type=1326 audit(1737286612.899:3586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3027 comm="syz.8.637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9edc54d29 code=0x7ffc0000 [ 122.156699][ T498] usb 3-1: device descriptor read/64, error -71 [ 122.457478][ T3046] EXT4-fs (loop3): Ignoring removed nobh option [ 122.463638][ T3046] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 122.478065][ T3046] EXT4-fs (loop3): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,resgid=0x0000000000000000,jqfmt=vfsv0,data_err=ignore,grpquota,nobh,user_xattr,nolazytime,dioread_nolock,,errors=continue [ 122.846719][ T498] usb 3-1: device descriptor read/64, error -71 [ 123.116688][ T498] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 123.158064][ T3057] F2FS-fs (loop8): Invalid log blocks per segment (4278190089) [ 123.173766][ T3057] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 123.183012][ T3057] F2FS-fs (loop8): invalid crc value [ 123.190037][ T3057] F2FS-fs (loop8): Found nat_bits in checkpoint [ 123.224848][ T3057] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 123.231842][ T3057] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 123.436673][ T498] usb 3-1: device descriptor read/64, error -71 [ 123.877649][ T3078] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue [ 123.886477][ T3078] ext4 filesystem being mounted at /24/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.217458][ T3087] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 124.225005][ T3087] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 124.254402][ T3087] F2FS-fs (loop3): invalid crc value [ 124.287566][ T3087] F2FS-fs (loop3): Found nat_bits in checkpoint [ 124.374970][ T3087] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 124.387818][ T3087] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 124.429489][ T3106] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 124.460079][ T3106] overlayfs: filesystem on './bus' not supported as upperdir [ 125.129912][ T3114] netem: change failed [ 125.246222][ T3120] SELinux: security_context_str_to_sid(u) failed for (dev incremental-fs, type incremental-fs) errno=-22 [ 125.472529][ T3123] F2FS-fs (loop2): Invalid log blocks per segment (4278190089) [ 125.485457][ T3123] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 125.494717][ T3123] F2FS-fs (loop2): invalid crc value [ 125.501698][ T3123] F2FS-fs (loop2): Found nat_bits in checkpoint [ 125.536376][ T3123] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 125.543387][ T3123] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 127.043335][ T3155] syz.2.663[3155] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 127.043393][ T3155] syz.2.663[3155] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 127.100226][ T24] kauditd_printk_skb: 110 callbacks suppressed [ 127.100237][ T24] audit: type=1400 audit(1737286618.049:3697): avc: denied { write } for pid=3159 comm="syz.2.664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 127.286686][ T498] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 127.536739][ T498] usb 9-1: Using ep0 maxpacket: 32 [ 127.661898][ T24] audit: type=1400 audit(1737286618.609:3698): avc: denied { watch } for pid=3175 comm="syz.3.668" path="/146" dev="tmpfs" ino=834 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 127.683975][ T498] usb 9-1: config index 0 descriptor too short (expected 29220, got 36) [ 127.700125][ T24] audit: type=1400 audit(1737286618.649:3699): avc: denied { ioctl } for pid=3177 comm="syz.5.669" path="socket:[26007]" dev="sockfs" ino=26007 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 127.706650][ T498] usb 9-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 127.730161][ T24] audit: type=1400 audit(1737286618.649:3700): avc: denied { bind } for pid=3177 comm="syz.5.669" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 127.733408][ T3178] tipc: Started in network mode [ 127.756494][ T3178] tipc: Own node identity 8a2c55eabf6d, cluster identity 4711 [ 127.763942][ T498] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 127.765085][ T3178] tipc: Enabled bearer , priority 0 [ 127.773029][ T498] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 127.795341][ T498] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 127.800822][ T3180] EXT4-fs (loop3): Ignoring removed orlov option [ 127.811115][ T498] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 127.817789][ T3178] device syzkaller0 entered promiscuous mode [ 127.830368][ T498] usb 9-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 127.837555][ T3180] EXT4-fs error (device loop3): ext4_orphan_get:1395: inode #15: comm syz.3.670: casefold flag without casefold feature [ 127.839545][ T498] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.852348][ T3180] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: inode #12: comm syz.3.670: missing EA_INODE flag [ 127.865768][ T498] usb 9-1: config 0 descriptor?? [ 127.876082][ T3177] tipc: Resetting bearer [ 127.876154][ T3180] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.670: error while reading EA inode 12 err=-117 [ 127.894172][ T3180] EXT4-fs (loop3): 1 orphan inode deleted [ 127.899818][ T3180] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,orlov,,errors=continue [ 127.905805][ T3177] tipc: Disabling bearer [ 127.927231][ T3180] device bridge1 entered promiscuous mode [ 127.981431][ T24] audit: type=1400 audit(1737286618.929:3701): avc: denied { mounton } for pid=3179 comm="syz.3.670" path="/147/file0/bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 127.987994][ T3186] EXT4-fs error (device loop3): ext4_map_blocks:629: inode #2: block 36: comm syz.3.670: lblock 0 mapped to illegal pblock 36 (length 1) [ 128.031484][ T287] EXT4-fs error (device loop3): ext4_map_blocks:629: inode #2: block 36: comm syz-executor: lblock 0 mapped to illegal pblock 36 (length 1) [ 128.187863][ T498] usblp 9-1:0.0: usblp0: USB Bidirectional printer dev 7 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 128.263241][ T3197] netlink: 'syz.2.673': attribute type 3 has an invalid length. [ 128.376512][ T3198] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.383451][ T3198] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.392157][ T3198] device bridge_slave_0 entered promiscuous mode [ 128.455316][ T3198] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.493789][ T3198] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.537069][ T3198] device bridge_slave_1 entered promiscuous mode [ 128.685591][ T3198] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.692484][ T3198] bridge0: port 2(bridge_slave_1) entered forwarding state [ 128.699656][ T3198] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.706509][ T3198] bridge0: port 1(bridge_slave_0) entered forwarding state [ 128.797397][ T445] device bridge_slave_1 left promiscuous mode [ 128.804049][ T445] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.825137][ T312] usb 9-1: USB disconnect, device number 7 [ 128.830820][ C0] usblp0: nonzero read bulk status received: -71 [ 128.838860][ T3145] usblp0: error -71 reading from printer [ 128.858462][ T445] device bridge_slave_0 left promiscuous mode [ 128.866796][ T312] usblp0: removed [ 128.875248][ T445] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.906278][ T445] device dummy0 left promiscuous mode [ 128.915610][ T445] device veth1_macvtap left promiscuous mode [ 128.925710][ T445] device veth0_vlan left promiscuous mode [ 128.959531][ T3209] F2FS-fs (loop9): Invalid log blocks per segment (4278190089) [ 128.972423][ T3209] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 128.987532][ T3209] F2FS-fs (loop9): invalid crc value [ 129.018204][ T3209] F2FS-fs (loop9): Found nat_bits in checkpoint [ 129.063086][ T3209] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 129.070078][ T3209] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 129.098525][ T3225] FAT-fs (loop5): Directory bread(block 64) failed [ 129.104959][ T3225] FAT-fs (loop5): Directory bread(block 65) failed [ 129.110949][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 129.112477][ T3225] FAT-fs (loop5): Directory bread(block 66) failed [ 129.121100][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 129.124956][ T3225] FAT-fs (loop5): Directory bread(block 67) failed [ 129.137363][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 129.139158][ T3225] FAT-fs (loop5): Directory bread(block 68) failed [ 129.153059][ T3225] FAT-fs (loop5): Directory bread(block 69) failed [ 129.159404][ T3225] FAT-fs (loop5): Directory bread(block 70) failed [ 129.165725][ T3225] FAT-fs (loop5): Directory bread(block 71) failed [ 129.172287][ T3225] FAT-fs (loop5): Directory bread(block 72) failed [ 129.178726][ T3225] FAT-fs (loop5): Directory bread(block 73) failed [ 129.231397][ T3198] device veth0_vlan entered promiscuous mode [ 129.245306][ T3198] device veth1_macvtap entered promiscuous mode [ 129.299024][ T446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 129.307250][ T446] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 129.315319][ T446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 129.323318][ T446] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 129.326714][ T498] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 129.331632][ T446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 129.347171][ T446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 129.347422][ T3231] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 129.371373][ T446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 129.379441][ T446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 129.387318][ T446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 129.395352][ T446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 129.403594][ T446] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 129.411592][ T446] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 129.420387][ T446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 129.453613][ T446] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 129.472147][ T446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 129.487655][ T446] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 129.505230][ T446] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 129.556929][ T24] audit: type=1326 audit(1737286620.499:3702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3241 comm="syz.8.683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9edc54d29 code=0x7ffc0000 [ 129.587208][ T498] usb 3-1: Using ep0 maxpacket: 32 [ 129.611145][ T24] audit: type=1326 audit(1737286620.499:3703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3241 comm="syz.8.683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9edc54d29 code=0x7ffc0000 [ 129.646051][ T3242] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue [ 129.656865][ T3242] ext4 filesystem being mounted at /74/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.706766][ T24] audit: type=1326 audit(1737286620.499:3704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3241 comm="syz.8.683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fb9edc54d29 code=0x7ffc0000 [ 129.757216][ T24] audit: type=1326 audit(1737286620.499:3705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3241 comm="syz.8.683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb9edc54d63 code=0x7ffc0000 [ 129.780559][ T498] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 129.790488][ T498] usb 3-1: can't read configurations, error -61 [ 129.816685][ T24] audit: type=1326 audit(1737286620.529:3706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3241 comm="syz.8.683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fb9edc537df code=0x7ffc0000 [ 129.946699][ T498] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 130.196654][ T498] usb 3-1: Using ep0 maxpacket: 32 [ 130.356956][ T498] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 130.364415][ T498] usb 3-1: can't read configurations, error -61 [ 130.370739][ T498] usb usb3-port1: attempt power cycle [ 130.656681][ T447] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 130.776674][ T498] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 130.876854][ T498] usb 3-1: Using ep0 maxpacket: 32 [ 130.899052][ T3253] xt_bpf: check failed: parse error [ 130.941502][ T3257] udc-core: couldn't find an available UDC or it's busy [ 130.948378][ T3257] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 131.066723][ T447] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 131.076685][ T447] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 131.089686][ T498] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 131.097400][ T447] usb 6-1: New USB device found, idVendor=0005, idProduct=0000, bcdDevice= 0.00 [ 131.106236][ T447] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.114459][ T498] usb 3-1: can't read configurations, error -61 [ 131.124500][ T447] usb 6-1: config 0 descriptor?? [ 131.206752][ T2659] usb 10-1: new full-speed USB device number 11 using dummy_hcd [ 131.247672][ T3266] netlink: 96 bytes leftover after parsing attributes in process `syz.8.690'. [ 131.266706][ T498] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 131.356837][ T498] usb 3-1: Using ep0 maxpacket: 32 [ 131.476696][ T2659] usb 10-1: device descriptor read/64, error -71 [ 131.526695][ T2663] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 131.528288][ T3269] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 131.542778][ T498] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 131.542883][ T3269] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.550207][ T498] usb 3-1: can't read configurations, error -61 [ 131.550316][ T498] usb usb3-port1: unable to enumerate USB device [ 131.766668][ T2663] usb 9-1: Using ep0 maxpacket: 32 [ 131.849479][ T3276] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 131.857281][ T3276] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 131.865987][ T3276] F2FS-fs (loop1): invalid crc value [ 131.866794][ T2659] usb 10-1: device descriptor read/64, error -71 [ 131.872642][ T3276] F2FS-fs (loop1): Found nat_bits in checkpoint [ 131.907861][ T3276] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 131.914728][ T3276] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 131.922136][ T447] usb 6-1: string descriptor 0 read error: -71 [ 131.928491][ T447] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 131.939971][ T447] usb 6-1: USB disconnect, device number 15 [ 132.016214][ T3286] netlink: 12 bytes leftover after parsing attributes in process `syz.5.694'. [ 132.306823][ T2663] usb 9-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 132.359691][ T2659] usb 10-1: new full-speed USB device number 12 using dummy_hcd [ 132.789440][ T49] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 132.806504][ T49] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 132.938463][ T24] kauditd_printk_skb: 167 callbacks suppressed [ 132.938475][ T24] audit: type=1326 audit(1737286623.889:3874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3291 comm="syz.2.697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc515cd3d29 code=0x7ffc0000 [ 133.007742][ T2663] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.015649][ T2663] usb 9-1: Product: syz [ 133.019770][ T2663] usb 9-1: Manufacturer: syz [ 133.024200][ T2663] usb 9-1: SerialNumber: syz [ 133.031410][ T24] audit: type=1326 audit(1737286623.919:3875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3291 comm="syz.2.697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc515cd3d29 code=0x7ffc0000 [ 133.055044][ T24] audit: type=1326 audit(1737286623.919:3876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3291 comm="syz.2.697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc515cd3d29 code=0x7ffc0000 [ 133.078427][ T24] audit: type=1326 audit(1737286623.919:3877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3291 comm="syz.2.697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc515cd3d29 code=0x7ffc0000 [ 133.138649][ T3299] binfmt_misc: register: failed to install interpreter file ./file0 [ 133.159882][ T2663] usb 9-1: config 0 descriptor?? [ 133.646771][ T2659] usb 10-1: device descriptor read/64, error -71 [ 133.886854][ T312] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 134.198018][ T3317] syz.9.703[3317] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 134.198322][ T3317] syz.9.703[3317] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 134.205868][ T447] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 134.266733][ T2663] (unnamed net_device) (uninitialized): Assigned a random MAC address: 7a:77:e2:05:97:1a [ 134.278067][ T2663] rtl8150 9-1:0.0: eth1: rtl8150 is detected [ 134.284606][ T2663] usb 9-1: USB disconnect, device number 8 [ 134.356688][ T312] usb 2-1: Using ep0 maxpacket: 16 [ 134.496737][ T312] usb 2-1: config 0 has an invalid interface number: 3 but max is 0 [ 134.504612][ T312] usb 2-1: config 0 has no interface number 0 [ 134.510646][ T312] usb 2-1: config 0 interface 3 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 134.520244][ T312] usb 2-1: config 0 interface 3 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 134.528027][ T24] audit: type=1400 audit(1737286625.479:3878): avc: denied { read } for pid=133 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 134.529973][ T312] usb 2-1: config 0 interface 3 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 134.666768][ T447] usb 6-1: unable to get BOS descriptor or descriptor too short [ 134.744109][ T3324] netlink: 8 bytes leftover after parsing attributes in process `syz.2.705'. [ 134.756794][ T312] usb 2-1: New USB device found, idVendor=1b3d, idProduct=01a8, bcdDevice=ab.22 [ 134.768488][ T312] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.777233][ T447] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 223, changing to 7 [ 134.780601][ T3328] device ip6_vti0 entered promiscuous mode [ 134.793799][ T447] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 134.794036][ T3328] device vlan2 entered promiscuous mode [ 134.803604][ T312] usb 2-1: Product: syz [ 134.812848][ T312] usb 2-1: Manufacturer: syz [ 134.812873][ T3328] device ip6_vti0 left promiscuous mode [ 134.817524][ T312] usb 2-1: SerialNumber: syz [ 134.830360][ T312] usb 2-1: config 0 descriptor?? [ 134.856822][ T3299] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 134.872016][ T3299] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 134.887173][ T312] ftdi_sio 2-1:0.3: FTDI USB Serial Device converter detected [ 134.895719][ T312] usb 2-1: Detected FT-X [ 134.910062][ T312] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 7 [ 135.016816][ T447] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 135.036458][ T447] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.040002][ T24] audit: type=1400 audit(1737286625.989:3879): avc: denied { bind } for pid=3335 comm="syz.9.709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 135.054641][ T447] usb 6-1: Product: syz [ 135.085183][ T447] usb 6-1: Manufacturer: syz [ 135.088871][ T24] audit: type=1400 audit(1737286626.009:3880): avc: denied { setopt } for pid=3335 comm="syz.9.709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 135.090005][ T447] usb 6-1: SerialNumber: syz [ 135.110502][ T24] audit: type=1400 audit(1737286626.019:3881): avc: denied { bind } for pid=3333 comm="syz.8.708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 135.116885][ T312] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 135.176751][ T312] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 135.196770][ T312] ftdi_sio 2-1:0.3: GPIO initialisation failed: -71 [ 135.203936][ T312] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 135.211809][ T2663] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 135.224088][ T312] usb 2-1: USB disconnect, device number 2 [ 135.230664][ T312] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 135.240725][ T312] ftdi_sio 2-1:0.3: device disconnected [ 135.266429][ T24] audit: type=1326 audit(1737286626.209:3882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3348 comm="syz.8.713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9edc54d29 code=0x7ffc0000 [ 135.308275][ T24] audit: type=1326 audit(1737286626.259:3883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3348 comm="syz.8.713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9edc54d29 code=0x7ffc0000 [ 135.364307][ T3349] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 135.477224][ T3353] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 135.486431][ T3350] F2FS-fs (loop9): Small segment_count (9 < 1 * 24) [ 135.493053][ T3350] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 135.495273][ T3353] EXT4-fs (loop8): orphan cleanup on readonly fs [ 135.509538][ T3350] F2FS-fs (loop9): Found nat_bits in checkpoint [ 135.510622][ T3353] EXT4-fs error (device loop8): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 19 vs 41 free clusters [ 135.530433][ T3353] EXT4-fs error (device loop8): ext4_acquire_dquot:6219: comm syz.8.714: Failed to acquire dquot type 0 [ 135.541842][ T3353] EXT4-fs (loop8): 1 truncate cleaned up [ 135.544753][ T3350] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 135.547885][ T3353] EXT4-fs (loop8): mounted filesystem without journal. Opts: bsddf,noblock_validity,inode_readahead_blks=0x0000000000000080,barrier=0x0000000000000000,nogrpid,resgid=0x000000000000ee01,noinit_itable,noinit_itable,resgid=0x000000000000ee002,errors=continue [ 135.554266][ T3350] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 135.592163][ T3350] attempt to access beyond end of device [ 135.592163][ T3350] loop9: rw=2049, want=53256, limit=40427 [ 135.676770][ T2663] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 135.685780][ T2663] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.694356][ T2663] usb 3-1: config 0 descriptor?? [ 135.745736][ T3360] F2FS-fs (loop8): Unrecognized mount option "lazytiard_unit=sectioqUn" or missing value [ 136.751729][ T447] usb 6-1: 2:1 : sample bitwidth 191 in over sample bytes 3 [ 136.757342][ T3376] EXT4-fs (loop5): Ignoring removed mblk_io_submit option [ 136.759152][ T447] usb 6-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 136.768407][ T3373] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 136.803968][ T3376] EXT4-fs error (device loop5): ext4_xattr_inode_iget:404: comm syz.5.717: inode #1: comm syz.5.717: iget: illegal inode # [ 136.817177][ T3376] EXT4-fs error (device loop5): ext4_xattr_inode_iget:409: comm syz.5.717: error while reading EA inode 1 err=-117 [ 136.829474][ T3376] EXT4-fs error (device loop5): ext4_xattr_inode_iget:404: comm syz.5.717: inode #1: comm syz.5.717: iget: illegal inode # [ 136.842619][ T3376] EXT4-fs error (device loop5): ext4_xattr_inode_iget:409: comm syz.5.717: error while reading EA inode 1 err=-117 [ 136.855482][ T3376] EXT4-fs (loop5): 1 orphan inode deleted [ 136.861543][ T3376] EXT4-fs (loop5): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000005c,minixdf,max_batch_time=0x0000000000000002,auto_da_alloc=0x0000000000000009,mblk_io_submit,,errors=continue [ 136.911919][ T3380] syz.8.719[3380] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 136.911980][ T3380] syz.8.719[3380] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 136.936440][ T447] usb 6-1: USB disconnect, device number 16 [ 137.078095][ T3384] F2FS-fs (loop1): Invalid log blocks per segment (4278190089) [ 137.085595][ T3384] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 137.094499][ T3384] F2FS-fs (loop1): invalid crc value [ 137.100967][ T3384] F2FS-fs (loop1): Found nat_bits in checkpoint [ 137.122721][ T3384] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 137.129635][ T3384] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 137.154000][ T3198] attempt to access beyond end of device [ 137.154000][ T3198] loop1: rw=2049, want=45112, limit=40427 [ 137.473768][ T3395] EXT4-fs (loop5): Test dummy encryption mode enabled [ 137.485905][ T3395] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption,i_version,stripe=0x0000000000000007,commit=0x0000000000000005,inlinecrypt,data_err=ignore,max_batch_time=0x0000000000000000,noblock_validity,,errors=continue [ 137.574518][ T3404] netlink: 28 bytes leftover after parsing attributes in process `syz.1.725'. [ 137.583327][ T3404] netlink: 28 bytes leftover after parsing attributes in process `syz.1.725'. [ 137.617313][ T2663] usb 3-1: Cannot set autoneg [ 137.622645][ T2663] MOSCHIP usb-ethernet driver: probe of 3-1:0.0 failed with error -71 [ 137.713458][ T3399] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue [ 137.722357][ T3399] ext4 filesystem being mounted at /87/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.753202][ T2663] usb 3-1: USB disconnect, device number 26 [ 138.235687][ T24] kauditd_printk_skb: 136 callbacks suppressed [ 138.235699][ T24] audit: type=1400 audit(1737286629.039:4018): avc: denied { create } for pid=3393 comm="syz.5.723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 138.315591][ T24] audit: type=1400 audit(1737286629.039:4019): avc: denied { write } for pid=3393 comm="syz.5.723" path="socket:[26464]" dev="sockfs" ino=26464 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 138.340047][ T24] audit: type=1400 audit(1737286629.039:4020): avc: denied { nlmsg_read } for pid=3393 comm="syz.5.723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 138.377184][ T2330] attempt to access beyond end of device [ 138.377184][ T2330] loop9: rw=2049, want=45104, limit=40427 [ 138.387576][ T24] audit: type=1400 audit(1737286629.329:4021): avc: denied { read } for pid=3413 comm="syz.8.726" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 138.425126][ T24] audit: type=1400 audit(1737286629.369:4022): avc: denied { open } for pid=3413 comm="syz.8.726" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 138.450270][ T7] tipc: Left network mode [ 138.454653][ T24] audit: type=1400 audit(1737286629.369:4023): avc: denied { ioctl } for pid=3413 comm="syz.8.726" path="/dev/binderfs/binder0" dev="binder" ino=13 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 138.480163][ T24] audit: type=1400 audit(1737286629.369:4024): avc: denied { set_context_mgr } for pid=3413 comm="syz.8.726" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 138.533107][ T3418] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.540172][ T3418] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.547437][ T3418] device bridge_slave_0 entered promiscuous mode [ 138.555897][ T3418] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.563135][ T3418] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.608755][ T3412] EXT4-fs (loop1): mounted filesystem without journal. Opts: resgid=0x0000000000000000,noload,noblock_validity,,errors=continue [ 138.628326][ T3418] device bridge_slave_1 entered promiscuous mode [ 138.655250][ T3412] EXT4-fs (loop1): Couldn't remount RDWR because of unprocessed orphan inode list. Please umount/remount instead [ 138.742236][ T3429] device wireguard0 entered promiscuous mode [ 138.766033][ T3418] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.772994][ T3418] bridge0: port 2(bridge_slave_1) entered forwarding state [ 138.780066][ T3418] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.786991][ T3418] bridge0: port 1(bridge_slave_0) entered forwarding state [ 138.814108][ T3424] netlink: 80 bytes leftover after parsing attributes in process `syz.2.732'. [ 138.955636][ T3424] netlink: 80 bytes leftover after parsing attributes in process `syz.2.732'. [ 139.076358][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 139.084633][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.094045][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.117262][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 139.126007][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.132933][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.142973][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 139.151741][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.158620][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.173030][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 139.199833][ T445] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 139.212210][ T445] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 139.241569][ T3418] device veth0_vlan entered promiscuous mode [ 139.251820][ T445] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 139.262287][ T445] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 139.270993][ T445] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 139.289977][ T24] audit: type=1400 audit(1737286630.239:4025): avc: denied { read write } for pid=3440 comm="syz.1.736" name="uhid" dev="devtmpfs" ino=257 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 139.315610][ T445] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 139.316149][ T3418] device veth1_macvtap entered promiscuous mode [ 139.339828][ T24] audit: type=1400 audit(1737286630.239:4026): avc: denied { open } for pid=3440 comm="syz.1.736" path="/dev/uhid" dev="devtmpfs" ino=257 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 139.341807][ T445] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 139.386859][ T445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 139.478591][ T7] device team_slave_1 left promiscuous mode [ 139.478645][ T7] bridge0: port 3(team_slave_1) entered disabled state [ 139.479045][ T7] device bridge_slave_1 left promiscuous mode [ 139.479095][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.479426][ T7] device bridge_slave_0 left promiscuous mode [ 139.479473][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.480862][ T7] device veth1_macvtap left promiscuous mode [ 139.480939][ T7] device veth0_vlan left promiscuous mode [ 139.539791][ T2659] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 139.567928][ T3451] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 139.574293][ T3451] EXT4-fs (loop2): mount failed [ 140.116763][ T2659] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.126588][ T2659] usb 10-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 140.135148][ T3460] F2FS-fs (loop8): invalid crc value [ 140.135616][ T2659] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.150216][ T2659] usb 10-1: config 0 descriptor?? [ 140.155412][ T3460] F2FS-fs (loop8): Found nat_bits in checkpoint [ 140.178213][ T3460] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 140.188158][ T2659] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 140.376280][ T3476] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xb107716d, utbl_chksum : 0xe619d30d) [ 140.390457][ T2669] usb 10-1: USB disconnect, device number 13 [ 140.510134][ T3481] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 140.519073][ T3481] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 140.528026][ T3481] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended [ 140.536985][ T3481] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 140.545114][ T3481] System zones: 0-2, 18-18, 34-34 [ 140.553224][ T3481] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1047: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 140.573161][ T3481] EXT4-fs (loop1): 1 truncate cleaned up [ 140.579880][ T3481] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 140.612219][ T24] audit: type=1400 audit(1737286631.559:4027): avc: denied { write } for pid=3470 comm="syz.8.741" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 140.658036][ T3489] netlink: 24 bytes leftover after parsing attributes in process `syz.8.741'. [ 140.702320][ T3479] F2FS-fs (loop2): Invalid log blocks per segment (4278190089) [ 140.709738][ T3479] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 140.718708][ T3479] F2FS-fs (loop2): invalid crc value [ 140.730278][ T3479] F2FS-fs (loop2): Found nat_bits in checkpoint [ 140.756452][ T3479] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 140.766802][ T3485] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 140.779102][ T3479] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 140.788280][ T3485] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 140.809114][ T3485] EXT4-fs (loop4): 1 truncate cleaned up [ 140.814699][ T3485] EXT4-fs (loop4): mounted filesystem without journal. Opts: i_version,mblk_io_submit,debug_want_extra_isize=0x0000000000000068,lazytime,block_validity,data_err=abort,,errors=continue [ 141.282572][ T3198] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 3: comm syz-executor: path /15/file0: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 142.013347][ T3513] erofs: (device loop4): mounted with root inode @ nid 36. [ 142.075790][ T3516] syz.8.747[3516] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 142.076073][ T3516] syz.8.747[3516] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 142.346261][ T3518] erofs: (device loop4): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 142.480465][ T42] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[8192] [ 142.500212][ T3518] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[8192] [ 142.949382][ T3523] x_tables: duplicate underflow at hook 1 [ 143.136156][ T3537] SELinux: duplicate or incompatible mount options [ 143.173518][ T3535] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.180580][ T3535] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.187887][ T3535] device bridge_slave_0 entered promiscuous mode [ 143.199467][ T3535] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.207638][ T3535] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.214959][ T3535] device bridge_slave_1 entered promiscuous mode [ 143.238240][ T24] kauditd_printk_skb: 71 callbacks suppressed [ 143.238251][ T24] audit: type=1326 audit(1737286634.189:4099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3536 comm="syz.8.756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fb9edc53597 code=0x7ffc0000 [ 143.271706][ T3539] EXT4-fs (loop2): Ignoring removed orlov option [ 143.280362][ T3537] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000001) [ 143.301231][ T7] device bridge_slave_1 left promiscuous mode [ 143.307589][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.314886][ T3537] FAT-fs (loop8): Filesystem has been set read-only [ 143.321753][ T24] audit: type=1326 audit(1737286634.189:4100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3536 comm="syz.8.756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fb9edc564ca code=0x7ffc0000 [ 143.323984][ T3539] EXT4-fs (loop2): mounted filesystem without journal. Opts: orlov,min_batch_time=0x0000000000000004,,errors=continue [ 143.357309][ T24] audit: type=1326 audit(1737286634.229:4101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3536 comm="syz.8.756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb9edc53690 code=0x7ffc0000 [ 143.357329][ T24] audit: type=1326 audit(1737286634.229:4102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3536 comm="syz.8.756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7fb9edc53a77 code=0x7ffc0000 [ 143.380918][ T7] device bridge_slave_0 left promiscuous mode [ 143.409680][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.417022][ T24] audit: type=1326 audit(1737286634.229:4103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3536 comm="syz.8.756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb9edc53690 code=0x7ffc0000 [ 143.443824][ T24] audit: type=1326 audit(1737286634.229:4104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3536 comm="syz.8.756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb9edc5492b code=0x7ffc0000 [ 143.467214][ T24] audit: type=1326 audit(1737286634.229:4105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3536 comm="syz.8.756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fb9edc5398a code=0x7ffc0000 [ 143.490904][ T24] audit: type=1326 audit(1737286634.229:4106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3536 comm="syz.8.756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9edc54d29 code=0x7ffc0000 [ 143.514883][ T7] device veth1_macvtap left promiscuous mode [ 143.515000][ T24] audit: type=1326 audit(1737286634.229:4107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3536 comm="syz.8.756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fb9edc54d29 code=0x7ffc0000 [ 143.521495][ T7] device veth0_vlan left promiscuous mode [ 143.588056][ T24] audit: type=1326 audit(1737286634.229:4108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3536 comm="syz.8.756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9edc54d29 code=0x7ffc0000 [ 143.661590][ T3535] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.668470][ T3535] bridge0: port 2(bridge_slave_1) entered forwarding state [ 143.675551][ T3535] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.682369][ T3535] bridge0: port 1(bridge_slave_0) entered forwarding state [ 143.723794][ T445] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 143.737696][ T445] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.748541][ T445] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.857646][ T445] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 143.868369][ T445] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.875237][ T445] bridge0: port 1(bridge_slave_0) entered forwarding state [ 143.886306][ T445] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 143.894629][ T445] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.901504][ T445] bridge0: port 2(bridge_slave_1) entered forwarding state [ 143.908983][ T445] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 143.927283][ T445] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 143.936404][ T445] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 143.948114][ T3535] device veth0_vlan entered promiscuous mode [ 143.955234][ T445] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 143.964272][ T445] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 143.971683][ T445] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 143.985495][ T3535] device veth1_macvtap entered promiscuous mode [ 144.000060][ T445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 144.008404][ T445] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 144.016455][ T445] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 144.033008][ T445] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 144.041319][ T445] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 144.049758][ T445] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 144.058535][ T445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 144.492873][ T3592] netlink: 'syz.0.767': attribute type 1 has an invalid length. [ 144.501236][ T2659] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 144.764035][ T3598] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodelalloc,delalloc,auto_da_alloc,,errors=continue [ 144.776170][ T3598] ext4 filesystem being mounted at /141/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 144.871642][ T3603] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue [ 144.886786][ T2659] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 144.898799][ T2659] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 144.908564][ T2659] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 144.921564][ T2659] usb 5-1: New USB device found, idVendor=15c2, idProduct=2204, bcdDevice= 0.00 [ 144.930714][ T2659] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.942656][ T2659] usb 5-1: config 0 descriptor?? [ 145.021286][ T3610] xt_bpf: check failed: parse error [ 145.126738][ T312] usb 3-1: new low-speed USB device number 27 using dummy_hcd [ 145.383067][ T3630] 9pnet: Could not find request transport: rdma [ 145.396783][ T2648] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 145.457339][ T3632] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 145.464380][ T3632] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 145.466859][ T2659] usbhid 5-1:0.0: can't add hid device: -71 [ 145.476856][ T3632] EXT4-fs (loop4): 1 truncate cleaned up [ 145.480002][ T2659] usbhid: probe of 5-1:0.0 failed with error -71 [ 145.485215][ T3632] EXT4-fs (loop4): mounted filesystem without journal. Opts: i_version,mblk_io_submit,debug_want_extra_isize=0x0000000000000068,lazytime,block_validity,data_err=abort,,errors=continue [ 145.495616][ T2659] usb 5-1: USB disconnect, device number 2 [ 145.566931][ T312] usb 3-1: Invalid ep0 maxpacket: 64 [ 145.816127][ T2648] usb 10-1: device descriptor read/64, error -71 [ 145.916582][ T312] usb 3-1: new low-speed USB device number 28 using dummy_hcd [ 146.196708][ T312] usb 3-1: Invalid ep0 maxpacket: 64 [ 146.202581][ T312] usb usb3-port1: attempt power cycle [ 146.578879][ T2648] usb 10-1: device descriptor read/64, error -71 [ 146.590230][ T3646] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 146.608974][ T3646] EXT4-fs (loop4): barriers disabled [ 146.614447][ T3646] JBD2: no valid journal superblock found [ 146.620173][ T312] usb 3-1: new low-speed USB device number 29 using dummy_hcd [ 146.635296][ T3646] EXT4-fs (loop4): error loading journal [ 146.746960][ T312] usb 3-1: Invalid ep0 maxpacket: 64 [ 146.868231][ T3649] syz.8.782[3649] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 146.868286][ T3649] syz.8.782[3649] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 146.896698][ T312] usb 3-1: new low-speed USB device number 30 using dummy_hcd [ 146.963584][ T3646] kernel profiling enabled (shift: 17) [ 146.971654][ T3646] xt_hashlimit: size too large, truncated to 1048576 [ 147.016750][ T312] usb 3-1: Invalid ep0 maxpacket: 64 [ 147.022044][ T312] usb usb3-port1: unable to enumerate USB device [ 147.106687][ T2648] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 147.152692][ T3664] xt_CT: netfilter: NOTRACK target is deprecated, use CT instead or upgrade iptables [ 147.196761][ T286] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 147.333047][ T3672] xt_bpf: check failed: parse error [ 147.376748][ T2648] usb 10-1: device descriptor read/64, error -71 [ 147.606721][ T286] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.617487][ T286] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 147.626956][ T286] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 147.639585][ T286] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 147.648410][ T286] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.657109][ T286] usb 9-1: config 0 descriptor?? [ 147.766673][ T2648] usb 10-1: device descriptor read/64, error -71 [ 147.819791][ T3682] incfs: Error accessing: ./file0. [ 147.824889][ T3682] incfs: mount failed -20 [ 147.887875][ T3686] device ip6tnl2 entered promiscuous mode [ 147.893703][ T2648] usb usb10-port1: attempt power cycle [ 148.111973][ T3712] netlink: 'syz.9.802': attribute type 4 has an invalid length. [ 148.149097][ T286] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 148.166698][ T286] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 148.173997][ T286] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 148.190228][ T286] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 148.205172][ T286] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 148.220037][ T286] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 148.239581][ T286] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 148.252664][ T286] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 148.260908][ T286] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 148.269172][ T286] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 148.278048][ T286] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 148.286063][ T286] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 148.307826][ T286] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 148.315117][ T286] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 148.322567][ T286] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 148.330191][ T286] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 148.337909][ T286] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 148.348389][ T3730] xt_bpf: check failed: parse error [ 148.376221][ T286] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 148.396051][ T286] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 148.408519][ T286] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 148.423008][ T286] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 148.436482][ T286] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 148.449966][ T286] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 148.464482][ T286] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 148.478988][ T286] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 148.486791][ T286] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 148.494055][ T286] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 148.501446][ T286] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 148.508844][ T286] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 148.516128][ T286] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 148.523459][ T286] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 148.530889][ T286] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 148.538290][ T286] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 148.545565][ T286] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 148.552945][ T286] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 148.566440][ T286] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 148.581991][ T286] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 148.596506][ T286] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 148.611193][ T286] plantronics 0003:047F:FFFF.000E: No inputs registered, leaving [ 148.632647][ T286] plantronics 0003:047F:FFFF.000E: hiddev96,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 148.646953][ T286] usb 9-1: USB disconnect, device number 9 [ 148.768419][ T3738] binder: Unknown parameter 'euid' [ 149.171050][ T3752] netlink: 24 bytes leftover after parsing attributes in process `syz.2.813'. [ 149.287148][ T3754] FAT-fs (loop2): Directory bread(block 64) failed [ 149.296686][ T3754] FAT-fs (loop2): Directory bread(block 65) failed [ 149.303045][ T3754] FAT-fs (loop2): Directory bread(block 66) failed [ 149.309860][ T3757] exfat: Deprecated parameter 'namecase' [ 149.315367][ T3757] exfat: Unknown parameter 'uid4J쁰]' [ 149.327134][ T3754] FAT-fs (loop2): Directory bread(block 67) failed [ 149.333507][ T3754] FAT-fs (loop2): Directory bread(block 68) failed [ 149.340276][ T3754] FAT-fs (loop2): Directory bread(block 69) failed [ 149.346824][ T3754] FAT-fs (loop2): Directory bread(block 70) failed [ 149.353213][ T3754] FAT-fs (loop2): Directory bread(block 71) failed [ 149.359943][ T3754] FAT-fs (loop2): Directory bread(block 72) failed [ 149.366357][ T3754] FAT-fs (loop2): Directory bread(block 73) failed [ 149.766237][ T24] kauditd_printk_skb: 670 callbacks suppressed [ 149.766249][ T24] audit: type=1326 audit(1737286640.709:4779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3789 comm="syz.4.823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85795d2d29 code=0x7ffc0000 [ 149.853417][ T24] audit: type=1326 audit(1737286640.719:4780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3789 comm="syz.4.823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85795d2d29 code=0x7ffc0000 [ 149.891867][ T24] audit: type=1326 audit(1737286640.719:4781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3789 comm="syz.4.823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f85795d2d29 code=0x7ffc0000 [ 149.915462][ T24] audit: type=1326 audit(1737286640.749:4782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3791 comm="syz.0.822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7d4b64d29 code=0x50000 [ 149.949238][ T24] audit: type=1326 audit(1737286640.759:4783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3791 comm="syz.0.822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7d4b64d29 code=0x50000 [ 149.992542][ T24] audit: type=1326 audit(1737286640.759:4784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3791 comm="syz.0.822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7d4b64d29 code=0x50000 [ 150.058503][ T24] audit: type=1326 audit(1737286640.759:4785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3791 comm="syz.0.822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7d4b64d29 code=0x50000 [ 150.105606][ T24] audit: type=1326 audit(1737286640.759:4786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3791 comm="syz.0.822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7d4b64d29 code=0x50000 [ 150.132227][ T24] audit: type=1326 audit(1737286640.759:4787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3791 comm="syz.0.822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7d4b64d29 code=0x50000 [ 150.155376][ T24] audit: type=1326 audit(1737286640.759:4788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3791 comm="syz.0.822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7d4b64d29 code=0x50000 [ 150.231350][ T3805] xt_bpf: check failed: parse error [ 150.417511][ T3819] device pim6reg1 entered promiscuous mode [ 150.428704][ T3821] netlink: 60 bytes leftover after parsing attributes in process `syz.8.830'. [ 150.479232][ T3823] tipc: Enabling of bearer rejected, failed to enable media [ 150.550738][ T3823] FAT-fs (loop9): Unrecognized mount option "                                                                                                                " or missing value [ 150.643898][ T3830] syz.9.834[3830] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 150.643960][ T3830] syz.9.834[3830] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 151.198428][ T3858] x_tables: duplicate underflow at hook 2 [ 151.497246][ T3854] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue [ 151.513857][ T3854] ext4 filesystem being mounted at /57/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 151.537909][ T3867] netlink: 8 bytes leftover after parsing attributes in process `syz.2.843'. [ 151.554800][ T3863] FAT-fs (loop4): Directory bread(block 64) failed [ 151.600346][ T3863] FAT-fs (loop4): Directory bread(block 65) failed [ 151.606760][ T3863] FAT-fs (loop4): Directory bread(block 66) failed [ 151.613110][ T3863] FAT-fs (loop4): Directory bread(block 67) failed [ 151.619408][ T3863] FAT-fs (loop4): Directory bread(block 68) failed [ 151.625763][ T3863] FAT-fs (loop4): Directory bread(block 69) failed [ 151.634542][ T3863] FAT-fs (loop4): Directory bread(block 70) failed [ 151.642227][ T3863] FAT-fs (loop4): Directory bread(block 71) failed [ 151.654101][ T3863] FAT-fs (loop4): Directory bread(block 72) failed [ 151.660763][ T3863] FAT-fs (loop4): Directory bread(block 73) failed [ 151.697529][ T3869] EXT4-fs (loop8): Unrecognized mount option "smackfsfloor=\@]:{[(+/}BOj7em\}q1}ԑOਨ(CvT@#XHxɞecdr[5Bf!n- aEbC.&GMnk8=" or missing value [ 151.736704][ T460] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 151.838346][ T3875] xt_bpf: check failed: parse error [ 151.976650][ T460] usb 1-1: Using ep0 maxpacket: 8 [ 152.096790][ T460] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 152.105638][ T460] usb 1-1: config 1 has no interface number 1 [ 152.527459][ T460] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 152.536345][ T460] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.544634][ T460] usb 1-1: Product: syz [ 152.549866][ T460] usb 1-1: Manufacturer: syz [ 152.554290][ T460] usb 1-1: SerialNumber: syz [ 152.629441][ T3884] FAT-fs (loop9): Unrecognized mount option "0177777777777777777777718446744073709551615" or missing value [ 152.711392][ T3897] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 152.734818][ T3897] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 327685)! [ 152.745452][ T3897] EXT4-fs (loop4): group descriptors corrupted! [ 153.388346][ T3918] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 153.397999][ T3918] ext4 filesystem being mounted at /157/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 154.002488][ T460] usb 1-1: 2:1 : format type 0 is detected, processed as PCM [ 154.013595][ T460] usb 1-1: 2:1 : sample bitwidth 93 in over sample bytes 4 [ 154.020923][ T460] usb 1-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 154.062097][ T460] usb 1-1: USB disconnect, device number 6 [ 155.249340][ T24] kauditd_printk_skb: 107 callbacks suppressed [ 155.249353][ T24] audit: type=1400 audit(1737286646.199:4896): avc: denied { map } for pid=3925 comm="syz.0.857" path="/dev/kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 155.307690][ T24] audit: type=1400 audit(1737286646.199:4897): avc: denied { execute } for pid=3925 comm="syz.0.857" path="/dev/kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 155.340242][ T24] audit: type=1400 audit(1737286646.289:4898): avc: denied { create } for pid=3945 comm="syz.9.866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 155.490008][ T3962] exFAT-fs (loop9): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 155.517287][ T3955] futex_wake_op: syz.2.859 tries to shift op by 32; fix this program [ 155.526190][ T3962] exFAT-fs (loop9): hint_cluster is invalid (17) [ 155.740101][ T3955] EXT4-fs (loop2): Ignoring removed bh option [ 155.755460][ T3955] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 156.080715][ T3955] EXT4-fs (loop2): 1 truncate cleaned up [ 156.353373][ T3955] EXT4-fs (loop2): mounted filesystem without journal. Opts: bh,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000068,minixdf,journal_dev=0x0000000000000004,quota,,errors=continue [ 156.372618][ T24] audit: type=1400 audit(1737286647.299:4899): avc: denied { append } for pid=3982 comm="syz.4.876" name="rtc0" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 156.582832][ T24] audit: type=1400 audit(1737286647.299:4900): avc: denied { open } for pid=3982 comm="syz.4.876" path="/dev/rtc0" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 156.610460][ T3990] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=118 sclass=netlink_route_socket pid=3990 comm=syz.4.878 [ 156.656660][ T24] audit: type=1400 audit(1737286647.299:4901): avc: denied { ioctl } for pid=3982 comm="syz.4.876" path="/dev/rtc0" dev="devtmpfs" ino=254 ioctlcmd=0x7007 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 156.715718][ T24] audit: type=1400 audit(1737286647.499:4902): avc: denied { create } for pid=3941 comm="syz.2.859" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 156.783046][ T3995] EXT4-fs (loop8): Ignoring removed mblk_io_submit option [ 156.807733][ T3995] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b816c118, mo2=0002] [ 156.825970][ T3995] System zones: 1-12 [ 156.837589][ T3995] EXT4-fs error (device loop8): ext4_xattr_ibody_find:2210: inode #15: comm syz.8.881: corrupted in-inode xattr [ 156.847347][ T3999] exfat: Deprecated parameter 'utf8' [ 156.863187][ T3999] exfat: Unknown parameter 'keep_last_dots' [ 156.870105][ T3995] EXT4-fs error (device loop8): ext4_orphan_get:1400: comm syz.8.881: couldn't read orphan inode 15 (err -117) [ 156.884275][ T3995] EXT4-fs (loop8): mounted filesystem without journal. Opts: jqfmt=vfsold,data_err=abort,debug,noload,mblk_io_submit,commit=0x0000000000000005,init_itable=0x0000000000000601,grpquota,,errors=continue [ 157.284879][ T24] audit: type=1400 audit(1737286648.229:4903): avc: denied { bind } for pid=4055 comm="syz.2.907" lport=4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 157.328203][ T24] audit: type=1400 audit(1737286648.259:4904): avc: denied { name_bind } for pid=4055 comm="syz.2.907" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 157.368206][ T24] audit: type=1400 audit(1737286648.259:4905): avc: denied { node_bind } for pid=4055 comm="syz.2.907" saddr=fe80::aa src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 157.736646][ T498] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 157.860436][ T4073] netlink: 8 bytes leftover after parsing attributes in process `syz.0.913'. [ 157.869720][ T4073] netlink: 4 bytes leftover after parsing attributes in process `syz.0.913'. [ 157.907342][ T4078] binder: 4076:4078 ioctl c00c620f 20000440 returned -22 [ 158.025769][ T4092] 9pnet: Insufficient options for proto=fd [ 158.046711][ T498] usb 5-1: device descriptor read/64, error -71 [ 158.066578][ T4096] netlink: 104 bytes leftover after parsing attributes in process `syz.0.924'. [ 158.466750][ T498] usb 5-1: device descriptor read/64, error -71 [ 158.564621][ T4126] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 158.756714][ T498] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 158.822281][ T4134] fuse: Bad value for 'group_id' [ 159.267833][ T498] usb 5-1: device descriptor read/64, error -71 [ 159.338859][ T4166] EXT4-fs (loop8): mounted filesystem without journal. Opts: nodelalloc,grpid,auto_da_alloc,,errors=continue [ 159.350505][ T4166] ext4 filesystem being mounted at /125/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 159.717053][ T498] usb 5-1: device descriptor read/64, error -71 [ 159.874026][ T498] usb usb5-port1: attempt power cycle [ 160.296892][ T498] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 160.389587][ T24] kauditd_printk_skb: 456 callbacks suppressed [ 160.389599][ T24] audit: type=1400 audit(1737286651.339:5362): avc: denied { mounton } for pid=4197 comm="syz.2.964" path="/173/file1/file0" dev="loop2" ino=1048660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 160.445826][ T445] tipc: Left network mode [ 160.488930][ T4205] EXT4-fs (loop8): Ignoring removed nobh option [ 160.513885][ T4205] EXT4-fs (loop8): Ignoring removed bh option [ 160.520119][ T4205] EXT4-fs (loop8): Ignoring removed oldalloc option [ 160.602806][ T4205] EXT4-fs (loop8): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,oldalloc,,errors=continue [ 160.741859][ T4212] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 160.760806][ T4212] ext4 filesystem being mounted at /40/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 160.793490][ T4212] fs-verity: sha512 using implementation "sha512-avx2" [ 160.824928][ T4223] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.832474][ T4223] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.840382][ T4225] loop9: p4 < > [ 160.841325][ T4223] device bridge_slave_0 entered promiscuous mode [ 160.855016][ T4223] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.862229][ T4223] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.871269][ T4223] device bridge_slave_1 entered promiscuous mode [ 160.896653][ T498] usb 5-1: device not accepting address 5, error -71 [ 161.013430][ T1075] udevd[1075]: inotify_add_watch(7, /dev/loop9p4, 10) failed: No such file or directory [ 161.030913][ T4237] tipc: Started in network mode [ 161.035783][ T4237] tipc: Own node identity ac1414aa, cluster identity 4711 [ 161.052916][ T4237] tipc: Enabled bearer , priority 10 [ 161.053417][ T4242] binder_alloc: 4241: binder_alloc_buf size 5480 failed, no address space [ 161.067075][ T4242] binder_alloc: allocated: 8 (num: 1 largest: 8), free: 4088 (num: 1 largest: 4088) [ 161.259249][ T445] device bridge_slave_1 left promiscuous mode [ 161.428177][ T445] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.457815][ T445] device bridge_slave_0 left promiscuous mode [ 161.622087][ T445] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.642150][ T445] device dummy0 left promiscuous mode [ 161.647505][ T445] device veth1_macvtap left promiscuous mode [ 161.654347][ T445] device veth0_vlan left promiscuous mode [ 162.050028][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 162.057940][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 162.074401][ T4260] EXT4-fs (loop8): mounted filesystem without journal. Opts: nodelalloc,grpid,auto_da_alloc,,errors=continue [ 162.086244][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 162.094394][ T4260] ext4 filesystem being mounted at /130/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 162.096015][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 162.126005][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.133245][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 162.157393][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 162.166713][ T2666] tipc: 32-bit node address hash set to aa1414ac [ 162.167159][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 162.190021][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.196907][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 162.216535][ T24] audit: type=1400 audit(1737286653.159:5363): avc: denied { create } for pid=4268 comm="syz.9.991" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 162.237333][ T4271] erofs: (device loop4): mounted with root inode @ nid 36. [ 162.245138][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 162.253865][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 162.263150][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 162.272195][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 162.351093][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 162.662577][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 162.709600][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 162.747736][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 162.772636][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 162.804195][ T4223] device veth0_vlan entered promiscuous mode [ 162.860987][ T4285] EXT4-fs (loop8): Ignoring removed nomblk_io_submit option [ 162.880798][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 162.890767][ T4223] device veth1_macvtap entered promiscuous mode [ 162.901180][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 162.909494][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 162.922662][ T445] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 162.937989][ T4285] EXT4-fs (loop8): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,noquota,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue [ 162.953029][ T445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 162.982674][ T24] audit: type=1400 audit(1737286653.929:5364): avc: denied { setattr } for pid=4284 comm="syz.8.996" name="file1" dev="loop8" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 163.114490][ T4295] erofs: (device loop7): mounted with root inode @ nid 36. [ 163.157387][ T4275] F2FS-fs (loop9): Insane cp_payload (553648128 >= 504) [ 163.164325][ T4275] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 163.173085][ T4275] F2FS-fs (loop9): fault_injection options not supported [ 163.237429][ T4308] bridge0: port 3(erspan0) entered blocking state [ 163.243702][ T4308] bridge0: port 3(erspan0) entered disabled state [ 163.269409][ T4308] device erspan0 entered promiscuous mode [ 163.275130][ T4308] bridge0: port 3(erspan0) entered blocking state [ 163.281398][ T4308] bridge0: port 3(erspan0) entered forwarding state [ 163.525389][ T4309] erofs: (device loop7): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 163.598281][ T41] erofs: (device loop7): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[8192] [ 163.618964][ T4309] erofs: (device loop7): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[8192] [ 163.701588][ T4275] F2FS-fs (loop9): fault_type options not supported [ 163.729475][ T4275] F2FS-fs (loop9): invalid crc value [ 163.745994][ T4275] F2FS-fs (loop9): Found nat_bits in checkpoint [ 164.188056][ T4275] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 164.210921][ T4275] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 165.133661][ T4360] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1020'. [ 165.179115][ T4364] netlink: 81 bytes leftover after parsing attributes in process `syz.9.1011'. [ 165.188932][ T24] audit: type=1400 audit(1737286656.139:5365): avc: denied { create } for pid=4361 comm="syz.7.1021" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 165.247598][ T4374] syz.0.1026 uses obsolete (PF_INET,SOCK_PACKET) [ 165.270862][ T4367] FAT-fs (loop8): Directory bread(block 64) failed [ 165.283719][ T4367] FAT-fs (loop8): Directory bread(block 65) failed [ 165.293509][ T4367] FAT-fs (loop8): Directory bread(block 66) failed [ 165.316948][ T4369] exfat: Deprecated parameter 'utf8' [ 165.325393][ T4367] FAT-fs (loop8): Directory bread(block 67) failed [ 165.334868][ T4367] FAT-fs (loop8): Directory bread(block 68) failed [ 165.341328][ T4367] FAT-fs (loop8): Directory bread(block 69) failed [ 165.347848][ T4367] FAT-fs (loop8): Directory bread(block 70) failed [ 165.354294][ T4367] FAT-fs (loop8): Directory bread(block 71) failed [ 165.361191][ T4367] FAT-fs (loop8): Directory bread(block 72) failed [ 165.423650][ T4367] FAT-fs (loop8): Directory bread(block 73) failed [ 165.428371][ T4369] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x4899f300, utbl_chksum : 0xe619d30d) [ 165.450834][ T4378] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 165.493256][ T314] attempt to access beyond end of device [ 165.493256][ T314] loop8: rw=1, want=1236, limit=256 [ 165.652167][ T4389] FAT-fs (loop8): Directory bread(block 64) failed [ 165.662114][ T4389] FAT-fs (loop8): Directory bread(block 65) failed [ 165.669108][ T4389] FAT-fs (loop8): Directory bread(block 66) failed [ 165.676076][ T4389] FAT-fs (loop8): Directory bread(block 67) failed [ 165.685821][ T4389] FAT-fs (loop8): Directory bread(block 68) failed [ 165.692299][ T4389] FAT-fs (loop8): Directory bread(block 69) failed [ 165.699049][ T4389] FAT-fs (loop8): Directory bread(block 70) failed [ 165.705433][ T4389] FAT-fs (loop8): Directory bread(block 71) failed [ 165.712087][ T4389] FAT-fs (loop8): Directory bread(block 72) failed [ 165.718642][ T4389] FAT-fs (loop8): Directory bread(block 73) failed [ 165.968456][ T4395] EXT4-fs (loop8): Ignoring removed oldalloc option [ 165.991700][ T4395] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 166.059713][ T4395] EXT4-fs (loop8): 1 truncate cleaned up [ 166.136876][ T4395] EXT4-fs (loop8): mounted filesystem without journal. Opts: quota,oldalloc,barrier=0x0000000000000003,debug_want_extra_isize=0x0000000000000080,block_validity,jqfmt=vfsv1,,errors=continue [ 166.197012][ T24] audit: type=1400 audit(1737286657.149:5366): avc: denied { remount } for pid=4398 comm="syz.9.1031" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 166.222071][ T4402] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 166.231790][ T4402] EXT4-fs (loop7): orphan cleanup on readonly fs [ 166.238312][ T4402] EXT4-fs error (device loop7): ext4_free_blocks:5685: comm syz.7.1033: Freeing blocks not in datazone - block = 0, count = 4096 [ 166.276853][ T4402] EXT4-fs (loop7): 1 orphan inode deleted [ 166.282540][ T4402] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue [ 166.497730][ T4409] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12 [ 166.529143][ T4409] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 166.596688][ T24] audit: type=1400 audit(1737286657.539:5367): avc: denied { read } for pid=4432 comm="syz.8.1045" path="socket:[30535]" dev="sockfs" ino=30535 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 166.625680][ T4409] F2FS-fs (loop9): Found nat_bits in checkpoint [ 166.667080][ T4409] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 166.674016][ T4409] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 166.767472][ T4447] exfat: Unknown parameter 'keep_last_dots' [ 166.801421][ T4449] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.1050: bg 0: block 131: padding at end of block bitmap is not set [ 166.815758][ T4449] EXT4-fs error (device loop4) in ext4_mb_clear_bb:5645: Corrupt filesystem [ 166.824634][ T4449] EXT4-fs (loop4): 1 truncate cleaned up [ 166.830369][ T4449] EXT4-fs (loop4): mounted filesystem without journal. Opts: minixdf,norecovery,init_itable,jqfmt=vfsv1,dioread_lock,jqfmt=vfsold,auto_da_alloc=0x000000000000f3eb,,errors=continue [ 166.880535][ T4447] fuse: Bad value for 'fd' [ 166.997294][ T4460] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobarrier,nodioread_nolock,,errors=continue [ 167.008579][ T4460] ext4 filesystem being mounted at /60/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 167.038123][ T4467] FAT-fs (loop8): Unrecognized mount option "smackfsdef=vfat" or missing value [ 167.086929][ T24] audit: type=1400 audit(1737286658.039:5368): avc: denied { bind } for pid=4473 comm="syz.0.1060" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 167.107296][ T24] audit: type=1400 audit(1737286658.039:5369): avc: denied { setopt } for pid=4473 comm="syz.0.1060" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 167.626738][ T24] audit: type=1400 audit(1737286658.579:5370): avc: denied { setopt } for pid=4461 comm="syz.9.1051" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 167.661314][ T24] audit: type=1400 audit(1737286658.609:5371): avc: denied { getopt } for pid=4461 comm="syz.9.1051" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 167.711422][ T4516] 9pnet: p9_errstr2errno: server reported unknown error '?)mrXv/ [ 167.847815][ T4527] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1080'. [ 167.909938][ T4531] EXT4-fs error (device loop8): ext4_xattr_inode_iget:404: comm syz.8.1081: inode #1: comm syz.8.1081: iget: illegal inode # [ 167.914219][ T4538] erofs: (device loop4): mounted with root inode @ nid 36. [ 167.955651][ T4531] EXT4-fs error (device loop8): ext4_xattr_inode_iget:409: comm syz.8.1081: error while reading EA inode 1 err=-117 [ 167.981970][ T4531] EXT4-fs error (device loop8): ext4_xattr_inode_iget:404: comm syz.8.1081: inode #1: comm syz.8.1081: iget: illegal inode # [ 167.995302][ T4531] EXT4-fs error (device loop8): ext4_xattr_inode_iget:409: comm syz.8.1081: error while reading EA inode 1 err=-117 [ 168.007572][ T4531] EXT4-fs (loop8): 1 orphan inode deleted [ 168.013121][ T4531] EXT4-fs (loop8): mounted filesystem without journal. Opts: usrjquota=,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,grpquota,usrjquota=,journal_dev=0x0000000000000dcc,,errors=continue [ 168.168681][ T24] audit: type=1400 audit(1737286659.119:5372): avc: denied { ioctl } for pid=4560 comm="syz.8.1095" path="socket:[30745]" dev="sockfs" ino=30745 ioctlcmd=0x8923 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 168.217961][ T4563] ================================================================== [ 168.225959][ T4563] BUG: KASAN: slab-out-of-bounds in tc_setup_flow_action+0xbb8/0x3630 [ 168.233943][ T4563] Read of size 8 at addr ffff888125dc7ec0 by task syz.8.1096/4563 [ 168.241556][ T4563] [ 168.243749][ T4563] CPU: 1 PID: 4563 Comm: syz.8.1096 Not tainted 5.10.233-syzkaller-00881-gfbe98d68b6b3 #0 [ 168.253471][ T4563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 168.263348][ T4563] Call Trace: [ 168.266483][ T4563] dump_stack_lvl+0x1e2/0x24b [ 168.270998][ T4563] ? bfq_pos_tree_add_move+0x43b/0x43b [ 168.276290][ T4563] ? panic+0x812/0x812 [ 168.280201][ T4563] print_address_description+0x81/0x3b0 [ 168.285575][ T4563] kasan_report+0x179/0x1c0 [ 168.289916][ T4563] ? tc_setup_flow_action+0xbb8/0x3630 [ 168.295212][ T4563] ? tc_setup_flow_action+0xbb8/0x3630 [ 168.300510][ T4563] __asan_report_load8_noabort+0x14/0x20 [ 168.305971][ T4563] tc_setup_flow_action+0xbb8/0x3630 [ 168.311097][ T4563] ? __kmalloc+0x1aa/0x330 [ 168.315343][ T4563] ? flow_rule_alloc+0x30/0x2b0 [ 168.320035][ T4563] mall_replace_hw_filter+0x394/0xc10 [ 168.325243][ T4563] ? mall_set_parms+0x440/0x440 [ 168.329923][ T4563] ? tcf_exts_destroy+0xb0/0xb0 [ 168.334612][ T4563] ? pcpu_memcg_post_alloc_hook+0x1c8/0x360 [ 168.340777][ T4563] ? pcpu_alloc+0xfa0/0x1420 [ 168.345205][ T4563] ? mall_set_parms+0x4b/0x440 [ 168.349801][ T4563] ? mall_set_parms+0x1a2/0x440 [ 168.354489][ T4563] mall_change+0x573/0x7a0 [ 168.358743][ T4563] ? __kasan_check_write+0x14/0x20 [ 168.363693][ T4563] ? mall_get+0xb0/0xb0 [ 168.367681][ T4563] ? tcf_chain_tp_insert_unique+0xa90/0xbb0 [ 168.373422][ T4563] tc_new_tfilter+0x168e/0x1dc0 [ 168.378192][ T4563] ? mall_get+0xb0/0xb0 [ 168.382189][ T4563] ? tcf_gate_entry_destructor+0x20/0x20 [ 168.387857][ T4563] ? security_capable+0x87/0xb0 [ 168.392507][ T4563] ? ns_capable+0x89/0xe0 [ 168.396669][ T4563] ? netlink_net_capable+0x125/0x160 [ 168.401812][ T4563] ? tcf_gate_entry_destructor+0x20/0x20 [ 168.407297][ T4563] rtnetlink_rcv_msg+0x77a/0xc50 [ 168.412209][ T4563] ? is_bpf_text_address+0x172/0x190 [ 168.417325][ T4563] ? rtnetlink_bind+0x80/0x80 [ 168.421841][ T4563] ? arch_stack_walk+0xf3/0x140 [ 168.426530][ T4563] ? stack_trace_save+0x113/0x1c0 [ 168.431385][ T4563] ? __kasan_check_write+0x14/0x20 [ 168.436418][ T4563] ? stack_trace_snprint+0xf0/0xf0 [ 168.441366][ T4563] ? avc_has_perm+0x14d/0x400 [ 168.445881][ T4563] ? memcpy+0x56/0x70 [ 168.449700][ T4563] ? avc_has_perm+0x275/0x400 [ 168.454206][ T4563] ? __kasan_slab_alloc+0xb1/0xe0 [ 168.459072][ T4563] ? slab_post_alloc_hook+0x61/0x2f0 [ 168.464199][ T4563] ? kmem_cache_alloc+0x168/0x2e0 [ 168.469056][ T4563] ? avc_has_perm_noaudit+0x240/0x240 [ 168.474266][ T4563] ? iov_iter_advance+0x258/0xb20 [ 168.479122][ T4563] netlink_rcv_skb+0x1cf/0x410 [ 168.483717][ T4563] ? rtnetlink_bind+0x80/0x80 [ 168.488231][ T4563] ? netlink_ack+0xb30/0xb30 [ 168.492659][ T4563] ? __netlink_lookup+0x37b/0x3a0 [ 168.497520][ T4563] rtnetlink_rcv+0x1c/0x20 [ 168.501778][ T4563] netlink_unicast+0x8df/0xac0 [ 168.506377][ T4563] ? netlink_detachskb+0x90/0x90 [ 168.511156][ T4563] ? security_netlink_send+0x7b/0xa0 [ 168.516269][ T4563] netlink_sendmsg+0xa46/0xd00 [ 168.520870][ T4563] ? netlink_getsockopt+0x5c0/0x5c0 [ 168.525905][ T4563] ? security_socket_sendmsg+0x82/0xb0 [ 168.531199][ T4563] ? netlink_getsockopt+0x5c0/0x5c0 [ 168.536231][ T4563] ____sys_sendmsg+0x59e/0x8f0 [ 168.540830][ T4563] ? __sys_sendmsg_sock+0x40/0x40 [ 168.545690][ T4563] ? import_iovec+0xe5/0x120 [ 168.550119][ T4563] ___sys_sendmsg+0x252/0x2e0 [ 168.554632][ T4563] ? __sys_sendmsg+0x280/0x280 [ 168.559236][ T4563] ? __fdget+0x1bc/0x240 [ 168.563308][ T4563] __se_sys_sendmsg+0x1b1/0x280 [ 168.567995][ T4563] ? __x64_sys_sendmsg+0x90/0x90 [ 168.572769][ T4563] ? fpu__clear_all+0x20/0x20 [ 168.577284][ T4563] ? __kasan_check_read+0x11/0x20 [ 168.582153][ T4563] __x64_sys_sendmsg+0x7b/0x90 [ 168.586741][ T4563] do_syscall_64+0x34/0x70 [ 168.590996][ T4563] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 168.596715][ T4563] RIP: 0033:0x7fb9edc54d29 [ 168.600969][ T4563] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 168.620454][ T4563] RSP: 002b:00007fb9ec2c6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 168.628657][ T4563] RAX: ffffffffffffffda RBX: 00007fb9ede44fa0 RCX: 00007fb9edc54d29 [ 168.636468][ T4563] RDX: 0000000000000000 RSI: 0000000020000580 RDI: 0000000000000004 [ 168.644277][ T4563] RBP: 00007fb9edcd0b08 R08: 0000000000000000 R09: 0000000000000000 [ 168.652090][ T4563] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 168.659912][ T4563] R13: 0000000000000000 R14: 00007fb9ede44fa0 R15: 00007ffecf121878 [ 168.667725][ T4563] [ 168.669888][ T4563] Allocated by task 4563: [ 168.674054][ T4563] ____kasan_kmalloc+0xdb/0x110 [ 168.678740][ T4563] __kasan_kmalloc+0x9/0x10 [ 168.683079][ T4563] __kmalloc+0x1aa/0x330 [ 168.687161][ T4563] tcf_idr_create+0x5f/0x770 [ 168.691583][ T4563] tcf_idr_create_from_flags+0x5f/0x70 [ 168.696885][ T4563] tcf_gact_init+0x373/0x6e0 [ 168.701303][ T4563] tcf_action_init_1+0x584/0x830 [ 168.706076][ T4563] tcf_action_init+0x2b5/0x800 [ 168.710675][ T4563] tcf_exts_validate+0x232/0x540 [ 168.715455][ T4563] mall_set_parms+0x4b/0x440 [ 168.719883][ T4563] mall_change+0x49e/0x7a0 [ 168.724131][ T4563] tc_new_tfilter+0x168e/0x1dc0 [ 168.728815][ T4563] rtnetlink_rcv_msg+0x77a/0xc50 [ 168.733591][ T4563] netlink_rcv_skb+0x1cf/0x410 [ 168.738188][ T4563] rtnetlink_rcv+0x1c/0x20 [ 168.742441][ T4563] netlink_unicast+0x8df/0xac0 [ 168.747042][ T4563] netlink_sendmsg+0xa46/0xd00 [ 168.751643][ T4563] ____sys_sendmsg+0x59e/0x8f0 [ 168.756244][ T4563] ___sys_sendmsg+0x252/0x2e0 [ 168.760758][ T4563] __se_sys_sendmsg+0x1b1/0x280 [ 168.765441][ T4563] __x64_sys_sendmsg+0x7b/0x90 [ 168.770052][ T4563] do_syscall_64+0x34/0x70 [ 168.774300][ T4563] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 168.780012][ T4563] [ 168.782190][ T4563] The buggy address belongs to the object at ffff888125dc7e00 [ 168.782190][ T4563] which belongs to the cache kmalloc-192 of size 192 [ 168.796081][ T4563] The buggy address is located 0 bytes to the right of [ 168.796081][ T4563] 192-byte region [ffff888125dc7e00, ffff888125dc7ec0) [ 168.809520][ T4563] The buggy address belongs to the page: [ 168.815020][ T4563] page:ffffea00049771c0 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x125dc7 [ 168.825069][ T4563] flags: 0x4000000000000200(slab) [ 168.830018][ T4563] raw: 4000000000000200 ffffea000498dac0 0000000800000008 ffff888100043380 [ 168.838435][ T4563] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 168.847024][ T4563] page dumped because: kasan: bad access detected [ 168.853237][ T4563] page_owner tracks the page as allocated [ 168.858801][ T4563] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 705, ts 37037922373, free_ts 37037879736 [ 168.874507][ T4563] prep_new_page+0x166/0x180 [ 168.878931][ T4563] get_page_from_freelist+0x2d8c/0x2f30 [ 168.884312][ T4563] __alloc_pages_nodemask+0x435/0xaf0 [ 168.889514][ T4563] new_slab+0x80/0x400 [ 168.893421][ T4563] ___slab_alloc+0x302/0x4b0 [ 168.897846][ T4563] __slab_alloc+0x63/0xa0 [ 168.902013][ T4563] kmem_cache_alloc_trace+0x1bd/0x2e0 [ 168.907226][ T4563] push_stack+0x8e/0x4f0 [ 168.911301][ T4563] do_check+0xc645/0xe8c0 [ 168.915462][ T4563] do_check_common+0x946/0x1370 [ 168.920161][ T4563] bpf_check+0xb551/0xf230 [ 168.924399][ T4563] __se_sys_bpf+0x107a2/0x11cb0 [ 168.929080][ T4563] __x64_sys_bpf+0x7b/0x90 [ 168.933333][ T4563] do_syscall_64+0x34/0x70 [ 168.937589][ T4563] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 168.943310][ T4563] page last free stack trace: [ 168.947830][ T4563] free_unref_page_prepare+0x2ae/0x2d0 [ 168.953120][ T4563] free_the_page+0x9e/0x370 [ 168.957462][ T4563] __free_pages+0x67/0xc0 [ 168.961626][ T4563] __free_slab+0xcf/0x190 [ 168.965863][ T4563] unfreeze_partials+0x15e/0x190 [ 168.970579][ T4563] put_cpu_partial+0xbf/0x180 [ 168.975078][ T4563] __slab_free+0x2c8/0x3a0 [ 168.979335][ T4563] ___cache_free+0x111/0x130 [ 168.983766][ T4563] qlink_free+0x50/0x90 [ 168.987753][ T4563] qlist_free_all+0x47/0xb0 [ 168.992103][ T4563] kasan_quarantine_reduce+0x15a/0x170 [ 168.997387][ T4563] ____kasan_kmalloc+0x2f/0x110 [ 169.002072][ T4563] __kasan_krealloc+0x8e/0xd0 [ 169.006589][ T4563] krealloc+0xca/0x110 [ 169.010494][ T4563] do_check+0x2491/0xe8c0 [ 169.014657][ T4563] do_check_common+0x946/0x1370 [ 169.019336][ T4563] [ 169.021506][ T4563] Memory state around the buggy address: [ 169.026980][ T4563] ffff888125dc7d80: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 169.034879][ T4563] ffff888125dc7e00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 169.042798][ T4563] >ffff888125dc7e80: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 169.050674][ T4563] ^ [ 169.056835][ T4563] ffff888125dc7f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 169.064737][ T4563] ffff888125dc7f80: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc [ 169.072629][ T4563] ================================================================== [ 169.080524][ T4563] Disabling lock debugging due to kernel taint [ 169.142916][ T4559] F2FS-fs (loop9): Found nat_bits in checkpoint [ 169.171774][ T4559] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 169.185404][ T4559] F2FS-fs (loop9): Inconsistent error blkaddr:5633, sit bitmap:0 [ 169.192992][ T4559] CPU: 1 PID: 4559 Comm: syz.9.1094 Tainted: G B 5.10.233-syzkaller-00881-gfbe98d68b6b3 #0 [ 169.204052][ T4559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 169.213956][ T4559] Call Trace: [ 169.217072][ T4559] dump_stack_lvl+0x1e2/0x24b [ 169.221589][ T4559] ? f2fs_get_next_page_offset+0x750/0x750 [ 169.227220][ T4559] ? bfq_pos_tree_add_move+0x43b/0x43b [ 169.232517][ T4559] dump_stack+0x15/0x17 [ 169.236531][ T4559] f2fs_is_valid_blkaddr+0xc3e/0x1370 [ 169.241723][ T4559] f2fs_get_read_data_page+0x4b9/0x900 [ 169.247012][ T4559] ? f2fs_get_block+0x1b0/0x1b0 [ 169.251702][ T4559] ? pagecache_get_page+0x862/0x950 [ 169.256818][ T4559] f2fs_find_data_page+0x194/0x430 [ 169.261780][ T4559] ? f2fs_readdir+0x3b8/0xb70 [ 169.266284][ T4559] f2fs_readdir+0x4f4/0xb70 [ 169.270636][ T4559] ? f2fs_fill_dentries+0xe10/0xe10 [ 169.275654][ T4559] ? security_file_permission+0x86/0xb0 [ 169.281044][ T4559] iterate_dir+0x265/0x580 [ 169.285286][ T4559] ? f2fs_fill_dentries+0xe10/0xe10 [ 169.290507][ T4559] __se_sys_getdents64+0x1c1/0x460 [ 169.295529][ T4559] ? __se_sys_futex+0x355/0x470 [ 169.300300][ T4559] ? __x64_sys_getdents64+0x90/0x90 [ 169.305332][ T4559] ? filldir+0x680/0x680 [ 169.309420][ T4559] ? fpu__clear_all+0x20/0x20 [ 169.313928][ T4559] ? __kasan_check_read+0x11/0x20 [ 169.318790][ T4559] __x64_sys_getdents64+0x7b/0x90 [ 169.323658][ T4559] do_syscall_64+0x34/0x70 [ 169.327902][ T4559] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 169.333626][ T4559] RIP: 0033:0x7f9cf656ed29 [ 169.337880][ T4559] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 169.357410][ T4559] RSP: 002b:00007f9cf4be0038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 169.365650][ T4559] RAX: ffffffffffffffda RBX: 00007f9cf675efa0 RCX: 00007f9cf656ed29 [ 169.373462][ T4559] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 169.381273][ T4559] RBP: 00007f9cf65eab08 R08: 0000000000000000 R09: 0000000000000000 [ 169.389088][ T4559] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 169.396903][ T4559] R13: 0000000000000000 R14: 00007f9cf675efa0 R15: 00007ffd13b567d8