last executing test programs: 25.717599644s ago: executing program 4 (id=187): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x901800, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) gettid() timer_create(0x6, &(0x7f0000000040)={0x0, 0x17, 0x1, @thr={&(0x7f00000000c0)="62e352bec65eb087bd3415248a1577000340f3b6fdb31596e50a948f0245e9030c44f79dd44f03adabc8cc2612d889a30f4e1a8024404c84a50cdc7321f1657d39d9823125421249eec144a72ea420342eff9e423a44654fc94f995804017e823ec552ceb8f1f19081cb42ea857c4963358844c1c665cc9fcbe8a9a49d0c", &(0x7f00000002c0)="03e4a54e6973d1c70778dd99fca8ccfa70f056df87f37e7eb4caed669755f0fa67e6e5389273e899fb03d6e91c22c197cc2f392d85b63611b72982c8df1a9ccae690bbb3c5d0f5f1bc4ceab83d82fc3b9992576323f3717dcdcafe017b7523ae1b4ac783be7cee882c2e6fad07eec40ae2984509016401fc53e0a2967816f75075a0ad3f0ae7f2bc2d6ce2070668ef3eea575ab04e013dc376818ecdcddbaf7610b07d6e0388d70f23db84c2f966c5b368da594882c91046ae927413f95c1acd7c895f0ce39ac95f603484870845448535"}}, &(0x7f0000000080)) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000000640)="a6e2976b", 0x4, 0x840, 0x0, 0x0) sendto$inet6(r2, &(0x7f00000002c0)="e8", 0xfffffffffffffd79, 0x2000c850, 0x0, 0x4d) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x77359400}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) read(r3, &(0x7f0000032440)=""/102364, 0x18fdc) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r5, 0x4030ae7b, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r6, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r6, 0x25, &(0x7f00000003c0)={0x0, 0x0, 0x80, 0x7}) fcntl$lock(r6, 0x25, &(0x7f00000000c0)={0x1, 0x2, 0x0, 0x80000000}) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) connect$can_bcm(r4, &(0x7f0000000200)={0x1d, r7}, 0x10) 24.605169184s ago: executing program 4 (id=202): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="2201eaf2ffffff40c41090ea000000000001090224000100000000090400000103000000092100000001220700090581030000000000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x10642, 0x0) ioctl$PTP_PEROUT_REQUEST(r1, 0x40383d03, &(0x7f0000000180)={{0x8000, 0x8}, {0x7f, 0x100}, 0xa3}) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000140)={0x0, 0x0, 0x4e, {0x4e, 0x22, "392cdaab4ad7a9aaffe594f70e817a9df0a51ad58a3f578775053942702fb7977985914a885d674331e15dc1376a841c262da68e348600000000000000000000000000040000000000000000"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(r3, 0x5412, &(0x7f0000000140)=0x13) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000000)={0xffffffc0, 0xce30, 0xfffff801, 0x4, 0x1, "6e29efcae4ed690034357541de3350304205d2", 0x800, 0x9}) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70200001400f400b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) ioctl$TIOCL_GETMOUSEREPORTING(r3, 0x5412, &(0x7f00000006c0)=0xd) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="17000000000000000084000001"], 0x48) bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000400)={r8, 0x0, 0x20000000}, 0x20) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000600)=ANY=[@ANYBLOB="380000001800010026bd7000ffdbdf2502000000e500ff0900000000060015000200000014001680100008800c0001800500020000000000"], 0x38}}, 0x0) sendmsg$inet(r2, 0x0, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008004}, 0x0) 22.79873998s ago: executing program 4 (id=215): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) waitid(0x0, 0x0, &(0x7f0000000280), 0x2, &(0x7f0000000300)) (async) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) r2 = getpid() (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xb635773f06ebbeee, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00"/12], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d) (async) r7 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/protocols\x00') preadv(r7, &(0x7f0000002740)=[{&(0x7f0000003900)=""/4104, 0x1008}], 0x1, 0x80007, 0x7) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) (async) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={[{@subsystem='cpuset'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 22.688565718s ago: executing program 4 (id=216): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x301c48a, &(0x7f0000004040)=ANY=[@ANYBLOB="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"], 0x6, 0x2d5, &(0x7f0000000980)="$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") socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x9, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000850000000f00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') mkdir(&(0x7f0000000040)='./file0\x00', 0x1) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='debugfs\x00', 0x0, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) mount$fuse(0x0, &(0x7f00000005c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) read$FUSE(r5, &(0x7f0000004180)={0x2020}, 0xfffffffffffffdd2) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback, 0x2400}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000001880)=[{{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f00000002c0)="fb03", 0x2}], 0x1}}], 0x1, 0x4400c800) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_xfrm(0x10, 0x3, 0x6) 21.796475351s ago: executing program 4 (id=223): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="620ac4ff00000000711017000000000095000000000000004ed7e32903090000000000000038b9383b4decc71d6dc46608400d74e7b5c3a704b2ed9eeb0bd57e5b796771265da7d13c6aabe9eaa855c26eef14223934258202"], &(0x7f0000000480)='GPL\x00'}, 0x80) socket$can_bcm(0x1d, 0x2, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000), 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040), 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00'}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0), 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{0x1}, &(0x7f0000000380), &(0x7f00000003c0)=r0}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x4}, 0x50) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000540)=@generic={&(0x7f0000000440)='./file0\x00', 0x0, 0x8}, 0x18) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002680)=ANY=[@ANYBLOB="030000ff0900000000000000000000000000009e60bbd97f99e6b800a2417303c52e6197b354ebee2da0167145b3dd880118ac09552e155f3c6394d23d0b6a6b7cab0578baa725e21f31a6f974f888476e5bf6b1d9119dba4f18dfb91d6155cb31", @ANYRES32=0x1, @ANYBLOB='\a\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000000000000100"/28], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000540), 0xffffffffffffffff) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') read$FUSE(r4, &(0x7f0000000640)={0x2020}, 0x2020) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000500000000040000cd00000001"], 0x48) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000002c0)={[{@noauto_da_alloc}, {@jqfmt_vfsold}, {@noquota}, {@norecovery}, {}]}, 0x1, 0x4be, &(0x7f0000000540)="$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") r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x7, 0xc4aa, 0x10001, 0x49, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r6, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r6, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7\x00', 0x4) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r5, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) 21.640704813s ago: executing program 4 (id=224): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000010d804dd00000000000001090224000100000000090400000103000000092105000001220500090581030002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r3}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r2}, &(0x7f0000001c00)=0x8000000, &(0x7f0000001c40)=r3}, 0x20) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r7}, 0x10) r8 = socket(0x10, 0x3, 0x0) connect$netlink(r8, &(0x7f0000000280)=@proc={0x10, 0x0, 0x25dfdbfc, 0x1000}, 0xc) sendmsg$nl_route_sched(r8, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001500)=@newtaction={0x18, 0x32, 0x100, 0x0, 0x0, {0x0, 0x0, 0x2}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20004010}, 0x20000000) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYRES32=r6], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x44000) io_setup(0x2007, &(0x7f0000000980)=0x0) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x6, &(0x7f0000000000), 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40, &(0x7f0000000300)={0xa, 0x0, 0xfffffffd, @remote, 0x8}, 0x1c) r11 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_buf(r11, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x24b) r12 = eventfd2(0x9, 0x0) io_pgetevents(r9, 0x2, 0x2, &(0x7f0000000080)=[{}, {}], 0x0, 0x0) io_submit(r9, 0x2, &(0x7f0000000700)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x1, r12}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x3, 0x10, r4, &(0x7f00000004c0), 0x0, 0x1, 0x0, 0x3, r1}]) io_destroy(r9) 21.602421346s ago: executing program 32 (id=224): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000010d804dd00000000000001090224000100000000090400000103000000092105000001220500090581030002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r3}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r2}, &(0x7f0000001c00)=0x8000000, &(0x7f0000001c40)=r3}, 0x20) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r7}, 0x10) r8 = socket(0x10, 0x3, 0x0) connect$netlink(r8, &(0x7f0000000280)=@proc={0x10, 0x0, 0x25dfdbfc, 0x1000}, 0xc) sendmsg$nl_route_sched(r8, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001500)=@newtaction={0x18, 0x32, 0x100, 0x0, 0x0, {0x0, 0x0, 0x2}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20004010}, 0x20000000) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYRES32=r6], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x44000) io_setup(0x2007, &(0x7f0000000980)=0x0) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x6, &(0x7f0000000000), 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40, &(0x7f0000000300)={0xa, 0x0, 0xfffffffd, @remote, 0x8}, 0x1c) r11 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_buf(r11, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x24b) r12 = eventfd2(0x9, 0x0) io_pgetevents(r9, 0x2, 0x2, &(0x7f0000000080)=[{}, {}], 0x0, 0x0) io_submit(r9, 0x2, &(0x7f0000000700)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x1, r12}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x3, 0x10, r4, &(0x7f00000004c0), 0x0, 0x1, 0x0, 0x3, r1}]) io_destroy(r9) 6.040231772s ago: executing program 5 (id=392): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000040)=ANY=[], 0x5, 0x329, &(0x7f00000000c0)="$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") io_setup(0x2007, &(0x7f0000000980)=0x0) r2 = eventfd2(0x9, 0x0) io_pgetevents(r1, 0x2, 0x2, &(0x7f0000000080)=[{}, {}], 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe4000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f00000000c0)="3b76210fb6150f209e440f20c0663503000000440f22c00fa2660fc7b2d42af30fa7d0440f20c066350d000000440f22c06767f2caab12bad004ec", 0x3b}], 0x1, 0xd, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x41, &(0x7f0000000100)=[@cr0={0x0, 0x20040004}], 0x1) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000200)=ANY=[@ANYBLOB="0380c2000000bbbbbbbbbbbb0800450000380000000000019078ac1e0001ac1414aa030490781200183f2500000000000000000100007f0000017f00000100186371ae9b1c5b"], 0x0) io_submit(r1, 0x1, &(0x7f0000000280)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r2}]) getrandom(&(0x7f0000000040)=""/31, 0x1f, 0x3) io_destroy(r1) 5.735301797s ago: executing program 5 (id=395): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x11, 0x4, 0x4, 0x5, 0x8, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x8000}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x3, 0xc, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80000001}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x45}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='sched_switch\x00', r3}, 0x10) bpf$MAP_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xe30a}, 0x38) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0xe, 0x0, &(0x7f00000002c0)="e02742e86c0d85ff9782762f0800", 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x80000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='br_fdb_add\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='br_fdb_add\x00', r5}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) r9 = epoll_create(0x2) r10 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r10, &(0x7f0000001980)={0x2000001a}) epoll_ctl$EPOLL_CTL_MOD(r9, 0x3, r10, &(0x7f00000019c0)={0x2}) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001c000100000000000000000007000000", @ANYRES32=r8, @ANYBLOB="4000aa000a0002"], 0x28}}, 0x0) 5.500631616s ago: executing program 5 (id=396): r0 = socket$inet6(0xa, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) (async) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r5}, 0x18) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1809000000000000000000000001000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r6}, &(0x7f0000000540), &(0x7f0000000580)=r7}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r6}, &(0x7f0000000540), &(0x7f0000000580)=r7}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r6, &(0x7f0000000780)}, 0x20) (async) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r6, &(0x7f0000000780)}, 0x20) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000880)={@private2={0xfc, 0x2, '\x00', 0x1}, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffa, 0x0, 0x8, 0x500, 0x74f3, 0xc0000124}) (async) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000880)={@private2={0xfc, 0x2, '\x00', 0x1}, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffa, 0x0, 0x8, 0x500, 0x74f3, 0xc0000124}) socket(0xb, 0x803, 0x7f) (async) r8 = socket(0xb, 0x803, 0x7f) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r8) getsockname$packet(r8, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="8c000000100037042a00"/20, @ANYRES32=r9, @ANYBLOB="83040500000000006c0012800900010069706970000000005c000280060012004e210000060010000f00000008000100", @ANYRES32=r8], 0x8c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) (async) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) 5.150850924s ago: executing program 5 (id=398): r0 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) r3 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="b702000024000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d83b23dd29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e1a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c11160fb20b1c581e7b0915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080e71113610e10d858e8327ef01fb6c86adac12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab3aa32f948c06b59b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cae1bd4f4390af9a9ceafd07ed00b0000002cab154ad029a1090000002780870014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a2a71bc85018e5ff2c910496f18afc9ffc2cc788bee1b47683db01a469398685211bbae3e26d0a5752813bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a7237841cef384b22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2acb72c7ead0509d380578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9624d37c10223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b9557aeb62ecd1446a470dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c74f0e2a9bf62ffec6459db40000000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced84680900000000000000d16d7d9158ffffffff00000000ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d2782a70cf44ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a9e90d767671414c99d4894edff8249dc1e3428d2129369ee1b85af1eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1038deb359454a3f2239cfe35f81b7aded448859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b2042b8ff8c21ad702cca54728acad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd20785f653b621491dc6aaee0d40973109644fb94c06006e3c1be2f633c1d987591ec3db58a7bb3042ec3f77abb21338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e155f455010b0cb578af7dc7d5e87d4cd376444e2de02f47c61e8e84ff828de453f3489460fd83210e95307e676e1fb4d5865c0ca177a4c7fbb4e62b4450900576b2b5cc7f819abd0f885cc4806f47ffb966fcf1e54f5a2d3875e46000000000000e734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d3676329a18cda690d192a070886df42b2708398773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169cdfaa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c30930804fdc3690d10ecb65dc5b47481ed51a6359cade91fd645c6d924f36a86bf1eee2e8893e903054d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf817becd9e5a225d67521d1128eac7d80a6225c3e2f0932223bfbf69ff861f4394836ddf128d6d19079e64336e09000000c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f324661fdcfa68f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b98a8bf6c747d9a1cc500bb892c3a16ff10feea20bdac89afb758cf350000000000000000000000000200000000000000ed713df0c59e38928511a64845f1b21ed03369719fa905909d8ce35b42761c46d040e53a0a227e9cecd4d414231baa4894a13763ea5de7a52e61a588babaf5da9a28f477e032400938116cb294447898039724881de3ba3dd5e5e115b58d438b17ad11bf1b1f1ed057d89ec46b2b9bb434e9187a728d1136333958469b22d2126664b5299cc3167ac9a4d501638b978e1c692da5261dae5c9d13065b8ed8b358e7273dfa1e9a8dc1d16aa1edd0c274dedb7cd7e4753c152b4e0e3d124e561420587b9b00ab68c32d6b397c5e7cc4e803e6b6e8ed547e2875372023d111e64cd9ee3635888ecbc7352fd60f348456d74e9e7c09ee202dd09524ecfd3d8c836c0a13a9a45a7e2cec88fa2710ee35cded1b824fe4fe68849eee41b5e335aeec0f27053b3a07a001ffe29c5cc3a0ccdcc74330c2a995378d225495c5a543519d952c96da9257f47acc29c48d48b22b1f502b9d743d352de56efbb1b15158c4f0107ba5b3394d4cad4f0a1d31f694d0f559e7f82682775ec7569eeb7ef643dbcbafc4c1c5cbb0ad02dd2a69c5f2b5350049a817b546cf734a746a1cc147a6050b6dc2d16598e8e3a5c3515d0edc23e66bbdc6c117559357f49c59208af1162ba1d6667e3ab6bb1696c32dc3bcb2c8ab30d28265ff55c8a80c8e3ce29b2f576ea686d351a8cdb808739ed1a7022fb6e4e834593279c791085e49d1b8124adaf0010790e72ef2035e3da7ebb117c1a032a7378d5c62bb1a4e212618113bbd688091273028a44abfe09067e22fda361d6769d1f44bb06ca0cb9a14a54a8ba0dcb5445c4b368bd1dcce7500"/2367], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0x1c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0x1c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) r5 = fsmount(r3, 0x0, 0x0) fchdir(r5) (async) fchdir(r5) open(&(0x7f00000003c0)='.\x00', 0x800, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) (async) close_range(r1, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x18) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000000080)=0xed6, 0x4) r8 = socket$nl_route(0x10, 0x3, 0x0) connect$netlink(r8, &(0x7f0000000040)=@unspec, 0xc) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) mount$bind(0x0, &(0x7f0000000280)='./cgroup\x00', &(0x7f00000002c0), 0x800000, 0x0) (async) mount$bind(0x0, &(0x7f0000000280)='./cgroup\x00', &(0x7f00000002c0), 0x800000, 0x0) connect$inet(r7, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002ac0)={0x1a, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000003457c6001e0000a1852686000000ff9500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2004}, 0x80) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x0) (async) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002cc2cdf5d63073020797901020366dba5e000015f6560700904010800ffa27d09"], &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000040)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f00000000c0)={r9, 0x3, r0, 0x3}) (async) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f00000000c0)={r9, 0x3, r0, 0x3}) 4.854327888s ago: executing program 1 (id=407): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000002304e800000000000000ea850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='netlink_extack\x00', r0}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f00)=@newtaction={0x78, 0x30, 0x1, 0x0, 0x0, {}, [{0x64, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @empty}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xbabd, 0x81, 0x6, 0x1, 0xfff}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @remote}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000005000080850000007d00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x10) getpgid(0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0x701000) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r5, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r6, 0x400, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x9d}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008800}, 0x804) sendmsg$MPTCP_PM_CMD_REMOVE(r4, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x40, r6, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x90}, 0x840) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r3, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000140)={0x1c, r6, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0xfffffff2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c485}, 0x40001) 4.800838292s ago: executing program 1 (id=408): syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socketpair$unix(0x1, 0x3, 0x0, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x0}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) syz_io_uring_setup(0x50cf, &(0x7f0000000000)={0x0, 0xfffffffc, 0x40000, 0x2, 0x333}, &(0x7f0000000080), &(0x7f0000ff4000)) r6 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGFIELDINFO(r6, 0xc038480a, &(0x7f0000000080)={0x1, 0x200, 0x10ac, 0x4, 0x7, 0x82, 0x4, 0x5, 0x1, 0x6, 0x7, 0x3ff, 0x1, 0x54}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000010400000000feffffff00000000", @ANYRES32=0x0, @ANYBLOB="0000020000000000280012800b000100697036746e6c00001800028014000200fe8000000000000000000000000000aa0800030069b655a7732e5708eebd22f26d4853173c5258fd6193c8dc9a9cecd5ad7b872c9a201e407ac02d739e24bbc9dd2a6617c612eb47251785c4989e32488704e869ee609559fdc19f206d506da156f50cb6786b2e68694ddfde29cb8eaf", @ANYRES32=r2, @ANYBLOB], 0x50}}, 0x40000c0) 4.428774183s ago: executing program 2 (id=411): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001680)=ANY=[@ANYBLOB="05000000010000008e000000c9e7000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="06000000040000000300000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000540)='kfree\x00', r2}, 0x10) bpf$MAP_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xe30a, r0}, 0x38) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd5cd7000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r6 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r6, 0x0, 0x2, 0x1001f0) r7 = syz_clone3(&(0x7f0000000000)={0x100000200, 0x0, 0x0, 0x0, {0x4000000}, 0x0, 0x0, 0x0, 0x0, 0x0, {r6}}, 0x58) tgkill(r7, r7, 0x21) 3.304172983s ago: executing program 2 (id=419): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r1, 0x400, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8c0}, 0x8001) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x12, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="460a0000000000006311100000000000180000000000000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) 3.241571718s ago: executing program 2 (id=420): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000280)={'wg2\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r1, 0x0, 0x8000000000000}, 0x9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r0}, 0x10) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x20, 0x0, 0x0, 0x0, 0x0) (async) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x20, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) (async) pwrite64(r2, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0/file1\x00', &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f00000002c0)={{}, {0x1, 0x1}, [], {0x4, 0x4}, [], {0x10, 0x3}, {0x20, 0x4}}, 0x24, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) 3.127469408s ago: executing program 2 (id=423): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x300}) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000500)=@newsa={0x164, 0x10, 0x1, 0x7fffffc, 0x0, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@empty, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in=@multicast2, 0x4, 0x6c}, @in6=@remote, {0x200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, {0x5, 0x4, 0xd, 0xa}, {0x0, 0x400}, 0xfffffffc, 0x0, 0xa, 0x1, 0x6}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @lifetime_val={0x24, 0x9, {0x3, 0x10, 0x1, 0x1}}, @etimer_thresh={0x8, 0xc, 0x6}]}, 0x164}}, 0x20000000) 2.996652928s ago: executing program 2 (id=425): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = open(0x0, 0x0, 0x1a1) fcntl$setlease(r1, 0x400, 0x1) r2 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0xc044) (async) r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) statx(r6, &(0x7f00000001c0)='./cgroup/../file0\x00', 0x0, 0x8, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0}, 0x18) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x13, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) r8 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r8, 0xc0105500, &(0x7f0000000140)={0x80, 0x6, 0x303, 0xfffd, 0x13, 0x0, 0x0}) (async) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000540)='./file1\x00', 0x5004, &(0x7f0000000280)={[{@iocharset={'iocharset', 0x3d, 'iso8859-4'}}, {@discard}, {@errors_remount}, {@dmask={'dmask', 0x3d, 0x3}}, {@fmask={'fmask', 0x3d, 0x5}}, {@uid={'uid', 0x3d, r7}}, {@discard}, {@iocharset={'iocharset', 0x3d, 'ascii'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-14'}}, {@gid}, {@utf8}]}, 0x1, 0x1524, &(0x7f0000002280)="$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") (async) write$binfmt_script(r2, &(0x7f0000000340)={'#! ', './file0'}, 0xb) (async) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 2.992559339s ago: executing program 2 (id=426): r0 = syz_usb_connect$cdc_ncm(0x3, 0x8f, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109027d0002010080000904000001020d0000052406000105240000000d240f0103000000fd0000000406241aff072908241c0101090000142413099f33760bf14377323063f9c8a04d113905241510000905810300020800040904010000020d00000904010102020d0000090582020002e1ad00090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000300)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x20, 0x80, 0x1c, {0xa, 0x2070, 0x1000, 0x9, 0x5, 0x8000, 0x0, 0x8, 0x7, 0xfffc, 0x8000, 0xf}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000740)={0x14, 0x0, &(0x7f0000000280)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 2.275425126s ago: executing program 3 (id=436): syz_emit_ethernet(0x46, &(0x7f0000000300)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "3000bb", 0x10, 0x2b, 0x0, @private2, @local, {[@srh={0x6}], {0x0, 0x0, 0x8}}}}}}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x10) clock_gettime(0x7, &(0x7f0000000040)={0x0, 0x0}) clock_settime(0x0, &(0x7f0000009ac0)={r2, r3+10000000}) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r4) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20, 0x8, [0x0, 0x0, 0x0, 0xc, 0x5, 0x0, 0x0, 0x2]}}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@gettclass={0x24, 0x2a, 0x2, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xf, 0xffe0}, {0xf, 0x10}, {0x9, 0x6}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x200080c4}, 0x4048881) 2.273227167s ago: executing program 0 (id=437): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYRESHEX, @ANYRESDEC=0x0, @ANYRES64=r0], 0x48) r2 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r3 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\x01\x04\x00\x00\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x10, &(0x7f0000001280), 0x4) sendmsg$inet(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000013c0)="d080", 0x2}], 0x1}, 0x20000801) recvmsg(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x40002002) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$WG_CMD_GET_DEVICE(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, r3, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0x442f9ea1}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000083) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)) (async) setsockopt$sock_attach_bpf(r5, 0x1, 0x10, &(0x7f0000001280), 0x4) (async) sendmsg$inet(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000013c0)="d080", 0x2}], 0x1}, 0x20000801) (async) recvmsg(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x40002002) (async) 2.080656022s ago: executing program 3 (id=440): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) (async) sendto$inet6(r0, 0x0, 0x0, 0x240540c7, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x1ff}, 0x8) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x54, 0x10, 0x1, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xffe0}, {0xf}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x80000000}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x2, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) (async) r2 = gettid() r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) (async, rerun: 64) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x1}, 0x48) (rerun: 64) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r7, r4, 0x25, 0x2, @val=@tcx}, 0x1c) (async) syz_emit_ethernet(0x1a, &(0x7f0000000000)={@remote, @empty, @val={@void, {0x8100, 0x2, 0x1, 0x1}}, {@llc={0x4, {@snap={0x1, 0xaa, "ce", "285b94", 0xf5}}}}}, 0x0) (async, rerun: 32) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 32) setsockopt$inet6_tcp_int(r9, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) (async) connect$inet6(r9, &(0x7f0000000080), 0x1c) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r9, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) setsockopt$sock_int(r9, 0x1, 0x8, &(0x7f0000000140)=0x7, 0x4) (async) sendmmsg(r9, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000540)="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", 0xfc}, {&(0x7f00000001c0)="7dc56831bc9a3cfbdd90576d74f54a7f37e2eaf3b3c441d367286039281aefcbf3f1cfe908e4abcdb59959c969811d7ba1", 0x31}, {&(0x7f0000000300)="acee4dd4e1204dfdd6ea6458e04cd460e2e15c8932b3873c69dfa7cedf434d986af9349add", 0x25}], 0x3}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001980)="68d74336cc293842abb9cb4ea587fc3ced207a5ba4b920fe64eb1892ca62235b67694e0e6e9e472426355da2b6141cf538397bb4ef5a4e40193089af44fd5b3eca4385777fc80e07ae9101e479b229aebf945db7c75360c1", 0x58}, {&(0x7f0000001a00)="3d0d443837277085b4fa0c6e0a219a993e7730b2ceab5d2eb98fca35dba08d298060c7d910bdb858296ea0d8", 0x2c}, {&(0x7f0000001a40)="1d72e38df87099a5a9c9301612dd4ddee5ac", 0x12}, {&(0x7f0000001ac0)="2db29afb8144110411e034e2115ad3f2e9be6167634b71296a0b2daeec35ab3e3c4403d0f39dff2cd5c7c34c9e2c3137d07d4c723bccbc6dd186cc1a6cf6244061110adc96e70a2a8840ad21f2481d4aff75f1eab2fe88c6e91a1baf372b277d6ef26d63d49442f66b351e915d716236fcc0dc91f0a20520a5f44deee2e1a362b685fced45f74f5e6cdb34e3f8802d6672969317ffff99b8fb", 0x99}], 0x4, 0xfffffffffffffffd}}, {{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000680)='QJ', 0x2}], 0x1, &(0x7f0000003fc0)=ANY=[], 0x12b8}}], 0x3, 0x40) sendmmsg(r9, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="8fbf7313e6", 0x5}], 0x1}}, {{&(0x7f0000000100)=@generic={0x29, "bf65a9fd04d23ecbee11bebf973fba4f6f1ef8edf28df6197c7373e628ecf14bd6623b8aaaaa5123ebbb8b5c6f8019b99272005fcf0324edbd10873495142365bd97adb3561f28bf141e7a50b1ff9b23d71bb78f72f4a4d372475142fd82349522522fbec2720aa3955783a200a6c20ba01f0f660d0c9aa0909ffcfd93f5"}, 0x80, &(0x7f00000001c0)=[{&(0x7f00000002c0)="a00fca03cc25acfe815337d934074488aa507532501b61786ddf06b9826749c852d62e861cfb5acf34b7cb57f0d94a94a198d9461d38138ac2a855e4631f61b1bba3e23b0cc2123dd688d537fdd9439432af4f3f95c6757fd686bd6d423d9c001794e8a5cc29455f325184e53358c637137527031d72766ed59d1bdc24d7c3d964ff6e5611a4f67ce5936543964eda51194a45748807092a02014dbab07629834b909295a8c63bf3263d65d382ec4d735d70b73c94db1601d12115ae3a723bac417f90f08a7c20ccc9d5b90b04654d2404b213e8c5449b040458abc8317fa8c5a0b278", 0xe3}], 0x1}}, {{&(0x7f00000003c0)=@llc={0x1a, 0x321, 0x3, 0xb, 0x0, 0x8, @multicast}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000540)="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", 0x1000}, {&(0x7f0000001540)="ccf17b2a40a814f91129a8a1569132db07afcf4310eecf3c1da7cbb0940126c7981a006d8ba207751ed7e3bf88deedbf9fcdd2f8832b1f0264375f5e590238cb5454bf998845bb7601ed76c61446d9b99ef5b50df7e857de5b83ff712b69ae1ff2180609bd5916ca223234ce814c135b0fcd86ebf411d170f0ecd83b5a0cacaa9336945622b09b0209e8a03758f4c7f393a96985697dc16141caa6ed6753efd19e38abd609", 0xa5}, {&(0x7f0000001600)="016190e7840f1588c56e4a6dbed9db8739d867106efbcea08bac4750f754760a317656e418eff1f491bad80ed8cc44a8401cf80f92fbc6e4c2478b9c4a2bdaf7f56ce999b75b4ff7507ab86003f97856873a221c8c9aa0887f3309fb411a220e651dee3078eb939b1fd379482199ca7e4955288bd671e733850dcb2850b8e6388433b648b19d4764058d82e3fd4ed449e74c78a7acfb50ec506854cd3507f618d468010a055c389f8c2539ce8b4842f330c5f576abd445dfac41581d772e22fdd460ad3eb22f2cf6c5abd7864e40140ab1f16d65a41f", 0xd6}, {&(0x7f0000000240)="5894dddfbe2e65759ad9e3cfc6ebb04c68761dc1628edccba507c53233", 0x1d}, {&(0x7f0000001700)="0413b15a2406a9aaeac88a7b13f4b39c8e1c117707522c2bfcd35ae9b39f067455a3243d1ea537e7b7d6e106525c0cafee45a1297d6418733c4b2bc4a24d71d3b961b4203d3a6a687fbf514ca75b4b8af28a505f1f93390572a76e3d1d9a65eeda6266bdcc2106b7a80df36ec019b6a7cd07f2d61cb2126888b8e547181fd2aa7ef25f72e068345d3a88922b50dd0b8c4648f3715db41500f5d918a8d84199c2f714402a17a970f387b8d40afd2fe5bbf3c71a2f3b35042652ac65d2e3010591085079769f42531dd9664b", 0xcb}, {&(0x7f0000001800)="4c8e7c85690c476b3fa59f104140d9f6c410c619632955b532e194b0f54392de69d9f0511709fec1929cd5f933e5079240040b02ff627cd88fca416c1c0b0cec908080120b99b103622daa5bf4f42932e6cca398d96b8dd1755e5fcb54a7fc0eaed3fa4098350f8e9623bff230edb3fcf04244456852c5806e001374a41f8b96e11b3c3fca32e19f7b350f6d26a53b79fa8335c8930cc8f5959a95592c7d53a65fd43947213f99545adf1eb87bef3d61", 0xb0}, {&(0x7f00000018c0)="1dfe464c27e389bf6cd0d4390cb08d828cca2bb689a851564a1a8df135a05318e3921f4c55a981e98f9173f8d092137b571739a36d30aa15a3446fab86af19c4ee0935514a9b2115832551657e20d80a507113411d8ca945643dbcef11355a59a4d621f380ef735be8c2df873dfc5293a917b2fd9e9c7e593c5cf1947e2fd22dbd871f001795fb9ee0fe901da71f663eda8d48a5700955bfb817f151eb99d1d89e893abbafd8c2dae90e232020f791a42ae6197f988366cbc56f7471072c0768d8205664750430fda2c2f7d9644959b96106cae0a14b1408d9a7d8111561e62eed99ef398b4a66fe9ae83a99ef15", 0xee}], 0x7, &(0x7f00000019c0)=ANY=[@ANYBLOB="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"], 0x1340}}], 0x3, 0x8001) (async, rerun: 32) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) (async, rerun: 32) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) (async) close(r0) 2.078428262s ago: executing program 5 (id=441): syz_mount_image$ext4(&(0x7f00000006c0)='ext4\x00', &(0x7f0000000640)='./file2\x00', 0x3800008, &(0x7f0000000700)={[{@discard}, {@dioread_lock}, {@noauto_da_alloc}, {@resgid}, {@grpjquota_path={'grpjquota', 0x3d, './file2'}}]}, 0x3f, 0x540, &(0x7f0000000100)="$eJzs3d9rZFcdAPDvvclks7upk6pILViLrewW3ZlNY9sgovVFnwpqfV9jMhvCzmSWzKRuQrEp/Q9EUPDJJ18E/wBB+uAfIIWCvogPoqKIbhURqr3l3rlDt/MjCd3JTDf5fODunHN/fc+5Q86ce+/ZewM4tx6PiOcjYi4inoqIajk/Lacbeeawt95bd1/eyKcksuzFfySRlPP6+8rz8xFxubdJLEbEt74e8d1kOG5n/+DWerPZ2C3z9W7rdr2zf3Btu7W+1dhq7Kyurjy79tzaM2vXs9J91XO5n/jZ1778q89/7483/nb1+3mxvvSJqMRAPSapV/VKcSz68mO0exrBZmCurE9l1gUBAOBE8j7+RyPiM0X/vxpzRW9uwNwsSgYAAABMSvaVpfhfEpEBAAAAZ1YaEUuRpLVyLMBSpOlCeW3g43EpbbY73c/dbO/tbObLIpajkt7cbjaul2OFl6OS5PmVcoxtP//0QH41Ih6OiB9WLxb52ka7uTnjax8AAABwXlweOP//dzUt0scr/p9AetrlAwAAACZkeWwGAAAAOCuc8gMAAMDZN3j+73n/AAAAcKZ844UX8inrv/9686X9vVvtl65tNjq3aq29jdpGe/d2bavd3iqe2dc6bn/Ndvv2F2Jn70692+h06539gxut9t5O98b2+16BDQAAAEzRw59+/XdJRBx+8WIxhYf6AaP8edYFACbpPof66SrAA2x+1gUAZqYy6wIAM5ccs9zgHQAAePBd+eTw/f/++/9dG4CzzQ08ADh/3P+H86syOALwP7MqCTBt8+U1gI/0shfGrTf2/v9vThopyyLeqN47x/VFAACYrqViStJaeR6wFGlaq0U8FJEuRyW5ud1sXC/PD35brVzI8yvFlsmxY4YBAAAAAAAAAAAAAAAAAAAAAAAAgJ4sSyIDAAAAzrSI9K/J21E8y/9K9cmlwesDC8l/q/GXMvOTF390Z73b3V3J5/+zeJfXQkR0f1zOf3rs68MAAACASUsOxy7qnaeXnytTLRUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA58Bbd1/e6E/TjPv3r0bE8qj487FYfC5GJSIu/SuJ+Xu2SyJibgLxD1+NiEdGxU/inSx7JcpSjIp/8ZTjLxeHZnT8NCIuTyA+nGev5+3P86P+/tJ4vPgc/fc3X073a3z7l5aRH4nqmPbnoaG9tUbGePTNX9R7qcpw/FcjHp0f3f70299kTPwnhvb2dpZlw/G/8+2Dg3H1z34acWXk70/yvlj1but2vbN/cG27tb7V2GrsrK6uPLv23Noza9frN7ebjfLfkTF+8KlfvjMufl7/SyPi/+H3vfb3qPo/OXKPw79K/3/zzt2P9ZJDX0Ae/+oTI39/F2NM/LSM8tkynS+/0k8f9tL3euznbzx2VP03xxz/477/q+N2OuCpb772pxOuCgBMQWf/4NZ6s9nYPSKxeIJ1jkjk/Yj72Px0EpVo7P56cebF+ACJ7JXeN/dhKc8HTeS91ffm9Gv1ISjYPYlsKrEuFP35k261MNnoAy3Aa2W7sN48SeuxcFrNEgAAcAre6/3PuiQAAAAAAAAAAAAAAAAAAABwfk3jUWqDMQ9nU1UAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgCO9GwAA///rlNhr") bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x5}, 0x48) r0 = socket$xdp(0x2c, 0x3, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x6, 0x8012, r0, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10) connect$pppl2tp(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x1000000, @rand_addr=' \x01\x00'}}}, 0x32) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000007c0)=ANY=[@ANYBLOB="120100000000000810080100000000000001090224000100000000090400000103000000092100000001220500090581030000000000f11a23ec1a58"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)={0x0, 0x0, 0x5, {0x5, 0x0, "800000"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x3, &(0x7f0000000e40)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$BLKROSET(r6, 0x125d, &(0x7f0000000780)=0xc) r7 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) read$FUSE(r7, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r8}, 0x0, 0x0}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r9}, 0x10) fchmodat(0xffffffffffffffff, &(0x7f00000009c0)='./file0/file0\x00', 0x8) 2.055731394s ago: executing program 3 (id=442): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), &(0x7f0000000280)={0x0, 0xfb, 0x1015, 0x0, 0x8, "27c889a94102632384c0d7004df06f21", "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"}, 0x1015, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000015c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0x80000001}, 0x18) r1 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000f00)=ANY=[@ANYRES8=r2], 0x50) ioctl$BTRFS_IOC_GET_FEATURES(r2, 0x80189439, &(0x7f0000001340)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000001440), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r3, &(0x7f0000001580)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001540)={&(0x7f0000001600)={0xb0, r4, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7f}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xc85}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x8400}, 0x400c085) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f00000006c0)='./file1\x00', 0x40, &(0x7f00000000c0)={[{@user_xattr}, {@nodioread_nolock}]}, 0x1, 0x576, &(0x7f0000000140)="$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") openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x0) pwrite64(r9, &(0x7f00000005c0)='\"', 0x1, 0x4fed0) 1.834516062s ago: executing program 0 (id=443): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000002600000007"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) faccessat2(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x7, 0x0) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000093c0), r0) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000009500)={0x0, 0x0, &(0x7f00000094c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010029bd7000fbdbdf252b00000008000200", @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x90, r4, 0x2, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x51}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x4f}, @NL80211_ATTR_PMKID={0x14, 0x55, "ae6676a361e5eed8de49b549fdfec495"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x43}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x46}, @NL80211_ATTR_PMKID={0x14, 0x55, "34358a095fa7e411109c65ab81d9062e"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_PMKID={0x14, 0x55, "5bbb89457a8c5690eea6f376bfea2adc"}, @NL80211_ATTR_PMKID={0x14, 0x55, "7ec02e83e0277bd05794885cc5b31785"}]}, 0x90}, 0x1, 0x0, 0x0, 0x4044000}, 0x4040) 1.788763516s ago: executing program 1 (id=444): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) io_setup(0x58, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0xd}]) write(r0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_int(r6, &(0x7f0000000080)='cpuset.memory_spread_page\x00', 0x2, 0x0) sendfile(r7, r7, 0x0, 0x2) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r8, &(0x7f0000002600)={0x0, 0x0, &(0x7f00000025c0)={0x0}, 0x1, 0x0, 0x0, 0x4004000}, 0x4000000) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x1c, r10, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}}}, 0x1c}}, 0x2008020) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r8, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000600)='kfree\x00'}, 0x10) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) syz_mount_image$fuse(&(0x7f0000000140), 0x0, 0x8820, &(0x7f0000000240)=ANY=[], 0x1, 0x0, 0x0) 1.787858316s ago: executing program 0 (id=445): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x40, &(0x7f0000000100), 0x3, 0x576, &(0x7f0000000140)="$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") r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_GET_XSAVE(r2, 0x9000aea4, &(0x7f00000014c0)) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x9, 0x0, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x3}, 0x50) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f00000006c0)={@initdev, 0x0}, &(0x7f0000000700)=0x14) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x2000) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, r3, 0x9, '\x00', r4, r5, 0x0, 0x0, 0x1}, 0x50) 126.60711ms ago: executing program 3 (id=446): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x6, &(0x7f0000000140)=@framed={{}, [@jmp={0x5, 0x0, 0xa, 0x0, 0x0, 0x2, 0xfffffffffffffff0}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000040)='GPL\x00', 0x7, 0xa7, &(0x7f0000000080)=""/167}, 0x80) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000080)={[0xeeee0000, 0xeeef0000, 0xdddd0000, 0xb000], 0xdb, 0xc}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) rename(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r7, 0x0, r6, 0x0, 0x6, 0x1000000000000000) pipe2$9p(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r5, r8, 0x4e, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0x8000002000000006, 0x0, 0x41, 0x2000001, 0x0, 0x2004cb, 0xa8c, 0x0, 0x68ff, 0x9, 0x40, 0x3], 0x1, 0x202}) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) 120.42482ms ago: executing program 0 (id=447): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0xfffffffd, 0x0, 0x0, 0x41100, 0x40}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000700)=ANY=[@ANYRES8=r0, @ANYRES16=r1, @ANYRES8, @ANYBLOB="21811ddad147289b88299b36c5d863247584af138fc309834b17f3958175cb5338b7a5548027af3f038b7f1132c6fc9cbf8fc18bdc7f888ce8a5b6ddae0799a5", @ANYRES16=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffc2c) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, 0x0, &(0x7f0000000b00)=""/151}, 0x20) (async) syz_emit_ethernet(0xfdef, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0086dd6002000800fe2c00fe8000000000000000000000000000bbff02000000000000000000000000000132"], 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x2b67) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x1) (async) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000001700)=0x84) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) (async) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r6, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESDEC=0x0, @ANYRES16=r4, @ANYRES16=r0, @ANYRESHEX=r6, @ANYRES64=r4, @ANYRESHEX=r0], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x1c}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r9}, 0x10) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000000000000080000700d1bda40000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x7, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000f7ffffff00000000000000001811ef20", @ANYRES64=r2, @ANYRES32=r8], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000280)='selinux_audited\x00', r10, 0x0, 0xfffffffffffffffd}, 0x18) (async) clock_getres(0x7ffffffff000, 0x0) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0b00000007000000010001004900000001"], 0x48) r12 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r12, 0x6, 0x5, 0x0, &(0x7f0000000040)) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r11}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) 26.221888ms ago: executing program 1 (id=448): r0 = syz_open_dev$hidraw(&(0x7f0000000000), 0x3, 0x101002) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000040)={0x1, 0x2, 0x5, 0x5, r1}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = dup(r2) getsockopt$inet_int(r3, 0x0, 0xe, 0x0, &(0x7f0000000400)=0xfffffe6f) 25.459208ms ago: executing program 1 (id=449): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, 0x0) (async) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb85, &(0x7f00000017c0)="$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") (async) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x9000) (async) socket$netlink(0x10, 0x3, 0x0) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r4 = socket$unix(0x1, 0x5, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) io_setup(0x6, &(0x7f0000004680)=0x0) (async) r7 = eventfd2(0x7ff, 0x801) io_submit(r6, 0x2, &(0x7f0000000400)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x499, r4, 0x0, 0x0, 0x62, 0x0, 0x1, r7}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x6, r4, &(0x7f0000000180)="f6", 0x1, 0x7fffffffffffffff}]) r8 = socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x1010002, &(0x7f00000009c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@shortname_mixed}, {@shortname_mixed}, {@iocharset={'iocharset', 0x3d, 'cp857'}}, {@uni_xlate}, {@utf8}, {@utf8no}, {@uni_xlate}, {@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'macgreek'}}, {@shortname_winnt}, {@iocharset={'iocharset', 0x3d, 'cp863'}}, {@utf8no}, {@shortname_win95}, {@uni_xlate}, {@fat=@uid}, {@numtail}]}, 0x1, 0x36b, &(0x7f0000000500)="$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") (async) connect$inet(r8, &(0x7f0000000040)={0x2, 0x2, @local}, 0x10) r9 = socket(0x28, 0x4, 0x3) (async) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYRES8=r10], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[@ANYRESOCT=r10], 0x0) (async) recvmmsg(r9, &(0x7f0000001480)=[{{0x0, 0x0, 0x0}, 0x673}], 0x1, 0x40010142, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r12 = openat$cgroup_int(r11, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r12, &(0x7f00000000c0)=ANY=[@ANYBLOB='6'], 0x6a) 25.207208ms ago: executing program 0 (id=450): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000100)='io_uring_register\x00', r1}, 0x10) r2 = syz_io_uring_setup(0x371d, &(0x7f0000000440)={0x0, 0x6ef2, 0x400, 0xa, 0xffffff}, &(0x7f0000000380), &(0x7f0000000b00)) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) (async) r3 = socket(0x10, 0x3, 0x0) connect$netlink(r3, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) (async) syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0) (async) syz_mount_image$erofs(&(0x7f0000000400), &(0x7f0000000140)='./file1\x00', 0x3000801, &(0x7f0000000840)=ANY=[], 0x1, 0x1f3, &(0x7f0000000500)="$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") (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x400, 0x0) fadvise64(r4, 0x8000, 0x4101, 0x3) (async) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)=0x0) timer_settime(r6, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) (async) timer_settime(r6, 0x1, &(0x7f00000001c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, &(0x7f0000000300)) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x17e) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) (async) setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000140)={{0xa, 0x4e21, 0x80, @private1={0xfc, 0x1, '\x00', 0x1}, 0xc}, {0xa, 0x4e21, 0x7, @dev={0xfe, 0x80, '\x00', 0x37}, 0x5}, 0x0, {[0x9d26, 0x7, 0xfff, 0x6, 0x6, 0x0, 0x0, 0x3ff]}}, 0x5c) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001540)=@newtaction={0x18, 0x32, 0x829, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) 23.890298ms ago: executing program 1 (id=451): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000500000008040000cd00000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r2, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="0000000000000000000000181100000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000010000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000003c0)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300)=r5, 0x4) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e85000000070000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYBLOB="98959447925cbe88bcc08ef787b97492d584a8cde41a34633d05a5398183dc5954b1c7007b7a674154c8624ced6d4a8f277e2b1989f9a4565a408dc2d15ed5518335f3416a6bd501848fa9906943801e2dc162f797b88f1ef8f133e9b1a469c32a2406f3c568465b177f89c0a8354e7ab08a6328415e90fc22c2897a3a60f21541ce94147f6d3d077acbcfe0ea3a04add7ef058a431dab5265418b065a00dbd898199d512f1a7732a4d3672992410c72dd51a8b32e3ae5831c3a929c99745dc2aebbe3286640bc15b59ad1b721e12150"], 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, r6, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2$9p(&(0x7f00000001c0), 0x4080) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TIOCGPTPEER(r7, 0x5441, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000040)=0x2) readv(r9, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1) dup(r1) 0s ago: executing program 0 (id=452): socket$pppl2tp(0x18, 0x1, 0x1) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059000000"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) symlink(0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_btf_id_by_name$bpf_lsm(0x0) socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x18) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_bt_hci(r6, 0x800448f0, 0x0) bind$bt_hci(r6, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) preadv(r4, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/124, 0x4}], 0x3e8, 0x0, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r7, &(0x7f0000000b00)={0xa, 0xfdfe, 0x100007, @remote, 0xa}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kernel console output (not intermixed with test programs): syzkaller syzkaller login: [ 8.241514][ T115] udevd (115) used greatest stack depth: 22912 bytes left [ 12.124752][ T30] kauditd_printk_skb: 48 callbacks suppressed [ 12.124766][ T30] audit: type=1400 audit(1756077859.458:59): avc: denied { transition } for pid=221 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 12.135374][ T30] audit: type=1400 audit(1756077859.458:60): avc: denied { noatsecure } for pid=221 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 12.142678][ T30] audit: type=1400 audit(1756077859.458:61): avc: denied { write } for pid=221 comm="sh" path="pipe:[13920]" dev="pipefs" ino=13920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 12.151087][ T30] audit: type=1400 audit(1756077859.458:62): avc: denied { rlimitinh } for pid=221 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 12.158413][ T30] audit: type=1400 audit(1756077859.458:63): avc: denied { siginh } for pid=221 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.0.125' (ED25519) to the list of known hosts. [ 18.812502][ T30] audit: type=1400 audit(1756077866.138:64): avc: denied { mounton } for pid=273 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 18.813500][ T273] cgroup: Unknown subsys name 'net' [ 18.818619][ T30] audit: type=1400 audit(1756077866.148:65): avc: denied { mount } for pid=273 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 18.823971][ T30] audit: type=1400 audit(1756077866.148:66): avc: denied { unmount } for pid=273 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 18.824075][ T273] cgroup: Unknown subsys name 'devices' [ 18.973827][ T273] cgroup: Unknown subsys name 'hugetlb' [ 18.979406][ T273] cgroup: Unknown subsys name 'rlimit' [ 19.263718][ T30] audit: type=1400 audit(1756077866.598:67): avc: denied { setattr } for pid=273 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 19.286891][ T30] audit: type=1400 audit(1756077866.598:68): avc: denied { mounton } for pid=273 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 19.300795][ T275] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 19.311771][ T30] audit: type=1400 audit(1756077866.598:69): avc: denied { mount } for pid=273 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 19.343823][ T30] audit: type=1400 audit(1756077866.678:70): avc: denied { relabelto } for pid=275 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 19.369473][ T30] audit: type=1400 audit(1756077866.678:71): avc: denied { write } for pid=275 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 19.399738][ T30] audit: type=1400 audit(1756077866.728:72): avc: denied { read } for pid=273 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 19.400126][ T273] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 19.425449][ T30] audit: type=1400 audit(1756077866.728:73): avc: denied { open } for pid=273 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.684424][ T282] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.691469][ T282] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.699031][ T282] device bridge_slave_0 entered promiscuous mode [ 20.707222][ T282] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.714363][ T282] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.721561][ T282] device bridge_slave_1 entered promiscuous mode [ 20.760016][ T283] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.767070][ T283] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.774553][ T283] device bridge_slave_0 entered promiscuous mode [ 20.782314][ T283] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.789386][ T283] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.797055][ T283] device bridge_slave_1 entered promiscuous mode [ 20.803862][ T284] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.811117][ T284] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.818732][ T284] device bridge_slave_0 entered promiscuous mode [ 20.831321][ T284] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.838481][ T284] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.845785][ T284] device bridge_slave_1 entered promiscuous mode [ 20.873494][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.880656][ T285] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.888181][ T285] device bridge_slave_0 entered promiscuous mode [ 20.906601][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.913782][ T285] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.921222][ T285] device bridge_slave_1 entered promiscuous mode [ 20.950660][ T281] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.957759][ T281] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.965145][ T281] device bridge_slave_0 entered promiscuous mode [ 20.983599][ T281] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.990741][ T281] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.998661][ T281] device bridge_slave_1 entered promiscuous mode [ 21.149336][ T284] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.156498][ T284] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.163786][ T284] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.170814][ T284] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.189770][ T283] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.196854][ T283] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.204129][ T283] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.211259][ T283] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.221013][ T282] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.228138][ T282] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.235417][ T282] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.242446][ T282] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.271092][ T281] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.278167][ T281] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.285633][ T281] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.292933][ T281] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.310152][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 21.317826][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.325136][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.332370][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.339678][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.346826][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 21.355128][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 21.364007][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.371087][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.397859][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 21.406101][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 21.414424][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.421560][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.444426][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 21.451943][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 21.459360][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 21.466969][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 21.475263][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.482357][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.489715][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 21.497905][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.505058][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.512459][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 21.520339][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 21.528281][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 21.536459][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.543476][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.563058][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 21.571799][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 21.580170][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.587340][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.594887][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 21.603188][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.610201][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.629162][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 21.637022][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 21.645054][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 21.653414][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 21.660857][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 21.668966][ T284] device veth0_vlan entered promiscuous mode [ 21.682845][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 21.690857][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 21.699091][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.706117][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.721469][ T284] device veth1_macvtap entered promiscuous mode [ 21.728113][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 21.735738][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 21.744012][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 21.751853][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 21.760059][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 21.768099][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 21.776455][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 21.784621][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.791753][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.799105][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 21.807359][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 21.816217][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 21.837903][ T283] device veth0_vlan entered promiscuous mode [ 21.844286][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 21.853165][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 21.861186][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 21.869424][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 21.877554][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 21.886010][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 21.894499][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 21.902849][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 21.910977][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 21.918968][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 21.930145][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 21.937817][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 21.945343][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 21.954030][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 21.971596][ T283] device veth1_macvtap entered promiscuous mode [ 21.981852][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 21.990362][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 21.998927][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 22.007205][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 22.015475][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 22.023132][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 22.031321][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 22.047456][ T282] device veth0_vlan entered promiscuous mode [ 22.054548][ T281] device veth0_vlan entered promiscuous mode [ 22.061500][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 22.070345][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 22.079125][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 22.087171][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 22.095179][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 22.103373][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 22.111668][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 22.119635][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 22.127541][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 22.136083][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 22.144365][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 22.152866][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 22.161286][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 22.168997][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 22.176557][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 22.184238][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 22.206129][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 22.215147][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 22.215218][ T283] request_module fs-gadgetfs succeeded, but still no fs? [ 22.236887][ T282] device veth1_macvtap entered promiscuous mode [ 22.247450][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 22.255816][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 22.264580][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 22.272308][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 22.281369][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 22.295582][ T285] device veth0_vlan entered promiscuous mode [ 22.301797][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 22.322833][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 22.331862][ T281] device veth1_macvtap entered promiscuous mode [ 22.351626][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 22.362816][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 22.370805][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 22.378725][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 22.387108][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 22.396904][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 22.405311][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 22.413937][ T335] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4'. [ 22.431795][ T285] device veth1_macvtap entered promiscuous mode [ 22.447179][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 22.450205][ T338] loop0: detected capacity change from 0 to 512 [ 22.455749][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 22.470036][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 22.479994][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 22.493116][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 22.538236][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 22.539136][ T338] blk_update_request: I/O error, dev loop0, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 22.548597][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 22.568176][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 22.577798][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 22.588781][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 22.590928][ T338] EXT4-fs (loop0): unable to read superblock [ 22.597827][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 22.644043][ T355] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 22.668307][ T352] loop1: detected capacity change from 0 to 1024 [ 22.733099][ T352] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 22.794661][ T369] loop4: detected capacity change from 0 to 256 [ 22.812079][ T371] loop1: detected capacity change from 0 to 16 [ 22.812451][ T289] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 22.833265][ T373] ======================================================= [ 22.833265][ T373] WARNING: The mand mount option has been deprecated and [ 22.833265][ T373] and is ignored by this kernel. Remove the mand [ 22.833265][ T373] option from the mount to silence this warning. [ 22.833265][ T373] ======================================================= [ 22.870495][ T373] incfs: Can't find or create .index dir in ./file0 [ 22.877443][ T373] incfs: mount failed -14 [ 22.882585][ T39] usb 4-1: new low-speed USB device number 2 using dummy_hcd [ 22.906844][ T371] erofs: (device loop1): mounted with root inode @ nid 36. [ 22.920889][ T369] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x89cb6648, utbl_chksum : 0xe619d30d) [ 23.102622][ T289] usb 1-1: Using ep0 maxpacket: 32 [ 23.195900][ T385] xt_hashlimit: max too large, truncated to 1048576 [ 23.332602][ T39] usb 4-1: No LPM exit latency info found, disabling LPM. [ 23.432521][ T289] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 23.443636][ T289] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 23.452555][ T39] usb 4-1: config 0 has no interfaces? [ 23.573875][ T289] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 23.583280][ T289] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 23.591713][ T289] usb 1-1: Product: syz [ 23.596514][ T289] usb 1-1: Manufacturer: syz [ 23.657647][ T289] hub 1-1:4.0: USB hub found [ 23.713229][ T39] usb 4-1: string descriptor 0 read error: -22 [ 23.720581][ T39] usb 4-1: New USB device found, idVendor=19d2, idProduct=1485, bcdDevice=e8.41 [ 23.739084][ T39] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 23.759158][ T39] usb 4-1: config 0 descriptor?? [ 23.882682][ T289] hub 1-1:4.0: 2 ports detected [ 23.955231][ T393] capability: warning: `syz.2.15' uses 32-bit capabilities (legacy support in use) [ 24.042599][ T386] syz.1.13 (386) used greatest stack depth: 21880 bytes left [ 24.102879][ T289] hub 1-1:4.0: hub_hub_status failed (err = -71) [ 24.109306][ T289] hub 1-1:4.0: config failed, can't get hub status (err -71) [ 24.149594][ T30] kauditd_printk_skb: 69 callbacks suppressed [ 24.149621][ T30] audit: type=1400 audit(1756077871.478:143): avc: denied { create } for pid=397 comm="syz.2.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 24.153208][ T289] usb 1-1: USB disconnect, device number 2 [ 24.156123][ T30] audit: type=1400 audit(1756077871.478:144): avc: denied { read write } for pid=397 comm="syz.2.16" name="fuse" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 24.204732][ T30] audit: type=1400 audit(1756077871.478:145): avc: denied { open } for pid=397 comm="syz.2.16" path="/dev/fuse" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 24.342447][ T6] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 24.548001][ T403] capability: warning: `syz.4.18' uses deprecated v2 capabilities in a way that may be insecure [ 24.574623][ T30] audit: type=1400 audit(1756077871.908:146): avc: denied { create } for pid=407 comm="syz.4.19" dev="anon_inodefs" ino=16463 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 24.617167][ T30] audit: type=1400 audit(1756077871.928:147): avc: denied { ioctl } for pid=407 comm="syz.4.19" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=16463 ioctlcmd=0xaa04 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 24.647367][ T30] audit: type=1400 audit(1756077871.938:148): avc: denied { name_bind } for pid=412 comm="syz.0.20" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 24.670466][ T30] audit: type=1400 audit(1756077871.948:149): avc: denied { write } for pid=414 comm="syz.4.21" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 24.693731][ T30] audit: type=1400 audit(1756077871.998:150): avc: denied { read } for pid=412 comm="syz.0.20" dev="nsfs" ino=4026532301 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 24.715337][ T30] audit: type=1400 audit(1756077871.998:151): avc: denied { open } for pid=412 comm="syz.0.20" path="net:[4026532301]" dev="nsfs" ino=4026532301 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 24.738358][ T6] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 24.738657][ T30] audit: type=1400 audit(1756077871.998:152): avc: denied { create } for pid=412 comm="syz.0.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 24.769030][ T6] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 24.769069][ T6] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 24.769093][ T6] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 24.814470][ T424] IPv4: Oversized IP packet from 127.202.26.0 [ 24.820880][ T423] IPv4: Oversized IP packet from 127.202.26.0 [ 24.920416][ T430] loop2: detected capacity change from 0 to 2048 [ 24.927008][ T6] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 24.942473][ T26] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 24.950031][ T6] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 24.958794][ T6] usb 2-1: Product: syz [ 24.963165][ T6] usb 2-1: Manufacturer: syz [ 24.967799][ T6] usb 2-1: SerialNumber: syz [ 24.992708][ T400] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 25.013844][ T6] cdc_mbim 2-1:1.0: skipping garbage [ 25.020754][ T434] tipc: Started in network mode [ 25.025698][ T434] tipc: Node identity 6efcab3a1bc3, cluster identity 4711 [ 25.033535][ T434] tipc: Enabled bearer , priority 0 [ 25.040781][ T434] device syzkaller0 entered promiscuous mode [ 25.052837][ T434] tipc: Resetting bearer [ 25.059473][ T433] tipc: Resetting bearer [ 25.066331][ T433] tipc: Disabling bearer [ 25.192453][ T26] usb 5-1: Using ep0 maxpacket: 32 [ 25.214255][ T400] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 25.221258][ T400] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 25.236081][ T427] loop0: detected capacity change from 0 to 131072 [ 25.299953][ T427] F2FS-fs (loop0): Wrong CP boundary, start(512) end(1536) blocks(0) [ 25.308837][ T39] usb 4-1: USB disconnect, device number 2 [ 25.314864][ T26] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 81, changing to 10 [ 25.326771][ T427] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 25.335551][ T26] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 25.347053][ T26] usb 5-1: config 0 interface 0 has no altsetting 0 [ 25.354065][ T427] F2FS-fs (loop0): invalid crc value [ 25.355718][ T440] bridge: RTM_NEWNEIGH with invalid ether address [ 25.359570][ T26] usb 5-1: New USB device found, idVendor=07c0, idProduct=1125, bcdDevice= 0.00 [ 25.375578][ T26] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 25.384527][ T26] usb 5-1: config 0 descriptor?? [ 25.390469][ T427] F2FS-fs (loop0): Found nat_bits in checkpoint [ 25.431312][ T427] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 25.438728][ T427] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 25.474662][ T427] kvm [426]: vcpu0, guest rIP: 0xfff0 vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0x3, nop [ 25.522518][ T346] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 25.540675][ T440] loop3: detected capacity change from 0 to 40427 [ 25.551054][ T440] F2FS-fs (loop3): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288) [ 25.561018][ T440] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 25.643689][ T420] loop4: detected capacity change from 0 to 4096 [ 25.694718][ T454] loop3: detected capacity change from 0 to 128 [ 25.719362][ T454] EXT4-fs (loop3): Unrecognized mount option "obj_role=)(Ç[/!^-!" or missing value [ 25.735949][ T420] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 25.812501][ T459] loop0: detected capacity change from 0 to 512 [ 25.860305][ T459] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.29: inode #2214592512: comm syz.0.29: iget: illegal inode # [ 25.884043][ T459] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.29: error while reading EA inode 2214592512 err=-117 [ 25.892539][ T346] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 25.913348][ T400] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 25.917118][ T346] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 25.922616][ T400] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 25.937639][ T459] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2825: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 25.961508][ T467] overlayfs: './file1' not a directory [ 26.020713][ T459] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.29: inode #2214592512: comm syz.0.29: iget: illegal inode # [ 26.022512][ T346] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 26.043407][ T6] cdc_mbim 2-1:1.0: setting rx_max = 16384 [ 26.049956][ T459] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.29: error while reading EA inode 2214592512 err=-117 [ 26.072458][ T346] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 26.082609][ T346] usb 3-1: SerialNumber: syz [ 26.087382][ T459] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.29: inode #1: comm syz.0.29: iget: illegal inode # [ 26.139603][ T459] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.29: error while reading EA inode 1 err=-117 [ 26.168846][ T459] EXT4-fs (loop0): 1 orphan inode deleted [ 26.174860][ T459] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodioread_nolock,journal_dev=0x00000000000000ff,debug_want_extra_isize=0x000000000000004c,auto_da_alloc=0x0000000000000008,resgid=0x0000000000000000,acl,init_itable=0x0000000000008d55,,errors=continue. Quota mode: none. [ 26.188503][ T464] loop3: detected capacity change from 0 to 40427 [ 26.213643][ T464] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 26.221946][ T464] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 26.233813][ T464] F2FS-fs (loop3): Found nat_bits in checkpoint [ 26.262558][ T6] cdc_mbim 2-1:1.0: setting tx_max = 184 [ 26.270815][ T6] cdc_mbim 2-1:1.0: cdc-wdm0: USB WDM device [ 26.279919][ T6] cdc_mbim 2-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.1-1, CDC MBIM, 42:67:8e:e6:76:32 [ 26.280556][ T464] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 26.298960][ T464] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 26.325515][ T6] usb 2-1: USB disconnect, device number 2 [ 26.332017][ T6] cdc_mbim 2-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.1-1, CDC MBIM [ 26.341408][ T436] UDC core: couldn't find an available UDC or it's busy: -16 [ 26.348967][ T436] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 26.379833][ T283] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 26.379854][ T283] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 26.392113][ T283] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 26.408608][ T283] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 26.427735][ T283] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 26.440723][ T283] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 26.448545][ T283] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 26.515184][ T498] loop0: detected capacity change from 0 to 128 [ 26.574426][ T498] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a802c018, mo2=0002] [ 26.583255][ T498] System zones: 1-3, 19-19, 35-36 [ 26.590125][ T498] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug,,errors=continue. Quota mode: none. [ 26.601774][ T498] ext4 filesystem being mounted at /8/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 26.616156][ T498] EXT4-fs warning (device loop0): ext4_group_extend:1823: can't shrink FS - resize aborted [ 26.980663][ T530] loop1: detected capacity change from 0 to 512 [ 27.043372][ T530] EXT4-fs (loop1): EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31 [ 27.162486][ T6] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 27.191740][ T531] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 27.509604][ T534] loop0: detected capacity change from 0 to 512 [ 27.522579][ T6] usb 4-1: config 5 has an invalid interface number: 3 but max is 2 [ 27.530670][ T6] usb 4-1: config 5 has an invalid interface number: 16 but max is 2 [ 27.538908][ T6] usb 4-1: config 5 has an invalid interface number: 166 but max is 2 [ 27.549605][ T6] usb 4-1: config 5 has an invalid interface number: 6 but max is 2 [ 27.558651][ T534] EXT4-fs error (device loop0): ext4_orphan_get:1401: inode #15: comm syz.0.42: casefold flag without casefold feature [ 27.571241][ T6] usb 4-1: config 5 has an invalid descriptor of length 1, skipping remainder of the config [ 27.571372][ T534] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.42: couldn't read orphan inode 15 (err -117) [ 27.581406][ T6] usb 4-1: config 5 has 4 interfaces, different from the descriptor's value: 3 [ 27.593740][ T534] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpid,user_xattr,,errors=continue. Quota mode: writeback. [ 27.602494][ T6] usb 4-1: config 5 has no interface number 0 [ 27.621065][ T6] usb 4-1: config 5 has no interface number 1 [ 27.642952][ T363] usb 5-1: USB disconnect, device number 2 [ 27.643382][ T6] usb 4-1: config 5 has no interface number 2 [ 27.656602][ T6] usb 4-1: config 5 interface 3 altsetting 64 has an invalid endpoint with address 0x80, skipping [ 27.667913][ T6] usb 4-1: config 5 interface 3 altsetting 64 endpoint 0x6 has an invalid bInterval 181, changing to 7 [ 27.679424][ T6] usb 4-1: config 5 interface 3 altsetting 64 endpoint 0x6 has invalid maxpacket 42441, setting to 1024 [ 27.690923][ T6] usb 4-1: config 5 interface 3 altsetting 64 endpoint 0xD has invalid maxpacket 72, setting to 64 [ 27.701737][ T6] usb 4-1: config 5 interface 3 altsetting 64 bulk endpoint 0x89 has invalid maxpacket 16 [ 27.711737][ T6] usb 4-1: config 5 interface 3 altsetting 64 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 27.723138][ T6] usb 4-1: config 5 interface 3 altsetting 64 has an invalid endpoint with address 0x0, skipping [ 27.733780][ T6] usb 4-1: config 5 interface 3 altsetting 64 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 27.744870][ T6] usb 4-1: config 5 interface 3 altsetting 64 has a duplicate endpoint with address 0xF, skipping [ 27.755775][ T6] usb 4-1: config 5 interface 3 altsetting 64 has an invalid endpoint with address 0x0, skipping [ 27.766338][ T6] usb 4-1: config 5 interface 3 altsetting 64 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 27.777138][ T6] usb 4-1: config 5 interface 3 altsetting 64 has a duplicate endpoint with address 0xE, skipping [ 27.787761][ T6] usb 4-1: config 5 interface 3 altsetting 64 has 13 endpoint descriptors, different from the interface descriptor's value: 12 [ 27.801308][ T6] usb 4-1: too many endpoints for config 5 interface 16 altsetting 134: 109, using maximum allowed: 30 [ 27.812465][ T6] usb 4-1: config 5 interface 16 altsetting 134 has 0 endpoint descriptors, different from the interface descriptor's value: 109 [ 27.825980][ T6] usb 4-1: config 5 interface 166 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 27.839070][ T6] usb 4-1: too many endpoints for config 5 interface 6 altsetting 4: 157, using maximum allowed: 30 [ 27.850087][ T6] usb 4-1: config 5 interface 6 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 157 [ 27.863421][ T6] usb 4-1: config 5 interface 3 has no altsetting 0 [ 27.875906][ T6] usb 4-1: config 5 interface 16 has no altsetting 0 [ 27.882718][ T6] usb 4-1: config 5 interface 166 has no altsetting 0 [ 27.889728][ T6] usb 4-1: config 5 interface 6 has no altsetting 0 [ 28.052655][ T6] usb 4-1: New USB device found, idVendor=05c6, idProduct=9203, bcdDevice=c5.0d [ 28.061933][ T6] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.070795][ T6] usb 4-1: Product: Ф [ 28.075237][ T6] usb 4-1: Manufacturer: à § [ 28.079888][ T6] usb 4-1: SerialNumber: Њ [ 28.102538][ T526] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 28.183482][ T20] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 28.220725][ T346] usb 3-1: 0:2 : does not exist [ 28.252242][ T346] usb 3-1: USB disconnect, device number 2 [ 28.442961][ T20] usb 1-1: Using ep0 maxpacket: 32 [ 28.503667][ T555] loop4: detected capacity change from 0 to 512 [ 28.530479][ T6] usb 4-1: USB disconnect, device number 3 [ 28.563011][ T20] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 28.576930][ T555] EXT4-fs (loop4): journaled quota format not specified [ 28.592543][ T20] usb 1-1: config 0 has no interface number 0 [ 28.608808][ T20] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 28.630125][ T20] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 28.650581][ T20] usb 1-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 28.670742][ T20] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.691596][ T20] usb 1-1: config 0 descriptor?? [ 28.781250][ T558] incfs: Options parsing error. -22 [ 28.798371][ T526] loop3: detected capacity change from 0 to 40427 [ 28.801238][ T558] incfs: mount failed -22 [ 28.842917][ T526] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 28.853852][ T526] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 28.865056][ T526] F2FS-fs (loop3): Unrecognized mount option "00000000000000000000003ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ18446744073709551615ÿÿÿÿÿÿÿÿÿÿKð{_xDÄÙ16«P•æ=†‘•" or missing value [ 29.559836][ T30] kauditd_printk_skb: 62 callbacks suppressed [ 29.559855][ T30] audit: type=1400 audit(1756077876.318:215): avc: denied { create } for pid=561 comm="syz.1.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 29.638848][ T565] loop1: detected capacity change from 0 to 32768 [ 29.656224][ T30] audit: type=1326 audit(1756077876.328:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=533 comm="syz.0.42" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8fe750be9 code=0x7ffc0000 [ 29.679801][ T30] audit: type=1326 audit(1756077876.328:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=533 comm="syz.0.42" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8fe750be9 code=0x7ffc0000 [ 29.703322][ T30] audit: type=1326 audit(1756077876.328:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=533 comm="syz.0.42" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7fb8fe750be9 code=0x7ffc0000 [ 29.703493][ T367] loop1: p1 p3 < p5 p6 > [ 29.731812][ T367] loop1: partition table partially beyond EOD, truncated [ 29.749857][ T20] usbhid 1-1:0.1: can't add hid device: -71 [ 29.755865][ T20] usbhid: probe of 1-1:0.1 failed with error -71 [ 29.764227][ T20] usb 1-1: USB disconnect, device number 3 [ 29.770480][ T30] audit: type=1326 audit(1756077876.328:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=533 comm="syz.0.42" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8fe750be9 code=0x7ffc0000 [ 29.799022][ T30] audit: type=1326 audit(1756077876.328:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=533 comm="syz.0.42" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8fe750be9 code=0x7ffc0000 [ 29.823729][ T30] audit: type=1326 audit(1756077876.328:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=533 comm="syz.0.42" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb8fe7507eb code=0x7ffc0000 [ 29.847221][ T30] audit: type=1326 audit(1756077876.328:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=533 comm="syz.0.42" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb8fe7507eb code=0x7ffc0000 [ 29.870583][ T30] audit: type=1326 audit(1756077876.978:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=533 comm="syz.0.42" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb8fe7834a5 code=0x7ffc0000 [ 29.871565][ T565] loop1: p1 p3 < p5 p6 > [ 29.898484][ T565] loop1: partition table partially beyond EOD, truncated [ 29.937377][ T30] audit: type=1326 audit(1756077877.188:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=533 comm="syz.0.42" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8fe750be9 code=0x7ffc0000 [ 29.980918][ T574] syz.1.54[574] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 29.981016][ T574] syz.1.54[574] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 29.985673][ T582] loop4: detected capacity change from 0 to 512 [ 30.065176][ T585] loop2: detected capacity change from 0 to 512 [ 30.094889][ T582] EXT4-fs (loop4): can't mount with commit=257, fs mounted w/o journal [ 30.113039][ T580] UDC core: couldn't find an available UDC or it's busy: -16 [ 30.120655][ T580] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 30.133908][ T585] EXT4-fs (loop2): Ignoring removed oldalloc option [ 30.140151][ T556] udevd[556]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 30.141600][ T332] udevd[332]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 30.161042][ T374] udevd[374]: inotify_add_watch(7, /dev/loop1p5, 10) failed: No such file or directory [ 30.162870][ T585] EXT4-fs (loop2): 1 truncate cleaned up [ 30.173692][ T589] udevd[589]: inotify_add_watch(7, /dev/loop1p6, 10) failed: No such file or directory [ 30.176728][ T585] EXT4-fs (loop2): mounted filesystem without journal. Opts: quota,bsdgroups,nouid32,errors=remount-ro,jqfmt=vfsv1,oldalloc,stripe=0x0000000000000005,. Quota mode: writeback. [ 30.192378][ T556] udevd[556]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 30.214397][ T367] udevd[367]: inotify_add_watch(7, /dev/loop1p5, 10) failed: No such file or directory [ 30.230190][ T343] udevd[343]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 30.256710][ T332] udevd[332]: inotify_add_watch(7, /dev/loop1p6, 10) failed: No such file or directory [ 30.371210][ T585] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.56: invalid indirect mapped block 234881024 (level 0) [ 30.382459][ T346] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 30.392902][ T585] EXT4-fs (loop2): Remounting filesystem read-only [ 30.772848][ T346] usb 4-1: Using ep0 maxpacket: 8 [ 30.892478][ T346] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 30.902791][ T346] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 30.995965][ T346] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 31.018314][ T346] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 31.019404][ T617] loop1: detected capacity change from 0 to 256 [ 31.036425][ T346] usb 4-1: SerialNumber: syz [ 31.103710][ T346] cdc_acm 4-1:1.0: Control and data interfaces are not separated! [ 31.111570][ T346] cdc_acm 4-1:1.0: This needs exactly 3 endpoints [ 31.118799][ T346] cdc_acm: probe of 4-1:1.0 failed with error -22 [ 31.157004][ T619] overlayfs: unrecognized mount option "verity=on" or missing value [ 31.231712][ T624] 9pnet: Insufficient options for proto=fd [ 31.240923][ T624] loop1: detected capacity change from 0 to 256 [ 31.255920][ T624] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x16aec47f, utbl_chksum : 0xe619d30d) [ 31.298160][ T580] loop3: detected capacity change from 0 to 1024 [ 31.375286][ T580] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 31.530348][ T615] loop2: detected capacity change from 0 to 131072 [ 31.582604][ T615] F2FS-fs (loop2): Test dummy encryption mode enabled [ 31.594296][ T637] netlink: 4 bytes leftover after parsing attributes in process `syz.0.71'. [ 31.602780][ T615] F2FS-fs (loop2): Can't change test_dummy_encryption on remount [ 31.702445][ T349] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 31.707881][ T646] loop2: detected capacity change from 0 to 8192 [ 31.773010][ T343] loop2: p1 p2[DM] p4 [ 31.777251][ T343] loop2: p1 size 196608 extends beyond EOD, truncated [ 31.784494][ T343] loop2: p2 start 4292936063 is beyond EOD, truncated [ 31.791446][ T343] loop2: p4 size 50331648 extends beyond EOD, truncated [ 31.800130][ T646] loop2: p1 p2[DM] p4 [ 31.804629][ T646] loop2: p1 size 196608 extends beyond EOD, truncated [ 31.811960][ T646] loop2: p2 start 4292936063 is beyond EOD, truncated [ 31.818794][ T646] loop2: p4 size 50331648 extends beyond EOD, truncated [ 31.924417][ T646] loop2: detected capacity change from 0 to 256 [ 31.953901][ T343] udevd[343]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 31.958376][ T646] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x99a53fd9, utbl_chksum : 0xe619d30d) [ 31.972056][ T556] udevd[556]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 32.092621][ T349] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 32.103949][ T349] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 32.114262][ T349] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 32.123456][ T349] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.132141][ T349] usb 2-1: config 0 descriptor?? [ 32.367250][ T26] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 32.612463][ T26] usb 5-1: Using ep0 maxpacket: 32 [ 32.732465][ T39] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 32.740028][ T26] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 32.750461][ T26] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 32.833228][ T349] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 32.840753][ T349] cp2112 0003:10C4:EA90.0001: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 32.949123][ T26] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 32.958611][ T26] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.967329][ T26] usb 5-1: Product: syz [ 32.971692][ T26] usb 5-1: Manufacturer: syz [ 32.976314][ T26] usb 5-1: SerialNumber: syz [ 32.982017][ T662] usb 4-1: USB disconnect, device number 4 [ 33.173084][ T349] cp2112 0003:10C4:EA90.0001: Part Number: 0x82 Device Version: 0xFE [ 33.232687][ T39] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 33.266815][ T39] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 33.281176][ T667] syz.3.79[667] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 33.281247][ T667] syz.3.79[667] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 33.292938][ T39] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 33.313474][ T39] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.325710][ T667] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=667 comm=syz.3.79 [ 33.325999][ T39] usb 1-1: config 0 descriptor?? [ 33.338078][ T667] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=667 comm=syz.3.79 [ 33.374605][ T677] loop3: detected capacity change from 0 to 128 [ 33.394191][ T677] FAT-fs (loop3): Directory bread(block 32) failed [ 33.400742][ T677] FAT-fs (loop3): Directory bread(block 33) failed [ 33.407480][ T677] FAT-fs (loop3): Directory bread(block 34) failed [ 33.414481][ T677] FAT-fs (loop3): Directory bread(block 35) failed [ 33.421146][ T677] FAT-fs (loop3): Directory bread(block 36) failed [ 33.429763][ T677] FAT-fs (loop3): Directory bread(block 37) failed [ 33.437356][ T677] FAT-fs (loop3): Directory bread(block 38) failed [ 33.444107][ T677] FAT-fs (loop3): Directory bread(block 39) failed [ 33.450859][ T677] FAT-fs (loop3): Directory bread(block 40) failed [ 33.457499][ T677] FAT-fs (loop3): Directory bread(block 41) failed [ 33.482384][ T677] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 33.491092][ T677] FAT-fs (loop3): Filesystem has been set read-only [ 33.499687][ T677] process 'syz.3.81' launched '/dev/fd/6' with NULL argv: empty string added [ 33.508906][ T677] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 33.517495][ T677] attempt to access beyond end of device [ 33.517495][ T677] loop3: rw=2049, want=4216, limit=128 [ 33.883231][ T39] kovaplus 0003:1E7D:2D50.0002: item fetching failed at offset 4/5 [ 33.891434][ T39] kovaplus 0003:1E7D:2D50.0002: parse failed [ 33.897680][ T39] kovaplus: probe of 0003:1E7D:2D50.0002 failed with error -22 [ 34.062471][ T680] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 34.092509][ T39] usb 2-1: reset high-speed USB device number 3 using dummy_hcd [ 34.102036][ T363] usb 1-1: USB disconnect, device number 4 [ 34.123275][ T709] 9pnet: Insufficient options for proto=fd [ 34.402438][ T289] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 34.422468][ T680] usb 3-1: config 0 has an invalid interface number: 64 but max is 0 [ 34.430610][ T680] usb 3-1: config 0 has no interface number 0 [ 34.572563][ T30] kauditd_printk_skb: 94 callbacks suppressed [ 34.572576][ T30] audit: type=1326 audit(1756077881.908:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=681 comm="syz.2.83" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2c4f6b17eb code=0x7ffc0000 [ 34.592580][ T680] usb 3-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 34.601804][ T30] audit: type=1326 audit(1756077881.928:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=681 comm="syz.2.83" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2c4f6b17eb code=0x7ffc0000 [ 34.610992][ T680] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.644519][ T680] usb 3-1: Product: syz [ 34.648752][ T680] usb 3-1: Manufacturer: syz [ 34.653924][ T30] audit: type=1326 audit(1756077881.988:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=710 comm="syz.0.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8fe750be9 code=0x7ffc0000 [ 34.656276][ T680] usb 3-1: SerialNumber: syz [ 34.677574][ T289] usb 4-1: Using ep0 maxpacket: 8 [ 34.682625][ T680] usb 3-1: config 0 descriptor?? [ 34.692690][ T30] audit: type=1326 audit(1756077881.988:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=710 comm="syz.0.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8fe750be9 code=0x7ffc0000 [ 34.716182][ T30] audit: type=1326 audit(1756077881.988:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=710 comm="syz.0.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7fb8fe750be9 code=0x7ffc0000 [ 34.739435][ T30] audit: type=1326 audit(1756077881.988:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=710 comm="syz.0.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8fe750be9 code=0x7ffc0000 [ 34.763404][ T30] audit: type=1326 audit(1756077881.988:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=710 comm="syz.0.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8fe750be9 code=0x7ffc0000 [ 34.787377][ T30] audit: type=1326 audit(1756077881.988:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=710 comm="syz.0.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fb8fe74f69f code=0x7ffc0000 [ 34.810546][ T30] audit: type=1326 audit(1756077881.988:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=710 comm="syz.0.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8fe750be9 code=0x7ffc0000 [ 34.834254][ T30] audit: type=1326 audit(1756077881.988:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=710 comm="syz.0.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8fe750be9 code=0x7ffc0000 [ 34.872531][ T289] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 34.880775][ T289] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 34.890980][ T289] usb 4-1: config 0 has no interface number 0 [ 35.052502][ T289] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 35.061624][ T289] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.069734][ T289] usb 4-1: Product: syz [ 35.074596][ T289] usb 4-1: Manufacturer: syz [ 35.079180][ T289] usb 4-1: SerialNumber: syz [ 35.086910][ T289] usb 4-1: config 0 descriptor?? [ 35.112669][ T680] usb 3-1: Found UVC 0.08 device syz (046d:0823) [ 35.123348][ T680] usb 3-1: No valid video chain found. [ 35.130773][ T680] usb 3-1: USB disconnect, device number 3 [ 35.153125][ T289] usb 4-1: Found UVC 0.04 device syz (046d:08c3) [ 35.159865][ T289] uvcvideo 4-1:0.31: Entity type for entity Output 6 was not initialized! [ 35.169028][ T289] usb 4-1: Failed to create links for entity 6 [ 35.175444][ T26] usb 5-1: 0:2 : does not exist [ 35.175756][ T289] usb 4-1: Failed to register entities (-22). [ 35.189452][ T26] usb 5-1: USB disconnect, device number 3 [ 35.358101][ T680] usb 4-1: USB disconnect, device number 5 [ 35.496584][ T735] IPv4: Oversized IP packet from 127.202.26.0 [ 35.638726][ T740] loop0: detected capacity change from 0 to 512 [ 35.674545][ T740] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 35.682019][ T740] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 35.694622][ T740] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b002c118, mo2=0002] [ 35.702975][ T740] System zones: 1-12 [ 35.710429][ T740] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2228: inode #15: comm syz.0.99: corrupted in-inode xattr [ 35.725117][ T740] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.99: couldn't read orphan inode 15 (err -117) [ 35.737865][ T740] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,data_err=abort,debug,noload,mblk_io_submit,commit=0x0000000000000005,init_itable=0x0000000000000601,debug,,errors=continue. Quota mode: none. [ 35.771596][ T740] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=740 comm=syz.0.99 [ 36.171843][ T750] netlink: 16 bytes leftover after parsing attributes in process `syz.4.101'. [ 36.589050][ T763] 9pnet: Insufficient options for proto=fd [ 36.721948][ T768] ªªªªªª: renamed from vlan0 [ 36.777772][ T26] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 36.842839][ T349] usb 2-1: USB disconnect, device number 3 [ 37.152489][ T26] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 37.162298][ T26] usb 3-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 37.171468][ T26] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.180638][ T26] usb 3-1: config 0 descriptor?? [ 37.903405][ T26] usbhid 3-1:0.0: can't add hid device: -71 [ 37.909536][ T26] usbhid: probe of 3-1:0.0 failed with error -71 [ 37.949641][ T787] IPv4: Oversized IP packet from 127.202.26.0 [ 37.974479][ T26] usb 3-1: USB disconnect, device number 4 [ 38.779865][ T800] netlink: 'syz.2.114': attribute type 6 has an invalid length. [ 38.791105][ T800] IPv6: NLM_F_CREATE should be specified when creating new route [ 38.816877][ T803] syz.3.116 (803) used greatest stack depth: 21728 bytes left [ 38.837029][ T796] syz.2.114 (796) used greatest stack depth: 21344 bytes left [ 38.988894][ T829] loop3: detected capacity change from 0 to 1024 [ 39.035476][ T829] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,bsddf,nombcache,norecovery,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,noblock_validity,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 39.068642][ T829] netlink: 48 bytes leftover after parsing attributes in process `syz.3.119'. [ 39.262500][ T707] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 39.342443][ T26] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 39.502436][ T707] usb 1-1: Using ep0 maxpacket: 8 [ 39.622507][ T26] usb 3-1: too many configurations: 118, using maximum allowed: 8 [ 39.690821][ T30] kauditd_printk_skb: 87 callbacks suppressed [ 39.690837][ T30] audit: type=1326 audit(1756077887.018:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=812 comm="syz.3.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29f5026be9 code=0x7ffc0000 [ 39.771393][ T30] audit: type=1326 audit(1756077887.018:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=812 comm="syz.3.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29f5026be9 code=0x7ffc0000 [ 39.852546][ T707] usb 1-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 39.862492][ T26] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 39.873750][ T842] loop4: detected capacity change from 0 to 40427 [ 39.880347][ T26] usb 3-1: can't read configurations, error -61 [ 39.882478][ T707] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.894989][ T707] usb 1-1: Product: syz [ 39.899284][ T707] usb 1-1: Manufacturer: syz [ 39.904207][ T707] usb 1-1: SerialNumber: syz [ 39.909806][ T707] usb 1-1: config 0 descriptor?? [ 39.919993][ T842] F2FS-fs (loop4): Fix alignment : done, start(4096) end(16896) block(12288) [ 39.938201][ T842] F2FS-fs (loop4): invalid crc value [ 39.949051][ T842] F2FS-fs (loop4): invalid crc value [ 39.955154][ T842] F2FS-fs (loop4): Failed to get valid F2FS checkpoint [ 40.047731][ T846] loop3: detected capacity change from 0 to 40427 [ 40.062672][ T846] F2FS-fs (loop3): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288) [ 40.072037][ T846] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 40.082115][ T846] netlink: 176 bytes leftover after parsing attributes in process `syz.3.128'. [ 40.091420][ T26] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 40.113111][ T30] audit: type=1400 audit(1756077887.428:418): avc: denied { ioctl } for pid=845 comm="syz.3.128" path="socket:[17824]" dev="sockfs" ino=17824 ioctlcmd=0x48e6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 40.246256][ T707] usb 1-1: USB disconnect, device number 5 [ 40.304097][ T30] audit: type=1326 audit(1756077887.638:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=850 comm="syz.3.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29f5026be9 code=0x7ffc0000 [ 40.353958][ T30] audit: type=1326 audit(1756077887.668:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=850 comm="syz.3.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29f5026be9 code=0x7ffc0000 [ 40.377619][ T30] audit: type=1326 audit(1756077887.678:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=850 comm="syz.3.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f29f5026be9 code=0x7ffc0000 [ 40.401013][ T30] audit: type=1326 audit(1756077887.678:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=850 comm="syz.3.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29f5026be9 code=0x7ffc0000 [ 40.509826][ T861] loop3: detected capacity change from 0 to 1024 [ 40.518441][ T861] SELinux: security_context_str_to_sid(staff_u) failed for (dev ?, type ?) errno=-22 [ 40.533929][ T861] SELinux: security_context_str_to_sid(unconfined_u) failed for (dev ?, type ?) errno=-22 [ 40.607207][ T862] loop4: detected capacity change from 0 to 256 [ 41.022744][ T26] usb 3-1: too many configurations: 118, using maximum allowed: 8 [ 41.038657][ T861] EXT4-fs (loop3): Mount option "nodioread_nolock" incompatible with ext2 [ 41.076077][ T862] FAT-fs (loop4): Directory bread(block 64) failed [ 41.083092][ T862] FAT-fs (loop4): Directory bread(block 65) failed [ 41.089933][ T862] FAT-fs (loop4): Directory bread(block 66) failed [ 41.096930][ T862] FAT-fs (loop4): Directory bread(block 67) failed [ 41.103797][ T862] FAT-fs (loop4): Directory bread(block 68) failed [ 41.110364][ T862] FAT-fs (loop4): Directory bread(block 69) failed [ 41.117128][ T862] FAT-fs (loop4): Directory bread(block 70) failed [ 41.123900][ T862] FAT-fs (loop4): Directory bread(block 71) failed [ 41.130574][ T862] FAT-fs (loop4): Directory bread(block 72) failed [ 41.137169][ T862] FAT-fs (loop4): Directory bread(block 73) failed [ 41.187245][ T862] device ip6tnl0 entered promiscuous mode [ 41.194951][ T30] audit: type=1400 audit(1756077888.488:423): avc: denied { mount } for pid=855 comm="syz.4.130" name="/" dev="loop4" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 41.358459][ T855] device ip6tnl0 left promiscuous mode [ 41.382539][ T26] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 41.397097][ T26] usb 3-1: can't read configurations, error -61 [ 41.426997][ T26] usb usb3-port1: attempt power cycle [ 41.482881][ T876] tipc: Started in network mode [ 41.487769][ T876] tipc: Node identity ac14140f, cluster identity 4711 [ 41.494807][ T876] tipc: New replicast peer: 255.255.255.83 [ 41.500661][ T876] tipc: Enabled bearer , priority 10 [ 41.527167][ T861] device lo entered promiscuous mode [ 41.535846][ T861] device tunl0 entered promiscuous mode [ 41.546397][ T861] device gre0 entered promiscuous mode [ 41.552602][ T861] device gretap0 entered promiscuous mode [ 41.558759][ T861] device erspan0 entered promiscuous mode [ 41.564940][ T861] device ip_vti0 entered promiscuous mode [ 41.571273][ T861] device ip6_vti0 entered promiscuous mode [ 41.577771][ T861] device sit0 entered promiscuous mode [ 41.584274][ T861] device ip6tnl0 entered promiscuous mode [ 41.590514][ T861] device ip6gre0 entered promiscuous mode [ 41.647342][ T861] device syz_tun entered promiscuous mode [ 41.653501][ T861] device ip6gretap0 entered promiscuous mode [ 41.659898][ T861] device bridge0 entered promiscuous mode [ 41.666923][ T861] device dummy0 entered promiscuous mode [ 41.674091][ T885] overlayfs: failed to clone upperpath [ 41.680204][ T861] device veth0 entered promiscuous mode [ 41.686726][ T885] overlayfs: failed to clone upperpath [ 41.774660][ T888] loop4: detected capacity change from 0 to 512 [ 41.804689][ T30] audit: type=1400 audit(1756077889.128:424): avc: denied { remount } for pid=884 comm="syz.1.138" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 41.836994][ T887] incfs: Options parsing error. -22 [ 41.846101][ T887] incfs: mount failed -22 [ 41.873052][ T26] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 41.938096][ T30] audit: type=1400 audit(1756077889.188:425): avc: denied { connect } for pid=884 comm="syz.1.138" lport=256 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 42.412933][ T26] usb 3-1: device descriptor read/all, error -71 [ 42.612679][ T662] tipc: Node number set to 2886997007 [ 42.927477][ T879] loop0: detected capacity change from 0 to 40427 [ 44.020564][ T861] device veth1 entered promiscuous mode [ 44.027257][ T861] device wg0 entered promiscuous mode [ 44.033657][ T861] device wg1 entered promiscuous mode [ 44.039498][ T861] device wg2 entered promiscuous mode [ 44.046178][ T861] device veth0_to_bridge entered promiscuous mode [ 44.049360][ T888] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 44.053457][ T861] device veth1_to_bridge entered promiscuous mode [ 44.060680][ T888] EXT4-fs (loop4): Test dummy encryption mode enabled [ 44.067796][ T861] device veth0_to_bond entered promiscuous mode [ 44.074277][ T888] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 44.074289][ T888] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 44.074996][ T888] EXT4-fs (loop4): can't mount with journal_async_commit, fs mounted w/o journal [ 44.081202][ T861] device bond_slave_0 entered promiscuous mode [ 44.112448][ T879] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 44.168339][ T879] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 44.178028][ T861] device veth1_to_bond entered promiscuous mode [ 44.185201][ T861] device bond_slave_1 entered promiscuous mode [ 44.192180][ T861] device veth0_to_team entered promiscuous mode [ 44.199054][ T861] device team_slave_0 entered promiscuous mode [ 44.205745][ T861] device veth1_to_team entered promiscuous mode [ 44.212700][ T861] device team_slave_1 entered promiscuous mode [ 44.220219][ T879] F2FS-fs (loop0): invalid crc value [ 44.228094][ T879] F2FS-fs (loop0): Found nat_bits in checkpoint [ 44.228665][ T861] device veth0_to_batadv entered promiscuous mode [ 44.247635][ T861] device batadv_slave_0 entered promiscuous mode [ 44.260212][ T879] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 44.261721][ T861] device veth1_to_batadv entered promiscuous mode [ 44.274151][ T879] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 44.336391][ T861] device batadv_slave_1 entered promiscuous mode [ 44.343892][ T861] device xfrm0 entered promiscuous mode [ 44.349931][ T861] device veth0_to_hsr entered promiscuous mode [ 44.356860][ T861] device hsr_slave_0 entered promiscuous mode [ 44.378558][ T879] syz.0.137[879] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 44.378659][ T879] syz.0.137[879] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 44.382882][ T861] device veth1_to_hsr entered promiscuous mode [ 44.469686][ T861] device hsr_slave_1 entered promiscuous mode [ 44.483330][ T861] device veth1_virt_wifi entered promiscuous mode [ 44.500209][ T861] device veth0_virt_wifi entered promiscuous mode [ 44.522790][ T861] device veth1_vlan entered promiscuous mode [ 44.530455][ T10] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 44.540908][ T861] device vlan0 entered promiscuous mode [ 44.549779][ T10] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 44.560221][ T861] device vlan1 entered promiscuous mode [ 44.569386][ T861] device veth0_macvtap entered promiscuous mode [ 44.582929][ T861] device macsec0 entered promiscuous mode [ 44.590438][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 44.599562][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 44.608766][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 44.617683][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 44.629669][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 44.639243][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 44.655338][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 44.674611][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 44.807018][ T927] loop3: detected capacity change from 0 to 512 [ 44.909618][ T927] loop3: detected capacity change from 0 to 7 [ 45.774822][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 45.774836][ T30] audit: type=1400 audit(1756077893.108:435): avc: denied { write } for pid=931 comm="syz.0.144" name="uinput" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 45.882408][ C1] sched: RT throttling activated [ 45.892259][ T947] syz.4.155[947] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 45.897461][ T947] syz.4.155[947] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 45.915624][ T952] loop0: detected capacity change from 0 to 1024 [ 45.934963][ T30] audit: type=1326 audit(1756077893.268:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=945 comm="syz.2.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c4f6b1be9 code=0x7ffc0000 [ 45.960136][ T30] audit: type=1326 audit(1756077893.288:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=945 comm="syz.2.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c4f6b1be9 code=0x7ffc0000 [ 45.990203][ T948] audit: audit_backlog=65 > audit_backlog_limit=64 [ 46.023765][ T948] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 46.031435][ T948] audit: backlog limit exceeded [ 46.046949][ T952] EXT4-fs (loop0): Ignoring removed nobh option [ 46.048603][ T30] audit: type=1326 audit(1756077893.318:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=945 comm="syz.2.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f2c4f6b1be9 code=0x7ffc0000 [ 46.076630][ T30] audit: type=1326 audit(1756077893.318:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=945 comm="syz.2.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f2c4f6b1be9 code=0x7ffc0000 [ 46.076860][ T952] EXT4-fs (loop0): Ignoring removed bh option [ 46.099890][ T30] audit: type=1326 audit(1756077893.318:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=945 comm="syz.2.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f2c4f6b1be9 code=0x7ffc0000 [ 46.130263][ T30] audit: type=1326 audit(1756077893.318:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=945 comm="syz.2.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f2c4f6b1be9 code=0x7ffc0000 [ 46.141684][ T952] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 46.221643][ T952] EXT4-fs (loop0): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000003,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 46.248764][ T971] netlink: 104 bytes leftover after parsing attributes in process `syz.2.162'. [ 46.269733][ T971] netlink: 4 bytes leftover after parsing attributes in process `syz.2.162'. [ 46.270058][ T952] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3876: comm syz.0.156: Allocating blocks 497-513 which overlap fs metadata [ 46.293692][ T952] EXT4-fs (loop0): pa ffff8881116ad000: logic 128, phys. 385, len 8 [ 46.294002][ T971] netlink: 'syz.2.162': attribute type 25 has an invalid length. [ 46.301706][ T952] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:4893: group 0, free 0, pa_free 1 [ 46.320127][ T971] netlink: 'syz.2.162': attribute type 7 has an invalid length. [ 46.398043][ T26] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 46.670981][ T977] loop4: detected capacity change from 0 to 40427 [ 46.672512][ T26] usb 4-1: device descriptor read/64, error -71 [ 46.758512][ T977] F2FS-fs (loop4): Small segment_count (9 < 1 * 24) [ 46.778902][ T977] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 46.816795][ T977] F2FS-fs (loop4): Found nat_bits in checkpoint [ 46.850056][ T977] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 46.857375][ T977] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 47.006540][ T989] attempt to access beyond end of device [ 47.006540][ T989] loop4: rw=2049, want=55296, limit=40427 [ 47.040844][ T282] attempt to access beyond end of device [ 47.040844][ T282] loop4: rw=2049, want=45104, limit=40427 [ 47.082452][ T26] usb 4-1: device descriptor read/64, error -71 [ 47.199164][ T999] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2573 sclass=netlink_route_socket pid=999 comm=syz.2.169 [ 47.362473][ T26] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 47.642476][ T26] usb 4-1: device descriptor read/64, error -71 [ 47.657096][ T1011] block device autoloading is deprecated and will be removed. [ 47.670797][ T1014] UDC core: couldn't find an available UDC or it's busy: -16 [ 47.678914][ T1014] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 47.932473][ T662] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 48.032530][ T26] usb 4-1: device descriptor read/64, error -71 [ 48.152523][ T26] usb usb4-port1: attempt power cycle [ 48.212462][ T662] usb 3-1: device descriptor read/64, error -71 [ 48.533052][ T1025] overlayfs: failed to resolve './file0': -2 [ 48.541522][ T1021] overlayfs: failed to resolve './file1': -2 [ 48.562465][ T26] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 48.612574][ T662] usb 3-1: device descriptor read/64, error -71 [ 48.762519][ T26] usb 4-1: device descriptor read/8, error -71 [ 49.890430][ T1055] loop0: detected capacity change from 0 to 512 [ 49.902799][ T1059] netlink: 96 bytes leftover after parsing attributes in process `syz.4.186'. [ 49.976600][ T1060] loop3: detected capacity change from 0 to 512 [ 49.992911][ T1055] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 50.025721][ T1055] EXT4-fs (loop0): group descriptors corrupted! [ 50.119640][ T662] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 50.127994][ T1060] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 50.140954][ T1060] EXT4-fs (loop3): 1 truncate cleaned up [ 50.152622][ T26] usb 4-1: device descriptor read/8, error -71 [ 50.155597][ T1060] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota=,jqfmt=vfsv0,noload,data_err=ignore,usrjquota="init_itable=0x0000000000000601,init_itable=0x0000000000000101,max_dir_size_kb=0x0000000000000003,,errors=continue. Quota mode: writeback. [ 50.479842][ T1082] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -4 [ 50.489143][ T1082] platform regulatory.0: Direct firmware load for regulatory.db failed with error -4 [ 50.499149][ T662] usb 3-1: device descriptor read/64, error -71 [ 50.604318][ T1088] overlayfs: failed to clone upperpath [ 50.646278][ T1090] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 50.689488][ T1094] loop3: detected capacity change from 0 to 1024 [ 50.733927][ T1109] fuse: Bad value for 'rootmode' [ 50.740884][ T1109] loop0: detected capacity change from 0 to 16 [ 50.917387][ T1109] erofs: (device loop0): mounted with root inode @ nid 36. [ 51.208176][ T1112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.215837][ T1112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.225540][ T1112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.233669][ T1112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.268072][ T1113] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 51.285941][ T1094] EXT4-fs (loop3): mounted filesystem without journal. Opts: max_batch_time=0x000000000000055e,delalloc,abort,nodelalloc,,errors=continue. Quota mode: none. [ 51.336993][ T1109] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -1027 in[4096, 0] out[4096] [ 51.446357][ T1113] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 51.556486][ T1113] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 51.565555][ T1113] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 51.574448][ T1094] EXT4-fs error (device loop3): ext4_generic_delete_entry:2729: inode #2: block 16: comm syz.3.195: bad entry in directory: inode out of bounds - offset=12, inode=129, rec_len=12, size=1024 fake=1 [ 51.593868][ T30] kauditd_printk_skb: 208 callbacks suppressed [ 51.593887][ T30] audit: type=1400 audit(1756077898.908:650): avc: denied { rename } for pid=1091 comm="syz.3.195" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 51.658046][ T1113] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 51.693664][ T1113] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 51.713104][ T1094] EXT4-fs error (device loop3) in ext4_delete_entry:2800: Corrupt filesystem [ 51.732974][ T1113] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 51.762741][ T1094] EXT4-fs warning (device loop3): ext4_rename_delete:3792: inode #2: comm syz.3.195: Deleting old file: nlink 4, error=-117 [ 51.782829][ T1113] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 51.903716][ T1132] loop3: detected capacity change from 0 to 512 [ 51.936623][ T1132] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 51.962455][ T1115] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 51.966705][ T1132] EXT4-fs (loop3): 1 truncate cleaned up [ 51.982892][ T1132] EXT4-fs (loop3): mounted filesystem without journal. Opts: noload,nombcache,journal_ioprio=0x0000000000000003,errors=remount-ro,lazytime,minixdf,noquota,usrjquota=,. Quota mode: none. [ 52.142680][ T1136] EXT4-fs error (device loop3): ext4_read_inline_dir:1614: inode #12: block 7: comm syz.3.205: path /34/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=40, inode=2085390, rec_len=0, size=80 fake=0 [ 52.217268][ T1132] EXT4-fs error (device loop3): ext4_find_extent:893: inode #15: comm syz.3.205: inode has invalid extent depth: 25964 [ 52.242456][ T30] audit: type=1400 audit(1756077899.548:651): avc: denied { execute } for pid=1131 comm="syz.3.205" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 52.269680][ T1136] EXT4-fs (loop3): Remounting filesystem read-only [ 52.282468][ T1132] EXT4-fs (loop3): Remounting filesystem read-only [ 52.289097][ T1132] fs-verity (loop3, inode 15): Error -117 getting verity descriptor size [ 52.355593][ T1109] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -1027 in[4096, 0] out[4096] [ 52.372951][ T1115] usb 5-1: unable to get BOS descriptor or descriptor too short [ 52.389674][ T1143] loop3: detected capacity change from 0 to 1024 [ 52.414162][ T30] audit: type=1400 audit(1756077899.748:652): avc: denied { mount } for pid=1144 comm="syz.2.208" name="/" dev="ramfs" ino=18350 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 52.452713][ T1115] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 52.464292][ T1115] usb 5-1: can't read configurations, error -71 [ 52.495279][ T1143] EXT4-fs (loop3): Ignoring removed orlov option [ 52.520674][ T1147] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 52.525524][ T1143] EXT4-fs (loop3): mounted filesystem without journal. Opts: resgid=0x0000000000000000,bsddf,grpquota,auto_da_alloc,debug_want_extra_isize=0x0000000000000080,orlov,discard,noauto_da_alloc,stripe=0x0000000000000002,,errors=continue. Quota mode: writeback. [ 52.557566][ T30] audit: type=1326 audit(1756077899.888:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1156 comm="syz.0.211" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb8fe750be9 code=0x0 [ 52.598036][ T1160] netlink: 104 bytes leftover after parsing attributes in process `syz.1.213'. [ 52.607166][ T1160] netlink: 104 bytes leftover after parsing attributes in process `syz.1.213'. [ 52.617272][ T1160] netlink: 104 bytes leftover after parsing attributes in process `syz.1.213'. [ 52.762492][ T289] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 52.960229][ T1172] loop4: detected capacity change from 0 to 256 [ 53.025255][ T1172] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 53.152522][ T289] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 53.165013][ T289] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 53.181165][ T289] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 53.190667][ T289] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.420431][ T30] audit: type=1400 audit(1756077900.598:654): avc: denied { mounton } for pid=1171 comm="syz.4.216" path="/44/file0/file0" dev="loop4" ino=1048597 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1 [ 53.459064][ T289] usb 3-1: config 0 descriptor?? [ 53.492355][ T30] audit: type=1400 audit(1756077900.598:655): avc: denied { mount } for pid=1171 comm="syz.4.216" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 53.560821][ T1190] input: syz1 as /devices/virtual/input/input5 [ 53.567494][ T30] audit: type=1400 audit(1756077900.898:656): avc: denied { read } for pid=86 comm="acpid" name="event3" dev="devtmpfs" ino=761 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 53.590088][ T30] audit: type=1400 audit(1756077900.898:657): avc: denied { open } for pid=86 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=761 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 53.590113][ T30] audit: type=1400 audit(1756077900.898:658): avc: denied { ioctl } for pid=86 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=761 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 53.641142][ T1191] device macsec0 left promiscuous mode [ 53.792432][ T662] usb 1-1: new low-speed USB device number 6 using dummy_hcd [ 53.876415][ T282] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 53.889739][ T282] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 53.943550][ T289] kovaplus 0003:1E7D:2D50.0003: item fetching failed at offset 4/5 [ 53.958760][ T289] kovaplus 0003:1E7D:2D50.0003: parse failed [ 53.971316][ T289] kovaplus: probe of 0003:1E7D:2D50.0003 failed with error -22 [ 54.160479][ T289] usb 3-1: USB disconnect, device number 11 [ 54.235476][ T30] audit: type=1400 audit(1756077901.568:659): avc: denied { mounton } for pid=1206 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 54.283194][ T662] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 54.300073][ T662] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 54.582572][ T662] usb 1-1: string descriptor 0 read error: -22 [ 54.591983][ T662] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 54.629075][ T1113] device bridge_slave_1 left promiscuous mode [ 54.646502][ T1113] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.676217][ T662] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.696868][ T1113] device bridge_slave_0 left promiscuous mode [ 54.707323][ T1113] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.716525][ T1113] device veth1_macvtap left promiscuous mode [ 54.722697][ T1113] device veth0_vlan left promiscuous mode [ 54.743438][ T662] usb 1-1: MIDIStreaming interface descriptor not found [ 54.946124][ T743] usb 1-1: USB disconnect, device number 6 [ 54.976880][ T1206] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.999034][ T1206] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.028784][ T1206] device bridge_slave_0 entered promiscuous mode [ 55.052193][ T1206] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.074847][ T1206] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.089661][ T1206] device bridge_slave_1 entered promiscuous mode [ 55.274348][ T1221] netlink: 9 bytes leftover after parsing attributes in process `syz.3.230'. [ 55.348222][ T1206] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.355540][ T1206] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.420734][ T351] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.447808][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.455775][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.502491][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.522944][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.533889][ T351] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.540961][ T351] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.549921][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.559999][ T351] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.567110][ T351] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.582330][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.590653][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.614127][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 55.622813][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.645685][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 55.662218][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.671713][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.680887][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.691175][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.700009][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.722803][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.735586][ T1206] device veth0_vlan entered promiscuous mode [ 55.742140][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.758500][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.767689][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.777465][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.788944][ T1206] device veth1_macvtap entered promiscuous mode [ 55.817511][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 55.834452][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 55.967750][ T1253] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 56.072137][ T1258] netlink: 4 bytes leftover after parsing attributes in process `syz.5.240'. [ 56.088334][ T1258] loop5: detected capacity change from 0 to 128 [ 56.126528][ T1258] FAT-fs (loop5): Unrecognized mount option "és„vWur–C‚‰'—Ôw" or missing value [ 56.306270][ T1269] xt_socket: unknown flags 0x8 [ 56.520392][ T1288] netlink: 12 bytes leftover after parsing attributes in process `syz.3.250'. [ 56.636137][ T1298] ÿÿÿÿÿÿ: renamed from vlan1 [ 56.924971][ T30] kauditd_printk_skb: 157 callbacks suppressed [ 56.924989][ T30] audit: type=1326 audit(1756077904.258:817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1313 comm="syz.3.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29f5026be9 code=0x7ffc0000 [ 56.932445][ T289] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 56.977410][ T1314] netlink: 8 bytes leftover after parsing attributes in process `syz.3.260'. [ 56.996415][ T1273] syz.1.245 (1273) used greatest stack depth: 20832 bytes left [ 57.004699][ T1297] loop0: detected capacity change from 0 to 40427 [ 57.012149][ T30] audit: type=1326 audit(1756077904.258:818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1313 comm="syz.3.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f29f5026be9 code=0x7ffc0000 [ 57.059569][ T1319] syz.3.262[1319] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 57.059679][ T1319] syz.3.262[1319] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 57.105387][ T1297] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 57.129118][ T1297] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 57.138991][ T1297] F2FS-fs (loop0): invalid crc value [ 57.145325][ T30] audit: type=1326 audit(1756077904.298:819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1313 comm="syz.3.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29f5026be9 code=0x7ffc0000 [ 57.169590][ T30] audit: type=1326 audit(1756077904.308:820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1313 comm="syz.3.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f29f5026be9 code=0x7ffc0000 [ 57.215110][ T1297] F2FS-fs (loop0): Found nat_bits in checkpoint [ 57.252774][ T30] audit: type=1326 audit(1756077904.308:821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1313 comm="syz.3.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29f5026be9 code=0x7ffc0000 [ 57.309890][ T30] audit: type=1326 audit(1756077904.308:822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1313 comm="syz.3.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f29f5026be9 code=0x7ffc0000 [ 57.334259][ T30] audit: type=1326 audit(1756077904.308:823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1313 comm="syz.3.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29f5026be9 code=0x7ffc0000 [ 57.342743][ T1297] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 57.357743][ T30] audit: type=1326 audit(1756077904.308:824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1313 comm="syz.3.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f29f5026be9 code=0x7ffc0000 [ 57.385394][ T1297] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 57.402627][ T289] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 57.402671][ T289] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 57.402691][ T289] usb 6-1: config 1 has no interface number 1 [ 57.402713][ T289] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 57.402744][ T289] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 57.446293][ T30] audit: type=1326 audit(1756077904.308:825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1313 comm="syz.3.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29f5026be9 code=0x7ffc0000 [ 57.446330][ T30] audit: type=1326 audit(1756077904.308:826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1313 comm="syz.3.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f29f5026be9 code=0x7ffc0000 [ 57.562656][ T289] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 57.562691][ T289] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.562710][ T289] usb 6-1: Product: syz [ 57.562725][ T289] usb 6-1: Manufacturer: syz [ 57.562738][ T289] usb 6-1: SerialNumber: syz [ 57.582521][ T1305] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 57.938476][ T1338] loop0: detected capacity change from 0 to 2048 [ 58.020284][ T1338] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 58.092527][ T289] usb 6-1: 2:1 : no or invalid class specific endpoint descriptor [ 58.106544][ T289] usb 6-1: 2:1 : no or invalid class specific endpoint descriptor [ 58.194028][ T289] usb 6-1: USB disconnect, device number 2 [ 58.359812][ T1358] netlink: 8 bytes leftover after parsing attributes in process `syz.1.270'. [ 58.371925][ T1358] netlink: 248 bytes leftover after parsing attributes in process `syz.1.270'. [ 58.381752][ T346] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 58.390316][ T1358] netlink: 12 bytes leftover after parsing attributes in process `syz.1.270'. [ 58.428780][ T1356] 9pnet: p9_errstr2errno: server reported unknown error 184467440737095 [ 58.532291][ T1366] netlink: 'syz.5.274': attribute type 27 has an invalid length. [ 58.577717][ T1366] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.585008][ T1366] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.632516][ T346] usb 4-1: Using ep0 maxpacket: 8 [ 58.752651][ T346] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 58.776294][ T346] usb 4-1: config 179 has no interface number 0 [ 58.789853][ T346] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 58.808677][ T1366] fuse: Bad value for 'group_id' [ 58.809587][ T346] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 58.825356][ T346] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 58.836845][ T346] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 58.847212][ T346] usb 4-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 58.860607][ T346] usb 4-1: config 179 interface 65 has no altsetting 0 [ 58.867553][ T346] usb 4-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 58.876957][ T346] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.924058][ T346] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input6 [ 59.126762][ T1348] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96 [ 59.140604][ T39] usb 4-1: USB disconnect, device number 10 [ 59.152543][ T39] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 59.317071][ T1366] syz.5.274 (1366) used greatest stack depth: 20672 bytes left [ 59.732484][ T26] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 59.766769][ T1396] netlink: 'syz.2.281': attribute type 12 has an invalid length. [ 60.052743][ T26] usb 1-1: Using ep0 maxpacket: 16 [ 60.172790][ T26] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 60.306302][ T26] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 60.320535][ T1414] loop5: detected capacity change from 0 to 128 [ 60.354601][ T1414] EXT4-fs (loop5): Test dummy encryption mode enabled [ 60.384032][ T1414] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none. [ 60.408126][ T1414] ext4 filesystem being mounted at /11/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 60.424762][ T1414] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 60.483349][ T1414] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 60.502502][ T26] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 60.521903][ T26] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.528553][ T1414] overlayfs: failed to resolve './file0': -2 [ 60.532012][ T26] usb 1-1: Product: syz [ 60.552237][ T26] usb 1-1: Manufacturer: syz [ 60.557140][ T26] usb 1-1: SerialNumber: syz [ 60.614566][ T1420] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 60.862317][ T1429] 9pnet: Insufficient options for proto=fd [ 60.956157][ T1122] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 61.020302][ T1440] netlink: 'syz.2.294': attribute type 10 has an invalid length. [ 61.028320][ T1440] netlink: 'syz.2.294': attribute type 17 has an invalid length. [ 61.036527][ T1440] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 61.290646][ T1454] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 61.323271][ T1122] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 61.337191][ T1122] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 61.350224][ T1122] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 61.364175][ T1122] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.376915][ T1122] usb 4-1: config 0 descriptor?? [ 61.408620][ T26] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 61.420185][ T1468] tipc: Failed to remove unknown binding: 66,1,1/0:3093163755/3093163757 [ 61.429028][ T1468] tipc: Failed to remove unknown binding: 66,1,1/0:3093163755/3093163757 [ 61.437786][ T1468] tipc: Failed to remove unknown binding: 66,1,1/0:3093163755/3093163757 [ 62.437122][ T1478] loop0: detected capacity change from 0 to 1024 [ 62.454085][ T1478] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 62.468741][ T1478] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 62.480354][ T1478] JBD2: no valid journal superblock found [ 62.486171][ T1478] EXT4-fs (loop0): error loading journal [ 62.535401][ T30] kauditd_printk_skb: 127 callbacks suppressed [ 62.535417][ T30] audit: type=1400 audit(1756077909.868:954): avc: denied { map } for pid=1479 comm="syz.2.307" path="socket:[20910]" dev="sockfs" ino=20910 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 62.607274][ T30] audit: type=1400 audit(1756077909.898:955): avc: denied { read accept } for pid=1479 comm="syz.2.307" path="socket:[20910]" dev="sockfs" ino=20910 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 62.643484][ T1122] kovaplus 0003:1E7D:2D50.0004: item fetching failed at offset 4/5 [ 62.651756][ T1122] kovaplus 0003:1E7D:2D50.0004: parse failed [ 62.681286][ T1122] kovaplus: probe of 0003:1E7D:2D50.0004 failed with error -22 [ 62.690286][ T30] audit: type=1400 audit(1756077910.018:956): avc: denied { read } for pid=1484 comm="syz.2.308" name="ppp" dev="devtmpfs" ino=153 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 62.775179][ T1487] syz.5.309[1487] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 62.775274][ T1487] syz.5.309[1487] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 62.790434][ T26] usb 1-1: USB disconnect, device number 7 [ 62.807998][ T30] audit: type=1400 audit(1756077910.048:957): avc: denied { open } for pid=1484 comm="syz.2.308" path="/dev/ppp" dev="devtmpfs" ino=153 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 62.951538][ T662] usb 4-1: USB disconnect, device number 11 [ 63.144726][ T343] udevd[343]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 63.317268][ T1495] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=27 sclass=netlink_tcpdiag_socket pid=1495 comm=syz.0.311 [ 63.330371][ T1495] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=27 sclass=netlink_tcpdiag_socket pid=1495 comm=syz.0.311 [ 63.343553][ T1495] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=27 sclass=netlink_tcpdiag_socket pid=1495 comm=syz.0.311 [ 63.357097][ T1495] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=27 sclass=netlink_tcpdiag_socket pid=1495 comm=syz.0.311 [ 63.370018][ T1495] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=27 sclass=netlink_tcpdiag_socket pid=1495 comm=syz.0.311 [ 63.383429][ T1495] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=27 sclass=netlink_tcpdiag_socket pid=1495 comm=syz.0.311 [ 63.391300][ T1498] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 63.396598][ T1495] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=27 sclass=netlink_tcpdiag_socket pid=1495 comm=syz.0.311 [ 63.420338][ T1495] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=27 sclass=netlink_tcpdiag_socket pid=1495 comm=syz.0.311 [ 63.434628][ T1495] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=27 sclass=netlink_tcpdiag_socket pid=1495 comm=syz.0.311 [ 63.447578][ T1495] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=27 sclass=netlink_tcpdiag_socket pid=1495 comm=syz.0.311 [ 63.486579][ T30] audit: type=1107 audit(1756077910.818:958): pid=1503 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 63.486615][ T1504] netlink: 60 bytes leftover after parsing attributes in process `syz.3.315'. [ 63.544598][ T1508] loop3: detected capacity change from 0 to 512 [ 63.616373][ T1508] EXT4-fs (loop3): Ignoring removed oldalloc option [ 63.623388][ T1508] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 63.639674][ T1508] EXT4-fs (loop3): 1 truncate cleaned up [ 63.645540][ T1508] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000fff,inode_readahead_blks=0x0000000000000040,oldalloc,errors=remount-ro,minixdf,. Quota mode: none. [ 63.675004][ T30] audit: type=1400 audit(1756077911.008:959): avc: denied { mount } for pid=1515 comm="syz.5.318" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 63.699500][ T1508] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2228: inode #15: comm syz.3.316: corrupted in-inode xattr [ 63.731651][ T30] audit: type=1400 audit(1756077911.028:960): avc: denied { mounton } for pid=1515 comm="syz.5.318" path="/14/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 63.762514][ T1122] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 63.785525][ T1508] EXT4-fs (loop3): Remounting filesystem read-only [ 63.792306][ T1508] EXT4-fs warning (device loop3): ext4_xattr_set_entry:1760: inode #15: comm syz.3.316: unable to update i_inline_off [ 63.808227][ T1508] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2228: inode #15: comm syz.3.316: corrupted in-inode xattr [ 63.865924][ T1508] EXT4-fs (loop3): Remounting filesystem read-only [ 63.985973][ T30] audit: type=1400 audit(1756077911.318:961): avc: denied { setopt } for pid=1704 comm="syz.1.322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 64.202517][ T1122] usb 1-1: unable to get BOS descriptor or descriptor too short [ 64.262499][ T1122] usb 1-1: not running at top speed; connect to a high speed hub [ 64.352494][ T1122] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 64.522649][ T1122] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 64.538445][ T1122] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.548733][ T30] audit: type=1400 audit(1756077911.878:962): avc: denied { unmount } for pid=1206 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 64.549188][ T1122] usb 1-1: Product: syz [ 64.574794][ T1122] usb 1-1: Manufacturer: syz [ 64.581053][ T1122] usb 1-1: SerialNumber: syz [ 64.586737][ T30] audit: type=1400 audit(1756077911.908:963): avc: denied { unmount } for pid=1206 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 64.623127][ T1122] usb 1-1: selecting invalid altsetting 1 [ 64.922485][ T743] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 65.002542][ T662] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 65.048474][ T1502] UDC core: couldn't find an available UDC or it's busy: -16 [ 65.056639][ T1502] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 65.070180][ T1502] UDC core: couldn't find an available UDC or it's busy: -16 [ 65.078211][ T1502] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 65.282425][ T662] usb 6-1: Using ep0 maxpacket: 16 [ 65.292609][ T743] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 65.302564][ T743] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 65.315427][ T743] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 65.324646][ T743] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.333358][ T743] usb 3-1: config 0 descriptor?? [ 65.352473][ T289] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 65.432464][ T662] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 65.443433][ T662] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 65.453270][ T662] usb 6-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 65.462367][ T662] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.470987][ T662] usb 6-1: config 0 descriptor?? [ 65.542514][ T1122] cdc_ncm 1-1:1.0: SET_NTB_FORMAT failed [ 65.564638][ T1122] usb 1-1: selecting invalid altsetting 1 [ 65.570469][ T1122] cdc_ncm 1-1:1.0: bind() failure [ 65.585590][ T1122] usb 1-1: USB disconnect, device number 8 [ 65.592758][ T289] usb 4-1: Using ep0 maxpacket: 32 [ 65.692038][ T1806] overlayfs: failed to clone upperpath [ 65.712616][ T289] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 65.884756][ T743] kovaplus 0003:1E7D:2D50.0005: item fetching failed at offset 4/5 [ 65.945190][ T743] kovaplus 0003:1E7D:2D50.0005: parse failed [ 65.951680][ T743] kovaplus: probe of 0003:1E7D:2D50.0005 failed with error -22 [ 65.957327][ T1819] bridge4: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 66.035887][ T289] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 66.045318][ T289] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.053463][ T289] usb 4-1: Product: syz [ 66.057817][ T289] usb 4-1: Manufacturer: syz [ 66.059043][ T363] usb 3-1: USB disconnect, device number 12 [ 66.068984][ T289] usb 4-1: SerialNumber: syz [ 66.069067][ T662] usbhid 6-1:0.0: can't add hid device: -71 [ 66.080130][ T662] usbhid: probe of 6-1:0.0 failed with error -71 [ 66.098501][ T662] usb 6-1: USB disconnect, device number 3 [ 66.103422][ T289] usb 4-1: config 0 descriptor?? [ 66.106897][ T1823] loop0: detected capacity change from 0 to 1024 [ 66.174328][ T1825] netlink: 8 bytes leftover after parsing attributes in process `syz.1.346'. [ 66.382088][ T1823] EXT4-fs (loop0): Ignoring removed orlov option [ 66.432675][ T289] usb 4-1: bad CDC descriptors [ 66.437666][ T289] usb 4-1: unsupported MDLM descriptors [ 66.444257][ T289] usb 4-1: USB disconnect, device number 12 [ 66.465068][ T1823] EXT4-fs (loop0): mounted filesystem without journal. Opts: orlov,min_batch_time=0x0000000000000004,,errors=continue. Quota mode: writeback. [ 66.884239][ T1825] syz.1.346 (1825) used greatest stack depth: 20056 bytes left [ 67.012446][ T289] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 67.083668][ T1852] netlink: 8 bytes leftover after parsing attributes in process `syz.0.354'. [ 67.489931][ T1860] netlink: 8 bytes leftover after parsing attributes in process `syz.0.358'. [ 67.733163][ T289] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 67.743075][ T289] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.751280][ T289] usb 3-1: Product: syz [ 67.755602][ T289] usb 3-1: Manufacturer: syz [ 67.760717][ T289] usb 3-1: SerialNumber: syz [ 67.765942][ T1874] netlink: 388 bytes leftover after parsing attributes in process `syz.1.360'. [ 67.775451][ T30] kauditd_printk_skb: 337 callbacks suppressed [ 67.775472][ T30] audit: type=1400 audit(1756077915.108:1301): avc: denied { setopt } for pid=1870 comm="syz.5.363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 67.808837][ T1871] loop5: detected capacity change from 0 to 1024 [ 67.904022][ T1877] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 67.924913][ T1879] bridge4: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 68.003877][ T1882] loop3: detected capacity change from 0 to 512 [ 68.029308][ T1889] loop5: detected capacity change from 0 to 2048 [ 68.084115][ T1889] GPT:first_usable_lbas don't match. [ 68.089474][ T1889] GPT:34 != 290 [ 68.093004][ T1889] GPT: Use GNU Parted to correct GPT errors. [ 68.099174][ T1889] loop5: p1 p2 p3 [ 68.145636][ T101] GPT:first_usable_lbas don't match. [ 68.150983][ T101] GPT:34 != 290 [ 68.154582][ T101] GPT: Use GNU Parted to correct GPT errors. [ 68.160635][ T101] loop5: p1 p2 p3 [ 68.220232][ T367] udevd[367]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 68.231936][ T343] udevd[343]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 68.232326][ T332] udevd[332]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 68.270375][ T367] udevd[367]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 68.282054][ T343] udevd[343]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 68.296207][ T332] udevd[332]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 68.308275][ T1912] fuse: Unknown parameter 'fdº´tQ¤¡„_ö' [ 68.313001][ T1914] loop5: detected capacity change from 0 to 512 [ 68.324464][ T1914] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 68.337823][ T1914] EXT4-fs (loop5): 1 orphan inode deleted [ 68.344290][ T1914] EXT4-fs (loop5): 1 truncate cleaned up [ 68.350314][ T1914] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 68.365210][ T30] audit: type=1400 audit(1756077915.698:1302): avc: denied { append } for pid=1913 comm="syz.5.374" path="/25/bus/cpu.stat" dev="loop5" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 68.374865][ T1914] netlink: 8 bytes leftover after parsing attributes in process `syz.5.374'. [ 68.397764][ T30] audit: type=1400 audit(1756077915.708:1303): avc: denied { ioctl } for pid=1913 comm="syz.5.374" path="/25/bus/cpu.stat" dev="loop5" ino=17 ioctlcmd=0x583b scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 68.427883][ T1914] EXT4-fs error (device loop5): ext4_lookup:1858: inode #15: comm syz.5.374: iget: bad extra_isize 46 (inode size 256) [ 68.557289][ T1931] 9pnet: Insufficient options for proto=fd [ 68.579335][ T1933] bridge5: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 68.618866][ T1936] netlink: 4 bytes leftover after parsing attributes in process `syz.1.379'. [ 68.628730][ T1936] device veth1_macvtap left promiscuous mode [ 68.743023][ T30] audit: type=1400 audit(1756077916.078:1304): avc: denied { create } for pid=1941 comm="syz.1.381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 68.786112][ T30] audit: type=1400 audit(1756077916.118:1305): avc: denied { getopt } for pid=1941 comm="syz.1.381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 68.818426][ T30] audit: type=1400 audit(1756077916.118:1306): avc: denied { write } for pid=1941 comm="syz.1.381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 68.861544][ T30] audit: type=1326 audit(1756077916.188:1307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1946 comm="syz.3.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29f5026be9 code=0x7ffc0000 [ 68.885583][ T30] audit: type=1326 audit(1756077916.188:1308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1946 comm="syz.3.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f29f5026be9 code=0x7ffc0000 [ 68.909757][ T30] audit: type=1326 audit(1756077916.188:1309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1946 comm="syz.3.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f29f5026c23 code=0x7ffc0000 [ 68.981082][ T30] audit: type=1326 audit(1756077916.308:1310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1946 comm="syz.3.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f29f502569f code=0x7ffc0000 [ 69.080892][ T1949] loop3: detected capacity change from 0 to 40427 [ 69.102967][ T1949] F2FS-fs (loop3): invalid crc value [ 69.126563][ T1949] F2FS-fs (loop3): Found nat_bits in checkpoint [ 69.197372][ T1949] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 69.266956][ T283] attempt to access beyond end of device [ 69.266956][ T283] loop3: rw=2049, want=45104, limit=40427 [ 69.290635][ T1965] netlink: 12 bytes leftover after parsing attributes in process `syz.2.387'. [ 69.661201][ T1980] loop5: detected capacity change from 0 to 128 [ 69.693706][ T1980] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 69.772900][ T1984] Zero length message leads to an empty skb [ 69.810741][ T1983] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 70.090843][ T1996] bridge: RTM_NEWNEIGH with invalid ether address [ 70.342552][ T289] rtl8150 3-1:1.0: couldn't reset the device [ 70.349394][ T289] rtl8150: probe of 3-1:1.0 failed with error -5 [ 70.379089][ T289] usb 3-1: USB disconnect, device number 13 [ 70.685193][ T2016] xt_l2tp: missing protocol rule (udp|l2tpip) [ 70.705838][ T2018] bridge5: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 70.819367][ T2028] loop3: detected capacity change from 0 to 256 [ 70.912575][ T743] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 71.182465][ T743] usb 6-1: device descriptor read/64, error -71 [ 71.457937][ T2053] overlayfs: unrecognized mount option "verity=on" or missing value [ 72.149050][ T2058] bridge6: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 72.228201][ T2064] virtiofs: Unknown parameter 'always' [ 72.284400][ T2071] loop3: detected capacity change from 0 to 512 [ 72.311865][ T2071] EXT4-fs (loop3): Mount option "noacl" will be removed by 3.5 [ 72.311865][ T2071] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 72.311865][ T2071] [ 72.337773][ T2071] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 72.347905][ T2071] EXT4-fs (loop3): 1 truncate cleaned up [ 72.355151][ T2071] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota=,min_batch_time=0x0000000000000001,noload,nombcache,usrjquota="init_itable=0x0000000000000601,noacl,data_err=abort,,errors=continue. Quota mode: writeback. [ 72.402800][ T743] usb 6-1: device descriptor read/64, error -71 [ 72.504598][ T2078] device wg2 entered promiscuous mode [ 72.585622][ T363] hid-generic 0006:0004:0009.0006: unknown main item tag 0x0 [ 72.593085][ T363] hid-generic 0006:0004:0009.0006: unknown main item tag 0x0 [ 72.600496][ T363] hid-generic 0006:0004:0009.0006: unknown main item tag 0x0 [ 72.608154][ T363] hid-generic 0006:0004:0009.0006: unknown main item tag 0x0 [ 72.615602][ T363] hid-generic 0006:0004:0009.0006: unknown main item tag 0x0 [ 72.623312][ T363] hid-generic 0006:0004:0009.0006: unknown main item tag 0x0 [ 72.630720][ T363] hid-generic 0006:0004:0009.0006: item fetching failed at offset 8/17 [ 72.640445][ T363] hid-generic: probe of 0006:0004:0009.0006 failed with error -22 [ 72.672499][ T743] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 72.783833][ T30] kauditd_printk_skb: 340 callbacks suppressed [ 72.783850][ T30] audit: type=1326 audit(1756077920.118:1651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2088 comm="syz.3.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f29f501dba7 code=0x7ffc0000 [ 72.814430][ T30] audit: type=1326 audit(1756077920.118:1652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2088 comm="syz.3.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f29f4fc2de9 code=0x7ffc0000 [ 72.838062][ T30] audit: type=1326 audit(1756077920.118:1653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2088 comm="syz.3.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f29f5026be9 code=0x7ffc0000 [ 72.861284][ T30] audit: type=1326 audit(1756077920.128:1654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2088 comm="syz.3.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f29f501dba7 code=0x7ffc0000 [ 72.884823][ T30] audit: type=1326 audit(1756077920.128:1655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2088 comm="syz.3.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f29f4fc2de9 code=0x7ffc0000 [ 72.908825][ T30] audit: type=1326 audit(1756077920.128:1656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2088 comm="syz.3.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f29f5026be9 code=0x7ffc0000 [ 72.932471][ T30] audit: type=1326 audit(1756077920.138:1657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2088 comm="syz.3.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f29f501dba7 code=0x7ffc0000 [ 72.956354][ T289] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 72.964049][ T30] audit: type=1326 audit(1756077920.138:1658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2088 comm="syz.3.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f29f4fc2de9 code=0x7ffc0000 [ 72.972582][ T743] usb 6-1: device descriptor read/64, error -71 [ 72.988510][ T30] audit: type=1326 audit(1756077920.138:1659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2088 comm="syz.3.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f29f5026be9 code=0x7ffc0000 [ 73.016833][ T30] audit: type=1326 audit(1756077920.138:1660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2088 comm="syz.3.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f29f501dba7 code=0x7ffc0000 [ 73.392441][ T743] usb 6-1: device descriptor read/64, error -71 [ 73.416774][ T2133] loop7: detected capacity change from 0 to 16384 [ 73.482862][ T289] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 73.492003][ T289] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.500091][ T289] usb 3-1: Product: syz [ 73.504462][ T289] usb 3-1: Manufacturer: syz [ 73.509108][ T289] usb 3-1: SerialNumber: syz [ 73.513867][ T743] usb usb6-port1: attempt power cycle [ 73.525277][ T2133] blk_update_request: I/O error, dev loop7, sector 10752 op 0x0:(READ) flags 0x80700 phys_seg 5 prio class 0 [ 73.595214][ T2154] loop5: detected capacity change from 0 to 512 [ 73.605357][ T1551] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.617001][ T1551] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.629932][ T2154] EXT4-fs (loop5): Journaled quota options ignored when QUOTA feature is enabled [ 73.647365][ T1551] IPv6: ADDRCONF(NETDEV_CHANGE): ÿÿÿÿÿÿ: link becomes ready [ 73.656596][ T2142] mmap: syz.0.437 (2142) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 73.670026][ T1551] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.687072][ T2154] EXT4-fs error (device loop5): ext4_do_update_inode:5235: inode #16: comm syz.5.441: corrupted inode contents [ 73.704677][ T2154] EXT4-fs error (device loop5): ext4_dirty_inode:6071: inode #16: comm syz.5.441: mark_inode_dirty error [ 73.714732][ T2156] loop3: detected capacity change from 0 to 1024 [ 73.718851][ T2154] EXT4-fs error (device loop5): ext4_do_update_inode:5235: inode #16: comm syz.5.441: corrupted inode contents [ 73.736351][ T2154] EXT4-fs error (device loop5): __ext4_ext_dirty:183: inode #16: comm syz.5.441: mark_inode_dirty error [ 73.750129][ T2154] EXT4-fs error (device loop5): ext4_do_update_inode:5235: inode #16: comm syz.5.441: corrupted inode contents [ 73.763903][ T2154] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem [ 73.772979][ T2154] EXT4-fs error (device loop5): ext4_do_update_inode:5235: inode #16: comm syz.5.441: corrupted inode contents [ 73.786513][ T2154] EXT4-fs error (device loop5): ext4_truncate:4304: inode #16: comm syz.5.441: mark_inode_dirty error [ 73.799011][ T2154] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem [ 73.810097][ T2156] EXT4-fs (loop3): mounted filesystem without journal. Opts: user_xattr,nodioread_nolock,,errors=continue. Quota mode: none. [ 73.818370][ T2154] EXT4-fs (loop5): 1 truncate cleaned up [ 73.828835][ T2154] EXT4-fs (loop5): mounted filesystem without journal. Opts: discard,dioread_lock,noauto_da_alloc,resgid=0x0000000000000000,grpjquota=./file2,,errors=continue. Quota mode: writeback. [ 74.435125][ T743] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 75.593683][ T289] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 75.600329][ T289] cdc_ncm 3-1:1.0: setting tx_max = 84 [ 75.634039][ T2193] syz.0.450[2193] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 75.634115][ T2193] syz.0.450[2193] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 75.635720][ T2194] syz.0.450[2194] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 75.658259][ T743] usb 6-1: Using ep0 maxpacket: 8 [ 75.675653][ T2194] syz.0.450[2194] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 75.792501][ T743] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 75.816859][ T289] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM, 42:42:42:42:42:42 [ 75.829831][ T289] usb 3-1: USB disconnect, device number 14 [ 75.838204][ T743] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 75.848560][ T289] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM [ 75.859209][ T743] usb 6-1: New USB device found, idVendor=0810, idProduct=0001, bcdDevice= 0.00 [ 75.868947][ T743] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.881038][ T743] usb 6-1: config 0 descriptor?? [ 75.888825][ T1122] ================================================================== [ 75.897101][ T1122] BUG: KASAN: use-after-free in __list_del_entry_valid+0xa6/0x120 [ 75.905018][ T1122] Read of size 8 at addr ffff888113834c70 by task kworker/0:7/1122 [ 75.913011][ T1122] [ 75.915357][ T1122] CPU: 0 PID: 1122 Comm: kworker/0:7 Not tainted 5.15.189-syzkaller-android13-5.15.189_r00 #0 [ 75.925702][ T1122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 75.935944][ T1122] Workqueue: events_long br_fdb_cleanup [ 75.942042][ T1122] Call Trace: [ 75.945433][ T1122] [ 75.948382][ T1122] __dump_stack+0x21/0x30 [ 75.952818][ T1122] dump_stack_lvl+0xee/0x150 [ 75.957499][ T1122] ? show_regs_print_info+0x20/0x20 [ 75.962724][ T1122] ? load_image+0x3a0/0x3a0 [ 75.967244][ T1122] print_address_description+0x7f/0x2c0 [ 75.972801][ T1122] ? __list_del_entry_valid+0xa6/0x120 [ 75.978271][ T1122] kasan_report+0xf1/0x140 [ 75.982703][ T1122] ? __list_del_entry_valid+0xa6/0x120 [ 75.988170][ T1122] __asan_report_load8_noabort+0x14/0x20 [ 75.993822][ T1122] __list_del_entry_valid+0xa6/0x120 [ 75.999117][ T1122] process_one_work+0x453/0xba0 [ 76.003984][ T1122] worker_thread+0xa59/0x1200 [ 76.008765][ T1122] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 76.014499][ T1122] kthread+0x411/0x500 [ 76.018577][ T1122] ? worker_clr_flags+0x190/0x190 [ 76.023621][ T1122] ? kthread_blkcg+0xd0/0xd0 [ 76.028229][ T1122] ret_from_fork+0x1f/0x30 [ 76.032949][ T1122] [ 76.035987][ T1122] [ 76.038316][ T1122] Allocated by task 289: [ 76.042559][ T1122] __kasan_kmalloc+0xda/0x110 [ 76.047278][ T1122] __kmalloc+0x13d/0x2c0 [ 76.051634][ T1122] kvmalloc_node+0x206/0x300 [ 76.056229][ T1122] alloc_netdev_mqs+0x8d/0xc90 [ 76.060996][ T1122] alloc_etherdev_mqs+0x34/0x40 [ 76.065904][ T1122] usbnet_probe+0x219/0x2860 [ 76.070504][ T1122] usb_probe_interface+0x5ff/0xae0 [ 76.075835][ T1122] really_probe+0x285/0x970 [ 76.080349][ T1122] __driver_probe_device+0x198/0x280 [ 76.085636][ T1122] driver_probe_device+0x54/0x3e0 [ 76.090669][ T1122] __device_attach_driver+0x2a6/0x460 [ 76.096055][ T1122] bus_for_each_drv+0x175/0x200 [ 76.100897][ T1122] __device_attach+0x2a2/0x400 [ 76.105654][ T1122] device_initial_probe+0x1a/0x20 [ 76.110673][ T1122] bus_probe_device+0xc0/0x1e0 [ 76.115421][ T1122] device_add+0xb31/0xed0 [ 76.119762][ T1122] usb_set_configuration+0x19c2/0x1f10 [ 76.125233][ T1122] usb_generic_driver_probe+0x91/0x150 [ 76.130778][ T1122] usb_probe_device+0x148/0x260 [ 76.135614][ T1122] really_probe+0x285/0x970 [ 76.140094][ T1122] __driver_probe_device+0x198/0x280 [ 76.145369][ T1122] driver_probe_device+0x54/0x3e0 [ 76.150364][ T1122] __device_attach_driver+0x2a6/0x460 [ 76.155711][ T1122] bus_for_each_drv+0x175/0x200 [ 76.160554][ T1122] __device_attach+0x2a2/0x400 [ 76.165385][ T1122] device_initial_probe+0x1a/0x20 [ 76.170487][ T1122] bus_probe_device+0xc0/0x1e0 [ 76.175611][ T1122] device_add+0xb31/0xed0 [ 76.179926][ T1122] usb_new_device+0xd06/0x1620 [ 76.184667][ T1122] hub_event+0x27d8/0x42c0 [ 76.189054][ T1122] process_one_work+0x6be/0xba0 [ 76.193873][ T1122] worker_thread+0xa59/0x1200 [ 76.198525][ T1122] kthread+0x411/0x500 [ 76.202572][ T1122] ret_from_fork+0x1f/0x30 [ 76.206959][ T1122] [ 76.209258][ T1122] Freed by task 289: [ 76.213206][ T1122] kasan_set_track+0x4a/0x70 [ 76.217768][ T1122] kasan_set_free_info+0x23/0x40 [ 76.222674][ T1122] ____kasan_slab_free+0x125/0x160 [ 76.227845][ T1122] __kasan_slab_free+0x11/0x20 [ 76.232586][ T1122] slab_free_freelist_hook+0xc2/0x190 [ 76.237928][ T1122] kfree+0xc4/0x270 [ 76.241790][ T1122] kvfree+0x35/0x40 [ 76.245575][ T1122] netdev_freemem+0x3f/0x60 [ 76.250057][ T1122] netdev_release+0x7f/0xb0 [ 76.254529][ T1122] device_release+0x96/0x1c0 [ 76.259088][ T1122] kobject_put+0x18a/0x270 [ 76.263474][ T1122] put_device+0x1f/0x30 [ 76.267691][ T1122] free_netdev+0x34b/0x450 [ 76.272083][ T1122] usbnet_disconnect+0x24b/0x3a0 [ 76.277003][ T1122] usb_unbind_interface+0x212/0x8c0 [ 76.282168][ T1122] device_release_driver_internal+0x4c1/0x760 [ 76.288221][ T1122] device_release_driver+0x19/0x20 [ 76.293314][ T1122] bus_remove_device+0x2dd/0x340 [ 76.298340][ T1122] device_del+0x696/0xe90 [ 76.302650][ T1122] usb_disable_device+0x3a8/0x750 [ 76.307870][ T1122] usb_disconnect+0x31e/0x850 [ 76.312540][ T1122] hub_event+0x190c/0x42c0 [ 76.317022][ T1122] process_one_work+0x6be/0xba0 [ 76.321850][ T1122] worker_thread+0xd7b/0x1200 [ 76.326501][ T1122] kthread+0x411/0x500 [ 76.330549][ T1122] ret_from_fork+0x1f/0x30 [ 76.334934][ T1122] [ 76.337317][ T1122] Last potentially related work creation: [ 76.343012][ T1122] kasan_save_stack+0x3a/0x60 [ 76.347655][ T1122] __kasan_record_aux_stack+0xd2/0x100 [ 76.353089][ T1122] kasan_record_aux_stack_noalloc+0xb/0x10 [ 76.358864][ T1122] insert_work+0x51/0x310 [ 76.363170][ T1122] __queue_work+0x8e5/0xc60 [ 76.367771][ T1122] queue_work_on+0xd2/0x140 [ 76.372281][ T1122] usbnet_link_change+0x176/0x1a0 [ 76.377371][ T1122] usbnet_probe+0x1dfd/0x2860 [ 76.382039][ T1122] usb_probe_interface+0x5ff/0xae0 [ 76.387248][ T1122] really_probe+0x285/0x970 [ 76.391887][ T1122] __driver_probe_device+0x198/0x280 [ 76.397164][ T1122] driver_probe_device+0x54/0x3e0 [ 76.402280][ T1122] __device_attach_driver+0x2a6/0x460 [ 76.407737][ T1122] bus_for_each_drv+0x175/0x200 [ 76.412650][ T1122] __device_attach+0x2a2/0x400 [ 76.417487][ T1122] device_initial_probe+0x1a/0x20 [ 76.422480][ T1122] bus_probe_device+0xc0/0x1e0 [ 76.427236][ T1122] device_add+0xb31/0xed0 [ 76.431543][ T1122] usb_set_configuration+0x19c2/0x1f10 [ 76.436980][ T1122] usb_generic_driver_probe+0x91/0x150 [ 76.442434][ T1122] usb_probe_device+0x148/0x260 [ 76.447259][ T1122] really_probe+0x285/0x970 [ 76.451824][ T1122] __driver_probe_device+0x198/0x280 [ 76.457175][ T1122] driver_probe_device+0x54/0x3e0 [ 76.462290][ T1122] __device_attach_driver+0x2a6/0x460 [ 76.467746][ T1122] bus_for_each_drv+0x175/0x200 [ 76.472684][ T1122] __device_attach+0x2a2/0x400 [ 76.477435][ T1122] device_initial_probe+0x1a/0x20 [ 76.482440][ T1122] bus_probe_device+0xc0/0x1e0 [ 76.487189][ T1122] device_add+0xb31/0xed0 [ 76.491505][ T1122] usb_new_device+0xd06/0x1620 [ 76.496254][ T1122] hub_event+0x27d8/0x42c0 [ 76.500646][ T1122] process_one_work+0x6be/0xba0 [ 76.505492][ T1122] worker_thread+0xa59/0x1200 [ 76.510141][ T1122] kthread+0x411/0x500 [ 76.514180][ T1122] ret_from_fork+0x1f/0x30 [ 76.518566][ T1122] [ 76.520935][ T1122] The buggy address belongs to the object at ffff888113834000 [ 76.520935][ T1122] which belongs to the cache kmalloc-4k of size 4096 [ 76.534970][ T1122] The buggy address is located 3184 bytes inside of [ 76.534970][ T1122] 4096-byte region [ffff888113834000, ffff888113835000) [ 76.549025][ T1122] The buggy address belongs to the page: [ 76.554633][ T1122] page:ffffea00044e0c00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x113830 [ 76.565110][ T1122] head:ffffea00044e0c00 order:3 compound_mapcount:0 compound_pincount:0 [ 76.573614][ T1122] flags: 0x4000000000010200(slab|head|zone=1) [ 76.579672][ T1122] raw: 4000000000010200 dead000000000100 dead000000000122 ffff888100043380 [ 76.588402][ T1122] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000 [ 76.597070][ T1122] page dumped because: kasan: bad access detected [ 76.603655][ T1122] page_owner tracks the page as allocated [ 76.609540][ T1122] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 101, ts 60397674853, free_ts 42879808160 [ 76.630349][ T1122] post_alloc_hook+0x192/0x1b0 [ 76.635097][ T1122] prep_new_page+0x1c/0x110 [ 76.639583][ T1122] get_page_from_freelist+0x2cc5/0x2d50 [ 76.645192][ T1122] __alloc_pages+0x18f/0x440 [ 76.649752][ T1122] new_slab+0xa1/0x4d0 [ 76.653897][ T1122] ___slab_alloc+0x381/0x810 [ 76.658458][ T1122] __slab_alloc+0x49/0x90 [ 76.662766][ T1122] __kmalloc+0x16a/0x2c0 [ 76.666976][ T1122] kvmalloc_node+0x206/0x300 [ 76.671555][ T1122] seq_read_iter+0x1fc/0xd30 [ 76.676126][ T1122] kernfs_fop_read_iter+0x147/0x470 [ 76.681305][ T1122] vfs_read+0x68b/0xbe0 [ 76.685435][ T1122] ksys_read+0x140/0x240 [ 76.689646][ T1122] __x64_sys_read+0x7b/0x90 [ 76.694122][ T1122] x64_sys_call+0x96d/0x9a0 [ 76.698623][ T1122] do_syscall_64+0x4c/0xa0 [ 76.703113][ T1122] page last free stack trace: [ 76.707776][ T1122] free_unref_page_prepare+0x542/0x550 [ 76.713206][ T1122] free_unref_page+0xa2/0x550 [ 76.717861][ T1122] __free_pages+0x6c/0x100 [ 76.722258][ T1122] __free_slab+0xe8/0x1e0 [ 76.726565][ T1122] __unfreeze_partials+0x160/0x190 [ 76.731730][ T1122] put_cpu_partial+0xc6/0x120 [ 76.736377][ T1122] __slab_free+0x1d4/0x290 [ 76.740761][ T1122] ___cache_free+0x104/0x120 [ 76.745327][ T1122] qlink_free+0x4d/0x90 [ 76.749461][ T1122] qlist_free_all+0x5f/0xb0 [ 76.753957][ T1122] kasan_quarantine_reduce+0x14a/0x170 [ 76.759562][ T1122] __kasan_slab_alloc+0x2f/0xf0 [ 76.764394][ T1122] slab_post_alloc_hook+0x4f/0x2b0 [ 76.769474][ T1122] kmem_cache_alloc+0xf7/0x260 [ 76.774336][ T1122] __alloc_skb+0xe0/0x740 [ 76.778635][ T1122] __ip_append_data+0x1ff7/0x3190 [ 76.783901][ T1122] [ 76.786560][ T1122] Memory state around the buggy address: [ 76.792195][ T1122] ffff888113834b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 76.800792][ T1122] ffff888113834b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 76.809190][ T1122] >ffff888113834c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 76.817326][ T1122] ^ [ 76.825017][ T1122] ffff888113834c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 76.833217][ T1122] ffff888113834d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 76.841251][ T1122] ================================================================== [ 76.849303][ T1122] Disabling lock debugging due to kernel taint [ 76.912479][ T743] usb 6-1: can't set config #0, error -71 [ 76.932017][ T743] usb 6-1: USB disconnect, device number 6