last executing test programs: 16.267581635s ago: executing program 2 (id=278): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000008000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB="040000008000000000000000006d05d70000050800b3fdbf9dd051688c4f4fdc7a9400001d00000000"], 0x50) ustat(0x8000000000000001, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="340000001000000000000000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="000000000000000014001280090001007866726d0000000004000280232a1a535a6b7e7dcbda0247bc7a8d841edb9e9d6b9985ae07bf5f95773feffeee0308f72e346c4b0dacf120088f23a4ed9b1991c0b56d45265e21f98a47ddba1f9c627c4834e671aced0f5a061943755d0c87d79023e6b4843ebea8167a9470db12a39509d2cfa15ef92bae32ed2a38c3b3471c8281b30abf85afb4c80435d64f111788"], 0x34}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="03", 0x1}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) recvmmsg(r4, &(0x7f0000001140), 0x700, 0x2, 0x0) socket$inet(0x2, 0x2, 0x1) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x2d, 0x0) 15.558447047s ago: executing program 4 (id=280): bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180800000000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) close(r1) sched_setscheduler(0x0, 0x6, &(0x7f0000000080)=0x7) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x107842, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000280)=0xf) ioctl$TCFLSH(r5, 0x400455c8, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x1c}}, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r6, 0x800448d2, &(0x7f0000000100)) 15.304189286s ago: executing program 2 (id=283): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000380)='./file0\x00', 0x804, &(0x7f0000000640)=ANY=[@ANYBLOB='shortname=lower,shortname=lower,iocharset=utf8,rodir,utf8=0,rodir,rodir,shortname=win95.check=strict,codepage=775,fmask=00000000000000000114671,utf8=0,shortname=win95,iocharset=macgreek,nonumtail=0,uni_xlate=1,\x00'], 0x1, 0x276, &(0x7f00000003c0)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ptrace(0x10, 0x1) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000100)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x80000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x3, 0x0, 0x0, 0x2000, 0x40000, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20000000, 0x0, 0x2, 0x0, 0x0, 0xfffffffc]}, 0x45c) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) readv(r1, &(0x7f0000000600)=[{&(0x7f0000000640)=""/89, 0x59}], 0x1) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_usb_connect$uac1(0x3, 0xc1, &(0x7f00000007c0)=ANY=[], 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x14}}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000380), 0x12) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffeca50000006d000000850000000f"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000380)='kmem_cache_free\x00', r4}, 0x10) 14.329027058s ago: executing program 1 (id=286): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x26) getrlimit(0x3, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000010018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace$peeksig(0x4209, 0x0, 0x0, 0x0) execve(0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(r1, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) r7 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10) sendmmsg$inet(r7, &(0x7f0000000440)=[{{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000280)="a9050000000096e25eb7d4f9423bcc7464f42fd2d4599a0e8202adbf32abdbb05a000000", 0x24}], 0x1}}], 0x1, 0x0) 13.436779921s ago: executing program 1 (id=288): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000002c7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) 13.374184899s ago: executing program 1 (id=289): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) getpgrp(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) r6 = socket(0x1e, 0x1, 0x0) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f00000005c0)={0x4}) epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r6, &(0x7f0000000280)={0x4}) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000f40)=@raw={'raw\x00', 0xc08, 0x3, 0x208, 0x0, 0x5002004a, 0xb, 0x0, 0xea13, 0x3c8, 0x3c8, 0x3c8, 0x3c8, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'erspan0\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0x70, 0xb0}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "87ed6936301747433f17555acc9b439b395c6800f970b94a3ecac3ebd4c5"}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, 0x0, &(0x7f0000000080)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r8 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f00000003c0)) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0xa00c8, &(0x7f0000000480)=ANY=[@ANYRESHEX=r1, @ANYRES16=r3, @ANYRES16=r0, @ANYRESDEC, @ANYRESOCT=r0]) read$FUSE(r8, 0x0, 0x0) write$FUSE_INIT(r8, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r8, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) io_setup(0x1, &(0x7f0000000000)) 11.985163158s ago: executing program 1 (id=292): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) connect$unix(0xffffffffffffffff, &(0x7f0000000200)=@file={0x0, './file1/file0\x00'}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f0000000d80)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/4, 0x4}, {0x0}], 0x2, &(0x7f0000000700)=""/253, 0xfd}, 0x2}, {{&(0x7f0000000800)=@nfc, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000880)=""/213, 0xd5}, {&(0x7f0000000980)=""/188, 0xbc}, {&(0x7f0000000a40)=""/62, 0x3e}, {&(0x7f0000000a80)=""/228, 0xe4}, {&(0x7f0000000b80)=""/215, 0xd7}, {&(0x7f0000000c80)=""/53, 0x35}, {&(0x7f0000000cc0)=""/64, 0x40}], 0x7}, 0x8}], 0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000300), 0x8, 0x0) read$FUSE(r1, &(0x7f0000001a00)={0x2020}, 0x2020) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x1]}, 0x8, 0x0) unshare(0x20000400) signalfd4(r2, &(0x7f0000000140), 0x8, 0x0) 11.157486304s ago: executing program 1 (id=295): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000380)='./file0\x00', 0x804, &(0x7f0000000640)=ANY=[@ANYBLOB='shortname=lower,shortname=lower,iocharset=utf8,rodir,utf8=0,rodir,rodir,shortname=win95.check=strict,codepage=775,fmask=00000000000000000114671,utf8=0,shortname=win95,iocharset=macgreek,nonumtail=0,uni_xlate=1,\x00'], 0x1, 0x276, &(0x7f00000003c0)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getpid() ptrace(0x10, 0x1) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000100)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x80000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x3, 0x0, 0x0, 0x2000, 0x40000, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20000000, 0x0, 0x2, 0x0, 0x0, 0xfffffffc]}, 0x45c) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) readv(r1, &(0x7f0000000600)=[{&(0x7f0000000640)=""/89, 0x59}], 0x1) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_usb_connect$uac1(0x3, 0xc1, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010002000000406b1d01014000010203010902af0003010410080904000000010100000a2401ff7f0b0201020904010000010200000904010101010200000924020100030402ffff00001a9102ef43ab637210240202b20008000be73241f58bb5f0090501094000090966072501c30809000904020000010200000904020101010200000c24020295070800042e0a920d240000040007000a4fac79a6072401090003000724014d04ff14090582090800be40000725018202250000000000002732dfff1ada9b1d66e355cac4410580"], 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x14}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000008000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000240)="0f0d51f40f01d10fc75800f30fc73600102e0f71e100b800008ec0640f017400aa66b9e408000066b81f6269e766ba000000000f309c0c0cb8d09bbc8966efbafc0cedba4300ba210066ed3626f00fc70d", 0x51}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000380), 0x12) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ff"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000380)='kmem_cache_free\x00', r5}, 0x10) 4.135227004s ago: executing program 3 (id=316): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0004000000000000002de21b1b605cca004f66"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800"/16], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x10, 0x3, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000080)={0x8, 0x8c}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r4, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r5}, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/23], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x17, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r8}, 0x10) sendto$inet6(0xffffffffffffffff, &(0x7f0000000200)="7800000018001feeb8f9f50dffff00000204be04fe05fe02061123094300120015000a00fac8388827a685a168d0bf46d323456536f7578d27001000c291214549975ade4a460c89b6ec0cff3959547f509058ba86c902000000004a3200040016000b0014000000000000000018d1ddf66ed538f2", 0x75, 0x0, 0x0, 0x0) 3.723230311s ago: executing program 0 (id=317): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000004000)=0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r0}, 0x10) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[], 0x1c}}, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x800448d2, &(0x7f0000000100)) 3.721816991s ago: executing program 0 (id=318): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x1808014, &(0x7f0000000600)=ANY=[@ANYBLOB="66617374626f6f742c71756f7461002018bbdecde39739fcd1df176dde746ec834120600000000003b048000000000000072462abc30ef5b65c70f73ecea54b5e5bec5aca9836c319f653557e79a002208ceae6dda659bd5ba0f4ce5c2080002223dc60000000000000044cd0a1e36868736000000f6a55493b4b81d5b9fa9b40fe4d76afc3a989c6d60044e89eb96e44d01a1174e3797ffa86870b82939f41ffa0f3d726f085663c29cbdc4c766a7eb77cc369c71e57fafab52f325ca91e684160191acf5ae7469c82ab4145b595b987d75912afdcc1c061835294cc0c618aba204f8adaa20c80108d356cd887ba217c8f569e6d0caf75052a77056b06e7068c40f807d9e539f8f5b64a8ee0725aa8d00000000007cb6ac0d90ea79b8027cf75964dd86c2ed2b5e75779677a28c76b848dd03dab190b5f02ec52830f3ff01eaae1c3df076000000000000000000000000000083a48a6b926c668b9ba42490175018ea3619f9d80a0b894e212178e1a19909d764666264fa29e2c055fd7f8e67c2acfb75f0a8d41692f4542a575ee42ed94a0014fba44985cca9df12fe93bfaccf0122a6e7e593613ac011170182f99766e86fb125cc6799c43aa4dc708dc4a00a6decad26f0378072a571da000000aec3dfbae348b5b494f6fddb9f56142a47a40ef81690a7eca421bd0ad198afa58ce69d61c29deaa93c0efea0f1415e90fd0400bad5f796374bb196e60e537b8ffca80a5ec3c5c063aab2c87a7824c4fbfab7264185e1b2e59012acbf3732abe75b848de8ec4aaba2e3c8cd14dd9bf9499952815b9fb34057a585a9c18a11f3d496825b3fcb0c8aa89e079fd78997da864b302139b2b10597100846b55f7d0b050b7b0ef7e9c897c50b53404acdd701425323201b33465fddec69c37cb13fd441a830af5ea73f4ac82d7926eb0db1141003d148473077a76c3bee7e37dc799abb47bd67cde7958c50fb2d15c9cc196e4bff1d00"/716], 0x5, 0x558b, &(0x7f00000079c0)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000380), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@metacopy_on}], [], 0x2c}) 3.29998813s ago: executing program 4 (id=311): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x7, 0x0, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000080)=0x3) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000680)=@file={0x0, './file0\x00'}, 0x9c) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000010000", @ANYRES32=0x0, @ANYBLOB='\x00'/10], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$packet(0x11, 0x2, 0x300) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x20, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000380)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5, 0x0, 0xd}, 0x18) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00010000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca7f8fbc9cdfa146ec56175037958e271f60d25b7937f02c8695e5a1b2cdf41dc10d1e8bf076d83923dd29c0301000000010000003d5d78c07fa1f7e4d5b318e2ec0e0700897a74a0091ff110026e6d2ef831ab7ea0c34f17e3ad6e70af07da5ceb01b7551ef3bb622003b538dfd8e012e79578e51bc53099e90fbdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e060e3670ef0e789f93781965f1328d6704902cbe7bc0476619f28d99cde7a6b73340cc2160a1fe3c184b751c51160fbce841dfebd31a08b32808b80200000000009dd27080e71113610e10d8fb9c2aec61ce63a3462fd50117b89a9ab759b4eeb8cb000067d42b4e54861d0227dbfd2ed8576a3f7f3deadd7130856f756436303767d2e24f29e5dad9796edb697a6ea0180aabc18cae2ed4b4390af9a9ceafd07ed0030000002cab154ad029a119ca3c972780870014605c83d7d11c3c975d5aec84222fff0d7216fdb0d3a0ec4bfae563858dc06e7c337642d3e5a815212f5e16c1b30c3a2a71bc85018e5ff2c910496f18afc9ffc2cc788bee1b47683db01a46939868d75211bbae0e7313bff5d4c391ddece00fc772dd6b4d4d0a917b239fe12280fc92c88c5b8dcdcc22ee1747790a8992533ac2a9f5a699593f084419cae0b4183fb01c73f99857399537f5cc2acb72c7eae993fc9eb22d130665b6341da114f08cd0509d380578673fffffff7f23877a6b24db0e067345560942fa629fbef2461c96a08707671215c302fae29187d4f5c06a960fd37c10223fdae7ed04935c3c90d3add8eebc8619d73415e6adcda2130f5011e42e50adab988dd8e12baf5cc9398c88607a08009c2977aab37d9a44cfc1c7b4000000000000fa47742f6c5b9c4b11e7d7262a1457c39495c826b956ba859adfe38f77b91bd7d5ca1664fe2f3ced8468911806e8916dc15e21644db60c2499d5d16d7d915836ab26c169482008ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc874b2f663ddeef0005b3d96c7aae73835d5a3cda9e90d76c1993e0799d4894ee7f8249dc1e3428d2129369ee1b85afa1a5b6154eb2eea0d0df414b315f65112412392191fa83ee830548f11e1038debd64cbe359454a3f2239cfe35f81b7ade8a5b859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b20428d6474a0a91ee90b8de802c6b538622e6bbcb80f87b415263c401e64ed69a2f75409000000000000001d695c4559b82cabac3cccadc1e1c19af4e03020abf5ff0433d660f20898d2a045d009a0ffb20a77c9af2b80c05184a66d30bbea2ca45a4d6d6d1e6e79aef42355a500587b603306a5af8d867d80a07f10d82eafb03062e95196d5e3ffea0000000000000be959096ea948cfa8e7194123e918914a71ad5a8521fb9553bc60f7d9719b55b3abb6bba3d113a680a8d46fe074c83fbe378a3889e8145b2eaceab05ef932c6e4f8ef0ed0d818a7b76d839cf3c63ebb4380b168c38fa32e49563cfee3a7f0fc18bfa32c418cef875fb49e2989177a1bcd1e30280bc586e79a5dd80701018e7d6e97b3ce267dd4e27b6ef206660090bb2164474cef378f97ca33fc03000000000000001547053453d0c9aec91a24079b21d52fb5516bf0c28ef37aa76442f6083dc99cd61afaf6be45d7b00d3639f2f10ac2d5c759c3e5468f0000000011d415b6b085fb73a2c7c3852e0e658ffeb4e863428a792bee94f6cd895424360e0464f9d7ea425f2fa6aac029d15af607ad83532ff181c985f54b39370c06e63055b4d6a36fa98a44e379d28307c9912fb097601f3f88a2ca6fd1f9320cfe7fc8e9f7f15f02e177ce23f43a154b42e26f037e8a01377cbd3f509e6e540c9ba9c2a589c95d8ad67a65e9a44c576dc24452eaa9d819e2b04bdd1c000000070000000000000000000000005333c6199c12dcd926891927a7267c47cf897853d160100b39b613faefe16bed1fc105dddd77ab929b837d4442d13d5a29179a00837918dd7854aa17eb9fbdc2bdc0e98ae2c3f23a6131e2879f04ff01000030b92dd493be66c2242f8184733b80ba28e8ffffff7f00000000bb2f89049c5f6d63d56995747639964217aacfe548bc869098aa8e07e51dbc9e2d4db3c5f79fd355222ec2a00cf7f2ccd6dd6d2dc2a815d8314221a5472f1318a9dfbec5a759579caf3262129b14e99040b5d91398e17df85c25ccae973eecc7d187168d5c9cd848d566cc17587641ed01889c927da38d83314480b15e23138c5b877a72bd4cf74a299df4fbfc8e6ea96939f15d254d9033c5d371c61f550e9d86aabda45706bda78ab60200000000000000000000000000000000000000706f78f0a2ea9667fb5b951808545a46830970c2dfae01adbda7d29bf1f7abdaf52e0de6f9d7150808ed086642e64ebf98762b34338b80e41b704c3eefaf0bb5ff070000000000000ea15ccc0d7a830b6eb33b6b61675511d693ef5e3c44bbf71cabc5f45c879e7499f8baae2a1a09cf38da73297764fbc0e723e1cc3abb12e3076982ed32c94a2ce3e6f37c47e983da4ca5c96187db5a2a2e1742bc93a65d7187126126b3a80f17dd2f7dbbe82d104ede9ba6925afc2ee6cb94f56f1363cad635abf8f983292c49c0ebf5005154c7b58a3a2a2ea86d2fd92b8661264f781e3fb02d05a28f3f17b64d0258853d45cb5ebde10cd3d82eeed2f1ed925b7cf400304932c5ed0a362b235ce37e1f17700f7d1fecf8be8a2c5d25a9c60657560d05441387ff158a018d19a286c58684a1d2f624c3eb59d509ee89cc2df52881d005b2e5c27563ba54e4153c132d0366aa660000000000000009c1aaec93ec0f925921fb2e9eb202a29bef28224dbabe723de5c584bc398a8792e493048c87f60a51a391e95921218149403558fd13c649f90b0911d57eeb298b590581eba1ce383b539ab80fd15445987b1bb4eb512545e1ab65fef3103ce10b1ee362b51c72f82edf2f502ddf52567775e34a56d1be892f1e62b08950d517fa6fb1b0ef2edf1b67f8644786116b037d4a36fdd30b000063e58c856ec44cbbc2d370553f832af9480215e09aaa3843fe360b1c293a14627f2cfbe278f31d0abc0f5aaa10926dbbfe8a4b131c13a73d4e6d065c2c0fed3ab8442520ce0e0ad7d2d177377ab197ace3ef8b1c24ceb0bdee84bd6e6317633938dd19dc42de7f8f860eca6d9c74525fcd3497526df4c13e3ba5f0d75365a4542ae9440d2fede416d618cdaaf7e038879c5d177b3876fda4121e00000100000000003edd3d43cc64e0d26b46907b42e08d000000000000903350932d3eef7fdada20c19807066e2c72d0d816eb9fa50be213bf6bbb7ccb9f2e8a153e6ced68f192ebed6e86af0f2cec7335fa8039fd6eb025440bc2a34d071f0a0e6774308a74748b8cd994ed368695aa2c5986aa9200a1306ffa5a71ca69e89a6980612b35fc858f37c2c398515a910a35e22ab0573c10b85df4c2972a2fb8b9c080fbb41a753791df727fdeaded2930376eda31312256191c620cce34d1e3bf40a4a207ab1575b399eb8155781bfc7cb5920b49c039935a888d77041894f60fbbcafa487ee96b368e8769da90b44190e569fe8b923c32c288baaca5c5558b5a78bb43e5d9e47a1d5809bb178184b5672d08e29aecf1f572ac1e6cab7e820751e95999b7532603494d37a2bff35a9eec46dfc8a52433f605ebf151c837b4966b5f3628a406175a87e32c5e4268d3000933b580415b162e2946446b8f02554c8a1225217d69d049685dd06aa8528673a9673a723ac414af77f523ad730d00e8700c213f95c87a94f39f506b9e000000000000000000000000000000000000000000000000000090668ac41a1c2a4f7831e6c6a3e9c68ca2c449482bb70a994e71a7f24873848fbb128c820c1de19cc003dfa65a2b296caeb1253802080e08eeb724c4c7b7e052afa19b0f2cd7a13bda4b5a8f3b8fa3ca70bb756a3d529718d5c79d9bdb89e5d33793533211d76d00a45079eff797476106bf76f1fed952a7c9162b88911b5b00c3d26fd2fb4d7b29d1ce025e102d458efd5cca3f3835ce760359eaa01cb13cb28d60e8942fdc02b6824c00dac62f8a2d4c680ae284a82f09d6641921536814b444e4188d9b2e97eb3b108e7876f0f3f3863147ab694218c7cecc075d52d590dddbb57fc6fedf5ec69d7894a7b5c8109f303dab998815c80534b0bd34c49eea63997e56728a8185a8bb6988a7197b87f5548f5edfdfb3efc907fe561b33a6f7c707f7828c6adaf3b2a39929b4b65253e787d65c08aff5e4a9b2267bd8f803ea38f10a6e9c4a49bf23525e08c12d229211fe4d88cf1440f29accfa50f327ac1fb20d7f164100111bd21fca713b2475f1c997f3000000000080c426bcec79c6bc83ce4e6cbb17c01be69db342192d0a716cc24710d23321441f475ec485d642b61c6bd907071dbbe37c0b78f60fd2ad0d13ca62d9d9aafb01c3920b64cb5e023810e2de4327f90c389ce36d90ff9f3cb9d8cd2260d05a8126943a3df17157470595c68ac8df7fea6d42ecb2cdb65b4f2aef0db2b2de949a6d4ec37f2fd693ae44944041a64fe6336aba1c66b1b95d2edbc40364a049616ae962d75eae619548aa86bd5f0bad56e7ad7de2ee5e6f3b42e3a27094b6b5face99456d9af1926b21d37faf7612d9752cf58e6424decd530b5419e117ec08647566b1bdd75d6a9a1e600aaf0f42ce94b4725d4c2da80150dc34e5975d6904f061ed9a7608959f2d24ee6ec4f2395d16e02f53c746f74b12013f738d76456c3407188eff97f31ca36e5d79e1f1c7c3b688ee21d37ba5ebf4afc2a61f16"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x55, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socket$packet(0x11, 0xa, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0xe06, 0x1000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, 0x0, &(0x7f00000001c0)='GPL\x00', 0x4, 0x93, &(0x7f00000003c0)=""/147, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r7, 0x0, 0x8000000000000}, 0x18) syz_open_procfs(0x0, &(0x7f0000000580)='net/tcp6\x00') r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) 3.228976278s ago: executing program 3 (id=319): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000410, &(0x7f0000000480)={[{@bh}]}, 0x1, 0x792, &(0x7f0000001fc0)="$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") creat(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x10000, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, 0x0, &(0x7f0000000280)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = socket(0x10, 0x803, 0x0) sendto(r5, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/110, 0x6e}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000740)=""/73, 0x49}, {0x0}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f0000000100)=""/16, 0x10}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) 3.175214235s ago: executing program 2 (id=313): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe06, 0x1000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 3.137609368s ago: executing program 2 (id=320): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0xa, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={r2, r4, 0x1, 0x0, @void}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r5, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}, 0x0) 3.12009935s ago: executing program 2 (id=321): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'veth1_vlan\x00', &(0x7f00000000c0)=@ethtool_link_settings={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x7]}}) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0600000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000e900e8ffffff000000d7cffca7a6c9a34d35237550c341a3658bd17c88bf5e4cb170505206329431de1a1cea65a8ad0d0cb112c7c5d17c91457940fc9dfe426b2a65e980f0c50920adde1473a400a4c6353ab2ad5175f0e7fba48e01ed2fd7203d3af97191f7c0cdb84d0db6355e618e51c077b0709d7bbfd18327b32a79d764de3b1548dcb4e700933b0d64008f192409911de9bb06297a498239f6836bba16401e2433c07fe6c69c6ce582362cecdf4fc5ac8e353919024b", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB, @ANYRES32=0x1, @ANYBLOB="0000000000006de47bc91ee8f706d25879fe", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mincore(&(0x7f0000f0c000/0x3000)=nil, 0x0, &(0x7f0000afaf0a)=""/246) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xf, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="18009c4e00000000000000000000000018fa0000781973490913b23eea551fb9ce283a0e", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f00000005c0)='GPL\x00', 0x89, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r8}, 0x10) r9 = socket(0x2c, 0x3, 0x0) r10 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r9, &(0x7f0000000100)={0xa0179e1d}) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xc, &(0x7f0000000580)=ANY=[@ANYRES16=r10, @ANYRESDEC=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r7}, 0x18) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000716f00000000000033"], 0xfc}}, 0x0) 2.361144418s ago: executing program 0 (id=322): r0 = socket$inet6(0xa, 0x3, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, 0x0, 0x15) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000", @ANYRES32=0x0, @ANYBLOB="008000f5ff000000000000000000000640000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0200000004000000090000000200000000100000", @ANYRES32, @ANYBLOB="000000000000c4c160296dc5000000000000000000", @ANYRES32], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000640)=ANY=[@ANYRES32=r1, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000001b00)={'syz_tun\x00', &(0x7f0000001ac0)=@ethtool_cmd={0x15, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfd, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x52, 0xfffffffe, [0x0, 0xffffffff]}}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000d40)=@nfc_llcp={0x27, 0x0, 0x0, 0x6, 0x62, 0x49, "c60a0f38fa951f20cc38a164a0c4a0f668f4319606cff66ff4f203fb56971c41c076240f584ae520c425075a54ae688405a870dfbdc217287233b1bd7e40b9", 0x22}, 0x80, 0x0}}], 0x2, 0x44) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x7, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r9}, 0x10) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYRES32=r9, @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="c12ce03914909c6e41c051cce4396ad9e255d84260d12bd3a13d721022841d515a1df40522bb39e487d346fc89f2d79411782d072c6b99d48b0f37cced571fb9a46affa85034db68a8f472d6b3169c4f1666c600164ab027e43d5bc4058f70037a867a4b14f57fcd982436803bf5fcc4881487272faeff297457a03ed9353a98cf0a7a4f6020eaa89318edbafecf2588f411208e3403a3467546e4d7b1228d1dedac109cfea51668b4db5c4b4b1870dbf1fae4a374569943ac7a3c1cb03548da56904b2bc217d0cb2df551481c2a5183e015655da0e23878fb7c4bae898668f5c3eb6b46c38185bc654811286d104c", @ANYRES32=r10, @ANYRES32], 0x2c}}, 0x0) 2.321798493s ago: executing program 4 (id=323): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x26) getrlimit(0x3, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000010018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace$peeksig(0x4209, 0x0, 0x0, 0x0) execve(0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(r1, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) r7 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10) sendmmsg$inet(r7, &(0x7f0000000440)=[{{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000280)="a9050000000096e25eb7d4f9423bcc7464f42fd2d4599a0e8202adbf32abdbb05a000000", 0x24}], 0x1}}], 0x1, 0x0) 2.1721151s ago: executing program 2 (id=324): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000380)='./file0\x00', 0x804, &(0x7f0000000640)=ANY=[@ANYBLOB='shortname=lower,shortname=lower,iocharset=utf8,rodir,utf8=0,rodir,rodir,shortname=win95.check=strict,codepage=775,fmask=00000000000000000114671,utf8=0,shortname=win95,iocharset=macgreek,nonumtail=0,uni_xlate=1,\x00'], 0x1, 0x276, &(0x7f00000003c0)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ptrace(0x10, 0x1) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000100)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x80000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x3, 0x0, 0x0, 0x2000, 0x40000, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20000000, 0x0, 0x2, 0x0, 0x0, 0xfffffffc]}, 0x45c) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) readv(r1, &(0x7f0000000600)=[{&(0x7f0000000640)=""/89, 0x59}], 0x1) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_usb_connect$uac1(0x3, 0xc1, &(0x7f00000007c0)=ANY=[], 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x14}}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000380), 0x12) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffeca50000006d000000850000000f"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000380)='kmem_cache_free\x00', r4}, 0x10) 2.077158101s ago: executing program 3 (id=325): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) socket$packet(0x11, 0x2, 0x300) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0) flock(r2, 0x5) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r3, 0x2) 1.315849998s ago: executing program 4 (id=326): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000004000)=0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r0}, 0x10) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[], 0x1c}}, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x800448d2, &(0x7f0000000100)) 1.248075666s ago: executing program 4 (id=327): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000410, &(0x7f0000000480)={[{@bh}]}, 0x1, 0x792, &(0x7f0000001fc0)="$eJzs3ctrXFUYAPDvTl5NWk0EQesqIGigdGJqbBVcVFyIYKGga9thMg01k0zJTEoTAraI4EZQcSHopmsfdefWx1b/CxfSUjUtVlzIyJ3MtNNmJk3azEwwvx/czDn3kXO+OfdxZs5lbgB71nj6JxNxMCI+SiJG6/OTiBiopfojjq+vd2ttNZ9OSVSrb/6R1Na5ubaaj6ZtUvvrmScj4sf3Iw5lNpZbXl6ZyxWLhcV6frIyf26yvLxy+Ox8brYwW1g4OjU9feTYC8eO7lysf/2ycuDax689+83xf9574sqHPyVxPA7UlzXHsVPGY7z+ngykb+FdXt3pwnos6XUFeCDpodm3fpTHwRiNvlqqjeFu1gwA6JR3I6IKAOwxies/AOwxje8Bbq6t5htTb7+R6K7rr0TEvvX4G+Ob60v662N2+2rjoCM3k7tGRpKIGNuB8scj4ovv3v4qnaJD45AArVy8FBGnx8Y3nv+TDfcsbNdzmy2sDtVexu+Z7fwH3fN92v95sVX/L3O7/xMt+j9DLY7dB3H/4z9zdQeKaSvt/73cdG/brab468b66rlHan2+geTM2WIhPbc9GhETMTCU5qdqq7a+C2rixr832pXf3P/785N3vkzLT1/vrJG52j909zYzuUruYeNuuH4p4qn+VvEnt9s/adP/PbnFMl5/6YPP2y1L40/jbUwb4++s6uWIZ1q2/522TDa9P3GytjtMNnaKFr799bORduU3t386peU3Pgt0Q9r+I5vHP5Y0369Z3n4ZP18e/aHdsvvH33r/H0zeqqUH6/Mu5CqVxamIweSNjfOP3Nm2kW+sn8Y/8XTr43+z/T/9THh6i/H3X/v96/q/ahl/zcXetf/Mttp/k0S1vs09i67cmutrV/7W2n+6lpqoz9nK+e8+NX2IvRkAAAAAAAAAAAAAAAAAAAAAAAAAti8TEQciyWRvpzOZbHb9Gd6Px0imWCpXDp0pLS3MRO1Z2WMxkGn81OVo0++hTtV/D7+RP3JP/vmIeCwiPh0aruWz+VJxptfBAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDd/jbP/0/9NtTr2gEAHbOv1xUAALrO9R8A9p7tXf+HO1YPAKB7tv35v5p0piIAQNds+fp/urP1AAC6x/g/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHXbyxIl0qv69tppP8zPnl5fmSucPzxTKc9n5pXw2X1o8l50tlWaLhWy+NN/2H11cfymWSuemY2HpwmSlUK5MlpdXTs2XlhYqp87O52YLpwoDXYsMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALauvLwylysWC4sSmyaGd0c1dk2iP3ZFNf73icGeld58lhju3QkKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYJf7LwAA//+hwiXQ") creat(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x10000, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') r5 = socket(0x10, 0x803, 0x0) sendto(r5, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/110, 0x14b}, {&(0x7f0000000280)=""/85, 0x53}, {&(0x7f0000000fc0)=""/4096, 0x508}, {&(0x7f0000000400)=""/106, 0x14}, {&(0x7f0000000740)=""/73, 0x60}, {&(0x7f0000000200)=""/77, 0x630}, {&(0x7f00000007c0)=""/154, 0x4a}, {&(0x7f0000000100)=""/16, 0x158}], 0x8, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 953.274191ms ago: executing program 0 (id=328): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) symlink(0x0, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x8a, &(0x7f0000000180)={[{@jqfmt_vfsold}, {@usrjquota, 0x22}, {@resuid={'resuid', 0x3d, 0xee00}}, {@grpquota}, {@data_err_ignore}, {@data_err_abort, 0x22}, {@nodiscard}, {@errors_remount}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}]}, 0xfe, 0x455, &(0x7f0000000d80)="$eJzs3M1PXFUbAPBnZhha2vLCW2u12CpajcQPKPTDLtzUaOJCExNd1LhCoA12WkzBxDZE0QUuTRP3xqWJf4Eb68aoKxO3ujcmxLCxuhpzZ+6FKcwAAwNTnd8vue05cy4557n3nplnzp2ZADrWYPJPLuJQRPwSEX3V6t07DFb/u7M8P/HX8vxELsrl1//IVfb7c3l+Its1+7uD1Uq5vEG/i29FjJdKU9fT+sjc1XdHZm/cfHb66vjlqctT18bOnz9z+kT3ubGzLYmzNxnrwAczx4+9/OatVycu3nr7h6+S8R5K22vjaJXB6tGt64lWd9ZmvTXlXFcbB0JTChGRnK5iZf73RSF6Vtr64qWP2zo4YFeVy/nyvsbNC2XgPyxJ1IFOlL3QJ+9/s22PUo97wtKFWFnHuJNu1ZauyKf7FNP3SLthMCIuLvz9ebLFLq1DAADUun0hIp6pl//l4+j+1f3+l94b6o+I/0fE4Yi4LyKORMT9EXE0Ih6IiAeb7H/tHZL1+U+5b3uRbU2S/z2f3tu6O//Lsr/oL6S13kr8xdyl6dLUqfSYDEVxX1If3aCPb1/8+dNGbbX5X7Il/We5YDqO37vWLNBNjs+N7yTmWksfRQx01Ys/t5LzJvnxsYgY2GYf0099ebxR2+bxb6AFSXn5i4gnq+d/IdbEn8k1vD85+ty5sbMj+6M0dWokuyrW+/Gnxdca9b+j+Ftg6XY5DtS9/lfi78/tj5i9cfNK5X7tbPN9LP76ScP3NNu9/rtzb1TK3elj74/PzV0fjejOvbL+8bHVv83q2f7J9T90sv78PxyrR+KhiEgu4hMR8XBEPJKO/dGIeCwiTm4Q//cvPP5O8/FvsCrfQkn8k5ud/6g9/80XCle++7r5+DPJ+T9TKQ2lj2zl+W+rA9zJsQMAAIB/i3zlM/C5/PBKOZ8fHq5+hv9IHMiXZmbnnr408961yepn5fujmM9Wuvpq1kNH07XhrD62pn46XTf+rNBTqQ9PzJQm2x08dLiDDeZ/4rdCu0cH7Drf14LOZf5D5zL/oXOZ/9C5zH/oXPXm/4dtGAew9zZ5/e/Zq3EAe0/+D53L/IfOZf5DR2r43fj8jr7yr9CmwjfdO/uthq0XIn+PhLzrhWJE7EVfxajb1LXlH7PYZmFf3aZ2PzMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC0xj8BAAD//37l4X0=") madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000040)='./file2\x00', 0x300001a, &(0x7f0000000e40)=ANY=[@ANYBLOB="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", @ANYRESOCT], 0xd, 0x2aa, &(0x7f0000001300)="$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") socket$pppl2tp(0x18, 0x1, 0x1) creat(&(0x7f0000000080)='./file1\x00', 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004", @ANYBLOB='\x00\x00\x00', @ANYRES32=0x0], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r2) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000140)={0x0, 0x0}) r5 = syz_open_procfs(r4, &(0x7f0000000600)='fd/4\x00') ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r5, 0x8004587d, &(0x7f0000000180)={@id={0x2, 0x0, @auto="0dbb956fb4f9cb310a1d07a93a00"}}) 654.232375ms ago: executing program 3 (id=330): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00010000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca7f8fbc9cdfa146ec56175037958e271f60d25b7937f02c8695e5a1b2cdf41dc10d1e8bf076d83923dd29c0301000000010000003d5d58c07fa1f7e4d5b318e2ec0e0700897a74a0091ff110026e6d2ef831ab7ea0c34f17e3ad6e70af07da5ceb01b7551ef3bb6220030100dfd8e012e79578e51bc53099e90fbdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e060e3670ef0e789f93781965f1328d6704902cbe7bc0476619f28d99cde7a6b73340cc2160a1fe3c184b751c51160fbce841dfebd31a08b32808b80200000000009dd27080e71113610e10d8fb9c2aec61ce63a3462fd50117b89a9ab759b4eeb8cb000066d42b4e54861d0227dbfd2ed8576a3f7f3deadd7130856f756436303767d2e24f29e5dad9796edb697a6ea0180aabc18cae2ed4b4390af9a9ceafd07ed0030000002cab154ad029a119ca3c9727ec84222fff0d7216fdb0d3a0ec4bfae563858dc06e7c337642d3e5a815212f5e16c1b30c3a2a71bc85018e5ff2c910496f0dafc9ffc2cc788bee1b47683db01a46939868d75211bbae0e7313bff5d4c391ddece00fc772dd6b4d4d0a917b239fe12280fc92c88c5b8dcdcc22ee1747790a8992533ac2a9f5a699593f084419cae0b4183fb01c73f99857399537f5cc2acb72c7eae993fc9eb22d130665b6341da114f08cd0509d380578673fffffff7f23877a6b24db0e067345560942fa1c22015e53fd8a46be933ab460d8629fbef2461c96a08707671215c302fae29187d4f5c06a960fd37c10223fdae7ed04935c3c90d3add8eebc8619d73415e6adcda2130f5011e42e50adab988dd8f12baf5cc9398c88607a08009c2977aab37d9a44cfc1c7b4000000000000fa47742f6c5b9c4b11e7d7262a1457c39495c826b956ba859adfe38f77b91bd7d5ca1664fe2f3ced8468911806e8916dc15e21644db60c2499d5d16d7d915836ab26c169482008ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc874b2f663ddeef0005b3d96c7aae73835d5a3cda9e90d76c1993e0799d4894ee7f8249dc1e3428d2129369ee1b85afa1a5b6154eb2eea0d0df414b315f65112412392191fa83ee830548f11e1038debd64cbe359454a3f2239cfe35f81b7ade8a5b859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b20428d6474a0a91ee90b8de802c6b538622e6bbcb80f87b415263c401e64ed69a2f75409000000000000001d695c4559b82cabac3cccadc1e1c19af4e03020abf5ff0433d660f20898d2a045d009a0ffb20a77c9af2b80c05184a66d30bbea2ca45a4d6d6d1e6e79aef42355a500587b603306a5af8d867d80a07f10d82eafb03062e95196d5e3ffea0000000000000be959096ea948cfa8e7194123e918914a71ad5a8521fb9553bc60f7d9719b55b3abb6bba3d113a680a8d46fe074c83fbe378a3889e8145b2eaceab05ef932c6e4f8ef0ed0d818a7b76d839cf3c63ebb4380b168c38fa32e49563cfee3a7f0fc18bfa32c418cef875fb49e2989177a1bcd1e30280bc586e79a5dd80701018e7d6e97b3ce267dd4e27b6ef206660090bb2164474cef378f97ca33fc03000000000000001547053453d0c9aec91a24079b21d52fb5516bf0c28ef37aa76442f6083dc99cd61afaf6be45d7b00d3639f2f10ac2d5c759c3e5468f0000000011d415b6b085fb73a2c7c3852e0e658ffeb4e863428a792bee94f6cd895424360e0464f9d7ea425f2fa6aac029d15af607ad83532ff181c985f54b39370c06e63055b4d6a36fa98a44e379d28307c9912fb097601f3f88a2ca6fd1f9320cfe7fc8e9f7f15f02e177ce23f43a154b42e26f037e8a01377cbd3f509e6e540c9ba9c2a589c95d8ad67a65e9a44c576dc24452eaa9d819e2b04bdd1c000000070000000000000000000000005333c6199c12dcd926891927a7267c47cf897853d160100b39b613faefe16bed1fc105dddd77ab929b837d4442d13d5a29179a00837918dd7854aa17eb9fbdc2bdc0e98ae2c3f23a6131e2879f04ff01000030b92dd493be66c2242f8184733b80ba28e8ffffff7f00000000bb2f89049c5f6d63d56995747639964217aacfe548bc869098aa8e07e51dbc9e2d4db3c5f79fd355222ec2a00cf7f2ccd6dd6d2dc2a815d8314221a5472f1318a9dfbec5a759579caf3262129b14e99040b5d91398e17df85c25ccae973eecc7d187168d5c9cd848d566cc17587641ed01889c927da38d83314480b15e23138c5b877a72bd4cf74a299df4fbfc8e6ea96939f15d254d9033c5a45706bda78ab60200000000000000000000000000000000000000706f78f0a2ea9667fb5b951808545a46830970c2dfae01adbda7d29bf1f7abdaf52e0de6f9d7150808ed086642e64ebf98762b34338b80e41b704c3eefaf0bb5ff070000000000000ea15ccc0d7a830b6eb33b6b61675511d693ef5e3c44bbf71cabc5f45c879e7499f8baae2a1a09cf38da73297764fbc0e723e1cc3abb12e3076982ed32c94a2ce3e6f37c47e983da4ca5c96187db5a2a2e1742bc93a65d7187126126b3a80f17dd2f7dbbe82d104ede9ba6925afc2ee6cb94f56f1363cad635abf8f983292c49c0ebf5005154c7b58a3a2a2ea86d2fd92b8661264f781e3fb02d05a28f3f17b64d0258853d45cb5ebde10cd3d82eeed2f1ed925b7cf400304932c5ed0a362b235ce37e1f17700f7d1fecf8be8a2c5d25a9c60657560d05441387ff158a018d19a286c58684a1d2f624c3eb59d509ee89cc2df52881d005b2e5c27563ba54e4153c132d0366aa660000000000000009c1aaec93ec0f925921fb2e9eb202a29bef28224dbabe723de5c584bc398a8792e493048c87f60a51a391e95921218149403558fd13c649f90b0911d57eeb298b590581eba1ce383b539ab80fd15445987b1bb4eb512545e1ab65fef3103ce10b1ee362b51c72f82edf2f502ddf52567775e34a56d1be892f1e62b08950d517fa6fb1b0ef2edf1b67f8644786116b037d4a36fdd30b000063e58c856ec44cbbc2d370553f832af9480215e09aaa3843fe360b1c293a14627f2cfbe278f31d0abc0f5aaa10926dbbfe8a4b131c13a73d4e6d065c2c0fed3ab8442520ce0e0ad7d2d177377ab197ace3ef8b1c24ceb0bdee84bd6e6317633938dd19dc42de7f8f860eca6d9c74525fcd3497526df4c13e3ba5f0d75365a4542ae9440d2fede416d61800aaf7e038879c5d177b3876fda4121e00000100000000003edd3d43cc64e0d26b46907b42e08d000000000000903350932d3eef7fdada20c19807066e3c72d0d816eb9fa50be213bf6bbb7ccb9f2e8a153e6ced68f192ebed6e86af0f2cec7335fa8039fd6eb025440bc2a34d071f0a0e6774308a74748b8cd994ed368695aa2c59869c9200a1306ffa5a71ca69e89a69fc858f37c2c398515a910a35e22ab0573c10b85df4c2972a2fb8b9c080fbb41a753791df727fdeaded2930376eda31312256191c620cce34d1e3bf40a4a207ab1575b399eb8155781bfc7cb5920b49c039935a888d77041894f60fbbcafa487ee96b368e8769da90b44190e569fe8b923c32c288baaca5c5558b5a78bb43e5d9e47a1d5809bb178184b5672d08e29aecf1f572ac1e6cab7e820751e95999b7532603494d37a2bff35a9eec46dfc8a52433f605ebf151c837b4966b5f3628a406175a87e32c5e4268d3000933b580415b162e2946446b8f02554c8a1225217d69d049685dd06aa8528673a9673a723ac414af77f523ad730d00e8700c213f95c87a94f39f506b9e000000000000000000000000000000000000000000000000000090668ac41a1c2a4f7831e6c6a3e9c68ca2c449482bb70a994e71a7f24873848fbb128c820c1de19cc003dfa65a2b296caeb1253802080e08eeb724c4c7b7e052afa19b0f2cd7a13bda4b5a8f3b8fa3ca70bb756a3d529718d5c79d9bdb89e5d33793533211d76d00a45079eff797476106bf76f1fed952a7c9162b88911b5b00c3d26fd2fb4d7b29d1ce025e102d458efd5cca3f3835ce760359eaa01cb13cb28d60e8942fdc02b6824c00dac62f8a2d4c680ae284a82f09d6641921536814b444e4188d9b2e97eb3b108e7876f0f3f3863147ab694218c7cecc075d52d590dddbb57fc6fedf5ec69d7894a7b5c8109f303dab998815c80534b0bd34c49eea63997e56728a8185a8bb6988a7197b87f5548f5edfdfb3efc907fe561b33a6f7c707f7828c6adaf3b2a39929b4b65253e787d65c08aff5e4a9b2267bd8f803ea38f10a6e9c4a49bf23525e08c12d229211fe4d88cf1440f29accfa50f327ac1fb20d7f164100111bd21fca713b2475f1c997f3000000000080c426bcec79c6bc83ce4e6cbb17c01be69db342192d0a716cc24710d23321441f475ec485d642b61c6bd907071dbbe37c0b78f60fd2ad0d13ca62d9d9aafb01c3920b64cb5e023810e2de4327f90c389ce36d90ff9f3cb9d8cd2260d05a8126943a3df17157470595c68ac8df7fea6d42ecb2cdb65b4f2aef0dc4b2de949a6d4ec37f2fd693ae44944041a64fe6336aba1c66b1b95d2edbc40364a049616ae962d75eae619548aa86bd5f0bad56e7ad7de2ee5e6f3b42e3a27094b6b5face99456d9af1926b21d37faf7612d9752cf58e6424decd530b5419e117ec086174439af6ee6c7fdb2d19c9280fa9a02e8fa6a38acfff09050d912635fed175fd"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe06, 0x1000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 591.473742ms ago: executing program 3 (id=331): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0xa, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000200000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={r2, r4, 0x1, 0x0, @void}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r5, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}, 0x0) 590.192332ms ago: executing program 3 (id=332): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000dc0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xff, 0x80, 0x8, [{{0x9, 0x4, 0x0, 0xfd, 0x1, 0x7, 0x1, 0x1, 0x1, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x4, 0x0, 0xb}}}}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x280a}}}, 0x0) syz_usb_control_io(r0, &(0x7f00000015c0)={0x2c, 0x0, &(0x7f0000001480)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2009}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000003d00)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000003a00)={0x20, 0x0, 0x4, {0x2, 0x10}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) write$char_usb(r1, &(0x7f0000006800)="10", 0x1) write$char_usb(r1, 0x0, 0x0) syz_usb_ep_read(r0, 0x1, 0xde, &(0x7f0000007680)=""/222) 366.800388ms ago: executing program 4 (id=333): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000410, &(0x7f0000000480)={[{@bh}]}, 0x1, 0x792, &(0x7f0000001fc0)="$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") creat(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x10, &(0x7f00000014c0), 0x1, 0x793, &(0x7f0000001700)="$eJzs3c1rXFUbAPDnTpKmb9r3TV4QbF0FBA2UTkyNrYKLigsRLBR0bTtMpqFmkimZSWlCoBYR3AhaXAi66dqPunPrx1b/Bd2ISEvVtFhxISN3PjqTZiadtvloze8Htz3n3jM595l77zln5h7mBrBjjab/ZCL2R8R7ScRwY30SEQO1VH/E0Xq5myvL+XRJolp99bekVubGynI+2l6T2tPI7IuIb96OOJBZW295cWkmVywW5hv58crsmfHy4tLB07O56cJ0Ye7wxOTkoSPPHBncuFj/+H5p79X3X3ry86N/vfXo5Xe/TeJo7G1sa49jo4zGaOM9GUjfwlVe3OjKtlmy3TvAPUkvzb76VR77Yzj6aqne9F4SAHiQnI+IKgCwwyT6fwDYYZrfA9xYWc6nS/X89n4fsdWuvRARu+vxN+9v1rf0N+7Z7a7dBx26kay635FExMgG1D8aER9/+fqn6RKbdB8SoJM3L0TEyZHRZvvfan+SNXMW6nqfkPFUD2VGb8tr/2DrfJWOf55tjf9a11/m1vgnOox/Bjtcu/diNGJXe37t9Z+5sgHVdJWO/54faM1tu9kWf8NIXyP339qYbyA5dbpYSNu2/0XEWAwMpvmJdeoYu/739VUr+lrJ9vHf7xff+CStP/2/VSJzpf+2JncqV8ndb9xN1y5EPNbfKf7k1vFPuox/j/dYx8vPvfNRt21p/Gm8zWV1/Js/q6x6KeKJ6Bx/U7Le/MTD47XTYbx5UnTwxU8fDnWrv/34p0taf/OzwFZIj//Q+vGPJO3zNct3X8d3l4a/7rbtzvF3Pv93Ja/V0s3G41yuUpmfiNiVvLJ2/aHWa5v5Zvk0/rHHO1//653/6WfCkz3G33/118/uPf7NlcY/dVfH/+4Tl2/O9HWrv7fjP1lLjTXW9NL+9bqD9/PeAQAAAAAAAAAAAAAAAAAAAAAAAECvMhGxN5JM9lY6k8lm68/wfiSGMsVSuXLgVGlhbipqz8oeiYFM86cuh9t+D3Wi8Xv4zfyh2/JPR8T/I+KDwf/U8tl8qTi13cEDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQMOeLs//T/0yuN17BwBsmt13LHG9sCU7AgBsmTv3/wDAv43+HwB2Hv0/AOw8+n8A2Hn0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGyy48eOpUv1z5XlfJqfOru4MFM6e3CqUJ7Jzi7ks/nS/JnsdKk0XSxk86XZtpf+0OnvFUulM5Mxt3BuvFIoV8bLi0snZksLc5UTp2dz04UThYEtiwwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeldeXJrJFYuFeYmHJVEdrh+6B2V/Nj/x88Ef961X5qLTeOMT290yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwc/gkAAP//skMoxA==") sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x10000, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, 0x0, &(0x7f0000000280)}, 0x20) userfaultfd(0x80001) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') r4 = socket(0x10, 0x803, 0x0) sendto(r4, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/110, 0x6e}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000740)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}], 0x7, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) 32.530517ms ago: executing program 0 (id=334): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$packet(r0, 0x0, 0x0) getsockopt$netlink(r0, 0x10e, 0x9, &(0x7f0000003340)=""/4071, &(0x7f0000001100)=0xfe7) 9.45712ms ago: executing program 0 (id=335): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000410, &(0x7f0000000480)={[{@bh}]}, 0x1, 0x792, &(0x7f0000001fc0)="$eJzs3ctrXFUYAPDvTl5NWk0EQesqIGigdGJqbBVcVFyIYKGga9thMg01k0zJTEoTAraI4EZQcSHopmsfdefWx1b/CxfSUjUtVlzIyJ3MtNNmJk3azEwwvx/czDn3kXO+OfdxZs5lbgB71nj6JxNxMCI+SiJG6/OTiBiopfojjq+vd2ttNZ9OSVSrb/6R1Na5ubaaj6ZtUvvrmScj4sf3Iw5lNpZbXl6ZyxWLhcV6frIyf26yvLxy+Ox8brYwW1g4OjU9feTYC8eO7lysf/2ycuDax689+83xf9574sqHPyVxPA7UlzXHsVPGY7z+ngykb+FdXt3pwnos6XUFeCDpodm3fpTHwRiNvlqqjeFu1gwA6JR3I6IKAOwxies/AOwxje8Bbq6t5htTb7+R6K7rr0TEvvX4G+Ob60v662N2+2rjoCM3k7tGRpKIGNuB8scj4ovv3v4qnaJD45AArVy8FBGnx8Y3nv+TDfcsbNdzmy2sDtVexu+Z7fwH3fN92v95sVX/L3O7/xMt+j9DLY7dB3H/4z9zdQeKaSvt/73cdG/brab468b66rlHan2+geTM2WIhPbc9GhETMTCU5qdqq7a+C2rixr832pXf3P/785N3vkzLT1/vrJG52j909zYzuUruYeNuuH4p4qn+VvEnt9s/adP/PbnFMl5/6YPP2y1L40/jbUwb4++s6uWIZ1q2/522TDa9P3GytjtMNnaKFr799bORduU3t386peU3Pgt0Q9r+I5vHP5Y0369Z3n4ZP18e/aHdsvvH33r/H0zeqqUH6/Mu5CqVxamIweSNjfOP3Nm2kW+sn8Y/8XTr43+z/T/9THh6i/H3X/v96/q/ahl/zcXetf/Mttp/k0S1vs09i67cmutrV/7W2n+6lpqoz9nK+e8+NX2IvRkAAAAAAAAAAAAAAAAAAAAAAAAAti8TEQciyWRvpzOZbHb9Gd6Px0imWCpXDp0pLS3MRO1Z2WMxkGn81OVo0++hTtV/D7+RP3JP/vmIeCwiPh0aruWz+VJxptfBAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDd/jbP/0/9NtTr2gEAHbOv1xUAALrO9R8A9p7tXf+HO1YPAKB7tv35v5p0piIAQNds+fp/urP1AAC6x/g/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHXbyxIl0qv69tppP8zPnl5fmSucPzxTKc9n5pXw2X1o8l50tlWaLhWy+NN/2H11cfymWSuemY2HpwmSlUK5MlpdXTs2XlhYqp87O52YLpwoDXYsMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALauvLwylysWC4sSmyaGd0c1dk2iP3ZFNf73icGeld58lhju3QkKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYJf7LwAA//+hwiXQ") creat(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x10000, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, 0x0, &(0x7f0000000280)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = socket(0x10, 0x803, 0x0) sendto(r5, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/110, 0x6e}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f0000000100)=""/16, 0x10}], 0x7, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) 0s ago: executing program 1 (id=329): pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000060000000100000010000000", @ANYRES32, @ANYBLOB="1c76c6ca00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000400)={r2, &(0x7f0000000380), 0x20000000}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001811c1b2a841b7aa8d14ad2601ba221243f78045ad00000000000000000a00"/56, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r3}, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = dup(r5) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r7 = dup(r1) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r7, &(0x7f0000000480)=ANY=[@ANYBLOB="9802"], 0x298) write$FUSE_DIRENTPLUS(r7, &(0x7f0000000580)=ANY=[@ANYBLOB="b0"], 0xb0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@fscache}]}}) openat(r7, &(0x7f00000000c0)='./file0\x00', 0x1a080, 0x0) kernel console output (not intermixed with test programs): -fs (loop4): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue [ 27.475472][ T333] fuse: Bad value for 'rootmode' [ 27.595955][ T328] tpacket_rcv: packet too big, clamped from 64993 to 3952. macoff=96 [ 28.019842][ T347] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 28.028355][ T347] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 28.084958][ T347] F2FS-fs (loop3): Found nat_bits in checkpoint [ 28.153331][ T347] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 28.161476][ T347] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 28.250999][ T347] syz.3.10 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 28.399780][ T24] kauditd_printk_skb: 75 callbacks suppressed [ 28.399792][ T24] audit: type=1400 audit(1729715031.460:151): avc: denied { mounton } for pid=367 comm="syz.4.14" path="/1/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 28.400740][ T368] incfs: Can't find or create .index dir in ./file0 [ 28.409638][ T24] audit: type=1400 audit(1729715031.460:152): avc: denied { write } for pid=367 comm="syz.4.14" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 28.467206][ T24] audit: type=1400 audit(1729715031.460:153): avc: denied { add_name } for pid=367 comm="syz.4.14" name=".index" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 28.500572][ T24] audit: type=1400 audit(1729715031.460:154): avc: denied { create } for pid=367 comm="syz.4.14" name=".index" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 28.526023][ T368] incfs: mount failed -5 [ 28.543789][ T24] audit: type=1400 audit(1729715031.460:155): avc: denied { associate } for pid=367 comm="syz.4.14" name=".index" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 28.642442][ T24] audit: type=1400 audit(1729715031.700:156): avc: denied { unmount } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 28.728563][ T370] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 28.748499][ T382] serio: Serial port pts0 [ 28.750261][ T376] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 28.753570][ T24] audit: type=1400 audit(1729715031.810:157): avc: denied { create } for pid=380 comm="syz.4.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.797061][ T383] futex_wake_op: syz.4.18 tries to shift op by 32; fix this program [ 28.839221][ T376] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 28.859162][ T376] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 28.887725][ T376] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2002c019, mo2=0002] [ 28.907019][ T376] System zones: 1-12 [ 28.938299][ T376] EXT4-fs (loop0): 1 truncate cleaned up [ 28.950366][ T376] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,resuid=0x000000000000ee01,debug,noinit_itable,nombcache,mblk_io_submit,,errors=continue [ 29.268129][ T287] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /4/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 29.300620][ T24] audit: type=1400 audit(1729715032.360:158): avc: denied { remove_name } for pid=287 comm="syz-executor" name="lost+found" dev="loop0" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 29.300735][ T287] EXT4-fs error (device loop0): ext4_empty_dir:3113: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 29.343833][ T24] audit: type=1400 audit(1729715032.360:159): avc: denied { rmdir } for pid=287 comm="syz-executor" name="lost+found" dev="loop0" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 29.368928][ T287] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /4/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 29.433776][ T287] EXT4-fs error (device loop0): ext4_empty_dir:3113: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 29.457240][ T287] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /4/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 29.481246][ T287] EXT4-fs error (device loop0): ext4_empty_dir:3113: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 29.506819][ T287] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /4/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 29.533019][ T287] EXT4-fs error (device loop0): ext4_empty_dir:3113: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 29.557068][ T287] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /4/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 29.580668][ T287] EXT4-fs error (device loop0): ext4_empty_dir:3113: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 29.606094][ T394] EXT4-fs (loop3): error: journal path ./file0 is not a block device [ 29.675359][ T24] audit: type=1400 audit(1729715032.730:160): avc: denied { write } for pid=393 comm="syz.3.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.894620][ T402] F2FS-fs (loop2): Small segment_count (9 < 1 * 24) [ 29.902611][ T402] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 29.937981][ T402] F2FS-fs (loop2): Found nat_bits in checkpoint [ 29.991458][ T402] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 29.998761][ T414] xt_bpf: check failed: parse error [ 30.008948][ T402] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 30.011655][ T416] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.028591][ T416] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.037350][ T416] device bridge_slave_0 entered promiscuous mode [ 30.047970][ T416] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.058161][ T416] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.071881][ T416] device bridge_slave_1 entered promiscuous mode [ 30.092009][ T288] attempt to access beyond end of device [ 30.092009][ T288] loop2: rw=2049, want=45104, limit=40427 [ 30.127246][ T416] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.135169][ T416] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.143005][ T416] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.151218][ T416] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.178703][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 30.188029][ T313] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.197305][ T313] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.212738][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 30.221561][ T313] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.229925][ T313] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.240596][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 30.251491][ T313] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.260652][ T313] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.298641][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 30.324092][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 30.343163][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 30.361114][ T416] device veth0_vlan entered promiscuous mode [ 30.370385][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 30.381334][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 30.391017][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 30.406866][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 30.419942][ T416] device veth1_macvtap entered promiscuous mode [ 30.430957][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 30.442417][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 30.629861][ T432] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #16: comm syz.0.37: casefold flag without casefold feature [ 30.668867][ T432] EXT4-fs error (device loop0) in ext4_do_update_inode:5303: error 27 [ 30.679837][ T432] EXT4-fs error (device loop0): ext4_dirty_inode:6107: inode #3: comm syz.0.37: mark_inode_dirty error [ 30.697755][ T432] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.37: bg 0: block 64: padding at end of block bitmap is not set [ 30.716674][ T432] EXT4-fs error (device loop0): ext4_acquire_dquot:6219: comm syz.0.37: Failed to acquire dquot type 0 [ 30.731135][ T432] EXT4-fs (loop0): 1 truncate cleaned up [ 30.737650][ T432] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 30.747805][ T432] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038 (0x7fffffff) [ 30.848526][ T48] device bridge_slave_1 left promiscuous mode [ 30.855548][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.866501][ T48] device bridge_slave_0 left promiscuous mode [ 30.874683][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.888053][ T48] device veth1_macvtap left promiscuous mode [ 30.897924][ T48] device veth0_vlan left promiscuous mode [ 33.697748][ T24] kauditd_printk_skb: 21 callbacks suppressed [ 33.697766][ T24] audit: type=1400 audit(1729715036.760:180): avc: denied { relabelfrom } for pid=467 comm="syz.4.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 33.729177][ T24] audit: type=1400 audit(1729715036.760:181): avc: denied { relabelto } for pid=467 comm="syz.4.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 33.914651][ T24] audit: type=1400 audit(1729715036.970:182): avc: denied { create } for pid=469 comm="syz.4.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 34.770527][ T24] audit: type=1400 audit(1729715037.830:183): avc: denied { ioctl } for pid=477 comm="syz.4.39" path="socket:[14752]" dev="sockfs" ino=14752 ioctlcmd=0x48d2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 36.789619][ T492] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #16: comm syz.0.43: casefold flag without casefold feature [ 36.804432][ T492] EXT4-fs error (device loop0) in ext4_do_update_inode:5303: error 27 [ 36.813404][ T492] EXT4-fs error (device loop0): ext4_dirty_inode:6107: inode #3: comm syz.0.43: mark_inode_dirty error [ 36.826391][ T492] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.43: bg 0: block 64: padding at end of block bitmap is not set [ 36.842935][ T492] Quota error (device loop0): write_blk: dquota write failed [ 36.846981][ T465] Bluetooth: hci2: command 0x1003 tx timeout [ 36.850285][ T492] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 36.856856][ T480] Bluetooth: hci2: sending frame failed (-49) [ 36.866944][ T492] EXT4-fs error (device loop0): ext4_acquire_dquot:6219: comm syz.0.43: Failed to acquire dquot type 0 [ 36.887006][ T492] EXT4-fs (loop0): 1 truncate cleaned up [ 36.894231][ T492] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 36.905091][ T492] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038 (0x7fffffff) [ 38.243390][ T508] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.251964][ T508] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.260513][ T508] device bridge_slave_0 entered promiscuous mode [ 38.269284][ T508] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.277618][ T508] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.286560][ T508] device bridge_slave_1 entered promiscuous mode [ 38.309697][ T513] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 38.338987][ T508] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.347353][ T508] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.355389][ T508] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.364847][ T508] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.395909][ T426] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.406025][ T426] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.414959][ T426] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 38.422823][ T426] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 38.435405][ T426] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 38.443581][ T426] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.451008][ T426] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.604410][ T24] audit: type=1400 audit(1729715041.580:184): avc: denied { create } for pid=512 comm="syz.0.47" dev="anon_inodefs" ino=14916 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 38.713725][ T508] device veth0_vlan entered promiscuous mode [ 38.746052][ T426] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 38.756346][ T426] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 38.766278][ T426] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 38.775271][ T426] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 38.786548][ T426] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 38.797278][ T426] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.804956][ T426] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.813021][ T426] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 38.821972][ T426] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 38.836928][ T426] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 38.846155][ T508] device veth1_macvtap entered promiscuous mode [ 38.860978][ T426] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 38.872609][ T426] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 38.927015][ T20] Bluetooth: hci2: command 0x1001 tx timeout [ 38.935337][ T40] Bluetooth: hci2: sending frame failed (-49) [ 39.077810][ T48] device bridge_slave_1 left promiscuous mode [ 39.085736][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.095044][ T48] device bridge_slave_0 left promiscuous mode [ 39.104893][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.115007][ T48] device veth1_macvtap left promiscuous mode [ 39.122188][ T48] device veth0_vlan left promiscuous mode [ 39.249946][ T24] audit: type=1400 audit(1729715042.310:185): avc: denied { create } for pid=523 comm="syz.0.48" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 39.273964][ T24] audit: type=1400 audit(1729715042.310:186): avc: denied { setopt } for pid=523 comm="syz.0.48" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 39.304278][ T24] audit: type=1400 audit(1729715042.310:187): avc: denied { write } for pid=523 comm="syz.0.48" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 40.170964][ T528] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 40.180288][ T528] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 40.191379][ T528] F2FS-fs (loop0): invalid crc value [ 40.198257][ T528] F2FS-fs (loop0): Found nat_bits in checkpoint [ 40.222223][ T528] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 40.230729][ T528] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 40.411258][ T24] audit: type=1400 audit(1729715043.470:188): avc: denied { mounton } for pid=527 comm="syz.0.49" path="/13/bus/file0" dev="loop0" ino=455 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 40.415229][ T535] overlayfs: workdir and upperdir must reside under the same mount [ 40.745918][ T538] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.753947][ T538] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.763117][ T538] device bridge_slave_0 entered promiscuous mode [ 40.772139][ T538] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.782112][ T538] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.791897][ T538] device bridge_slave_1 entered promiscuous mode [ 40.833345][ T538] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.841312][ T538] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.851948][ T538] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.860384][ T538] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.887340][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.896781][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.907549][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 40.917013][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 40.933021][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 40.941965][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.949906][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.969198][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 40.979595][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.981665][ T24] audit: type=1400 audit(1729715044.050:189): avc: denied { rmdir } for pid=416 comm="syz-executor" name="file0" dev="loop0" ino=455 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 40.987990][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.997882][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 41.032515][ T319] Bluetooth: hci2: command 0x1009 tx timeout [ 41.033064][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 41.051007][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 41.064696][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 41.078375][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 41.088187][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 41.101429][ T538] device veth0_vlan entered promiscuous mode [ 41.116234][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 41.127355][ T24] audit: type=1400 audit(1729715044.170:190): avc: denied { create } for pid=542 comm="syz.0.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 41.134100][ T538] device veth1_macvtap entered promiscuous mode [ 41.158275][ T24] audit: type=1400 audit(1729715044.170:191): avc: denied { write } for pid=542 comm="syz.0.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 41.182736][ T24] audit: type=1400 audit(1729715044.190:192): avc: denied { nlmsg_write } for pid=542 comm="syz.0.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 41.205781][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 41.215207][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 41.380381][ T548] tipc: Started in network mode [ 41.387446][ T548] tipc: Own node identity 7f000001, cluster identity 4711 [ 41.397491][ T548] tipc: Enabled bearer , priority 10 [ 41.527790][ T426] device bridge_slave_1 left promiscuous mode [ 41.534773][ T426] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.543483][ T426] device bridge_slave_0 left promiscuous mode [ 41.550479][ T426] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.558989][ T426] device veth1_macvtap left promiscuous mode [ 41.565965][ T426] device veth0_vlan left promiscuous mode [ 42.137477][ T24] audit: type=1400 audit(1729715045.140:193): avc: denied { block_suspend } for pid=550 comm="syz.1.52" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 42.345204][ T554] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.354044][ T554] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.364351][ T554] device bridge_slave_0 entered promiscuous mode [ 42.375664][ T554] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.385796][ T554] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.393861][ T554] device bridge_slave_1 entered promiscuous mode [ 42.463050][ T554] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.471766][ T554] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.480224][ T554] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.488857][ T554] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.514133][ T426] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 42.522325][ T388] tipc: 32-bit node address hash set to 100007f [ 42.531420][ T426] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.542001][ T426] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.558322][ T426] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 42.567552][ T426] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.575203][ T426] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.598560][ T426] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 42.608977][ T426] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.617140][ T426] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.634538][ T426] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 42.660312][ T426] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 42.670386][ T426] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 42.685885][ T426] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 42.704585][ T426] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 42.713955][ T426] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 42.729656][ T554] device veth0_vlan entered promiscuous mode [ 42.806353][ T426] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 42.816041][ T426] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 42.827893][ T554] device veth1_macvtap entered promiscuous mode [ 42.841237][ T426] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 42.850330][ T426] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 42.860636][ T426] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 42.885168][ T426] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 42.921246][ T426] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 42.987765][ T48] device bridge_slave_1 left promiscuous mode [ 42.999297][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.016645][ T48] device bridge_slave_0 left promiscuous mode [ 43.031838][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.055419][ T48] device veth1_macvtap left promiscuous mode [ 43.069784][ T48] device veth0_vlan left promiscuous mode [ 43.241271][ T571] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 43.252616][ T571] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 43.270804][ T571] F2FS-fs (loop1): invalid crc value [ 43.282536][ T571] F2FS-fs (loop1): Found nat_bits in checkpoint [ 43.330110][ T571] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 43.342293][ T571] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 44.201903][ T592] overlayfs: workdir and upperdir must reside under the same mount [ 44.269642][ T597] FAT-fs (loop2): Unrecognized mount option "shortname=win95.check=strict" or missing value [ 44.378425][ T24] audit: type=1400 audit(1729715047.440:194): avc: denied { read write } for pid=596 comm="syz.2.63" name="uinput" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 44.404734][ T597] input: syz0 as /devices/virtual/input/input4 [ 44.413784][ T24] audit: type=1400 audit(1729715047.460:195): avc: denied { open } for pid=596 comm="syz.2.63" path="/dev/uinput" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 44.449370][ T24] audit: type=1400 audit(1729715047.460:196): avc: denied { ioctl } for pid=596 comm="syz.2.63" path="/dev/uinput" dev="devtmpfs" ino=165 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 44.487349][ T24] audit: type=1400 audit(1729715047.540:197): avc: denied { read write } for pid=596 comm="syz.2.63" name="raw-gadget" dev="devtmpfs" ino=161 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 44.523322][ T24] audit: type=1400 audit(1729715047.540:198): avc: denied { open } for pid=596 comm="syz.2.63" path="/dev/raw-gadget" dev="devtmpfs" ino=161 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 44.556443][ T24] audit: type=1400 audit(1729715047.540:199): avc: denied { ioctl } for pid=596 comm="syz.2.63" path="/dev/raw-gadget" dev="devtmpfs" ino=161 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 44.613290][ T601] F2FS-fs (loop3): invalid crc value [ 44.631057][ T601] F2FS-fs (loop3): Found nat_bits in checkpoint [ 44.676867][ T601] F2FS-fs (loop3): Start checkpoint disabled! [ 44.693097][ T601] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 44.734335][ T24] audit: type=1400 audit(1729715047.790:200): avc: denied { ioctl } for pid=600 comm="syz.3.64" path="/4/bus/file0" dev="loop3" ino=10 ioctlcmd=0xf50d scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 44.761495][ T25] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 45.106011][ T612] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.114247][ T612] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.123581][ T612] device bridge_slave_0 entered promiscuous mode [ 45.133109][ T48] attempt to access beyond end of device [ 45.133109][ T48] loop3: rw=2049, want=40968, limit=40427 [ 45.133408][ T612] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.148310][ T25] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 45.155678][ T612] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.156137][ T612] device bridge_slave_1 entered promiscuous mode [ 45.183372][ T25] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 45.198971][ T25] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 45.224546][ T612] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.233016][ T612] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.240854][ T612] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.249069][ T612] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.262843][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.283244][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.329078][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 45.340777][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 45.357710][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 45.372436][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 45.384254][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.395059][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.404247][ T25] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 45.404273][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 45.413986][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.424175][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 45.441151][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.448968][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.449013][ T25] usb 3-1: Product: syz [ 45.467161][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 45.469477][ T25] usb 3-1: Manufacturer: syz [ 45.476606][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 45.482407][ T25] usb 3-1: SerialNumber: syz [ 45.492396][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 45.505821][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 45.524127][ T612] device veth0_vlan entered promiscuous mode [ 45.543038][ T612] device veth1_macvtap entered promiscuous mode [ 45.555730][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 45.565340][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 45.578038][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 45.588375][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 45.598181][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 45.608416][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 45.618110][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 45.638447][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 45.649090][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 45.658599][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 45.669111][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 45.681227][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 45.692871][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 45.759641][ T24] audit: type=1400 audit(1729715048.820:201): avc: denied { unlink } for pid=625 comm="syz.4.67" name="#1" dev="tmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 45.823867][ T24] audit: type=1400 audit(1729715048.850:202): avc: denied { getattr } for pid=625 comm="syz.4.67" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 46.487739][ T642] ====================================================== [ 46.487739][ T642] WARNING: the mand mount option is being deprecated and [ 46.487739][ T642] will be removed in v5.15! [ 46.487739][ T642] ====================================================== [ 46.558646][ T642] EXT4-fs (loop1): Test dummy encryption mode enabled [ 46.568047][ T642] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue [ 46.580729][ T642] ext4 filesystem being mounted at /6/mnt supports timestamps until 2038 (0x7fffffff) [ 46.594423][ T642] fscrypt: AES-256-CTS-CBC using implementation "cts(cbc-aes-aesni)" [ 46.608178][ T24] audit: type=1400 audit(1729715049.670:203): avc: denied { read } for pid=641 comm="syz.1.74" name="rtc0" dev="devtmpfs" ino=166 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 46.960501][ T653] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 46.970089][ T653] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 46.992476][ T653] F2FS-fs (loop4): invalid crc value [ 47.002025][ T653] F2FS-fs (loop4): Found nat_bits in checkpoint [ 47.029816][ T653] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 47.038782][ T653] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 47.110703][ T653] overlayfs: workdir and upperdir must reside under the same mount [ 47.887874][ T668] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 47.896060][ T668] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 47.906366][ T668] F2FS-fs (loop0): invalid crc value [ 47.915536][ T668] F2FS-fs (loop0): Found nat_bits in checkpoint [ 47.941648][ T668] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 47.951538][ T668] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 48.179990][ T686] overlayfs: workdir and upperdir must reside under the same mount [ 48.246959][ T15] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 48.516974][ T15] usb 5-1: Using ep0 maxpacket: 16 [ 48.637019][ T15] usb 5-1: config 0 has no interfaces? [ 48.817046][ T15] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 48.827932][ T15] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.836521][ T15] usb 5-1: Product: syz [ 48.841243][ T15] usb 5-1: Manufacturer: syz [ 48.845964][ T15] usb 5-1: SerialNumber: syz [ 48.852484][ T15] usb 5-1: config 0 descriptor?? [ 49.127036][ T25] usb 3-1: 0:2 : does not exist [ 49.157093][ T25] usb 3-1: USB disconnect, device number 2 [ 49.528111][ T714] EXT4-fs (loop0): Test dummy encryption mode enabled [ 49.538220][ T714] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue [ 49.551121][ T714] ext4 filesystem being mounted at /23/mnt supports timestamps until 2038 (0x7fffffff) [ 50.177930][ T721] EXT4-fs (loop3): Ignoring removed bh option [ 50.189249][ T721] EXT4-fs (loop3): mounted filesystem without journal. Opts: bh,,errors=continue [ 50.440060][ T25] usb 5-1: USB disconnect, device number 2 [ 50.558107][ T732] EXT4-fs (loop4): Test dummy encryption mode enabled [ 50.566485][ T732] EXT4-fs (loop4): can't mount with commit=6, fs mounted w/o journal [ 51.059214][ T732] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 51.069563][ T732] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 51.094111][ T732] F2FS-fs (loop4): invalid crc value [ 51.102430][ T732] F2FS-fs (loop4): Found nat_bits in checkpoint [ 51.130876][ T732] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 51.140876][ T732] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 51.385710][ T24] kauditd_printk_skb: 3 callbacks suppressed [ 51.385721][ T24] audit: type=1400 audit(1729715054.440:207): avc: denied { write } for pid=731 comm="syz.4.93" name="vga_arbiter" dev="devtmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 51.430470][ T24] audit: type=1400 audit(1729715054.440:208): avc: denied { open } for pid=731 comm="syz.4.93" path="/dev/vga_arbiter" dev="devtmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 51.891172][ T48] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 51.904787][ T48] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 51.907012][ T290] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 52.120051][ T24] audit: type=1400 audit(1729715055.170:209): avc: denied { create } for pid=755 comm="syz.1.98" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 52.217185][ T290] usb 4-1: Using ep0 maxpacket: 16 [ 52.347581][ T290] usb 4-1: config 0 has no interfaces? [ 52.351983][ T24] audit: type=1400 audit(1729715055.170:210): avc: denied { write } for pid=755 comm="syz.1.98" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 52.489722][ T760] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 52.498119][ T760] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 52.508556][ T760] F2FS-fs (loop4): invalid crc value [ 52.516787][ T760] F2FS-fs (loop4): Found nat_bits in checkpoint [ 52.543039][ T760] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 52.553755][ T760] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 52.577063][ T290] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 52.588216][ T290] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.597945][ T290] usb 4-1: Product: syz [ 52.602726][ T290] usb 4-1: Manufacturer: syz [ 52.608132][ T290] usb 4-1: SerialNumber: syz [ 52.614722][ T290] usb 4-1: config 0 descriptor?? [ 52.780685][ T772] overlayfs: workdir and upperdir must reside under the same mount [ 53.149354][ T777] EXT4-fs (loop4): Test dummy encryption mode enabled [ 53.159882][ T777] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue [ 53.173828][ T777] ext4 filesystem being mounted at /6/mnt supports timestamps until 2038 (0x7fffffff) [ 53.798219][ T789] EXT4-fs (loop1): Ignoring removed bh option [ 53.819653][ T789] EXT4-fs (loop1): mounted filesystem without journal. Opts: bh,,errors=continue [ 54.202985][ T319] usb 4-1: USB disconnect, device number 2 [ 54.714439][ T808] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.725211][ T808] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.733642][ T808] device bridge_slave_0 entered promiscuous mode [ 54.747325][ T808] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.756182][ T808] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.764926][ T808] device bridge_slave_1 entered promiscuous mode [ 54.920251][ T808] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.929088][ T808] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.938739][ T808] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.946809][ T808] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.334112][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.342602][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.353549][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.373328][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.382658][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.401716][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.411117][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.431977][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.440613][ T319] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 55.450423][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.462482][ T808] device veth0_vlan entered promiscuous mode [ 55.469945][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.478879][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.490240][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.501235][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.507872][ T824] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 55.522631][ T824] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 55.535178][ T824] F2FS-fs (loop3): invalid crc value [ 55.541101][ T808] device veth1_macvtap entered promiscuous mode [ 55.549021][ T824] F2FS-fs (loop3): Found nat_bits in checkpoint [ 55.558619][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.567735][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.577769][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 55.586481][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 55.586608][ T824] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 55.596136][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 55.605620][ T824] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 55.616198][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 55.647196][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 55.767250][ T319] usb 5-1: device descriptor read/64, error -71 [ 55.829021][ T7] device bridge_slave_1 left promiscuous mode [ 55.839488][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.849723][ T7] device bridge_slave_0 left promiscuous mode [ 55.859446][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.859846][ T836] overlayfs: workdir and upperdir must reside under the same mount [ 55.879130][ T7] device veth1_macvtap left promiscuous mode [ 55.885855][ T7] device veth0_vlan left promiscuous mode [ 56.176987][ T319] usb 5-1: device descriptor read/64, error -71 [ 56.447845][ T319] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 56.608343][ T841] EXT4-fs (loop1): Test dummy encryption mode enabled [ 56.618249][ T841] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue [ 56.630027][ T841] ext4 filesystem being mounted at /15/mnt supports timestamps until 2038 (0x7fffffff) [ 56.756958][ T319] usb 5-1: device descriptor read/64, error -71 [ 57.189260][ T319] usb 5-1: device descriptor read/64, error -71 [ 57.364219][ T856] netlink: 16 bytes leftover after parsing attributes in process `syz.0.118'. [ 57.576661][ T24] audit: type=1400 audit(1729715060.420:211): avc: denied { ioctl } for pid=852 comm="syz.0.118" path="socket:[17892]" dev="sockfs" ino=17892 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 57.675028][ T319] usb usb5-port1: attempt power cycle [ 57.823285][ T308] Bluetooth: hci0: command 0x1003 tx timeout [ 57.839662][ T358] Bluetooth: hci0: sending frame failed (-49) [ 57.957894][ T860] EXT4-fs (loop1): Ignoring removed bh option [ 58.000980][ T860] EXT4-fs (loop1): mounted filesystem without journal. Opts: bh,,errors=continue [ 58.596952][ T308] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 58.699148][ T877] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 58.707561][ T877] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 58.717390][ T877] F2FS-fs (loop0): invalid crc value [ 58.724762][ T877] F2FS-fs (loop0): Found nat_bits in checkpoint [ 58.749442][ T877] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 58.757608][ T877] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 58.847126][ T308] usb 4-1: Using ep0 maxpacket: 8 [ 58.987291][ T308] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 59.001320][ T892] overlayfs: workdir and upperdir must reside under the same mount [ 59.003929][ T308] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 59.026691][ T308] usb 4-1: New USB device found, idVendor=0757, idProduct=0a00, bcdDevice= 0.00 [ 59.037393][ T308] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.055951][ T308] usb 4-1: config 0 descriptor?? [ 59.298364][ T24] audit: type=1400 audit(1729715062.360:212): avc: denied { mounton } for pid=868 comm="syz.3.122" path="/proc/81/task" dev="proc" ino=17983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 59.336232][ T24] audit: type=1400 audit(1729715062.390:213): avc: denied { create } for pid=868 comm="syz.3.122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 59.657014][ T308] usbhid 4-1:0.0: can't add hid device: -71 [ 59.663568][ T308] usbhid: probe of 4-1:0.0 failed with error -71 [ 59.671449][ T308] usb 4-1: USB disconnect, device number 3 [ 59.740173][ T898] EXT4-fs (loop4): Test dummy encryption mode enabled [ 59.757467][ T898] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue [ 59.770220][ T898] ext4 filesystem being mounted at /14/mnt supports timestamps until 2038 (0x7fffffff) [ 59.887012][ T388] Bluetooth: hci0: command 0x1001 tx timeout [ 59.931243][ T358] Bluetooth: hci0: sending frame failed (-49) [ 60.315182][ T916] netlink: 16 bytes leftover after parsing attributes in process `syz.3.133'. [ 60.939182][ T24] audit: type=1400 audit(1729715063.990:214): avc: denied { write open } for pid=918 comm="syz.1.134" path=2F31392FE91F7189591E9233614B2F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 dev="loop1" ino=1048603 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 61.934522][ T24] audit: type=1326 audit(1729715064.990:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=932 comm="syz.0.137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1530b2ff9 code=0x7ffc0000 [ 61.962202][ T24] audit: type=1326 audit(1729715064.990:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=932 comm="syz.0.137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1530b2ff9 code=0x7ffc0000 [ 61.991220][ T928] Bluetooth: hci0: command 0x1009 tx timeout [ 61.998898][ T24] audit: type=1326 audit(1729715064.990:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=932 comm="syz.0.137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe1530b2ff9 code=0x7ffc0000 [ 62.028488][ T24] audit: type=1326 audit(1729715064.990:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=932 comm="syz.0.137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1530b2ff9 code=0x7ffc0000 [ 62.056453][ T24] audit: type=1326 audit(1729715064.990:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=932 comm="syz.0.137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1530b2ff9 code=0x7ffc0000 [ 62.083715][ T24] audit: type=1326 audit(1729715064.990:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=932 comm="syz.0.137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe1530b2ff9 code=0x7ffc0000 [ 62.118319][ T930] EXT4-fs (loop3): Ignoring removed bh option [ 62.178304][ T930] EXT4-fs (loop3): mounted filesystem without journal. Opts: bh,,errors=continue [ 62.787025][ T24] kauditd_printk_skb: 59 callbacks suppressed [ 62.787039][ T24] audit: type=1326 audit(1729715065.840:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=932 comm="syz.0.137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1530b2ff9 code=0x7ffc0000 [ 62.828089][ T24] audit: type=1326 audit(1729715065.840:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=932 comm="syz.0.137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1530b2ff9 code=0x7ffc0000 [ 63.177310][ T962] F2FS-fs (loop1): invalid crc value [ 63.245367][ T962] F2FS-fs (loop1): Found nat_bits in checkpoint [ 63.313680][ T962] F2FS-fs (loop1): Cannot turn on quotas: -2 on 1 [ 63.326496][ T962] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 63.903538][ T977] netlink: 16 bytes leftover after parsing attributes in process `syz.0.146'. [ 64.103113][ T508] attempt to access beyond end of device [ 64.103113][ T508] loop1: rw=2049, want=45104, limit=40427 [ 64.551541][ T24] audit: type=1400 audit(1729715067.610:282): avc: denied { mount } for pid=985 comm="syz.1.150" name="/" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 64.592147][ T24] audit: type=1400 audit(1729715067.650:283): avc: denied { unmount } for pid=508 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 64.618703][ T928] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 64.888118][ T1000] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 64.897646][ T928] usb 5-1: Using ep0 maxpacket: 8 [ 64.907042][ T1000] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 64.919243][ T1000] F2FS-fs (loop0): invalid crc value [ 64.934827][ T1000] F2FS-fs (loop0): Found nat_bits in checkpoint [ 64.981890][ T1000] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 64.990987][ T1000] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 65.017105][ T928] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 65.147304][ T928] usb 5-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 65.169150][ T928] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 65.181350][ T928] usb 5-1: SerialNumber: syz [ 65.195206][ T928] usb 5-1: config 0 descriptor?? [ 65.240882][ T928] uvcvideo: Found UVC 0.00 device (05ac:8501) [ 65.302885][ T1011] overlayfs: workdir and upperdir must reside under the same mount [ 65.778314][ T1017] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 66.048620][ T1037] netlink: 8 bytes leftover after parsing attributes in process `syz.3.163'. [ 66.340507][ T1029] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.352557][ T1033] FAT-fs (loop0): Unrecognized mount option "uni_xlate90" or missing value [ 66.382806][ T1029] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.405178][ T1029] device bridge_slave_0 entered promiscuous mode [ 66.417399][ T1029] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.425945][ T1029] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.433496][ T1029] device bridge_slave_1 entered promiscuous mode [ 66.489780][ T1029] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.499107][ T1029] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.507373][ T1029] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.515302][ T1029] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.536651][ T24] audit: type=1400 audit(1729715069.590:284): avc: denied { bind } for pid=1032 comm="syz.0.159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 66.578356][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.590087][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.592317][ T24] audit: type=1400 audit(1729715069.590:285): avc: denied { listen } for pid=1032 comm="syz.0.159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 66.663925][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.675366][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.695558][ T24] audit: type=1400 audit(1729715069.600:286): avc: denied { connect } for pid=1032 comm="syz.0.159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 66.729675][ T24] audit: type=1400 audit(1729715069.600:287): avc: denied { setopt } for pid=1032 comm="syz.0.159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 66.769751][ T426] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.786807][ T426] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.807253][ T426] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.814727][ T426] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.824654][ T426] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.837449][ T426] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.857141][ T426] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.864637][ T426] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.903323][ T426] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.918442][ T426] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.927899][ T1059] fuse: Bad value for 'rootmode' [ 66.937488][ T24] audit: type=1400 audit(1729715070.000:288): avc: denied { remove_name } for pid=77 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 66.963322][ T426] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.973997][ T426] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.983285][ T24] audit: type=1400 audit(1729715070.000:289): avc: denied { rename } for pid=77 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 67.017620][ T1052] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 67.030224][ T1052] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 67.045048][ T1052] F2FS-fs (loop0): invalid crc value [ 67.057954][ T426] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.068587][ T426] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.081336][ T1052] F2FS-fs (loop0): Found nat_bits in checkpoint [ 67.093951][ T1029] device veth0_vlan entered promiscuous mode [ 67.101148][ T426] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.110827][ T426] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.122146][ T426] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.129415][ T1052] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 67.135096][ T1057] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 67.141174][ T1052] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 67.161260][ T426] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.162032][ T1057] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 67.187000][ T1057] F2FS-fs (loop3): invalid crc value [ 67.197169][ T426] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.207685][ T426] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.220112][ T1029] device veth1_macvtap entered promiscuous mode [ 67.229514][ T1057] F2FS-fs (loop3): Found nat_bits in checkpoint [ 67.250447][ T426] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.261927][ T426] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.276085][ T426] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.282466][ T1057] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 67.295569][ T1057] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 67.306541][ T426] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.317542][ T426] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.404640][ T1075] overlayfs: workdir and upperdir must reside under the same mount [ 67.447676][ T48] device bridge_slave_1 left promiscuous mode [ 67.456384][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.477509][ T48] device bridge_slave_0 left promiscuous mode [ 67.497026][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.515418][ T48] device veth1_macvtap left promiscuous mode [ 67.529361][ T48] device veth0_vlan left promiscuous mode [ 67.538748][ T1077] overlayfs: workdir and upperdir must reside under the same mount [ 67.699673][ T1074] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 67.724017][ T1074] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 67.745816][ T1074] F2FS-fs (loop2): invalid crc value [ 67.782573][ T1074] F2FS-fs (loop2): Found nat_bits in checkpoint [ 67.847006][ T928] uvcvideo: Failed to query (GET_INFO) UVC control 3 on unit 0: -71 (exp. 1). [ 67.856845][ T928] uvcvideo: No valid video chain found. [ 67.893760][ T928] usb 5-1: USB disconnect, device number 6 [ 67.906880][ T1074] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 67.915469][ T1074] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 68.303456][ T1088] overlayfs: workdir and upperdir must reside under the same mount [ 69.025185][ T1108] netlink: 8 bytes leftover after parsing attributes in process `syz.4.179'. [ 69.368959][ T1111] F2FS-fs (loop0): invalid crc value [ 69.377634][ T1111] F2FS-fs (loop0): Found nat_bits in checkpoint [ 69.409066][ T1111] F2FS-fs (loop0): Cannot turn on quotas: -2 on 1 [ 69.417982][ T1111] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 69.612254][ T1121] FAULT_INJECTION: forcing a failure. [ 69.612254][ T1121] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 69.626997][ T1121] CPU: 1 PID: 1121 Comm: syz.2.182 Not tainted 5.10.226-syzkaller-00709-ge5e5644ea27f #0 [ 69.639531][ T1121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 69.651699][ T1121] Call Trace: [ 69.656901][ T1121] dump_stack_lvl+0x1e2/0x24b [ 69.662238][ T1121] ? bfq_pos_tree_add_move+0x43b/0x43b [ 69.668301][ T1121] dump_stack+0x15/0x17 [ 69.672640][ T1121] should_fail+0x3c6/0x510 [ 69.676950][ T1121] should_fail_usercopy+0x1a/0x20 [ 69.682147][ T1121] _copy_to_user+0x20/0x90 [ 69.687861][ T1121] simple_read_from_buffer+0xc7/0x150 [ 69.694380][ T1121] proc_fail_nth_read+0x1a3/0x210 [ 69.699924][ T1121] ? proc_fault_inject_write+0x390/0x390 [ 69.709301][ T1121] ? security_file_permission+0x86/0xb0 [ 69.715976][ T1121] ? rw_verify_area+0x1c3/0x360 [ 69.721765][ T1121] ? proc_fault_inject_write+0x390/0x390 [ 69.727803][ T1121] vfs_read+0x200/0xba0 [ 69.732640][ T1121] ? __kasan_check_read+0x11/0x20 [ 69.737746][ T1121] ? preempt_schedule_notrace+0x140/0x140 [ 69.744322][ T1121] ? kernel_read+0x70/0x70 [ 69.749368][ T1121] ? irqentry_exit+0x4f/0x60 [ 69.754511][ T1121] ? sysvec_reschedule_ipi+0x83/0x160 [ 69.760381][ T1121] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 69.766554][ T1121] ? ksys_read+0xfd/0x2c0 [ 69.771839][ T1121] ksys_read+0x199/0x2c0 [ 69.776393][ T1121] ? vfs_write+0xe70/0xe70 [ 69.781811][ T1121] ? fpu__clear_all+0x20/0x20 [ 69.787105][ T1121] ? __kasan_check_read+0x11/0x20 [ 69.794046][ T1121] __x64_sys_read+0x7b/0x90 [ 69.799039][ T1121] do_syscall_64+0x34/0x70 [ 69.803789][ T1121] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 69.809969][ T1121] RIP: 0033:0x7fe442e69a3c [ 69.814473][ T1121] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 69.836002][ T1121] RSP: 002b:00007fe441aa2030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 69.845953][ T1121] RAX: ffffffffffffffda RBX: 00007fe443023130 RCX: 00007fe442e69a3c [ 69.856163][ T1121] RDX: 000000000000000f RSI: 00007fe441aa20a0 RDI: 000000000000000a [ 69.865402][ T1121] RBP: 00007fe441aa2090 R08: 0000000000000000 R09: 0000000000000000 [ 69.876144][ T1121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 69.886274][ T1121] R13: 0000000000000000 R14: 00007fe443023130 R15: 00007ffc26539a48 [ 70.740235][ T308] Bluetooth: hci0: command 0x1003 tx timeout [ 70.746730][ T358] Bluetooth: hci0: sending frame failed (-49) [ 70.908241][ T416] attempt to access beyond end of device [ 70.908241][ T416] loop0: rw=2049, want=45104, limit=40427 [ 71.141188][ T1137] incfs_lookup_dentry err:-5 [ 71.147449][ T1137] incfs: Can't find or create .index dir in ./file0 [ 71.156450][ T1137] incfs: mount failed -5 [ 71.374795][ T24] kauditd_printk_skb: 2 callbacks suppressed [ 71.374808][ T24] audit: type=1400 audit(1729715074.430:292): avc: denied { bind } for pid=1140 comm="syz.0.189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 72.517935][ T1156] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 72.528059][ T1156] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.193: bad orphan inode 1 [ 72.541087][ T1156] EXT4-fs (loop2): mounted filesystem without journal. Opts: minixdf,i_version,usrquota,min_batch_time=0x0000000000000005,nomblk_io_submit,lazytime,jqfmt=vfsold,,errors=continue [ 72.772922][ T24] audit: type=1400 audit(1729715075.800:293): avc: denied { write } for pid=1155 comm="syz.2.193" name="bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 72.896041][ T24] audit: type=1400 audit(1729715075.800:294): avc: denied { add_name } for pid=1155 comm="syz.2.193" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 72.908210][ T290] Bluetooth: hci0: command 0x1001 tx timeout [ 72.927709][ T24] audit: type=1400 audit(1729715075.820:295): avc: denied { setattr } for pid=1155 comm="syz.2.193" name="work" dev="loop2" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 72.944678][ T358] Bluetooth: hci0: sending frame failed (-49) [ 72.951638][ T24] audit: type=1400 audit(1729715075.820:296): avc: denied { remove_name } for pid=1155 comm="syz.2.193" name="#d" dev="loop2" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 72.986331][ T24] audit: type=1400 audit(1729715075.820:297): avc: denied { rename } for pid=1155 comm="syz.2.193" name="#d" dev="loop2" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 73.016080][ T24] audit: type=1400 audit(1729715075.830:298): avc: denied { unlink } for pid=1155 comm="syz.2.193" name="#d" dev="loop2" ino=24 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 73.041259][ T24] audit: type=1400 audit(1729715075.830:299): avc: denied { unlink } for pid=1155 comm="syz.2.193" name="#e" dev="loop2" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 73.069320][ T24] audit: type=1400 audit(1729715075.890:300): avc: denied { create } for pid=1155 comm="syz.2.193" name="#f" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 73.094331][ T24] audit: type=1400 audit(1729715075.890:301): avc: denied { link } for pid=1155 comm="syz.2.193" name="#f" dev="loop2" ino=24 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 73.455565][ T1169] netlink: 8 bytes leftover after parsing attributes in process `syz.0.195'. [ 73.508486][ T1029] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 21: comm syz-executor: path /9/file0/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=64815104, rec_len=1024, size=1024 fake=0 [ 73.539442][ T1029] EXT4-fs error (device loop2): ext4_empty_dir:3113: inode #11: block 21: comm syz-executor: bad entry in directory: inode out of bounds - offset=7168, inode=64815104, rec_len=1024, size=1024 fake=0 [ 73.566193][ T1029] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 21: comm syz-executor: path /9/file0/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=64815104, rec_len=1024, size=1024 fake=0 [ 73.592001][ T1029] EXT4-fs error (device loop2): ext4_empty_dir:3113: inode #11: block 21: comm syz-executor: bad entry in directory: inode out of bounds - offset=7168, inode=64815104, rec_len=1024, size=1024 fake=0 [ 73.615011][ T1029] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 21: comm syz-executor: path /9/file0/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=64815104, rec_len=1024, size=1024 fake=0 [ 73.642284][ T1029] EXT4-fs error (device loop2): ext4_empty_dir:3113: inode #11: block 21: comm syz-executor: bad entry in directory: inode out of bounds - offset=7168, inode=64815104, rec_len=1024, size=1024 fake=0 [ 73.667588][ T1029] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 21: comm syz-executor: path /9/file0/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=64815104, rec_len=1024, size=1024 fake=0 [ 73.696217][ T1029] EXT4-fs error (device loop2): ext4_empty_dir:3113: inode #11: block 21: comm syz-executor: bad entry in directory: inode out of bounds - offset=7168, inode=64815104, rec_len=1024, size=1024 fake=0 [ 73.720858][ T1029] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 21: comm syz-executor: path /9/file0/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=64815104, rec_len=1024, size=1024 fake=0 [ 73.753521][ T1029] EXT4-fs error (device loop2): ext4_empty_dir:3113: inode #11: block 21: comm syz-executor: bad entry in directory: inode out of bounds - offset=7168, inode=64815104, rec_len=1024, size=1024 fake=0 [ 73.850711][ T1173] incfs_lookup_dentry err:-5 [ 73.855898][ T1173] incfs: Can't find or create .index dir in ./file0 [ 73.864337][ T1173] incfs: mount failed -5 [ 73.987726][ T1179] exFAT-fs (loop4): Invalid boot checksum (boot checksum : 0x000a48d0, checksum : 0x1119abd0) [ 74.002329][ T1179] exFAT-fs (loop4): invalid boot region [ 74.009580][ T1179] exFAT-fs (loop4): failed to recognize exfat type [ 74.025707][ T1181] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.034205][ T1181] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.043629][ T1181] device bridge_slave_0 entered promiscuous mode [ 74.052272][ T1181] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.060290][ T1181] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.069792][ T1181] device bridge_slave_1 entered promiscuous mode [ 74.121895][ T1181] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.129703][ T1181] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.138077][ T1181] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.146056][ T1181] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.165404][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.173258][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.182717][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.216313][ T1179] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 74.227580][ T426] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.236104][ T426] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.243729][ T426] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.253586][ T426] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.264094][ T426] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.272667][ T426] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.291028][ T426] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.301641][ T426] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.319662][ T426] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.343190][ T1181] device veth0_vlan entered promiscuous mode [ 74.351748][ T426] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.357944][ T1189] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #16: comm syz.0.204: casefold flag without casefold feature [ 74.362202][ T426] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.377472][ T1189] EXT4-fs error (device loop0) in ext4_do_update_inode:5303: error 27 [ 74.386452][ T426] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.396305][ T1189] EXT4-fs error (device loop0): ext4_dirty_inode:6107: inode #3: comm syz.0.204: mark_inode_dirty error [ 74.416318][ T1189] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.204: bg 0: block 64: padding at end of block bitmap is not set [ 74.433036][ T1189] EXT4-fs error (device loop0): ext4_acquire_dquot:6219: comm syz.0.204: Failed to acquire dquot type 0 [ 74.446814][ T1189] EXT4-fs (loop0): 1 truncate cleaned up [ 74.452982][ T1189] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 74.464163][ T1189] ext4 filesystem being mounted at /54/file1 supports timestamps until 2038 (0x7fffffff) [ 74.554374][ T426] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.593473][ T1181] device veth1_macvtap entered promiscuous mode [ 74.619077][ T426] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.635145][ T426] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.660529][ T48] device bridge_slave_1 left promiscuous mode [ 74.676287][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.724089][ T48] device bridge_slave_0 left promiscuous mode [ 74.739039][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.760057][ T48] device veth1_macvtap left promiscuous mode [ 74.776349][ T48] device veth0_vlan left promiscuous mode [ 75.027962][ T290] Bluetooth: hci0: command 0x1009 tx timeout [ 75.058054][ T1199] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 75.068296][ T1199] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 75.109315][ T1199] F2FS-fs (loop2): Found nat_bits in checkpoint [ 75.209076][ T1199] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 75.217876][ T1199] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 75.222719][ T1208] EXT4-fs (loop4): Ignoring removed bh option [ 75.254409][ T1208] EXT4-fs (loop4): mounted filesystem without journal. Opts: bh,,errors=continue [ 75.812529][ T1235] netlink: 8 bytes leftover after parsing attributes in process `syz.0.212'. [ 76.180590][ T1238] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 76.189271][ T1238] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 76.201738][ T1238] F2FS-fs (loop4): invalid crc value [ 76.211503][ T1238] F2FS-fs (loop4): Found nat_bits in checkpoint [ 76.236010][ T1238] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 76.244871][ T1238] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 76.307923][ T1238] overlayfs: workdir and upperdir must reside under the same mount [ 76.597123][ T1250] FAT-fs (loop0): Unrecognized mount option "" or missing value [ 76.842810][ T24] kauditd_printk_skb: 13 callbacks suppressed [ 76.843823][ T24] audit: type=1400 audit(1729715079.890:313): avc: denied { create } for pid=1249 comm="syz.0.216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 77.376292][ T1258] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.386298][ T1258] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.397078][ T1258] device bridge_slave_0 entered promiscuous mode [ 77.414728][ T1258] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.424205][ T1258] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.432894][ T1258] device bridge_slave_1 entered promiscuous mode [ 77.453113][ T24] audit: type=1400 audit(1729715080.510:314): avc: denied { watch watch_reads } for pid=1266 comm="syz.0.221" path="/62" dev="tmpfs" ino=368 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 77.495724][ T1267] exFAT-fs (loop0): error, invalid access to FAT (entry 0x00000005) bogus content (0x00000001) [ 77.500362][ T1258] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.509965][ T1267] exFAT-fs (loop0): failed to load upcase table [ 77.518050][ T1258] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.518179][ T1258] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.525905][ T1267] exFAT-fs (loop0): failed to recognize exfat type [ 77.534300][ T1258] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.556362][ T426] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 77.569240][ T426] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.576789][ T426] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.600926][ T426] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 77.611188][ T426] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.619295][ T426] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.628862][ T426] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 77.639657][ T426] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.648330][ T426] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.657792][ T426] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 77.668261][ T426] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 77.678861][ T426] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 77.712744][ T1258] device veth0_vlan entered promiscuous mode [ 77.723440][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 77.734221][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 77.742817][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 77.757633][ T1273] EXT4-fs (loop4): Ignoring removed bh option [ 77.771369][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 77.782735][ T1273] EXT4-fs (loop4): mounted filesystem without journal. Opts: bh,,errors=continue [ 77.782766][ T1258] device veth1_macvtap entered promiscuous mode [ 77.810459][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.822333][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 78.332653][ T7] device bridge_slave_1 left promiscuous mode [ 78.340991][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.353193][ T7] device bridge_slave_0 left promiscuous mode [ 78.361851][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.380430][ T7] device veth1_macvtap left promiscuous mode [ 78.388106][ T7] device veth0_vlan left promiscuous mode [ 78.693624][ T1293] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.702398][ T1293] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.711250][ T1293] device bridge_slave_0 entered promiscuous mode [ 78.720955][ T1293] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.729321][ T1293] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.739654][ T1293] device bridge_slave_1 entered promiscuous mode [ 78.791575][ T1298] netlink: 8 bytes leftover after parsing attributes in process `syz.2.226'. [ 79.104647][ T1293] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.113510][ T1293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.121542][ T1293] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.130160][ T1293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.189351][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 79.199381][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.210233][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.248273][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 79.259758][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.267919][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.280358][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 79.301734][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.309535][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.336392][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 79.344853][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 79.372930][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 79.389508][ T1293] device veth0_vlan entered promiscuous mode [ 79.398190][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 79.407756][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 79.416434][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 79.438562][ T1293] device veth1_macvtap entered promiscuous mode [ 79.475768][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 79.498487][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 79.509950][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 79.552304][ T1321] fuse: Bad value for 'rootmode' [ 79.798913][ T1318] F2FS-fs (loop2): Invalid segment/section count (31 != 24 * 1) [ 79.807105][ T1318] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 79.828240][ T7] device bridge_slave_1 left promiscuous mode [ 79.835657][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.843775][ T1318] F2FS-fs (loop2): invalid crc value [ 79.849731][ T7] device bridge_slave_0 left promiscuous mode [ 79.856375][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.864848][ T1318] F2FS-fs (loop2): Found nat_bits in checkpoint [ 79.873168][ T7] device veth1_macvtap left promiscuous mode [ 79.880522][ T7] device veth0_vlan left promiscuous mode [ 79.958174][ T1318] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 79.965774][ T1318] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 80.067614][ T1318] tipc: Started in network mode [ 80.073539][ T1318] tipc: Own node identity 00000000000000000000000000000001, cluster identity 4711 [ 80.084800][ T1318] tipc: New replicast peer: dc80:0000:003f:e1f9:9800:0000:0000:00bb [ 80.093679][ T1318] tipc: Enabled bearer , priority 10 [ 80.138909][ T1328] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 80.982957][ T24] audit: type=1326 audit(1729715084.040:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1350 comm="syz.1.242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f626906dff9 code=0x7ffc0000 [ 81.012542][ T24] audit: type=1326 audit(1729715084.040:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1350 comm="syz.1.242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f626906dff9 code=0x7ffc0000 [ 81.040768][ T24] audit: type=1326 audit(1729715084.040:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1350 comm="syz.1.242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f626906c990 code=0x7ffc0000 [ 81.071818][ T24] audit: type=1326 audit(1729715084.080:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1350 comm="syz.1.242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f626906dff9 code=0x7ffc0000 [ 81.102607][ T928] tipc: 32-bit node address hash set to 1000000 [ 81.102829][ T24] audit: type=1326 audit(1729715084.080:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1350 comm="syz.1.242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f626906dff9 code=0x7ffc0000 [ 81.137169][ T24] audit: type=1326 audit(1729715084.080:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1350 comm="syz.1.242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f626906dff9 code=0x7ffc0000 [ 81.164599][ T24] audit: type=1326 audit(1729715084.080:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1350 comm="syz.1.242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f626906dff9 code=0x7ffc0000 [ 81.190378][ T24] audit: type=1326 audit(1729715084.080:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1350 comm="syz.1.242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f626906dff9 code=0x7ffc0000 [ 81.538466][ T1356] netlink: 8 bytes leftover after parsing attributes in process `syz.2.243'. [ 82.254847][ T1358] fuse: Bad value for 'rootmode' [ 82.398990][ T1360] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 83.087240][ T15] Bluetooth: hci0: command 0x1003 tx timeout [ 83.095638][ T358] Bluetooth: hci0: sending frame failed (-49) [ 83.397065][ T15] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 83.657062][ T928] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 83.657171][ T15] usb 1-1: Using ep0 maxpacket: 16 [ 83.797116][ T15] usb 1-1: config 0 has no interfaces? [ 83.897104][ T928] usb 5-1: Using ep0 maxpacket: 16 [ 84.017106][ T928] usb 5-1: config 0 has no interfaces? [ 84.017137][ T15] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 84.034822][ T15] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.044668][ T15] usb 1-1: Product: syz [ 84.049355][ T15] usb 1-1: Manufacturer: syz [ 84.054467][ T15] usb 1-1: SerialNumber: syz [ 84.060679][ T15] usb 1-1: config 0 descriptor?? [ 84.177092][ T928] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 84.187634][ T928] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.197375][ T928] usb 5-1: Product: syz [ 84.202483][ T928] usb 5-1: Manufacturer: syz [ 84.209022][ T928] usb 5-1: SerialNumber: syz [ 84.215109][ T928] usb 5-1: config 0 descriptor?? [ 85.167123][ T25] Bluetooth: hci0: command 0x1001 tx timeout [ 85.174214][ T358] Bluetooth: hci0: sending frame failed (-49) [ 85.957812][ T25] usb 1-1: USB disconnect, device number 2 [ 86.108007][ T1381] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 86.117242][ T1381] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 86.130800][ T1381] F2FS-fs (loop0): invalid crc value [ 86.138770][ T1381] F2FS-fs (loop0): Found nat_bits in checkpoint [ 86.163101][ T1381] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 86.170842][ T1381] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 86.236062][ T25] usb 5-1: USB disconnect, device number 7 [ 86.486626][ T1390] overlayfs: workdir and upperdir must reside under the same mount [ 86.702209][ T1388] F2FS-fs (loop4): invalid crc value [ 86.709656][ T1388] F2FS-fs (loop4): Found nat_bits in checkpoint [ 86.737303][ T1388] F2FS-fs (loop4): Cannot turn on quotas: -2 on 1 [ 86.744740][ T1388] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 87.186535][ T612] attempt to access beyond end of device [ 87.186535][ T612] loop4: rw=2049, want=45104, limit=40427 [ 87.247379][ T25] Bluetooth: hci0: command 0x1009 tx timeout [ 87.412937][ T1406] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 88.408637][ T1416] FAT-fs (loop0): Unrecognized mount option "shortname=win95.check=strict" or missing value [ 88.480481][ T1416] input: syz0 as /devices/virtual/input/input5 [ 88.806991][ T25] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 89.177099][ T25] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 89.188019][ T25] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 89.200220][ T25] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 89.377076][ T25] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 89.388553][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.399913][ T25] usb 1-1: Product: syz [ 89.404771][ T25] usb 1-1: Manufacturer: syz [ 89.410273][ T25] usb 1-1: SerialNumber: syz [ 90.452263][ T1427] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.461133][ T1427] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.471266][ T1427] device bridge_slave_0 entered promiscuous mode [ 90.482550][ T1427] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.492711][ T1427] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.502072][ T1427] device bridge_slave_1 entered promiscuous mode [ 90.542398][ T1427] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.552069][ T1427] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.560641][ T1427] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.568562][ T1427] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.592014][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 90.600705][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.610430][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.622680][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 90.631882][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.641283][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.652012][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 90.660915][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.668975][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.687561][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 90.699060][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 90.714989][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 90.729274][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 90.740029][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 90.748495][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 90.760765][ T1427] device veth0_vlan entered promiscuous mode [ 90.772385][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 90.782602][ T1427] device veth1_macvtap entered promiscuous mode [ 90.792967][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 90.806488][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 90.840460][ T24] kauditd_printk_skb: 24 callbacks suppressed [ 90.840475][ T24] audit: type=1400 audit(1729715093.900:347): avc: denied { map } for pid=1432 comm="syz.3.256" path="/dev/ashmem" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 90.873029][ T24] audit: type=1400 audit(1729715093.900:348): avc: denied { write } for pid=1432 comm="syz.3.256" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 90.900614][ T24] audit: type=1400 audit(1729715093.900:349): avc: denied { bind } for pid=1432 comm="syz.3.256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 90.924419][ T24] audit: type=1400 audit(1729715093.900:350): avc: denied { getopt } for pid=1432 comm="syz.3.256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 90.959153][ T1435] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 90.997844][ T426] device bridge_slave_1 left promiscuous mode [ 91.005584][ T426] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.014761][ T426] device bridge_slave_0 left promiscuous mode [ 91.021671][ T426] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.030903][ T426] device veth1_macvtap left promiscuous mode [ 91.038347][ T426] device veth0_vlan left promiscuous mode [ 91.425068][ T1442] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.433650][ T1442] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.441974][ T1442] device bridge_slave_0 entered promiscuous mode [ 91.450188][ T1442] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.458840][ T1442] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.466616][ T1442] device bridge_slave_1 entered promiscuous mode [ 91.554850][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 91.565014][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 91.603106][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 91.612294][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 91.622089][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.630229][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.639453][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 91.649769][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 91.659027][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.667696][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.676399][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 91.684899][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 91.695973][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 91.711785][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 91.728774][ T1442] device veth0_vlan entered promiscuous mode [ 91.736578][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 91.746286][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 91.755148][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 91.774854][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 91.784991][ T1442] device veth1_macvtap entered promiscuous mode [ 91.796183][ T1447] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 91.819892][ T1447] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 91.830361][ T1447] F2FS-fs (loop4): invalid crc value [ 91.843648][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 91.856582][ T1447] F2FS-fs (loop4): Found nat_bits in checkpoint [ 91.866303][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 91.953860][ T1447] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 91.961500][ T1447] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 92.090582][ T24] audit: type=1400 audit(1729715095.150:351): avc: denied { create } for pid=1449 comm="syz.3.260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 92.535597][ T1460] overlayfs: workdir and upperdir must reside under the same mount [ 92.633184][ T426] device bridge_slave_1 left promiscuous mode [ 92.641956][ T426] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.653955][ T426] device bridge_slave_0 left promiscuous mode [ 92.661130][ T426] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.714164][ T426] device veth1_macvtap left promiscuous mode [ 92.740853][ T426] device veth0_vlan left promiscuous mode [ 92.880257][ T25] usb 1-1: 0:2 : does not exist [ 92.894824][ T25] usb 1-1: USB disconnect, device number 3 [ 93.340061][ T1479] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 93.349525][ T1464] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.360741][ T1464] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.371414][ T1464] device bridge_slave_0 entered promiscuous mode [ 93.380922][ T1464] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.389390][ T1464] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.398032][ T1464] device bridge_slave_1 entered promiscuous mode [ 93.449566][ T1464] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.457702][ T1464] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.466514][ T1464] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.474102][ T1464] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.691043][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.795039][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.902299][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 93.912166][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 93.949565][ T1464] device veth0_vlan entered promiscuous mode [ 93.957739][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 93.967635][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 93.978913][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.987118][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.998259][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 94.008279][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 94.685628][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.693349][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.706256][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 94.716246][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 94.771685][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 94.781080][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 94.790189][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 94.800413][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 94.811525][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 94.820776][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 94.854495][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 94.866069][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 94.875446][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 94.885939][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 94.897974][ T1464] device veth1_macvtap entered promiscuous mode [ 95.275510][ T24] audit: type=1326 audit(1729715098.050:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1502 comm="syz.4.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a6bd6fff9 code=0x7ffc0000 [ 95.309111][ T426] tipc: Disabling bearer [ 95.322533][ T1503] cgroup: syz.4.272 (1503) created nested cgroup for controller "memory" which has incomplete hierarchy support. Nested cgroups may change behavior in the future. [ 95.393343][ T426] tipc: Left network mode [ 95.454772][ T24] audit: type=1326 audit(1729715098.050:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1502 comm="syz.4.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f9a6bd6fff9 code=0x7ffc0000 [ 95.472645][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 95.492361][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 95.502176][ T1503] cgroup: "memory" requires setting use_hierarchy to 1 on the root [ 95.511763][ T24] audit: type=1326 audit(1729715098.050:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1502 comm="syz.4.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a6bd6fff9 code=0x7ffc0000 [ 95.527135][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 95.542595][ T24] audit: type=1326 audit(1729715098.050:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1502 comm="syz.4.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f9a6bd6fff9 code=0x7ffc0000 [ 95.853899][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 95.864093][ T24] audit: type=1326 audit(1729715098.050:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1502 comm="syz.4.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a6bd6fff9 code=0x7ffc0000 [ 95.892902][ T24] audit: type=1326 audit(1729715098.050:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1502 comm="syz.4.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f9a6bd6fff9 code=0x7ffc0000 [ 95.921025][ T24] audit: type=1326 audit(1729715098.050:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1502 comm="syz.4.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a6bd6fff9 code=0x7ffc0000 [ 95.954853][ T24] audit: type=1326 audit(1729715098.050:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1502 comm="syz.4.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f9a6bd6fff9 code=0x7ffc0000 [ 95.983265][ T24] audit: type=1326 audit(1729715098.050:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1502 comm="syz.4.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a6bd6fff9 code=0x7ffc0000 [ 96.014905][ T24] audit: type=1326 audit(1729715098.050:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1502 comm="syz.4.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f9a6bd6fff9 code=0x7ffc0000 [ 96.042355][ T24] audit: type=1326 audit(1729715098.050:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1502 comm="syz.4.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a6bd6fff9 code=0x7ffc0000 [ 96.127752][ T24] audit: type=1326 audit(1729715098.050:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1502 comm="syz.4.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9a6bd6fff9 code=0x7ffc0000 [ 96.165182][ T24] audit: type=1326 audit(1729715098.050:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1502 comm="syz.4.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a6bd6fff9 code=0x7ffc0000 [ 96.195881][ T24] audit: type=1326 audit(1729715098.050:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1502 comm="syz.4.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9a6bd6fff9 code=0x7ffc0000 [ 96.591163][ T1538] FAULT_INJECTION: forcing a failure. [ 96.591163][ T1538] name failslab, interval 1, probability 0, space 0, times 1 [ 96.606617][ T1538] CPU: 0 PID: 1538 Comm: syz.3.277 Not tainted 5.10.226-syzkaller-00709-ge5e5644ea27f #0 [ 96.617778][ T1538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 96.629544][ T1538] Call Trace: [ 96.632814][ T1538] dump_stack_lvl+0x1e2/0x24b [ 96.638301][ T1538] ? bfq_pos_tree_add_move+0x43b/0x43b [ 96.644142][ T1538] dump_stack+0x15/0x17 [ 96.649154][ T1538] should_fail+0x3c6/0x510 [ 96.654189][ T1538] ? kvmalloc_node+0x82/0x130 [ 96.659572][ T1538] __should_failslab+0xa4/0xe0 [ 96.665442][ T1538] should_failslab+0x9/0x20 [ 96.670233][ T1538] __kmalloc+0x60/0x330 [ 96.674320][ T1538] kvmalloc_node+0x82/0x130 [ 96.679885][ T1538] alloc_netdev_mqs+0x8e/0xcd0 [ 96.685053][ T1538] ? ns_capable+0x89/0xe0 [ 96.690013][ T1538] ? br_dev_xmit+0xea0/0xea0 [ 96.695587][ T1538] rtnl_create_link+0x240/0x950 [ 96.698901][ T1542] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 96.701113][ T1538] rtnl_newlink+0x1399/0x2000 [ 96.701142][ T1538] ? rtnl_setlink+0x530/0x530 [ 96.721311][ T1538] ? asm_common_interrupt+0x1e/0x40 [ 96.727133][ T1538] ? memcpy+0x56/0x70 [ 96.731549][ T1538] ? cap_capable+0x1ce/0x270 [ 96.736274][ T1538] ? __kasan_check_write+0x14/0x20 [ 96.741741][ T1538] ? mutex_lock+0xa5/0x110 [ 96.746341][ T1538] ? mutex_trylock+0xa0/0xa0 [ 96.751864][ T1538] ? ns_capable+0x89/0xe0 [ 96.756805][ T1538] ? netlink_net_capable+0x125/0x160 [ 96.762989][ T1538] ? rtnl_setlink+0x530/0x530 [ 96.767683][ T1538] rtnetlink_rcv_msg+0x955/0xc50 [ 96.773116][ T1538] ? is_bpf_text_address+0x172/0x190 [ 96.778421][ T1538] ? rtnetlink_bind+0x80/0x80 [ 96.784581][ T1538] ? arch_stack_walk+0xf3/0x140 [ 96.789581][ T1538] ? stack_trace_save+0x113/0x1c0 [ 96.795422][ T1538] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 96.802614][ T1538] ? stack_trace_snprint+0xf0/0xf0 [ 96.808417][ T1538] ? avc_has_perm+0x14d/0x400 [ 96.813599][ T1538] ? memcpy+0x56/0x70 [ 96.817508][ T1538] ? avc_has_perm+0x275/0x400 [ 96.822854][ T1538] ? __kasan_slab_alloc+0xb1/0xe0 [ 96.828008][ T1538] ? slab_post_alloc_hook+0x61/0x2f0 [ 96.834259][ T1538] ? kmem_cache_alloc+0x168/0x2e0 [ 96.839882][ T1538] ? avc_has_perm_noaudit+0x240/0x240 [ 96.845182][ T1538] ? iov_iter_advance+0x258/0xb20 [ 96.850321][ T1538] netlink_rcv_skb+0x1cf/0x410 [ 96.855237][ T1538] ? rtnetlink_bind+0x80/0x80 [ 96.860033][ T1538] ? netlink_ack+0xb30/0xb30 [ 96.864530][ T1538] ? __netlink_lookup+0x37b/0x3a0 [ 96.869846][ T1538] rtnetlink_rcv+0x1c/0x20 [ 96.874269][ T1538] netlink_unicast+0x8df/0xac0 [ 96.879831][ T1538] ? netlink_detachskb+0x90/0x90 [ 96.885380][ T1538] ? security_netlink_send+0x7b/0xa0 [ 96.891614][ T1538] netlink_sendmsg+0xa46/0xd00 [ 96.897079][ T1538] ? netlink_getsockopt+0x5c0/0x5c0 [ 96.903050][ T1538] ? kmem_cache_free+0xa9/0x1e0 [ 96.907842][ T1538] ? security_socket_sendmsg+0x82/0xb0 [ 96.913597][ T1538] ? netlink_getsockopt+0x5c0/0x5c0 [ 96.919342][ T1538] ____sys_sendmsg+0x59e/0x8f0 [ 96.924447][ T1538] ? __sys_sendmsg_sock+0x40/0x40 [ 96.929396][ T1538] ? import_iovec+0xe5/0x120 [ 96.934543][ T1538] ___sys_sendmsg+0x252/0x2e0 [ 96.939231][ T1538] ? __sys_sendmsg+0x280/0x280 [ 96.944421][ T1538] ? rw_verify_area+0x1c3/0x360 [ 96.949560][ T1538] ? __fdget+0x1bc/0x240 [ 96.953937][ T1538] __se_sys_sendmsg+0x1b1/0x280 [ 96.959551][ T1538] ? __x64_sys_sendmsg+0x90/0x90 [ 96.964498][ T1538] ? ksys_write+0x260/0x2c0 [ 96.969238][ T1538] ? debug_smp_processor_id+0x17/0x20 [ 96.975450][ T1538] __x64_sys_sendmsg+0x7b/0x90 [ 96.980499][ T1538] do_syscall_64+0x34/0x70 [ 96.985334][ T1538] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 96.991979][ T1538] RIP: 0033:0x7fa4a0605ff9 [ 96.996989][ T1538] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 97.018935][ T1538] RSP: 002b:00007fa49f27f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 97.028683][ T1538] RAX: ffffffffffffffda RBX: 00007fa4a07bdf80 RCX: 00007fa4a0605ff9 [ 97.037180][ T1538] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000004 [ 97.045335][ T1538] RBP: 00007fa49f27f090 R08: 0000000000000000 R09: 0000000000000000 [ 97.054899][ T1538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 97.065005][ T1538] R13: 0000000000000000 R14: 00007fa4a07bdf80 R15: 00007fffd2e09708 [ 97.389577][ T1555] incfs: Can't find or create .index dir in ./file0 [ 97.397551][ T1555] incfs: mount failed -5 [ 97.527804][ T426] device bridge_slave_1 left promiscuous mode [ 97.530873][ T1558] FAT-fs (loop2): Unrecognized mount option "shortname=win95.check=strict" or missing value [ 97.550281][ T426] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.563389][ T426] device bridge_slave_0 left promiscuous mode [ 97.571399][ T426] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.581002][ T426] device veth1_macvtap left promiscuous mode [ 97.589695][ T426] device veth0_vlan left promiscuous mode [ 98.438266][ T1558] input: syz0 as /devices/virtual/input/input6 [ 98.582790][ T1573] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.592426][ T1573] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.604526][ T1573] device bridge_slave_0 entered promiscuous mode [ 98.612964][ T1573] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.629529][ T1573] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.719021][ T1573] device bridge_slave_1 entered promiscuous mode [ 98.966938][ T1573] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.974621][ T1573] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.984191][ T1573] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.992219][ T1573] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.024286][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 99.036310][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.047843][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.066987][ T15] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 99.077471][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 99.090087][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.098144][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.124975][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 99.134593][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.143006][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.155042][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 99.165304][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 99.186255][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 99.203420][ T1573] device veth0_vlan entered promiscuous mode [ 99.212122][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 99.223782][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 99.233157][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 99.250757][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 99.262089][ T1573] device veth1_macvtap entered promiscuous mode [ 99.275543][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 99.338463][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 99.524304][ T1593] EXT4-fs (loop3): Ignoring removed bh option [ 99.615915][ T1593] EXT4-fs (loop3): mounted filesystem without journal. Opts: bh,,errors=continue [ 99.768849][ T1587] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 99.781543][ T5] Bluetooth: hci0: command 0x1003 tx timeout [ 99.791175][ T358] Bluetooth: hci0: sending frame failed (-49) [ 99.798683][ T1587] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 99.847363][ T1587] F2FS-fs (loop0): invalid crc value [ 99.856702][ T1587] F2FS-fs (loop0): Found nat_bits in checkpoint [ 99.880657][ T1587] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 99.888828][ T1587] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 100.703343][ T1605] overlayfs: workdir and upperdir must reside under the same mount [ 100.855373][ T1608] EXT4-fs (loop3): Ignoring removed bh option [ 100.879072][ T1608] EXT4-fs (loop3): mounted filesystem without journal. Opts: bh,,errors=continue [ 100.965794][ T24] kauditd_printk_skb: 6 callbacks suppressed [ 100.987774][ T24] audit: type=1400 audit(1729715104.020:372): avc: denied { setopt } for pid=1615 comm="syz.0.293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 101.028900][ T1619] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 101.742144][ T1627] FAT-fs (loop1): Unrecognized mount option "shortname=win95.check=strict" or missing value [ 101.807804][ T290] Bluetooth: hci0: command 0x1001 tx timeout [ 101.815909][ T358] Bluetooth: hci0: sending frame failed (-49) [ 101.850738][ T1627] input: syz0 as /devices/virtual/input/input7 [ 102.187680][ T1637] EXT4-fs (loop0): Ignoring removed bh option [ 102.194640][ T1637] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 102.209228][ T1637] EXT4-fs (loop0): inodes count not valid: 32 vs 15 [ 102.347142][ T424] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 102.787300][ T424] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 102.799116][ T424] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 102.813089][ T424] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 102.997313][ T424] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 103.009177][ T424] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.019323][ T424] usb 2-1: Product: syz [ 103.024619][ T424] usb 2-1: Manufacturer: syz [ 103.030232][ T424] usb 2-1: SerialNumber: syz [ 103.580893][ T1661] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 103.592683][ T1661] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a800e11d, mo2=0002] [ 103.603277][ T1661] System zones: 0-1, 2-3, 4-36, 98-101, 102-102 [ 103.610826][ T1661] EXT4-fs (loop0): mounted filesystem without journal. Opts: nombcache,debug,norecovery,grpid,init_itable=0x0000000000000004,,errors=continue [ 103.915909][ T15] Bluetooth: hci0: command 0x1009 tx timeout [ 104.540928][ T1677] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 104.551461][ T1677] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 104.561460][ T1677] F2FS-fs (loop3): invalid crc value [ 104.570032][ T1677] F2FS-fs (loop3): Found nat_bits in checkpoint [ 104.595811][ T1677] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 104.604090][ T1677] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 105.263423][ T7] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 105.277073][ T7] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 105.438828][ T1686] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 106.345021][ T1694] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000088,resuid=0x0000000000000000,noload,lazytime,usrquota,discard,data_err=abort,,errors=continue [ 106.467119][ T424] usb 2-1: 0:2 : does not exist [ 106.474659][ T424] usb 2-1: USB disconnect, device number 2 [ 106.551296][ T1698] usb usb7: usbfs: process 1698 (syz.3.308) did not claim interface 0 before use [ 106.667166][ T24] audit: type=1400 audit(1729715109.600:373): avc: denied { write } for pid=1693 comm="syz.3.308" name="001" dev="devtmpfs" ino=157 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 106.722710][ T323] udevd[323]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 106.858510][ T24] audit: type=1400 audit(1729715109.920:374): avc: denied { write } for pid=1700 comm="syz.0.309" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 106.973089][ T1701] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.309: inode #1: comm syz.0.309: iget: illegal inode # [ 106.987960][ T1701] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.309: error while reading EA inode 1 err=-117 [ 107.005334][ T1701] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2806: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 107.024263][ T1701] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.309: inode #1: comm syz.0.309: iget: illegal inode # [ 107.043401][ T1701] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.309: error while reading EA inode 1 err=-117 [ 107.059568][ T1701] EXT4-fs (loop0): 1 orphan inode deleted [ 107.066400][ T1701] EXT4-fs (loop0): mounted filesystem without journal. Opts: usrjquota=,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,grpquota,usrjquota=,journal_dev=0x0000000000000dcc,,errors=continue [ 107.194681][ T24] audit: type=1400 audit(1729715110.250:375): avc: denied { unlink } for pid=1427 comm="syz-executor" name="file0" dev="loop3" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 107.228560][ T24] audit: type=1400 audit(1729715110.250:376): avc: denied { unlink } for pid=1427 comm="syz-executor" name="file1" dev="loop3" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 107.337560][ T1708] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.346393][ T1708] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.356726][ T1708] device bridge_slave_0 entered promiscuous mode [ 107.367901][ T1708] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.376433][ T1708] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.385641][ T1708] device bridge_slave_1 entered promiscuous mode [ 107.843084][ T1708] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.850836][ T1708] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.859144][ T1708] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.867274][ T1708] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.026185][ T1720] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.036332][ T1720] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.047315][ T1720] device bridge_slave_0 entered promiscuous mode [ 108.092831][ T1720] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.100281][ T1720] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.109054][ T1720] device bridge_slave_1 entered promiscuous mode [ 108.121668][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.132795][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.146643][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 108.155753][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 108.156352][ T1727] EXT4-fs (loop0): Unrecognized mount option "obj_role=-" or missing value [ 108.188029][ T426] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 108.197837][ T426] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.206034][ T426] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.265501][ T426] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 108.276410][ T426] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.284284][ T426] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.629294][ T426] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 108.647579][ T426] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 108.660558][ T24] audit: type=1326 audit(1729715111.720:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1731 comm="syz.3.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4a0605ff9 code=0x7ffc0000 [ 108.691062][ T24] audit: type=1326 audit(1729715111.720:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1731 comm="syz.3.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa4a0605ff9 code=0x7ffc0000 [ 108.722689][ T24] audit: type=1326 audit(1729715111.720:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1731 comm="syz.3.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4a0605ff9 code=0x7ffc0000 [ 108.748664][ T24] audit: type=1326 audit(1729715111.720:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1731 comm="syz.3.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa4a0605ff9 code=0x7ffc0000 [ 108.774438][ T24] audit: type=1326 audit(1729715111.720:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1731 comm="syz.3.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4a0605ff9 code=0x7ffc0000 [ 108.802238][ T24] audit: type=1326 audit(1729715111.720:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1731 comm="syz.3.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa4a0605ff9 code=0x7ffc0000 [ 108.831127][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 108.841506][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 108.857556][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 108.865734][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 108.879976][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 108.891097][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 108.903612][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 108.914140][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 108.924008][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.932754][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.940924][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 108.951432][ T9] device bridge_slave_1 left promiscuous mode [ 108.957976][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.966116][ T9] device bridge_slave_0 left promiscuous mode [ 108.973495][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.982731][ T9] device veth1_macvtap left promiscuous mode [ 108.993225][ T9] device veth0_vlan left promiscuous mode [ 109.087338][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 109.097507][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 109.108044][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 109.118494][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 109.129080][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.137259][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.148461][ T1708] device veth0_vlan entered promiscuous mode [ 109.169882][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 109.180972][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 109.191131][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 109.202153][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 109.212408][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 109.223061][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 109.243327][ T1708] device veth1_macvtap entered promiscuous mode [ 109.247017][ T1737] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 109.262791][ T1737] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 109.272520][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 109.273301][ T1737] F2FS-fs (loop0): invalid crc value [ 109.282290][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 109.290475][ T1737] F2FS-fs (loop0): Found nat_bits in checkpoint [ 109.299266][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 109.317046][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 109.327634][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 109.334228][ T1737] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 109.338548][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 109.346208][ T1737] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 109.365367][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 109.383814][ T1720] device veth0_vlan entered promiscuous mode [ 109.405691][ T1720] device veth1_macvtap entered promiscuous mode [ 109.417408][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 109.427925][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 109.437668][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 109.465497][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 109.474688][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 109.485538][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 109.496362][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 109.521572][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 109.534798][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 109.546154][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 109.556269][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 109.623274][ T1746] EXT4-fs (loop3): Ignoring removed bh option [ 109.664511][ T1746] EXT4-fs (loop3): mounted filesystem without journal. Opts: bh,,errors=continue [ 109.821443][ T1759] overlayfs: workdir and upperdir must reside under the same mount [ 110.218062][ T9] device bridge_slave_1 left promiscuous mode [ 110.231504][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.250793][ T9] device bridge_slave_0 left promiscuous mode [ 110.262847][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.280279][ T9] device veth1_macvtap left promiscuous mode [ 110.296112][ T9] device veth0_vlan left promiscuous mode [ 110.859964][ T1769] FAT-fs (loop2): Unrecognized mount option "shortname=win95.check=strict" or missing value [ 111.164570][ T1769] input: syz0 as /devices/virtual/input/input8 [ 111.568283][ T1783] EXT4-fs (loop4): Ignoring removed bh option [ 111.580315][ T1783] EXT4-fs (loop4): mounted filesystem without journal. Opts: bh,,errors=continue [ 111.813287][ T388] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 112.211890][ T1794] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.216947][ T388] usb 3-1: device descriptor read/64, error -71 [ 112.219466][ T1794] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.233990][ T1794] device bridge_slave_0 entered promiscuous mode [ 112.241890][ T1794] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.249522][ T1794] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.258030][ T1794] device bridge_slave_1 entered promiscuous mode [ 112.297013][ T1794] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.305679][ T1794] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.307870][ T1800] EXT4-fs (loop0): Unrecognized mount option "data_err=abort"nodiscard" or missing value [ 112.313580][ T1794] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.331988][ T1794] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.353909][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 112.363698][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.374014][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.413408][ T426] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 112.423371][ T426] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.432425][ T426] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.443606][ T426] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 112.452883][ T426] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.460902][ T426] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.476485][ T426] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 112.476977][ T928] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 112.495423][ T426] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 112.522987][ T1794] device veth0_vlan entered promiscuous mode [ 112.530876][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 112.546784][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 112.558999][ T1807] EXT4-fs (loop4): Ignoring removed bh option [ 112.574220][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 112.584309][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 112.589354][ T1807] EXT4-fs (loop4): mounted filesystem without journal. Opts: bh,,errors=continue [ 112.609782][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 112.634543][ T1790] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF [ 112.651974][ T1794] device veth1_macvtap entered promiscuous mode [ 112.653330][ T1790] EXT4-fs (sda1): shut down requested (2) [ 112.659470][ T388] usb 3-1: device descriptor read/64, error -71 [ 112.675365][ T1790] Aborting journal on device sda1-8. [ 112.686472][ T426] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 112.706848][ T426] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready SYZFAIL: posix_spawn failed (errno 5: Input/output error) [ 112.796378][ T1816] EXT4-fs (loop0): Ignoring removed bh option [ 112.855817][ T1816] EXT4-fs warning (device loop0): ext4_multi_mount_protect:403: Unable to create kmmpd thread for loop0. [ 112.927213][ T388] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 112.946666][ T9] device bridge_slave_1 left promiscuous mode [ 112.953937][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.964923][ T9] device bridge_slave_0 left promiscuous mode [ 112.977586][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.990776][ T9] device veth1_macvtap left promiscuous mode [ 112.999599][ T928] usb 4-1: unable to read config index 0 descriptor/all [ 112.999608][ T9] device veth0_vlan left promiscuous mode [ 113.017085][ T928] usb 4-1: can't read configurations, error -71 [ 114.288115][ T9] device bridge_slave_1 left promiscuous mode [ 114.295827][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.306640][ T9] device bridge_slave_0 left promiscuous mode [ 114.315854][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.327654][ T9] device bridge_slave_1 left promiscuous mode [ 114.337152][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.346647][ T9] device bridge_slave_0 left promiscuous mode [ 114.357376][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.369858][ T9] device bridge_slave_1 left promiscuous mode [ 114.377279][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.386158][ T9] device bridge_slave_0 left promiscuous mode [ 114.393918][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.403081][ T9] device bridge_slave_1 left promiscuous mode [ 114.409946][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.417902][ T9] device bridge_slave_0 left promiscuous mode [ 114.424787][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.434498][ T9] device bridge_slave_1 left promiscuous mode [ 114.441308][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.452206][ T9] device bridge_slave_0 left promiscuous mode [ 114.460250][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.469306][ T9] device veth1_macvtap left promiscuous mode [ 114.476605][ T9] device veth0_vlan left promiscuous mode [ 114.482880][ T9] device veth1_macvtap left promiscuous mode [ 114.489669][ T9] device veth0_vlan left promiscuous mode [ 114.497985][ T9] device veth1_macvtap left promiscuous mode [ 114.505182][ T9] device veth0_vlan left promiscuous mode [ 114.512493][ T9] device veth1_macvtap left promiscuous mode [ 114.520116][ T9] device veth0_vlan left promiscuous mode [ 114.526710][ T9] device veth1_macvtap left promiscuous mode [ 114.535127][ T9] device veth0_vlan left promiscuous mode