last executing test programs: 5.710974563s ago: executing program 0 (id=4754): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) pipe(0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800714, &(0x7f0000000800)={[{@dioread_nolock}, {@noload}, {@quota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@errors_continue}, {@errors_continue}, {@errors_remount}, {@delalloc}, {@auto_da_alloc}, {@norecovery}, {@errors_continue}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}]}, 0xee, 0x442, &(0x7f0000000d00)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) io_setup(0x202, &(0x7f00000001c0)) io_submit(0x0, 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000240)=ANY=[@ANYBLOB="000000004c900200070000000300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000120000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff"]) 4.653756557s ago: executing program 3 (id=4757): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x0, 0x5, 0x10001, 0x9}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x0, 0x8b}, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x10, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="fc000000190001000000000000000000ffffffff000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000ea00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500ac1414000000000000000000000000003c00"/180], 0xfc}}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f00000005c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @mcast1}}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x8b, 0x7fe2, 0x1}, 0x48) syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') 4.61516031s ago: executing program 3 (id=4758): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) dup(0xffffffffffffffff) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000000)={0x18}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000000c0), 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000400)) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000, 0x0, 0x0, 0x0}, 0x50) 3.827499624s ago: executing program 0 (id=4762): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close(r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x102, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x75, r2}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000340)='sched_kthread_stop_ret\x00', r3}, 0x10) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00b8"], 0x40}}, 0x0) 3.710121793s ago: executing program 3 (id=4764): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) dup(0xffffffffffffffff) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000000)={0x18}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000000c0), 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xfd, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) 3.277680197s ago: executing program 0 (id=4766): ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wg2\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1c, 0xc, &(0x7f0000000340)=ANY=[], 0x0, 0x1, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, 0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b4ffebc7c825425, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x90) mkdir(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b70200001400ffd9b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffa3}, 0x48) 2.785536757s ago: executing program 3 (id=4772): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close(r0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe15, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8, 0xffffffffffffff4b, 0x0}}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2}, 0x0, 0x0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r2, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61154c000000000061134c0000000000bfa000000000003307000000080000002d0301000000000095000000000000006916000000000000bf67000000000000350607000fff07206706000002000000160302000ee60060bf500000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a62951e532b33c57004ffc2e83361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4f6e9cc54db6c7205a6b068fff496d2da73c32bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c54d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d402a75fd7a55733360040855ed5d1c0d634fc5fb38f84d9d87b27f6b5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff139604faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2b517dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce91798adc2dca871073f6bd61dc18402cde8bf777b2eaa45c940aabc86b94f8cbde4d470667bee722a6a2af483ad0d3415bd0f9db009acaba9eaea93f7a1d434e00000000000000000000d154ba10a8e51489a614e69722bac300"/1551], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 2.784357087s ago: executing program 3 (id=4773): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) pipe(0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800714, &(0x7f0000000800)={[{@dioread_nolock}, {@noload}, {@quota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@errors_continue}, {@errors_continue}, {@errors_remount}, {@delalloc}, {@auto_da_alloc}, {@norecovery}, {@errors_continue}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}]}, 0xee, 0x442, &(0x7f0000000d00)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) io_setup(0x202, &(0x7f00000001c0)) io_submit(0x0, 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000240)=ANY=[@ANYBLOB="000000004c900200070000000300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000120000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff"]) 2.719151842s ago: executing program 3 (id=4774): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x7, 0x10000, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2}, &(0x7f0000000080), &(0x7f0000000180)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="0b03feff4f00020002004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000c80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000180)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0xd53694983408de88, 0x54c, 0x3d5, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x8, 0x80, 0x8, [{{0x9, 0x4, 0x0, 0xfc, 0x2, 0x3, 0x1, 0x1, 0x5, {0x9, 0x21, 0x400, 0x8, 0x1, {0x22, 0x3ca}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x2, 0x3, 0xdd}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x7, 0xf4, 0xff}}]}}}]}}]}}, &(0x7f0000000cc0)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x201, 0x5, 0x3, 0x5c, 0x10, 0x6}, 0xd1, &(0x7f00000002c0)={0x5, 0xf, 0xd1, 0x3, [@generic={0xad, 0x10, 0x3, "88e24cc5473d3809e0309924f48af41b7da16583a55e574483971363c7a8437ec436e30d711f68d4a0782b6a6d0a1aa440ba72d438974fa36afd6ffa1daf6d6f06050dd5f25d6a96a33e75f214cd7f6455b391faa05208a22924496e45f5aaf29e6616d17d88e5e84fd539f3933256aa514ded8243ebae09dc673d722215a22f5ef6985411567b20527687f53381d9c77d693802cb55e0b8b669bd830c99ed65c928aa7c7c79a1662061"}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "72efd7ab66a18c2cfa3009cb7ad3c97f"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x10, 0xb7, 0x80, 0x40, 0xf8}]}, 0x5, [{0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0xf8ff}}, {0x47, &(0x7f00000004c0)=@string={0x47, 0x3, "30b17f139ebfdcfd1d21e5ac0d6168295b1ba1882af45670478e5a2749bd249bb78e734f9e15d558065f69fe6e665d983c176df2023ea565926c33b8867688900309bae8ef"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x44d}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x843}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x861}}]}) syz_usb_control_io$hid(r7, &(0x7f0000000880)={0x24, &(0x7f00000006c0)={0x0, 0x8, 0x9f, {0x9f, 0x22, "fce434ab1aa6558093ffbe4528da849858bc8ec5008df7b96a55bde4ddbd636457c14a45cd6cd7011e00a4bb457fe257d5be0430a431d5736f67569793d619ae1c776c0a5a5c93325ef622fef9e361df42f540efbb740866a7accd918ef83e059d286a3c3c675d11eb60db9986a3fe5276755c70dd9c67f5e740a1f52bbf74265c2ee59d69cbe1ce6259cb696183b0b979fbf4da2b4956ec2995071bd5"}}, &(0x7f0000000780)={0x0, 0x3, 0x4d, @string={0x4d, 0x3, "bdfd7b2e33d70826a6a65f5993e8ac8f50c363912a47baf93e7c402f6b596a44b3ef4ef53d26001ac3c7749c9641dae71dfdaf47e30a8abb487862392982fe673ff9b49ca04fefaab7a376"}}, &(0x7f0000000800)=ANY=[@ANYBLOB], &(0x7f0000000840)={0x0, 0x21, 0x9, {0x9, 0x21, 0x0, 0xb, 0x1, {0x22, 0x1c2}}}}, &(0x7f0000000c40)={0x2c, &(0x7f00000008c0)={0x40, 0xe, 0x7b, "b15ddc90c12e546071ad9173f3383b0be8eadfc7d0dcb49e1437db804559b4012a7957230f8b3989bfb147c4599675069c0d8529b03b3699ae126f7d792a56767648143f91bb9c93e7b8aafe6ea3c7478f7f668fe89772130dfb5e8d3c51f7714c11ebae5261677730484a076524204a1a3a1976fc078ec890137f"}, &(0x7f0000000980)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000009c0)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000b00)={0x20, 0x1, 0xfe, "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"}, &(0x7f0000000a00)={0x20, 0x3, 0x1}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r6}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r8}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x11c2, 0x2208, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r11}, 0x10) 2.576827104s ago: executing program 4 (id=4775): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001240)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="41000000094003001c002b8008000100", @ANYRES32, @ANYBLOB="08008790891a000008000880", @ANYRES32, @ANYBLOB="08001b"], 0x44}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000200)={'ip6tnl0\x00', 0x0}) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000020601080000000000000000070000050900020073797a30000000000900020073797a30000000000900020073797a3100c27863dc904330055e56ba3770000000"], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x48850) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000000)='./file0\x00') mount(0x0, &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0) pivot_root(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0/../file0/../file0\x00') chroot(&(0x7f00000001c0)='./file0/../file0/../file0\x00') umount2(&(0x7f0000000240)='./file0/../file0/../file0\x00', 0x3) mknod$loop(&(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x0) r5 = socket$inet(0x2, 0x80000, 0x7ff) write(r5, &(0x7f0000000080)="08008edf773c8000", 0x13d) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1c, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_SNOOPING={0x5}]}}}, @IFLA_MTU={0x8, 0x4, 0x4c6}]}, 0x44}}, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETSTEERINGEBPF(r7, 0x800454e0, &(0x7f0000000040)=r6) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5}, 0x48) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c80)=ANY=[@ANYBLOB="800100001a009f7d000000000000000000000000000000000000000000000000ff01000000000000000000000000000100000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff00000000000000000000000000006c000000ac1414aa0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000480003006c7a6a68000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004800020077703235362d67656e6572696300"/293], 0x180}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000180)={'wlan1\x00', 0x20}) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='rootcontext=', @ANYRESOCT]) 2.505477349s ago: executing program 4 (id=4776): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r3, 0x0, 0x40) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x200}}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}]}, 0x40}}, 0x40) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r4, @ANYBLOB="b100000000000500280012000c00010076657468"], 0x48}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="2000000014002101000000000000000002170000", @ANYRES32=r4, @ANYBLOB="08000200ac1414aa"], 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}}, 0x18}}, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(0xffffffffffffffff, 0x40049421, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) syz_usb_connect$uac1(0x0, 0xaa, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000000000406b1d01014000010203010902980003010000000904000000010100000a24010000000201020624040300bb0904010000010200000904010101010200000c24020200000000001cff130a24020100010000b48a0b240201000000000614af09050109000000000007250100000000090402000001020000090402010101020000072401000002000b24020108000001861b36090582090800000008072501000000001224b1191f89449a3876af5ab87f975401d96826a59a5e8fd0dc6369bc9f9b75ff"], 0x0) syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000700)={&(0x7f0000000b40)={0x2c0, 0x14, 0x8, 0x70bd29, 0x25dfdbfe, {0x10, 0x8f}, [@INET_DIAG_REQ_BYTECODE={0x2d, 0x1, "ef534ce9364e47723c1e62b2339cc6bbddfebe5afe24982a29217259f0699e078abbad5bdfc0618dd8"}, @INET_DIAG_REQ_BYTECODE={0x36, 0x1, "921c85cb68a99f39b3a28ca936f67b067e803c183c6fb15d8576a552c50b605729b59647be96a0123bfb98ab6e309c215d91"}, @INET_DIAG_REQ_BYTECODE={0x7f, 0x1, "aba5dd0983e64605e5e9b2ea84fe845538c4999ea8b779e9af606134f454b71592ec2a06ab4a0140e7ad4952e979802cd23bfece102d0c923aeca9d66c183fc54ef36e9096916bc6ffa4014e6a814de2237d112a8d82a81d66343fc93fab6565a21591c6b53ec9d26727a564cc678af5132e1f33e0e42bfa645627"}, @INET_DIAG_REQ_BYTECODE={0x3d, 0x1, "d7f733a99df6117f151fc8d8bccc9c0f6aa3d46da4019b3c0c567328022ffc2516005eecd7c7b205639f2006a78680d42370e465732b65cb30"}, @INET_DIAG_REQ_BYTECODE={0x183, 0x1, "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"}]}, 0x2c0}, 0x1, 0x0, 0x0, 0x40051}, 0x20004087) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x1c1341, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r11) socket$packet(0x11, 0x2, 0x300) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 2.464003232s ago: executing program 0 (id=4777): setresuid(0x0, 0xee00, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 2.456582293s ago: executing program 0 (id=4778): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1fd2, 0x6007, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r1, &(0x7f0000000000)="09282b9ddc65c9983ae6b2", &(0x7f00000000c0)=""/148}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, 0x0, &(0x7f00000002c0)}, 0x20) syz_usb_control_io$hid(r0, &(0x7f0000000a00)={0x24, 0x0, 0x0, &(0x7f0000000940)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0xa, "9a2c666d"}]}}, 0x0}, 0x0) 2.333292683s ago: executing program 1 (id=4780): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) getpid() sched_setscheduler(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0), 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYRES32], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0, r0}, 0x10) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file0\x00', 0x3, &(0x7f00000001c0)={[{@nodiscard}, {}, {@alloc_mode_def}, {@six_active_logs}, {@noflush_merge}, {@disable_roll_forward}, {@inline_data}, {@noacl}, {@heap}, {@noinline_data}, {@noextent_cache}, {@adaptive_mode}, {@jqfmt_vfsold}], [], 0x2c}, 0x1, 0x5505, &(0x7f0000002480)="$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") sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmmsg$inet(r1, &(0x7f0000005ac0)=[{{&(0x7f0000000180)={0x2, 0x4e21, @initdev={0xac, 0x63, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000400)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @local}}}], 0x20}}], 0x1, 0x0) ioctl$TIOCSBRK(0xffffffffffffffff, 0x5427) socket$nl_route(0x10, 0x3, 0x0) 2.203097154s ago: executing program 1 (id=4781): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0xfff, 0x7, 0x1004}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180), 0x2000) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r6, &(0x7f00000000c0)={0xe000001a}) read$char_usb(r6, &(0x7f0000001980)=""/179, 0xb3) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r6, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r7 = inotify_init1(0x0) inotify_add_watch(r7, &(0x7f00000000c0)='./file0\x00', 0x24000408) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r8, &(0x7f00000020c0)={0x2020}, 0x2020) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) 1.567991674s ago: executing program 2 (id=4782): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180300002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000c80)='kmem_cache_free\x00', r0}, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) (async, rerun: 64) syz_read_part_table(0x105a, &(0x7f0000001080)="$eJzsz7GJAkEABdA/N3vc3kWXmdqDDYipqVqPiSVYghjYhy1YiAWsLMsqFiAivBfMfD7DhwnvdfobU/vU1+x3/b3NudT8NmP/0x+TzTK5Xr6TRTeoJe0qyX8O0zT56l/NkmNNuU+Wx/Z8COuuvPZ3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPARbgEAAP//PsMQrQ==") (rerun: 64) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async, rerun: 32) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (rerun: 32) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000001008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095e160202a28890db478fdb946e4fe0365d2ed5053506aa36d4f44"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="58000000c0edcd4e08145d2eb17dcc1eb529125eea482ae5cac5bbf4e21ff252a2187d4f46ef168d1c836a3aba3b971f", @ANYRES16, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0800f64c9632eeff7785d423fbf40aabd1a1ed9d7827d7c373d92aedfdf71e4244fa"], 0x58}}, 0x0) (async, rerun: 32) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x9, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0x14}, [@ldst={0x3, 0x0, 0x3, 0xa, 0x0, 0xff00}], {0x95, 0x0, 0x5}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) (rerun: 32) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f00000005c0)='ufshcd_uic_command\x00', r2}, 0x10) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18020000000000000000000000000030850000002c00000095000000000000002b4003fe37a077ae55f52c0d80a2649baca85309be96d5a45bbbdb5ff7ffffffd075b3eee14473f51be98db7efbb059842ba4470e8e04acb807fbbabc68abdcce9f672b6bb61c302dfd5c11071adac29fd64d33a3502fbeb1ed99dd0e792f24c420bfcc2635421d339ad521d6953b1137850d9e9ebf65ee988ea2dbee528678eb47efb7b3f19046c6f1bd1bf56e5853ed96137f95b3a11954ed1c8a8676468cf2405e48723d4b1ff"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001400)=""/4106}, 0x18) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (async) r7 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) splice(r7, 0x0, r6, 0x0, 0x2, 0x0) (async, rerun: 64) r8 = socket$inet6(0xa, 0x1, 0x0) (rerun: 64) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000180)={@remote, 0x800, 0x0, 0x3, 0x1}, 0x20) (async) r9 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r10) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f00000003c0)={@remote, 0x800, 0x2, 0x0, 0x0, 0x0, 0x800}, 0x20) (async, rerun: 64) signalfd(r4, &(0x7f0000000000)={[0x3]}, 0x8) (async, rerun: 64) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{}, &(0x7f0000000040), &(0x7f0000000100)=r5}, 0x20) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000002c0)={0xffffffffffffffff}, 0xc) (async, rerun: 32) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) (rerun: 32) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) (async) add_key$keyring(0x0, &(0x7f0000000700)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) 1.323764304s ago: executing program 1 (id=4783): bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="680000001000010400"/20, @ANYRES32=r1, @ANYBLOB="c0230000000000001c001280110007006272696467655f736c61766500000000040005"], 0x68}}, 0xf000000) 1.237545771s ago: executing program 1 (id=4784): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000740)=ANY=[@ANYRES16, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) pwritev2(0xffffffffffffffff, &(0x7f00000015c0)=[{&(0x7f0000000080)="ec", 0x1}], 0x1, 0xfffff, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000007b00b67018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = socket(0x10, 0x3, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800800040000000000050017"], 0x44}, 0x1, 0x0, 0x0, 0x3c}, 0x0) 1.237005291s ago: executing program 2 (id=4785): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x5}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES16, @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfd64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x90) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) (async, rerun: 32) r1 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 32) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000080)=0x414e, 0x4) (async) inotify_init1(0x0) (async) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000040)={'filter\x00', 0x7, 0x4, 0x3c0, 0x1d0, 0x0, 0xe8, 0x2d8, 0x2d8, 0x2d8, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0x1d0}, @unspec=@STANDARD={0x28}}, {{@uncond, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x410) (async) gettid() prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, 0x0, &(0x7f0000005ac0)) (async) fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x8008}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x1c, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYRES64=r2, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000600850000008200000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000000023008500000017000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0xfca804a0, 0x0, 0xfffffec3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async, rerun: 64) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x2104084, &(0x7f00000000c0), 0x1, 0x76b, &(0x7f0000000f80)="$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") (async, rerun: 64) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000000), 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) (async) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x10, 0xffffffffffffffff, 0x0) (async) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r7, 0xaf01, 0x0) (async, rerun: 64) r8 = eventfd(0x0) (async, rerun: 64) ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000380)=""/138, 0x0}) (async) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000140)) ioctl$VHOST_SET_VRING_KICK(r6, 0x4008af20, &(0x7f00000004c0)) (async) ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f00000000c0)=""/87, 0x0}) 1.236835311s ago: executing program 2 (id=4786): r0 = socket$nl_generic(0x11, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x1, 0x1d1, 0x1}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1}, @address_request}}}}, 0x0) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x2c, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x3e}], 0x2, 0x0, 0x0, 0x11000000}, 0xffffffd6) 1.236557431s ago: executing program 2 (id=4787): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(0x0, 0x0) dup(0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0xffffffffffffffc2, &(0x7f0000000280)=0x666) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="a50a0000000000006111540000000000180000000000000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x85ff}, 0x80) 766.052438ms ago: executing program 4 (id=4788): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x5e, &(0x7f0000000340)={[{@errors_remount}, {@nodiscard}, {@dioread_nolock}]}, 0x2, 0x455, &(0x7f0000000a80)="$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") 652.472957ms ago: executing program 4 (id=4789): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x4}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000f52020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200000c000000b7030000000000f0850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100632020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 565.774664ms ago: executing program 4 (id=4790): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) 565.499614ms ago: executing program 4 (id=4791): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[@ANYBLOB="54010000100013070000000000000000fc010000000000000000000000000000ac1414aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x154}}, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) syz_open_pts(0xffffffffffffffff, 0x101000) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002580)) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000080)='kmem_cache_free\x00', r4}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000deab44f4850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='mm_page_alloc\x00', r5}, 0x10) creat(&(0x7f0000000080)='./bus\x00', 0x0) 557.798595ms ago: executing program 0 (id=4792): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x90) r4 = open(&(0x7f0000000200)='./file0\x00', 0x52b001, 0x138) getdents64(r4, &(0x7f0000000180)=""/105, 0x69) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYRESHEX=r2, @ANYRES64=r3, @ANYRESHEX=r0, @ANYRESOCT=r1, @ANYRESDEC], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, 0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r6) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r7 = inotify_init1(0x0) fcntl$setown(r7, 0x8, 0xffffffffffffffff) fcntl$getownex(r7, 0x10, &(0x7f0000000140)={0x0, 0x0}) r9 = syz_open_procfs(r8, &(0x7f0000000600)='fd/4\x00') ioctl$EXT4_IOC_GROUP_EXTEND(r9, 0x40086607, &(0x7f0000000240)=0x1fffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="18220000", @ANYRES32, @ANYBLOB="00b3f9d9243aecb732", @ANYRES64=r1, @ANYBLOB="0000000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r10, 0x89f1, &(0x7f0000000900)={'ip6tnl0\x00', @random='\f\x00\x00 \x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r12) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r9, &(0x7f0000000300)=ANY=[], 0xfdef) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) r13 = socket$inet6(0xa, 0x2, 0x0) r14 = socket$key(0xf, 0x3, 0x2) r15 = dup3(r14, r13, 0x0) sendmsg$key(r15, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="02130000050000000000000000000000030008"], 0x28}}, 0x0) 116.55681ms ago: executing program 2 (id=4793): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000000001897110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) close(r1) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x3, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0xffffffff}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async, rerun: 32) close(r0) (async, rerun: 32) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x9}, 0x48) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c00000010004b0400f4ed00000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c0002800800040000000000060006"], 0x4c}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async, rerun: 64) r6 = getpid() (rerun: 64) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x6) (async) move_mount(0xffffffffffffffff, &(0x7f0000000340)='./file1\x00', 0xffffffffffffffff, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r8, &(0x7f0000000000), 0x0, 0x8000) (async) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) (rerun: 32) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0xd1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000380), &(0x7f00000001c0)=r9}, 0x20) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000540)=ANY=[@ANYRESHEX=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r10}, 0x10) (async, rerun: 32) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async, rerun: 32) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84880) write$P9_RVERSION(r12, &(0x7f0000000080)=ANY=[@ANYRES32=r11], 0x15) 61.730994ms ago: executing program 2 (id=4794): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0xfff, 0x7, 0x1004}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180), 0x2000) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r6, &(0x7f00000000c0)={0xe000001a}) read$char_usb(r6, &(0x7f0000001980)=""/179, 0xb3) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r6, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r7 = inotify_init1(0x0) inotify_add_watch(r7, &(0x7f00000000c0)='./file0\x00', 0x24000408) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r8, &(0x7f00000020c0)={0x2020}, 0x2020) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) 49.985765ms ago: executing program 1 (id=4795): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f0000000700)=ANY=[@ANYRES8=0x0], 0x1, 0x217, &(0x7f00000004c0)="$eJzs3TFrE2EYB/CnttVSkGQQiiJ44uIUmop7ilQQA4qSQSeLTVGaWDAQ0KF180voV9DRVXAQV7+ACFIFF7t1ECL1YmNrYiM1OTG/35KH3Pu/e95LyEuGvLl1sr6ytNpY3tzciKmpsZgoRSm2xiIfh2I8Uo8CAPifbLVa8aWVyroXAGA4rP8AMHr6XP+vDrElAGDAfP8HgNFz/cbNy/Pl8sK1JJmKqD9uVpqV9DE9Pr8cd6MW1ZiNXHyNaO1I64uXyguzybaP+ajU19v59WZlfHe+GLnId88Xk9Tu/GRMt/PvpqMac5GLY93zc13zh+PsmZ+uX4hcvL0dq1GLpdjOdvJrxSS5cKW8J3/k+zgAAAAAAAAAAAAAAAAAAAAAABiEQrKj6/49hUKv42m+//2B9u7PMxEnJrKdOwAAAAAAAAAAAAAAAAAAAPwrGg8erizWatX7vyvuvXn2ar8xfRZj7ese9DwHL46e/vCk15jxP7s/f7d4eSrL29Jn8XrjzvFzjZnzmbUxGRG/PtPzrfU5FzGgfp5n+lr8mPW+g2eelhZfrL3/1O+Zh/5RBAAAAAAAAAAAAAAAAAAAI6/zo9+sOwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA7HT+/39wRdZzBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAbwEAAP//uSidyw==") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="a4010000160001000000000000000000fe8000000000000000000000000000bbfc0100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000fc0000000000aa0000000033"], 0x1a4}}, 0x0) 0s ago: executing program 1 (id=4796): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) pipe(0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800714, &(0x7f0000000800)={[{@dioread_nolock}, {@noload}, {@quota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@errors_continue}, {@errors_continue}, {@errors_remount}, {@delalloc}, {@auto_da_alloc}, {@norecovery}, {@errors_continue}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}]}, 0xee, 0x442, &(0x7f0000000d00)="$eJzs281vG0UbAPBn10n6vv1KKKW0oYVAQUR8JE1aoAcuIJA4gIQEh3IMSVqFug1qgkSrCAJC5YgqcUcckfgLOMEFASckrnBHlSqIkFo4Ba29m9punObDrkP9+0nbznjHnnk8O97xTBxA1xrK/kkidkfErxHRX83WFxiq/ndjaWHy76WFySSWl9/4I6mUu760MFkULZ63K88MpxHpJ0leSb25i5fOTpTL0xfy/Oj8uXdH5y5eenrm3MSZ6TPT58dPnjxxfOy5Z8efaUmcWVzXBz+YPXzolbeuvDZ56srbP36dtffAker52jhaZSgL/M/lisZzj7W6sg7bU5NOejrYEDakFBFZd/VWxn9/lOJm5/XHyx93tHFAW2X3ph3NTy8uA3exJDrdAqAziht99v23OO7Q1GNbuPZC9QtQFveN/Kie6Yk0L9PbxvqHIuLU4j9fZEe0aR0CAKDWt9n856nV5n9pHKgptzffQxmIiHsiYl9E3BsR+yPivohK2fsj4uAG62/cGrp1/pNe3VRg65TN/57P97bq53/F7C8GSnluTyX+3uT0THn6WP6eDEfvjiw/tkYd3730y2fNztXO/7Ijq7+YC+btuNrTsEA3NTE/0apJ6bWPIgZ7Vos/WdkJSCLiUEQMbuyl9xaJmSe+Otys0O3jX0ML9pmWv4x4vNr/i9EQfyFZe39y9H9Rnj42WlwVt/rp58uvN6t/S/G3QNb/O+uv/4YS/X8ltfu1cxuv4/Jvnzb9TrPZ678vebOyZ92XP/b+xPz8hbGIvuTVSr7u8fGbzy3yRfks/uGjq4//fflzsvgfiIjsIj4SEQ9GxEN52x+OiEci4uga8f/w4qPvbD7+9srin1r182/l+h+o7/+NJ0pnv/+mWf3r6/8TldRw/kjl8+821tvArbx3AAAA8F+RRsTuSNKRlXSajoxU/4Z/f+xMy7Nz80+enn3v/FT1NwID0ZsWK139NeuhY8li/orV/Hi+VlycP56vG39e+n8lPzI5W57qcOzQ7XY1Gf+Z30udbh3Qdn6vBd2rcfynHWoHcOe5/0P3Mv6hexn/0L1WG/8fNuTtBcDdyf0fupfxD93L+IfuZfxDV9rK7/olujkR6bZoRrsScXBbNKNziU5/MgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALTGvwEAAP//KivtwQ==") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) io_setup(0x202, &(0x7f00000001c0)) io_submit(0x0, 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000240)=ANY=[@ANYBLOB="000000004c900200070000000300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000250000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff"]) kernel console output (not intermixed with test programs): dit(2000000291.830:2439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15566 comm="syz.3.4266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7130cfbd9 code=0x7ffc0000 [ 649.074042][ T24] audit: type=1326 audit(2000000291.830:2440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15566 comm="syz.3.4266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fc7130cfbd9 code=0x7ffc0000 [ 649.149429][T15585] overlayfs: './bus' not a directory [ 649.347815][T15593] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4274'. [ 649.426153][ T1812] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 649.666057][ T1812] usb 3-1: Using ep0 maxpacket: 16 [ 649.716097][ T1809] usbhid 5-1:0.0: can't add hid device: -71 [ 649.721991][ T1809] usbhid: probe of 5-1:0.0 failed with error -71 [ 649.742735][ T1809] usb 5-1: USB disconnect, device number 120 [ 649.786192][ T1812] usb 3-1: config 0 has an invalid interface number: 255 but max is 0 [ 649.795966][ T1812] usb 3-1: config 0 has no interface number 0 [ 649.802283][ T1812] usb 3-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 649.813403][ T1812] usb 3-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 649.826662][ T1812] usb 3-1: config 0 interface 255 has no altsetting 0 [ 649.986260][ T1812] usb 3-1: New USB device found, idVendor=0b49, idProduct=064f, bcdDevice=b9.e8 [ 649.995264][ T1812] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 650.003412][ T1812] usb 3-1: Product: syz [ 650.007653][ T1812] usb 3-1: Manufacturer: syz [ 650.236125][T12958] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 650.264420][ T1812] usb 3-1: SerialNumber: syz [ 650.270046][ T1812] usb 3-1: config 0 descriptor?? [ 650.547799][ T1812] usb 3-1: USB disconnect, device number 111 [ 650.666229][T12958] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 650.676961][T12958] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 650.686509][T12958] usb 4-1: New USB device found, idVendor=056a, idProduct=0026, bcdDevice= 0.00 [ 650.695326][T12958] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 650.703936][T12958] usb 4-1: config 0 descriptor?? [ 650.936346][T15622] 9pnet: Insufficient options for proto=fd [ 651.351009][T15635] netlink: 88 bytes leftover after parsing attributes in process `syz.1.4285'. [ 651.426096][T12958] usbhid 4-1:0.0: can't add hid device: -71 [ 651.432033][T12958] usbhid: probe of 4-1:0.0 failed with error -71 [ 651.441685][T12958] usb 4-1: USB disconnect, device number 27 [ 652.203584][T15644] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4289'. [ 652.262214][T15648] netlink: 'syz.0.4290': attribute type 15 has an invalid length. [ 652.271572][T15648] device vlan2 entered promiscuous mode [ 652.364285][ T24] kauditd_printk_skb: 5 callbacks suppressed [ 652.364298][ T24] audit: type=1400 audit(2000000295.410:2446): avc: denied { ioctl } for pid=15654 comm="syz.0.4293" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0xb704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 652.749461][T15663] EXT4-fs (loop0): 1 orphan inode deleted [ 652.755095][T15663] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota, [ 652.773991][T15663] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038 (0x7fffffff) [ 652.996062][ T570] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 653.436607][ T570] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 653.466233][ T570] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 653.489565][ T570] usb 4-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 653.527935][ T570] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 653.559703][ T570] usb 4-1: config 0 descriptor?? [ 653.634167][ T24] audit: type=1326 audit(2000000296.680:2447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15693 comm="syz.4.4305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f591e576bd9 code=0x7ffc0000 [ 653.676695][ T24] audit: type=1326 audit(2000000296.680:2448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15693 comm="syz.4.4305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f591e576bd9 code=0x7ffc0000 [ 653.720325][ T24] audit: type=1326 audit(2000000296.680:2449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15693 comm="syz.4.4305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f591e576bd9 code=0x7ffc0000 [ 653.724024][T15697] 9pnet: Insufficient options for proto=fd [ 653.757511][ T24] audit: type=1326 audit(2000000296.680:2450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15693 comm="syz.4.4305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f591e576bd9 code=0x7ffc0000 [ 653.781082][ T24] audit: type=1326 audit(2000000296.680:2451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15693 comm="syz.4.4305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f591e576bd9 code=0x7ffc0000 [ 653.805143][ T24] audit: type=1326 audit(2000000296.680:2452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15693 comm="syz.4.4305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f591e575610 code=0x7ffc0000 [ 653.829438][ T24] audit: type=1326 audit(2000000296.680:2453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15693 comm="syz.4.4305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f591e576bd9 code=0x7ffc0000 [ 653.853384][ T24] audit: type=1326 audit(2000000296.680:2454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15693 comm="syz.4.4305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f591e576bd9 code=0x7ffc0000 [ 653.876873][ T24] audit: type=1326 audit(2000000296.680:2455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15693 comm="syz.4.4305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f591e576bd9 code=0x7ffc0000 [ 654.036820][T15701] udc-core: couldn't find an available UDC or it's busy [ 654.054428][T15701] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 654.066924][ T570] belkin 0003:1020:0006.005C: item fetching failed at offset 3/5 [ 654.074713][ T570] belkin 0003:1020:0006.005C: parse failed [ 654.092421][ T570] belkin: probe of 0003:1020:0006.005C failed with error -22 [ 654.246969][T15699] F2FS-fs (loop0): Fix alignment : internally, start(4096) end(16896) block(12288) [ 654.257724][T15699] F2FS-fs (loop0): invalid crc value [ 654.263921][T15699] F2FS-fs (loop0): Current segment's next free block offset is inconsistent with bitmap, logtype:5, segno:2, type:0, next_blkoff:0, blkofs:1 [ 654.278575][T15699] F2FS-fs (loop0): Failed to initialize F2FS segment manager (-117) [ 654.288324][T15676] udc-core: couldn't find an available UDC or it's busy [ 654.305009][T15676] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 654.529489][T12958] usb 4-1: USB disconnect, device number 28 [ 654.539572][T15694] F2FS-fs (loop4): Test dummy encryption mode enabled [ 654.591180][T15694] F2FS-fs (loop4): invalid crc value [ 654.595456][T15709] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4309'. [ 654.607802][T15694] F2FS-fs (loop4): Found nat_bits in checkpoint [ 654.712973][T15694] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 654.716120][T15709] bridge0: port 2(bridge_slave_1) entered disabled state [ 654.741999][T15719] ip_tunnel: non-ECT from 0.0.0.47 with TOS=0x3 [ 656.706036][T12960] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 657.155517][T12960] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 657.166661][T12960] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 657.177886][T12960] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 657.516595][T12960] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 657.542635][T12960] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 657.594670][T12960] usb 1-1: Product: syz [ 657.629114][T12960] usb 1-1: Manufacturer: syz [ 657.639911][T12960] usb 1-1: SerialNumber: syz [ 657.676816][T15754] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 657.694500][T15754] EXT4-fs error (device loop4): mb_free_blocks:1524: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 657.709695][T12960] usb 1-1: selecting invalid altsetting 1 [ 657.717143][T15754] EXT4-fs (loop4): Remounting filesystem read-only [ 657.723609][T15754] EXT4-fs error (device loop4): ext4_free_branches:1026: inode #11: comm syz.4.4320: invalid indirect mapped block 1 (level 1) [ 657.737031][T15754] EXT4-fs (loop4): 1 truncate cleaned up [ 657.742538][T15754] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,dioread_nolock, [ 658.310982][T15771] netlink: 172 bytes leftover after parsing attributes in process `syz.0.4315'. [ 658.334127][T15771] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4315'. [ 658.476177][T12960] cdc_ncm 1-1:1.0: bind() failure [ 658.483756][T12960] cdc_ncm 1-1:1.1: skipping garbage [ 658.501278][T12960] cdc_ncm 1-1:1.1: bind() failure [ 658.512693][T15782] binder: 15780:15782 ioctl 4018620d 0 returned -22 [ 658.530417][T12960] usb 1-1: USB disconnect, device number 123 [ 658.856174][T12958] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 659.136020][T12958] usb 4-1: Using ep0 maxpacket: 8 [ 659.276240][T12958] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 659.287300][T12958] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 659.297444][T12958] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 659.306595][T12958] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 659.322702][T12958] usb 4-1: config 0 descriptor?? [ 659.436067][T12960] usb 1-1: new full-speed USB device number 124 using dummy_hcd [ 659.686068][T12958] usbhid 4-1:0.0: can't add hid device: -71 [ 659.692537][T12958] usbhid: probe of 4-1:0.0 failed with error -71 [ 659.708174][T12958] usb 4-1: USB disconnect, device number 29 [ 659.846167][T12955] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 659.906170][T12960] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 659.917104][T12960] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 659.926933][T12960] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 659.939799][T12960] usb 1-1: New USB device found, idVendor=056a, idProduct=0059, bcdDevice= 0.00 [ 659.949165][T12960] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 659.961440][T12960] usb 1-1: config 0 descriptor?? [ 660.226184][T12955] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 660.235240][T12955] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 660.244102][T12955] usb 5-1: config 0 descriptor?? [ 660.448141][T15798] udc-core: couldn't find an available UDC or it's busy [ 660.471504][T15798] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 660.507423][T12960] wacom 0003:056A:0059.005D: unknown main item tag 0x0 [ 660.524407][T12960] wacom 0003:056A:0059.005D: hidraw0: USB HID vff.fc Device [HID 056a:0059] on usb-dummy_hcd.0-1/input0 [ 660.727076][T12958] usb 1-1: USB disconnect, device number 124 [ 661.316147][T12955] usb 5-1: Cannot set MAC address [ 661.321296][T12955] MOSCHIP usb-ethernet driver: probe of 5-1:0.0 failed with error -71 [ 661.345850][T12955] usb 5-1: USB disconnect, device number 121 [ 661.566824][ T24] kauditd_printk_skb: 30 callbacks suppressed [ 661.566838][ T24] audit: type=1400 audit(2000000304.620:2486): avc: denied { read } for pid=15852 comm="syz.3.4348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 661.628405][ T24] audit: type=1400 audit(2000000304.620:2487): avc: denied { read } for pid=15852 comm="syz.3.4348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 661.994932][T15864] bridge0: port 1(bridge_slave_0) entered blocking state [ 662.022754][T15864] bridge0: port 1(bridge_slave_0) entered disabled state [ 662.036496][T15864] device bridge_slave_0 entered promiscuous mode [ 662.046774][T15864] bridge0: port 2(bridge_slave_1) entered blocking state [ 662.060853][T15864] bridge0: port 2(bridge_slave_1) entered disabled state [ 662.075695][T15864] device bridge_slave_1 entered promiscuous mode [ 662.368569][ T8933] device bridge_slave_1 left promiscuous mode [ 662.375693][ T8933] bridge0: port 2(bridge_slave_1) entered disabled state [ 662.408661][ T8933] device bridge_slave_0 left promiscuous mode [ 662.433306][ T8933] bridge0: port 1(bridge_slave_0) entered disabled state [ 662.465830][ T8933] device veth1_macvtap left promiscuous mode [ 662.489935][ T8933] device veth0_vlan left promiscuous mode [ 662.886469][T12955] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 662.893806][T12955] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 662.901566][T15885] udc-core: couldn't find an available UDC or it's busy [ 662.916312][T12955] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 662.924272][T15885] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 662.936312][T12955] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 662.944317][T12955] bridge0: port 1(bridge_slave_0) entered blocking state [ 662.951185][T12955] bridge0: port 1(bridge_slave_0) entered forwarding state [ 662.988326][T12955] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 662.995769][T12955] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 663.036224][T12955] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 663.064602][T12955] bridge0: port 2(bridge_slave_1) entered blocking state [ 663.071486][T12955] bridge0: port 2(bridge_slave_1) entered forwarding state [ 663.086128][T12955] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 663.104249][T12955] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 663.112184][T12955] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 663.126252][T12955] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 663.145815][T12958] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 663.163096][T15864] device veth0_vlan entered promiscuous mode [ 663.170360][T12960] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 663.178436][T12960] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 663.185959][T12960] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 663.199829][T15864] device veth1_macvtap entered promiscuous mode [ 663.207089][T12958] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 663.231610][T12960] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 663.246448][T12960] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 663.264824][T12960] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 663.277184][T15880] F2FS-fs (loop0): invalid crc value [ 663.284293][T15880] F2FS-fs (loop0): invalid crc value [ 663.296585][T12960] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 663.314752][T15880] F2FS-fs (loop0): Failed to get valid F2FS checkpoint [ 663.777490][T15907] udc-core: couldn't find an available UDC or it's busy [ 663.841688][T15907] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 663.912727][T15907] netlink: 172 bytes leftover after parsing attributes in process `syz.1.4361'. [ 663.951893][T15907] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4361'. [ 664.033361][T15907] kvm: pic: non byte write [ 664.228463][T12958] hid-generic 0000:0000:0000.005E: unknown main item tag 0x0 [ 664.242293][T12958] hid-generic 0000:0000:0000.005E: unknown main item tag 0x0 [ 664.266427][T12958] hid-generic 0000:0000:0000.005E: unknown main item tag 0x0 [ 664.281321][T12958] hid-generic 0000:0000:0000.005E: unknown main item tag 0x0 [ 664.298837][T12958] hid-generic 0000:0000:0000.005E: unknown main item tag 0x0 [ 664.313687][T12958] hid-generic 0000:0000:0000.005E: unknown main item tag 0x0 [ 664.328639][T12958] hid-generic 0000:0000:0000.005E: unknown main item tag 0x0 [ 664.343467][T12958] hid-generic 0000:0000:0000.005E: unknown main item tag 0x0 [ 664.361070][T12958] hid-generic 0000:0000:0000.005E: unknown main item tag 0x0 [ 664.376994][T12958] hid-generic 0000:0000:0000.005E: unknown main item tag 0x0 [ 664.386210][T12958] hid-generic 0000:0000:0000.005E: unknown main item tag 0x0 [ 664.397843][T12958] hid-generic 0000:0000:0000.005E: unknown main item tag 0x0 [ 664.405210][T12958] hid-generic 0000:0000:0000.005E: unknown main item tag 0x0 [ 664.412938][T12958] hid-generic 0000:0000:0000.005E: unknown main item tag 0x0 [ 664.430098][T12958] hid-generic 0000:0000:0000.005E: unknown main item tag 0x0 [ 664.442897][T12958] hid-generic 0000:0000:0000.005E: unknown main item tag 0x0 [ 664.455579][T12958] hid-generic 0000:0000:0000.005E: unknown main item tag 0x0 [ 664.468326][T12958] hid-generic 0000:0000:0000.005E: unknown main item tag 0x0 [ 664.482042][T12958] hid-generic 0000:0000:0000.005E: unknown main item tag 0x0 [ 664.494698][T12958] hid-generic 0000:0000:0000.005E: unknown main item tag 0x0 [ 664.508435][T12958] hid-generic 0000:0000:0000.005E: unknown main item tag 0x0 [ 664.523293][T12958] hid-generic 0000:0000:0000.005E: unknown main item tag 0x0 [ 664.537051][T12958] hid-generic 0000:0000:0000.005E: unknown main item tag 0x0 [ 664.545109][T12958] hid-generic 0000:0000:0000.005E: unknown main item tag 0x0 [ 664.552781][T12958] hid-generic 0000:0000:0000.005E: unknown main item tag 0x0 [ 664.560326][T12958] hid-generic 0000:0000:0000.005E: unknown main item tag 0x0 [ 664.570025][T12958] hid-generic 0000:0000:0000.005E: unknown main item tag 0x0 [ 664.577488][T12958] hid-generic 0000:0000:0000.005E: unknown main item tag 0x0 [ 664.584708][T12958] hid-generic 0000:0000:0000.005E: unknown main item tag 0x0 [ 664.592259][T12958] hid-generic 0000:0000:0000.005E: unknown main item tag 0x0 [ 664.609194][T12958] hid-generic 0000:0000:0000.005E: unknown main item tag 0x0 [ 664.611881][T15927] netlink: 'syz.2.4367': attribute type 12 has an invalid length. [ 664.616860][T12958] hid-generic 0000:0000:0000.005E: unknown main item tag 0x0 [ 664.634421][T12958] hid-generic 0000:0000:0000.005E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 664.685404][T15927] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15927 comm=syz.2.4367 [ 664.856631][T15941] exfat: Deprecated parameter 'utf8' [ 664.861903][T15941] exfat: Deprecated parameter 'namecase' [ 664.867796][T15941] exfat: Deprecated parameter 'namecase' [ 664.873332][T15941] exfat: Deprecated parameter 'utf8' [ 664.916057][T12958] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 664.978593][T15941] exFAT-fs (loop0): failed to load upcase table (idx : 0x00012153, chksum : 0x822ffc2e, utbl_chksum : 0xe619d30d) [ 665.352138][ T24] audit: type=1400 audit(2000000308.400:2488): avc: denied { read } for pid=15937 comm="syz.2.4369" name="rtc0" dev="devtmpfs" ino=166 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 665.396272][T12958] usb 5-1: config 0 has no interfaces? [ 665.402181][T12958] usb 5-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 665.413810][T12958] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 665.484259][T12958] usb 5-1: config 0 descriptor?? [ 665.655830][ T24] audit: type=1400 audit(2000000308.400:2489): avc: denied { open } for pid=15937 comm="syz.2.4369" path="/dev/rtc0" dev="devtmpfs" ino=166 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 665.818508][ T24] audit: type=1400 audit(2000000308.400:2490): avc: denied { ioctl } for pid=15937 comm="syz.2.4369" path="/dev/rtc0" dev="devtmpfs" ino=166 ioctlcmd=0x700a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 666.778023][T15967] syz.0.4375[15967] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 666.778085][T15967] syz.0.4375[15967] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 666.889357][T15981] netlink: 88 bytes leftover after parsing attributes in process `syz.1.4376'. [ 667.343273][ T387] usb 5-1: USB disconnect, device number 122 [ 667.405700][ T24] audit: type=1400 audit(2000000310.450:2491): avc: denied { bind } for pid=15985 comm="syz.4.4381" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 667.477268][ T24] audit: type=1400 audit(2000000310.530:2492): avc: denied { name_bind } for pid=15987 comm="syz.4.4382" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 667.498305][ T24] audit: type=1400 audit(2000000310.530:2493): avc: denied { node_bind } for pid=15987 comm="syz.4.4382" saddr=ff02::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 667.562627][T15994] udc-core: couldn't find an available UDC or it's busy [ 667.569499][T15994] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 667.649355][T15996] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4383'. [ 668.815315][T16023] device gretap0 entered promiscuous mode [ 668.827269][ T24] audit: type=1326 audit(2000000311.880:2494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16020 comm="syz.1.4392" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcb19708bd9 code=0x0 [ 668.876221][T16023] device vlan2 entered promiscuous mode [ 668.887032][T16023] device gretap0 left promiscuous mode [ 668.980624][T16025] EXT4-fs (loop0): 1 orphan inode deleted [ 668.986609][T16025] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota, [ 669.035807][T16025] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038 (0x7fffffff) [ 669.052559][ T24] audit: type=1400 audit(2000000312.100:2495): avc: denied { create } for pid=16028 comm="syz.4.4395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 669.441551][T16053] FAT-fs (loop4): Directory bread(block 64) failed [ 669.446087][ T357] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 669.447980][T16053] FAT-fs (loop4): Directory bread(block 65) failed [ 669.461825][T16053] FAT-fs (loop4): Directory bread(block 66) failed [ 669.468843][T16053] FAT-fs (loop4): Directory bread(block 67) failed [ 669.475196][T16053] FAT-fs (loop4): Directory bread(block 68) failed [ 669.482061][T16053] FAT-fs (loop4): Directory bread(block 69) failed [ 669.489399][T16053] FAT-fs (loop4): Directory bread(block 70) failed [ 669.495839][T16053] FAT-fs (loop4): Directory bread(block 71) failed [ 669.502340][ T387] usb 1-1: new high-speed USB device number 125 using dummy_hcd [ 669.510168][T16053] FAT-fs (loop4): Directory bread(block 72) failed [ 669.520023][T16053] FAT-fs (loop4): Directory bread(block 73) failed [ 669.780889][T16062] udc-core: couldn't find an available UDC or it's busy [ 669.788074][T16062] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 669.806188][T12961] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 669.846070][ T357] usb 3-1: Using ep0 maxpacket: 32 [ 669.916053][ T387] usb 1-1: Using ep0 maxpacket: 16 [ 669.956139][ T387] usb 1-1: too many configurations: 218, using maximum allowed: 8 [ 669.966150][ T357] usb 3-1: New USB device found, idVendor=cdc9, idProduct=0b7e, bcdDevice=cb.6e [ 669.975059][ T357] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 669.983818][ T357] usb 3-1: config 0 descriptor?? [ 670.026568][ T357] usb-storage 3-1:0.0: USB Mass Storage device detected [ 670.076189][ T387] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 670.084480][ T387] usb 1-1: can't read configurations, error -61 [ 670.196106][T12961] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 670.206094][T12961] usb 5-1: config 0 has no interfaces? [ 670.236070][ T387] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 670.250426][ T357] usb 3-1: USB disconnect, device number 112 [ 670.286139][T12961] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 670.295103][T12961] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 670.303214][T12961] usb 5-1: Manufacturer: syz [ 670.309806][T12961] usb 5-1: config 0 descriptor?? [ 670.737125][ T387] usb 1-1: Using ep0 maxpacket: 16 [ 670.826158][ T387] usb 1-1: too many configurations: 218, using maximum allowed: 8 [ 670.907479][ T24] audit: type=1400 audit(2000000313.960:2496): avc: denied { ioctl } for pid=16052 comm="syz.4.4403" path="socket:[85361]" dev="sockfs" ino=85361 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 670.936951][T16076] udc-core: couldn't find an available UDC or it's busy [ 670.943785][T16076] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 670.946124][ T387] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 670.958486][ T387] usb 1-1: can't read configurations, error -61 [ 670.964549][ T387] usb usb1-port1: attempt power cycle [ 671.525330][ T387] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 671.626070][ T387] usb 1-1: Using ep0 maxpacket: 16 [ 671.666094][ T387] usb 1-1: too many configurations: 218, using maximum allowed: 8 [ 671.786073][ T387] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 671.793450][ T387] usb 1-1: can't read configurations, error -61 [ 672.372447][ T1812] usb 5-1: USB disconnect, device number 123 [ 673.016267][T16117] device vlan2 entered promiscuous mode [ 673.195322][T16122] device gretap0 entered promiscuous mode [ 673.229915][T16122] device vlan2 entered promiscuous mode [ 673.249743][ T24] audit: type=1400 audit(2000000316.300:2497): avc: denied { mounton } for pid=16123 comm="syz.1.4422" path="/103/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 673.275081][T16122] device gretap0 left promiscuous mode [ 674.094314][T16136] syz.1.4424[16136] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 674.095000][T16136] syz.1.4424[16136] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 674.159171][T16120] F2FS-fs (loop0): Invalid log blocks per segment (4278190089) [ 674.193743][T16120] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 674.202738][T16120] F2FS-fs (loop0): invalid crc value [ 674.224546][T16120] F2FS-fs (loop0): Found nat_bits in checkpoint [ 674.258554][T16120] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 674.265459][T16120] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 674.366202][ T1812] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 674.386038][ T357] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 674.412244][T16120] attempt to access beyond end of device [ 674.412244][T16120] loop0: rw=2049, want=53792, limit=40427 [ 674.511984][T15257] attempt to access beyond end of device [ 674.511984][T15257] loop0: rw=524288, want=45072, limit=40427 [ 674.523408][T15257] attempt to access beyond end of device [ 674.523408][T15257] loop0: rw=0, want=45072, limit=40427 [ 674.538620][T15257] attempt to access beyond end of device [ 674.538620][T15257] loop0: rw=2049, want=45112, limit=40427 [ 674.626053][ T1812] usb 5-1: Using ep0 maxpacket: 32 [ 674.636143][ T357] usb 3-1: Using ep0 maxpacket: 16 [ 674.746116][ T1812] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 674.756931][ T357] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 674.758636][T16158] bridge0: port 1(bridge_slave_0) entered blocking state [ 674.765841][ T357] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 674.773185][T16158] bridge0: port 1(bridge_slave_0) entered disabled state [ 674.782650][ T1812] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 674.789766][T16158] device bridge_slave_0 entered promiscuous mode [ 674.798929][ T357] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 674.805520][T16158] bridge0: port 2(bridge_slave_1) entered blocking state [ 674.814593][ T1812] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 674.821305][T16158] bridge0: port 2(bridge_slave_1) entered disabled state [ 674.834072][ T357] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 674.841035][T16158] device bridge_slave_1 entered promiscuous mode [ 674.856495][ T1812] usb 5-1: New USB device found, idVendor=046d, idProduct=c26e, bcdDevice= 0.00 [ 674.865467][ T1812] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 674.873334][ T357] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 674.883202][ T357] usb 3-1: config 1 interface 0 has no altsetting 0 [ 674.889865][ T1812] usb 5-1: config 0 descriptor?? [ 674.894756][ T357] usb 3-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 674.903652][ T357] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 674.929056][T16158] bridge0: port 2(bridge_slave_1) entered blocking state [ 674.935934][T16158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 674.943015][T16158] bridge0: port 1(bridge_slave_0) entered blocking state [ 674.946511][ T357] ums-sddr09 3-1:1.0: USB Mass Storage device detected [ 674.949804][T16158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 674.976977][T12961] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 674.984339][T12961] bridge0: port 1(bridge_slave_0) entered disabled state [ 674.991719][T12961] bridge0: port 2(bridge_slave_1) entered disabled state [ 675.000837][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 675.009301][ T387] bridge0: port 1(bridge_slave_0) entered blocking state [ 675.016154][ T387] bridge0: port 1(bridge_slave_0) entered forwarding state [ 675.027438][T12961] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 675.035461][T12961] bridge0: port 2(bridge_slave_1) entered blocking state [ 675.042303][T12961] bridge0: port 2(bridge_slave_1) entered forwarding state [ 675.063302][T12958] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 675.072056][T12958] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 675.081039][T12958] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 675.098150][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 675.105873][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 675.113924][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 675.121312][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 675.131137][T16158] device veth0_vlan entered promiscuous mode [ 675.141160][T16158] device veth1_macvtap entered promiscuous mode [ 675.147901][ T1809] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 675.155847][ T1809] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 675.174056][ T1809] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 675.199008][T12961] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 675.208613][T12961] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 675.217669][T12961] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 675.225817][T12961] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 675.318202][ T9] device bridge_slave_1 left promiscuous mode [ 675.324355][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 675.335247][ T9] device bridge_slave_0 left promiscuous mode [ 675.341598][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 675.352715][ T9] device veth1_macvtap left promiscuous mode [ 675.358617][ T9] device veth0_vlan left promiscuous mode [ 675.369838][ T1812] hid-generic 0003:046D:C26E.005F: hidraw0: USB HID v0.00 Device [HID 046d:c26e] on usb-dummy_hcd.4-1/input0 [ 675.559555][T16175] bridge0: port 1(bridge_slave_0) entered blocking state [ 675.566902][T16175] bridge0: port 1(bridge_slave_0) entered disabled state [ 675.576891][T16175] device bridge_slave_0 entered promiscuous mode [ 675.621234][T16175] bridge0: port 2(bridge_slave_1) entered blocking state [ 675.629935][T16175] bridge0: port 2(bridge_slave_1) entered disabled state [ 675.640983][T16175] device bridge_slave_1 entered promiscuous mode [ 675.714021][T12958] usb 5-1: USB disconnect, device number 124 [ 675.735502][T16174] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4432'. [ 675.830752][T16175] bridge0: port 2(bridge_slave_1) entered blocking state [ 675.837642][T16175] bridge0: port 2(bridge_slave_1) entered forwarding state [ 675.844745][T16175] bridge0: port 1(bridge_slave_0) entered blocking state [ 675.851524][T16175] bridge0: port 1(bridge_slave_0) entered forwarding state [ 675.920014][ T1812] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 675.927808][ T1812] bridge0: port 1(bridge_slave_0) entered disabled state [ 675.944279][ T1812] bridge0: port 2(bridge_slave_1) entered disabled state [ 675.966990][ T1812] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 675.974992][ T1812] bridge0: port 1(bridge_slave_0) entered blocking state [ 675.981870][ T1812] bridge0: port 1(bridge_slave_0) entered forwarding state [ 676.014163][ T1812] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 676.030410][ T1812] bridge0: port 2(bridge_slave_1) entered blocking state [ 676.035194][T16189] netlink: 88 bytes leftover after parsing attributes in process `syz.0.4439'. [ 676.037305][ T1812] bridge0: port 2(bridge_slave_1) entered forwarding state [ 676.090865][ T1809] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 676.101940][ T1809] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 676.117561][ T1809] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 676.134728][ T1809] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 676.150955][ T1809] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 676.168339][ T1809] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 676.189113][T16175] device veth0_vlan entered promiscuous mode [ 676.197030][T12960] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 676.204829][T12960] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 676.216831][T12956] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 676.225248][T12956] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 676.242637][ T6846] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 676.251333][ T6846] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 676.275800][ T9] tipc: Disabling bearer [ 676.282067][T16175] device veth1_macvtap entered promiscuous mode [ 676.288427][ T9] tipc: Left network mode [ 676.310526][ T6846] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 676.326417][ T6846] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 676.334890][ T6846] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 676.356281][T12956] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 676.364677][T12956] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 676.461063][T16199] EXT4-fs (loop4): 1 orphan inode deleted [ 676.469446][T16199] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota, [ 676.591578][T16199] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038 (0x7fffffff) [ 677.037193][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 677.049294][ T9] device bridge_slave_0 left promiscuous mode [ 677.071183][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 677.091304][ T9] device team_slave_1 left promiscuous mode [ 677.110962][ T9] device veth1_macvtap left promiscuous mode [ 677.130546][ T9] device veth0_vlan left promiscuous mode [ 677.266763][T16215] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 677.277102][T16215] EXT4-fs (loop0): orphan cleanup on readonly fs [ 677.283823][T16215] EXT4-fs error (device loop0): ext4_map_blocks:710: inode #3: block 3: comm syz.0.4445: lblock 3 mapped to illegal pblock 3 (length 1) [ 677.316254][T16215] Quota error (device loop0): write_blk: dquota write failed [ 677.323452][T16215] Quota error (device loop0): find_free_dqentry: Can't write quota data block 3 [ 677.356215][T16215] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 677.367703][T16215] EXT4-fs error (device loop0): ext4_acquire_dquot:6219: comm syz.0.4445: Failed to acquire dquot type 0 [ 677.399416][T16215] EXT4-fs error (device loop0): ext4_map_blocks:600: inode #3: block 3: comm syz.0.4445: lblock 3 mapped to illegal pblock 3 (length 1) [ 677.434387][T16222] udc-core: couldn't find an available UDC or it's busy [ 677.439752][T16215] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 677.441351][T16222] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 677.451692][T16215] EXT4-fs error (device loop0): ext4_acquire_dquot:6219: comm syz.0.4445: Failed to acquire dquot type 0 [ 677.470229][T16215] EXT4-fs error (device loop0): ext4_free_blocks:5686: comm syz.0.4445: Freeing blocks not in datazone - block = 0, count = 4096 [ 677.545688][T16224] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4446'. [ 677.608784][T16215] EXT4-fs error (device loop0): ext4_map_blocks:600: inode #3: block 3: comm syz.0.4445: lblock 3 mapped to illegal pblock 3 (length 1) [ 677.678467][T16222] netlink: 172 bytes leftover after parsing attributes in process `syz.1.4447'. [ 677.708579][T16222] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4447'. [ 677.741734][T16215] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 677.754136][T16215] EXT4-fs error (device loop0): ext4_acquire_dquot:6219: comm syz.0.4445: Failed to acquire dquot type 0 [ 677.765399][T16215] EXT4-fs (loop0): 1 orphan inode deleted [ 677.772204][T16222] kvm: pic: non byte write [ 677.776249][T16215] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 677.861535][T16231] 9pnet: Insufficient options for proto=fd [ 678.136956][ T357] ums-sddr09: probe of 3-1:1.0 failed with error -22 [ 678.147844][ T357] usb 3-1: USB disconnect, device number 113 [ 679.038298][T16265] EXT4-fs (loop0): 1 orphan inode deleted [ 679.043958][T16265] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota, [ 679.063705][T16265] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038 (0x7fffffff) [ 679.649225][T16288] 9pnet: Insufficient options for proto=fd [ 680.015357][T16294] netlink: 88 bytes leftover after parsing attributes in process `syz.0.4466'. [ 680.031333][ T24] audit: type=1400 audit(2000000323.080:2498): avc: denied { setopt } for pid=16295 comm="syz.0.4467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 680.117369][T16299] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4465'. [ 680.140954][T16299] device macsec1 entered promiscuous mode [ 680.158389][T16299] device team_slave_1 entered promiscuous mode [ 680.296033][ T387] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 680.586027][ T387] usb 1-1: device descriptor read/64, error -71 [ 680.974176][T16306] netlink: 88 bytes leftover after parsing attributes in process `syz.2.4469'. [ 680.983168][ T387] usb 1-1: device descriptor read/64, error -71 [ 681.276984][ T24] audit: type=1326 audit(2000000324.330:2499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16315 comm="syz.2.4472" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7c4bd99bd9 code=0x0 [ 681.396043][ T387] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 681.666046][ T387] usb 1-1: device descriptor read/64, error -71 [ 682.056041][ T387] usb 1-1: device descriptor read/64, error -71 [ 682.176127][ T387] usb usb1-port1: attempt power cycle [ 682.188600][T16330] udc-core: couldn't find an available UDC or it's busy [ 682.195371][T16330] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 682.596061][ T387] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 682.795894][ T387] usb 1-1: device descriptor read/8, error -71 [ 682.956465][ T24] audit: type=1400 audit(2000000325.970:2500): avc: denied { watch watch_reads } for pid=16342 comm="syz.1.4482" path="/122" dev="tmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 683.146198][ T387] usb 1-1: device descriptor read/8, error -71 [ 683.609938][T16357] syz.3.4485[16357] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 683.610000][T16357] syz.3.4485[16357] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 684.656051][ T1813] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 684.907581][T16385] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 684.914770][T16385] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 684.927779][T16385] EXT4-fs error (device loop0): __ext4_iget:4958: inode #11: block 1: comm syz.0.4495: invalid block [ 684.938705][T16385] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.4495: couldn't read orphan inode 11 (err -117) [ 684.950821][T16385] EXT4-fs (loop0): mounted filesystem without journal. Opts: noauto_da_alloc,user_xattr,commit=0x0000000000000005,mblk_io_submit,stripe=0x0000000000000004,auto_da_alloc=0x0000000000000008,dioread_nolock,lazytime,quota,,errors=continue [ 684.989115][T16158] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 36: comm syz-executor: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 685.011633][ T9] EXT4-fs error (device loop0): __ext4_get_inode_loc:4409: comm kworker/u4:1: Invalid inode table block 0 in block_group 0 [ 685.146151][T16389] bridge0: port 1(bridge_slave_0) entered blocking state [ 685.153036][T16389] bridge0: port 1(bridge_slave_0) entered disabled state [ 685.160538][T16389] device bridge_slave_0 entered promiscuous mode [ 685.169168][T16389] bridge0: port 2(bridge_slave_1) entered blocking state [ 685.176402][T16389] bridge0: port 2(bridge_slave_1) entered disabled state [ 685.183544][T16389] device bridge_slave_1 entered promiscuous mode [ 685.216156][ T1813] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 685.216216][T16389] bridge0: port 2(bridge_slave_1) entered blocking state [ 685.226172][ T1813] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 685.232906][T16389] bridge0: port 2(bridge_slave_1) entered forwarding state [ 685.233005][T16389] bridge0: port 1(bridge_slave_0) entered blocking state [ 685.244005][ T1813] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 685.250621][T16389] bridge0: port 1(bridge_slave_0) entered forwarding state [ 685.286680][ T1812] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 685.294042][ T1812] bridge0: port 1(bridge_slave_0) entered disabled state [ 685.301282][ T1812] bridge0: port 2(bridge_slave_1) entered disabled state [ 685.311595][T12954] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 685.319823][T12954] bridge0: port 1(bridge_slave_0) entered blocking state [ 685.326668][T12954] bridge0: port 1(bridge_slave_0) entered forwarding state [ 685.346686][T12954] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 685.354811][T12954] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 685.362885][T12954] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 685.371080][T12954] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 685.378511][T12954] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 685.386482][T12954] bridge0: port 2(bridge_slave_1) entered blocking state [ 685.393295][T12954] bridge0: port 2(bridge_slave_1) entered forwarding state [ 685.400513][T12954] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 685.408304][T12954] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 685.417850][T16389] device veth0_vlan entered promiscuous mode [ 685.426208][ T1813] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 685.435597][ T1813] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 685.443688][ T1813] usb 4-1: Product: syz [ 685.447856][ T1813] usb 4-1: Manufacturer: syz [ 685.452244][ T1813] usb 4-1: SerialNumber: syz [ 685.467658][T16389] device veth1_macvtap entered promiscuous mode [ 685.474825][T12961] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 685.489399][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 685.497909][ T1813] usb 4-1: selecting invalid altsetting 1 [ 685.508292][ T1812] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 685.565460][T16404] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x38db593b, utbl_chksum : 0xe619d30d) [ 685.849222][ T9] device bridge_slave_1 left promiscuous mode [ 685.855810][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 685.863548][ T9] device bridge_slave_0 left promiscuous mode [ 685.871098][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 685.879414][ T9] device veth1_macvtap left promiscuous mode [ 685.881288][T16375] netlink: 172 bytes leftover after parsing attributes in process `syz.3.4491'. [ 685.885236][ T9] device veth0_vlan left promiscuous mode [ 685.912680][T16375] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4491'. [ 685.991201][T16375] kvm: pic: non byte write [ 686.316095][ T1813] cdc_ncm 4-1:1.0: bind() failure [ 686.322060][ T1813] cdc_ncm 4-1:1.1: skipping garbage [ 686.327458][ T1813] cdc_ncm 4-1:1.1: bind() failure [ 686.335108][T16413] udc-core: couldn't find an available UDC or it's busy [ 686.342935][T16413] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 686.344044][ T1813] usb 4-1: USB disconnect, device number 30 [ 686.402410][T16414] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 686.507872][T16416] EXT4-fs (loop0): 1 orphan inode deleted [ 686.513473][T16416] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota, [ 686.533430][T16416] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038 (0x7fffffff) [ 687.120306][T16427] udc-core: couldn't find an available UDC or it's busy [ 687.127215][T16427] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 687.636072][ T1813] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 688.036037][ T1813] usb 1-1: device descriptor read/64, error -71 [ 688.476056][ T1813] usb 1-1: device descriptor read/64, error -71 [ 688.704980][T16457] netlink: 88 bytes leftover after parsing attributes in process `syz.1.4511'. [ 688.756030][ T1813] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 689.036061][ T1813] usb 1-1: device descriptor read/64, error -71 [ 689.415247][T16462] netlink: 'syz.1.4513': attribute type 28 has an invalid length. [ 689.436181][ T1813] usb 1-1: device descriptor read/64, error -71 [ 689.480295][T16463] bridge0: port 1(bridge_slave_0) entered blocking state [ 689.487803][T16463] bridge0: port 1(bridge_slave_0) entered disabled state [ 689.495145][T16463] device bridge_slave_0 entered promiscuous mode [ 689.502106][T16463] bridge0: port 2(bridge_slave_1) entered blocking state [ 689.509058][T16463] bridge0: port 2(bridge_slave_1) entered disabled state [ 689.516349][T16463] device bridge_slave_1 entered promiscuous mode [ 689.556499][ T1813] usb usb1-port1: attempt power cycle [ 689.637191][T16463] bridge0: port 2(bridge_slave_1) entered blocking state [ 689.644046][T16463] bridge0: port 2(bridge_slave_1) entered forwarding state [ 689.651202][T16463] bridge0: port 1(bridge_slave_0) entered blocking state [ 689.658053][T16463] bridge0: port 1(bridge_slave_0) entered forwarding state [ 689.732142][ T1812] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 689.746307][ T1812] bridge0: port 1(bridge_slave_0) entered disabled state [ 689.753528][ T1812] bridge0: port 2(bridge_slave_1) entered disabled state [ 689.784344][ T1809] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 689.792574][ T1809] bridge0: port 1(bridge_slave_0) entered blocking state [ 689.799704][ T1809] bridge0: port 1(bridge_slave_0) entered forwarding state [ 689.808179][ T1809] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 689.816381][ T1809] bridge0: port 2(bridge_slave_1) entered blocking state [ 689.823233][ T1809] bridge0: port 2(bridge_slave_1) entered forwarding state [ 689.841753][ T1812] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 689.856398][ T1812] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 689.864186][ T1812] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 689.884746][T16484] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4518'. [ 689.889778][T16463] device veth0_vlan entered promiscuous mode [ 689.906479][ T1812] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 689.914647][ T1812] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 689.934473][ T1812] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 689.948990][T16463] device veth1_macvtap entered promiscuous mode [ 689.956162][ T1812] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 689.966150][ T1813] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 689.997488][ T1809] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 690.005793][ T1809] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 690.045283][ T24] audit: type=1400 audit(2000000333.090:2501): avc: denied { lock } for pid=16485 comm="syz.4.4514" path="socket:[87481]" dev="sockfs" ino=87481 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 690.146182][ T1813] usb 1-1: device descriptor read/8, error -71 [ 690.207228][ T9] device bridge_slave_1 left promiscuous mode [ 690.214325][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 690.226968][ T9] device bridge_slave_0 left promiscuous mode [ 690.238340][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 690.253991][ T9] device veth1_macvtap left promiscuous mode [ 690.265817][ T9] device veth0_vlan left promiscuous mode [ 690.436056][ T1813] usb 1-1: device descriptor read/8, error -71 [ 690.995462][T16502] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4522'. [ 691.362072][T16516] bridge0: port 1(bridge_slave_0) entered blocking state [ 691.369066][T16516] bridge0: port 1(bridge_slave_0) entered disabled state [ 691.376980][T16516] device bridge_slave_0 entered promiscuous mode [ 691.397720][T16516] bridge0: port 2(bridge_slave_1) entered blocking state [ 691.405723][T16516] bridge0: port 2(bridge_slave_1) entered disabled state [ 691.415087][T16519] udc-core: couldn't find an available UDC or it's busy [ 691.422360][T16516] device bridge_slave_1 entered promiscuous mode [ 691.426025][T12961] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 691.428861][T16519] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 691.514135][T16516] bridge0: port 2(bridge_slave_1) entered blocking state [ 691.521007][T16516] bridge0: port 2(bridge_slave_1) entered forwarding state [ 691.528127][T16516] bridge0: port 1(bridge_slave_0) entered blocking state [ 691.534865][T16516] bridge0: port 1(bridge_slave_0) entered forwarding state [ 691.561504][ T1812] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 691.570135][ T1812] bridge0: port 1(bridge_slave_0) entered disabled state [ 691.578050][ T1812] bridge0: port 2(bridge_slave_1) entered disabled state [ 691.598383][ T357] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 691.606854][ T357] bridge0: port 1(bridge_slave_0) entered blocking state [ 691.613703][ T357] bridge0: port 1(bridge_slave_0) entered forwarding state [ 691.621242][ T357] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 691.630036][ T357] bridge0: port 2(bridge_slave_1) entered blocking state [ 691.636906][ T357] bridge0: port 2(bridge_slave_1) entered forwarding state [ 691.644408][ T357] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 691.652299][ T357] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 691.671617][ T1809] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 691.676033][T12961] usb 4-1: Using ep0 maxpacket: 8 [ 691.684322][T16516] device veth0_vlan entered promiscuous mode [ 691.691352][ T357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 691.700977][ T357] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 691.708866][ T357] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 691.723046][T16516] device veth1_macvtap entered promiscuous mode [ 691.730141][T12954] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 691.747634][T12955] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 691.756977][T12955] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 691.780143][ T24] audit: type=1400 audit(2000000334.830:2502): avc: denied { setopt } for pid=16524 comm="syz.2.4527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 691.796123][T12961] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 691.799607][ T1813] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 691.817536][ T24] audit: type=1400 audit(2000000334.870:2503): avc: denied { write } for pid=16524 comm="syz.2.4527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 691.870701][ T24] audit: type=1400 audit(2000000334.920:2504): avc: denied { mounton } for pid=16524 comm="syz.2.4527" path="/0/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 691.947003][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 691.954267][ T9] device bridge_slave_0 left promiscuous mode [ 691.960372][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 691.968412][ T9] device team_slave_1 left promiscuous mode [ 691.974259][ T9] device veth1_macvtap left promiscuous mode [ 691.986118][T12961] usb 4-1: New USB device found, idVendor=8086, idProduct=0b03, bcdDevice=f4.28 [ 691.995018][T12961] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 692.002849][T12961] usb 4-1: Product: syz [ 692.006903][T12961] usb 4-1: Manufacturer: syz [ 692.011306][T12961] usb 4-1: SerialNumber: syz [ 692.026551][T12961] usb 4-1: config 0 descriptor?? [ 692.056158][ T1813] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 692.071243][ T1813] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 692.082037][ T1813] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 692.306195][T12961] uvcvideo: Found UVC 0.00 device syz (8086:0b03) [ 692.314459][T12961] uvcvideo: No valid video chain found. [ 692.342240][ T24] audit: type=1400 audit(2000000335.390:2505): avc: denied { read } for pid=16541 comm="syz.4.4534" name="vga_arbiter" dev="devtmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 692.369499][ T24] audit: type=1400 audit(2000000335.420:2506): avc: denied { open } for pid=16541 comm="syz.4.4534" path="/dev/vga_arbiter" dev="devtmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 692.394228][ T24] audit: type=1400 audit(2000000335.420:2507): avc: denied { ioctl } for pid=16541 comm="syz.4.4534" path="/dev/vga_arbiter" dev="devtmpfs" ino=2 ioctlcmd=0x9416 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 692.426293][ T357] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 692.513258][T16507] udc-core: couldn't find an available UDC or it's busy [ 692.520059][T16507] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 692.529607][ T1811] usb 4-1: USB disconnect, device number 31 [ 692.536791][ T1813] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 692.547029][ T1813] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 692.554874][ T1813] usb 1-1: Product: syz [ 692.559428][ T1813] usb 1-1: Manufacturer: syz [ 692.563869][ T1813] usb 1-1: SerialNumber: syz [ 692.607218][ T1813] usb 1-1: selecting invalid altsetting 1 [ 692.646101][T12961] usb 5-1: new low-speed USB device number 125 using dummy_hcd [ 692.705209][T16558] netlink: 88 bytes leftover after parsing attributes in process `syz.3.4535'. [ 692.796106][ T357] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 692.807072][ T357] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 692.816735][ T357] usb 3-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 692.825672][ T357] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 692.840128][ T357] usb 3-1: config 0 descriptor?? [ 692.846501][T16515] netlink: 172 bytes leftover after parsing attributes in process `syz.0.4526'. [ 692.855741][T16515] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4526'. [ 692.887648][T16515] kvm: pic: non byte write [ 692.896147][T12961] usb 5-1: Invalid ep0 maxpacket: 64 [ 692.948181][T16562] syz.1.4536[16562] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 692.948229][T16562] syz.1.4536[16562] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 692.984131][ T24] audit: type=1400 audit(2000000336.030:2508): avc: denied { unmount } for pid=14591 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 693.053805][T12961] usb 5-1: new low-speed USB device number 126 using dummy_hcd [ 693.326114][ T1813] cdc_ncm 1-1:1.0: bind() failure [ 693.333297][ T357] holtek_kbd 0003:04D9:A055.0060: hidraw0: USB HID v0.00 Device [HID 04d9:a055] on usb-dummy_hcd.2-1/input0 [ 693.345278][ T1813] cdc_ncm 1-1:1.1: skipping garbage [ 693.350341][ T1813] cdc_ncm 1-1:1.1: bind() failure [ 693.356081][T12961] usb 5-1: Invalid ep0 maxpacket: 64 [ 693.357409][ T1813] usb 1-1: USB disconnect, device number 10 [ 693.365384][T12961] usb usb5-port1: attempt power cycle [ 693.532685][ T357] usb 3-1: USB disconnect, device number 114 [ 693.786063][T12961] usb 5-1: new low-speed USB device number 127 using dummy_hcd [ 693.876498][T12961] usb 5-1: Invalid ep0 maxpacket: 64 [ 693.943906][ T24] audit: type=1326 audit(2000000336.990:2509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16572 comm="syz.0.4540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d81568bd9 code=0x7ffc0000 [ 693.967814][ T24] audit: type=1326 audit(2000000336.990:2510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16572 comm="syz.0.4540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d81568bd9 code=0x7ffc0000 [ 694.004347][T16594] netlink: 'syz.0.4544': attribute type 32 has an invalid length. [ 694.056048][T12961] usb 5-1: new low-speed USB device number 2 using dummy_hcd [ 694.156373][T12961] usb 5-1: Invalid ep0 maxpacket: 64 [ 694.162212][T12961] usb usb5-port1: unable to enumerate USB device [ 694.636041][ T1813] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 694.782059][T16608] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 694.898074][T16613] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 694.905185][T16613] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 694.919452][T16613] EXT4-fs error (device loop0): __ext4_iget:4958: inode #11: block 1: comm syz.0.4549: invalid block [ 694.930929][T16613] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.4549: couldn't read orphan inode 11 (err -117) [ 694.943316][T16613] EXT4-fs (loop0): mounted filesystem without journal. Opts: noauto_da_alloc,user_xattr,commit=0x0000000000000005,mblk_io_submit,stripe=0x0000000000000004,auto_da_alloc=0x0000000000000008,dioread_nolock,lazytime,quota,,errors=continue [ 694.996127][ T1813] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 242, changing to 11 [ 695.017076][T16389] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 36: comm syz-executor: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 695.017216][ T1813] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 50582, setting to 1024 [ 695.048410][ T8933] EXT4-fs error (device loop0): __ext4_get_inode_loc:4409: comm kworker/u4:5: Invalid inode table block 0 in block_group 0 [ 695.071764][ T1813] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 695.080675][ T1813] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 695.088991][ T1813] usb 4-1: config 0 descriptor?? [ 695.106161][T16605] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 695.212276][T16621] bridge0: port 1(bridge_slave_0) entered blocking state [ 695.219386][T16621] bridge0: port 1(bridge_slave_0) entered disabled state [ 695.226826][T16621] device bridge_slave_0 entered promiscuous mode [ 695.233845][T16621] bridge0: port 2(bridge_slave_1) entered blocking state [ 695.241127][T16621] bridge0: port 2(bridge_slave_1) entered disabled state [ 695.248605][T16621] device bridge_slave_1 entered promiscuous mode [ 695.302143][T16621] bridge0: port 2(bridge_slave_1) entered blocking state [ 695.309026][T16621] bridge0: port 2(bridge_slave_1) entered forwarding state [ 695.316142][T16621] bridge0: port 1(bridge_slave_0) entered blocking state [ 695.322878][T16621] bridge0: port 1(bridge_slave_0) entered forwarding state [ 695.374083][T12956] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 695.382677][T12956] bridge0: port 1(bridge_slave_0) entered disabled state [ 695.390982][T16629] EXT4-fs (loop4): mounted filesystem without journal. Opts: minixdf,nodelalloc,,errors=continue [ 695.402418][T12956] bridge0: port 2(bridge_slave_1) entered disabled state [ 695.409681][T16629] ext4 filesystem being mounted at /7/mnt supports timestamps until 2038 (0x7fffffff) [ 695.428470][T12955] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 695.444834][T12955] bridge0: port 1(bridge_slave_0) entered blocking state [ 695.451729][T12955] bridge0: port 1(bridge_slave_0) entered forwarding state [ 695.459454][T12955] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 695.467925][T12955] bridge0: port 2(bridge_slave_1) entered blocking state [ 695.474777][T12955] bridge0: port 2(bridge_slave_1) entered forwarding state [ 695.493180][T12961] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 695.508580][T12961] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 695.525659][T16621] device veth0_vlan entered promiscuous mode [ 695.532698][ T6846] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 695.541643][ T6846] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 695.550134][ T6846] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 695.559658][ T6846] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 695.573740][T16621] device veth1_macvtap entered promiscuous mode [ 695.585210][T12955] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 695.604563][T12955] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 695.614963][T12955] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 695.765526][ T24] kauditd_printk_skb: 6 callbacks suppressed [ 695.765538][ T24] audit: type=1400 audit(2000000338.810:2517): avc: denied { setattr } for pid=16628 comm="syz.4.4554" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 695.858735][ T7] device bridge_slave_1 left promiscuous mode [ 695.883340][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 695.897673][ T24] audit: type=1400 audit(2000000338.950:2518): avc: denied { rmdir } for pid=16463 comm="syz-executor" name="lost+found" dev="loop4" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 695.922239][ T7] device bridge_slave_0 left promiscuous mode [ 695.936742][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 695.946858][ T7] device veth1_macvtap left promiscuous mode [ 695.952749][ T7] device veth0_vlan left promiscuous mode [ 696.113116][T16643] device gretap0 entered promiscuous mode [ 696.119943][T16643] device vlan2 entered promiscuous mode [ 696.126588][T16643] device gretap0 left promiscuous mode [ 696.638970][T16656] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x38db593b, utbl_chksum : 0xe619d30d) [ 696.716069][ T1813] usb 4-1: string descriptor 0 read error: -71 [ 696.736064][ T1813] uclogic 0003:256C:006D.0061: failed retrieving string descriptor #200: -71 [ 696.749474][ T1813] uclogic 0003:256C:006D.0061: failed retrieving pen parameters: -71 [ 696.757772][ T1813] uclogic 0003:256C:006D.0061: failed probing pen v2 parameters: -71 [ 696.765704][ T1813] uclogic 0003:256C:006D.0061: failed probing parameters: -71 [ 696.774080][ T1813] uclogic: probe of 0003:256C:006D.0061 failed with error -71 [ 696.783531][ T1813] usb 4-1: USB disconnect, device number 32 [ 696.846204][T12956] Bluetooth: hci0: command 0x1003 tx timeout [ 696.864540][T16611] Bluetooth: hci0: sending frame failed (-49) [ 697.646403][ T24] audit: type=1400 audit(2000000340.650:2519): avc: denied { bind } for pid=16679 comm="syz.4.4568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 697.686875][T16682] syz.0.4569 (16682): /proc/16681/oom_adj is deprecated, please use /proc/16681/oom_score_adj instead. [ 697.707374][ T24] audit: type=1400 audit(2000000340.760:2520): avc: denied { bind } for pid=16681 comm="syz.0.4569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 697.726814][ T24] audit: type=1400 audit(2000000340.760:2521): avc: denied { node_bind } for pid=16681 comm="syz.0.4569" saddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 697.751356][T16686] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4571'. [ 697.764438][T16686] device vlan2 entered promiscuous mode [ 697.956073][ T1813] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 698.196084][ T1813] usb 4-1: Using ep0 maxpacket: 8 [ 698.316152][ T1813] usb 4-1: config 0 has no interfaces? [ 698.321435][ T1813] usb 4-1: New USB device found, idVendor=0403, idProduct=f0c8, bcdDevice= 2.56 [ 698.330317][ T1813] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 698.338643][ T1813] usb 4-1: config 0 descriptor?? [ 698.597559][ T24] audit: type=1400 audit(2000000341.650:2522): avc: denied { getopt } for pid=16664 comm="syz.3.4563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 698.620544][ T1813] usb 4-1: USB disconnect, device number 33 [ 698.792074][T16704] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4576'. [ 698.926086][T12955] Bluetooth: hci0: command 0x1001 tx timeout [ 698.938346][T16611] Bluetooth: hci0: sending frame failed (-49) [ 699.896074][ T1811] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 699.906156][ T1813] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 700.316072][ T1813] usb 5-1: Using ep0 maxpacket: 16 [ 700.455484][ T1811] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 700.465746][ T1811] usb 1-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice= 9.99 [ 700.474627][ T1811] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 700.482996][ T1811] usb 1-1: config 0 descriptor?? [ 700.779893][T16734] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4582'. [ 700.987272][ T1811] snd-usb-audio: probe of 1-1:0.0 failed with error -2 [ 700.994714][ T1811] usb 1-1: USB disconnect, device number 11 [ 701.006128][ T1813] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 701.006251][T12955] Bluetooth: hci0: command 0x1009 tx timeout [ 701.015252][ T1813] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 701.028965][ T1813] usb 5-1: Product: syz [ 701.032948][ T1813] usb 5-1: Manufacturer: syz [ 701.037416][ T1813] usb 5-1: SerialNumber: syz [ 701.520881][ T1813] usb 5-1: config 0 descriptor?? [ 701.580707][T16752] bridge0: port 1(bridge_slave_0) entered blocking state [ 701.588171][T16752] bridge0: port 1(bridge_slave_0) entered disabled state [ 701.595472][T16752] device bridge_slave_0 entered promiscuous mode [ 701.607109][T16752] bridge0: port 2(bridge_slave_1) entered blocking state [ 701.614449][T16752] bridge0: port 2(bridge_slave_1) entered disabled state [ 701.621992][T16752] device bridge_slave_1 entered promiscuous mode [ 701.672713][T16752] bridge0: port 2(bridge_slave_1) entered blocking state [ 701.679569][T16752] bridge0: port 2(bridge_slave_1) entered forwarding state [ 701.686670][T16752] bridge0: port 1(bridge_slave_0) entered blocking state [ 701.693440][T16752] bridge0: port 1(bridge_slave_0) entered forwarding state [ 701.713420][T12956] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 701.721228][T12956] bridge0: port 1(bridge_slave_0) entered disabled state [ 701.728599][T12956] bridge0: port 2(bridge_slave_1) entered disabled state [ 701.744460][T12956] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 701.752836][T12956] bridge0: port 1(bridge_slave_0) entered blocking state [ 701.759787][T12956] bridge0: port 1(bridge_slave_0) entered forwarding state [ 701.767882][T12956] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 701.775913][T12956] bridge0: port 2(bridge_slave_1) entered blocking state [ 701.782781][T12956] bridge0: port 2(bridge_slave_1) entered forwarding state [ 701.839286][T12955] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 701.847297][T12955] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 701.863473][T16752] device veth0_vlan entered promiscuous mode [ 701.889807][T12956] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 701.906430][T12956] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 701.918010][T12956] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 701.935522][T12956] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 701.960584][T16752] device veth1_macvtap entered promiscuous mode [ 701.977618][T12955] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 701.997956][T12956] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 702.016509][T12956] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 702.216991][ T8933] device bridge_slave_1 left promiscuous mode [ 702.223884][ T8933] bridge0: port 2(bridge_slave_1) entered disabled state [ 702.253714][ T8933] device bridge_slave_0 left promiscuous mode [ 702.273382][ T8933] bridge0: port 1(bridge_slave_0) entered disabled state [ 702.296596][ T8933] device veth1_macvtap left promiscuous mode [ 702.316109][ T8933] device veth0_vlan left promiscuous mode [ 702.321760][T16758] xt_TCPMSS: Only works on TCP SYN packets [ 702.329121][ T1813] usb 5-1: USB disconnect, device number 3 [ 702.725189][T16781] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 702.743907][T16781] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 702.763396][T16781] EXT4-fs error (device loop4): __ext4_iget:4958: inode #11: block 1: comm syz.4.4596: invalid block [ 702.774285][T16781] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.4596: couldn't read orphan inode 11 (err -117) [ 702.899013][T16781] EXT4-fs (loop4): mounted filesystem without journal. Opts: noauto_da_alloc,user_xattr,commit=0x0000000000000005,mblk_io_submit,stripe=0x0000000000000004,auto_da_alloc=0x0000000000000008,dioread_nolock,lazytime,quota,,errors=continue [ 704.480790][T16804] netlink: 'syz.0.4602': attribute type 37 has an invalid length. [ 704.643348][T16819] netlink: 88 bytes leftover after parsing attributes in process `syz.3.4606'. [ 704.783904][T16822] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4607'. [ 704.826165][T12955] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 705.071728][T16831] bridge0: port 1(bridge_slave_0) entered blocking state [ 705.078973][T16831] bridge0: port 1(bridge_slave_0) entered disabled state [ 705.086713][T16831] device bridge_slave_0 entered promiscuous mode [ 705.093740][T16831] bridge0: port 2(bridge_slave_1) entered blocking state [ 705.100970][T16831] bridge0: port 2(bridge_slave_1) entered disabled state [ 705.116750][T16831] device bridge_slave_1 entered promiscuous mode [ 705.196089][T12955] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 705.210979][T12955] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 705.229790][T12955] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 705.246778][T12955] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 705.256407][T16831] bridge0: port 2(bridge_slave_1) entered blocking state [ 705.263262][T16831] bridge0: port 2(bridge_slave_1) entered forwarding state [ 705.270400][T16831] bridge0: port 1(bridge_slave_0) entered blocking state [ 705.277148][T16831] bridge0: port 1(bridge_slave_0) entered forwarding state [ 705.285347][T12955] usb 1-1: config 0 descriptor?? [ 705.387109][ T1811] bridge0: port 1(bridge_slave_0) entered disabled state [ 705.396602][ T1811] bridge0: port 2(bridge_slave_1) entered disabled state [ 705.418869][ T1811] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 705.440504][ T1811] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 705.521245][ T1811] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 705.543228][ T1811] bridge0: port 1(bridge_slave_0) entered blocking state [ 705.550104][ T1811] bridge0: port 1(bridge_slave_0) entered forwarding state [ 705.566132][ T1811] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 705.584280][ T1811] bridge0: port 2(bridge_slave_1) entered blocking state [ 705.591148][ T1811] bridge0: port 2(bridge_slave_1) entered forwarding state [ 705.626357][T12955] hid (null): bogus close delimiter [ 705.633876][ T1811] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 705.662227][T12956] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 705.681458][ T6846] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 705.696250][T16831] device veth0_vlan entered promiscuous mode [ 705.763901][T12961] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 705.776278][ T6846] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 705.783538][ T6846] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 705.795821][ T1811] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 705.805126][T16831] device veth1_macvtap entered promiscuous mode [ 705.846106][T12955] usb 1-1: language id specifier not provided by device, defaulting to English [ 705.905200][ T6846] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 705.922853][ T570] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 706.666108][ T6846] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 706.774049][T16860] overlayfs: './file1' not a directory [ 706.785320][ T9] device bridge_slave_1 left promiscuous mode [ 706.794515][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 706.819097][ T9] device bridge_slave_0 left promiscuous mode [ 706.825110][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 706.833893][ T9] device veth1_macvtap left promiscuous mode [ 706.843158][ T9] device veth0_vlan left promiscuous mode [ 706.901740][T12955] uclogic 0003:256C:006D.0062: failed retrieving string descriptor #200: -71 [ 706.910703][T12955] uclogic 0003:256C:006D.0062: failed retrieving pen parameters: -71 [ 706.919061][T12955] uclogic 0003:256C:006D.0062: failed probing pen v2 parameters: -71 [ 706.928396][T12955] uclogic 0003:256C:006D.0062: failed probing parameters: -71 [ 706.935717][T12955] uclogic: probe of 0003:256C:006D.0062 failed with error -71 [ 707.075175][T12955] usb 1-1: USB disconnect, device number 12 [ 707.174359][T16872] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=16872 comm=syz.1.4618 [ 707.216281][ T24] audit: type=1326 audit(2000000350.210:2523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16868 comm="syz.1.4618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7bf1e7bd9 code=0x7ffc0000 [ 707.296487][ T6846] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 707.315422][ T24] audit: type=1326 audit(2000000350.210:2524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16868 comm="syz.1.4618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7bf1e7bd9 code=0x7ffc0000 [ 707.339216][ T24] audit: type=1326 audit(2000000350.210:2525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16868 comm="syz.1.4618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fd7bf1e6517 code=0x7ffc0000 [ 707.362592][ T24] audit: type=1326 audit(2000000350.210:2526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16868 comm="syz.1.4618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7bf1e7bd9 code=0x7ffc0000 [ 707.386086][T16857] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 707.393595][ T24] audit: type=1326 audit(2000000350.220:2527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16868 comm="syz.1.4618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7bf1e7bd9 code=0x7ffc0000 [ 707.416982][ T24] audit: type=1326 audit(2000000350.220:2528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16868 comm="syz.1.4618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd7bf1e7bd9 code=0x7ffc0000 [ 707.440430][ T24] audit: type=1326 audit(2000000350.220:2529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16868 comm="syz.1.4618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7bf1e7bd9 code=0x7ffc0000 [ 707.464197][ T24] audit: type=1326 audit(2000000350.220:2530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16868 comm="syz.1.4618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7bf1e7bd9 code=0x7ffc0000 [ 707.487806][ T24] audit: type=1326 audit(2000000350.220:2531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16868 comm="syz.1.4618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=284 compat=0 ip=0x7fd7bf1e7bd9 code=0x7ffc0000 [ 707.506156][ T6846] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 707.511729][ T24] audit: type=1326 audit(2000000350.220:2532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16868 comm="syz.1.4618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7bf1e7bd9 code=0x7ffc0000 [ 707.560734][ T6846] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 707.577391][ T6846] usb 4-1: Product: syz [ 707.584074][ T6846] usb 4-1: Manufacturer: syz [ 707.589060][ T6846] usb 4-1: SerialNumber: syz [ 707.694762][T16877] 9pnet: Insufficient options for proto=fd [ 707.840984][T16848] udc-core: couldn't find an available UDC or it's busy [ 707.848053][T16848] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 707.926099][T16857] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 707.936221][T16857] usb 3-1: config 0 interface 0 altsetting 129 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 707.948185][T16857] usb 3-1: config 0 interface 0 altsetting 129 endpoint 0x81 has invalid wMaxPacketSize 0 [ 707.958682][T16857] usb 3-1: config 0 interface 0 has no altsetting 0 [ 707.965172][T16857] usb 3-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 707.974403][T16857] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 707.986091][T16857] usb 3-1: config 0 descriptor?? [ 708.203890][T16879] F2FS-fs (loop0): Test dummy encryption mode enabled [ 708.215898][T16879] F2FS-fs (loop0): Found nat_bits in checkpoint [ 708.249264][T16879] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 709.030481][T16902] netlink: 'syz.2.4615': attribute type 3 has an invalid length. [ 709.038107][T16902] netlink: 'syz.2.4615': attribute type 3 has an invalid length. [ 709.326285][ T6846] cdc_ncm 4-1:1.0: bind() failure [ 709.348336][ T6846] cdc_ncm: probe of 4-1:1.1 failed with error -71 [ 709.446426][ T6846] cdc_mbim: probe of 4-1:1.1 failed with error -71 [ 709.486214][ T6846] usb 4-1: USB disconnect, device number 34 [ 709.685185][T16904] F2FS-fs (loop0): Found nat_bits in checkpoint [ 709.798062][T16904] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 710.251402][T16752] attempt to access beyond end of device [ 710.251402][T16752] loop0: rw=2049, want=45104, limit=40427 [ 710.326096][T16857] usbhid 3-1:0.0: can't add hid device: -71 [ 710.332046][T16857] usbhid: probe of 3-1:0.0 failed with error -71 [ 710.344878][T16857] usb 3-1: USB disconnect, device number 115 [ 710.407973][T16930] syz.2.4632[16930] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 710.408039][T16930] syz.2.4632[16930] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 710.502834][T16937] ip6_tunnel: non-ECT from fe88:0000:0000:0000:0000:0000:0000:0001 with DS=0x2 [ 710.732223][T16933] F2FS-fs (loop4): invalid crc value [ 710.748087][T16933] F2FS-fs (loop4): invalid crc value [ 710.753213][T16933] F2FS-fs (loop4): Failed to get valid F2FS checkpoint [ 710.846234][T16857] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 711.086158][T16857] usb 1-1: Using ep0 maxpacket: 16 [ 711.306076][ T570] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 711.361545][T16857] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 711.386027][T16857] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 711.404033][T16857] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 711.421936][T16857] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 711.436820][T16857] usb 1-1: config 0 descriptor?? [ 711.566217][ T570] usb 5-1: Using ep0 maxpacket: 16 [ 711.676746][T16937] udc-core: couldn't find an available UDC or it's busy [ 711.683572][T16937] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 711.716097][ T570] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 711.726169][ T1810] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 711.727260][ T570] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 711.744268][ T570] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 711.755189][ T570] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 711.849782][T16937] F2FS-fs (loop0): invalid crc value [ 711.856284][ T570] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 711.856811][T16937] F2FS-fs (loop0): Found nat_bits in checkpoint [ 711.865362][ T570] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 711.879406][ T570] usb 5-1: SerialNumber: syz [ 711.893993][T16937] F2FS-fs (loop0): Cannot turn on quotas: -2 on 1 [ 711.900970][T16937] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 711.936542][ T570] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 711.963856][ T570] cdc_acm: probe of 5-1:1.0 failed with error -12 [ 711.976234][ T1810] usb 3-1: Using ep0 maxpacket: 32 [ 711.986986][T16973] FAULT_INJECTION: forcing a failure. [ 711.986986][T16973] name failslab, interval 1, probability 0, space 0, times 0 [ 711.999649][T16973] CPU: 1 PID: 16973 Comm: syz.1.4644 Not tainted 5.10.218-syzkaller-00638-g3feee789f446 #0 [ 712.009353][T16973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 712.019253][T16973] Call Trace: [ 712.022376][T16973] dump_stack_lvl+0x1e2/0x24b [ 712.026884][T16973] ? bfq_pos_tree_add_move+0x43b/0x43b [ 712.032176][T16973] dump_stack+0x15/0x17 [ 712.036167][T16973] should_fail+0x3c6/0x510 [ 712.040423][T16973] ? getname_flags+0xba/0x520 [ 712.045025][T16973] __should_failslab+0xa4/0xe0 [ 712.049622][T16973] should_failslab+0x9/0x20 [ 712.054326][T16973] kmem_cache_alloc+0x3d/0x2e0 [ 712.058913][T16973] getname_flags+0xba/0x520 [ 712.063247][T16973] __x64_sys_renameat2+0xc8/0xf0 [ 712.068025][T16973] do_syscall_64+0x34/0x70 [ 712.072273][T16973] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 712.078003][T16973] RIP: 0033:0x7fd7bf1e7bd9 [ 712.082253][T16973] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 712.101698][T16973] RSP: 002b:00007fd7be469048 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 712.109939][T16973] RAX: ffffffffffffffda RBX: 00007fd7bf375f60 RCX: 00007fd7bf1e7bd9 [ 712.117756][T16973] RDX: 000000000000000b RSI: 0000000020000000 RDI: 000000000000000a [ 712.125560][T16973] RBP: 00007fd7be4690a0 R08: 0000000000000002 R09: 0000000000000000 [ 712.133373][T16973] R10: 00000000200004c0 R11: 0000000000000246 R12: 0000000000000001 [ 712.139971][T16947] udc-core: couldn't find an available UDC or it's busy [ 712.141184][T16973] R13: 000000000000000b R14: 00007fd7bf375f60 R15: 00007fff5d563738 [ 712.158155][T16947] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 712.171904][ T570] usb 5-1: USB disconnect, device number 4 [ 712.182431][T16977] udc-core: couldn't find an available UDC or it's busy [ 712.189346][T16977] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 712.197351][T16857] usbhid 1-1:0.0: can't add hid device: -71 [ 712.203356][T16857] usbhid: probe of 1-1:0.0 failed with error -71 [ 712.210568][T16857] usb 1-1: USB disconnect, device number 13 [ 712.256120][ T1810] usb 3-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 712.265128][ T1810] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 712.273038][ T1810] usb 3-1: Product: syz [ 712.277092][ T1810] usb 3-1: Manufacturer: syz [ 712.281416][ T1810] usb 3-1: SerialNumber: syz [ 712.286835][ T1810] usb 3-1: config 0 descriptor?? [ 712.544662][T16986] xt_TCPMSS: Only works on TCP SYN packets [ 713.329557][T17023] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4655'. [ 713.423800][T17023] device macsec1 entered promiscuous mode [ 713.442686][T17023] device team_slave_1 entered promiscuous mode [ 713.670571][T17032] device syzkaller0 entered promiscuous mode [ 713.963908][ T387] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 714.206330][ T387] usb 4-1: Using ep0 maxpacket: 16 [ 714.246108][ T387] usb 4-1: too many configurations: 218, using maximum allowed: 8 [ 714.366136][ T387] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 714.373574][ T387] usb 4-1: can't read configurations, error -61 [ 714.386066][T12954] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 714.526315][ T387] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 714.976724][T12954] usb 1-1: device descriptor read/64, error -71 [ 715.399914][T12954] usb 1-1: device descriptor read/64, error -71 [ 715.836923][ T387] usb 4-1: Using ep0 maxpacket: 16 [ 715.896056][T12954] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 715.896112][ T570] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 716.015430][ T387] usb 4-1: too many configurations: 218, using maximum allowed: 8 [ 716.196065][T12954] usb 1-1: device descriptor read/64, error -71 [ 716.276093][ T570] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 716.286976][ T570] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 716.296805][ T570] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 716.309282][ T570] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 716.321150][ T570] usb 5-1: config 0 descriptor?? [ 716.385698][T17074] udc-core: couldn't find an available UDC or it's busy [ 716.400409][T17074] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 716.616028][T12954] usb 1-1: device descriptor read/64, error -71 [ 716.676098][ T387] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 716.683610][ T387] usb 4-1: can't read configurations, error -71 [ 716.689881][ T387] usb usb4-port1: attempt power cycle [ 716.746171][T12954] usb usb1-port1: attempt power cycle [ 716.761520][T17082] syz.3.4677[17082] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 716.761563][T17082] syz.3.4677[17082] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 716.836101][ T1810] rtl8150 3-1:0.0: couldn't reset the device [ 716.853454][ T1810] rtl8150: probe of 3-1:0.0 failed with error -5 [ 716.860816][ T1810] usb 3-1: USB disconnect, device number 116 [ 717.016099][ T570] usb 5-1: language id specifier not provided by device, defaulting to English [ 717.160741][T17093] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 717.174445][T17093] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 717.186852][T12954] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 717.212829][T17093] EXT4-fs error (device loop0): __ext4_iget:4958: inode #11: block 1: comm syz.0.4681: invalid block [ 717.233473][T17093] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.4681: couldn't read orphan inode 11 (err -117) [ 717.245562][T17093] EXT4-fs (loop0): mounted filesystem without journal. Opts: noauto_da_alloc,user_xattr,commit=0x0000000000000005,mblk_io_submit,stripe=0x0000000000000004,auto_da_alloc=0x0000000000000008,dioread_nolock,lazytime,quota,,errors=continue [ 717.322761][T17093] FAULT_INJECTION: forcing a failure. [ 717.322761][T17093] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 717.362045][T17093] CPU: 1 PID: 17093 Comm: syz.0.4681 Not tainted 5.10.218-syzkaller-00638-g3feee789f446 #0 [ 717.371839][T17093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 717.381728][T17093] Call Trace: [ 717.384872][T17093] dump_stack_lvl+0x1e2/0x24b [ 717.389375][T17093] ? panic+0x812/0x812 [ 717.393280][T17093] ? bfq_pos_tree_add_move+0x43b/0x43b [ 717.398577][T17093] dump_stack+0x15/0x17 [ 717.402565][T17093] should_fail+0x3c6/0x510 [ 717.406822][T17093] should_fail_usercopy+0x1a/0x20 [ 717.411680][T17093] strncpy_from_user+0x24/0x2d0 [ 717.416369][T17093] ? getname_flags+0xba/0x520 [ 717.420879][T17093] getname_flags+0xf2/0x520 [ 717.425223][T17093] __x64_sys_renameat2+0xc8/0xf0 [ 717.429992][T17093] do_syscall_64+0x34/0x70 [ 717.434247][T17093] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 717.439972][T17093] RIP: 0033:0x7f01c59a3bd9 [ 717.444229][T17093] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 717.463665][T17093] RSP: 002b:00007f01c4c25048 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 717.471912][T17093] RAX: ffffffffffffffda RBX: 00007f01c5b31f60 RCX: 00007f01c59a3bd9 [ 717.479719][T17093] RDX: 000000000000000c RSI: 0000000020000000 RDI: 000000000000000b [ 717.487529][T17093] RBP: 00007f01c4c250a0 R08: 0000000000000002 R09: 0000000000000000 [ 717.495344][T17093] R10: 00000000200004c0 R11: 0000000000000246 R12: 0000000000000001 [ 717.503153][T17093] R13: 000000000000000b R14: 00007f01c5b31f60 R15: 00007ffd8fb7dae8 [ 717.649170][T16752] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 36: comm syz-executor: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 717.680057][ T8933] EXT4-fs error (device loop0): __ext4_get_inode_loc:4409: comm kworker/u4:5: Invalid inode table block 0 in block_group 0 [ 717.736213][ T570] uclogic 0003:256C:006D.0063: failed retrieving string descriptor #100: -71 [ 717.744860][ T570] uclogic 0003:256C:006D.0063: failed retrieving pen parameters: -71 [ 717.752916][T12954] usb 1-1: device not accepting address 16, error -71 [ 717.764656][ T570] uclogic 0003:256C:006D.0063: failed probing pen v1 parameters: -71 [ 717.796595][ T570] uclogic 0003:256C:006D.0063: failed probing parameters: -71 [ 717.814826][ T570] uclogic: probe of 0003:256C:006D.0063 failed with error -71 [ 717.844121][ T570] usb 5-1: USB disconnect, device number 5 [ 717.965597][T17108] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4685'. [ 718.011605][T17106] bridge0: port 1(bridge_slave_0) entered blocking state [ 718.030942][T17106] bridge0: port 1(bridge_slave_0) entered disabled state [ 718.046378][T17106] device bridge_slave_0 entered promiscuous mode [ 718.066085][T17106] bridge0: port 2(bridge_slave_1) entered blocking state [ 718.072941][T17106] bridge0: port 2(bridge_slave_1) entered disabled state [ 718.096186][T17106] device bridge_slave_1 entered promiscuous mode [ 718.194677][T17106] bridge0: port 2(bridge_slave_1) entered blocking state [ 718.201551][T17106] bridge0: port 2(bridge_slave_1) entered forwarding state [ 718.208644][T17106] bridge0: port 1(bridge_slave_0) entered blocking state [ 718.215416][T17106] bridge0: port 1(bridge_slave_0) entered forwarding state [ 718.249444][T17117] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17117 comm=syz.4.4689 [ 718.304381][ T570] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 718.315279][ T570] bridge0: port 1(bridge_slave_0) entered disabled state [ 718.327044][T17120] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 718.337419][ T570] bridge0: port 2(bridge_slave_1) entered disabled state [ 718.356712][T17120] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 718.364491][T17120] System zones: 1-12 [ 718.372591][T12958] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 718.384091][T17120] EXT4-fs (loop4): 1 truncate cleaned up [ 718.389836][T12958] bridge0: port 1(bridge_slave_0) entered blocking state [ 718.396698][T12958] bridge0: port 1(bridge_slave_0) entered forwarding state [ 718.405243][T17120] EXT4-fs (loop4): mounted filesystem without journal. Opts: nogrpid,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000068,debug,nombcache,quota,,errors=continue [ 718.422775][T12958] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 718.430985][T12958] bridge0: port 2(bridge_slave_1) entered blocking state [ 718.437837][T12958] bridge0: port 2(bridge_slave_1) entered forwarding state [ 718.451442][T12958] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 718.463092][T12958] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 718.495231][ T24] kauditd_printk_skb: 48 callbacks suppressed [ 718.495241][ T24] audit: type=1400 audit(2000000361.540:2581): avc: denied { rename } for pid=17119 comm="syz.4.4690" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 718.497375][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 718.509703][ T24] audit: type=1400 audit(2000000361.550:2582): avc: denied { reparent } for pid=17119 comm="syz.4.4690" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 718.558301][T16463] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 13: comm syz-executor: path /36/file2: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 718.568614][T17106] device veth0_vlan entered promiscuous mode [ 718.584653][ T7] EXT4-fs error (device loop4): __ext4_get_inode_loc:4409: comm kworker/u4:0: Invalid inode table block 0 in block_group 0 [ 718.600265][ T1810] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 718.600869][ T7] EXT4-fs error (device loop4): __ext4_get_inode_loc:4409: comm kworker/u4:0: Invalid inode table block 0 in block_group 0 [ 718.611327][ T1810] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 718.646407][ T1810] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 718.653474][ T7] EXT4-fs error (device loop4): __ext4_get_inode_loc:4409: comm kworker/u4:0: Invalid inode table block 0 in block_group 0 [ 718.685971][T17106] device veth1_macvtap entered promiscuous mode [ 718.694803][ T570] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 718.707819][ T570] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 718.724817][ T8933] device bridge_slave_1 left promiscuous mode [ 718.732870][ T8933] bridge0: port 2(bridge_slave_1) entered disabled state [ 718.747416][ T8933] device bridge_slave_0 left promiscuous mode [ 718.763516][ T8933] bridge0: port 1(bridge_slave_0) entered disabled state [ 718.777055][ T8933] device veth1_macvtap left promiscuous mode [ 718.788701][ T8933] device veth0_vlan left promiscuous mode [ 719.093043][T12958] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 719.293237][T17145] bridge0: port 1(bridge_slave_0) entered blocking state [ 719.317574][T17145] bridge0: port 1(bridge_slave_0) entered disabled state [ 719.339444][T17145] device bridge_slave_0 entered promiscuous mode [ 719.364473][T17145] bridge0: port 2(bridge_slave_1) entered blocking state [ 719.385209][T17145] bridge0: port 2(bridge_slave_1) entered disabled state [ 719.405944][T17145] device bridge_slave_1 entered promiscuous mode [ 719.476962][T17145] bridge0: port 2(bridge_slave_1) entered blocking state [ 719.483867][T17145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 719.490937][T17145] bridge0: port 1(bridge_slave_0) entered blocking state [ 719.497725][T17145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 719.527046][T12954] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 719.534770][T12954] bridge0: port 1(bridge_slave_0) entered disabled state [ 719.542590][T12954] bridge0: port 2(bridge_slave_1) entered disabled state [ 719.561274][T12958] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 719.570566][T12958] bridge0: port 1(bridge_slave_0) entered blocking state [ 719.577426][T12958] bridge0: port 1(bridge_slave_0) entered forwarding state [ 719.585149][T12958] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 719.629898][T12958] bridge0: port 2(bridge_slave_1) entered blocking state [ 719.636784][T12958] bridge0: port 2(bridge_slave_1) entered forwarding state [ 719.653753][ T6846] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 719.663075][ T6846] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 719.680796][T17145] device veth0_vlan entered promiscuous mode [ 719.689230][ T1810] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 719.706785][ T1810] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 719.714590][ T1810] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 719.736611][ T1810] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 719.753948][ T6846] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 719.766314][T17145] device veth1_macvtap entered promiscuous mode [ 719.786213][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 719.796961][ T6846] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 719.916880][ T8933] device bridge_slave_1 left promiscuous mode [ 719.922954][ T8933] bridge0: port 2(bridge_slave_1) entered disabled state [ 719.934366][ T8933] device bridge_slave_0 left promiscuous mode [ 719.941108][ T8933] bridge0: port 1(bridge_slave_0) entered disabled state [ 719.955284][ T8933] device veth1_macvtap left promiscuous mode [ 719.961659][ T8933] device veth0_vlan left promiscuous mode [ 720.697266][ T24] audit: type=1326 audit(2000000363.750:2583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17188 comm="syz.4.4710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd30b55bd9 code=0x7ffc0000 [ 720.720689][ T24] audit: type=1326 audit(2000000363.750:2584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17188 comm="syz.4.4710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd30b55bd9 code=0x7ffc0000 [ 720.745059][ T24] audit: type=1326 audit(2000000363.750:2585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17188 comm="syz.4.4710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fdd30b55bd9 code=0x7ffc0000 [ 720.769546][T12958] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 720.785084][ T24] audit: type=1326 audit(2000000363.750:2586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17188 comm="syz.4.4710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd30b55bd9 code=0x7ffc0000 [ 720.810029][ T24] audit: type=1326 audit(2000000363.750:2587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17188 comm="syz.4.4710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd30b55bd9 code=0x7ffc0000 [ 720.834179][ T24] audit: type=1326 audit(2000000363.750:2588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17188 comm="syz.4.4710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdd30b55bd9 code=0x7ffc0000 [ 720.859459][ T24] audit: type=1326 audit(2000000363.750:2589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17188 comm="syz.4.4710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd30b55bd9 code=0x7ffc0000 [ 720.883161][ T24] audit: type=1326 audit(2000000363.750:2590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17188 comm="syz.4.4710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd30b55bd9 code=0x7ffc0000 [ 721.124074][T12958] usb 4-1: Using ep0 maxpacket: 16 [ 721.129289][ T570] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 721.567019][T12958] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 721.592647][T12958] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 721.644920][T12958] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 721.719718][T12958] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 721.737833][T12958] usb 4-1: config 0 descriptor?? [ 721.806273][ T570] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 721.817470][ T570] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 721.827724][ T570] usb 5-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 721.836851][ T570] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 721.854546][ T570] usb 5-1: config 0 descriptor?? [ 722.166045][ T1813] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 722.166055][T12961] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 722.210816][T12958] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0064/input/input51 [ 722.286977][T12958] microsoft 0003:045E:07DA.0064: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 722.416065][ T1813] usb 3-1: Using ep0 maxpacket: 16 [ 722.456154][ T1813] usb 3-1: too many configurations: 218, using maximum allowed: 8 [ 722.466041][T12961] usb 1-1: device descriptor read/64, error -71 [ 722.576146][ T1813] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 722.583571][ T1813] usb 3-1: can't read configurations, error -61 [ 722.610908][T12954] usb 4-1: USB disconnect, device number 38 [ 722.736128][ T1813] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 722.886158][T12961] usb 1-1: device descriptor read/64, error -71 [ 723.166146][T12961] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 723.176554][T17223] incfs: mount failed -22 [ 723.180937][T17223] incfs: mount failed -22 [ 723.185243][T17223] incfs: mount failed -22 [ 723.186088][ T1813] usb 3-1: Using ep0 maxpacket: 16 [ 723.189986][T17223] incfs: mount failed -22 [ 723.198733][T17223] incfs: mount failed -22 [ 723.203038][T17223] incfs: mount failed -22 [ 723.207526][T17223] incfs: mount failed -22 [ 723.211786][T17223] incfs: mount failed -22 [ 723.215946][T17223] incfs: mount failed -22 [ 723.220191][T17223] incfs: mount failed -22 [ 723.224536][T17223] incfs: mount failed -22 [ 723.226153][ T1813] usb 3-1: too many configurations: 218, using maximum allowed: 8 [ 723.328149][T17227] bridge0: port 1(bridge_slave_0) entered blocking state [ 723.334991][T17227] bridge0: port 1(bridge_slave_0) entered disabled state [ 723.342526][T17227] device bridge_slave_0 entered promiscuous mode [ 723.351238][T17227] bridge0: port 2(bridge_slave_1) entered blocking state [ 723.356095][ T1813] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 723.358457][T17227] bridge0: port 2(bridge_slave_1) entered disabled state [ 723.365552][ T1813] usb 3-1: can't read configurations, error -61 [ 723.372984][T17227] device bridge_slave_1 entered promiscuous mode [ 723.378548][ T1813] usb usb3-port1: attempt power cycle [ 723.416099][T17227] bridge0: port 2(bridge_slave_1) entered blocking state [ 723.422945][T17227] bridge0: port 2(bridge_slave_1) entered forwarding state [ 723.430058][T17227] bridge0: port 1(bridge_slave_0) entered blocking state [ 723.436834][T17227] bridge0: port 1(bridge_slave_0) entered forwarding state [ 723.446088][T12961] usb 1-1: device descriptor read/64, error -71 [ 723.458654][ T1810] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 723.466304][ T1810] bridge0: port 1(bridge_slave_0) entered disabled state [ 723.473383][ T1810] bridge0: port 2(bridge_slave_1) entered disabled state [ 723.482571][ T6846] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 723.490845][ T6846] bridge0: port 1(bridge_slave_0) entered blocking state [ 723.497701][ T6846] bridge0: port 1(bridge_slave_0) entered forwarding state [ 723.508640][T12954] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 723.516624][T12954] bridge0: port 2(bridge_slave_1) entered blocking state [ 723.523468][T12954] bridge0: port 2(bridge_slave_1) entered forwarding state [ 723.536504][ T1810] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 723.545398][T12954] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 723.572473][ T1810] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 723.585428][T17227] device veth0_vlan entered promiscuous mode [ 723.592603][T16857] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 723.600819][T16857] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 723.608951][T16857] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 723.625127][T17227] device veth1_macvtap entered promiscuous mode [ 723.633949][ T1810] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 723.646115][ T1810] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 723.654362][ T1810] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 723.906073][T12961] usb 1-1: device descriptor read/64, error -71 [ 723.948094][ T570] usbhid 5-1:0.0: can't add hid device: -71 [ 723.974870][ T570] usbhid: probe of 5-1:0.0 failed with error -71 [ 723.993055][T17238] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 724.007038][ T570] usb 5-1: USB disconnect, device number 6 [ 724.013533][T17238] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 724.045338][ T9] device bridge_slave_1 left promiscuous mode [ 724.081160][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 724.088250][ T1813] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 724.095661][T17238] EXT4-fs error (device loop4): __ext4_iget:4958: inode #11: block 1: comm syz.4.4725: invalid block [ 724.106764][ T9] device bridge_slave_0 left promiscuous mode [ 724.107046][T12961] usb usb1-port1: attempt power cycle [ 724.112777][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 724.118126][T17238] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.4725: couldn't read orphan inode 11 (err -117) [ 724.136764][T17238] EXT4-fs (loop4): mounted filesystem without journal. Opts: noauto_da_alloc,user_xattr,commit=0x0000000000000005,mblk_io_submit,stripe=0x0000000000000004,auto_da_alloc=0x0000000000000008,dioread_nolock,lazytime,quota,,errors=continue [ 724.159288][ T9] device team_slave_1 left promiscuous mode [ 724.166406][ T9] device veth1_macvtap left promiscuous mode [ 724.172310][ T9] device veth0_vlan left promiscuous mode [ 724.178099][ T1813] usb 3-1: Using ep0 maxpacket: 16 [ 724.196613][T17145] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 36: comm syz-executor: path /2/wÅü5ÔTÕÔ)­`)YFæ¾nA­½@T<Ÿ3»Ú‚$¢ó×rçcnH³<¿pƒrèñ¹“>ÅwC¾" žð-ùËòöè€Ó8: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 724.216223][ T1813] usb 3-1: too many configurations: 218, using maximum allowed: 8 [ 724.232158][ T8933] EXT4-fs error (device loop4): __ext4_get_inode_loc:4409: comm kworker/u4:5: Invalid inode table block 0 in block_group 0 [ 724.346159][ T1813] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 724.353635][ T1813] usb 3-1: can't read configurations, error -61 [ 724.404505][T17245] bridge0: port 1(bridge_slave_0) entered blocking state [ 724.411597][T17245] bridge0: port 1(bridge_slave_0) entered disabled state [ 724.419131][T17245] device bridge_slave_0 entered promiscuous mode [ 724.426512][T17245] bridge0: port 2(bridge_slave_1) entered blocking state [ 724.436680][T17245] bridge0: port 2(bridge_slave_1) entered disabled state [ 724.444421][T17245] device bridge_slave_1 entered promiscuous mode [ 724.493815][T17245] bridge0: port 2(bridge_slave_1) entered blocking state [ 724.500681][T17245] bridge0: port 2(bridge_slave_1) entered forwarding state [ 724.506045][ T1813] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 724.507789][T17245] bridge0: port 1(bridge_slave_0) entered blocking state [ 724.522033][T17245] bridge0: port 1(bridge_slave_0) entered forwarding state [ 724.529437][T12961] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 724.556984][T12955] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 724.574305][T12955] bridge0: port 1(bridge_slave_0) entered disabled state [ 724.584606][T12955] bridge0: port 2(bridge_slave_1) entered disabled state [ 724.602071][ T24] kauditd_printk_skb: 35 callbacks suppressed [ 724.602083][ T24] audit: type=1400 audit(2000000367.650:2626): avc: denied { read } for pid=17253 comm="syz.3.4731" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 724.628045][ T1813] usb 3-1: Using ep0 maxpacket: 16 [ 724.646857][ T570] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 724.655736][ T570] bridge0: port 1(bridge_slave_0) entered blocking state [ 724.662606][ T570] bridge0: port 1(bridge_slave_0) entered forwarding state [ 724.666135][ T1813] usb 3-1: too many configurations: 218, using maximum allowed: 8 [ 724.670497][ T570] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 724.690722][ T570] bridge0: port 2(bridge_slave_1) entered blocking state [ 724.697584][ T570] bridge0: port 2(bridge_slave_1) entered forwarding state [ 724.709875][T12955] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 724.726237][T12961] usb 1-1: device descriptor read/8, error -71 [ 724.732722][T12955] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 724.741558][T12955] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 724.754345][T17245] device veth0_vlan entered promiscuous mode [ 724.761532][T12955] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 724.769938][T12955] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 724.777429][T12955] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 724.795124][T17245] device veth1_macvtap entered promiscuous mode [ 724.796089][ T1813] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 724.802490][T12954] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 724.824387][T12955] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 724.833839][T12955] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 724.836036][ T1813] usb 3-1: can't read configurations, error -71 [ 724.879608][T17260] ip6_tunnel: non-ECT from fe88:0000:0000:0000:0000:0000:0000:0001 with DS=0x2 [ 724.888908][ T1813] usb usb3-port1: unable to enumerate USB device [ 724.949079][T17264] exfat: Deprecated parameter 'utf8' [ 724.954219][T17264] exfat: Deprecated parameter 'namecase' [ 724.960240][T17264] exfat: Deprecated parameter 'namecase' [ 724.965695][T17264] exfat: Deprecated parameter 'utf8' [ 724.971070][T12961] usb 1-1: device descriptor read/8, error -71 [ 724.986078][T12955] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 725.007225][T17269] binder: 17268:17269 ioctl 1 20001200 returned -22 [ 725.015108][T17269] netlink: 'syz.0.4735': attribute type 12 has an invalid length. [ 725.046933][T17264] exFAT-fs (loop4): failed to load upcase table (idx : 0x00012153, chksum : 0x822ffc2e, utbl_chksum : 0xe619d30d) [ 725.064000][T17273] syz.0.4737[17273] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 725.064060][T17273] syz.0.4737[17273] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 725.629198][ T9] device bridge_slave_1 left promiscuous mode [ 725.668465][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 725.676371][ T9] device bridge_slave_0 left promiscuous mode [ 725.682373][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 725.690879][ T9] device veth1_macvtap left promiscuous mode [ 725.696035][T12955] usb 4-1: device descriptor read/64, error -71 [ 725.696779][ T9] device veth0_vlan left promiscuous mode [ 725.736041][ T1813] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 725.976063][ T1813] usb 3-1: Using ep0 maxpacket: 16 [ 726.096213][ T1813] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 726.106976][ T1813] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 726.119515][ T1813] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 726.166519][T12955] usb 4-1: device descriptor read/64, error -71 [ 726.313707][ T1813] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 726.322233][ T1813] usb 3-1: config 0 descriptor?? [ 726.436058][T12954] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 726.456064][T12955] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 726.570974][T17260] udc-core: couldn't find an available UDC or it's busy [ 726.577944][T17260] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 726.706093][T12954] usb 5-1: device descriptor read/64, error -71 [ 726.746068][T12955] usb 4-1: device descriptor read/64, error -71 [ 726.932242][ T24] audit: type=1400 audit(2000000369.980:2627): avc: denied { create } for pid=17298 comm="syz.1.4744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 727.156284][T12954] usb 5-1: device descriptor read/64, error -71 [ 727.236129][ T1813] usbhid 3-1:0.0: can't add hid device: -71 [ 727.242082][ T1813] usbhid: probe of 3-1:0.0 failed with error -71 [ 727.249456][ T1813] usb 3-1: USB disconnect, device number 121 [ 727.266100][T12955] usb 4-1: device descriptor read/64, error -71 [ 727.386323][T12955] usb usb4-port1: attempt power cycle [ 727.466087][T12954] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 728.608436][T12954] usb 5-1: device descriptor read/64, error -71 [ 728.622758][T17325] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 728.782367][T17325] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.4754: casefold flag without casefold feature [ 728.813192][T17325] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: inode #12: comm syz.0.4754: missing EA_INODE flag [ 728.864585][T17328] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4752'. [ 728.883335][ T24] audit: type=1400 audit(2000000371.930:2628): avc: denied { ioctl } for pid=17320 comm="syz.2.4752" path="socket:[92424]" dev="sockfs" ino=92424 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 728.909251][T17325] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.4754: error while reading EA inode 12 err=-117 [ 728.921981][T17325] EXT4-fs (loop0): 1 orphan inode deleted [ 728.927630][T17325] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_nolock,noload,quota,journal_ioprio=0x0000000000000003,errors=continue,errors=continue,errors=remount-ro,delalloc,auto_da_alloc,norecovery,errors=continue,journal_ioprio=0x0000000000000001, [ 729.356184][T12954] usb 5-1: device descriptor read/64, error -71 [ 729.476548][T12954] usb usb5-port1: attempt power cycle [ 730.138913][T17370] syz.1.4765[17370] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 730.138972][T17370] syz.1.4765[17370] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 730.166847][T16857] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 730.546150][T16857] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 730.603094][T16857] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 730.623312][T16857] usb 3-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 730.643445][T16857] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 730.653394][T16857] usb 3-1: config 0 descriptor?? [ 730.850361][T17401] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 730.877611][T17403] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4776'. [ 731.056056][ T387] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 731.137302][T16857] lg-g15 0003:046D:C222.0065: unknown main item tag 0x0 [ 731.144099][T16857] lg-g15 0003:046D:C222.0065: item fetching failed at offset 7/11 [ 731.152319][T16857] lg-g15: probe of 0003:046D:C222.0065 failed with error -22 [ 731.166311][T12955] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 731.236303][ T1815] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 731.336078][ T387] usb 4-1: device descriptor read/64, error -71 [ 731.345634][T16857] usb 3-1: USB disconnect, device number 122 [ 731.556083][T12955] usb 5-1: config 1 has an invalid interface number: 3 but max is 2 [ 731.563919][T12955] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 731.572428][T12955] usb 5-1: config 1 has no interface number 1 [ 731.578321][T12955] usb 5-1: too many endpoints for config 1 interface 3 altsetting 0: 187, using maximum allowed: 30 [ 731.589012][T12955] usb 5-1: config 1 interface 3 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 187 [ 731.596119][ T1815] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 731.601848][T12955] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 731.612882][ T1815] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 731.632784][ T1815] usb 1-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 731.641618][ T1815] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 731.650704][ T1815] usb 1-1: config 0 descriptor?? [ 731.726105][ T387] usb 4-1: device descriptor read/64, error -71 [ 731.786126][T12955] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 731.794963][T12955] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 731.802907][T12955] usb 5-1: Product: syz [ 731.806930][T12955] usb 5-1: Manufacturer: syz [ 731.811273][T12955] usb 5-1: SerialNumber: syz [ 731.996066][ T387] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 732.115464][T17424] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4783'. [ 732.125640][T17424] bridge0: port 2(bridge_slave_1) entered disabled state [ 732.127156][ T1815] hid-multitouch 0003:1FD2:6007.0066: unbalanced delimiter at end of report description [ 732.155329][ T1815] hid-multitouch: probe of 0003:1FD2:6007.0066 failed with error -22 [ 732.248087][T12955] hub 5-1:1.3: bad descriptor, ignoring hub [ 732.253841][T12955] hub: probe of 5-1:1.3 failed with error -5 [ 732.266119][ T387] usb 4-1: device descriptor read/64, error -71 [ 732.296903][T12955] usb 5-1: USB disconnect, device number 10 [ 732.342354][T12954] usb 1-1: USB disconnect, device number 22 [ 732.656427][ T387] usb 4-1: device descriptor read/64, error -71 [ 732.697983][T17440] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 732.710970][T17440] EXT4-fs error (device loop4): mb_free_blocks:1524: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 732.725546][T17440] EXT4-fs (loop4): Remounting filesystem read-only [ 732.731916][T17440] EXT4-fs error (device loop4): ext4_free_branches:1026: inode #11: comm syz.4.4788: invalid indirect mapped block 1 (level 1) [ 732.745168][T17440] EXT4-fs (loop4): 1 truncate cleaned up [ 732.750874][T17440] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,dioread_nolock, [ 732.776145][ T387] usb usb4-port1: attempt power cycle [ 732.869804][ T24] audit: type=1400 audit(2000000375.920:2629): avc: denied { mounton } for pid=17450 comm="syz.0.4792" path="/proc/49/task" dev="proc" ino=92584 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 732.881560][T17451] EXT4-fs warning (device sda1): ext4_group_extend:1813: need to use ext2online to resize further [ 733.394627][ T387] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 733.410071][T17467] netlink: 172 bytes leftover after parsing attributes in process `syz.1.4795'. SYZFAIL: ShmemBuilder: too large output offset size=8728 consumed=4294967295 (errno 11: Resource temporarily unavailable) [ 733.437605][ T24] audit: type=1400 audit(2000000376.490:2630): avc: denied { write } for pid=270 comm="syz-executor" path="pipe:[13395]" dev="pipefs" ino=13395 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 733.796915][ T387] usb 4-1: device descriptor read/8, error -71 [ 734.006122][ T387] usb 4-1: device descriptor read/8, error -71 [ 734.276649][ T9] device bridge_slave_1 left promiscuous mode [ 734.282567][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 734.289880][ T9] device bridge_slave_0 left promiscuous mode [ 734.295776][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 734.303513][ T9] device veth1_macvtap left promiscuous mode [ 734.309374][ T9] device veth0_vlan left promiscuous mode [ 735.586937][ T9] device bridge_slave_1 left promiscuous mode [ 735.592865][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 735.600273][ T9] device bridge_slave_0 left promiscuous mode [ 735.606289][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 735.614012][ T9] device bridge_slave_1 left promiscuous mode [ 735.620017][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 735.627225][ T9] device bridge_slave_0 left promiscuous mode [ 735.633118][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 735.640861][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 735.648045][ T9] device bridge_slave_0 left promiscuous mode [ 735.653940][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 735.661548][ T9] device bridge_slave_1 left promiscuous mode [ 735.667519][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 735.674594][ T9] device bridge_slave_0 left promiscuous mode [ 735.680623][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 735.688626][ T9] device veth1_macvtap left promiscuous mode [ 735.694421][ T9] device veth0_vlan left promiscuous mode [ 735.700183][ T9] device team_slave_1 left promiscuous mode [ 735.705939][ T9] device veth1_macvtap left promiscuous mode [ 735.711867][ T9] device veth0_vlan left promiscuous mode [ 735.717546][ T9] device veth1_macvtap left promiscuous mode [ 735.723340][ T9] device veth0_vlan left promiscuous mode [ 735.729268][ T9] device veth1_macvtap left promiscuous mode [ 735.735062][ T9] device veth0_vlan left promiscuous mode