last executing test programs: 10.573234057s ago: executing program 4 (id=1555): sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wg1\x00'}) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x6, 0x0, 0x8}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r1, 0x0, 0x48001) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket(0x11, 0x0, 0x0) syz_open_procfs(0x0, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$binfmt_elf32(r2, &(0x7f0000000240)=ANY=[], 0x58) r3 = open(&(0x7f0000000c00)='./bus\x00', 0x62000, 0x0) dup3(r3, r2, 0x0) finit_module(r3, 0x0, 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prctl$PR_CAPBSET_READ(0x17, 0x0) socket$nl_route(0x10, 0x3, 0x0) 10.545438939s ago: executing program 4 (id=1556): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000002ac0)={[{@nobh}, {@noauto_da_alloc}, {@jqfmt_vfsold}, {@data_err_ignore}, {@noquota}, {@nomblk_io_submit}, {@init_itable_val={'init_itable', 0x3d, 0x85c5}}, {@nojournal_checksum}, {@jqfmt_vfsv1}]}, 0xfe, 0x576, &(0x7f00000024c0)="$eJzs3d9rW1UcAPDvTdv91nUwhvoghT04mUvX1h8TfJiPosOBvs/Q3pXRdBlNOtY62PbgXnyRIYg4EP8A330c/gP+FQMdDBlFH3yJ3PSmzdqk6bK41ubzgbudc+9Nzj0553t6Tm5CAhhYY9k/hYhXI+KbJOJoy7HhyA+OrZ638uTmdLYlUa9/9mcSSb6veX6S/384z7wSEb9+FXG6sLnc6tLyXKlcThfy/Hht/tp4dWn5zJX50mw6m16dnJo6987U5Pvvvdu3ur558e/vP33w0bmvT6589/OjY/eSOB9H8mOt9XgOt1szYzGWvyYjcX7DiRN9KGw3SXb6AujJUB7nI5GNAUdjKI96YO+7FRF1YEAl4h8GVHMe0Fzbb7EO3pNLvMcfri6ANtd/ePW9kTjQWBsdWkmeWhllL8ZoH8rPyvjlj/v3si369z4EQFe370TE2eHhzeNfko9/vTu7jXM2lmH8gxfnQTb/eavd/KewNv+JNvOfw21itxfd47/wqA/FdJTN/z5oO/9du2k1OpTnXmrM+UaSy1fKaTa2vRwRp2Jkf5bf6n7OuZWH9U7HWud/2ZaV35wL5tfxaHj/04+ZKdVKz1PnVo/vRLzWdv6brLV/0qb9s9fj4jbLOJHef73Tse71b+vgNovuqv5TxBtt2399uZNsfX9yvNEfxpu9YrO/7p74rVP5G+f/kef7Vb9usvY/tHX9R5PW+7XVZy/jxwP/pJ2O9dr/9yWfN9L78n03SrXawkTEvuSTzfsn1x/bzDfPz+p/6uTW41+7/p91wC+2Wf+7x+92PLXH/t83Wf1n1to/29Ot/dcTyaY97RMPP/7yh+aT1ev1W89W/6z9326kTuV7tjP+bee6euvNAAAAAAAAsHsVIuJIJIXiWrpQKBZXP99xPA4VypVq7fTlyuLVmWh8V3Y0RgrNO91HWz4PMZF/HraZn9yQn4qIYxHx7dDBRr44XSnP7HTlAQAAAAAAAAAAAAAAAAAAYJc4HHGg3ff/M78P7fTVAf85P/kNg6tz/OdH+vFLT8Cu5O8/DC7xD4NL/MPgEv8wuMQ/DC7xD4NL/MPgEv8AAAAAAAAAAAAAAAAAAAAAAAAAAADQVxcvXMi2+sqTm9NZfub60uJc5fqZmbQ6V5xfnC5OVxauFWcrldlyWpyuzHd7vnKlcm1iMhZvjNfSam28urR8ab6yeLV26cp8aTa9lI68kFoBAAAAAAAAAAAAAAAAAADA/0t16XyUyuV0obq0PCch8cyJ4d1xGXsoUc/t7GXs9MgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOv+DQAA//+HxTdZ") r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) renameat2(r1, &(0x7f0000000140)='./file0/file0\x00', r0, &(0x7f00000002c0)='./file1\x00', 0x0) syz_btf_id_by_name$bpf_lsm(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x10) r7 = syz_io_uring_setup(0x51c4, &(0x7f0000000200), &(0x7f0000000280), &(0x7f00000002c0)) io_uring_register$IORING_REGISTER_BUFFERS(r7, 0x0, &(0x7f00000024c0), 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x8, 0x0, 0x3, 0x1}, 0x48) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2000, 0x0) mkdirat(r9, &(0x7f0000000180)='./file0\x00', 0xc) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000280)) 8.242781638s ago: executing program 4 (id=1567): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x1000002, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000002000000008000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) unshare(0x64000600) 5.778737829s ago: executing program 1 (id=1576): add_key$user(0xfffffffffffffffc, 0x0, 0x0, 0x0, 0xfffffffffffffffa) sync_file_range(0xffffffffffffffff, 0x4, 0x200, 0x2) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) r1 = syz_usb_connect$cdc_ecm(0x2, 0x56, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000020000082505a5a4400000000101090244000101000000090400000302060000052406000005240000000d240f010000000000000000000905810320000000000905820208000000000905"], 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), 0xffffffffffffffff) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000580), 0x8) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r6, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001940)={0x20, r7, 0x1, 0x0, 0x0, {0x16}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000240)=0x14) sendmsg$BATADV_CMD_GET_HARDIF(r4, 0x0, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000187000/0x2000)=nil) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}]}, @NFT_MSG_NEWSETELEM={0x9c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x70, 0x3, 0x0, 0x1, [{0x6c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc}, @NFTA_SET_ELEM_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x4c, 0xb, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0xc}]}}}, {0xc, 0x1, 0x0, 0x1, @log={{0x8}, @void}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x134}}, 0x0) sendmsg$DEVLINK_CMD_GET(r4, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000c40)={0x14, r2, 0x100}, 0x14}}, 0x14040) syz_usb_control_io(r1, 0x0, 0x0) r8 = syz_open_pts(r0, 0x80000) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r9}, 0x10) r10 = io_uring_setup(0x1de1, &(0x7f00000005c0)={0x0, 0x0, 0x329b0e517952e65d, 0x5, 0x10000000, 0x0, r5}) io_uring_register$IORING_REGISTER_PERSONALITY(r10, 0x9, 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r3, 0xc028ae92, &(0x7f0000000040)={0x6, 0x2}) r11 = dup3(r8, r0, 0x0) ioctl$TIOCSETD(r11, 0x541b, &(0x7f0000000ec0)) 3.566229039s ago: executing program 2 (id=1592): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f00000002c0)={[{@jqfmt_vfsv1}, {}, {@barrier_val}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resuid}, {@nodelalloc}, {@acl}, {@noinit_itable}]}, 0xfc, 0x572, &(0x7f0000003780)="$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") mkdir(&(0x7f0000000000)='./control\x00', 0x0) unlink(0x0) open(&(0x7f0000000340)='./bus\x00', 0x143142, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef9cc093fce47d85272036dc78388e3dc177e9b496", "f28359738e229a4c66810000000000d3000dd602000000005cf7ce1fc986bcdf"}) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x20081e, &(0x7f00000020c0), 0x1, 0x502, &(0x7f0000002e00)="$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") rmdir(&(0x7f0000000040)='./control\x00') 3.339203028s ago: executing program 2 (id=1594): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x6, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='mm_page_alloc\x00', r1}, 0x10) syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f00000006c0)=ANY=[@ANYBLOB="12010000020100102505a1a4400000000001090244000101000000090400001602020000052406000005240000000d240f01060000000000000000090581032000000000090582020800000000090503020002"], 0x0) 2.872123786s ago: executing program 2 (id=1595): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0) mknodat$loop(r0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r1, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000002300)={0x50, 0x0, r2, {0x7, 0x9, 0x0, 0x8695c3813aa3cd9d}}, 0x50) creat(&(0x7f0000000100)='./file0\x00', 0x0) read$FUSE(r1, &(0x7f0000006580)={0x2020, 0x0, 0x0}, 0x2020) creat(&(0x7f0000000500)='./file0\x00', 0x0) write$FUSE_INIT(r1, &(0x7f0000006500)={0x50, 0x0, r3}, 0x50) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x0, @host}, 0x10) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000080), 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8080) r4 = accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvfrom$unix(r4, &(0x7f0000000700)=""/257, 0x101, 0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) 2.739723027s ago: executing program 1 (id=1596): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x1, 0x8, 0x4008}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mem_disconnect\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mem_disconnect\x00', r2}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x2, 0x0, @broadcast}, 0x10, 0x0}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000002c0)={r4}, 0x69) 2.664197593s ago: executing program 1 (id=1597): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x4}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1807000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='tlb_flush\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 2.400948935s ago: executing program 3 (id=1598): mkdir(&(0x7f0000000280)='./file0\x00', 0x0) getgroups(0x2, &(0x7f0000000000)=[0xee00, 0xee00]) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) setresgid(r0, 0x0, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000f40)='./file0\x00', 0x0, 0x0, &(0x7f0000000f80)) 2.378587796s ago: executing program 3 (id=1599): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) read$FUSE(r0, &(0x7f00000077c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r2, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000080)='mm_page_alloc\x00', r4}, 0x10) ioctl(r3, 0x7fffffff, 0x0) 2.185278562s ago: executing program 1 (id=1600): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x2, 0x4, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fdffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x300001a, &(0x7f0000001080)=ANY=[@ANYBLOB="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", @ANYBLOB="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"], 0xf, 0x2a6, &(0x7f0000000740)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x0) getpgrp(0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20) 2.184916323s ago: executing program 3 (id=1601): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f0000001840)='wg0\x00', 0x4) bind$xdp(r1, &(0x7f0000001880), 0x10) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r2, &(0x7f00000015c0)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x3, 0x5, 0x0, 0x0, 0xa, 0xffb, &(0x7f00000005c0)=""/4091}, 0x90) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='oom_score_adj_update\x00', r4}, 0x10) ioctl$VT_GETSTATE(r3, 0x5603, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='oom_score_adj_update\x00', r5}, 0x10) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') writev(r6, &(0x7f0000000280)=[{&(0x7f00000004c0)='0', 0x1}], 0x1) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="00000000010000001400030073797a5f74756e00000000000000000008000a00"], 0x3c}}, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) r7 = io_uring_setup(0x7bda, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000180)='tmpfs\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x10, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000840)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd60122d9200403a00fe8000000000000000000000000000bbff02000000000000000000000000000102009078000000006098cb4f978e000000000000000000000000000000000001000000000000000000000000000000002b00000000000000c204000000000000"], 0x0) 2.184661962s ago: executing program 4 (id=1602): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) io_setup(0x2007, &(0x7f0000000200)=0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000040)=0xcff8040588520f44) r4 = eventfd2(0x0, 0x0) io_submit(r3, 0x1, &(0x7f0000000180)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x3, r4}]) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={{}, 0x2c, {}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x7fe4, 0x1}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000400)={r5, &(0x7f0000000380), 0x20000000}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000001c0000000000000000000071122d000000000095000000000000001290aa8f3e4f48eaf057b13841784965fb7d411ba4fb75b64ecdf88e3429351336fdd51fc5d358cbb7b6a3bf715d8600a5500a7991ec6f747f64bbfd3e7484a99b79eb56041d9a17e13cd06ef8a29c00199d175b9c4b411b795f48f86c24f8a4af79f096ff357b25c8d54a2820d87b491ae56a1ff015652e0b408f27600ec826ba8b3684c105490af027698a949b519340d497118b717ec468f7567131583787dd5a8d3e9e6adffc8f0c4a8cddee9529fe9b8b4501271f8163d45fbf8050f8de9762"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000009c0)='kfree\x00', r6}, 0x10) r7 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x17, 0x3, &(0x7f0000000240)=@framed, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) r9 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r8, r9, 0x12}, 0x10) write$tcp_congestion(r7, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000ac0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x7d5, &(0x7f0000000140)={[{@dioread_nolock}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@discard}, {@errors_remount}, {@auto_da_alloc, 0x0}, {@usrjquota}, {@errors_continue}, {@grpquota}, {@errors_continue}, {@auto_da_alloc}, {@noauto_da_alloc}, {@jqfmt_vfsv1}], [], 0x2c}, 0x2, 0x4f9, &(0x7f0000000200)="$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") r10 = epoll_create(0x200) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r4, &(0x7f0000000140)) shutdown(r2, 0x0) r11 = fcntl$dupfd(r1, 0x0, r1) setsockopt$inet_tcp_TCP_MD5SIG(r11, 0x6, 0xe, &(0x7f0000000600)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x0, 0x35, 0x0, "679f672c00b69e65b0934066fc7c3406caf2c09e33bd50116312e2b00fee650af69b2150ccaa762a3db7ad752fe616e085e991c0436e7e7111238865d27b4e82dcc94700ddd1878b088736009d15f1fa"}, 0xd8) sendto$inet(r11, 0x0, 0xffffffd1, 0x240008d0, &(0x7f0000000000)={0x2, 0x0, @empty}, 0xfffffffffffffeba) sendmsg$WG_CMD_SET_DEVICE(r11, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x20000000) recvmmsg(r0, &(0x7f00000021c0), 0x5b, 0x40, 0x0) 1.610832039s ago: executing program 0 (id=1604): mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0xaf, 0x73}, 0x20) 1.585858621s ago: executing program 0 (id=1606): r0 = timerfd_create(0x9, 0x0) r1 = timerfd_create(0x9, 0x0) timerfd_settime(r1, 0x0, &(0x7f0000000080)={{}, {0x0, 0x3938700}}, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000007000)={{0x77359400}, {0x0, 0x989680}}, 0x0) readv(r0, &(0x7f0000001540)=[{&(0x7f0000000280)=""/181, 0xb5}], 0x1) 1.557406103s ago: executing program 3 (id=1607): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000a40)={{r4}, &(0x7f0000000940), &(0x7f0000000980)='%pS \x00'}, 0x20) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000001a00)='qdisc_create\x00', r5}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @broadcast}) 1.447300833s ago: executing program 0 (id=1608): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x4400, &(0x7f0000000640), 0x1, 0x75e, &(0x7f0000001100)="$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") chdir(&(0x7f0000000080)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x8004587d, &(0x7f0000000140)={0x2, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f00000002c0)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.026858286s ago: executing program 1 (id=1609): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r1}, 0x10) setitimer(0x0, 0x0, 0x0) 1.025628877s ago: executing program 4 (id=1610): close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x14) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x1f2f, 0xf, 0x3253, &(0x7f00000007c0)="9f44948721919580684010a40800", 0x0, 0x241, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39"}, 0x23) 985.16045ms ago: executing program 0 (id=1611): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000071126a000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x90) 895.227677ms ago: executing program 0 (id=1612): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x8, 0xc, 0x3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000740)={{r0}, &(0x7f00000006c0), &(0x7f0000000700)='%+9llu \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00'}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) 847.243992ms ago: executing program 1 (id=1613): mount(&(0x7f0000008100)=@sg0, &(0x7f0000008140)='./file0\x00', &(0x7f0000008180)='proc\x00', 0x400, &(0x7f00000081c0)='\x00') r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2b, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000040)=0x3, 0x4) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) dup(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000082c0)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f00000002c0)='sched_kthread_work_queue_work\x00', r3}, 0x10) socketpair(0xf, 0x3, 0x2, &(0x7f00000001c0)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000000594efd0c8f1a053d892bb3454d4aa9f9f49516065b078ac4e3cfe0518f8ac929cad730b75d7d8212108305ebe03f0e6ce8a0fd9645ec00"/75, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = syz_usb_connect$cdc_ncm(0x3, 0x9c, &(0x7f0000008200)={{0x12, 0x1, 0x50, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8a, 0x2, 0x1, 0x7, 0x0, 0xda, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "9b179d8585cf"}, {0x5, 0x24, 0x0, 0xffff}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x5713, 0x3, 0xf}, {0x6, 0x24, 0x1a, 0x3, 0x13}, [@network_terminal={0x7, 0x24, 0xa, 0x2, 0x3, 0x8, 0x1}, @dmm={0x7, 0x24, 0x14, 0x2, 0x4}, @mdlm={0x15, 0x24, 0x12, 0x8}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x1}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0xf8, 0x3, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x2, 0x6, 0x10}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x2, 0x47, 0xfd}}}}}}}]}}, &(0x7f0000007d40)={0xa, &(0x7f0000007bc0)={0xa, 0x6, 0x110, 0x80, 0x5, 0x9, 0x8, 0x3}, 0x38, &(0x7f0000007c00)={0x5, 0xf, 0x38, 0x6, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x50, 0x9, 0x1, 0x5, 0x24}, @ext_cap={0x7, 0x10, 0x2, 0xe, 0x7, 0x6, 0x4009}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x0, 0x3, 0xc}, @ssp_cap={0xc, 0x10, 0xa, 0x4, 0x0, 0x7fffffd, 0x0, 0x10}, @wireless={0xb, 0x10, 0x1, 0xc, 0x9, 0x2, 0x8, 0xffff, 0x6f}]}, 0x2, [{0x80, &(0x7f0000007c80)=@string={0x80, 0x3, "25c1b63b044690517880d9ccfe433b985d44b21e6c23802e586a991c200c0ea199f0bde916a8757dd22ab8a3df703b71722b47ab146937fbce556e57a2e51db8a6636b8efed47e36b62341c6eda18bd2fc22f0b51605f7c9b253e51ab63e750fb58f78443c9cac3d40cd958dcbbbaa8b27bd5e36b75986dc3d4dfcf7304f"}}, {0x4, &(0x7f0000007d00)=@lang_id={0x4, 0x3, 0x500a}}]}) syz_usb_control_io$cdc_ncm(r4, &(0x7f0000007e00)={0x14, &(0x7f0000007d80)={0x0, 0x22, 0x18, {0x18, 0x30, "773697f03db7ceffcf42fb76b8fae4ead9741935ffd7"}}, &(0x7f0000007dc0)={0x0, 0x3, 0xfffffffffffffeb5, {0x1a}}}, &(0x7f0000008080)={0x44, &(0x7f0000007e40)=ANY=[@ANYBLOB="400f6800000073e3282cacb3939439f5c12437a6bfeaca647c214260ffc690e7cead1b4de0047b0c27f19c3c24cabe1240f4894ef64b7c63084dfe51afd62aea2d6be24683009225ad01cd41bc78942e79265a6c588bdc1775f494cf919c78cfc8934d"], &(0x7f0000007ec0)={0x0, 0xa, 0x1}, &(0x7f0000007f00)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000007f40)={0x20, 0x80, 0x1c, {0x8, 0x8000, 0xb9, 0xfff9, 0x8000, 0x7, 0x3, 0x9, 0x6eb, 0x3, 0x4, 0x100}}, &(0x7f0000000080)={0x20, 0x85, 0x4, 0xffffffc0}, &(0x7f0000007fc0)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000008000)={0x20, 0x87, 0x2, 0x3}, &(0x7f0000008040)={0x20, 0x89, 0x2, 0x1}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc623, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000640)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x0, "96bd65b4"}]}}, 0x0}, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000040)=0x14) clock_gettime(0x0, &(0x7f0000007a80)) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8000, &(0x7f0000000100)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}, {@grpquota}, {@norecovery}, {@resuid}, {@jqfmt_vfsold}, {@usrjquota}, {@acl}, {@min_batch_time={'min_batch_time', 0x3d, 0x409e}}, {@errors_remount}]}, 0xff, 0x468, &(0x7f0000000780)="$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") r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 752.148059ms ago: executing program 0 (id=1614): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x12}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000800000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0x5, 0x0, 0xa, 0x1}, 0x48) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f00000003c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='mm_page_alloc\x00', r4}, 0x10) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406a05bb0000000000000109022401010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000300)={0xfffffffffffffe22, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00220700000006a33006676e44"], 0x0}, 0x0) r6 = openat$vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x20000, 0x0) ioctl$TIOCL_GETKMSGREDIRECT(r6, 0x541c, &(0x7f0000000500)) r7 = socket$nl_route(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000200)={0x2c, r9, 0x1, 0x0, 0x25dfdbfe, {0x14}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}}, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) 741.04939ms ago: executing program 2 (id=1605): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x0, 0x8}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00'}, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000760009"], 0x14}], 0x1}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000100)=0x2, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000300)=[@window, @window, @mss, @timestamp, @timestamp, @timestamp, @window, @sack_perm], 0x2132) sendmmsg$inet(r1, &(0x7f0000003500)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)='R', 0x1}], 0x1}}], 0x1, 0x24000090) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4) shutdown(r1, 0x1) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r0) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x24, r2, 0x10, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x32e}]}, 0x24}, 0x1, 0x0, 0x0, 0x2004080}, 0x8000) 713.482933ms ago: executing program 2 (id=1615): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x3b}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 684.550084ms ago: executing program 2 (id=1616): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000000f5ff00000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000da82850000007100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) poll(&(0x7f0000000180)=[{r2}], 0x1, 0x800) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000200)={0x0, r2}) read(r2, &(0x7f0000000040)=""/14, 0xe) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000500)) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x0, 0x1, 0x0, &(0x7f0000000640)=""/87, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x20000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100006c764e105257b97500ae01020301090212000300000000090400000008065000e024addf283a4a0486fb"], 0x0) 657.867976ms ago: executing program 3 (id=1617): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2008002, &(0x7f0000000440), 0x1, 0x547, &(0x7f0000001940)="$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") creat(&(0x7f0000000300)='./file0\x00', 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x31b4900240d3c7fe, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r0, &(0x7f0000000500)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f00000002c0)='./file0\x00', 0x0) 539.397907ms ago: executing program 3 (id=1618): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "ff00f7000000000000000000af88008300"}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r0}, 0x10) r2 = syz_open_pts(r1, 0x141601) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) write(r2, &(0x7f0000000000)="d5", 0xfffffedf) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "7823d5f2fd71a6a76177920ea7e60c0ac7a4a5"}) 0s ago: executing program 4 (id=1619): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000004000000000000000000190095"], &(0x7f00000001c0)='syzkaller\x00'}, 0x90) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r0, r2}, 0x10) syz_emit_ethernet(0xd86, &(0x7f0000001580)={@multicast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "711e8f", 0xd50, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @dev}, {[], @time_exceed={0x9, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "bede78", 0x0, 0x0, 0x0, @dev, @loopback, [@srh={0x0, 0xe, 0x4, 0x7, 0x0, 0x0, 0x0, [@mcast1, @empty, @private2, @private1, @private1, @loopback, @local]}, @dstopts={0x0, 0x193, '\x00', [@generic={0x0, 0x5f, "f0edb1af7badf7491d2500721be4cce0542133657e2d12f0ae3e134727e49fe7c04867be7426e8cbefd47520beacbe5c36083a972cb3b73de48f661a252e0b0a5a236ddf29543f29a5e18fd1c7b54248c8b03dc91385c9160f3394ff0708c8"}, @hao={0xc9, 0x10, @private1}, @jumbo, @calipso={0x7, 0x28, {0x0, 0x8, 0x0, 0x0, [0x800, 0x0, 0x0, 0x4]}}, @jumbo, @calipso={0x7, 0x28, {0x2, 0x8, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0]}}, @generic={0x0, 0xbc4, "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"}]}]}}}}}}}, 0x0) kernel console output (not intermixed with test programs): : ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 280.130611][ T1990] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 280.138707][ T1990] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.145593][ T1990] bridge0: port 1(bridge_slave_0) entered forwarding state [ 280.152826][ T1990] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 280.161013][ T1990] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 280.174762][ T4435] EXT4-fs (loop3): unmounting filesystem. [ 280.183451][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 280.201346][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 280.209676][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 280.218132][ T19] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.225208][ T19] bridge0: port 2(bridge_slave_1) entered forwarding state [ 280.232669][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 280.240755][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 280.258159][ T1990] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 280.266214][ T1990] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 280.339721][ T5021] loop2: detected capacity change from 0 to 4096 [ 280.359769][ T5025] loop4: detected capacity change from 0 to 1024 [ 280.361609][ T5021] EXT4-fs: Ignoring removed nobh option [ 280.374198][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 280.382914][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 280.391813][ T5021] EXT4-fs: Ignoring removed i_version option [ 280.397848][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 280.405888][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 280.411929][ T5021] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 280.415355][ T5025] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=800ec119, mo2=0002] [ 280.432983][ T5025] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 280.442760][ T4997] device veth0_vlan entered promiscuous mode [ 280.459868][ T5025] EXT4-fs (loop4): re-mounted. Quota mode: writeback. [ 280.470451][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 280.478421][ T40] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 280.486749][ T4740] EXT4-fs (loop4): unmounting filesystem. [ 280.489425][ T4997] device veth1_macvtap entered promiscuous mode [ 280.514458][ T5031] loop4: detected capacity change from 0 to 1024 [ 280.518592][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 280.529527][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 280.543073][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 280.552397][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 280.554754][ T5031] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 280.588556][ T4740] EXT4-fs (loop4): unmounting filesystem. [ 280.618626][ T5037] loop4: detected capacity change from 0 to 256 [ 280.627954][ T5037] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 280.721373][ T314] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 280.770878][ T40] usb 4-1: Using ep0 maxpacket: 16 [ 280.833691][ T5043] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1277'. [ 281.054500][ T3579] device bridge_slave_1 left promiscuous mode [ 281.060488][ T3579] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.067846][ T40] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 281.079593][ T40] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 281.085200][ T3579] device bridge_slave_0 left promiscuous mode [ 281.090654][ T40] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 281.096532][ T3579] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.117081][ T40] usb 4-1: New USB device found, idVendor=1e7d, idProduct=71ce, bcdDevice= 0.00 [ 281.126157][ T40] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.135155][ T40] usb 4-1: config 0 descriptor?? [ 281.140426][ T3579] device veth1_macvtap left promiscuous mode [ 281.146414][ T3579] device veth0_vlan left promiscuous mode [ 281.230645][ T314] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 281.243113][ T314] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 281.252024][ T314] usb 3-1: config 1 has no interface number 0 [ 281.257967][ T314] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 281.269021][ T314] usb 3-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 281.278142][ T314] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 281.500599][ T956] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 281.510642][ T314] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 281.523001][ T314] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.531100][ T314] usb 3-1: Product: syz [ 281.531351][ T5056] loop4: detected capacity change from 0 to 1024 [ 281.535206][ T314] usb 3-1: Manufacturer: syz [ 281.546028][ T314] usb 3-1: SerialNumber: syz [ 281.572288][ T5056] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 281.590812][ T4740] EXT4-fs (loop4): unmounting filesystem. [ 281.610194][ T5060] loop4: detected capacity change from 0 to 512 [ 281.625348][ T5060] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 281.634306][ T5060] ext4 filesystem being mounted at /15/bus supports timestamps until 2038 (0x7fffffff) [ 281.710709][ T40] usbhid 4-1:0.0: can't add hid device: -71 [ 281.716916][ T40] usbhid: probe of 4-1:0.0 failed with error -71 [ 281.724352][ T40] usb 4-1: USB disconnect, device number 18 [ 282.130260][ T956] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 282.141088][ T956] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 282.150831][ T956] usb 1-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 282.159990][ T956] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.169927][ T956] usb 1-1: config 0 descriptor?? [ 282.470257][ T314] cdc_ncm 3-1:1.1: bind() failure [ 282.482402][ T4740] EXT4-fs (loop4): unmounting filesystem. [ 282.650779][ T956] arvo 0003:1E7D:30D4.0023: unknown main item tag 0x0 [ 282.657435][ T956] arvo 0003:1E7D:30D4.0023: unknown main item tag 0x0 [ 282.664870][ T956] arvo 0003:1E7D:30D4.0023: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.0-1/input0 [ 282.759908][ T314] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 282.779906][ T40] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 282.869860][ T956] arvo 0003:1E7D:30D4.0023: couldn't init struct arvo_device [ 282.877139][ T956] arvo 0003:1E7D:30D4.0023: couldn't install keyboard [ 282.885207][ T956] arvo: probe of 0003:1E7D:30D4.0023 failed with error -5 [ 283.009760][ T314] usb 4-1: Using ep0 maxpacket: 16 [ 283.075601][ T665] usb 1-1: USB disconnect, device number 27 [ 283.149745][ T314] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 283.159748][ T314] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 283.168523][ T314] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 283.177487][ T40] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 283.187477][ T314] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.195457][ T40] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 283.208634][ T40] usb 5-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 283.217801][ T314] usb 4-1: config 0 descriptor?? [ 283.222720][ T40] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.231268][ T40] usb 5-1: config 0 descriptor?? [ 283.270452][ T40] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 283.527756][ T40] usb 5-1: USB disconnect, device number 22 [ 284.155270][ T40] usb 3-1: USB disconnect, device number 21 [ 284.165323][ T4992] EXT4-fs (loop2): unmounting filesystem. [ 284.790525][ T5089] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.797626][ T5089] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.805800][ T5089] device bridge_slave_0 entered promiscuous mode [ 284.813191][ T5089] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.820165][ T5089] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.827450][ T5089] device bridge_slave_1 entered promiscuous mode [ 284.886484][ T5089] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.893467][ T5089] bridge0: port 2(bridge_slave_1) entered forwarding state [ 284.900586][ T5089] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.908470][ T5089] bridge0: port 1(bridge_slave_0) entered forwarding state [ 284.933508][ T1990] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.941181][ T1990] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.948764][ T556] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 284.956475][ T1990] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 284.964420][ T1990] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 284.974736][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 284.983135][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.990012][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 284.998996][ T1990] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 285.007275][ T1990] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.015034][ T1990] bridge0: port 2(bridge_slave_1) entered forwarding state [ 285.022314][ T956] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 285.042769][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 285.059173][ T665] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 285.071667][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 285.086819][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 285.095361][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 285.110173][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 285.119915][ T5089] device veth0_vlan entered promiscuous mode [ 285.135018][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 285.145146][ T5089] device veth1_macvtap entered promiscuous mode [ 285.157671][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 285.171021][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 285.205698][ T28] audit: type=1400 audit(1723133746.143:748): avc: denied { sqpoll } for pid=5095 comm="syz.1.1287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 285.287262][ T5094] loop2: detected capacity change from 0 to 40427 [ 285.316335][ T5094] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 285.323103][ T556] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 285.324429][ T5094] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 285.335361][ T556] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 285.351122][ T5094] F2FS-fs (loop2): invalid crc value [ 285.355180][ T556] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 285.361611][ T5094] F2FS-fs (loop2): invalid crc_offset: 33558524 [ 285.369673][ T556] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.383803][ T5094] F2FS-fs (loop2): Failed to get valid F2FS checkpoint [ 285.387864][ T556] usb 5-1: config 0 descriptor?? [ 285.694533][ T956] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 285.705917][ T956] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 285.715703][ T956] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.00 [ 285.724735][ T956] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.733404][ T956] usb 1-1: config 0 descriptor?? [ 286.241526][ T28] audit: type=1400 audit(1723133747.183:749): avc: denied { read } for pid=5106 comm="syz.1.1292" name="usbmon0" dev="devtmpfs" ino=139 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 286.272475][ T28] audit: type=1400 audit(1723133747.183:750): avc: denied { open } for pid=5106 comm="syz.1.1292" path="/dev/usbmon0" dev="devtmpfs" ino=139 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 286.296920][ T28] audit: type=1400 audit(1723133747.213:751): avc: denied { ioctl } for pid=5106 comm="syz.1.1292" path="/dev/usbmon0" dev="devtmpfs" ino=139 ioctlcmd=0x9204 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 286.325926][ T28] audit: type=1400 audit(1723133747.213:752): avc: denied { read } for pid=5108 comm="syz.2.1293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 286.346321][ T28] audit: type=1400 audit(1723133747.263:753): avc: denied { write } for pid=5108 comm="syz.2.1293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 286.468147][ T5087] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 286.477759][ T5087] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 286.488905][ T5087] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 286.498687][ T5087] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 286.509645][ T5087] loop0: detected capacity change from 0 to 512 [ 286.527465][ T5087] EXT4-fs error (device loop0): ext4_find_inline_data_nolock:164: inode #12: comm syz.0.1289: inline data xattr refers to an external xattr inode [ 286.530453][ T19] usb 4-1: USB disconnect, device number 19 [ 286.557090][ T5087] EXT4-fs (loop0): Remounting filesystem read-only [ 286.563687][ T5087] EXT4-fs error (device loop0): ext4_orphan_get:1401: comm syz.0.1289: couldn't read orphan inode 12 (err -117) [ 286.576027][ T5087] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 286.580778][ T5121] loop1: detected capacity change from 0 to 2048 [ 286.593159][ T5121] EXT4-fs (loop1): bad geometry: first data block 0 is beyond end of filesystem (0) [ 286.596227][ T320] device bridge_slave_1 left promiscuous mode [ 286.609703][ T320] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.616971][ T320] device bridge_slave_0 left promiscuous mode [ 286.618068][ T556] usb 5-1: language id specifier not provided by device, defaulting to English [ 286.623724][ T320] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.639916][ T320] device veth1_macvtap left promiscuous mode [ 286.645760][ T320] device veth0_vlan left promiscuous mode [ 286.658128][ T956] usbhid 1-1:0.0: can't add hid device: -71 [ 286.664436][ T956] usbhid: probe of 1-1:0.0 failed with error -71 [ 286.672065][ T956] usb 1-1: USB disconnect, device number 28 [ 286.681651][ T2002] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 287.087825][ T556] uclogic 0003:256C:006D.0024: interface is invalid, ignoring [ 287.104391][ T4997] EXT4-fs (loop0): unmounting filesystem. [ 287.112417][ T5127] loop1: detected capacity change from 0 to 256 [ 287.139283][ T5127] exfat: Deprecated parameter 'utf8' [ 287.144454][ T5127] exfat: Deprecated parameter 'namecase' [ 287.160311][ T5127] exfat: Deprecated parameter 'utf8' [ 287.178321][ T5127] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010253, chksum : 0xa98551aa, utbl_chksum : 0xe619d30d) [ 287.206332][ T5127] syz.1.1300[5127] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 287.206417][ T5127] syz.1.1300[5127] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 287.307486][ T4678] usb 5-1: USB disconnect, device number 23 [ 287.835952][ T5140] loop4: detected capacity change from 0 to 512 [ 287.852682][ T5140] EXT4-fs (loop4): orphan cleanup on readonly fs [ 287.859870][ T5140] Quota error (device loop4): do_check_range: Getting block 71 out of range 1-5 [ 287.869282][ T5140] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 287.878722][ T5140] EXT4-fs error (device loop4): ext4_acquire_dquot:6764: comm syz.4.1302: Failed to acquire dquot type 0 [ 287.890334][ T5140] EXT4-fs (loop4): 1 truncate cleaned up [ 287.896068][ T5140] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 287.932555][ T4740] EXT4-fs (loop4): unmounting filesystem. [ 288.095953][ T5156] loop2: detected capacity change from 0 to 512 [ 288.102358][ T5156] EXT4-fs: Ignoring removed bh option [ 288.110829][ T5156] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 288.121295][ T5156] EXT4-fs (loop2): 1 truncate cleaned up [ 288.126775][ T5156] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 288.144309][ T28] audit: type=1400 audit(1723133749.084:754): avc: denied { mounton } for pid=5155 comm="syz.2.1309" path="/5/file0/bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 288.158805][ T5162] syz.0.1311[5162] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 288.166863][ T5162] syz.0.1311[5162] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 288.207823][ T5156] loop2: detected capacity change from 512 to 11 [ 288.277780][ T5170] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5870: Out of memory [ 288.307270][ T5170] EXT4-fs error (device loop2): ext4_dirty_inode:6074: inode #18: comm syz.2.1309: mark_inode_dirty error [ 288.348487][ T5172] loop4: detected capacity change from 0 to 512 [ 288.354990][ T5170] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5870: Out of memory [ 288.375100][ T5172] EXT4-fs: Ignoring removed oldalloc option [ 288.385159][ T5170] EXT4-fs error (device loop2): ext4_dirty_inode:6074: inode #18: comm syz.2.1309: mark_inode_dirty error [ 288.437531][ T5170] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5870: Out of memory [ 288.469472][ T5170] EXT4-fs error (device loop2): ext4_splice_branch:479: inode #18: comm syz.2.1309: mark_inode_dirty error [ 288.505095][ T5172] EXT4-fs (loop4): 1 orphan inode deleted [ 288.514072][ T5172] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 288.542464][ T5172] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038 (0x7fffffff) [ 288.587010][ T5170] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5870: Out of memory [ 288.687713][ T5170] EXT4-fs error (device loop2): ext4_dirty_inode:6074: inode #18: comm syz.2.1309: mark_inode_dirty error [ 288.803283][ T5170] EXT4-fs error (device loop2): mb_free_blocks:1815: group 0, inode 18: block 36:freeing already freed block (bit 35); block bitmap corrupt. [ 288.818174][ T5170] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5870: Out of memory [ 288.967178][ T5182] EXT4-fs error (device loop4): ext4_xattr_block_get:546: inode #15: comm syz.4.1315: corrupted xattr block 19 [ 288.980249][ T5182] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 288.989432][ T5182] EXT4-fs error (device loop4): ext4_xattr_block_get:546: inode #15: comm syz.4.1315: corrupted xattr block 19 [ 289.003354][ T5182] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 289.013473][ T5182] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2926: inode #15: comm syz.4.1315: corrupted xattr block 19 [ 289.027451][ T5182] EXT4-fs warning (device loop4): ext4_evict_inode:299: xattr delete (err -117) [ 289.083787][ T28] audit: type=1400 audit(1723133750.025:755): avc: denied { bind } for pid=5183 comm="syz.0.1317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 289.122055][ T4992] EXT4-fs warning (device loop2): htree_dirblock_to_tree:1082: inode #2: lblock 0: comm syz-executor: error -12 reading directory block [ 289.146766][ T4992] EXT4-fs (loop2): unmounting filesystem. [ 289.147143][ T5186] loop1: detected capacity change from 0 to 512 [ 289.161146][ T5186] EXT4-fs (loop1): orphan cleanup on readonly fs [ 289.222412][ T5186] EXT4-fs error (device loop1): ext4_acquire_dquot:6764: comm syz.1.1318: Failed to acquire dquot type 0 [ 289.236162][ T4740] EXT4-fs (loop4): unmounting filesystem. [ 289.243525][ T5186] EXT4-fs (loop1): 1 truncate cleaned up [ 289.249654][ T5186] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 289.288962][ T5192] loop4: detected capacity change from 0 to 128 [ 289.318710][ T5089] EXT4-fs (loop1): unmounting filesystem. [ 289.319611][ T5192] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 289.333547][ T5192] ext4 filesystem being mounted at /25/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 289.483537][ T5198] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.490935][ T5198] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.498670][ T5198] device bridge_slave_0 entered promiscuous mode [ 289.505984][ T5198] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.513183][ T5198] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.520997][ T5198] device bridge_slave_1 entered promiscuous mode [ 289.881457][ T5198] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.888541][ T5198] bridge0: port 2(bridge_slave_1) entered forwarding state [ 289.895724][ T5198] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.902586][ T5198] bridge0: port 1(bridge_slave_0) entered forwarding state [ 289.934809][ T956] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 289.943023][ T956] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.950476][ T956] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.960152][ T8] device bridge_slave_1 left promiscuous mode [ 289.966148][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.974080][ T8] device bridge_slave_0 left promiscuous mode [ 289.980150][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.988819][ T8] device veth1_macvtap left promiscuous mode [ 289.994850][ T8] device veth0_vlan left promiscuous mode [ 290.117733][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 290.126746][ T314] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.134881][ T314] bridge0: port 1(bridge_slave_0) entered forwarding state [ 290.180272][ T4740] EXT4-fs (loop4): unmounting filesystem. [ 290.187293][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 290.195475][ T314] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.202549][ T314] bridge0: port 2(bridge_slave_1) entered forwarding state [ 290.326623][ T476] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 290.334563][ T476] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 290.343796][ T5215] loop4: detected capacity change from 0 to 1024 [ 290.606650][ T5215] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 290.731978][ T5198] device veth0_vlan entered promiscuous mode [ 290.765710][ T5198] device veth1_macvtap entered promiscuous mode [ 290.774256][ T665] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 290.783015][ T665] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 290.791493][ T665] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 290.800703][ T665] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 290.809314][ T665] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 290.817473][ T665] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 290.825488][ T665] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 290.833335][ T665] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 290.841961][ T665] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 291.296985][ T4740] EXT4-fs (loop4): unmounting filesystem. [ 291.309621][ T5224] loop1: detected capacity change from 0 to 512 [ 291.311203][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 291.323552][ T5222] loop0: detected capacity change from 0 to 2048 [ 291.336940][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 291.345992][ T5222] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 291.358983][ T5224] EXT4-fs error (device loop1): ext4_orphan_get:1396: inode #15: comm syz.1.1330: casefold flag without casefold feature [ 291.360164][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 291.380259][ T5224] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: inode #2: comm syz.1.1330: missing EA_INODE flag [ 291.381508][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 291.403999][ T5224] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.1330: error while reading EA inode 2 err=-117 [ 291.419463][ T5222] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a002e01c, mo2=0002] [ 291.419822][ T5224] EXT4-fs (loop1): 1 orphan inode deleted [ 291.429464][ T5222] System zones: [ 291.434633][ T5224] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 291.456628][ T5222] 0-19 [ 291.479653][ T5222] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 292.285719][ T4997] EXT4-fs (loop0): unmounting filesystem. [ 292.697204][ T5089] EXT4-fs (loop1): unmounting filesystem. [ 293.114507][ T5249] loop1: detected capacity change from 0 to 256 [ 293.334976][ T956] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 293.429768][ T5253] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.436849][ T5253] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.445144][ T5253] device bridge_slave_0 entered promiscuous mode [ 293.456709][ T5253] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.463651][ T5253] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.471130][ T5253] device bridge_slave_1 entered promiscuous mode [ 293.500138][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 293.500156][ T28] audit: type=1400 audit(1723133754.447:756): avc: denied { mounton } for pid=5257 comm="syz.4.1337" path="/28/file0" dev="tmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 293.574499][ T956] usb 3-1: Using ep0 maxpacket: 16 [ 293.574576][ T5253] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.579533][ T556] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 293.587204][ T5253] bridge0: port 2(bridge_slave_1) entered forwarding state [ 293.587338][ T5253] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.608634][ T5253] bridge0: port 1(bridge_slave_0) entered forwarding state [ 293.637113][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 293.644902][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.652370][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.664544][ T4678] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 293.672687][ T4678] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.679584][ T4678] bridge0: port 1(bridge_slave_0) entered forwarding state [ 293.694748][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 293.702974][ T314] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.709848][ T314] bridge0: port 2(bridge_slave_1) entered forwarding state [ 293.717186][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 293.724506][ T956] usb 3-1: config 0 has no interfaces? [ 293.731034][ T956] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 293.740227][ T956] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.749082][ T956] usb 3-1: config 0 descriptor?? [ 293.756317][ T4678] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 293.771962][ T4678] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 293.785797][ T956] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 293.794037][ T956] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 293.802279][ T956] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 293.815562][ T5253] device veth0_vlan entered promiscuous mode [ 293.826931][ T956] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 293.835456][ T956] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 293.845406][ T320] device bridge_slave_1 left promiscuous mode [ 293.851362][ T320] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.858861][ T320] device bridge_slave_0 left promiscuous mode [ 293.865007][ T320] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.873336][ T320] device veth1_macvtap left promiscuous mode [ 293.880152][ T320] device veth0_vlan left promiscuous mode [ 293.954369][ T556] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 293.964500][ T556] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 293.976781][ T5253] device veth1_macvtap entered promiscuous mode [ 293.988445][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 293.996428][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 294.004400][ T28] audit: type=1400 audit(1723133754.947:757): avc: denied { execute } for pid=5239 comm="syz.2.1333" path="/1/blkio.bfq.io_queued_recursive" dev="tmpfs" ino=24 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 294.029343][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 294.038599][ T956] usb 3-1: USB disconnect, device number 22 [ 294.044580][ T556] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 294.046567][ T476] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 294.057661][ T556] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 294.062290][ T476] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 294.070017][ T556] usb 1-1: SerialNumber: syz [ 294.103885][ T5260] loop3: detected capacity change from 0 to 512 [ 294.110856][ T5260] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 294.127430][ T5260] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 294.142678][ T5260] EXT4-fs (loop3): 1 truncate cleaned up [ 294.148578][ T5260] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 294.365015][ T556] usb 1-1: 0:2 : does not exist [ 294.376198][ T5264] 9pnet_fd: Insufficient options for proto=fd [ 294.503454][ T5268] loop4: detected capacity change from 0 to 40427 [ 294.510416][ T5268] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 294.518598][ T5268] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 294.527741][ T5268] F2FS-fs (loop4): invalid crc value [ 294.534614][ T5268] F2FS-fs (loop4): Found nat_bits in checkpoint [ 294.578541][ T5252] loop0: detected capacity change from 0 to 512 [ 294.585061][ T5268] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 294.592877][ T5268] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 294.615033][ T5252] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2213: inode #15: comm syz.0.1336: corrupted in-inode xattr [ 294.627555][ T5252] EXT4-fs error (device loop0): ext4_orphan_get:1401: comm syz.0.1336: couldn't read orphan inode 15 (err -117) [ 294.644084][ T5252] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 294.705230][ T5268] syz.4.1338: attempt to access beyond end of device [ 294.705230][ T5268] loop4: rw=2049, sector=77824, nr_sectors = 4096 limit=40427 [ 294.730184][ T5268] syz.4.1338: attempt to access beyond end of device [ 294.730184][ T5268] loop4: rw=2049, sector=49152, nr_sectors = 4096 limit=40427 [ 294.751452][ T5268] syz.4.1338: attempt to access beyond end of device [ 294.751452][ T5268] loop4: rw=2049, sector=57344, nr_sectors = 2048 limit=40427 [ 294.771371][ T5268] syz.4.1338: attempt to access beyond end of device [ 294.771371][ T5268] loop4: rw=2049, sector=59392, nr_sectors = 2048 limit=40427 [ 294.787110][ T5268] syz.4.1338: attempt to access beyond end of device [ 294.787110][ T5268] loop4: rw=2049, sector=61440, nr_sectors = 104 limit=40427 [ 294.829320][ T3579] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 294.838714][ T3579] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 294.874155][ T665] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 294.924866][ T19] usb 1-1: USB disconnect, device number 29 [ 294.942250][ T5253] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 294.966428][ T5253] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 295.026803][ T5253] EXT4-fs (loop3): unmounting filesystem. [ 295.163860][ T5285] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.173553][ T5285] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.181584][ T5285] device bridge_slave_0 entered promiscuous mode [ 295.190416][ T5285] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.197422][ T5285] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.205071][ T5285] device bridge_slave_1 entered promiscuous mode [ 295.265391][ T5285] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.272254][ T5285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 295.279591][ T5285] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.286460][ T5285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 295.293623][ T665] usb 3-1: config 0 has no interfaces? [ 295.299411][ T665] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 295.308839][ T665] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.323469][ T665] usb 3-1: config 0 descriptor?? [ 295.336772][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 295.344862][ T314] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.352827][ T314] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.365878][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 295.374108][ T556] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.381248][ T556] bridge0: port 1(bridge_slave_0) entered forwarding state [ 295.394412][ T665] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 295.402548][ T665] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.409529][ T665] bridge0: port 2(bridge_slave_1) entered forwarding state [ 295.422880][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 295.436362][ T4997] EXT4-fs (loop0): unmounting filesystem. [ 295.456473][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 295.472741][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 295.488242][ T665] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 295.496348][ T665] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 295.504263][ T665] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 295.512578][ T5285] device veth0_vlan entered promiscuous mode [ 295.524451][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 295.537008][ T5285] device veth1_macvtap entered promiscuous mode [ 295.547830][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 295.558119][ T665] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 295.578430][ T40] usb 3-1: USB disconnect, device number 23 [ 295.596411][ T5293] loop3: detected capacity change from 0 to 1024 [ 295.603827][ T5293] EXT4-fs: Ignoring removed i_version option [ 295.612743][ T5293] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 295.643117][ T5293] EXT4-fs (loop3): unmounting filesystem. [ 295.656712][ T3579] device bridge_slave_1 left promiscuous mode [ 295.665956][ T3579] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.673955][ T3579] device bridge_slave_0 left promiscuous mode [ 295.680095][ T3579] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.688392][ T3579] device veth1_macvtap left promiscuous mode [ 295.694384][ T3579] device veth0_vlan left promiscuous mode [ 295.933315][ T19] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 296.173159][ T19] usb 4-1: Using ep0 maxpacket: 16 [ 296.493215][ T19] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 296.503500][ T19] usb 4-1: config 0 has no interfaces? [ 296.663095][ T19] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 296.672062][ T19] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.679900][ T19] usb 4-1: Product: syz [ 296.683951][ T19] usb 4-1: Manufacturer: syz [ 296.688316][ T19] usb 4-1: SerialNumber: syz [ 296.693798][ T19] r8152-cfgselector 4-1: config 0 descriptor?? [ 296.975660][ T3579] usb 4-1: config 0 descriptor?? [ 296.987082][ T28] audit: type=1400 audit(1723133757.929:758): avc: denied { getattr } for pid=5307 comm="syz.2.1349" name="/" dev="incremental-fs" ino=40 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 297.036154][ T5310] loop2: detected capacity change from 0 to 512 [ 297.064943][ T5310] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 297.074302][ T5310] ext4 filesystem being mounted at /5/bus supports timestamps until 2038 (0x7fffffff) [ 297.164827][ T19] usb 4-1: USB disconnect, device number 20 [ 297.172743][ T3579] usb 4-1: can't set config #0, error -71 [ 297.257215][ T40] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 297.512652][ T3979] Bluetooth: hci0: command 0x1003 tx timeout [ 297.512668][ T1812] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 297.951000][ T40] usb 2-1: too many endpoints for config 1 interface 0 altsetting 0: 134, using maximum allowed: 30 [ 297.964712][ T40] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 134 [ 297.978509][ T5198] EXT4-fs (loop2): unmounting filesystem. [ 298.335548][ T40] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 298.344602][ T40] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 298.352883][ T40] usb 2-1: SerialNumber: syz [ 298.520056][ T5325] loop0: detected capacity change from 0 to 40427 [ 298.527916][ T5325] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 298.536130][ T5325] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 298.546092][ T5325] F2FS-fs (loop0): invalid crc value [ 298.551761][ T5325] F2FS-fs (loop0): invalid crc_offset: 33558524 [ 298.558400][ T5325] F2FS-fs (loop0): Failed to get valid F2FS checkpoint [ 298.592908][ T328] I/O error, dev loop0, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 299.101702][ T665] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 299.465076][ T40] cdc_ether 2-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.1-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 299.493575][ T5345] loop4: detected capacity change from 0 to 512 [ 299.505487][ T5345] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 299.538688][ T5345] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 299.559902][ T5345] EXT4-fs (loop4): 1 truncate cleaned up [ 299.566015][ T5345] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 299.600868][ T5340] loop3: detected capacity change from 0 to 2048 [ 299.691047][ T5340] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 299.821633][ T665] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 299.888744][ T5370] loop0: detected capacity change from 0 to 16 [ 299.943776][ T5371] 9pnet_fd: Insufficient options for proto=fd [ 299.959863][ T665] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 299.992671][ T5370] erofs: (device loop0): mounted with root inode @ nid 36. [ 300.073300][ T5372] erofs: (device loop0): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 300.083060][ T5372] erofs: (device loop0): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 300.092560][ T5372] erofs: (device loop0): z_erofs_read_folio: failed to read, err [-117] [ 300.103676][ T665] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 300.127348][ T5362] erofs: (device loop0): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 300.137206][ T5362] erofs: (device loop0): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 300.146762][ T5362] erofs: (device loop0): z_erofs_read_folio: failed to read, err [-117] [ 300.148392][ T5285] EXT4-fs (loop3): unmounting filesystem. [ 300.160060][ T665] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.172343][ T665] usb 3-1: config 0 descriptor?? [ 300.182596][ T556] usb 2-1: USB disconnect, device number 17 [ 300.202077][ T556] cdc_ether 2-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.1-1, CDC Ethernet Device [ 300.337757][ T4740] EXT4-fs error (device loop4): ext4_ext_check_inode:520: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 300.365784][ T4740] EXT4-fs error (device loop4): ext4_ext_check_inode:520: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 300.473894][ T4740] EXT4-fs (loop4): unmounting filesystem. [ 300.550513][ T5408] loop3: detected capacity change from 0 to 512 [ 300.635947][ T5408] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 300.665372][ T5408] ext4 filesystem being mounted at /6/bus supports timestamps until 2038 (0x7fffffff) [ 301.616452][ T665] usb 3-1: language id specifier not provided by device, defaulting to English [ 301.921050][ T5413] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.929194][ T5413] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.937062][ T5413] device bridge_slave_0 entered promiscuous mode [ 301.979732][ T5413] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.986816][ T5413] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.994647][ T5413] device bridge_slave_1 entered promiscuous mode [ 302.038866][ T5285] EXT4-fs (loop3): unmounting filesystem. [ 302.300523][ T665] uclogic 0003:256C:006D.0025: interface is invalid, ignoring [ 302.486973][ T665] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 302.494777][ T665] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 302.508979][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 302.518443][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 302.526641][ T556] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.533530][ T556] bridge0: port 1(bridge_slave_0) entered forwarding state [ 302.544058][ T665] usb 3-1: USB disconnect, device number 24 [ 302.550745][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 302.558532][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 302.567116][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 302.576359][ T556] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.583991][ T556] bridge0: port 2(bridge_slave_1) entered forwarding state [ 302.591498][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 302.605914][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 302.622931][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 302.637549][ T5413] device veth0_vlan entered promiscuous mode [ 302.648099][ T4678] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 302.656811][ T4678] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 302.700524][ T4678] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 302.709167][ T3579] device bridge_slave_1 left promiscuous mode [ 302.716230][ T3579] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.728878][ T3579] device bridge_slave_0 left promiscuous mode [ 302.735913][ T3579] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.751463][ T3579] device veth1_macvtap left promiscuous mode [ 302.757346][ T3579] device veth0_vlan left promiscuous mode [ 303.045253][ T5444] fuse: Unknown parameter '0xffffffffffffffff' [ 303.117679][ T5447] device syzkaller0 entered promiscuous mode [ 303.138805][ T476] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 303.148285][ T476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 303.159328][ T5413] device veth1_macvtap entered promiscuous mode [ 303.172837][ T4678] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 303.180994][ T4678] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 303.189239][ T4678] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 303.208757][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 303.220685][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 303.295715][ T5461] loop3: detected capacity change from 0 to 1024 [ 303.302158][ T956] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 303.334129][ T5461] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 303.374530][ T5457] loop2: detected capacity change from 0 to 16 [ 303.381936][ T5457] erofs: (device loop2): mounted with root inode @ nid 36. [ 303.455225][ T5465] x_tables: ip6_tables: udp match: only valid for protocol 17 [ 304.416815][ T5467] erofs: (device loop2): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 304.426634][ T5467] erofs: (device loop2): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 304.436589][ T5467] erofs: (device loop2): z_erofs_read_folio: failed to read, err [-117] [ 304.503913][ T5467] erofs: (device loop2): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 304.516825][ T5467] erofs: (device loop2): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 304.527101][ T5467] erofs: (device loop2): z_erofs_read_folio: failed to read, err [-117] [ 305.179338][ T5285] EXT4-fs (loop3): unmounting filesystem. [ 305.568908][ T5475] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1379'. [ 305.579873][ T5475] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 305.895965][ T5485] input: syz0 as /devices/virtual/input/input30 [ 305.905292][ T956] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 305.915510][ T956] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 305.998569][ T956] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 306.008942][ T956] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 306.017264][ T956] usb 2-1: SerialNumber: syz [ 306.058236][ T956] usb 2-1: can't set config #1, error -71 [ 306.068906][ T956] usb 2-1: USB disconnect, device number 18 [ 306.079747][ T28] audit: type=1400 audit(1723133767.033:759): avc: denied { block_suspend } for pid=5491 comm="syz.1.1384" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 306.338340][ T665] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 306.677926][ T19] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 306.787886][ T665] usb 3-1: too many endpoints for config 1 interface 0 altsetting 0: 134, using maximum allowed: 30 [ 306.798576][ T665] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 134 [ 306.928289][ T665] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 306.942248][ T665] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 306.951820][ T665] usb 3-1: SerialNumber: syz [ 307.057763][ T19] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 307.069117][ T19] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 307.093292][ T19] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 307.102499][ T19] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.111711][ T19] usb 1-1: config 0 descriptor?? [ 307.217197][ T5518] fuse: Unknown parameter '0xffffffffffffffff' [ 307.675325][ T5520] loop4: detected capacity change from 0 to 16 [ 307.686976][ T5520] erofs: (device loop4): mounted with root inode @ nid 36. [ 307.770403][ T5520] erofs: (device loop4): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 307.779979][ T5520] erofs: (device loop4): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 307.789546][ T5520] erofs: (device loop4): z_erofs_read_folio: failed to read, err [-117] [ 307.798751][ T5520] erofs: (device loop4): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 307.808442][ T5520] erofs: (device loop4): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 307.853708][ T5520] erofs: (device loop4): z_erofs_read_folio: failed to read, err [-117] [ 308.068872][ T5533] loop4: detected capacity change from 0 to 512 [ 308.075261][ T5533] EXT4-fs: Ignoring removed nobh option [ 308.083587][ T5533] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 308.092134][ T5533] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #13: comm syz.4.1397: attempt to clear invalid blocks 2 len 1 [ 308.110384][ T5533] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 308.127984][ T5533] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.1397: invalid indirect mapped block 1819239214 (level 0) [ 308.144769][ T5533] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.1397: invalid indirect mapped block 1819239214 (level 1) [ 308.262232][ T5537] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1393'. [ 308.272910][ T5537] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 308.337512][ T5533] EXT4-fs (loop4): 1 truncate cleaned up [ 308.343183][ T5533] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 308.388799][ T665] cdc_ether 3-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.2-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 308.596957][ T19] usb 1-1: language id specifier not provided by device, defaulting to English [ 308.617225][ T28] audit: type=1400 audit(1723133769.575:760): avc: denied { sys_chroot } for pid=5555 comm="dhcpcd" capability=18 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 308.640402][ T665] usb 3-1: USB disconnect, device number 25 [ 308.647603][ T28] audit: type=1400 audit(1723133769.575:761): avc: denied { setgid } for pid=5555 comm="dhcpcd" capability=6 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 308.669038][ T665] cdc_ether 3-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.2-1, CDC Ethernet Device [ 308.684889][ T28] audit: type=1400 audit(1723133769.575:762): avc: denied { setuid } for pid=5555 comm="dhcpcd" capability=7 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 308.707075][ T28] audit: type=1400 audit(1723133769.575:763): avc: denied { setrlimit } for pid=5555 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=process permissive=1 [ 308.980748][ T5413] EXT4-fs (loop4): unmounting filesystem. [ 309.427844][ T19] uclogic 0003:256C:006D.0026: interface is invalid, ignoring [ 309.475224][ T5597] loop2: detected capacity change from 0 to 512 [ 309.550851][ T5597] EXT4-fs (loop2): 1 orphan inode deleted [ 309.556878][ T5597] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 309.565920][ T5597] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038 (0x7fffffff) [ 309.665249][ T19] usb 1-1: USB disconnect, device number 30 [ 310.346085][ T5198] EXT4-fs (loop2): unmounting filesystem. [ 310.466028][ T4678] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 310.581210][ T5641] fuse: Unknown parameter '0xffffffffffffffff' [ 310.759857][ T5639] loop0: detected capacity change from 0 to 512 [ 310.828299][ T5639] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 310.837387][ T5639] ext4 filesystem being mounted at /30/file0 supports timestamps until 2038 (0x7fffffff) [ 310.849419][ T28] audit: type=1400 audit(1723133771.806:764): avc: denied { create } for pid=5638 comm="syz.4.1411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 310.869215][ T28] audit: type=1400 audit(1723133771.806:765): avc: denied { setattr } for pid=5634 comm="syz.0.1410" path="/30/file0/bus" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 310.872955][ T5639] EXT4-fs error (device loop0): ext4_do_update_inode:5212: inode #19: comm syz.0.1410: corrupted inode contents [ 310.892276][ T28] audit: type=1400 audit(1723133771.826:766): avc: denied { sys_admin } for pid=5638 comm="syz.4.1411" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 310.925471][ T5639] EXT4-fs error (device loop0): ext4_dirty_inode:6074: inode #19: comm syz.0.1410: mark_inode_dirty error [ 310.937066][ T5639] EXT4-fs error (device loop0): ext4_do_update_inode:5212: inode #19: comm syz.0.1410: corrupted inode contents [ 310.949307][ T5639] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2955: inode #19: comm syz.0.1410: mark_inode_dirty error [ 310.961401][ T5639] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2958: inode #19: comm syz.0.1410: mark inode dirty (error -117) [ 310.974584][ T5639] EXT4-fs warning (device loop0): ext4_evict_inode:299: xattr delete (err -117) [ 311.105723][ T4678] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 311.116578][ T4678] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 311.126032][ T4678] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.135135][ T4678] usb 2-1: config 0 descriptor?? [ 311.275620][ T476] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 311.302810][ T4997] EXT4-fs (loop0): unmounting filesystem. [ 311.379495][ T5620] fuse: Bad value for 'fd' [ 311.495550][ T665] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 311.585541][ T4271] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 311.616130][ T4678] keytouch 0003:0926:3333.0027: fixing up Keytouch IEC report descriptor [ 311.626123][ T4678] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0027/input/input31 [ 311.664017][ T5665] loop0: detected capacity change from 0 to 2048 [ 311.676800][ T476] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 311.678825][ T5665] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 311.686940][ T476] usb 5-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 311.695755][ T5665] ext4 filesystem being mounted at /33/file0 supports timestamps until 2038 (0x7fffffff) [ 311.704897][ T476] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.723659][ T4678] keytouch 0003:0926:3333.0027: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 311.741242][ T28] audit: type=1400 audit(1723133772.696:767): avc: denied { rename } for pid=5664 comm="syz.0.1418" name="file0" dev="loop0" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 311.756840][ T476] usb 5-1: config 0 descriptor?? [ 311.835281][ T4271] usb 3-1: Using ep0 maxpacket: 8 [ 311.885300][ T665] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 311.896199][ T665] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 311.905999][ T665] usb 4-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 311.914895][ T665] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.925398][ T665] usb 4-1: config 0 descriptor?? [ 311.955265][ T4271] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 311.966517][ T4271] usb 3-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=5f.0e [ 311.975524][ T4271] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.985368][ T4271] usb 3-1: config 0 descriptor?? [ 312.036304][ T4271] usb 3-1: bad CDC descriptors [ 312.039328][ T4678] usb 5-1: USB disconnect, device number 24 [ 312.123530][ T4997] EXT4-fs (loop0): unmounting filesystem. [ 312.236978][ T4271] usb 3-1: USB disconnect, device number 26 [ 312.357443][ T476] usb 2-1: USB disconnect, device number 19 [ 312.425205][ T665] logitech-djreceiver 0003:046D:C71B.0028: unknown main item tag 0x0 [ 312.435247][ T665] logitech-djreceiver 0003:046D:C71B.0028: unknown main item tag 0x0 [ 312.443633][ T665] logitech-djreceiver 0003:046D:C71B.0028: unknown main item tag 0x0 [ 312.454413][ T665] logitech-djreceiver 0003:046D:C71B.0028: unknown main item tag 0x0 [ 312.464064][ T665] logitech-djreceiver 0003:046D:C71B.0028: unknown main item tag 0x0 [ 312.474480][ T665] logitech-djreceiver 0003:046D:C71B.0028: unknown main item tag 0x0 [ 312.485146][ T665] logitech-djreceiver 0003:046D:C71B.0028: unknown main item tag 0x0 [ 312.618799][ T4678] usb 4-1: USB disconnect, device number 21 [ 312.636871][ T28] audit: type=1400 audit(1723133773.597:768): avc: denied { mounton } for pid=5681 comm="syz.4.1423" path="/proc/45/task" dev="proc" ino=42816 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 313.015641][ T476] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 313.344782][ T5699] netlink: 'syz.1.1429': attribute type 16 has an invalid length. [ 313.352725][ T5699] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.1429'. [ 314.723108][ T28] audit: type=1400 audit(1723133775.678:769): avc: denied { ioctl } for pid=5714 comm="syz.1.1435" path="uts:[4026532492]" dev="nsfs" ino=4026532492 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 314.748422][ T476] usb 5-1: Using ep0 maxpacket: 8 [ 314.873890][ T476] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 314.887302][ T476] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 314.970331][ T476] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 314.980240][ T476] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 315.623447][ T28] audit: type=1400 audit(1723133776.068:770): avc: denied { setcurrent } for pid=5726 comm="syz.3.1439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 315.679553][ T476] usb 5-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 316.065462][ T28] audit: type=1401 audit(1723133776.068:771): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t [ 316.082494][ T476] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.119045][ T5739] loop4: detected capacity change from 0 to 256 [ 316.163784][ T476] usb 5-1: config 0 descriptor?? [ 316.178533][ T5739] FAT-fs (loop4): Unrecognized mount option "uni_xlatå=0" or missing value [ 316.188298][ T476] usb 5-1: can't set config #0, error -71 [ 316.194725][ T476] usb 5-1: USB disconnect, device number 25 [ 316.247358][ T5743] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1443'. [ 316.261354][ T2002] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 316.399690][ T5751] netlink: 'syz.2.1446': attribute type 16 has an invalid length. [ 316.407540][ T5751] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.1446'. [ 317.212067][ T28] audit: type=1400 audit(1723133778.159:772): avc: denied { accept } for pid=5756 comm="syz.1.1448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 317.222896][ T556] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 317.340178][ T40] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 317.599431][ T5768] loop2: detected capacity change from 0 to 1024 [ 317.610735][ T5767] device syzkaller0 entered promiscuous mode [ 317.626820][ T5768] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 317.632502][ T28] audit: type=1400 audit(1723133778.579:773): avc: denied { relabelfrom } for pid=5766 comm="syz.1.1450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 317.656571][ T28] audit: type=1400 audit(1723133778.599:774): avc: denied { relabelto } for pid=5766 comm="syz.1.1450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 317.822416][ T40] usb 4-1: device descriptor read/64, error -71 [ 318.212150][ T556] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 318.228043][ T556] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 318.246159][ T556] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 318.262800][ T556] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.272231][ T40] usb 4-1: device descriptor read/64, error -71 [ 318.276414][ T556] usb 1-1: config 0 descriptor?? [ 318.477050][ T5198] EXT4-fs (loop2): unmounting filesystem. [ 318.575088][ T40] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 318.645861][ T5799] loop2: detected capacity change from 0 to 40427 [ 318.652663][ T5799] F2FS-fs (loop2): Invalid log blocks per segment (4278190089) [ 318.660215][ T5799] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 318.671576][ T5799] F2FS-fs (loop2): invalid crc value [ 318.682137][ T5799] F2FS-fs (loop2): Found nat_bits in checkpoint [ 318.792956][ T665] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 318.800613][ T28] audit: type=1400 audit(1723133779.750:775): avc: denied { read } for pid=5794 comm="syz.4.1461" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 318.855642][ T5799] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 318.862219][ T556] hid (null): bogus close delimiter [ 318.862758][ T5799] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 318.901777][ T40] usb 4-1: device descriptor read/64, error -71 [ 318.910190][ T5799] syz.2.1460: attempt to access beyond end of device [ 318.910190][ T5799] loop2: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 319.012377][ T28] audit: type=1400 audit(1723133779.960:776): avc: denied { execute_no_trans } for pid=5798 comm="syz.2.1460" path="/23/file2/file1" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 319.136890][ T556] usb 1-1: language id specifier not provided by device, defaulting to English [ 319.211822][ T665] usb 2-1: config 0 has no interfaces? [ 319.240264][ T665] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 319.250921][ T665] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.402236][ T665] usb 2-1: config 0 descriptor?? [ 319.524531][ T28] audit: type=1400 audit(1723133780.460:777): avc: denied { map } for pid=5809 comm="syz.3.1463" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=159 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 319.689409][ T665] usb 2-1: USB disconnect, device number 20 [ 319.832218][ T5198] syz-executor: attempt to access beyond end of device [ 319.832218][ T5198] loop2: rw=2049, sector=45104, nr_sectors = 16 limit=40427 [ 319.853473][ T556] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0029/input/input32 [ 319.867621][ T556] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0029/input/input33 [ 319.885106][ T556] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0029/input/input34 [ 319.910649][ T556] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0029/input/input35 [ 319.927143][ T556] uclogic 0003:256C:006D.0029: input,hiddev96,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.0-1/input0 [ 320.022568][ T5817] loop2: detected capacity change from 0 to 512 [ 320.042826][ T5817] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 320.052032][ T5817] ext4 filesystem being mounted at /24/file0 supports timestamps until 2038 (0x7fffffff) [ 320.072072][ T5817] EXT4-fs error (device loop2): ext4_do_update_inode:5212: inode #2: comm syz.2.1465: corrupted inode contents [ 320.084584][ T665] usb 1-1: USB disconnect, device number 31 [ 320.100262][ T5817] EXT4-fs error (device loop2): ext4_dirty_inode:6074: inode #2: comm syz.2.1465: mark_inode_dirty error [ 320.115668][ T5817] EXT4-fs error (device loop2): ext4_do_update_inode:5212: inode #2: comm syz.2.1465: corrupted inode contents [ 320.129991][ T5817] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #2: comm syz.2.1465: mark_inode_dirty error [ 320.700081][ T5833] loop3: detected capacity change from 0 to 256 [ 320.718628][ T5833] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 321.435106][ T5198] EXT4-fs (loop2): unmounting filesystem. [ 321.531943][ T5841] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1470'. [ 321.647393][ T40] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 321.797338][ T5846] loop4: detected capacity change from 0 to 1024 [ 321.809010][ T5838] kvm [5837]: vcpu0, guest rIP: 0xfff0 unimplemented MMIO_CONF_BASE wrmsr: 0x85 [ 321.866756][ T5846] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 321.934014][ T5853] loop3: detected capacity change from 0 to 128 [ 321.969983][ T5853] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 321.985175][ T5853] ext4 filesystem being mounted at /26/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 322.431183][ T40] usb 2-1: Using ep0 maxpacket: 8 [ 322.562185][ T40] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 322.611159][ T40] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 322.775176][ T5413] EXT4-fs (loop4): unmounting filesystem. [ 322.806366][ T40] usb 2-1: New USB device found, idVendor=17ef, idProduct=60ee, bcdDevice= 0.91 [ 322.905454][ T40] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.933435][ T40] usb 2-1: config 0 descriptor?? [ 322.962908][ T5868] loop4: detected capacity change from 0 to 512 [ 322.970856][ T5868] EXT4-fs: Ignoring removed mblk_io_submit option [ 322.983113][ T5868] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 322.994886][ T5285] EXT4-fs (loop3): unmounting filesystem. [ 323.017923][ T5868] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2213: inode #15: comm syz.4.1476: corrupted in-inode xattr [ 323.031124][ T5868] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz.4.1476: couldn't read orphan inode 15 (err -117) [ 323.043753][ T5868] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 323.067749][ T28] audit: type=1400 audit(1723133784.022:778): avc: denied { setattr } for pid=5867 comm="syz.4.1476" name="file0" dev="loop4" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 323.105758][ T5413] EXT4-fs (loop4): unmounting filesystem. [ 323.129008][ T5866] loop2: detected capacity change from 0 to 40427 [ 323.146960][ T5866] F2FS-fs (loop2): invalid crc value [ 323.177565][ T5866] F2FS-fs (loop2): Found nat_bits in checkpoint [ 323.227989][ T5866] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 323.279407][ T5873] loop3: detected capacity change from 0 to 40427 [ 323.287284][ T5873] F2FS-fs (loop3): invalid crc value [ 323.295050][ T5873] F2FS-fs (loop3): Found nat_bits in checkpoint [ 323.343815][ T5873] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 323.400932][ T40] lenovo 0003:17EF:60EE.002A: unknown main item tag 0x0 [ 323.408189][ T40] lenovo 0003:17EF:60EE.002A: unknown main item tag 0x0 [ 323.429622][ T40] lenovo 0003:17EF:60EE.002A: unknown main item tag 0x0 [ 323.436921][ T40] lenovo 0003:17EF:60EE.002A: unknown main item tag 0x0 [ 323.459517][ T40] lenovo 0003:17EF:60EE.002A: unknown main item tag 0x0 [ 323.466338][ T40] lenovo 0003:17EF:60EE.002A: unknown main item tag 0x0 [ 323.476284][ T40] lenovo 0003:17EF:60EE.002A: unknown main item tag 0x0 [ 323.484486][ T476] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 323.497880][ T40] lenovo 0003:17EF:60EE.002A: hidraw0: USB HID v0.00 Device [HID 17ef:60ee] on usb-dummy_hcd.1-1/input0 [ 323.605614][ T40] usb 2-1: USB disconnect, device number 21 [ 323.786539][ T5198] syz-executor: attempt to access beyond end of device [ 323.786539][ T5198] loop2: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 323.800965][ T5198] syz-executor: attempt to access beyond end of device [ 323.800965][ T5198] loop2: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 323.869325][ T476] usb 5-1: config 0 has no interfaces? [ 323.874678][ T476] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 323.887645][ T5285] syz-executor: attempt to access beyond end of device [ 323.887645][ T5285] loop3: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 323.897583][ T476] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.904370][ T5285] syz-executor: attempt to access beyond end of device [ 323.904370][ T5285] loop3: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 323.916730][ T476] usb 5-1: config 0 descriptor?? [ 323.949451][ T43] kworker/u4:2: attempt to access beyond end of device [ 323.949451][ T43] loop3: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 324.033681][ T5891] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.040859][ T5891] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.048517][ T5891] device bridge_slave_0 entered promiscuous mode [ 324.061517][ T5891] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.068583][ T5891] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.076503][ T5891] device bridge_slave_1 entered promiscuous mode [ 324.168880][ T5891] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.175810][ T5891] bridge0: port 2(bridge_slave_1) entered forwarding state [ 324.182914][ T5891] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.189951][ T5891] bridge0: port 1(bridge_slave_0) entered forwarding state [ 324.193212][ T982] usb 5-1: USB disconnect, device number 26 [ 324.224307][ T476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 324.246406][ T476] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.254671][ T476] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.290453][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 324.298656][ T556] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.305794][ T556] bridge0: port 1(bridge_slave_0) entered forwarding state [ 324.317908][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 324.326665][ T556] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.333887][ T556] bridge0: port 2(bridge_slave_1) entered forwarding state [ 324.389584][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 324.397892][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 324.427603][ T5891] device veth0_vlan entered promiscuous mode [ 324.439120][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 324.447978][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 324.456315][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 324.464207][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 324.478830][ T5898] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.490361][ T5898] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.502498][ T5898] device bridge_slave_0 entered promiscuous mode [ 324.596351][ T28] audit: type=1400 audit(1723133785.513:779): avc: denied { unlink } for pid=5899 comm="syz.1.1489" name="#48" dev="tmpfs" ino=260 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 324.648487][ T5898] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.669957][ T5898] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.682402][ T5898] device bridge_slave_1 entered promiscuous mode [ 324.713606][ T476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 324.764151][ T5891] device veth1_macvtap entered promiscuous mode [ 324.789078][ T476] kworker/1:6: attempt to access beyond end of device [ 324.789078][ T476] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 324.817579][ T982] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 324.826270][ T982] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 324.995249][ T476] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 325.005978][ T476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 325.109584][ T5914] loop2: detected capacity change from 0 to 256 [ 326.260455][ T43] device bridge_slave_1 left promiscuous mode [ 326.357372][ T5927] loop0: detected capacity change from 0 to 128 [ 326.371992][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.398569][ T43] device bridge_slave_0 left promiscuous mode [ 326.989537][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.005597][ T43] device veth1_macvtap left promiscuous mode [ 327.011802][ T43] device veth0_vlan left promiscuous mode [ 327.127865][ T476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 327.136058][ T476] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 327.144099][ T476] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.150963][ T476] bridge0: port 1(bridge_slave_0) entered forwarding state [ 327.158210][ T476] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 327.166338][ T476] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 327.174506][ T476] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.181508][ T476] bridge0: port 2(bridge_slave_1) entered forwarding state [ 327.188806][ T476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 327.196771][ T476] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 327.204657][ T476] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 327.212528][ T476] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 327.220397][ T476] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 327.242602][ T5898] device veth0_vlan entered promiscuous mode [ 327.250169][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 327.258922][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 327.267189][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 327.275090][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 327.288415][ T5898] device veth1_macvtap entered promiscuous mode [ 327.298385][ T982] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 327.305674][ T982] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 327.313652][ T982] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 327.321795][ T982] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 327.329877][ T982] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 327.337693][ T982] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 327.345878][ T982] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 327.355067][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 327.363414][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 327.412110][ T5938] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5938 comm=syz.4.1496 [ 327.431033][ T28] audit: type=1400 audit(1723133788.394:780): avc: denied { read } for pid=5936 comm="syz.4.1496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 327.472279][ T5945] loop3: detected capacity change from 0 to 1024 [ 327.485432][ T5945] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 327.727033][ T40] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 327.997238][ T982] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 328.117397][ T40] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 328.127792][ T40] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 328.136607][ T40] usb 3-1: too many endpoints for config 1 interface 1 altsetting 48: 48, using maximum allowed: 30 [ 328.147917][ T40] usb 3-1: config 1 interface 1 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 328.161235][ T40] usb 3-1: config 1 interface 1 has no altsetting 0 [ 328.187831][ T43] device bridge_slave_1 left promiscuous mode [ 328.193842][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.201267][ T43] device bridge_slave_0 left promiscuous mode [ 328.207633][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.215426][ T43] device veth1_macvtap left promiscuous mode [ 328.221494][ T43] device veth0_vlan left promiscuous mode [ 328.327144][ T40] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 328.346423][ T40] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.354784][ T40] usb 3-1: Product: syz [ 328.359516][ T40] usb 3-1: Manufacturer: syz [ 328.360061][ T5898] EXT4-fs (loop3): unmounting filesystem. [ 328.364286][ T40] usb 3-1: SerialNumber: syz [ 328.387098][ T982] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 328.398289][ T982] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 328.411591][ T982] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 328.420638][ T982] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.430450][ T982] usb 1-1: config 0 descriptor?? [ 328.687087][ T40] usb 3-1: 0:2 : does not exist [ 328.728259][ T40] usb 3-1: USB disconnect, device number 27 [ 328.737501][ T2002] udevd[2002]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 328.897568][ T982] plantronics 0003:047F:FFFF.002B: unknown main item tag 0x0 [ 328.904838][ T982] plantronics 0003:047F:FFFF.002B: unknown main item tag 0x0 [ 328.912318][ T982] plantronics 0003:047F:FFFF.002B: No inputs registered, leaving [ 328.923076][ T982] plantronics 0003:047F:FFFF.002B: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 329.017584][ T1812] Bluetooth: hci0: command 0x1003 tx timeout [ 329.020782][ T3979] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 329.054767][ T5959] loop1: detected capacity change from 0 to 256 [ 329.079978][ T5959] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 329.322046][ T5963] loop4: detected capacity change from 0 to 256 [ 329.858881][ T19] usb 1-1: USB disconnect, device number 32 [ 329.883597][ T5967] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1501'. [ 332.164590][ T5993] loop0: detected capacity change from 0 to 512 [ 333.296986][ T28] audit: type=1400 audit(1723133794.000:781): avc: denied { ioctl } for pid=5983 comm="syz.4.1518" path="socket:[44728]" dev="sockfs" ino=44728 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 333.398477][ T556] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 333.446221][ T5993] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 333.454121][ T6011] loop3: detected capacity change from 0 to 512 [ 333.455135][ T5993] ext4 filesystem being mounted at /45/bus supports timestamps until 2038 (0x7fffffff) [ 333.943536][ T6015] loop1: detected capacity change from 0 to 256 [ 334.529547][ T6011] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 334.967207][ T6011] EXT4-fs error (device loop3): ext4_orphan_get:1396: inode #15: comm syz.3.1513: iget: bad i_size value: -67835469387268086 [ 334.982305][ T4997] EXT4-fs (loop0): unmounting filesystem. [ 334.994645][ T6024] loop2: detected capacity change from 0 to 512 [ 335.004958][ T6011] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz.3.1513: couldn't read orphan inode 15 (err -117) [ 335.023929][ T6011] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 335.044352][ T6024] EXT4-fs (loop2): 1 orphan inode deleted [ 335.045927][ T6029] loop0: detected capacity change from 0 to 256 [ 335.049955][ T6024] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 335.063837][ T6011] ext2 filesystem being mounted at /5/file0 supports timestamps until 2038 (0x7fffffff) [ 335.068460][ T6024] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038 (0x7fffffff) [ 335.136420][ T6029] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 336.303864][ T6038] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1516'. [ 336.418663][ T5891] EXT4-fs error (device loop2): ext4_map_blocks:607: inode #2: block 3: comm syz-executor: lblock 0 mapped to illegal pblock 3 (length 1) [ 336.442517][ T5898] EXT4-fs (loop3): unmounting filesystem. [ 336.545894][ T5891] EXT4-fs (loop2): Remounting filesystem read-only [ 336.623510][ T5891] EXT4-fs (loop2): unmounting filesystem. [ 337.138901][ T6051] loop1: detected capacity change from 0 to 512 [ 337.154607][ T6051] EXT4-fs: Ignoring removed bh option [ 337.227535][ T6051] EXT4-fs error (device loop1): __ext4_iget:5046: inode #12: block 2: comm syz.1.1525: invalid block [ 337.238749][ T6051] EXT4-fs error (device loop1): ext4_orphan_get:1401: comm syz.1.1525: couldn't read orphan inode 12 (err -117) [ 337.252184][ T6051] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 337.296756][ T6055] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.328958][ T6055] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.374540][ T5089] EXT4-fs (loop1): unmounting filesystem. [ 337.386100][ T6055] device bridge_slave_0 entered promiscuous mode [ 337.401013][ T10] device veth1_macvtap left promiscuous mode [ 337.753541][ T6068] loop3: detected capacity change from 0 to 512 [ 337.775789][ T6068] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 337.785362][ T6068] ext4 filesystem being mounted at /7/bus supports timestamps until 2038 (0x7fffffff) [ 337.817496][ T6055] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.824617][ T6055] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.833455][ T6055] device bridge_slave_1 entered promiscuous mode [ 338.178969][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 338.186827][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 338.196817][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 338.205476][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 338.214102][ T4271] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.220982][ T4271] bridge0: port 1(bridge_slave_0) entered forwarding state [ 338.229309][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 338.237025][ T40] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 338.251347][ T6080] loop4: detected capacity change from 0 to 512 [ 338.259458][ T982] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 338.268783][ T6080] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 338.272265][ T982] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 338.285977][ T982] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.288009][ T6080] EXT4-fs error (device loop4): ext4_orphan_get:1396: inode #15: comm syz.4.1534: iget: bad i_size value: -67835469387268086 [ 338.294081][ T982] bridge0: port 2(bridge_slave_1) entered forwarding state [ 338.317667][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 338.325715][ T6080] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz.4.1534: couldn't read orphan inode 15 (err -117) [ 338.326697][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 338.338234][ T6080] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 338.353963][ T6080] ext2 filesystem being mounted at /39/file0 supports timestamps until 2038 (0x7fffffff) [ 338.356931][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 338.373305][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 338.381151][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 338.388878][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 338.398379][ T6055] device veth0_vlan entered promiscuous mode [ 338.414930][ T6055] device veth1_macvtap entered promiscuous mode [ 338.423325][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 338.438225][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 338.452368][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 338.972464][ T40] usb 2-1: Using ep0 maxpacket: 8 [ 339.044497][ T5898] EXT4-fs (loop3): unmounting filesystem. [ 339.207268][ T5413] EXT4-fs (loop4): unmounting filesystem. [ 339.220431][ T6094] loop0: detected capacity change from 0 to 512 [ 339.287398][ T6094] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=2802c018, mo2=0002] [ 339.296546][ T6094] System zones: 0-2, 18-18, 34-35 [ 339.308841][ T6094] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 339.308912][ T40] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 339.318884][ T40] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 339.340902][ T40] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 339.356784][ T40] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 339.378269][ T6094] ext4 filesystem being mounted at /50/file0 supports timestamps until 2038 (0x7fffffff) [ 339.381494][ T40] usb 2-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 339.403485][ T40] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.413544][ T40] usb 2-1: config 0 descriptor?? [ 339.433702][ T6094] EXT4-fs error (device loop0): ext4_search_dir:1548: inode #2: block 3: comm syz.0.1546: bad entry in directory: rec_len is smaller than minimal - offset=16444, inode=113, rec_len=0, size=2048 fake=0 [ 339.625406][ T6104] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1536'. [ 339.636080][ T6104] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 339.766757][ T28] audit: type=1400 audit(1723133800.734:782): avc: denied { reparent } for pid=6093 comm="syz.0.1546" name="#51" dev="loop0" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 339.793078][ T4997] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 3: comm syz-executor: path /50/file0: bad entry in directory: rec_len is smaller than minimal - offset=60, inode=113, rec_len=0, size=2048 fake=0 [ 339.815168][ T4997] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 12: comm syz-executor: path /50/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 339.837229][ T4997] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 13: comm syz-executor: path /50/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 339.859405][ T4997] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 14: comm syz-executor: path /50/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 339.882230][ T4997] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 15: comm syz-executor: path /50/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 339.902894][ T556] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 339.903234][ T4997] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 16: comm syz-executor: path /50/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 339.931656][ T4997] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 17: comm syz-executor: path /50/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 339.953236][ T4997] EXT4-fs error (device loop0): ext4_map_blocks:607: inode #2: block 18: comm syz-executor: lblock 23 mapped to illegal pblock 18 (length 1) [ 339.982754][ T5630] EXT4-fs (loop0): unmounting filesystem. [ 340.002367][ T40] kye 0003:0458:5011.002C: unbalanced collection at end of report description [ 340.011947][ T40] kye 0003:0458:5011.002C: parse failed [ 340.012124][ T10] device bridge_slave_1 left promiscuous mode [ 340.017534][ T40] kye: probe of 0003:0458:5011.002C failed with error -22 [ 340.024592][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.038158][ T10] device bridge_slave_0 left promiscuous mode [ 340.044745][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.054542][ T10] device veth1_macvtap left promiscuous mode [ 340.060437][ T10] device veth0_vlan left promiscuous mode [ 340.218546][ T40] usb 2-1: USB disconnect, device number 22 [ 340.291184][ T556] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 340.302143][ T556] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 340.311738][ T556] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.00 [ 340.320610][ T556] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.330225][ T556] usb 4-1: config 0 descriptor?? [ 340.737566][ T6108] loop2: detected capacity change from 0 to 512 [ 340.751001][ T6108] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 340.838711][ T6098] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 340.848227][ T6098] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 340.858123][ T6108] EXT4-fs (loop2): 1 orphan inode deleted [ 340.859217][ T6098] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 340.864483][ T6108] EXT4-fs (loop2): 1 truncate cleaned up [ 340.874086][ T6098] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 340.877862][ T6108] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 340.897370][ T6098] loop3: detected capacity change from 0 to 512 [ 340.973953][ T6116] loop1: detected capacity change from 0 to 16 [ 340.983891][ T6116] erofs: (device loop1): mounted with root inode @ nid 36. [ 341.084536][ T6116] erofs: (device loop1): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 341.094595][ T6116] erofs: (device loop1): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 341.104165][ T6116] erofs: (device loop1): z_erofs_read_folio: failed to read, err [-117] [ 341.119384][ T6116] erofs: (device loop1): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 341.128977][ T6116] erofs: (device loop1): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 341.138693][ T6116] erofs: (device loop1): z_erofs_read_folio: failed to read, err [-117] [ 341.191820][ T6098] EXT4-fs error (device loop3): ext4_find_inline_data_nolock:164: inode #12: comm syz.3.1537: inline data xattr refers to an external xattr inode [ 341.225093][ T6098] EXT4-fs (loop3): Remounting filesystem read-only [ 341.234013][ T6098] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz.3.1537: couldn't read orphan inode 12 (err -117) [ 341.237793][ T6055] EXT4-fs error (device loop2): __ext4_iget:5046: inode #11: block 524051: comm syz-executor: invalid block [ 341.250366][ T6098] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 341.260574][ T982] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 341.274203][ T6055] EXT4-fs (loop2): Remounting filesystem read-only [ 341.280839][ T6055] EXT4-fs error (device loop2): __ext4_iget:5046: inode #11: block 524051: comm syz-executor: invalid block [ 341.300031][ T6114] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.307555][ T6114] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.315057][ T6114] device bridge_slave_0 entered promiscuous mode [ 341.325062][ T10] device bridge_slave_1 left promiscuous mode [ 341.331091][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.338499][ T10] device bridge_slave_0 left promiscuous mode [ 341.344746][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.353425][ T10] device veth1_macvtap left promiscuous mode [ 341.353803][ T6055] EXT4-fs (loop2): unmounting filesystem. [ 341.359276][ T10] device veth0_vlan left promiscuous mode [ 341.370527][ T556] usbhid 4-1:0.0: can't add hid device: -71 [ 341.376418][ T556] usbhid: probe of 4-1:0.0 failed with error -71 [ 341.393459][ T556] usb 4-1: USB disconnect, device number 24 [ 341.493630][ T6114] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.500741][ T6114] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.508169][ T6114] device bridge_slave_1 entered promiscuous mode [ 341.626881][ T28] audit: type=1400 audit(1723133802.595:783): avc: denied { getopt } for pid=6125 comm="syz.1.1543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 341.650685][ T982] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 341.671018][ T982] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 341.694219][ T6114] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.701109][ T6114] bridge0: port 2(bridge_slave_1) entered forwarding state [ 341.709213][ T6123] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.716337][ T6123] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.723964][ T6123] device bridge_slave_0 entered promiscuous mode [ 341.737059][ T6123] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.744692][ T6123] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.752500][ T6123] device bridge_slave_1 entered promiscuous mode [ 341.760406][ T982] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 341.769427][ T982] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 341.777303][ T982] usb 5-1: SerialNumber: syz [ 341.807661][ T556] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.815826][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 341.823892][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 341.831945][ T5898] EXT4-fs (loop3): unmounting filesystem. [ 341.855822][ T476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 341.864506][ T476] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 341.872927][ T476] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.879915][ T476] bridge0: port 1(bridge_slave_0) entered forwarding state [ 341.887758][ T476] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 341.896945][ T476] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.904209][ T476] bridge0: port 2(bridge_slave_1) entered forwarding state [ 341.931344][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 341.939636][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 341.978633][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 341.994979][ T476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 342.003632][ T476] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 342.011452][ T476] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 342.020166][ T6114] device veth0_vlan entered promiscuous mode [ 342.046667][ T6114] device veth1_macvtap entered promiscuous mode [ 342.053883][ T982] usb 5-1: 0:2 : does not exist [ 342.072590][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 342.090222][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 342.099118][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 342.128395][ T476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 342.144313][ T476] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 342.161011][ T476] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.168001][ T476] bridge0: port 1(bridge_slave_0) entered forwarding state [ 342.176148][ T476] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 342.184928][ T476] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.191815][ T476] bridge0: port 2(bridge_slave_1) entered forwarding state [ 342.216424][ T476] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 342.233064][ T476] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 342.252458][ T476] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 342.265272][ T6139] loop0: detected capacity change from 0 to 1024 [ 342.277110][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 342.294446][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 342.301398][ T6139] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 342.305190][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 342.322355][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 342.330364][ T6139] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 342.331322][ T6123] device veth0_vlan entered promiscuous mode [ 342.368514][ T476] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 342.382159][ T476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 342.392905][ T6123] device veth1_macvtap entered promiscuous mode [ 342.407231][ T982] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 342.415454][ T982] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 342.425411][ T982] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 342.446255][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 342.459163][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 342.480333][ T665] usb 5-1: USB disconnect, device number 27 [ 342.514765][ T6114] EXT4-fs (loop0): unmounting filesystem. [ 342.572220][ T10] device bridge_slave_1 left promiscuous mode [ 342.578382][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.586087][ T10] device bridge_slave_0 left promiscuous mode [ 342.592732][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.601238][ T10] device veth1_macvtap left promiscuous mode [ 342.607370][ T10] device veth0_vlan left promiscuous mode [ 343.089513][ T6160] loop3: detected capacity change from 0 to 1024 [ 343.114356][ T6160] EXT4-fs: Ignoring removed mblk_io_submit option [ 343.163981][ T6160] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 343.168806][ T6166] loop4: detected capacity change from 0 to 1024 [ 343.182496][ T6166] EXT4-fs: Ignoring removed nobh option [ 343.188522][ T6166] EXT4-fs: Ignoring removed nomblk_io_submit option [ 343.209127][ T6156] loop2: detected capacity change from 0 to 40427 [ 343.216473][ T6156] F2FS-fs (loop2): Invalid Fs Meta Ino: node(1) meta(262146) root(3) [ 343.224110][ T5898] EXT4-fs (loop3): unmounting filesystem. [ 343.224969][ T6156] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 343.238028][ T6166] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 343.271716][ T6172] loop3: detected capacity change from 0 to 512 [ 343.278409][ T6172] EXT4-fs: Ignoring removed orlov option [ 343.285077][ T6156] F2FS-fs (loop2): Found nat_bits in checkpoint [ 343.317918][ T6172] EXT4-fs (loop3): 1 orphan inode deleted [ 343.336866][ T6156] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 343.349573][ T6156] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 343.357040][ T6172] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 343.386814][ T6181] loop0: detected capacity change from 0 to 256 [ 343.390034][ T6172] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038 (0x7fffffff) [ 343.435289][ T6172] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 343.463543][ T6181] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 343.479332][ T28] audit: type=1400 audit(1723133804.446:784): avc: denied { write } for pid=6183 comm="syz.1.1561" path="socket:[46492]" dev="sockfs" ino=46492 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 343.480104][ T5898] EXT4-fs (loop3): unmounting filesystem. [ 343.542739][ T28] audit: type=1400 audit(1723133804.486:785): avc: denied { setattr } for pid=6180 comm="syz.0.1560" name="file0" dev="loop0" ino=1048840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 343.579433][ T28] audit: type=1400 audit(1723133804.546:786): avc: denied { read } for pid=6187 comm="syz.3.1562" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 343.679634][ T28] audit: type=1400 audit(1723133804.546:787): avc: denied { open } for pid=6187 comm="syz.3.1562" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 344.494996][ T28] audit: type=1400 audit(1723133804.876:788): avc: denied { mount } for pid=6155 comm="syz.2.1553" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 344.519750][ T6123] syz-executor: attempt to access beyond end of device [ 344.519750][ T6123] loop2: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 344.543836][ T6123] syz-executor: attempt to access beyond end of device [ 344.543836][ T6123] loop2: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 345.389615][ T6201] device syzkaller0 entered promiscuous mode [ 345.413280][ T6123] syz-executor: attempt to access beyond end of device [ 345.413280][ T6123] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 345.444483][ T5413] EXT4-fs (loop4): unmounting filesystem. [ 346.328215][ T6220] netlink: 'syz.1.1578': attribute type 4 has an invalid length. [ 346.608583][ T1254] device bridge_slave_1 left promiscuous mode [ 346.614665][ T1254] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.634586][ T1254] device bridge_slave_0 left promiscuous mode [ 346.657953][ T1254] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.678997][ T1254] device veth1_macvtap left promiscuous mode [ 346.684879][ T1254] device veth0_vlan left promiscuous mode [ 346.737907][ T40] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 346.886159][ T6221] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.893270][ T6221] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.900894][ T6221] device bridge_slave_0 entered promiscuous mode [ 346.908351][ T6221] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.915334][ T6221] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.923071][ T6221] device bridge_slave_1 entered promiscuous mode [ 346.997685][ T40] usb 4-1: Using ep0 maxpacket: 16 [ 347.067707][ T982] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 347.168097][ T40] usb 4-1: config 0 has no interfaces? [ 347.299133][ T6221] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.306527][ T6221] bridge0: port 2(bridge_slave_1) entered forwarding state [ 347.313686][ T6221] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.320683][ T6221] bridge0: port 1(bridge_slave_0) entered forwarding state [ 347.453309][ T40] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 347.471391][ T40] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.488858][ T40] usb 4-1: Product: syz [ 347.504064][ T40] usb 4-1: Manufacturer: syz [ 347.514188][ T40] usb 4-1: SerialNumber: syz [ 347.529550][ T40] r8152-cfgselector 4-1: config 0 descriptor?? [ 347.547390][ T982] usb 1-1: Using ep0 maxpacket: 32 [ 347.548433][ T476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 347.561240][ T476] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 347.570565][ T476] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 347.590528][ T476] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 347.607817][ T476] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 347.615816][ T476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 347.642973][ T6221] device veth0_vlan entered promiscuous mode [ 347.651488][ T476] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 347.659712][ T476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 347.667469][ T982] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 347.675743][ T6221] device veth1_macvtap entered promiscuous mode [ 347.684456][ T982] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 347.695145][ T982] usb 1-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 347.704301][ T982] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.712679][ T665] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 347.720598][ T665] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 347.721036][ T982] usb 1-1: config 0 descriptor?? [ 347.731661][ T665] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 347.740783][ T665] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 347.749328][ T665] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 347.766818][ T476] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 347.775609][ T476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 347.786258][ T476] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 347.794651][ T476] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 347.803173][ T40] r8152-cfgselector 4-1: Unknown version 0x0070 [ 347.835041][ T6236] loop2: detected capacity change from 0 to 512 [ 347.843892][ T6236] EXT4-fs error (device loop2): ext4_orphan_get:1396: inode #15: comm syz.2.1570: casefold flag without casefold feature [ 347.909665][ T6236] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: inode #2: comm syz.2.1570: missing EA_INODE flag [ 347.925291][ T6236] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.1570: error while reading EA inode 2 err=-117 [ 347.938645][ T6236] EXT4-fs (loop2): 1 orphan inode deleted [ 347.944298][ T6236] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 347.971820][ T6236] fscrypt: Adiantum using implementation "adiantum(xchacha12-simd,aes-aesni,nhpoly1305-generic)" [ 347.991546][ T6221] EXT4-fs (loop2): unmounting filesystem. [ 348.014215][ T476] r8152-cfgselector 4-1: USB disconnect, device number 25 [ 348.036150][ T28] audit: type=1400 audit(1723133809.008:789): avc: denied { read write } for pid=6243 comm="syz.2.1577" name="uhid" dev="devtmpfs" ino=175 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 348.059478][ T28] audit: type=1400 audit(1723133809.008:790): avc: denied { open } for pid=6243 comm="syz.2.1577" path="/dev/uhid" dev="devtmpfs" ino=175 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 348.141194][ T28] audit: type=1400 audit(1723133809.008:791): avc: denied { ioctl } for pid=6243 comm="syz.2.1577" path="socket:[45885]" dev="sockfs" ino=45885 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 348.217352][ T293] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 348.539073][ T982] hid-rmi 0003:0461:4E72.002D: item fetching failed at offset 1/5 [ 348.547055][ T982] hid-rmi 0003:0461:4E72.002D: parse failed [ 348.552797][ T982] hid-rmi: probe of 0003:0461:4E72.002D failed with error -22 [ 348.567894][ T982] usb 1-1: USB disconnect, device number 33 [ 348.906813][ T293] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 348.926081][ T293] usb 2-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 349.037401][ T293] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 349.046377][ T293] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 349.074000][ T293] usb 2-1: SerialNumber: syz [ 349.127104][ T293] cdc_ether: probe of 2-1:1.0 failed with error -22 [ 349.133690][ T293] usb-storage 2-1:1.0: USB Mass Storage device detected [ 349.177009][ T293] usb-storage 2-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 349.245770][ T6280] loop2: detected capacity change from 0 to 512 [ 349.258999][ T6280] EXT4-fs: Ignoring removed nomblk_io_submit option [ 349.277225][ T6280] EXT4-fs (loop2): Test dummy encryption mode enabled [ 349.308008][ T6280] EXT4-fs error (device loop2): ext4_orphan_get:1396: inode #17: comm syz.2.1591: iget: bogus i_mode (0) [ 349.332179][ T6262] loop3: detected capacity change from 0 to 40427 [ 349.338788][ T6280] EXT4-fs error (device loop2): ext4_orphan_get:1401: comm syz.2.1591: couldn't read orphan inode 17 (err -117) [ 349.349861][ T6262] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 349.359354][ T6280] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 349.368111][ T6262] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 349.392215][ T6262] F2FS-fs (loop3): Unrecognized mount option "qu/ta" or missing value [ 349.415682][ T6280] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.1591: bg 0: block 7: invalid block bitmap [ 349.526458][ T293] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 350.066173][ T293] usb 1-1: Using ep0 maxpacket: 8 [ 350.120836][ T6221] EXT4-fs (loop2): unmounting filesystem. [ 350.168813][ T6288] loop2: detected capacity change from 0 to 1024 [ 350.196217][ T293] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 350.216189][ T293] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 350.231026][ T6288] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 350.239508][ T293] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 350.259799][ T293] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 350.269662][ T293] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 350.279535][ T293] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 350.296054][ T6288] loop2: detected capacity change from 1024 to 64 [ 350.313370][ T6288] EXT4-fs warning (device loop2): ext4_empty_dir:3093: inode #18: lblock 0: comm syz.2.1592: error -12 reading directory block [ 350.333822][ T6221] EXT4-fs warning (device loop2): ext4_empty_dir:3093: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 350.377794][ T6221] EXT4-fs warning (device loop2): ext4_empty_dir:3093: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 350.405491][ T6221] EXT4-fs warning (device loop2): ext4_empty_dir:3093: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 350.435794][ T6221] EXT4-fs warning (device loop2): ext4_empty_dir:3093: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 350.466145][ T6221] EXT4-fs warning (device loop2): ext4_empty_dir:3093: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 350.486042][ T293] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 350.496135][ T6221] EXT4-fs warning (device loop2): ext4_empty_dir:3093: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 350.498722][ T293] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.524252][ T6221] EXT4-fs warning (device loop2): ext4_empty_dir:3093: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 350.538415][ T293] usb 1-1: Product: syz [ 350.546132][ T293] usb 1-1: Manufacturer: syz [ 350.551954][ T6221] EXT4-fs warning (device loop2): ext4_empty_dir:3093: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 350.557046][ T293] usb 1-1: SerialNumber: syz [ 350.579535][ T6221] EXT4-fs warning (device loop2): ext4_empty_dir:3093: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 350.709151][ T6221] EXT4-fs (loop2): unmounting filesystem. [ 350.719494][ T6289] kmmpd-loop2: attempt to access beyond end of device [ 350.719494][ T6289] loop2: rw=14337, sector=128, nr_sectors = 2 limit=64 [ 350.743740][ T6289] Buffer I/O error on dev loop2, logical block 64, lost sync page write [ 350.936685][ T476] usb 2-1: USB disconnect, device number 23 [ 351.075795][ T293] cdc_ncm 1-1:1.0: bind() failure [ 351.095724][ T293] cdc_ncm: probe of 1-1:1.1 failed with error -71 [ 351.125688][ T293] cdc_mbim: probe of 1-1:1.1 failed with error -71 [ 351.140828][ T293] usb 1-1: USB disconnect, device number 34 [ 351.236362][ T43] device bridge_slave_1 left promiscuous mode [ 351.249126][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.258493][ T43] device bridge_slave_0 left promiscuous mode [ 351.278382][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.313932][ T43] device veth1_macvtap left promiscuous mode [ 351.319932][ T43] device veth0_vlan left promiscuous mode [ 351.512063][ T6301] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.520671][ T6301] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.528740][ T6301] device bridge_slave_0 entered promiscuous mode [ 351.536300][ T6301] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.543336][ T6301] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.551056][ T6301] device bridge_slave_1 entered promiscuous mode [ 351.583690][ T6313] loop4: detected capacity change from 0 to 512 [ 351.612131][ T28] audit: type=1400 audit(1723133812.580:792): avc: denied { setopt } for pid=6312 comm="syz.3.1601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 351.632373][ T6313] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 351.655658][ T6313] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 351.675952][ T28] audit: type=1400 audit(1723133812.580:793): avc: denied { bind } for pid=6312 comm="syz.3.1601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 351.728125][ T6320] loop1: detected capacity change from 0 to 256 [ 351.917453][ T6319] request_module fs-efivarfs succeeded, but still no fs? [ 351.954410][ T6313] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e842e02c, mo2=0002] [ 351.991593][ T6313] System zones: 1-12 [ 352.022643][ T28] audit: type=1400 audit(1723133812.990:794): avc: denied { getopt } for pid=6318 comm="syz.0.1603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 352.049122][ T6313] EXT4-fs (loop4): orphan cleanup on readonly fs [ 352.055672][ T6313] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.1602: bg 0: block 361: padding at end of block bitmap is not set [ 352.087610][ T6313] EXT4-fs (loop4): Remounting filesystem read-only [ 352.096298][ T6313] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6171: Corrupt filesystem [ 352.110416][ T6313] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.1602: invalid indirect mapped block 12 (level 1) [ 352.137588][ T6313] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.1602: invalid indirect mapped block 2 (level 2) [ 352.151365][ T6313] EXT4-fs (loop4): 1 truncate cleaned up [ 352.158259][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 352.165455][ T6313] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 352.174311][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 352.189897][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 352.202132][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 352.211002][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.217884][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 352.225245][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 352.253091][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 352.260919][ T6331] loop0: detected capacity change from 0 to 2048 [ 352.267892][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.274757][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 352.277359][ T6331] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 352.290191][ T6331] ext4 filesystem being mounted at /15/bus supports timestamps until 2038 (0x7fffffff) [ 352.291388][ T982] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 352.643064][ T982] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 352.651123][ T982] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 352.669492][ T982] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 352.677786][ T982] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 352.677798][ T5413] EXT4-fs (loop4): unmounting filesystem. [ 352.679680][ T6331] EXT4-fs (loop0): shut down requested (2) [ 352.685471][ T28] audit: type=1400 audit(1723133813.650:795): avc: denied { ioctl } for pid=6330 comm="syz.0.1608" path="/15/bus/file0/file0" dev="loop0" ino=13 ioctlcmd=0x587d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 352.729157][ T6329] device pim6reg1 entered promiscuous mode [ 352.729366][ T6114] EXT4-fs (loop0): unmounting filesystem. [ 352.747566][ T982] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 352.759196][ T982] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 352.779991][ T6301] device veth0_vlan entered promiscuous mode [ 352.792559][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 352.801440][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 352.832367][ T6301] device veth1_macvtap entered promiscuous mode [ 352.844398][ T982] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 352.853915][ T982] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 352.867675][ T982] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 352.887855][ T982] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 352.896343][ T982] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 352.905529][ T982] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 352.917927][ T982] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 352.956647][ T6352] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6352 comm=syz.2.1605 [ 353.037053][ T6360] loop3: detected capacity change from 0 to 512 [ 353.046945][ T6360] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 353.056136][ T6360] ext4 filesystem being mounted at /26/wÅü5ÔTÕÔ)­`)YFæ¾nA­½@T<Ÿ3»Ú‚$¢ó×rçcnH³<¿pƒrèñ¹“>ÅwC¾" žð-ùËòöè€Ó8 supports timestamps until 2038 (0x7fffffff) [ 353.077234][ T6360] EXT4-fs error (device loop3): ext4_do_update_inode:5212: inode #2: comm syz.3.1617: corrupted inode contents [ 353.089124][ T6360] EXT4-fs error (device loop3): ext4_dirty_inode:6074: inode #2: comm syz.3.1617: mark_inode_dirty error [ 353.100828][ T6360] EXT4-fs error (device loop3): ext4_do_update_inode:5212: inode #2: comm syz.3.1617: corrupted inode contents [ 353.112822][ T6360] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #2: comm syz.3.1617: mark_inode_dirty error [ 353.128292][ T6360] EXT4-fs error (device loop3): ext4_get_first_dir_block:3551: inode #18: comm syz.3.1617: directory missing '.' [ 353.148212][ T5898] EXT4-fs (loop3): unmounting filesystem. [ 353.204665][ T982] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 353.212282][ T4678] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 353.424479][ T40] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 353.594489][ T4678] usb 1-1: config index 0 descriptor too short (expected 292, got 36) [ 353.603109][ T982] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 353.617258][ T4678] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 353.630350][ T982] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 353.648776][ T4678] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 353.660676][ T982] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.00 [ 353.664386][ T40] usb 3-1: Using ep0 maxpacket: 16 [ 353.670048][ T4678] usb 1-1: New USB device found, idVendor=056a, idProduct=00bb, bcdDevice= 0.00 [ 353.687903][ T982] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.696652][ T4678] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.708346][ T982] usb 2-1: config 0 descriptor?? [ 353.714952][ T6369] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 353.718559][ T4678] usb 1-1: config 0 descriptor?? [ 353.726595][ T6369] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 353.726620][ T6369] CPU: 1 PID: 6369 Comm: syz.4.1619 Not tainted 6.1.90-syzkaller-00001-g99d09135c4ef #0 [ 353.726644][ T6369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 353.726666][ T6369] RIP: 0010:dev_map_generic_redirect+0x90/0x7d0 [ 353.726710][ T6369] Code: f1 f1 00 f2 f2 f2 4b 89 04 26 43 c7 44 26 0f f3 f3 f3 f3 43 c6 44 26 13 f3 e8 2c 02 de ff 48 89 d8 48 c1 e8 03 48 89 44 24 48 <42> 80 3c 20 00 74 08 48 89 df e8 f1 1f 25 00 48 89 5c 24 18 4c 8b [ 353.726728][ T6369] RSP: 0018:ffffc900067876a0 EFLAGS: 00010246 [ 353.726748][ T6369] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000040000 [ 353.800628][ T6369] RDX: ffffc90006530000 RSI: 00000000000000d1 RDI: 00000000000000d2 [ 353.808803][ T6369] RBP: ffffc900067877f8 R08: 0000000000000005 R09: ffffffff8412c513 [ 353.816614][ T6369] R10: 0000000000000004 R11: ffff888112636540 R12: dffffc0000000000 [ 353.824421][ T6369] R13: ffff888123866280 R14: 1ffff92000cf0ee0 R15: 0000000000000000 [ 353.832235][ T6369] FS: 00007f4d354096c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 353.840999][ T6369] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 353.847459][ T6369] CR2: 0000000020002000 CR3: 0000000137048000 CR4: 00000000003506a0 [ 353.855540][ T6369] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 353.863338][ T6369] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 353.871152][ T6369] Call Trace: [ 353.874276][ T6369] [ 353.877061][ T6369] ? __die_body+0x62/0xb0 [ 353.881262][ T6369] ? die_addr+0x9f/0xd0 [ 353.885228][ T6369] ? exc_general_protection+0x317/0x4c0 [ 353.890609][ T6369] ? asm_exc_general_protection+0x27/0x30 [ 353.896151][ T6369] ? xdp_do_generic_redirect+0x303/0xad0 [ 353.901616][ T6369] ? dev_map_generic_redirect+0x90/0x7d0 [ 353.907088][ T6369] ? kasan_quarantine_put+0x34/0x1a0 [ 353.912203][ T6369] ? kfree+0x7a/0xf0 [ 353.915937][ T6369] ? bq_enqueue+0x3e0/0x3e0 [ 353.920275][ T6369] ? bpf_prog_run_generic_xdp+0xa35/0x1200 [ 353.925929][ T6369] xdp_do_generic_redirect+0x411/0xad0 [ 353.931227][ T6369] do_xdp_generic+0x53e/0x800 [ 353.935730][ T6369] ? generic_xdp_tx+0x560/0x560 [ 353.940452][ T6369] ? tun_get_user+0x2340/0x3a90 [ 353.945095][ T6369] tun_get_user+0x238a/0x3a90 [ 353.949616][ T6369] ? cpu_curr_snapshot+0x90/0x90 [ 353.954939][ T6369] ? tun_do_read+0x2000/0x2000 [ 353.959594][ T6369] ? ref_tracker_alloc+0x31d/0x450 [ 353.964544][ T6369] ? ref_tracker_dir_print+0x160/0x160 [ 353.969852][ T6369] ? avc_policy_seqno+0x1b/0x70 [ 353.974524][ T6369] ? tun_get+0xe9/0x120 [ 353.978524][ T6369] tun_chr_write_iter+0x129/0x210 [ 353.983383][ T6369] vfs_write+0x902/0xeb0 [ 353.987483][ T6369] ? file_end_write+0x1c0/0x1c0 [ 353.992136][ T6369] ? do_futex+0x501/0x9a0 [ 353.996460][ T6369] ? __fget_files+0x2cb/0x330 [ 354.000978][ T6369] ? __fdget_pos+0x204/0x390 [ 354.005395][ T6369] ? ksys_write+0x77/0x2c0 [ 354.009646][ T6369] ksys_write+0x199/0x2c0 [ 354.013816][ T6369] ? save_fpregs_to_fpstate+0x220/0x220 [ 354.019195][ T6369] ? __ia32_sys_read+0x90/0x90 [ 354.023790][ T6369] ? fpregs_restore_userregs+0x130/0x290 [ 354.029434][ T6369] __x64_sys_write+0x7b/0x90 [ 354.033852][ T6369] x64_sys_call+0x2f/0x9a0 [ 354.038112][ T6369] do_syscall_64+0x3b/0xb0 [ 354.042360][ T6369] ? clear_bhb_loop+0x55/0xb0 [ 354.046958][ T6369] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 354.052683][ T6369] RIP: 0033:0x7f4d345764df [ 354.056941][ T6369] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8d 02 00 48 [ 354.076771][ T6369] RSP: 002b:00007f4d35409000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 354.085964][ T6369] RAX: ffffffffffffffda RBX: 00007f4d34705f80 RCX: 00007f4d345764df [ 354.093779][ T6369] RDX: 0000000000000d86 RSI: 0000000020001580 RDI: 00000000000000c8 [ 354.101870][ T6369] RBP: 00007f4d345e58ee R08: 0000000000000000 R09: 0000000000000000 [ 354.109973][ T6369] R10: 0000000000000d86 R11: 0000000000000293 R12: 0000000000000000 [ 354.117784][ T6369] R13: 0000000000000000 R14: 00007f4d34705f80 R15: 00007ffe558433a8 [ 354.125588][ T6369] [ 354.128456][ T6369] Modules linked in: [ 354.132466][ T6369] ---[ end trace 0000000000000000 ]--- [ 354.137780][ T6369] RIP: 0010:dev_map_generic_redirect+0x90/0x7d0 [ 354.143820][ T6369] Code: f1 f1 00 f2 f2 f2 4b 89 04 26 43 c7 44 26 0f f3 f3 f3 f3 43 c6 44 26 13 f3 e8 2c 02 de ff 48 89 d8 48 c1 e8 03 48 89 44 24 48 <42> 80 3c 20 00 74 08 48 89 df e8 f1 1f 25 00 48 89 5c 24 18 4c 8b [ 354.163307][ T6369] RSP: 0018:ffffc900067876a0 EFLAGS: 00010246 [ 354.169180][ T6369] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000040000 [ 354.177131][ T6369] RDX: ffffc90006530000 RSI: 00000000000000d1 RDI: 00000000000000d2 [ 354.184900][ T6369] RBP: ffffc900067877f8 R08: 0000000000000005 R09: ffffffff8412c513 [ 354.192709][ T6369] R10: 0000000000000004 R11: ffff888112636540 R12: dffffc0000000000 [ 354.200538][ T6369] R13: ffff888123866280 R14: 1ffff92000cf0ee0 R15: 0000000000000000 [ 354.208354][ T6369] FS: 00007f4d354096c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 354.217691][ T6369] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 354.224141][ T6369] CR2: 0000000020002000 CR3: 0000000137048000 CR4: 00000000003506a0 [ 354.232061][ T6369] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 354.239886][ T6369] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 354.247687][ T6369] Kernel panic - not syncing: Fatal exception in interrupt [ 354.254955][ T6369] Kernel Offset: disabled [ 354.259100][ T6369] Rebooting in 86400 seconds..