last executing test programs: 8.299752244s ago: executing program 0 (id=330): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) (async) getpid() (async) r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x30, r2, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x17, {0x300, 0x0, @l2={'eth', 0x3a, 'lo\x00'}}}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x30, r2, 0x705, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x18, {0x5, @bearer=@udp='udp:syz1\x00'}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) ioctl$sock_FIOGETOWN(r4, 0x8903, 0x0) (async) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x2d) (async) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x40081, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) (async) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 8.035894289s ago: executing program 0 (id=334): open(0x0, 0x14927e, 0x9) mkdir(0x0, 0x0) getresuid(&(0x7f0000000140)=0x0, &(0x7f0000000180), 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fcntl$lock(r1, 0x7, 0x0) setuid(r0) r2 = io_uring_setup(0x503, &(0x7f0000000e80)={0x0, 0x1d54, 0x1046, 0xffff7fff, 0xb7}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYRES16=r2, @ANYRES32=r2, @ANYRESHEX=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='io_uring_cqe_overflow\x00', r1}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1b0000000000000005000000008000a9f4272c21f3b9ac0b935a518539f00b15af229d44b138ae4b3a0478f6b8caa5f728a92bd8aa6143eb131c059780a52e0cb2be944afc0fa5321b", @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fspick(r4, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000300)={0x0, 0x0}) prlimit64(r5, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = getpid() ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) 5.605593865s ago: executing program 0 (id=338): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000005c0), r0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000100)={{0x100, 0x1}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r2, 0x5501) write$input_event(r2, &(0x7f00000001c0)={{0x77359400}, 0x11, 0xb, 0x80000000}, 0x18) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5420800050000000000900008808c00008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c640009801c"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) 5.529440906s ago: executing program 3 (id=339): r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) (async) r1 = gettid() r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_gettime(r3, &(0x7f0000000040)) (async) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) close(r0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1a1) fcntl$setlease(r4, 0x400, 0x1) (async) r5 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) write$binfmt_script(r5, &(0x7f0000000340)={'#! ', './file0'}, 0xb) socket$packet(0x11, 0x3, 0x300) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e22, 0x8, @loopback={0x0, 0xac1414ca}}, 0x1c) (async) execveat(r5, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 5.411822188s ago: executing program 0 (id=340): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c00)=@framed={{}, [@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EVIOCGKEY(r4, 0x80404518, &(0x7f0000000280)=""/6) r5 = accept$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000001c0)=0x1c) ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f0000000240)) socketpair$unix(0x1, 0x5, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='stat\x00') read$FUSE(r6, &(0x7f00000060c0)={0x2020}, 0x2020) 4.831966399s ago: executing program 1 (id=343): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000740)={0x0}) 4.831435019s ago: executing program 1 (id=344): syz_emit_ethernet(0x0, 0x0, 0x0) io_setup(0x2007, &(0x7f0000000200)) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x9031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmmsg$inet6(r4, 0x0, 0x0, 0x4001c00) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000ed074479000000000000000018", @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0x6, &(0x7f00000000c0)={0x166, 0x8}, 0x0) setresuid(0xee01, 0xffffffffffffffff, 0xffffffffffffffff) setresuid(0x0, 0x0, 0xffffffffffffffff) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000008000000001"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000700000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7030000000000d7850000001b000000b7000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x18) syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x6a) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) 4.074332423s ago: executing program 3 (id=345): io_setup(0x3fe, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x10) lsetxattr$trusted_overlay_origin(&(0x7f0000000080)='./cgroup/../file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x1) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file1\x00', 0x844, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x1, 0x253, &(0x7f00000004c0)="$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") rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00') sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9403000010000104f04e93294c00000000001700", @ANYRES32=0x0, @ANYBLOB="00000000000000001400350076657468305f6d61637674617000000005001100050000000a000200aaaaaaaaaa0e00004c0316"], 0x394}}, 0x0) epoll_wait(r1, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}], 0x6, 0x2) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000040)=']\x00', 0x0, r0) 3.806078508s ago: executing program 0 (id=346): r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDSKBLED(r0, 0x4b65, 0xd0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000000)=@ccm_128={{0x303}, "052ba85b6ea3bccb", "a83f331a2642eb04b5bb4104da17256f", "14dde12e", "99265e8a59e23a5d"}, 0x28) 3.591096993s ago: executing program 0 (id=348): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x925, 0x8866, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x4, 0x0, {0x9, 0x21, 0x0, 0xfe, 0x1, {0x22, 0x4}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc, 0xfc}}}}}]}}]}}, 0x0) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000640)='./bus\x00', 0x0, &(0x7f0000000440)=ANY=[], 0x1, 0x1268, &(0x7f0000002500)="$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") mkdir(&(0x7f0000000200)='./bus\x00', 0x10) mount$incfs(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='./bus\x00', &(0x7f0000000640), 0x0, 0x0) mount$cgroup2(0x0, &(0x7f0000000100)='./bus\x00', 0x0, 0x20, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000540)=ANY=[@ANYBLOB="17040500000044c2"], 0x0, 0x0, 0x0, 0x0}, 0x0) 3.589096672s ago: executing program 2 (id=350): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x802, 0x0) getitimer(0x0, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f0000000280)=ANY=[@ANYRESOCT=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) (async) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1f, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000001c0)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f00000000c0)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@stripe={'stripe', 0x3d, 0x12}}, {@i_version}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}]}, 0x3, 0x43a, &(0x7f0000000340)="$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") (async) setitimer(0x1, &(0x7f0000000000)={{0x100, 0x5}, {0xb, 0x4}}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf64(r6, &(0x7f00000003c0)=ANY=[], 0x78) (async, rerun: 32) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r6, 0x0) (async, rerun: 32) setitimer(0x1, &(0x7f0000000000)={{0x0, 0x2710}, {0x77359400}}, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r7, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000100)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900620000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000000ba00000000b8cdc900000f23c80f21f835040050000f23f8b800c80000ba000000000f300fc79d53bf0000c4e16dd301660fc7b600900000", 0x71}], 0x1, 0x9, 0x0, 0x0) (async) ioctl$KVM_RUN(r8, 0xae80, 0x0) (async, rerun: 32) mmap$binder(&(0x7f0000feb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0xb) (rerun: 32) 3.569710483s ago: executing program 2 (id=351): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f00000022c0)={[{@errors_remount}, {@nobarrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@block_validity}, {@dioread_lock}]}, 0x3, 0x439, &(0x7f0000002380)="$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") mkdir(0x0, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000200), 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYBLOB="0000000000000000b70300"/30], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000001000000"], 0x48) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[], 0x98}, 0x1, 0x0, 0x0, 0x20040800}, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000001180)=[{&(0x7f0000001080)='M', 0x1}], 0x1, 0xe94, 0x3, 0x2) 3.529080053s ago: executing program 1 (id=352): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f00000022c0)={[{@errors_remount}, {@nobarrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@block_validity}, {@dioread_lock}]}, 0x3, 0x439, &(0x7f0000002380)="$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") mkdir(0x0, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000200), 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYBLOB="0000000000000000b70300"/30], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000001000000"], 0x48) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[], 0x98}, 0x1, 0x0, 0x0, 0x20040800}, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000001180)=[{&(0x7f0000001080)='M', 0x1}], 0x1, 0xe94, 0x3, 0x2) 2.267811557s ago: executing program 2 (id=354): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x8, 0x7fff, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r1, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x81}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x80) 2.267207567s ago: executing program 3 (id=355): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) ioctl(r0, 0x8af, &(0x7f00000000c0)="371889d1e44dc5464092008a69d6bf7e5352042db0c3b3fc7a4965c3ed174a9d1c5eb088d634e00bd16d487b5161bab92d9526ab79d20e1f7301564b08a7e11d9368b1c4b3fdebd04bc141ecd15a1a57e141540d227e3aa1bc4eee75f43d6d4dd02e1707e1bf9dc6") r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r3}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r5, 0x54a0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2169802, 0x0, 0x1, 0x0, &(0x7f00000003c0)) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e27f00000100000000000000", @ANYRES32, @ANYBLOB='\x00'/14, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r9, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r10 = dup(r9) write$FUSE_BMAP(r10, &(0x7f0000000100)={0x18}, 0x18) getresuid(&(0x7f0000000800), &(0x7f0000000000), &(0x7f0000000340)) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r8, @ANYBLOB=',wfdno=', @ANYRESHEX=r10]) ioctl$SNDRV_TIMER_IOCTL_START(r5, 0x54a0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xa) 2.248177608s ago: executing program 2 (id=356): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x800804, &(0x7f0000000280)={[{@shortname_mixed}, {@shortname_lower}, {@shortname_win95}, {@utf8}, {@rodir}, {@fat=@tz_utc}, {@rodir}, {@fat=@check_strict}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp869'}}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'koi8-r'}}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'euc-jp'}}, {@fat=@tz_utc}, {@numtail}, {@rodir}, {@uni_xlateno}, {@shortname_win95}]}, 0x1, 0x275, &(0x7f00000003c0)="$eJzs3U9qG1ccB/DfWJIttQtp0VUpeKBddGXsnsCmuFBqKLRo0XbRmNiGYAmDDYL8IYpXOUFOkPNkE3KBHCAhu3hhMkGekayEkY0S2TLJ57PR4733nfd7M4O0mtGtH7r7OwdHe8cPXka9nsTCeqzHSRKtWIihR1HqxevyfgDghjvJsniT5ZZKZ9QmJKsLV1oYAHBlxn//510LAHA9/v7n3z82trY2/0rTekT3ca+dRP6Zj2/sxZ3oxG6sRjNOI7KRvP3b71ubUU0HWvFTt99rD5Ld/58Vx994FXGWX4tmtMrza2luLN/vtWvxzXD9JOLPp9GM78rzv5Tko70YP/84Vv9KNOP57TiITuwUtQ3zD9fS9Nfsydv7/w16B/mk32svjeYVsyvXemEAAAAAAAAAAAAAAAAAAAAAAPiiraQjrQ/fv1M5PRtfmTSe5ye9H6g/9n6e1TRNsySff56vxvfVqM5z7wAAAAAAAAAAAAAAAAAAAHBTHN29t7/d6ewezrQxfKy/ZCjezXKt5WlTUSlK6yQR061VK5KXT65MuYvGoJ7dw6Qas7sEyainMT60HPlag55G3hjr+ezV63HWGN5d+9tJXJKql90kM2hkJbdfZWJq8eOeRrGDksmNC1Zf/PaTas6aE4aSiKiNTubFx6nN9hxe1zcQAAAAAAAAAAAAAAAAAAAwdP7Qb8ng8RwKAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA5OP///yka/SI8aU5WGTSqUfTMeYsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB8Bd4HAAD//4qtaNI=") r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x502, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000003b40)={0x11, 0xb, &(0x7f0000003d80)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) pread64(r4, 0x0, 0x0, 0xfffffffffffffffd) write$FUSE_INIT(r5, &(0x7f0000000580)={0x50, 0x0, 0x0, {0x7, 0x28, 0xffff, 0x200800, 0x0, 0x0, 0x1e0, 0x0, 0x0, 0x0, 0x24522716a989086f, 0xfffffffc}}, 0x50) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r6 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r6, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_FILTER(r6, 0x65, 0x1, &(0x7f0000000040)=[{{0x0, 0x0, 0x0, 0x1}, {0x0, 0x1, 0x0, 0x1}}, {{0x2, 0x1, 0x1}, {0x4, 0x1, 0x0, 0x1}}, {{0x1, 0x1, 0x1}, {0x1, 0x1, 0x1}}, {{0x0, 0x0, 0x1}, {0x3, 0x1}}], 0x20) 2.185825569s ago: executing program 1 (id=357): pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000980)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000c000000180001e13a793f54e380140002006970366772653000000000000000000004000380"], 0x30}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$P9_RVERSION(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r7 = dup(r1) r8 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r8, &(0x7f00000002c0)=@name={0x1e, 0x2, 0x2, {{0x42}, 0x1}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) r9 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x3, 0x2}, 0x10) sendmsg$tipc(r9, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r10 = dup3(r8, r9, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000002100)=ANY=[@ANYBLOB="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"], &(0x7f0000001f40)=""/184, 0xec, 0xb8, 0x0, 0x5, 0x10000, @value=r7}, 0x28) sendmsg$tipc(r10, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40800}, 0x800) setsockopt$TIPC_GROUP_LEAVE(r10, 0x10f, 0x88) bpf$PROG_LOAD(0x5, &(0x7f0000001d00)={0x1, 0xb, &(0x7f0000001dc0)=ANY=[@ANYBLOB="18110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000018000000060000000000000001000100"], &(0x7f0000000b40)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback=0x2c, r7, 0x8, &(0x7f0000001bc0)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000001c00)={0x3, 0x8, 0x1, 0x8001}, 0x10, 0x0, r10, 0x7, &(0x7f0000001c40)=[r5, r7, r5, r0, r7, r7], &(0x7f0000001c80)=[{0x0, 0x4, 0x5, 0xb}, {0x0, 0x3, 0x5, 0x2}, {0x5, 0x5, 0xe, 0xa}, {0x4, 0x4, 0xc, 0x2}, {0x4, 0x4, 0x8, 0x7}, {0x1, 0x4, 0x4}, {0x3, 0x4, 0x8, 0x7}], 0x10, 0x6}, 0x94) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f00000000c0)={0x14c}, 0x137) execve(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)={[&(0x7f0000000080)='9p\x00']}, &(0x7f0000000200)) recvfrom$inet(r7, &(0x7f0000000a80)=""/31, 0x1f, 0x40000000, &(0x7f0000000ac0)={0x2, 0x4e23, @local}, 0x10) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000340)=ANY=[@ANYRESHEX=r7, @ANYRES64=r1, @ANYBLOB=',wfdno=', @ANYBLOB='trans=fd,rfdno=', @ANYRES8, @ANYRESOCT=r1, @ANYRES32=r1, @ANYRES8, @ANYRESOCT=r1, @ANYRES32=r5, @ANYRES16=r6]) open$dir(&(0x7f0000000140)='./file0\x00', 0x500, 0x1) 2.178748839s ago: executing program 3 (id=358): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000021e275479f9b2910a42577f10f0000000000000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x0) pwritev2(r2, &(0x7f0000000740)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0xffff, 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x42) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f00000005c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20200000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000540)={0x48, 0x0, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x7fff}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x1ff}]}, 0x48}, 0x1, 0x0, 0x0, 0x4800}, 0x4000040) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000600)={0x2, 0x0, [{0x8000000, 0x0, 0x0}, {0x8080000, 0xff0, &(0x7f0000001280)=""/4080}]}) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) socket$packet(0x11, 0x3, 0x300) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000007000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c000000110001002cbd70000000df257f000001000000000000000000000000000004d308003c0014000d00e000000200"/60], 0x3c}}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000500)={{r5}, &(0x7f0000000400), &(0x7f00000004c0)='%pI4 \x00'}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r7 = getpid() sched_setscheduler(r7, 0x1, &(0x7f0000000100)=0x5) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, &(0x7f0000000080)}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 1.738843757s ago: executing program 4 (id=360): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000380)="260f01c3bad104ec0f08643e0f692f66b9800000c00f326635004000000f3066b9800000c00f326635010000000f30c1be253f00bad10466b80000000066eff716f6d20fc7ad0000", 0x48}], 0x1, 0x4b, 0x0, 0x0) kcmp(0x0, 0x0, 0x5, 0xffffffffffffffff, 0xffffffffffffffff) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x4010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f0000003b00)=[{{&(0x7f0000000300)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000000280), 0x0, &(0x7f00000004c0)=""/221, 0xdd}, 0x66a}, {{0x0, 0x0, &(0x7f0000000280), 0x0, &(0x7f0000003a80)=""/53, 0x35}, 0xfcbe}], 0x2, 0x40000022, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYRESHEX=0x0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x28, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r5}, 0x18) fsync(r5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r6 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000157000/0x2000)=nil, 0x2000, 0x0, 0x157, 0x4000000) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 1.282851416s ago: executing program 1 (id=361): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="f8278be89021abecde000042e0189c57"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0700000004000000800000000101000028", @ANYBLOB="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"], 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8905, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000700000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000008000850000001b0000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x18) recvmsg$unix(0xffffffffffffffff, 0x0, 0x2121) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xa, &(0x7f0000000140)={0x100, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() setrlimit(0x6, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7], 0x0}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r10}, 0x10) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r8, @ANYBLOB=',wfdno=', @ANYRESHEX=r9, @ANYBLOB="2c000f00c4de81f95332e907487cfc02f7f6e71e70b5976cc67a2300000000000000"]) 1.007264951s ago: executing program 3 (id=362): sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x4000000) syz_extract_tcp_res(0x0, 0x1, 0xea5d) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{0x1}, &(0x7f0000000000), &(0x7f0000000100)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000480)=@buf={0xc0, &(0x7f0000000700)="c006f03594e85d209b18f67d2d9313ed2a3adc2f7186e9989572b7d2982ab08601c7a0d36c4f22cfcadb4ce2f8c57e5171ab01a2ed972ba3985f6a0ed8999947664b924d3e823cb57f4bf55d3ca2104e11a7d82050ba050aaf3abddd8a396f7a24f96ba2e7712f7abc58fae8f6f7ec5a412a9308c1f99a53e1e6668d0f06aff05b3ca07e8f45d1638ab9b7159c750b7adc1b29a7c4da88d6e1595f8bbca68b50477f15ae23cb9b5c0f66b46c7c83abc10ec051e0132fb381f925789963acfc14"}) 1.005723311s ago: executing program 3 (id=363): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x17ef, 0x60a3, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x7, 0xf0, 0x50, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x8, {0x9, 0x21, 0x7, 0x7f, 0x1, {0x22, 0x80b}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0xdc, 0x1, 0x10}}}}}]}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x250, 0x5, 0x8, 0x71, 0x8, 0x4}, 0x5, &(0x7f0000000140)={0x5, 0xf, 0x5}, 0x5, [{0xf6, &(0x7f0000000180)=@string={0xf6, 0x3, "665ca497a151733ede2d53495a4aa8705448b65b6911847130ff408064751897193ad0bc50d148bf226910c6b43e7c583ca445a5f26150c9e9d8cee0e2f60714c09b5f7e97cdca0e342b952fb1b5f5ed7d96fc95bae93b7f0558ed23af23c7fa3f36b81688f926c875983aad0efd40e5ab2fa9b2b859942625058f14cb020088ba2ca5580b6d15a68501a45ffc11d9f99b0b66d7c31d97a28aa27753b5f847c81a3ea9fd824027afaeb00cd2a486a5bb884692f77761fdf345648f21ab62a1f253e4462d5828f952ad509ab46cd3483a9a8d7fff3bdd027b6575ebf6b2b4dbe69d968952c9df157115792f35aba3b3b180a6f4a9"}}, {0x5d, &(0x7f0000000300)=@string={0x5d, 0x3, "85b8694d39ffa4050baf31e4bb316df8b852c02ecc4f9ba76a590b6b2166a79552bc41fa399336e7ff1b8d010b3af4c6557739d6f357e7ef6a4265350fa2a38f69f950071b83ede86a389d0d0d81e9a1ca8383673f880645eac07b"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x424}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x2009}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x43f}}]}) (async) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x15, {[@global=@item_4={0x3, 0x1, 0x6, "3204dd9d"}, @local=@item_4={0x3, 0x2, 0x0, "45501821"}, @global=@item_4={0x3, 0x1, 0x5, "bf3baf95"}, @global=@item_012={0x0, 0x1, 0x7}, @main=@item_4={0x3, 0x0, 0xb, "000100"}]}}, 0x0}, 0x0) (async) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x80079a0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async) recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="000000000000a830c6f675b68c9be04d23742e112a6bb3040000000807208d690091734d9aa9ac585432424299fe959285e211bd7cab7daaf72e6931568400000000000000000000a2cb7242f638baf80f854eb118c4f7d8d4dd9d9ce78445d591d83a71ed5bcee64f7978e41ffe6b67d5ccfd7dcb1c67ca000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000ff000000000000860000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000280)={'wlan1\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) (async) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) (async) socket$inet_udp(0x2, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000140)={"2996acbf16803bb01c4b856180c82669", 0x0, 0x0, {0x1, 0x3}, {0x0, 0x400}, 0x6, [0x1, 0x7, 0x40, 0x2, 0xd1, 0x2, 0x1, 0x7, 0x10000, 0x5, 0x401, 0x100, 0x0, 0x9, 0xf, 0x8]}) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000001000010700000000000000000a000000060001001300000008000a"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) ioctl$HIDIOCGREPORTINFO(r1, 0xc00c4809, &(0x7f0000000040)={0x3, 0x100, 0x480000}) 1.003996481s ago: executing program 2 (id=364): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f00000022c0)={[{@errors_remount}, {@nobarrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@block_validity}, {@dioread_lock}]}, 0x3, 0x439, &(0x7f0000002380)="$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") mkdir(0x0, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000200), 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYBLOB="0000000000000000b70300"/30], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) flistxattr(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[], 0x98}, 0x1, 0x0, 0x0, 0x20040800}, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000001180)=[{&(0x7f0000001080)='M', 0x1}], 0x1, 0xe94, 0x3, 0x2) 900.238303ms ago: executing program 4 (id=365): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010bd28710000000000000109022400010000000009040100010300000009210200000122050009058103"], 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCBRDELBR(r1, 0x89a2, &(0x7f0000000c40)='ip6_vti0\x00') (async) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f0000000040)={'veth1_to_bridge\x00', 0x1ff}) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="403505"], 0x0, 0x0, 0x0, 0x0}, 0x0) 599.877699ms ago: executing program 4 (id=366): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f0000000000)={0x6, {{0xa, 0x4e21, 0x7825, @remote, 0x40}}}, 0x88) (async) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (async) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x16) (async) munmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='mlxsw_sp_acl_atcam_entry_add_ctcam_spill\x00', r1, 0x0, 0x8001}, 0x18) (async) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000180)) splice(r3, &(0x7f00000001c0)=0x10001, r2, &(0x7f0000000200)=0x8, 0x800, 0x4) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$SNDRV_TIMER_IOCTL_TREAD64(r2, 0x400454a4, &(0x7f0000000240)=0x1) (async) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x2, 0xe, 0x1, 0x9, 0x1c, 0x0, 0x70bd29, 0x25dfdbfd, [@sadb_x_nat_t_type={0x1, 0x14, 0x7}, @sadb_ident={0x2, 0xa, 0x5, 0x0, 0x8}, @sadb_spirange={0x2, 0x10, 0x4d2, 0x4d4}, @sadb_x_sec_ctx={0x14, 0x18, 0x81, 0xe, 0x91, "70c2825d93e0652599ee08b9dd37e0b7dea318265bef211fac093073ad819cbbb4d5409cb28bd1c15dba9547477d31f683a2c7565fc328b4a5aeafdaaf2f36a00fb62b33b34b81e2adce4ff6f65551771643ffe8765b45afae274e1dc8f0001efd41363a1cb4b9df557082b0eda5cf4a7989d8f53f882dabdf99255943a17385a0b6a3cb5ccd6183f9a89d598bf4f9cf6d"}, @sadb_x_nat_t_port={0x1, 0x16, 0x4e22}]}, 0xe0}}, 0x4014) (async) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) (async) truncate(&(0x7f0000000400)='./file0\x00', 0x9) select(0x40, &(0x7f0000000440)={0x8, 0x6, 0xbb, 0x80, 0x7fffffffffffffff, 0x6, 0x7, 0x4b}, &(0x7f0000000480)={0x80000000, 0x2, 0x3a, 0xfffffffffffffff7, 0x0, 0xa, 0x1, 0x1}, &(0x7f00000004c0)={0x558, 0x89, 0x0, 0x1, 0xbba, 0xa, 0xffffffff, 0x7fff}, &(0x7f0000000500)={0x77359400}) vmsplice(r4, &(0x7f0000001a40)=[{&(0x7f0000000540)="7f9b36c50350771ae18248fb5cb31a3b04ea947e552438701e47dda244f0a0f7ecb0878cbaf6fc4005647ab2d63dc2bd47dea69b9bd0c558469321e99369a5ec4c37e9a8096a447fb68467ceefefc4a3bfe1404f571fc92a34521bfe05743a00", 0x60}, {&(0x7f00000005c0)="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", 0x1000}, {&(0x7f00000015c0)="2fd60878974da747b307143d60c576754f062dd7c384e51d63a8d23013cccea9d9a1b052aaba5aceef3f6a37b2a127e5c20111d1da3217b355d845ee2de8f0fee885c388d5bc1af4f2153685360d458eb8680210cb83c3b26e86ef57151969f583a922039b7c384c30ae6fe3c56dbd4c52e05ae806193262982f525ab7cc88d763616aecf568d4d6d27e957d1fd75b90656988ea5eb917133327c308757f74a97aaf94ee52d9d4fd05394b76f2c9dd0d9a38c14fdf9d769667983cb62a3016f1e95a42efe886c8ac", 0xc8}, {&(0x7f00000016c0)="8e7352089d6086ccb915b464a792e77d68260e4e7a4b7f9b3166e17763fd019d577d295b73aa2e65a7aa279abca95d81467315235491a76222bdcdd8d105db0de4543e95f2ced83001543386bd8e99e68a7f653d5bb5983969cf387ea9aee4d7b1d3d31dc29ebc47f73743abc702b72f6f2ffdbf320b2f47b3168de114789a94543ff348c4a1b59b320aed9eb0a994b77f256acb030aa8d0ab97030e80dd8fbc426c32e0", 0xa4}, {&(0x7f0000001780)="5269195786ecfa175005f2090464a0b1139d7bcd3d333e87bee141edbdf2e2ced0ecca779de2f4e085402f99500b0a3badc2e4a185b2a4effa7ffbded50e0b0add80898aea30793a02610062edf3e23ebcd3f35ad7600d81513e727a80bf5b3f1bbd8ee2a93aa8118d71a72ae92ad8f4", 0x70}, {&(0x7f0000001800)="5d68fb0a2056f5866143f6d645c967ab234ea312d8cd823198fb8a89f9f90eb47187649eb8cb0a5c5bd7f7544c378db2d71d2159559ee010d0b0022556201b132b238b3a9989e71ddb4271cbea24a24c5ec537d61e11d16e41124ebe5f217e49681c0edc6a85828a3c2f9f3ed6a467ce58befda8f4c67305dfbb779ba92d327fb13551b8bed118459cdf1a0a378093307d217229b0bfd00f3bdbb9df50c3fd237326752c644e03a619", 0xa9}, {&(0x7f00000018c0)="b182edd09280920b8376ebca31eca678a657a6a8e56c90f72a65bc4e752708740d4c7945a854f43893460f9965d358b72e0e78fdc2d61adee91dc8cfbeaf3fd33c27c3ec26bc6f9060dc080bfa52e321c62c112662b87cb83d8fac4903bb4e9460dfd32ac171", 0x66}, {&(0x7f0000001940)="28cc75fa0bbda66a341b417f2053dc5e4ebf4c0fa596c34b48d8ac2a08eefdda6ef63a734cc052973b20137a84ff9ffee41232186e1089f21036cf77d3b673b701aff56b558ef1671c8b83c3c2c33874758efbcab5bc7d2306cca5e425c56b5eb0f997ad90c147a0f96134a629c3d9b6d81bb19bd28a50ccaa8266066ec3ea9f49507d83f795b343a14fcbae26cf57016193a42cfd79752647fb40cf3b292d5bd47e00654cfaf5ae64997bb2a6f92ca0d8b5de13f68e5b13d8619346951624afa98b261a7932b144b8e47c5428", 0xcd}], 0x8, 0x4) (async, rerun: 64) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001ac0), 0x183800, 0x0) (rerun: 64) ioctl$ASHMEM_GET_SIZE(r5, 0x7704, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000001b00)={0x15a00000, {{0xa, 0x4e21, 0x80, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1}}, 0x0, 0x1, [{{0xa, 0x4e23, 0xffff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}}]}, 0x110) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000001c40), r6) (async, rerun: 64) ioctl$sock_inet_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f0000001c80)) (async, rerun: 64) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r5, 0xf507, 0x0) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002080)={0x6, 0x32, &(0x7f0000001cc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_query, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @alu={0x7, 0x0, 0xc, 0x0, 0x2, 0x18, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0xd26, 0x0, 0x0, 0x0, 0x7}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7fffffff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1b}}]}, &(0x7f0000001e80)='GPL\x00', 0x81, 0xbb, &(0x7f0000001ec0)=""/187, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000001f80)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000001fc0)={0x2, 0xf, 0x4, 0x9}, 0x10, 0x0, 0x0, 0x5, 0x0, &(0x7f0000002000)=[{0x3, 0x5, 0xe, 0xb}, {0x0, 0x2, 0x4, 0xc}, {0x1, 0x5, 0x3, 0x1}, {0x2, 0x5, 0xb, 0x3}, {0x4, 0x4, 0x6, 0x3}], 0x10, 0x100}, 0x94) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f00000021c0)={'tunl0\x00', &(0x7f0000002140)={'ip_vti0\x00', 0x0, 0x7, 0x8, 0x8, 0x0, {{0xf, 0x4, 0x3, 0x8, 0x3c, 0x67, 0x0, 0x0, 0x4, 0x0, @local, @empty, {[@ssrr={0x89, 0x27, 0xa9, [@broadcast, @remote, @rand_addr=0x64010101, @remote, @private=0xa010100, @multicast1, @local, @multicast1, @dev={0xac, 0x14, 0x14, 0x32}]}]}}}}}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002200)={r7, r8, 0x25, 0x1e, @void}, 0x10) (async) bpf$OBJ_GET_MAP(0x7, &(0x7f0000002280)=@generic={&(0x7f0000002240)='./file0\x00'}, 0x18) syz_emit_ethernet(0x193, &(0x7f00000022c0)={@broadcast, @remote, @val={@val={0x88a8, 0x6, 0x0, 0x2}, {0x8100, 0x1, 0x1, 0x3}}, {@ipv6={0x86dd, @dccp_packet={0xa, 0x6, "ad22a2", 0x155, 0x21, 0xff, @mcast2, @ipv4={'\x00', '\xff\xff', @local}, {[@hopopts={0x32, 0xf, '\x00', [@pad1, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @ra={0x5, 0x2, 0x66}, @enc_lim={0x4, 0x1, 0x4}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00'}, @calipso={0x7, 0x48, {0x1, 0x10, 0x5, 0x0, [0x3, 0x100000001, 0xffffffffffffffff, 0xfffffffffffffff7, 0x93, 0x4, 0x7, 0x1000]}}]}, @dstopts={0x21, 0x1, '\x00', [@padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x3}]}, @srh={0x3a, 0x2, 0x4, 0x1, 0x9, 0x44, 0x3f24, [@local]}, @hopopts={0x11, 0x9, '\x00', [@calipso={0x7, 0x18, {0x1, 0x4, 0x1, 0x7, [0x3, 0x8]}}, @calipso={0x7, 0x10, {0x0, 0x2, 0x1, 0x3, [0x8001]}}, @jumbo={0xc2, 0x4, 0x6}, @pad1, @hao={0xc9, 0x10, @mcast1}, @ra={0x5, 0x2, 0x3}]}], {{0x4e21, 0x4e23, 0x4, 0x1, 0x6, 0x0, 0x0, 0x0, 0x0, "1c4759", 0x9, '1jP'}, "432b7909ace0625d79daeaabc2eb51075529c0f07fe89204e98bae84d1a014a9ac496a9c9df1f00820148d64b053983f49f7f2fcd63a77f78d481af058"}}}}}}, 0x0) (async) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000002480), 0x200, 0x0) 586.002049ms ago: executing program 4 (id=367): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) (async) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001400)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) (async) r3 = syz_io_uring_setup(0xa6, &(0x7f0000000080)={0x0, 0x7a9c, 0x10, 0xfffffffc, 0x44}, &(0x7f0000000340), &(0x7f0000000300)) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async) sched_setscheduler(0x0, 0x3, &(0x7f0000000100)=0x7) (async) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000280)=@abs={0x1}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) io_uring_enter(r3, 0x100847c0, 0x0, 0x1, 0x0, 0x0) (async) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) readv(r7, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0xfdef}], 0x1) (async) close_range(r7, r3, 0x0) (async) ioctl$TCSETS(r7, 0x40045431, &(0x7f0000001200)={0x0, 0xffffff1e, 0xffffffff, 0x4, 0x16, "001bf100eeff0000a2c2000100000000002000"}) (async) r8 = syz_open_pts(r7, 0x101) r9 = dup3(r8, r7, 0x0) write$UHID_INPUT(r9, &(0x7f0000002440)={0xa, {"08c39ee52f329f1698b1c4865f8b540a5eee9f496a0809c3d20325867b6edda88489ab4c09fe0a7f1e8640aa8e344f412df0d69475a5d6570e21f31fac7dfb4aa7ade0e851582d5c1abdd809580cb34c9e48576b1c73ed76023256fca058ada3db47d86cc75b33cf762b67fe61f152618c49a40858f68794a4fc484ab73ccd254ba3d147f5feddaf91dacc238c0a8096f79597ca1e6da781fcf37a0141a335c6a7577d2d53c6e552a7be208381bb31d1d3e0e92ea651655217535734b286d3f19780a4c720075a36a734151f8c00e651cb3a6bbe30e3f6aee48750436da6471e965e81f38134674fcb697108fb7345010bb8fa15fba9b33355d7858327171ab9c68f6c21b2ffbff4eb061dab80bc77a4a7769e7ff73bcd98790e09415bfc5978cf5af45c3ec9ef9c1a39f766c59d59590281038dbcb765580ba2b3f141d5bbfc40910a0894cd1f22d2a8b6d4e4778debef99438b54d44b4b7568de2777431a5b2f3e8d1a45a60a468f5e33e8ef534f803dfb6798c270f52edf031ecd996bb78c4e92961c63c079676d77412ebc6074e5f235417785e7a14b14ce7626b015071c154cc2bf8f4499b93293e9997c23df4c7a1498cf12414fb31eb873728e4f613b540d22e7ca718f18da5b82ed24995e4309c3af4a2e1097465bf09728082d09e71ea365522035eb9772b8e072f8454777ee304dacd59d3eb9f933f151fa14f8c38eadbeba04810a2dea7a66824f09235c13a45f07870210d0d310ce3ae6284577bd4e65f32700f6723727926cb52e4f27776a1dab0f6668327ab5cf1893879a635261f2e0d9923ccecbf5b80f10a8275c1515f47930d614e787f14c105d3a4f8faf8e7f738cf4eae4fc39ef3db3cb87794ace87f7239b69dc4ab4e5ae57cdfbd309e847d99600ef14b51faead01e8ade57d24270bc13a1787896096eeacb8ab1c93d31d93cfb244bb09ecfecf336362a5656db7df327cbb9aeb898f8af229c7bb9452805f2b4510c5df86b6d564e01f000000167ade5205331523a6392af2bea9e6db0ba5480cbf1b202714233289c4017cb66e83c0c8b6e88bedb922162d0ceecf6c5da173bbefe6781ab7720d2be6cca378db650c69d4228141ae190922fbbaddb86c7f0fe138b704e8305b3bcc7910b2280d96d71dafdbfa876b0013fc4de586f85d9ee077b6349becbdca8bd989a51c4c76ed8a8cc691a65078e0272a62edec8236a779f0cbffeda49dcdccd4def7064e0d77ae5a8c64f3057b4a3a0d4457d33f2bc6c112378315411baa4bb126fe540d750491fc58fbb66911ef82bce5ed76872dbcd8e05dea2f3f347a653aa39ab5d75e71671bfeb924e71476134dbf91e3f287fd853cc34bf81e717edd41aa04b6fbeb43cf2074f0c8fe5350401b6cff801c147a3b58b972aa5652629a9fd8b1df2852708ce958d4e9974ec4383aa5da4e3f75fdc85981e97b75863546f67a8703673b6fe2c26f0e9eeb8c45c26f673adac55fa5d69b82ae7d032fd3b26866047e8c029b90a62794a89c11398944b398b4177b2dcc5a743c16d4a5333b1e30af678d3db8df849c1753db067a6f94bab00c0dd3c7e94a8675924c89bda98ac09e10bcdf83f5114b9b466c413477a5cdc48c857230798934bcc1f0eb3a2d2944b139e459af32e515785f46ed4e97cdcb23c7e4dc7c4f91b5b5ca5228344aeb6652fffaf31325c7429bc70a5f6beaaa98ef190dffdeccc94bd814b3edfdd48243bf34291076ab5438ee00e924a827d5b453df42d24144fe1a45bb6c84fcbb2143d0a561c1e867c1279bdf0a47061ea77a84f36c720aff785f0db10eda84c767b5f3874f9455c0f026735ded32f0403ef7dbcf97d2233d59c670114ddf89314ba74fc248bcbdbf43c24e46304e229b3cf583aa410f4dfd119152495da8737518ee2a05a8ca1f004be3c551408f2e4013e444b63bf2bb26ddeae505642dffcc989ee241c48741181b506e22fdc4530319522780c74bf786852dc66ebbb51f8ecbb1e35de09ef7afe589bb8a31c5d63477db5d5e7174694ea04cfa98057d39127a4e5eedb4897a491c6693acd0a036abf846f3b6f3006e5e5fd586f29a4a8a31abbccf732e4f1b88187a72d669c16302657e9cbbeb9322662e111edc7771526400b6123d0f8207bcaa38bee07043e36e223d418ac948d65e7acfe72cc3fdcf03a3e43ecfec8ae489ddba09126709c5c7968829e3504de8a5010c9372de09476a7b96b04d7aed2486d8f89f21f075321abe350024abe00a81f87df3dc372fc3206496776c26b6958243070bda4cace3e358da5d39a3945765c2ba4b002b06efd416af66f3343f218ed84550ea83f02f9a5c3fc677ea60987aa25f0406d6154081cfdc074814a2465accdfa102858f5a52c9eae293c56ddcaf8f6926d3dd0ccb51a30c960d6b7e473038ebd3702b5106f6bc040efdfd7169fd3f2dc42ff23de26a239e13b74278729fd7e843b38a35c55fd50181ac13a9cbbbfd8feb36afaeb1993349c0ac5a0c44ffd92919dfe272b0f8ed7df7198cd299715f021109a58dced4753d3c7ddd6e9ea01596f18b2fe7000000004ccfca57aed5b5cebdff65de480a56bd53f4c7f83ddef00d7c9686311d1fce76f320bb3222a11db30ba6ed31535d8fda61e694478ca9935d72719b8d6b9be88ae3df30b60ee251b919b4d1734b994c62accdf855488b351738331b462eccf27efdc5577d7a5548579dc90d227a42ac010f33a720dc3cf0a63454f8b07c775287495761a058ec1e28e6aaf8057241f4ef8b5de56e279355bb66630c4ddf35e7c2cfff26a4241b1df0379d2a1e9f959e46d3843f89844ead50aff44640fcbc4a1edb033afff7cc9e57c4f8d31900764233e11fa4c28e547788c1b00de4268df692ba3415a9ad90fa712f9618f5ecff57da32809380eeff040cd3b23f508614c72b303cec3bcd732708303b166193366a062b9cea536f28478c387e626744c6a611a8e7162d274efccc84eee8eb31d3310c86752777dd5b5ffe234e895c54909f19a4aabcf3c15b90c02170409e314fd90e766ec4ba93c8ec6321237a980ad3c32fb2fab69e57541ea7f5427a85c2c57d40f9ebe9de5572f46a4713fb28e0af42d0adef3e29195aa41a3ba318181512eebfadffede4e35ff7f975928edc5d4d9f2d931fb44b30e1df55e66c52e1648e9cdaf71221b57c6a6b087428ccc57ade5b1531341cba2be452b426c434c70fd8c493337d4995cbd76ea1dd545226e3eb59d5f94ffb5352f87a4a66cd7c5e88322404fd397c46e198646a9c819d0eb1f10e54d8a3ea912f1cb134ff1095aa7325287f6ea9af8c13b67d6abcbb70dbc06838ecb33e45b60f6cb832c3e72d1401770f66bd02f35a2d007815ab676099e31f5102000000c0e83d5e7107c8dc5830c9cddb9781185b94d7f2814c5058ba3ac54c268741c5728f4997a9628602c2a36090162379f3f37c47619b3e7c7397a5913b7060b51e0c7f7226ff1135444f866f89a4b74136cbd3acb7178bd63183b3fd9cd19fdeb6fcc6341910ad4605da76a9af4bfb8b75fcd666f8188902b380ae560d9aa04f8f9b0ac5c109d1824a470726e06a49d955f8f71c8a86081e75b13f62600deb941da181eaff544cd559c467d8dae432debd22e7a7b3e1ad731a5b9470f5f60423dda061ff899c07c79f3da34f38e1d8182d6ee0c36c6029455091676c214569a8a8a759b20e41638fd57152029b190b5701d30a86f579e2d0cc53a2f809ca9bd3aba1eb2772a7acc35c4d983afa83a9baea35c0ed4931234719636cf8f5fe1884bde6cebbdf23bd62b1ebf0a5cb78c27295349bd7d5cf28c4ee4689497238fd3aa71a417914e6892667a56bd69dc2e5882cfb67df71494e9a9199e025892e4e7435f727636cd988cc7563d28db5133f649849c5b3973a3428de10ad39d96146b22acc50f50eee5a038876452b960686892de40efe30081ccdaa2bf64af78d5988026e529b36c62a21378ac42d220d0dd878010178e374e6dbb2b61206066d040700ed03c6fd9a4e00547fe9304aec0925d85a0acd07fdc5d48c1a1cff656916f5d25952327792255e0d606a32517781cc3d737ec753eb95b5b5b95dabd8946907ab54cc85d05b475e2e5486c6fc070417198d3a50910e2949d20d3fa68fd327934cff5171224942b8f18d88947763a7c710d09c4b269bdf2d3e99b755ba8fc04deabf4bc4bcffc4d62d491538c65078122bf2c263ae0020af67cfc9cf19e5b929e086af281fb43d5504d728935c5cfac136eb81703d50fddb39a5a713b2914c6acd9b2d07819cf7bba495ac5734fe423e611d309b80eeafcf9053d51b0ab3c29d5ca5eb8861ffc1ebc4d53f361b8991baecb52860c15202f979e34054fcde869d018103ccd6d914a70f1840fc6aaf426beec975ddb980b19b0f4cc2ca393c0b9e6ebe5e7d1c9fc1ef7a1c91378f0b73262993fb80667ecf62bac3c47cbd002ae1b87b8dc3ec99d5c987765d778868eb55022cc3bed14b8f934a584bcc98fa0b4f6e6982ab8d8a2bb49f9074ef429dd7b8db332a96ccec6983a97be7c8634c02e7937ffc8d613b83aa375886bf40a87ec062090382f874bf2c8e5fbb58ac18a46c4d9e85af3ca21bdacb7755f49776b0eb3972ff682c84beb07d74cbe2764e378253e72128991b73d2730704a5448280e8a0fd8cc87d4cddcffbfe5525ae3d2304877a3988e33c8e12bf77793e753f25840e9af2ce56bdb999fc62623a2298b4244534f662eb398a2577c72f6cfd5174697dcee151d4f3a7293b11de3889c43744da4165aca4e4a1e926d37ae4d7471584a06f3641f2037a74a58c2397a594f29d142d59f91bb57e24e1a3f30f68c626033cc34895c1b16d62e3a375c3e09f5dbd9338cd3a500643143cd404b57019c648c3ec31d696233fe16efc3c4c84aca0830ca8b9fbf1144b98d82f41e4cf67631c74cdcf8d9c8b8556b876ff1592683ccac0b47a26cb3a2cb1b917f433bb54e0b53deae9ac4b1cd0594c1fa0e6744e7ed88fdac60901e3da989f3b0d7c12b140cc576fa1b0e8e705321d37c303691aafc9fed9c3dc419078d0925ead56455ea5f3cd57941e410c1c14c2e8972d7cca44fcaca1f64fc817f4a41b6d9fb237fed159cb09e788ae560726537f49cb64b9f60915d402e0931355c55ad792cde758548b1af54b196e414046d4af3579a6c30ceac3d68bbfd2adef309c064e759a9f0dd69d682a3880b8ff27b69abffaa45ee7e65d8f1f6e40c188f6249fdf72220b4c87243217ba0292b9e9b67ebeda4fb83406216a4d765812bafeff34cc57f7d2cd1608282079c076055b9cabffe5fa491b970291bc2672540ccc15ed877d7dbe3ef683724c715ace770905e48c2dc6a44e1fc095773676d070eac00ee3834b07590cba7093f56b678313870471c81599d34c53fc03ec6c913d8ba3f604ace8da12d2025cbb5000bc062f4db65a6feacaf3915206d1c15ce7e78c17dc2ea32cb57d6fab0a22d487c77118e75016006f812541ec8180a321287a2d57248d4ee4a19706a19d802c70e250c3b0fc400a0b5cdc06537d2f55fd5300be4eeeaab8cc481a84b6a5e17d8c47ec92fe40710d4ec3530a94ca16710ade2ec7562398106e0ddbb6c8af6412166afd99d45d29a3a967e58decd0d6fc5bebb98d639b5606efd358a43d635d50f0ccb8472197da604994e7fb700243d5f7e45700", 0xe24}}, 0xffffff5c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) (async) ppoll(&(0x7f0000000500)=[{r0}], 0x1, 0x0, 0x0, 0x0) (async) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd, 0x0, 0x4}, 0x0, &(0x7f0000000240)={0x3fc, 0x0, 0x0, 0x6, 0x1, 0x0, 0x7fffffff}, 0x0, 0x0) (async) io_setup(0x8, &(0x7f0000000000)) (async) socket$key(0xf, 0x3, 0x2) 571.711429ms ago: executing program 4 (id=368): r0 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) r1 = socket$nl_route(0x10, 0x3, 0x0) openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[], 0x0, 0x26, 0x0, 0xa}, 0x28) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = syz_open_dev$loop(&(0x7f0000000940), 0xe6, 0x746a091714e40261) pwrite64(r4, 0x0, 0x0, 0x100000000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x200003b2, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0xae2cf238b86bc72c, 0x0, 0x0, 0x0}, 0x94) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="200000001000010700000000e9ffffff0a0000000c0002006e6c3830323131"], 0x20}}, 0x400c0) recvmmsg(r7, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f0000000340)}}], 0x1, 0x40, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="1b00000000090040000000000000040000000000", @ANYRES32=0x0, @ANYRES32=r7, @ANYRES64=r3, @ANYRESDEC=r5, @ANYBLOB='\x00'/28, @ANYRES32, @ANYRES16=r2, @ANYBLOB="5dcd56ed6768330997520ed1480573d699b7571b88cb75cb30957a46cc624f186f4a2f677006b9f2b7db38bb7949939627115a09366d0d7bd6b4b5ca6312f325bc1214fc71a8253cfa34f4141441ea65edff1793e168d0c728bb08c89183cbeda63b647ce15eedd89bb94c8379e393af0526ebdfef5bb7aabae38a53d617005bf3e94403b75f7c7e9bc418088a3196cb27045df79154d1677645b3961c331f282b3e6aea5024782b3c5610b0a3e95d093735b1f0aa7ea7cefca494fcdf94b21beffdf98f0ea94851c879bd1c0f4a275f1c1434fc646737e2afb570af63304b4097e1fabd8b95547e715e6287bd70f3a3f48bb0ef3dd96c8a60ee225603cef47c7da623607342a70819fcdda4ec6a363e5b8dd39b25ae80afb6fd768014691844f7f47bfd0baa7d542a6f0d1dee0474ddcc9368a5fcaed0d1dbbbb4fe3b422d54460b7083716f4b2b80184cd1477ef075ae599cdd5b00ab2c94e75dd3366d5fb64d9385a582a05bb6789bed6413677bc8c7c1ed7450ca833fee592c697bc449f9c648bea76d2119bc6d6b3de360dc120d53268fa79694f5d7583c314f1ab2ad29a4db15efbbd5a5342a8401abda5a1a8970d5a08cd5a03f692b385294695529294a60ac85dceb7d7c84f3de6b40eec16ac9adbef8d7f93463982a00c758efe70dfc753cf03cc3d8df059df54419ff451dae203ee49eccdcf1bd9617e5aa70b6f30a25fac48c3bf52789f4fb7bcbc2c3162c093153943adcd2d271026ec9fb310f2877c7a49ef0907e25538cf5289b4a44462b6e9cb49b13d7b944c743490cb50e262d6f233964602f587832c3885f40292315cd4404c9b9770d7e162cbb64b54e42054704468f0a427ea2b8a5d9a944f86ea5ae0d70f86c8c4bf3e1b9c7637fea13f7295d7a0abd3b1b2614a5b20e5b700b2052f5147a9df0712235a0f65301cf206723014fbcd1ef0b4d50459105189a28bc6ef6578c9ccef0324d932ea548c0c4d45281ebc279db2277bccb77fd052f4f353f9be09496385f0f46b5824049b4540eb176585478cf28b1328af9eeba0e125a6cce440d2a4f24b83311773927715b190b8f0816f71847ce46bace0779ed28bb16a443340af2cc1df1da107edeb313269940fddd8ca44c8f8d11b9f15a4e245d732b0bd5d240339602f02574dce22540e9fa31091985361ccc84b43dafa999d61cacfca5efc01d7ace36927ddbbecf46764086acd2d373ea220296f2a310db16a06cb2c63ec040f422cd0ef1ed3bede9a2bab8ee4d96fb5910d0bd3b414c7d7b9c250b4bdb98f7d0244fe8e063a27c7ba4c36460a61d08bdf37d1ee6c8af29bc457e01fbe865d6682087b3f0bc652eae61f197b3421469dd9761faaa6e0f82b148a24c6f0267344fe03790c1f7cb780edcadbdfa5103a39cf2a792954e9ddbe3b5470b4d2bd00c59014d3da6185fea274928a3ea4254d326640e6c91c29746fca5e02f478022509962b010f830c44ed540f290c1b08fe5ab8931c9d1e9a860d21e7139324025cf4c57e601a0ff57c3604db0efe3b4d8de28da1cf06a918a02642487c60efad71b4d0176f56a30bace939ba9e8f2cd79b519f69af9559307c7019a0b7b637fa4447559ebfdc802cb87a2ba3e5d43456414cdea4b68593534675c855755cbc606dbc39d59dd72496779ed9fd58a6c7a34102a94adaf280987b849bfa98d1ed7b39b1ee9afe1d3340bb571c08c0d0b3d66078e0efa30f7e92a0bdcbcd2ea033f8e074b975ec57a958107ab0ec3ad09aa1d8e49f49346ec3103ecca04f1285aeac226d93ce8fb93656f05fee40504dc3c361d5d9f92525541411c581ea1b53fb8338721b992b3b452866c987d91a2a823a39a0d65d9ae152880f98e71218626f90f9e2c610b7213853db6114877c5b20269d602d751d5bcaf11b12f2e92be1a32d991123a515517dbeda40df32d9ebe2642a56208d07e6f585975e437dfddf3e49a97a6f40618d709a62e614197e80708cb34d28712dc58162728fbcec514308478fb17be0fbf443b5b755056b7616f50fc23a74851968d1be33e969a9b7b7a2c98afde60262b8ae6d9cd2e89465560f14b9ebe2180a284e4102155dd73524ccc7e5b295c1deb1e33d713ae9774c137993be8181b549a06c612fda3d11a0f89a1a1eeb398dd73a98eae7e908e6851cf78f37f1a565bcfc4438f2b4b7de600ec41139f3ee452830ebb6fef7e4ab554f85422101f82b33d22c4d437b53bc900a51057f27a44f69aa5e1a08fd63b2e1cd82a9cab91d4f3a1c1b160216b5953c4f0820ec2d74f15f8ed1b9938fb58d27c006e06fff520a7e317af21e94aee23751ee177dc071218c9af33a62eb6d7c7a08d82ca4520d8bdd7027f6a784cd27bc9292dd7178cb888b3dcafd98776abbda9c90862a1d533ae7951cf3dbf9ad81dc55b466b4a241e3dbcc747ea76da3f828e48f3e2b1a6785a7cbe92adda673a04aad40436c1f7a91e48a5506cb2dc933bb698b1e14b4575c57621529a339906ed3f873e74fe8571f8c7e46e40009c795b8689bdb2cb826148057c3046f73e391c862983141269ca372f04d0f800ecd78bf23e5348a1ad38144a6d39c74cac5034b894865c6da87d482dd2a3cc804678e9d3aac29ea1e70e8ae2cca8cd6a93c86489079a5075e87acf870730b65f06715d2f01279f6b626aa26a3a2e38f2579c0d123533f628b888d35c359e1bba67db91cc98c17c8442e1c12ef1302d34a0d85eee999d21f6a72c4ad15d40367cc0c4982dcb9203d9efdd8d4462ed6109b60869d7dba29a74db2789c6543e744bb2c777dcec9eecce52f59dac1421bccfaeb91d7572e28b88a5ac91318565c00f1cfe220cb2a03908480986775fcc786881a1a86b3b10acf80a54340ab17cc7eb8a51675c9084611c46d70885e3c7acd79a38f4d5b3226c912ca88cd2eb55fe7580858f7c787521d233ea6dbc1415f24dde5f29d8bfbcae72feca23327d444d75e420116c52cf6e7588fd184ef4e5a16f52608772744cb1523ac48134717a275ef8fc193301fb1a6bcb444a93ca965c01dced71497014c6dd50b5edb126a91eb63d0cf10567584415aa6cc5f6210ad6d0f631db36dcf0b4f7c8397c670f91c00370cef436183549b2cb9ace0c83be62a2d5148888b0d955db2904d67b60fb265d6189856a46e2a19095820ba1757627be3ad63c96bd637bf3e06bbe4cdfbb5073a67559abf83d28ab61638493b1f0dd0de198c84b3989b8c6c1d0bc62273854ef133f4a71749db1822cb8ce85d9ef3b61c4a716c3a3fcce863a8493d0cccd3e87171cc63dc995d3120986244a65993066af852f6481ae36187c5232120c80c8cee11916c189a008f4e7c34044851778e67cd16099aac7cef4e781c4fcbc35e53de9ade7112f271833b382c9fe65b7726697148243b6160d843503744f64c39648d868dfb09db8b6741665ff5bebedf6ca0672c5868bc3c5ec93f3999799ed8b1c49df0486f97b919b05531c490fddfb53cbd557fcd069ab322d9a21d53c391d681333438ab04f45b745cc6f10a998ee7df96e9bbb9e3d0a591869df403f91318f99cba2d4583ae8bed4a29aaf7d0cf0f04b0563f3481934cfd8ac35e2d4e76c9ed179c693de3d63a7a44f151f5088420bf77d1626130e128daab57f23c44e3bee283c8302628fca207bd730a8f2899cec4134923920541e79bf9bb8aaaf26a84c65d191e104bbb77f2202c991df85e94970898451d2369812491ccdf2c14c030338e32df01d0ce415ccef06a7c4690d7f75de839b339cb844db3f55b553632df2eb2791fbb8d8e8406ea2c08864561174a802409e6c4c2bb43f39987da03862dbeb18de1756fa384ee9ac418e7c3b5ddd7dd15179d2aacdcb5f87878dc3373bf44fe50859f7ebd47776772eec6b983bfa55857db39f772d966c337e95bac84e2b8aeb740213e353b5c5de5f004b156227c075027ec40c31b1f75109aa403d1060be403b7c2892ccff6aa6b8b8a1368942b25a02766d33188dac7aca751b77e6a3947de85d08b49ea710b556f499ec0c75c465d24166dd82ab8c3a24106342fc43629ae08a76480080dd442f699a8d338ae52d1dcb6bbc81784fdf65f0ca3474fd88bafbf8ef84b8c4cb17a2a6e1fcaec7aa4ea6d1edeb931e9960c0d37503f0249c3b1b4d3007aec2cb0089ba4f84c9dc781b8b12a9eff06593a1b5cd092c24f28dbfc4c93f754013777f7e1d95181fdfac4bb189df24ef1fcfaea9fdc36278468b65e281a0eadd804d2985ed44369dd309d229bf6f046f0a7aebc692af01e1146235351a6c56eb44fb6b8e6982b092559d4f7200c6d9cfe7a85f75f9edd732ac07c4fbfbfa56a83604139a19873c91dc35163c0ce5d3c4f99a8c7bf4f2be9e9c75f5e4b3c6b3ea5e5a1b8a740d09f5e0123038869b120eb711eff69586cb7ba64166392b7b4e9b574d26e9a11d53334849c68d29a4aa18d82c13260350062b0404abc1fb08cf6426c865feb6790c3f6c7a9fe10e060211627a4a3a66f41cebd7032e510860b70c0ff6c909b25d12ef31592f743ba14f816e5d83ab39e0f8d02fae0afd8fcd606e13685c339552f275957c11119700d7878a304471406a981b57c2da3ccf95c339bc0fd6556e67d1e1ed250f00161d582fb9bfa3dfd950712989fa9acee2975845ddad3b732ae9c0758916a3d4a166980a2b7e93e82ea1e58b7d6e7b67c8faff27b993e9eef2344ab4af7d583dcea5c72108be8ca05e50c231e1c23e6f33f7ba4b3b70c878e68c2db9f421f3a9842af4495691d8b1443c5c347fcb86324c69eec8d49570f041abe9f23b1b43e5fe38acff92a956d02adf2db4f2888442b6bb70aa837fe4cbc73ada49de5f07222e2e205d10a092da192d5fb0d4e963fdeac3a5aa2218d03fd4520192af3cd670b7e6e36398491bd96cf5595551cc3abaea84a2cf5fb28ded45c61482b65cccd5684b4ed9bef2cd4dfdc9c7effe4f780a001bb99c53a2d2eb533d1860c6a569ab29ba29e2d21cd0a9cb7157f57e29415c311ecc1afaba495d2e5e1a4ea1a485ac77d188bdd97e62087d560eb30248db6d1316a7ab82aafcb17e47c0c438c9200547edea1ef7683ce7b254ac91401460dadeb883486f314479e594ee963ab4ebfedf3867c4c526365b28e86d411c2a570e16da163844c2204133f5cfb1d1cf3d86f92539d570340b69dd19dd96f9ff173ee055e0e304a643705767700aea08c591288a8069440ffad9bd86d977bed344bae8e2197eb72c2b07e823223fc20422ea98fdd15cbb110e66c69fcda7d3167601eb06823bb0bf33bcf6c028a29e175a635e959d7bfc72d9913e4cf21987611dc7dd38af74a123f184c70a08346a9d318611032d1c179ddd39e07028f063f4f7720ce1c738d89c268206dd60894fad9d7dfe809f3a787e65833e262f49fcaba11579d8409b2635b2f75b6fcca330145a726dea9e31dbc71c3d1b166318871205ef9b0a26a72ecdbdaa4e83369ab64f1476f736e83c0812101eca57bd7790d582cd95387e4471009a6145e85df758bffef874aee541b6d8ab4fe219814d204d360681f84cf3695922fd9e28ce8d13523de5e3a776e8a19146a1c01a9852cc2878f989e2d5bcda0d88e166eb40cd99b27dc8e5dc2b6f108fdd70444457a20b49376e5486c5a6f22c015012b09209c316fc7539980615e4078f5d9c24751a2b235a101ecf3f20fae03da1cb1895d0788e834cf6fe95c01534fe0bb226badc1ece9b1b49b6ad4f34e7dcb28be202d82c3a64af58ef445f81f37593776032b2", @ANYRESDEC=r7, @ANYRESHEX=r6], 0x48) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='freezer.self_freezing\x00', 0x275a, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r9, 0x8982, &(0x7f0000000240)={0x6, 'pim6reg\x00', {0x3}, 0x8}) write$binfmt_script(r9, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r9, 0x0) preadv(r9, 0x0, 0x0, 0x0, 0x0) r10 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) r11 = getpid() r12 = syz_pidfd_open(r11, 0x0) process_mrelease(r12, 0x0) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1e0000000000000002f4a680000000000000000051e3f652", @ANYRES32=r12, @ANYRESDEC=r3, @ANYRES64=r7, @ANYRES32=r9, @ANYBLOB="0300000000000000030000000d0004000000000000000000", @ANYRES32=r10, @ANYBLOB="04c3b05a590c05fb0df833a56392dd955bd9a16d3712287c92d9b41092c4435162c20ebcf8433ee76947a96221ea4f1bf0fffcfb83b9b240cb402877d4eb41ffd4b6f639d7430f2db7aebdc1fe48eb8b1b463be09c6dcb5827bb3f5e70a79e3e24b98223b346ff67316e"], 0x50) close(r13) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r14, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYRES8=r8, @ANYRES32=r13, @ANYBLOB="180000a541d4514a0000000000000000000000000018110000", @ANYRESOCT=0x0, @ANYRES8=r3], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 415.828242ms ago: executing program 4 (id=369): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b00000008000000070000000900000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfff}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x4, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x1c, r6, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4008084}, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000073010900000000009500000000000000c3d447088d973dfe"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14}, 0x80) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r8, @ANYRES32=r7], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000770000000e000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000003c0)='io_uring_register\x00', r10}, 0x18) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r11}, 0x10) r12 = io_uring_setup(0x4c22, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x0, 0x359}) io_uring_register$IORING_REGISTER_FILES2(r12, 0xd, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$RTC_SET_TIME(r9, 0x4024700a, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0xc, 0x1, 0x20a9, 0x3, 0x2, 0x1}) 331.880154ms ago: executing program 1 (id=370): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000180)='./file0\x00', 0x1000840, &(0x7f0000000f00)=ANY=[@ANYBLOB="696f636861727365743d6b6f69382d72752c73686f72746e616d653d77696e6e742c636f6465706167653d3935302c757466383d312c6e6f6e756d7461696c3d302c73686f72746e616d653d6c6f7765722c757466383d302c756e695f786c6174653d302c696f636861727365743d63703836352c757466383d312c73686f72746e616d653d6c6f7765722c757466383d302c73686f72746e616d653d77696e6e742c001d46d61beb"], 0x3, 0x384, &(0x7f0000000b40)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x3830021, 0x0, 0xfd, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000540), 0x1, 0x49c, &(0x7f0000000580)="$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") mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) write(r0, &(0x7f0000000000)="2a000200010078", 0x7) 0s ago: executing program 2 (id=371): prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000200), 0x1, 0x174, &(0x7f0000000240)="$eJzsmD9PwkAYxp9rESJxcMZBE0lEI6UtalxMJPEDmOCfsEGkErSIQgdh85MYv4CLu/GjKJMLo3NN2wNOouKgJsbnN7z3vNe317u3ydOkIIT8W3pPL48XvcaKDmAGaSTk/LM+qtGU+tVssTl3vZ28K9+WdlL3/fH1BADf//rzYwAeCjo8mfv+27vTctyDNtT70LAs9SEEDKnL0HAgtQOBktQnim4G9YZxXHcd46jpVgNhBsEKgh2E/Pj++lcCVWV/Qrne7nRPK67rtH5QTOpfv6BhS9mf+r4GvTGV/lnQYEmdh0BR6k0kBr2JWqKcPxUbra//8vkpKCj+mhj5k38jsKT4U0zxj5zXOM+1O91svVGpOTXnzLbzG+aaaa7budCIoviJ/02H/pRU1p/6oDYu4riseF7LiuIwt6P4nuPGQ//TkFmMciHnVMLvwaxYCIaMLnNCCCGEEEIIIYQQQgj5duYhwr+gE7B3w+rXAAAA//9nP3XZ") timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) ptrace$cont(0x9, r0, 0x2, 0x6) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRESOCT=r1, @ANYRES16], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00'}, 0x10) rt_sigqueueinfo(r0, 0x1a, &(0x7f00000004c0)={0x25, 0x7fff, 0x1}) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) syz_usb_connect(0x4, 0x153, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)={0xa, &(0x7f0000000640)={0xa, 0x6, 0x300, 0x1, 0xd, 0x9}, 0x41, &(0x7f0000000680)={0x5, 0xf, 0x41, 0x6, [@ssp_cap={0xc, 0x10, 0xa, 0x5, 0x0, 0x3, 0xff0f, 0xfffb}, @generic={0xc, 0x10, 0xa, "2002dbbbe41ccde85a"}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "df9c77342b601718b5517e8c96e0a80b"}, @ptm_cap={0x3}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x2, 0x4, 0x5}]}, 0x6, [{0x0, 0x0}, {0x4, &(0x7f0000001300)=@lang_id={0x4, 0x3, 0x801}}, {0x25, &(0x7f0000001400)=@string={0x25, 0x3, "5fcffeb3f4e0b15691ab8047280ea4ad98a989145074045b706f8a49701ed12b8bb5ef"}}, {0x0, 0x0}, {0x4, &(0x7f0000001700)=@lang_id={0x4, 0x3, 0x459}}, {0x62, &(0x7f0000001740)=@string={0x62, 0x3, "b112fd0d8732b730a461b0afe5490b38fecaa95fa7ddb4347cbca5ee8b0fbf5c2fdf82c18a3a621366201d1d4ffd53e3111d27687e61c83809ed383fc52939111874deced54af29914a5598694ae01f2c5b4babb99973f9f5841ab2edf1ae779"}}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000700000001"], 0x48) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000080), 0xc, &(0x7f0000000a00)={&(0x7f0000000940)={0xa4, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20000014}, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00'}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={0x2c, r5, 0x705, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40008d0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00', r3}, 0x18) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000000)='binder\x00', 0x208000, 0x0) unshare(0x42000000) kernel console output (not intermixed with test programs): T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.995044][ T286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.002376][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.009494][ T286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.064167][ T282] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.071238][ T282] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.078528][ T282] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.085588][ T282] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.109450][ T283] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.116536][ T283] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.123851][ T283] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.130902][ T283] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.147909][ T284] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.154990][ T284] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.162265][ T284] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.169370][ T284] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.191061][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.198386][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.206405][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.213733][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.221076][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.228480][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.236602][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.243876][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.251907][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 29.259333][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 29.278117][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 29.305196][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 29.313434][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.320486][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.328011][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 29.336670][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.343728][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.351095][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 29.359214][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.366376][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.373868][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 29.382102][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.389132][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.410344][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 29.426312][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 29.437578][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 29.454976][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 29.463534][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 29.471618][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 29.479812][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.486890][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.495149][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 29.503387][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.510424][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.517776][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 29.526049][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.533094][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.560961][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 29.569046][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 29.577370][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.584429][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.593828][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 29.601851][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 29.609940][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 29.617638][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 29.625935][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.633092][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.640642][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 29.648995][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 29.657505][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.664625][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.678504][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 29.686367][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 29.694828][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 29.706762][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 29.723936][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 29.732627][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 29.741214][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 29.749290][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 29.757423][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 29.765533][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 29.773909][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 29.781638][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 29.792573][ T286] device veth0_vlan entered promiscuous mode [ 29.804797][ T284] device veth0_vlan entered promiscuous mode [ 29.811245][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 29.819400][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 29.827173][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 29.834942][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 29.843242][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 29.857277][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 29.865886][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 29.881236][ T283] device veth0_vlan entered promiscuous mode [ 29.889959][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 29.898505][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 29.907031][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 29.915201][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 29.923389][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 29.931338][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 29.939395][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 29.947127][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 29.962190][ T282] device veth0_vlan entered promiscuous mode [ 29.973079][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 29.981241][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 29.989338][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 29.997991][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 30.007326][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 30.015070][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 30.025228][ T286] device veth1_macvtap entered promiscuous mode [ 30.037906][ T284] device veth1_macvtap entered promiscuous mode [ 30.047977][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 30.056342][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 30.064209][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 30.072662][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 30.081581][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 30.090110][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 30.098466][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 30.107029][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 30.118136][ T283] device veth1_macvtap entered promiscuous mode [ 30.127687][ T282] device veth1_macvtap entered promiscuous mode [ 30.139726][ T285] device veth0_vlan entered promiscuous mode [ 30.147217][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 30.155152][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 30.164043][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 30.172391][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 30.181116][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 30.188962][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 30.197229][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 30.205049][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 30.222480][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 30.230971][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 30.239327][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 30.247737][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 30.256195][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 30.264736][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 30.284868][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 30.284884][ T28] audit: type=1400 audit(1757883725.100:83): avc: denied { mounton } for pid=284 comm="syz-executor" path="/root/syzkaller.Sc7btW/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 30.288925][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 30.291866][ T28] audit: type=1400 audit(1757883725.100:84): avc: denied { mount } for pid=284 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 30.316732][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 30.324196][ T28] audit: type=1400 audit(1757883725.100:85): avc: denied { mounton } for pid=284 comm="syz-executor" path="/root/syzkaller.Sc7btW/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 30.346353][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 30.354714][ T28] audit: type=1400 audit(1757883725.100:86): avc: denied { mount } for pid=284 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 30.379901][ T284] request_module fs-gadgetfs succeeded, but still no fs? [ 30.386970][ T28] audit: type=1400 audit(1757883725.100:87): avc: denied { mounton } for pid=284 comm="syz-executor" path="/root/syzkaller.Sc7btW/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 30.411462][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 30.416272][ T28] audit: type=1400 audit(1757883725.100:88): avc: denied { mounton } for pid=284 comm="syz-executor" path="/root/syzkaller.Sc7btW/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=15276 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 30.450477][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 30.477909][ T28] audit: type=1400 audit(1757883725.100:89): avc: denied { unmount } for pid=284 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 30.505466][ T28] audit: type=1400 audit(1757883725.200:90): avc: denied { mounton } for pid=284 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=570 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 30.507340][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 30.528590][ T28] audit: type=1400 audit(1757883725.230:91): avc: denied { mount } for pid=284 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 30.536969][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 30.559355][ T28] audit: type=1400 audit(1757883725.230:92): avc: denied { mounton } for pid=284 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 30.568010][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 30.604061][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 30.612378][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 30.643180][ T285] device veth1_macvtap entered promiscuous mode [ 30.748001][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 30.755873][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 30.764603][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 30.794269][ T344] 9pnet_fd: Insufficient options for proto=fd [ 30.980483][ T348] xt_TCPMSS: Only works on TCP SYN packets [ 31.154748][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 31.173488][ T349] loop3: detected capacity change from 0 to 512 [ 31.180450][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 31.199435][ T349] EXT4-fs: Ignoring removed mblk_io_submit option [ 31.267014][ T345] loop0: detected capacity change from 0 to 40427 [ 31.305791][ T345] F2FS-fs (loop0): fault_injection options not supported [ 31.312976][ T345] F2FS-fs (loop0): fault_type options not supported [ 31.322242][ T345] F2FS-fs (loop0): invalid crc value [ 31.421655][ T349] EXT4-fs: Ignoring removed bh option [ 31.473497][ T345] F2FS-fs (loop0): Found nat_bits in checkpoint [ 31.540786][ T345] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 31.576538][ T345] syz.0.1: attempt to access beyond end of device [ 31.576538][ T345] loop0: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 31.590311][ T345] syz.0.1: attempt to access beyond end of device [ 31.590311][ T345] loop0: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 31.687799][ T349] EXT4-fs (loop3): Test dummy encryption mode enabled [ 31.694915][ T349] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 31.718607][ T349] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 31.718649][ T352] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.735806][ T352] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.782202][ T356] fuse: Unknown parameter 'fdϳ' [ 31.833571][ T349] EXT4-fs (loop3): 1 truncate cleaned up [ 31.840286][ T349] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 31.852596][ T367] can0: slcan on ptm0. [ 31.946588][ T344] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 31.985230][ T283] EXT4-fs (loop3): unmounting filesystem. [ 32.031600][ T381] loop2: detected capacity change from 0 to 4096 [ 32.057489][ T386] syz.1.7[386] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 32.057630][ T386] syz.1.7[386] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 32.154478][ T381] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 32.199754][ T284] syz-executor: attempt to access beyond end of device [ 32.199754][ T284] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 33.000235][ T286] EXT4-fs (loop2): unmounting filesystem. [ 33.031163][ T373] can0 (unregistered): slcan off ptm0. [ 33.128628][ T408] loop3: detected capacity change from 0 to 1024 [ 33.196144][ T408] EXT4-fs error (device loop3): ext4_acquire_dquot:6801: comm syz.3.12: Failed to acquire dquot type 0 [ 33.210543][ T408] EXT4-fs error (device loop3): mb_free_blocks:1815: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 33.316422][ T408] EXT4-fs error (device loop3): ext4_do_update_inode:5256: inode #13: comm syz.3.12: corrupted inode contents [ 33.341868][ T408] EXT4-fs error (device loop3): ext4_dirty_inode:6121: inode #13: comm syz.3.12: mark_inode_dirty error [ 33.353609][ T408] EXT4-fs error (device loop3): ext4_do_update_inode:5256: inode #13: comm syz.3.12: corrupted inode contents [ 33.410746][ T408] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #13: comm syz.3.12: mark_inode_dirty error [ 33.443739][ T408] EXT4-fs error (device loop3): ext4_do_update_inode:5256: inode #13: comm syz.3.12: corrupted inode contents [ 33.450009][ T288] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 33.475988][ T408] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 33.519939][ T408] EXT4-fs error (device loop3): ext4_do_update_inode:5256: inode #13: comm syz.3.12: corrupted inode contents [ 33.550303][ T408] EXT4-fs error (device loop3): ext4_truncate:4314: inode #13: comm syz.3.12: mark_inode_dirty error [ 33.580219][ T408] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 33.609830][ T408] EXT4-fs (loop3): 1 truncate cleaned up [ 33.615902][ T408] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 33.657856][ T426] loop2: detected capacity change from 0 to 512 [ 33.659964][ T288] usb 1-1: Using ep0 maxpacket: 32 [ 33.683831][ T288] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 33.698747][ T426] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 33.715067][ T288] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 33.744358][ T288] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 33.751431][ T426] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2818: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 33.771924][ T288] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.804609][ T426] EXT4-fs (loop2): 1 truncate cleaned up [ 33.816663][ T288] usb 1-1: config 0 descriptor?? [ 33.843422][ T426] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 33.855825][ T288] hub 1-1:0.0: USB hub found [ 34.057860][ T288] hub 1-1:0.0: 1 port detected [ 34.345723][ T415] loop0: detected capacity change from 0 to 512 [ 34.519102][ T415] EXT4-fs (loop0): orphan cleanup on readonly fs [ 34.587253][ T415] EXT4-fs warning (device loop0): ext4_enable_quotas:7053: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 34.742901][ T415] EXT4-fs (loop0): Cannot turn on quotas: error -5 [ 34.808027][ T283] EXT4-fs (loop3): unmounting filesystem. [ 34.824923][ T415] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.10: bg 0: block 64: padding at end of block bitmap is not set [ 34.944425][ T415] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 35.400461][ T415] EXT4-fs (loop0): 1 orphan inode deleted [ 35.406241][ T415] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 35.746623][ T28] kauditd_printk_skb: 63 callbacks suppressed [ 35.746639][ T28] audit: type=1400 audit(1757883730.560:153): avc: denied { create } for pid=433 comm="syz.1.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 35.799961][ T288] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 35.806364][ T288] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 35.821429][ T288] usbhid 1-1:0.0: can't add hid device: -71 [ 35.836254][ T288] usbhid: probe of 1-1:0.0 failed with error -71 [ 35.900545][ T288] usb 1-1: USB disconnect, device number 2 [ 36.789914][ T440] process 'syz.1.16' launched '/dev/fd/10' with NULL argv: empty string added [ 36.950125][ T28] audit: type=1400 audit(1757883730.740:154): avc: denied { accept } for pid=433 comm="syz.1.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 36.989125][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 37.122336][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 37.245416][ T28] audit: type=1400 audit(1757883731.580:155): avc: denied { audit_write } for pid=433 comm="syz.1.16" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 37.280263][ T284] EXT4-fs (loop0): unmounting filesystem. [ 37.286095][ T28] audit: type=1400 audit(1757883731.620:156): avc: denied { execute } for pid=433 comm="syz.1.16" dev="tmpfs" ino=1036 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 37.300723][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 37.316379][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 37.324859][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 37.333905][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 37.342352][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 37.377860][ T448] binder: 447:448 ioctl c0306201 2000000003c0 returned -14 [ 37.386579][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 37.395303][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 37.403871][ T28] audit: type=1400 audit(1757883731.620:157): avc: denied { execute_no_trans } for pid=433 comm="syz.1.16" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=1036 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 37.442196][ T448] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18'. [ 37.451000][ T309] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 37.548126][ T28] audit: type=1400 audit(1757883731.760:158): avc: denied { write } for pid=433 comm="syz.1.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 37.574040][ T449] loop0: detected capacity change from 0 to 128 [ 37.595870][ T28] audit: type=1400 audit(1757883732.180:159): avc: denied { mount } for pid=447 comm="syz.0.18" name="/" dev="configfs" ino=9182 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 37.741970][ T456] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 37.906198][ T457] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 39.050517][ T449] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 39.110390][ T28] audit: type=1400 audit(1757883732.180:160): avc: denied { mounton } for pid=447 comm="syz.0.18" path="/2/file0" dev="configfs" ino=9182 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 39.133269][ T28] audit: type=1400 audit(1757883732.180:161): avc: denied { mount } for pid=447 comm="syz.0.18" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 39.155066][ T28] audit: type=1400 audit(1757883732.190:162): avc: denied { map } for pid=447 comm="syz.0.18" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=179 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 39.181014][ T449] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 39.283690][ T469] syz.3.22[469] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 39.284023][ T469] syz.3.22[469] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 39.559959][ T309] usb 4-1: device not accepting address 2, error -71 [ 40.223293][ T286] EXT4-fs (loop2): unmounting filesystem. [ 40.258465][ T476] loop1: detected capacity change from 0 to 256 [ 40.268520][ T334] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 40.289934][ T336] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 40.298692][ T476] ======================================================= [ 40.298692][ T476] WARNING: The mand mount option has been deprecated and [ 40.298692][ T476] and is ignored by this kernel. Remove the mand [ 40.298692][ T476] option from the mount to silence this warning. [ 40.298692][ T476] ======================================================= [ 40.363359][ T476] FAT-fs (loop1): Directory bread(block 64) failed [ 40.370048][ T476] FAT-fs (loop1): Directory bread(block 65) failed [ 40.376649][ T476] FAT-fs (loop1): Directory bread(block 66) failed [ 40.384412][ T476] FAT-fs (loop1): Directory bread(block 67) failed [ 40.391189][ T476] FAT-fs (loop1): Directory bread(block 68) failed [ 40.397805][ T476] FAT-fs (loop1): Directory bread(block 69) failed [ 40.404878][ T476] FAT-fs (loop1): Directory bread(block 70) failed [ 40.510904][ T476] FAT-fs (loop1): Directory bread(block 71) failed [ 40.517483][ T476] FAT-fs (loop1): Directory bread(block 72) failed [ 40.533181][ T476] FAT-fs (loop1): Directory bread(block 73) failed [ 40.535659][ T483] loop2: detected capacity change from 0 to 1024 [ 40.548547][ T483] EXT4-fs: Ignoring removed orlov option [ 40.595373][ T483] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 40.608126][ T488] random: crng reseeded on system resumption [ 41.623392][ T336] usb 5-1: Using ep0 maxpacket: 16 [ 41.629029][ T28] kauditd_printk_skb: 21 callbacks suppressed [ 41.629066][ T28] audit: type=1400 audit(1757883735.420:184): avc: denied { write } for pid=477 comm="syz.0.26" name="snapshot" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 41.678553][ T483] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=483 comm=syz.2.25 [ 41.693424][ T336] usb 5-1: config 0 has an invalid interface number: 251 but max is 0 [ 42.444196][ T28] audit: type=1400 audit(1757883735.420:185): avc: denied { open } for pid=477 comm="syz.0.26" path="/dev/snapshot" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 42.505870][ T28] audit: type=1400 audit(1757883736.530:186): avc: denied { setattr } for pid=482 comm="syz.2.25" name="file0" dev="loop2" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 42.587504][ T502] loop0: detected capacity change from 0 to 512 [ 42.619702][ T502] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 42.638073][ T493] loop3: detected capacity change from 0 to 8192 [ 42.650655][ T28] audit: type=1400 audit(1757883736.680:187): avc: denied { write } for pid=475 comm="syz.1.24" path="socket:[16021]" dev="sockfs" ino=16021 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 42.710133][ T502] EXT4-fs (loop0): 1 truncate cleaned up [ 42.722530][ T502] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 42.757524][ T336] usb 5-1: config 0 has no interface number 0 [ 42.764415][ T336] usb 5-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 42.774695][ T336] usb 5-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 42.790284][ T28] audit: type=1400 audit(1757883736.780:188): avc: denied { read } for pid=482 comm="syz.2.25" path="socket:[16537]" dev="sockfs" ino=16537 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 42.813351][ T336] usb 5-1: string descriptor 0 read error: -71 [ 42.819578][ T336] usb 5-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 42.828715][ T336] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.837565][ T336] usb 5-1: config 0 descriptor?? [ 42.842984][ T336] usb 5-1: can't set config #0, error -71 [ 42.849335][ T336] usb 5-1: USB disconnect, device number 2 [ 42.912629][ T28] audit: type=1400 audit(1757883737.730:189): avc: denied { write } for pid=509 comm="syz.4.33" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 43.066443][ T513] netlink: 4 bytes leftover after parsing attributes in process `syz.0.31'. [ 43.087481][ T513] netlink: 4 bytes leftover after parsing attributes in process `syz.0.31'. [ 43.109451][ T28] audit: type=1400 audit(1757883737.860:190): avc: denied { bind } for pid=501 comm="syz.0.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 43.309921][ T28] audit: type=1400 audit(1757883737.860:191): avc: denied { setopt } for pid=501 comm="syz.0.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 43.350338][ T28] audit: type=1326 audit(1757883737.870:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=501 comm="syz.0.31" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c3d58eba9 code=0x7ffc0000 [ 43.411714][ T28] audit: type=1326 audit(1757883737.870:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=501 comm="syz.0.31" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c3d58eba9 code=0x7ffc0000 [ 43.533716][ T284] EXT4-fs (loop0): unmounting filesystem. [ 43.555969][ T519] xt_NFQUEUE: number of queues (65534) out of range (got 131068) [ 43.588424][ T519] 9pnet_fd: Insufficient options for proto=fd [ 44.158000][ T286] EXT4-fs (loop2): unmounting filesystem. [ 44.592758][ T340] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 44.634948][ T527] loop1: detected capacity change from 0 to 256 [ 44.665698][ T517] loop4: detected capacity change from 0 to 131072 [ 44.675322][ T517] F2FS-fs (loop4): Invalid log sectorsize (67108873) [ 44.688392][ T517] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 44.702154][ T527] FAT-fs (loop1): Directory bread(block 64) failed [ 44.706049][ T533] netlink: 100 bytes leftover after parsing attributes in process `syz.2.39'. [ 44.713438][ T527] FAT-fs (loop1): Directory bread(block 65) failed [ 44.725153][ T517] F2FS-fs (loop4): invalid crc value [ 44.732405][ T527] FAT-fs (loop1): Directory bread(block 66) failed [ 44.739205][ T527] FAT-fs (loop1): Directory bread(block 67) failed [ 44.746317][ T527] FAT-fs (loop1): Directory bread(block 68) failed [ 44.753785][ T527] FAT-fs (loop1): Directory bread(block 69) failed [ 44.760503][ T527] FAT-fs (loop1): Directory bread(block 70) failed [ 44.767093][ T527] FAT-fs (loop1): Directory bread(block 71) failed [ 44.773746][ T527] FAT-fs (loop1): Directory bread(block 72) failed [ 44.791989][ T340] usb 4-1: Using ep0 maxpacket: 8 [ 44.808399][ T340] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 44.819945][ T527] FAT-fs (loop1): Directory bread(block 73) failed [ 44.859487][ T340] usb 4-1: New USB device found, idVendor=0458, idProduct=501a, bcdDevice= 0.00 [ 44.897007][ T517] F2FS-fs (loop4): Found nat_bits in checkpoint [ 44.911208][ T340] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.284525][ T540] loop0: detected capacity change from 0 to 256 [ 45.291418][ T540] exfat: Deprecated parameter 'namecase' [ 45.297143][ T540] exfat: Deprecated parameter 'utf8' [ 45.305370][ T540] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 45.340146][ T537] overlayfs: filesystem on './file0' not supported [ 45.347766][ T340] usb 4-1: config 0 descriptor?? [ 45.367304][ T340] usb 4-1: can't set config #0, error -71 [ 45.757065][ T517] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 45.772691][ T517] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 45.809110][ T548] loop3: detected capacity change from 0 to 512 [ 47.196653][ T517] syz.4.34 (517) used greatest stack depth: 22000 bytes left [ 47.435140][ T340] usb 4-1: USB disconnect, device number 4 [ 47.449824][ T548] EXT4-fs: Ignoring removed i_version option [ 47.456414][ T548] EXT4-fs: Ignoring removed mblk_io_submit option [ 47.472552][ T548] EXT4-fs: dax option not supported [ 47.498994][ T28] kauditd_printk_skb: 37 callbacks suppressed [ 47.499009][ T28] audit: type=1400 audit(1757883742.310:231): avc: denied { ioctl } for pid=555 comm="syz.1.44" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=16774 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 47.519308][ T557] loop0: detected capacity change from 0 to 512 [ 47.541001][ T557] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 47.544323][ T28] audit: type=1400 audit(1757883742.360:232): avc: denied { create } for pid=555 comm="syz.1.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 47.569336][ T28] audit: type=1400 audit(1757883742.370:233): avc: denied { setopt } for pid=555 comm="syz.1.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 47.625939][ T567] loop3: detected capacity change from 0 to 512 [ 47.634477][ T557] Quota error (device loop0): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 47.645636][ T558] mmap: syz.1.44 (558) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 47.663205][ T28] audit: type=1400 audit(1757883742.480:234): avc: denied { unlink } for pid=571 comm="syz.2.47" name="#1" dev="tmpfs" ino=67 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 47.685153][ T557] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 47.698081][ T567] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 47.702594][ T557] EXT4-fs error (device loop0): ext4_acquire_dquot:6801: comm syz.0.43: Failed to acquire dquot type 1 [ 47.730235][ T557] EXT4-fs (loop0): 1 truncate cleaned up [ 47.739740][ T557] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 47.761619][ T567] EXT4-fs (loop3): 1 truncate cleaned up [ 47.767464][ T567] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 47.854763][ T557] EXT4-fs error (device loop0): ext4_lookup:1862: inode #2: comm syz.0.43: deleted inode referenced: 12 [ 47.917450][ T28] audit: type=1400 audit(1757883742.730:235): avc: denied { create } for pid=590 comm="syz.1.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 48.007239][ T594] netlink: 4 bytes leftover after parsing attributes in process `syz.3.46'. [ 48.074043][ T28] audit: type=1326 audit(1757883742.810:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=566 comm="syz.3.46" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8574f8eba9 code=0x7ffc0000 [ 48.198837][ T28] audit: type=1326 audit(1757883742.810:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=566 comm="syz.3.46" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8574f8eba9 code=0x7ffc0000 [ 48.231033][ T28] audit: type=1326 audit(1757883742.810:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=566 comm="syz.3.46" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8574f8eba9 code=0x7ffc0000 [ 48.297091][ T284] EXT4-fs (loop0): unmounting filesystem. [ 48.393124][ T604] netlink: 64 bytes leftover after parsing attributes in process `syz.4.48'. [ 48.498940][ T605] loop4: detected capacity change from 0 to 512 [ 48.505605][ T605] EXT4-fs: Ignoring removed i_version option [ 48.517575][ T283] EXT4-fs (loop3): unmounting filesystem. [ 48.553928][ T609] netlink: 104 bytes leftover after parsing attributes in process `syz.3.55'. [ 48.565995][ T605] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=e000c018, mo2=0002] [ 48.574102][ T605] System zones: 0-2, 18-18, 34-35 [ 48.580165][ T605] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 48.589103][ T605] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.731710][ T614] loop2: detected capacity change from 0 to 256 [ 48.745937][ T616] device bridge_slave_1 left promiscuous mode [ 48.770272][ T614] exfat: Unknown parameter './bus' [ 48.775800][ T616] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.783983][ T616] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 48.837638][ T616] netlink: 4 bytes leftover after parsing attributes in process `syz.3.58'. [ 48.932095][ T599] loop0: detected capacity change from 0 to 2048 [ 48.986753][ T599] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 48.989058][ T627] loop1: detected capacity change from 0 to 256 [ 49.070801][ T629] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32798 sclass=netlink_route_socket pid=629 comm=syz.0.54 [ 49.163620][ T627] FAT-fs (loop1): Directory bread(block 64) failed [ 49.183913][ T627] FAT-fs (loop1): Directory bread(block 65) failed [ 49.190560][ T627] FAT-fs (loop1): Directory bread(block 66) failed [ 49.197171][ T627] FAT-fs (loop1): Directory bread(block 67) failed [ 49.203781][ T627] FAT-fs (loop1): Directory bread(block 68) failed [ 49.211004][ T627] FAT-fs (loop1): Directory bread(block 69) failed [ 49.218110][ T627] FAT-fs (loop1): Directory bread(block 70) failed [ 49.224732][ T627] FAT-fs (loop1): Directory bread(block 71) failed [ 49.231443][ T627] FAT-fs (loop1): Directory bread(block 72) failed [ 49.238038][ T627] FAT-fs (loop1): Directory bread(block 73) failed [ 49.245080][ T285] EXT4-fs (loop4): unmounting filesystem. [ 49.498430][ T284] EXT4-fs (loop0): unmounting filesystem. [ 50.168137][ T636] syz.4.62[636] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 50.168246][ T636] syz.4.62[636] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 50.495113][ T622] loop2: detected capacity change from 0 to 131072 [ 50.523263][ T622] F2FS-fs (loop2): Invalid log sectorsize (67108873) [ 50.544207][ T622] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 50.568243][ T622] F2FS-fs (loop2): invalid crc value [ 50.623011][ T622] F2FS-fs (loop2): Found nat_bits in checkpoint [ 50.730339][ T622] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 50.737503][ T622] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 50.987774][ T663] loop3: detected capacity change from 0 to 2048 [ 50.997748][ T623] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 51.173830][ T663] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 51.182784][ T663] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.320022][ T623] usb 2-1: Using ep0 maxpacket: 32 [ 51.333842][ T623] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 51.529652][ T623] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 51.979867][ C0] sched: RT throttling activated [ 51.998707][ T670] loop0: detected capacity change from 0 to 1024 [ 52.013387][ T623] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 52.023795][ T623] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.045982][ T623] usb 2-1: config 0 descriptor?? [ 52.070645][ T670] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 52.087963][ T623] hub 2-1:0.0: USB hub found [ 52.102216][ T649] loop4: detected capacity change from 0 to 40427 [ 52.108892][ T670] EXT4-fs (loop0): shut down requested (1) [ 52.116021][ T670] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 52.116531][ T283] EXT4-fs (loop3): unmounting filesystem. [ 52.126568][ T670] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 52.149655][ T649] F2FS-fs (loop4): invalid crc value [ 52.167448][ T284] EXT4-fs (loop0): unmounting filesystem. [ 52.172879][ T673] loop3: detected capacity change from 0 to 256 [ 52.197900][ T649] F2FS-fs (loop4): Found nat_bits in checkpoint [ 52.288849][ T623] hub 2-1:0.0: 1 port detected [ 52.307724][ T649] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 52.476103][ T687] loop0: detected capacity change from 0 to 256 [ 52.500447][ T687] FAT-fs (loop0): Directory bread(block 64) failed [ 52.505499][ T655] loop1: detected capacity change from 0 to 2048 [ 52.507833][ T687] FAT-fs (loop0): Directory bread(block 65) failed [ 52.520582][ T687] FAT-fs (loop0): Directory bread(block 66) failed [ 52.527287][ T687] FAT-fs (loop0): Directory bread(block 67) failed [ 52.536006][ T687] FAT-fs (loop0): Directory bread(block 68) failed [ 52.543348][ T687] FAT-fs (loop0): Directory bread(block 69) failed [ 52.544733][ T655] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 52.550066][ T687] FAT-fs (loop0): Directory bread(block 70) failed [ 52.565719][ T687] FAT-fs (loop0): Directory bread(block 71) failed [ 52.573848][ T687] FAT-fs (loop0): Directory bread(block 72) failed [ 52.580791][ T687] FAT-fs (loop0): Directory bread(block 73) failed [ 52.685929][ T28] kauditd_printk_skb: 29 callbacks suppressed [ 52.685945][ T28] audit: type=1400 audit(1757883747.500:268): avc: denied { map } for pid=653 comm="syz.1.68" path="/17/file1/memory.stat" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 52.729458][ T655] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 52.744325][ T655] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 52.749947][ T309] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 52.756947][ T655] EXT4-fs (loop1): This should not happen!! Data will be lost [ 52.756947][ T655] [ 52.897938][ T655] EXT4-fs (loop1): Total free blocks count 0 [ 52.980068][ T309] usb 5-1: Using ep0 maxpacket: 16 [ 53.017151][ T309] usb 5-1: unable to get BOS descriptor or descriptor too short [ 53.031025][ T655] EXT4-fs (loop1): Free/Dirty block details [ 53.154584][ T655] EXT4-fs (loop1): free_blocks=2415919504 [ 53.192786][ T309] usb 5-1: config 13 has an invalid interface number: 50 but max is 0 [ 53.269106][ T655] EXT4-fs (loop1): dirty_blocks=5056 [ 53.412711][ T309] usb 5-1: config 13 has no interface number 0 [ 53.419053][ T655] EXT4-fs (loop1): Block reservation details [ 53.435056][ T696] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 53.449933][ T309] usb 5-1: config 13 interface 50 altsetting 167 bulk endpoint 0x8 has invalid maxpacket 16 [ 53.460544][ T655] EXT4-fs (loop1): i_reserved_data_blocks=316 [ 53.480492][ T309] usb 5-1: config 13 interface 50 has no altsetting 0 [ 53.508416][ T697] netlink: 12 bytes leftover after parsing attributes in process `syz.2.76'. [ 53.518963][ T309] usb 5-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32 [ 53.543927][ T623] hub 2-1:0.0: hub_hub_status failed (err = -32) [ 53.554572][ T623] hub 2-1:0.0: config failed, can't get hub status (err -32) [ 53.572359][ T309] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.588640][ T700] loop2: detected capacity change from 0 to 512 [ 53.600484][ T309] usb 5-1: Product: syz [ 53.605617][ T623] usbhid 2-1:0.0: can't add hid device: -32 [ 53.616606][ T623] usbhid: probe of 2-1:0.0 failed with error -32 [ 53.629896][ T309] usb 5-1: Manufacturer: syz [ 53.638887][ T696] device veth0_vlan left promiscuous mode [ 53.645661][ T309] usb 5-1: SerialNumber: syz [ 53.671644][ T696] device veth0_vlan entered promiscuous mode [ 53.679989][ T685] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 53.694512][ T696] device veth1_macvtap left promiscuous mode [ 53.701628][ T696] device veth1_macvtap entered promiscuous mode [ 53.708906][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.726431][ T700] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.76: casefold flag without casefold feature [ 53.738735][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.747768][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.755923][ T700] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.76: couldn't read orphan inode 15 (err -117) [ 53.758874][ T28] audit: type=1400 audit(1757883748.580:269): avc: denied { read } for pid=704 comm="syz.0.78" name="uinput" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 53.769721][ T334] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.797556][ T334] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.798253][ T705] input: syz1 as /devices/virtual/input/input4 [ 53.805322][ T700] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 53.820470][ T28] audit: type=1400 audit(1757883748.620:270): avc: denied { open } for pid=704 comm="syz.0.78" path="/dev/uinput" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 53.843792][ T28] audit: type=1400 audit(1757883748.620:271): avc: denied { ioctl } for pid=704 comm="syz.0.78" path="/dev/uinput" dev="devtmpfs" ino=262 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 53.851759][ T705] loop0: detected capacity change from 0 to 256 [ 53.881687][ T705] FAT-fs (loop0): Unrecognized mount option "ÿÿÿÿÿÿÿÿÒ<ö앳¸ ±ú#3”Æ" or missing value [ 53.894437][ T309] usb 5-1: MIDIStreaming interface descriptor not found [ 53.894727][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.905071][ T309] usb 5-1: USB disconnect, device number 3 [ 53.922503][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.933787][ T334] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.940907][ T334] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.948615][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.957110][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 53.965431][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.969303][ T28] audit: type=1400 audit(1757883748.640:272): avc: denied { read } for pid=87 comm="acpid" name="event3" dev="devtmpfs" ino=662 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 53.973580][ T471] usb 2-1: USB disconnect, device number 2 [ 53.996020][ T28] audit: type=1400 audit(1757883748.640:273): avc: denied { open } for pid=87 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=662 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 54.025324][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 54.036414][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.044839][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.050529][ T28] audit: type=1400 audit(1757883748.640:274): avc: denied { ioctl } for pid=87 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=662 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 54.060352][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.085911][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.096048][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.104364][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 54.112826][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 54.121350][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 54.129595][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 54.138106][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.146231][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.154443][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.162445][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.170591][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 54.178904][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 54.187563][ T360] udevd[360]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:13.50/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 54.187823][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 54.211726][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 54.219647][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 54.227237][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 54.234690][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 54.242921][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 54.251096][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 54.265753][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.350512][ T696] syz.2.76 (696) used greatest stack depth: 20040 bytes left [ 54.360279][ T286] EXT4-fs (loop2): unmounting filesystem. [ 54.395023][ T43] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 6 with error 28 [ 54.410022][ T340] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 54.467518][ T714] loop1: detected capacity change from 0 to 512 [ 54.474717][ T714] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 54.486782][ T714] EXT4-fs (loop1): 1 truncate cleaned up [ 54.492706][ T714] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 54.512993][ T712] loop3: detected capacity change from 0 to 512 [ 54.566216][ T712] EXT4-fs: test_dummy_encryption requires encrypt feature [ 54.599814][ T28] audit: type=1400 audit(1757883749.410:275): avc: denied { getopt } for pid=708 comm="syz.3.79" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 54.691380][ T719] netlink: 4 bytes leftover after parsing attributes in process `syz.1.81'. [ 54.705972][ T28] audit: type=1326 audit(1757883749.500:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=713 comm="syz.1.81" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcfab8eba9 code=0x7ffc0000 [ 54.848496][ T28] audit: type=1326 audit(1757883749.500:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=713 comm="syz.1.81" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcfab8eba9 code=0x7ffc0000 [ 54.870354][ T340] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 54.888147][ T340] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 54.897983][ T340] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 54.911110][ T340] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 54.920251][ T340] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.934697][ T340] usb 1-1: config 0 descriptor?? [ 55.194793][ T724] loop3: detected capacity change from 0 to 256 [ 55.353214][ T340] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 55.363080][ T282] EXT4-fs (loop1): unmounting filesystem. [ 55.375540][ T340] plantronics 0003:047F:FFFF.0001: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 55.428482][ T739] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 55.796538][ T745] loop2: detected capacity change from 0 to 1024 [ 55.965080][ T336] usb 1-1: USB disconnect, device number 3 [ 56.001516][ T745] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 56.010163][ T745] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.023683][ T745] EXT4-fs error (device loop2): ext4_map_blocks:745: inode #15: block 3: comm syz.2.88: lblock 3 mapped to illegal pblock 3 (length 3) [ 56.038359][ T745] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 56.050729][ T745] EXT4-fs (loop2): This should not happen!! Data will be lost [ 56.050729][ T745] [ 56.061349][ T745] EXT4-fs error (device loop2): ext4_map_blocks:745: inode #15: block 8: comm syz.2.88: lblock 8 mapped to illegal pblock 8 (length 8) [ 56.100041][ T745] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 56.112503][ T745] EXT4-fs (loop2): This should not happen!! Data will be lost [ 56.112503][ T745] [ 56.122658][ T745] EXT4-fs error (device loop2): ext4_map_blocks:635: inode #15: block 3: comm syz.2.88: lblock 3 mapped to illegal pblock 3 (length 1) [ 56.185220][ T286] EXT4-fs (loop2): unmounting filesystem. [ 56.200447][ T755] loop3: detected capacity change from 0 to 512 [ 56.231610][ T755] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 56.241165][ T755] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.441146][ T755] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 56.456220][ T755] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 13 with max blocks 2048 with error 28 [ 56.470400][ T755] EXT4-fs (loop3): This should not happen!! Data will be lost [ 56.470400][ T755] [ 56.488484][ T39] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 56.498723][ T755] EXT4-fs (loop3): Total free blocks count 0 [ 56.505458][ T755] EXT4-fs (loop3): Free/Dirty block details [ 56.508995][ T772] loop4: detected capacity change from 0 to 256 [ 56.512716][ T755] EXT4-fs (loop3): free_blocks=65280 [ 56.523618][ T755] EXT4-fs (loop3): dirty_blocks=8193 [ 56.529320][ T755] EXT4-fs (loop3): Block reservation details [ 56.536026][ T755] EXT4-fs (loop3): i_reserved_data_blocks=8193 [ 56.568779][ T760] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 2062 with max blocks 2048 with error 28 [ 56.590978][ T776] netlink: 4 bytes leftover after parsing attributes in process `syz.4.96'. [ 56.621263][ T776] netlink: 4 bytes leftover after parsing attributes in process `syz.4.96'. [ 56.715750][ T782] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 56.740523][ T39] usb 3-1: Using ep0 maxpacket: 32 [ 56.746870][ T39] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 56.774527][ T39] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 56.784442][ T39] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 56.824783][ T39] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.868923][ T39] usb 3-1: config 0 descriptor?? [ 56.898647][ T39] hub 3-1:0.0: USB hub found [ 56.919446][ T787] loop3: detected capacity change from 0 to 128 [ 56.946993][ T787] EXT4-fs (loop3): Test dummy encryption mode enabled [ 56.976105][ T787] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 56.987886][ T787] ext4 filesystem being mounted at /21/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 57.102997][ T39] hub 3-1:0.0: 1 port detected [ 57.311734][ T757] loop2: detected capacity change from 0 to 512 [ 57.339437][ T757] EXT4-fs (loop2): orphan cleanup on readonly fs [ 57.352247][ T757] EXT4-fs warning (device loop2): ext4_enable_quotas:7053: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 57.367121][ T757] EXT4-fs (loop2): Cannot turn on quotas: error -5 [ 57.374978][ T757] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.91: bg 0: block 64: padding at end of block bitmap is not set [ 57.389594][ T757] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 57.399158][ T757] EXT4-fs (loop2): 1 orphan inode deleted [ 57.405156][ T757] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 57.441549][ T39] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 57.447927][ T39] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 57.550495][ T39] usbhid 3-1:0.0: can't add hid device: -71 [ 57.566323][ T39] usbhid: probe of 3-1:0.0 failed with error -71 [ 57.610335][ T39] usb 3-1: USB disconnect, device number 2 [ 57.821997][ T283] EXT4-fs (loop3): unmounting filesystem. [ 57.921577][ T819] Driver unsupported XDP return value 0 on prog (id 96) dev N/A, expect packet loss! [ 57.931973][ T28] kauditd_printk_skb: 16 callbacks suppressed [ 57.931987][ T28] audit: type=1400 audit(1757883752.750:293): avc: denied { setopt } for pid=818 comm="syz.1.108" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 57.970497][ T286] EXT4-fs (loop2): unmounting filesystem. [ 58.018765][ T28] audit: type=1400 audit(1757883752.830:294): avc: denied { ioctl } for pid=808 comm="syz.0.105" path="socket:[17216]" dev="sockfs" ino=17216 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 58.045284][ T827] netlink: 4 bytes leftover after parsing attributes in process `syz.1.110'. [ 58.061602][ T827] netlink: 4 bytes leftover after parsing attributes in process `syz.1.110'. [ 58.153600][ T824] bridge0: port 3(vlan2) entered blocking state [ 58.161979][ T811] loop3: detected capacity change from 0 to 16 [ 58.172797][ T830] loop1: detected capacity change from 0 to 128 [ 58.176280][ T811] erofs: Unknown parameter 'B‘»¸J>?¢ÔQa¯¢WõˆÕ-¨§T˜Û%' [ 58.186525][ T824] bridge0: port 3(vlan2) entered disabled state [ 58.200227][ T830] ext4: Unknown parameter 'hash' [ 58.494248][ T841] netlink: 24 bytes leftover after parsing attributes in process `syz.2.114'. [ 58.506111][ T28] audit: type=1400 audit(1757883753.310:295): avc: denied { nlmsg_read } for pid=837 comm="syz.2.114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 58.984011][ T851] incfs: Error accessing: ./file0. [ 58.989601][ T851] incfs: mount failed -20 [ 59.076011][ T853] loop1: detected capacity change from 0 to 256 [ 59.495044][ T28] audit: type=1400 audit(1757883754.310:296): avc: denied { mount } for pid=854 comm="syz.0.118" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 59.519542][ T862] loop0: detected capacity change from 0 to 256 [ 59.535676][ T28] audit: type=1400 audit(1757883754.350:297): avc: denied { write } for pid=863 comm="syz.4.121" name="uinput" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 59.535683][ T864] input: syz0 as /devices/virtual/input/input5 [ 59.622574][ T39] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 59.669936][ T6] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 59.824525][ T39] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 59.834544][ T39] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.844064][ T39] usb 2-1: Product: syz [ 59.848875][ T39] usb 2-1: Manufacturer: syz [ 59.854790][ T39] usb 2-1: SerialNumber: syz [ 59.886153][ T39] usb 2-1: config 0 descriptor?? [ 60.009913][ T6] usb 4-1: Using ep0 maxpacket: 32 [ 60.016305][ T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 60.027323][ T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 60.037240][ T6] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 60.046383][ T6] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.055164][ T6] usb 4-1: config 0 descriptor?? [ 60.061125][ T6] hub 4-1:0.0: USB hub found [ 60.258539][ T28] audit: type=1400 audit(1757883755.070:298): avc: denied { unmount } for pid=284 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 60.263849][ T6] hub 4-1:0.0: 1 port detected [ 60.430310][ T878] tipc: Started in network mode [ 60.562167][ T878] tipc: Node identity ac14140f, cluster identity 4711 [ 61.047244][ T878] tipc: New replicast peer: 255.255.255.255 [ 61.059815][ T878] tipc: Enabled bearer , priority 10 [ 61.067845][ T28] audit: type=1400 audit(1757883755.890:299): avc: denied { getattr } for pid=877 comm="syz.0.125" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 61.068099][ T878] overlayfs: statfs failed on './file0' [ 61.105618][ T28] audit: type=1400 audit(1757883755.920:300): avc: denied { watch } for pid=856 comm="syz.3.119" path="/24/control" dev="tmpfs" ino=161 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 61.129430][ T6] hub 4-1:0.0: hub_hub_status failed (err = -71) [ 61.141795][ T6] hub 4-1:0.0: config failed, can't get hub status (err -71) [ 61.156184][ T6] usbhid 4-1:0.0: can't add hid device: -71 [ 61.162659][ T6] usbhid: probe of 4-1:0.0 failed with error -71 [ 61.201544][ T6] usb 4-1: USB disconnect, device number 5 [ 61.205722][ T28] audit: type=1400 audit(1757883755.990:301): avc: denied { map } for pid=886 comm="syz.0.127" path="/dev/usbmon0" dev="devtmpfs" ino=159 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 61.241885][ T891] loop0: detected capacity change from 0 to 4096 [ 61.248835][ T28] audit: type=1400 audit(1757883756.060:302): avc: denied { remount } for pid=890 comm="syz.0.128" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 61.323376][ T337] I/O error, dev loop0, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 61.389954][ T24] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 61.590225][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 61.598221][ T24] usb 5-1: unable to get BOS descriptor or descriptor too short [ 61.610591][ T24] usb 5-1: config 1 has an invalid interface number: 4 but max is 2 [ 61.619308][ T24] usb 5-1: config 1 has an invalid interface descriptor of length 6, skipping [ 61.631792][ T24] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 61.643854][ T24] usb 5-1: config 1 has no interface number 1 [ 61.650242][ T24] usb 5-1: config 1 interface 4 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 8 [ 61.663590][ T24] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 61.685890][ T24] usb 5-1: config 1 interface 4 has no altsetting 0 [ 61.702967][ T24] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 61.712269][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.721010][ T24] usb 5-1: Product: syz [ 61.725281][ T24] usb 5-1: Manufacturer: syz [ 61.730244][ T24] usb 5-1: SerialNumber: syz [ 61.950336][ T39] usb-storage 2-1:0.0: USB Mass Storage device detected [ 62.004050][ T912] loop1: detected capacity change from 0 to 128 [ 62.021437][ T912] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 62.030269][ T912] ext4 filesystem being mounted at /31/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 62.112731][ T39] usb 2-1: USB disconnect, device number 3 [ 62.180306][ T6] tipc: Node number set to 2886997007 [ 62.221986][ T282] EXT4-fs (loop1): unmounting filesystem. [ 62.270146][ T919] loop2: detected capacity change from 0 to 128 [ 62.384702][ T919] syz.2.136: attempt to access beyond end of device [ 62.384702][ T919] loop2: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 62.413860][ T919] syz.2.136: attempt to access beyond end of device [ 62.413860][ T919] loop2: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 62.428231][ T919] syz.2.136: attempt to access beyond end of device [ 62.428231][ T919] loop2: rw=0, sector=145, nr_sectors = 8 limit=128 [ 62.442015][ T919] syz.2.136: attempt to access beyond end of device [ 62.442015][ T919] loop2: rw=0, sector=145, nr_sectors = 8 limit=128 [ 62.460095][ T919] syz.2.136: attempt to access beyond end of device [ 62.460095][ T919] loop2: rw=0, sector=145, nr_sectors = 8 limit=128 [ 62.473647][ T919] syz.2.136: attempt to access beyond end of device [ 62.473647][ T919] loop2: rw=0, sector=145, nr_sectors = 8 limit=128 [ 62.487084][ T919] syz.2.136: attempt to access beyond end of device [ 62.487084][ T919] loop2: rw=0, sector=145, nr_sectors = 8 limit=128 [ 62.501887][ T919] syz.2.136: attempt to access beyond end of device [ 62.501887][ T919] loop2: rw=0, sector=145, nr_sectors = 8 limit=128 [ 62.520613][ T919] syz.2.136: attempt to access beyond end of device [ 62.520613][ T919] loop2: rw=0, sector=145, nr_sectors = 8 limit=128 [ 62.558963][ T919] syz.2.136: attempt to access beyond end of device [ 62.558963][ T919] loop2: rw=0, sector=145, nr_sectors = 8 limit=128 [ 62.801119][ T24] usb 5-1: 2:1 : invalid UAC_AS_GENERAL desc [ 62.816090][ T24] usb 5-1: USB disconnect, device number 4 [ 63.069914][ T6] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 63.099952][ T39] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 63.108365][ T337] udevd[337]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 63.259661][ T947] loop2: detected capacity change from 0 to 16 [ 63.259979][ T6] usb 1-1: Using ep0 maxpacket: 32 [ 63.273387][ T6] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 63.292976][ T947] erofs: (device loop2): mounted with root inode @ nid 36. [ 63.300671][ T6] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 63.301575][ T39] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 63.319911][ T6] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 63.332389][ T39] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 63.340223][ T6] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.351652][ T39] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 63.440022][ T39] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 63.443978][ T6] usb 1-1: config 0 descriptor?? [ 63.461703][ T949] loop4: detected capacity change from 0 to 4096 [ 63.471246][ T39] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 63.476276][ T6] hub 1-1:0.0: USB hub found [ 63.498270][ T39] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 63.546156][ T39] usb 2-1: Manufacturer: syz [ 63.600303][ T39] usb 2-1: config 0 descriptor?? [ 63.635233][ T949] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 63.700490][ T6] hub 1-1:0.0: 1 port detected [ 63.719748][ T955] loop2: detected capacity change from 0 to 128 [ 63.813808][ T285] EXT4-fs (loop4): unmounting filesystem. [ 63.906314][ T6] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 63.925755][ T6] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 63.946742][ T6] usbhid 1-1:0.0: can't add hid device: -71 [ 63.957065][ T6] usbhid: probe of 1-1:0.0 failed with error -71 [ 63.966060][ T964] loop2: detected capacity change from 0 to 256 [ 63.992318][ T964] FAT-fs (loop2): Directory bread(block 64) failed [ 64.003202][ T964] FAT-fs (loop2): Directory bread(block 65) failed [ 64.012535][ T39] appleir 0003:05AC:8243.0002: unknown main item tag 0x0 [ 64.021264][ T6] usb 1-1: USB disconnect, device number 4 [ 64.030024][ T39] appleir 0003:05AC:8243.0002: No inputs registered, leaving [ 64.037623][ T964] FAT-fs (loop2): Directory bread(block 66) failed [ 64.047374][ T39] appleir 0003:05AC:8243.0002: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 64.058625][ T964] FAT-fs (loop2): Directory bread(block 67) failed [ 64.071992][ T964] FAT-fs (loop2): Directory bread(block 68) failed [ 64.089954][ T964] FAT-fs (loop2): Directory bread(block 69) failed [ 64.102061][ T966] loop4: detected capacity change from 0 to 8192 [ 64.103480][ T964] FAT-fs (loop2): Directory bread(block 70) failed [ 64.119923][ T964] FAT-fs (loop2): Directory bread(block 71) failed [ 64.130320][ T964] FAT-fs (loop2): Directory bread(block 72) failed [ 64.140030][ T964] FAT-fs (loop2): Directory bread(block 73) failed [ 64.482411][ T977] loop4: detected capacity change from 0 to 256 [ 64.492228][ T977] exfat: Unknown parameter '00000000000000000086V' [ 64.531074][ T337] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 64.815038][ T39] usb 2-1: USB disconnect, device number 4 [ 64.901934][ T983] netlink: 'syz.4.155': attribute type 5 has an invalid length. [ 64.916504][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 64.916518][ T28] audit: type=1400 audit(1757883759.730:312): avc: denied { bind } for pid=981 comm="syz.4.155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 64.980990][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 64.989388][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.998541][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 65.008441][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.017304][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.033436][ T28] audit: type=1400 audit(1757883759.850:313): avc: denied { create } for pid=981 comm="syz.4.155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 65.034812][ T1001] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1001 comm=syz.1.158 [ 65.068428][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.077294][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.087462][ T1006] loop1: detected capacity change from 0 to 256 [ 65.116485][ T1006] FAT-fs (loop1): Directory bread(block 64) failed [ 65.124293][ T1006] FAT-fs (loop1): Directory bread(block 65) failed [ 65.131412][ T1006] FAT-fs (loop1): Directory bread(block 66) failed [ 65.201386][ T1006] FAT-fs (loop1): Directory bread(block 67) failed [ 65.202466][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.217085][ T1006] FAT-fs (loop1): Directory bread(block 68) failed [ 65.230472][ T1006] FAT-fs (loop1): Directory bread(block 69) failed [ 65.237126][ T1006] FAT-fs (loop1): Directory bread(block 70) failed [ 65.251147][ T1006] FAT-fs (loop1): Directory bread(block 71) failed [ 65.260388][ T1006] FAT-fs (loop1): Directory bread(block 72) failed [ 65.260667][ T1010] loop4: detected capacity change from 0 to 512 [ 65.273508][ T1006] FAT-fs (loop1): Directory bread(block 73) failed [ 65.284550][ T1010] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 65.310887][ T28] audit: type=1400 audit(1757883760.130:314): avc: denied { mount } for pid=997 comm="syz.1.158" name="/" dev="selinuxfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 65.338758][ T1010] EXT4-fs (loop4): 1 truncate cleaned up [ 65.352274][ T1010] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 65.547713][ T1014] netlink: 4 bytes leftover after parsing attributes in process `syz.4.161'. [ 65.561880][ T1014] netlink: 4 bytes leftover after parsing attributes in process `syz.4.161'. [ 65.639997][ T28] audit: type=1326 audit(1757883760.350:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1009 comm="syz.4.161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f302b78eba9 code=0x7ffc0000 [ 65.779477][ T28] audit: type=1326 audit(1757883760.350:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1009 comm="syz.4.161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f302b78eba9 code=0x7ffc0000 [ 65.803512][ T28] audit: type=1326 audit(1757883760.360:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1009 comm="syz.4.161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f302b78eba9 code=0x7ffc0000 [ 65.826846][ T28] audit: type=1326 audit(1757883760.360:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1009 comm="syz.4.161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f302b78eba9 code=0x7ffc0000 [ 65.865038][ T1016] loop2: detected capacity change from 0 to 512 [ 65.888905][ T1016] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 65.903046][ T28] audit: type=1326 audit(1757883760.360:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1009 comm="syz.4.161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f302b78eba9 code=0x7ffc0000 [ 65.959790][ T1016] EXT4-fs (loop2): 1 truncate cleaned up [ 65.969879][ T1016] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 66.010085][ T28] audit: type=1326 audit(1757883760.360:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1009 comm="syz.4.161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=196 compat=0 ip=0x7f302b78eba9 code=0x7ffc0000 [ 66.106023][ T28] audit: type=1326 audit(1757883760.360:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1009 comm="syz.4.161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f302b78eba9 code=0x7ffc0000 [ 66.180649][ T285] EXT4-fs (loop4): unmounting filesystem. [ 66.286454][ T1025] netlink: 4 bytes leftover after parsing attributes in process `syz.2.162'. [ 66.304696][ T1025] netlink: 4 bytes leftover after parsing attributes in process `syz.2.162'. [ 66.584431][ T1027] loop4: detected capacity change from 0 to 256 [ 66.614692][ T1027] FAT-fs (loop4): Directory bread(block 64) failed [ 66.635668][ T1027] FAT-fs (loop4): Directory bread(block 65) failed [ 66.660103][ T1027] FAT-fs (loop4): Directory bread(block 66) failed [ 66.689959][ T1027] FAT-fs (loop4): Directory bread(block 67) failed [ 66.696562][ T1027] FAT-fs (loop4): Directory bread(block 68) failed [ 66.720011][ T1027] FAT-fs (loop4): Directory bread(block 69) failed [ 66.726609][ T1027] FAT-fs (loop4): Directory bread(block 70) failed [ 66.755179][ T1027] FAT-fs (loop4): Directory bread(block 71) failed [ 66.762466][ T286] EXT4-fs (loop2): unmounting filesystem. [ 66.771564][ T1027] FAT-fs (loop4): Directory bread(block 72) failed [ 66.790116][ T1027] FAT-fs (loop4): Directory bread(block 73) failed [ 66.802676][ T1031] loop2: detected capacity change from 0 to 1024 [ 66.816259][ T1031] EXT4-fs (loop2): Test dummy encryption mode enabled [ 66.907709][ T1031] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 67.454363][ T1059] loop4: detected capacity change from 0 to 256 [ 67.475529][ T1059] FAT-fs (loop4): Directory bread(block 64) failed [ 67.492948][ T1059] FAT-fs (loop4): Directory bread(block 65) failed [ 67.499559][ T1059] FAT-fs (loop4): Directory bread(block 66) failed [ 67.515387][ T1059] FAT-fs (loop4): Directory bread(block 67) failed [ 67.526015][ T1059] FAT-fs (loop4): Directory bread(block 68) failed [ 67.533359][ T1059] FAT-fs (loop4): Directory bread(block 69) failed [ 67.540234][ T1059] FAT-fs (loop4): Directory bread(block 70) failed [ 67.546860][ T1059] FAT-fs (loop4): Directory bread(block 71) failed [ 67.553720][ T1059] FAT-fs (loop4): Directory bread(block 72) failed [ 67.560515][ T1059] FAT-fs (loop4): Directory bread(block 73) failed [ 67.702785][ T286] EXT4-fs (loop2): unmounting filesystem. [ 67.856166][ T1092] loop1: detected capacity change from 0 to 8192 [ 68.126340][ T471] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 68.135334][ T1097] bridge: RTM_NEWNEIGH with invalid ether address [ 68.247825][ T1101] syz.1.184[1101] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 68.248394][ T1101] syz.1.184[1101] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 68.489763][ T471] usb 4-1: Using ep0 maxpacket: 16 [ 68.645065][ T471] usb 4-1: unable to get BOS descriptor or descriptor too short [ 68.797560][ T471] usb 4-1: config 13 has an invalid interface number: 50 but max is 0 [ 68.826219][ T471] usb 4-1: config 13 has no interface number 0 [ 68.833212][ T471] usb 4-1: config 13 interface 50 altsetting 167 bulk endpoint 0x8 has invalid maxpacket 16 [ 68.859918][ T471] usb 4-1: config 13 interface 50 has no altsetting 0 [ 68.869973][ T1109] loop2: detected capacity change from 0 to 128 [ 68.897850][ T471] usb 4-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32 [ 68.998763][ T471] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.015895][ T471] usb 4-1: Product: syz [ 69.023218][ T471] usb 4-1: Manufacturer: syz [ 69.027878][ T471] usb 4-1: SerialNumber: syz [ 69.049511][ T1085] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 69.351115][ T471] usb 4-1: MIDIStreaming interface descriptor not found [ 69.371360][ T471] usb 4-1: USB disconnect, device number 6 [ 69.536081][ T1130] loop3: detected capacity change from 0 to 256 [ 69.573353][ T1130] FAT-fs (loop3): Directory bread(block 64) failed [ 69.605751][ T1130] FAT-fs (loop3): Directory bread(block 65) failed [ 69.618710][ T1130] FAT-fs (loop3): Directory bread(block 66) failed [ 69.654272][ T1130] FAT-fs (loop3): Directory bread(block 67) failed [ 69.667511][ T1130] FAT-fs (loop3): Directory bread(block 68) failed [ 69.679623][ T1130] FAT-fs (loop3): Directory bread(block 69) failed [ 69.691968][ T1130] FAT-fs (loop3): Directory bread(block 70) failed [ 69.702905][ T1130] FAT-fs (loop3): Directory bread(block 71) failed [ 69.713862][ T1130] FAT-fs (loop3): Directory bread(block 72) failed [ 69.724814][ T1130] FAT-fs (loop3): Directory bread(block 73) failed [ 69.937612][ T1136] loop2: detected capacity change from 0 to 512 [ 69.979945][ T1136] EXT4-fs (loop2): can't mount with data=, fs mounted w/o journal [ 69.987778][ T1143] loop3: detected capacity change from 0 to 256 [ 70.011090][ T1143] FAT-fs (loop3): Directory bread(block 64) failed [ 70.026372][ T1143] FAT-fs (loop3): Directory bread(block 65) failed [ 70.042891][ T1143] FAT-fs (loop3): Directory bread(block 66) failed [ 70.065496][ T1145] capability: warning: `syz.2.197' uses 32-bit capabilities (legacy support in use) [ 70.077176][ T1143] FAT-fs (loop3): Directory bread(block 67) failed [ 70.088261][ T1143] FAT-fs (loop3): Directory bread(block 68) failed [ 70.107911][ T1143] FAT-fs (loop3): Directory bread(block 69) failed [ 70.118988][ T1143] FAT-fs (loop3): Directory bread(block 70) failed [ 70.189932][ T1143] FAT-fs (loop3): Directory bread(block 71) failed [ 70.197621][ T1143] FAT-fs (loop3): Directory bread(block 72) failed [ 70.204534][ T1143] FAT-fs (loop3): Directory bread(block 73) failed [ 71.040435][ T1160] loop2: detected capacity change from 0 to 1024 [ 71.049136][ T1160] EXT4-fs: Ignoring removed orlov option [ 71.057732][ T1160] EXT4-fs: Ignoring removed orlov option [ 71.063825][ T1160] EXT4-fs: Ignoring removed nobh option [ 71.100009][ T1160] EXT4-fs: Invalid want_extra_isize 130 [ 71.234706][ T28] kauditd_printk_skb: 38 callbacks suppressed [ 71.234724][ T28] audit: type=1400 audit(1757883766.050:360): avc: denied { create } for pid=1165 comm="syz.4.202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 71.290149][ T28] audit: type=1400 audit(1757883766.080:361): avc: denied { setopt } for pid=1168 comm="syz.2.203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 71.308307][ T1162] loop3: detected capacity change from 0 to 40427 [ 71.357860][ T28] audit: type=1400 audit(1757883766.170:362): avc: denied { mounton } for pid=1161 comm="syz.3.200" path="/39/file0" dev="tmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 71.358034][ T1162] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 71.409883][ T1162] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 71.430245][ T1162] F2FS-fs (loop3): invalid crc value [ 71.470775][ T1162] F2FS-fs (loop3): Found nat_bits in checkpoint [ 71.561480][ T1162] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 71.568565][ T1162] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 71.609904][ T335] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 71.743444][ T1162] overlayfs: './file0' not a directory [ 71.761091][ T28] audit: type=1400 audit(1757883766.580:363): avc: denied { getopt } for pid=1161 comm="syz.3.200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 71.809888][ T335] usb 1-1: Using ep0 maxpacket: 32 [ 71.817091][ T335] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 71.836647][ T335] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 71.855484][ T335] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 71.880163][ T1183] loop3: detected capacity change from 0 to 1024 [ 71.889458][ T335] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 71.900227][ T1183] EXT4-fs: test_dummy_encryption requires encrypt feature [ 71.918330][ T335] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.942405][ T335] usb 1-1: Product: syz [ 71.946981][ T335] usb 1-1: Manufacturer: syz [ 72.027784][ T335] usb 1-1: SerialNumber: syz [ 72.056227][ T1192] loop2: detected capacity change from 0 to 256 [ 72.074248][ T1192] FAT-fs (loop2): Directory bread(block 64) failed [ 72.080921][ T1192] FAT-fs (loop2): Directory bread(block 65) failed [ 72.087746][ T1192] FAT-fs (loop2): Directory bread(block 66) failed [ 72.094931][ T1192] FAT-fs (loop2): Directory bread(block 67) failed [ 72.110146][ T1192] FAT-fs (loop2): Directory bread(block 68) failed [ 72.125181][ T1192] FAT-fs (loop2): Directory bread(block 69) failed [ 72.149458][ T1192] FAT-fs (loop2): Directory bread(block 70) failed [ 72.156592][ T1192] FAT-fs (loop2): Directory bread(block 71) failed [ 72.177727][ T1192] FAT-fs (loop2): Directory bread(block 72) failed [ 72.216171][ T1192] FAT-fs (loop2): Directory bread(block 73) failed [ 72.279663][ T1198] capability: warning: `syz.1.212' uses deprecated v2 capabilities in a way that may be insecure [ 72.296021][ T1198] loop1: detected capacity change from 0 to 256 [ 72.321542][ T1200] netem: incorrect gi model size [ 72.326776][ T1200] netem: change failed [ 72.397603][ T28] audit: type=1400 audit(1757883767.210:364): avc: denied { sqpoll } for pid=1202 comm="syz.1.214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 72.670683][ T335] usb 1-1: 0:2 : does not exist [ 72.685984][ T335] usb 1-1: USB disconnect, device number 5 [ 72.694558][ T337] udevd[337]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 72.779240][ T1212] loop4: detected capacity change from 0 to 16 [ 72.790023][ T1212] erofs: (device loop4): erofs_read_inode: bogus i_mode (0) @ nid 36 [ 73.080116][ T463] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 73.728523][ T28] audit: type=1326 audit(1757883768.540:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1224 comm="syz.4.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f302b78eba9 code=0x7ffc0000 [ 73.812866][ T28] audit: type=1326 audit(1757883768.570:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1224 comm="syz.4.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f302b78eba9 code=0x7ffc0000 [ 73.827167][ T335] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 73.844008][ T28] audit: type=1326 audit(1757883768.570:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1224 comm="syz.4.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f302b78eba9 code=0x7ffc0000 [ 73.868161][ T28] audit: type=1326 audit(1757883768.570:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1224 comm="syz.4.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f302b78eba9 code=0x7ffc0000 [ 73.892956][ T28] audit: type=1326 audit(1757883768.570:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1224 comm="syz.4.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f302b78eba9 code=0x7ffc0000 [ 74.013153][ T1227] loop4: detected capacity change from 0 to 2048 [ 74.119966][ T335] usb 2-1: Using ep0 maxpacket: 16 [ 74.127064][ T335] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 74.205569][ T1227] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 74.308717][ T340] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 74.341675][ T335] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 74.364207][ T335] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 74.385955][ T1236] loop2: detected capacity change from 0 to 512 [ 74.392308][ T335] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 74.401493][ T335] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.409512][ T335] usb 2-1: Product: syz [ 74.422555][ T335] usb 2-1: Manufacturer: syz [ 74.433714][ T335] usb 2-1: SerialNumber: syz [ 74.466385][ T1247] loop0: detected capacity change from 0 to 256 [ 74.478844][ T1247] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 74.500360][ T1249] loop2: detected capacity change from 0 to 4096 [ 74.511517][ T1249] EXT4-fs (loop2): Test dummy encryption mode enabled [ 74.520414][ T1249] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 74.528715][ T1249] System zones: 0-5 [ 74.532823][ T340] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 74.533863][ T1249] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 74.545365][ T340] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 74.580112][ T340] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 74.598854][ T1249] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 74.607087][ T340] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.615637][ T1249] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.226: bg 0: block 248: padding at end of block bitmap is not set [ 74.634264][ T285] EXT4-fs (loop4): unmounting filesystem. [ 74.640117][ T340] usb 4-1: Product: syz [ 74.644295][ T340] usb 4-1: Manufacturer: syz [ 74.653799][ T335] usb 2-1: USB disconnect, device number 5 [ 74.682639][ T340] usb 4-1: SerialNumber: syz [ 74.695961][ T1257] loop4: detected capacity change from 0 to 512 [ 74.702874][ T286] EXT4-fs (loop2): unmounting filesystem. [ 74.710586][ T340] usb 4-1: config 0 descriptor?? [ 74.717090][ T1222] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 74.728317][ T1256] syz.4.227[1256] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 74.728414][ T1256] syz.4.227[1256] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 74.740188][ T1222] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 74.762551][ T1257] EXT4-fs (loop4): bad block size 8192 [ 74.787151][ T1257] loop4: detected capacity change from 0 to 512 [ 74.794935][ T1257] EXT4-fs (loop4): bad block size 8192 [ 74.799159][ T1261] loop2: detected capacity change from 0 to 256 [ 74.817384][ T1261] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x46ae1815, utbl_chksum : 0xe619d30d) [ 74.886142][ T1257] loop4: detected capacity change from 0 to 512 [ 74.896053][ T1261] exFAT-fs (loop2): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 74.906306][ T1257] EXT4-fs (loop4): bad block size 8192 [ 74.968619][ T1222] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 75.054438][ T1222] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 75.081541][ T1257] loop4: detected capacity change from 0 to 512 [ 75.163995][ T1257] EXT4-fs (loop4): bad block size 8192 [ 75.711199][ T1270] loop2: detected capacity change from 0 to 512 [ 75.720226][ T1271] netlink: 'syz.4.232': attribute type 16 has an invalid length. [ 75.758270][ T1270] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.231: casefold flag without casefold feature [ 75.771762][ T1271] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.232'. [ 75.798779][ T1270] EXT4-fs (loop2): Remounting filesystem read-only [ 75.806291][ T1270] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.231: couldn't read orphan inode 15 (err -117) [ 75.818573][ T1270] EXT4-fs (loop2): Remounting filesystem read-only [ 75.825346][ T1270] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 75.896420][ T1270] binder: 1269:1270 ioctl c0306201 200000002800 returned -14 [ 76.058368][ T340] Error reading MAC address [ 76.067271][ T286] EXT4-fs (loop2): unmounting filesystem. [ 76.423378][ T1291] netlink: 'syz.1.237': attribute type 4 has an invalid length. [ 76.434737][ T1291] netlink: 'syz.1.237': attribute type 4 has an invalid length. [ 76.447841][ T28] kauditd_printk_skb: 30 callbacks suppressed [ 76.447856][ T28] audit: type=1400 audit(1757883771.270:400): avc: denied { watch } for pid=1287 comm="syz.2.236" path="/50/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 76.480128][ T1292] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 76.498743][ T28] audit: type=1400 audit(1757883771.310:401): avc: denied { relabelto } for pid=1287 comm="syz.2.236" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 76.578731][ T28] audit: type=1400 audit(1757883771.330:402): avc: denied { associate } for pid=1287 comm="syz.2.236" name="/" dev="cgroup2" ino=1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0" [ 76.949967][ T1102] usb 2-1: new low-speed USB device number 6 using dummy_hcd [ 76.959702][ T1311] loop2: detected capacity change from 0 to 128 [ 76.994844][ T1311] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 77.009784][ T1311] System zones: 1-3, 19-19, 35-36 [ 77.015591][ T1311] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 77.025721][ T1311] ext4 filesystem being mounted at /54/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 77.069450][ T1311] EXT4-fs warning (device loop2): ext4_group_add:1743: No reserved GDT blocks, can't resize [ 77.087324][ T286] EXT4-fs (loop2): unmounting filesystem. [ 77.173658][ T1102] usb 2-1: device descriptor read/64, error -71 [ 77.339928][ T28] audit: type=1400 audit(1757883772.150:403): avc: denied { append } for pid=1327 comm="syz.2.250" name="rtc0" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 77.370497][ T28] audit: type=1400 audit(1757883772.150:404): avc: denied { ioctl } for pid=1327 comm="syz.2.250" path="/dev/rtc0" dev="devtmpfs" ino=263 ioctlcmd=0x700e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 77.401215][ T1334] sch_fq: defrate 0 ignored. [ 77.501517][ T1102] usb 2-1: device descriptor read/64, error -71 [ 77.555076][ T1340] loop4: detected capacity change from 0 to 1024 [ 77.573860][ T1340] EXT4-fs: Ignoring removed orlov option [ 77.690406][ T1340] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 77.770820][ T1340] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1340 comm=syz.4.254 [ 77.783791][ T1102] usb 2-1: new low-speed USB device number 7 using dummy_hcd [ 77.868609][ T340] usb 4-1: USB disconnect, device number 7 [ 77.929907][ T288] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 77.950001][ T1102] usb 2-1: device descriptor read/64, error -71 [ 78.059152][ T28] audit: type=1400 audit(1757883772.870:405): avc: denied { getopt } for pid=1345 comm="syz.3.255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 78.114604][ T28] audit: type=1400 audit(1757883772.870:406): avc: denied { read write } for pid=1345 comm="syz.3.255" name="uhid" dev="devtmpfs" ino=267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 78.239946][ T1102] usb 2-1: device descriptor read/64, error -71 [ 78.261560][ T28] audit: type=1400 audit(1757883772.870:407): avc: denied { open } for pid=1345 comm="syz.3.255" path="/dev/uhid" dev="devtmpfs" ino=267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 78.360222][ T1102] usb usb2-port1: attempt power cycle [ 78.816261][ T1102] usb 2-1: new low-speed USB device number 8 using dummy_hcd [ 78.867111][ T1102] usb 2-1: device descriptor read/8, error -71 [ 79.113377][ T1102] usb 2-1: device descriptor read/8, error -71 [ 79.170582][ T288] usb 1-1: Using ep0 maxpacket: 32 [ 79.619234][ T288] usb 1-1: too many configurations: 126, using maximum allowed: 8 [ 79.639940][ T1102] usb 2-1: new low-speed USB device number 9 using dummy_hcd [ 79.740835][ T288] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 79.758590][ T288] usb 1-1: can't read configurations, error -61 [ 79.793842][ T1363] loop1: detected capacity change from 0 to 256 [ 79.850760][ T28] audit: type=1400 audit(1757883774.670:408): avc: denied { mounton } for pid=1362 comm="syz.1.259" path="/54/bus" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 79.895030][ T1363] FAT-fs (loop1): Directory bread(block 64) failed [ 79.908444][ T1365] loop3: detected capacity change from 0 to 512 [ 79.919948][ T288] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 79.937654][ T1363] FAT-fs (loop1): Directory bread(block 65) failed [ 79.963495][ T1363] FAT-fs (loop1): Directory bread(block 66) failed [ 79.981179][ T1365] EXT4-fs error (device loop3): ext4_xattr_inode_iget:400: comm syz.3.260: Parent and EA inode have the same ino 15 [ 79.993665][ T1363] FAT-fs (loop1): Directory bread(block 67) failed [ 80.010180][ T1365] EXT4-fs (loop3): 1 orphan inode deleted [ 80.015838][ T1102] usb 2-1: device descriptor read/8, error -71 [ 80.022363][ T1363] FAT-fs (loop1): Directory bread(block 68) failed [ 80.029001][ T1363] FAT-fs (loop1): Directory bread(block 69) failed [ 80.035858][ T1365] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 80.037766][ T1363] FAT-fs (loop1): Directory bread(block 70) failed [ 80.046109][ T1369] loop2: detected capacity change from 0 to 256 [ 80.051084][ T1363] FAT-fs (loop1): Directory bread(block 71) failed [ 80.051132][ T1363] FAT-fs (loop1): Directory bread(block 72) failed [ 80.070514][ T1363] FAT-fs (loop1): Directory bread(block 73) failed [ 80.084431][ C1] operation not supported error, dev loop1, sector 0 op 0x9:(WRITE_ZEROES) flags 0x8000800 phys_seg 0 prio class 2 [ 80.106755][ T28] audit: type=1400 audit(1757883774.920:409): avc: denied { unmount } for pid=282 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 80.126843][ T288] usb 1-1: Using ep0 maxpacket: 32 [ 80.132871][ T337] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 80.136629][ T288] usb 1-1: too many configurations: 126, using maximum allowed: 8 [ 80.167697][ T283] EXT4-fs (loop3): unmounting filesystem. [ 80.181939][ T1102] usb 2-1: device descriptor read/8, error -71 [ 80.190294][ T288] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 80.199345][ T288] usb 1-1: can't read configurations, error -61 [ 80.214913][ T288] usb usb1-port1: attempt power cycle [ 80.442083][ T1102] usb usb2-port1: unable to enumerate USB device [ 80.500285][ T285] EXT4-fs (loop4): unmounting filesystem. [ 80.528010][ T1390] loop3: detected capacity change from 0 to 512 [ 80.546789][ T1395] Zero length message leads to an empty skb [ 80.561210][ T1390] EXT4-fs error (device loop3): ext4_get_branch:178: inode #13: block 2: comm syz.3.268: invalid block [ 80.562584][ T1396] loop4: detected capacity change from 0 to 1024 [ 80.579474][ T1390] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.268: invalid indirect mapped block 10 (level 1) [ 80.581558][ T1396] EXT4-fs: Ignoring removed bh option [ 80.600908][ T1390] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.268: invalid indirect mapped block 8 (level 1) [ 80.603148][ T1396] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 80.614868][ T1390] EXT4-fs (loop3): 1 truncate cleaned up [ 80.631839][ T1390] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 80.657792][ T1390] EXT4-fs error (device loop3): ext4_lookup:1858: inode #12: comm syz.3.268: unexpected EA_INODE flag [ 80.673891][ T1396] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 80.692105][ T283] EXT4-fs (loop3): unmounting filesystem. [ 80.717440][ T1396] SELinux: Context : is not valid (left unmapped). [ 80.788803][ T1400] loop2: detected capacity change from 0 to 40427 [ 80.799796][ T1400] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 80.807834][ T1400] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 80.818346][ T1400] F2FS-fs (loop2): invalid crc value [ 80.820743][ T285] EXT4-fs (loop4): unmounting filesystem. [ 80.841237][ T1400] F2FS-fs (loop2): Found nat_bits in checkpoint [ 80.852266][ T1414] loop4: detected capacity change from 0 to 1024 [ 80.862693][ T1414] EXT4-fs: Ignoring removed i_version option [ 80.873710][ T1414] EXT4-fs (loop4): Test dummy encryption mode enabled [ 80.882476][ T1414] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 80.885520][ T1400] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 80.903901][ T1400] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 80.939527][ T285] EXT4-fs (loop4): unmounting filesystem. [ 80.963473][ T1400] bio_check_eod: 15111 callbacks suppressed [ 80.963492][ T1400] syz.2.272: attempt to access beyond end of device [ 80.963492][ T1400] loop2: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 80.970700][ T1412] loop3: detected capacity change from 0 to 8192 [ 80.983656][ T1400] syz.2.272: attempt to access beyond end of device [ 80.983656][ T1400] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 81.014891][ T1412] loop3: p1 p2 [ 81.018638][ T1412] loop3: p1 start 16777216 is beyond EOD, truncated [ 81.025345][ T1412] loop3: p2 size 515840 extends beyond EOD, truncated [ 81.035753][ T1400] overlayfs: './bus' not a directory [ 81.165174][ T1431] loop1: detected capacity change from 0 to 1024 [ 81.184417][ T1431] EXT4-fs: Ignoring removed orlov option [ 81.216349][ T1431] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 81.240001][ T1435] loop2: detected capacity change from 0 to 512 [ 81.248741][ T1436] netlink: 96 bytes leftover after parsing attributes in process `syz.4.276'. [ 81.261827][ T1431] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1431 comm=syz.1.279 [ 81.274669][ T1435] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 81.378905][ T1435] EXT4-fs (loop2): 1 truncate cleaned up [ 81.389142][ T1435] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 81.663738][ T1443] netlink: 4 bytes leftover after parsing attributes in process `syz.2.277'. [ 81.687631][ T28] kauditd_printk_skb: 16 callbacks suppressed [ 81.687677][ T28] audit: type=1326 audit(1757883776.460:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1434 comm="syz.2.277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dcdb8eba9 code=0x7ffc0000 [ 81.865705][ T28] audit: type=1326 audit(1757883776.460:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1434 comm="syz.2.277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dcdb8eba9 code=0x7ffc0000 [ 81.905687][ T28] audit: type=1326 audit(1757883776.460:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1434 comm="syz.2.277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0dcdb8eba9 code=0x7ffc0000 [ 81.959940][ T28] audit: type=1326 audit(1757883776.460:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1434 comm="syz.2.277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dcdb8eba9 code=0x7ffc0000 [ 81.988205][ T28] audit: type=1326 audit(1757883776.460:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1434 comm="syz.2.277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dcdb8eba9 code=0x7ffc0000 [ 82.051108][ T28] audit: type=1326 audit(1757883776.470:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1434 comm="syz.2.277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=196 compat=0 ip=0x7f0dcdb8eba9 code=0x7ffc0000 [ 82.141514][ T286] EXT4-fs (loop2): unmounting filesystem. [ 82.143155][ T28] audit: type=1326 audit(1757883776.470:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1434 comm="syz.2.277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dcdb8eba9 code=0x7ffc0000 [ 82.172660][ T28] audit: type=1326 audit(1757883776.470:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1434 comm="syz.2.277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dcdb8eba9 code=0x7ffc0000 [ 82.197628][ T28] audit: type=1326 audit(1757883776.470:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1434 comm="syz.2.277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0dcdb8eba9 code=0x7ffc0000 [ 82.225284][ T288] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 82.256498][ T28] audit: type=1326 audit(1757883776.470:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1434 comm="syz.2.277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dcdb8eba9 code=0x7ffc0000 [ 82.450965][ T288] usb 1-1: config 0 has an invalid interface number: 99 but max is 0 [ 82.469245][ T288] usb 1-1: config 0 has no interface number 0 [ 82.485439][ T288] usb 1-1: config 0 interface 99 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1023 [ 82.505694][ T288] usb 1-1: config 0 interface 99 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 255 [ 82.531351][ T288] usb 1-1: New USB device found, idVendor=1b3d, idProduct=01da, bcdDevice=79.68 [ 82.559887][ T340] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 82.567458][ T288] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.577997][ T282] EXT4-fs (loop1): unmounting filesystem. [ 82.587771][ T288] usb 1-1: Product: syz [ 82.607955][ T288] usb 1-1: Manufacturer: syz [ 82.612875][ T288] usb 1-1: SerialNumber: syz [ 82.633450][ T288] usb 1-1: config 0 descriptor?? [ 82.650543][ T1440] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 82.657750][ T1440] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 82.675128][ T1457] serio: Serial port ttyS3 [ 82.682417][ T288] ftdi_sio 1-1:0.99: FTDI USB Serial Device converter detected [ 82.700535][ T288] ftdi_sio ttyUSB0: unknown device type: 0x7968 [ 82.751860][ T340] usb 3-1: Using ep0 maxpacket: 32 [ 82.762377][ T340] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.797895][ T340] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 82.818333][ T340] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 82.845650][ T340] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.910939][ T288] usb 1-1: USB disconnect, device number 9 [ 82.917534][ T288] ftdi_sio 1-1:0.99: device disconnected [ 82.931315][ T340] usb 3-1: config 0 descriptor?? [ 82.941918][ T340] hub 3-1:0.0: USB hub found [ 83.054550][ T1471] loop3: detected capacity change from 0 to 512 [ 83.167487][ T1471] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 83.809984][ T1476] loop1: detected capacity change from 0 to 128 [ 83.865448][ T1476] EXT4-fs (loop1): Test dummy encryption mode enabled [ 83.906006][ T1476] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 83.919131][ T1478] loop0: detected capacity change from 0 to 4096 [ 83.942018][ T1476] ext4 filesystem being mounted at /65/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 83.980448][ T1478] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 84.097955][ T340] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 84.210305][ T283] EXT4-fs (loop3): unmounting filesystem. [ 84.524301][ T1491] loop3: detected capacity change from 0 to 1024 [ 84.753680][ T284] EXT4-fs (loop0): unmounting filesystem. [ 84.762086][ T1491] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 84.913323][ T282] EXT4-fs (loop1): unmounting filesystem. [ 84.955740][ T1498] loop1: detected capacity change from 0 to 512 [ 85.011046][ T1498] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 85.148982][ T1498] EXT4-fs: failed to create workqueue [ 85.213537][ T1498] EXT4-fs (loop1): mount failed [ 85.417117][ T340] usbhid 3-1:0.0: can't add hid device: -71 [ 85.423768][ T340] usbhid: probe of 3-1:0.0 failed with error -71 [ 85.481154][ T340] usb 3-1: USB disconnect, device number 3 [ 85.487376][ T1519] netlink: 4 bytes leftover after parsing attributes in process `syz.2.299'. [ 85.504950][ T1523] loop1: detected capacity change from 0 to 256 [ 85.544521][ T1510] loop4: detected capacity change from 0 to 32768 [ 85.560806][ T1510] loop4: p1 p2 p3 < p5 p6 > [ 85.568150][ T1510] loop4: p1 size 242222080 extends beyond EOD, truncated [ 85.575779][ T1510] loop4: p2 start 4294967295 is beyond EOD, truncated [ 85.707381][ T337] I/O error, dev loop4, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 85.734389][ T1533] loop0: detected capacity change from 0 to 1024 [ 85.758322][ T337] udevd[337]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 85.759400][ T370] udevd[370]: inotify_add_watch(7, /dev/loop4p6, 10) failed: No such file or directory [ 85.770359][ T1533] EXT4-fs: Ignoring removed orlov option [ 85.786509][ T463] udevd[463]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 85.797058][ T360] udevd[360]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory [ 85.811218][ T283] EXT4-fs (loop3): unmounting filesystem. [ 85.836954][ T1533] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 85.871263][ T1533] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1533 comm=syz.0.305 [ 85.871767][ T1541] loop3: detected capacity change from 0 to 512 [ 85.894143][ T1541] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 85.963620][ T1541] EXT4-fs error (device loop3): ext4_find_inline_data_nolock:164: inode #17: comm syz.3.306: inline data xattr refers to an external xattr inode [ 85.978905][ T1541] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.306: couldn't read orphan inode 17 (err -117) [ 86.001701][ T1541] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 87.160881][ T1541] fuse: Unknown parameter '017777777777777777777770xffffffffffffffff0000000000000000000000000000000000000000000' [ 87.186921][ T1556] netlink: 24 bytes leftover after parsing attributes in process `syz.1.308'. [ 87.227537][ T1556] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=1556 comm=syz.1.308 [ 87.336135][ T284] EXT4-fs (loop0): unmounting filesystem. [ 87.646737][ T283] EXT4-fs (loop3): unmounting filesystem. [ 87.699557][ T1587] SELinux: Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped). [ 87.714377][ T28] kauditd_printk_skb: 36 callbacks suppressed [ 87.714441][ T28] audit: type=1400 audit(1757883782.520:472): avc: denied { relabelto } for pid=1574 comm="syz.4.313" name="53" dev="tmpfs" ino=324 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:hwdata_t:s0" [ 87.818924][ T1588] futex_wake_op: syz.1.317 tries to shift op by -1; fix this program [ 87.945507][ T28] audit: type=1400 audit(1757883782.530:473): avc: denied { associate } for pid=1574 comm="syz.4.313" name="53" dev="tmpfs" ino=324 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:hwdata_t:s0" [ 88.429623][ T1594] futex_wake_op: syz.0.318 tries to shift op by -1; fix this program [ 88.458418][ T28] audit: type=1400 audit(1757883783.270:474): avc: denied { connect } for pid=1593 comm="syz.0.318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 88.535913][ T1613] loop3: detected capacity change from 0 to 1024 [ 88.551190][ T1613] EXT4-fs: Ignoring removed orlov option [ 88.569920][ T336] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 88.577867][ T1613] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 88.593015][ T1623] loop0: detected capacity change from 0 to 1024 [ 88.599797][ T1623] EXT4-fs: Ignoring removed nobh option [ 88.605835][ T1623] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 88.630030][ T1613] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1613 comm=syz.3.325 [ 88.639496][ T1623] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 88.652813][ T1623] EXT4-fs (loop0): corrupt root inode, run e2fsck [ 88.659546][ T1623] EXT4-fs (loop0): mount failed [ 88.761211][ T336] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 88.772655][ T336] usb 3-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 88.782936][ T336] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.808223][ T336] usb 3-1: config 0 descriptor?? [ 88.815886][ T1641] tipc: Enabling not permitted [ 88.822231][ T1641] tipc: Enabling of bearer rejected, failed to enable media [ 88.854449][ T1645] loop4: detected capacity change from 0 to 512 [ 88.897266][ T1645] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 88.929693][ T1645] EXT4-fs (loop4): orphan cleanup on readonly fs [ 88.942268][ T1645] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:511: comm syz.4.331: Block bitmap for bg 0 marked uninitialized [ 88.955577][ T1645] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 88.968807][ T1645] EXT4-fs (loop4): 1 orphan inode deleted [ 88.974763][ T1645] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 89.070281][ T28] audit: type=1400 audit(1757883783.890:475): avc: denied { map } for pid=1644 comm="syz.4.331" path="socket:[20897]" dev="sockfs" ino=20897 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 89.226400][ T336] itetech 0003:258A:6A88.0003: item fetching failed at offset 5/7 [ 90.376021][ T28] audit: type=1400 audit(1757883785.190:476): avc: denied { connect } for pid=1660 comm="syz.2.336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 90.604645][ T1664] loop1: detected capacity change from 0 to 512 [ 90.646625][ T1664] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal [ 91.466148][ T285] EXT4-fs (loop4): unmounting filesystem. [ 91.467433][ T336] itetech: probe of 0003:258A:6A88.0003 failed with error -22 [ 91.528981][ T336] usb 3-1: USB disconnect, device number 4 [ 91.581650][ T1668] loop4: detected capacity change from 0 to 512 [ 91.588333][ T1668] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 91.603562][ T283] EXT4-fs (loop3): unmounting filesystem. [ 91.637961][ T1667] input: syz1 as /devices/virtual/input/input6 [ 91.644311][ T1667] input: failed to attach handler leds to device input6, error: -6 [ 91.774060][ T1664] loop1: detected capacity change from 0 to 40427 [ 91.785987][ T1664] F2FS-fs (loop1): invalid crc value [ 91.817361][ T1664] F2FS-fs (loop1): Found nat_bits in checkpoint [ 91.849892][ T1664] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 91.889937][ T288] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 91.899886][ T336] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 92.027430][ T1683] netlink: 12 bytes leftover after parsing attributes in process `syz.1.337'. [ 92.059934][ T336] usb 3-1: device descriptor read/64, error -71 [ 92.081052][ T288] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.096450][ T288] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 92.108740][ T288] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 92.129128][ T288] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 92.138905][ T288] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.151839][ T288] usb 5-1: config 0 descriptor?? [ 92.231828][ T1685] overlayfs: overlapping lowerdir path [ 92.329925][ T336] usb 3-1: device descriptor read/64, error -71 [ 92.917818][ T1704] loop3: detected capacity change from 0 to 256 [ 93.049349][ T1704] FAT-fs (loop3): Directory bread(block 64) failed [ 93.216750][ T1704] FAT-fs (loop3): Directory bread(block 65) failed [ 93.225648][ T1704] FAT-fs (loop3): Directory bread(block 66) failed [ 93.225678][ T1704] FAT-fs (loop3): Directory bread(block 67) failed [ 93.225716][ T1704] FAT-fs (loop3): Directory bread(block 68) failed [ 93.225737][ T1704] FAT-fs (loop3): Directory bread(block 69) failed [ 93.225774][ T1704] FAT-fs (loop3): Directory bread(block 70) failed [ 93.225794][ T1704] FAT-fs (loop3): Directory bread(block 71) failed [ 93.225830][ T1704] FAT-fs (loop3): Directory bread(block 72) failed [ 93.225851][ T1704] FAT-fs (loop3): Directory bread(block 73) failed [ 93.319323][ T1708] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=1708 comm=syz.3.345 [ 93.409258][ T1711] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 93.416534][ T1711] IPv6: NLM_F_CREATE should be set when creating new route [ 93.452144][ T1710] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 93.459933][ T288] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 93.472513][ T288] plantronics 0003:047F:FFFF.0004: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 93.493020][ T288] usb 5-1: USB disconnect, device number 5 [ 93.585308][ T1718] fido_id[1718]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 93.606705][ T1729] loop1: detected capacity change from 0 to 512 [ 93.622869][ T1729] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 93.637511][ T1729] EXT4-fs (loop1): 1 truncate cleaned up [ 93.643315][ T1729] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 93.659889][ T1702] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 94.456991][ T1727] netlink: 4 bytes leftover after parsing attributes in process `syz.2.351'. [ 94.460077][ T28] audit: type=1326 audit(1757883789.270:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1724 comm="syz.2.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dcdb8eba9 code=0x7ffc0000 [ 94.489587][ T1727] netlink: 4 bytes leftover after parsing attributes in process `syz.2.351'. [ 94.499281][ T28] audit: type=1326 audit(1757883789.270:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1724 comm="syz.2.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dcdb8eba9 code=0x7ffc0000 [ 94.527186][ T28] audit: type=1326 audit(1757883789.270:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1724 comm="syz.2.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0dcdb8eba9 code=0x7ffc0000 [ 94.551108][ T1702] usb 1-1: Using ep0 maxpacket: 16 [ 94.586832][ T1736] netlink: 4 bytes leftover after parsing attributes in process `syz.1.352'. [ 94.607032][ T1736] netlink: 4 bytes leftover after parsing attributes in process `syz.1.352'. [ 94.845358][ T1702] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.860330][ T28] audit: type=1326 audit(1757883789.270:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1724 comm="syz.2.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dcdb8eba9 code=0x7ffc0000 [ 94.918238][ T28] audit: type=1326 audit(1757883789.270:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1724 comm="syz.2.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dcdb8eba9 code=0x7ffc0000 [ 94.922525][ T1702] usb 1-1: New USB device found, idVendor=0925, idProduct=8866, bcdDevice= 0.00 [ 94.949525][ T28] audit: type=1326 audit(1757883789.270:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1724 comm="syz.2.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0dcdb8eba9 code=0x7ffc0000 [ 94.953612][ T1702] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.980784][ T1748] hub 9-0:1.0: USB hub found [ 94.983038][ T1702] usb 1-1: config 0 descriptor?? [ 94.991506][ T1748] hub 9-0:1.0: 1 port detected [ 94.994387][ T28] audit: type=1326 audit(1757883789.270:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1724 comm="syz.2.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dcdb8eba9 code=0x7ffc0000 [ 95.026793][ T28] audit: type=1326 audit(1757883789.270:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1724 comm="syz.2.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dcdb8eba9 code=0x7ffc0000 [ 95.051902][ T282] EXT4-fs (loop1): unmounting filesystem. [ 95.058139][ T28] audit: type=1326 audit(1757883789.270:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1724 comm="syz.2.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f0dcdb8eba9 code=0x7ffc0000 [ 95.082762][ T28] audit: type=1326 audit(1757883789.280:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1724 comm="syz.2.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dcdb8eba9 code=0x7ffc0000 [ 95.942642][ T1713] loop0: detected capacity change from 0 to 8192 [ 96.189913][ T309] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 96.230284][ T1702] smartjoyplus 0003:0925:8866.0005: collection stack underflow [ 96.263774][ T1702] smartjoyplus 0003:0925:8866.0005: item 0 2 0 12 parsing failed [ 96.312612][ T1781] netlink: 4 bytes leftover after parsing attributes in process `syz.2.364'. [ 96.326514][ T1781] netlink: 4 bytes leftover after parsing attributes in process `syz.2.364'. [ 96.358452][ T1702] smartjoyplus 0003:0925:8866.0005: parse failed [ 96.371948][ T309] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.402807][ T309] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 96.456839][ T1702] smartjoyplus: probe of 0003:0925:8866.0005 failed with error -22 [ 96.552448][ T309] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 96.570893][ T1702] usb 1-1: USB disconnect, device number 10 [ 96.597148][ T309] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 96.617322][ T309] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.626206][ T309] usb 4-1: config 0 descriptor?? [ 96.807878][ T1797] loop1: detected capacity change from 0 to 256 [ 96.819713][ T1797] FAT-fs (loop1): Directory bread(block 64) failed [ 96.826458][ T1797] FAT-fs (loop1): Directory bread(block 65) failed [ 96.833323][ T1797] FAT-fs (loop1): Directory bread(block 66) failed [ 96.840478][ T1797] FAT-fs (loop1): Directory bread(block 67) failed [ 96.847459][ T1797] FAT-fs (loop1): Directory bread(block 68) failed [ 96.854644][ T1797] FAT-fs (loop1): Directory bread(block 69) failed [ 96.862454][ T1797] FAT-fs (loop1): Directory bread(block 70) failed [ 96.869116][ T1797] FAT-fs (loop1): Directory bread(block 71) failed [ 96.877328][ T1797] FAT-fs (loop1): Directory bread(block 72) failed [ 96.884721][ T1797] FAT-fs (loop1): Directory bread(block 73) failed [ 97.491610][ T284] ------------[ cut here ]------------ [ 97.497144][ T284] kernel BUG at fs/namei.c:2954! [ 97.538958][ T309] usbhid 4-1:0.0: can't add hid device: -71 [ 97.552634][ T309] usbhid: probe of 4-1:0.0 failed with error -71 [ 97.951857][ T284] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 97.957979][ T284] CPU: 1 PID: 284 Comm: syz-executor Not tainted syzkaller #0 [ 97.965457][ T284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 97.975524][ T284] RIP: 0010:may_delete+0x701/0x710 [ 97.980677][ T284] Code: ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 84 fe ff ff 48 89 df e8 d0 14 f4 ff e9 77 fe ff ff e8 06 af af ff 0f 0b e8 ff ae af ff <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 55 48 89 e5 41 56 53 [ 98.000303][ T284] RSP: 0018:ffffc90001267c20 EFLAGS: 00010293 [ 98.006400][ T284] RAX: ffffffff81c05a61 RBX: ffff88813913bcc0 RCX: ffff888107926540 [ 98.014403][ T284] RDX: 0000000000000000 RSI: 0000000000200000 RDI: 0000000000000000 [ 98.022377][ T284] RBP: ffffc90001267c88 R08: 0000000000000004 R09: 0000000000000003 [ 98.030427][ T284] R10: fffff5200024cf64 R11: 1ffff9200024cf64 R12: dffffc0000000000 [ 98.038537][ T284] R13: 0000000000000001 R14: ffff88811b180ad0 R15: 1ffff11027227798 [ 98.046526][ T284] FS: 0000555591cce500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 98.055462][ T284] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 98.062051][ T284] CR2: 0000555591d01568 CR3: 000000012f3c1000 CR4: 00000000003506a0 [ 98.070027][ T284] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 98.078013][ T284] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 98.085989][ T284] Call Trace: [ 98.089266][ T284] [ 98.092235][ T284] vfs_rmdir+0x32/0x500 [ 98.096397][ T284] incfs_kill_sb+0x105/0x220 [ 98.101001][ T284] deactivate_locked_super+0xb5/0x120 [ 98.106392][ T284] deactivate_super+0xaf/0xe0 [ 98.111091][ T284] cleanup_mnt+0x45f/0x4e0 [ 98.115514][ T284] __cleanup_mnt+0x19/0x20 [ 98.119943][ T284] task_work_run+0x1db/0x240 [ 98.124546][ T284] ? __cfi_task_work_run+0x10/0x10 [ 98.129659][ T284] ? __x64_sys_umount+0x125/0x160 [ 98.134709][ T284] ? __kasan_check_read+0x11/0x20 [ 98.139744][ T284] exit_to_user_mode_loop+0x9b/0xb0 [ 98.144943][ T284] exit_to_user_mode_prepare+0x5a/0xa0 [ 98.150400][ T284] syscall_exit_to_user_mode+0x1a/0x30 [ 98.155866][ T284] do_syscall_64+0x58/0xa0 [ 98.160282][ T284] ? clear_bhb_loop+0x30/0x80 [ 98.164980][ T284] ? clear_bhb_loop+0x30/0x80 [ 98.169673][ T284] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 98.175586][ T284] RIP: 0033:0x7f2c3d58fed7 [ 98.180040][ T284] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 98.199673][ T284] RSP: 002b:00007fff24980668 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 98.208116][ T284] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f2c3d58fed7 [ 98.216117][ T284] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff24980720 [ 98.224093][ T284] RBP: 00007fff24980720 R08: 0000000000000000 R09: 0000000000000000 [ 98.232092][ T284] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff24981810 [ 98.240064][ T284] R13: 00007f2c3d611c05 R14: 0000000000017a34 R15: 00007fff249828e0 [ 98.248046][ T284] [ 98.251074][ T284] Modules linked in: [ 98.255948][ T1799] syz.4.369 (1799) used greatest stack depth: 19488 bytes left [ 98.289988][ T309] usb 4-1: USB disconnect, device number 8 [ 98.296808][ T284] ---[ end trace 0000000000000000 ]--- [ 98.306448][ T284] RIP: 0010:may_delete+0x701/0x710 [ 98.311717][ T284] Code: ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 84 fe ff ff 48 89 df e8 d0 14 f4 ff e9 77 fe ff ff e8 06 af af ff 0f 0b e8 ff ae af ff <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 55 48 89 e5 41 56 53 [ 98.331510][ T284] RSP: 0018:ffffc90001267c20 EFLAGS: 00010293 [ 98.337799][ T284] RAX: ffffffff81c05a61 RBX: ffff88813913bcc0 RCX: ffff888107926540 [ 98.351944][ T284] RDX: 0000000000000000 RSI: 0000000000200000 RDI: 0000000000000000 [ 98.360044][ T284] RBP: ffffc90001267c88 R08: 0000000000000004 R09: 0000000000000003 [ 98.368080][ T284] R10: fffff5200024cf64 R11: 1ffff9200024cf64 R12: dffffc0000000000 [ 98.376178][ T284] R13: 0000000000000001 R14: ffff88811b180ad0 R15: 1ffff11027227798 [ 98.384259][ T284] FS: 0000555591cce500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 98.393358][ T284] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 98.400038][ T284] CR2: 00007f0dcdda4198 CR3: 000000012f3c1000 CR4: 00000000003506b0 [ 98.408060][ T284] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 98.416108][ T284] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 98.424149][ T284] Kernel panic - not syncing: Fatal exception [ 98.430494][ T284] Kernel Offset: disabled [ 98.434814][ T284] Rebooting in 86400 seconds..