last executing test programs: 6.85624761s ago: executing program 2 (id=207): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000000)=0x80000000001, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x8b}, 0x0) sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x40001}, 0x2000c040) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500020000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f0000000000)="170000000200010000ffbe8c5ee17688100033000201000a000002a257fce46de04bd65ad90200bb6a880000d6c8db0000dba67e06020000e28900000200df01800a000000fc0607bdff59100ac45761547ae81f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dfc060115003901000000000000ea000000000000000062068f5ee50ce5af9b1c568311ffff02ff030000ba000840024f0298e9e90539062a80e605007f71174aa951f3c6", 0xb3) syz_emit_ethernet(0x32, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa88a8880081004c0008060313000006080009bbbbbbbbbbbbe2b32f8fc4760169aaaaaaaaaaaa774a5301cb64d306a641efe2a12dd6eeacc621063e6d26d1260777ce989793971a017daece44b9c43cf492e5b2bd3030dc59839ddf6df15de9d7c0de48bf"], 0x0) 5.974867275s ago: executing program 4 (id=209): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000002000000000000000200000408000000000000000300000000000000000000000200000020000000000000000000000200000000000000000000000400"], 0x0, 0x56}, 0x20) 5.974362584s ago: executing program 2 (id=210): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x20880, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xd) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) ptrace$setregset(0x4205, r1, 0x4, &(0x7f0000000300)={&(0x7f0000000500)="5ff8577a545e90f78350f609d21b65dc4c9f3cf514ca96b7df8efcc1efe90d45820036689b10009c3bfbf99b286ce527ebf390895c83b56f8a309a62ee60ecd108132c39e734eaa2591732d9aa3a6569743a8e8450548476fe8c22b70fc59de438dacc11dcbaabb87a541c624f9103786a2622b1177d6f355ed55cc5bc7bf34d82abac047b9daa122f4a8578fc2f89989d2e310e9d7ef7f836b8f485b99c8150bc4b57ad0dd19ef8a18dc2c432f4ac302754c770f23cb2a2e41605b1aa9649772606549420d50b6da166eddc62b00b5405dc48601e4cf5d3c58cd94036ad058dd46667f45808f37b", 0xe8}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) ioctl$EVIOCSABS20(0xffffffffffffffff, 0x401845e0, &(0x7f0000000340)={0x8, 0x81, 0x0, 0x5, 0x0, 0x1787}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r4, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x3, &(0x7f0000000380)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @map_val={0x18, 0x2, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x2}], &(0x7f00000003c0)='GPL\x00', 0x523963fc, 0x5e, &(0x7f0000000600)=""/94, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x3, 0x1f, 0x8}, 0x10, 0x0, 0x0, 0x4, &(0x7f00000006c0)=[r4, r4], &(0x7f0000000700)=[{0x5, 0x4, 0xe, 0xa}, {0x5, 0x1, 0x4, 0x6}, {0x4, 0x5, 0x8, 0x5}, {0x2, 0x3, 0xd}], 0x10, 0x6}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b40)={r5, 0x0, 0xd0, 0xda, &(0x7f0000000800)="8825d6ef4824819d382a5b276942c9f8f14b4377026fb7ea10b2c0e7c657e06102031feec0bd4440d2caea3d4f8b24365a77ff48c185babe0e6cfd499e02276e8dd6fe5934dee3ad7a3099c74f8b62866bda2df508fae6111a642d5228ec79cedf90125205fa104e54fdda00b8282b6d0517c8693ee597ec0c9e7f19f07fa36c365a499689e5534d139c954bfdc45ee94dfc12f43abf144ee444c3ce69829359bdc020feb4d8fec80824bb4f3d6458dd85ce7b686c1b75220f88386d2535e4d05b02c744e00de1032da7e9fa9e322fa0", &(0x7f0000000900)=""/218, 0xd, 0x0, 0x5a, 0xa1, &(0x7f0000000a00)="a10e4a49ce133e63ca16a50b600b689a9063f2b81deef4712771eb72c95016675071e6fbc1df4e16d5f9c1d9043ac85f237cda0594ba1a821f6f79480e2a670dc94e59cea99be18cef29760c7e3188cc5567becd3d65b32b42c5", &(0x7f0000000a80)="f116df101517fd77912505d595ec22b36775f0c49785ad0c720c385b73ae153b59871abb7ba95f3b0b082991ba57a37c87ab8cb2fd0a820dc7575a28cfb94ec5012bdc7ffd3fba673ee063c733d18bdc65784d07e77251d99d53d34dc798963020c008ad8f8770a1932cc6f595bdb46d0ff4bdfcbd8e6e2598ddba17acb1a64477e6602ab4609c89892f14611c32ffd792c2d98296aa4f2fe4462997f7b9e18878", 0x3, 0x0, 0x3f4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x5}, [@func, @map_fd, @generic, @initr0, @exit, @printk={@p, {0x2, 0x3, 0x3, 0xa, 0x0}, {0x7, 0x1, 0xc, 0x1, 0x5}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe00}, {}, {}, {0x85, 0x0, 0x0, 0x2d}}]}, 0x0}, 0x90) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=@newlink={0x58, 0x10, 0x403, 0x0, 0xefff, {0x0, 0x0, 0x0, 0x0, 0x88a9fde5}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x58}}, 0x0) 5.919914279s ago: executing program 4 (id=211): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x400940, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x90) setsockopt$packet_int(r1, 0x107, 0x13, &(0x7f0000000040)=0x4, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000009c0)='kfree\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x3ffffffffffffda, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000022008500000083000000bf090000000000005509010000000000"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x2d) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @local, @multicast1}}}}) syz_genetlink_get_family_id$ethtool(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x90) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000440)={0x1c, r9, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 5.087992109s ago: executing program 2 (id=213): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x3810744, &(0x7f00000001c0)={[{}, {@minixdf}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@data_err_abort}, {@grpquota}, {@noinit_itable}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x400000}}, {@max_batch_time={'max_batch_time', 0x3d, 0x8000000000000000}}, {@acl}]}, 0xff, 0x46b, &(0x7f0000000800)="$eJzs289rHFUcAPDvzG762ybW+qO11WgVgz+SJq3agxdF0YOCoId6jElaareNNBFsKRpF6lEK3sWj4F/gyZOoJ8Gr4sWDFIoWoVUEV2Z3Js1ud9P82GRj9/OBad/beTvvfXnzZt7OywTQswazf5KIHRHxU0T017ONBQbr/127cn7iryvnJ5KoVl/7PamVu3rl/ERRtPje9jwzlEakHyV5JY1mzp47OV6pTJ3J8yOzp94emTl77okTp8aPTx2fOj125Mivh0affmrsyY7EmbXp6t73pvfteemNi69MHL345ndfZu29a399/8I4OmUwC/yPak3zvoc7XVmX/Vu9HmdS7nZrWKpSRGTd1Vcb//1Riuud1x8vfNjVxgFrKrtmb26/e64K3MKS6HYLgO4obvTZ799iW6epx4Zw+dn6D6As7mv5Vt9TjjQv07eG9Q9GxNG5vz/Ltmh6DlFt8dwAAGC1vs7mP4/fOP+rrY0sKJfka0MDEXF7ROyKiDsiYndE3JmXvTsi7llm/c1LQzfOP9NLKwxtSbL53zP52lbj/K+Y/cVAKc/dVou/Lzl2ojJ1MCJ2RsRQ9G3O8qOtDl4c4vkfP2lX/8L5X7Zl9Rdzwfwgl8rzD+iqWVNicnx2vFOT0ssfROwtt4o/mV8JyPp+T0TsXd6hdxaJE49+sa9doZvHv4gOrDNVP494pN7/c9EUfyFpsz55uL4+ObIlKlMHR4qz4kbf/3Dh1Xb1ryr+Dsj6f1vj+d9Uov/PZOF67czy67jw88dtf1OWl3X+12Xn/6bk9dqa9ab8s3fHZ2fPjEZsSl6u5Rs+H7v+3SJflM/iHzrQevzvyr+TxX9vRGQn8f6IuC8i7s/77oGIeDAiDiwS/7fPPfRWu30bof8nW17/5s//gcb+X36idPKbr9rVv7Tr3+Faaij/pHb9u4n2zdmSl1jp2QwAAAD/P2lE7IgkHZ5Pp+nwcP3v5XfHtrQyPTP72LHpd05P1t8RGIi+tHjS1b/geehoMpcfsZ4fy58VF/sP5c+NPy1treWHJ6Yrk12OHXrd9jbjP/NbqdutA9ac97WgdzWP/7RL7QDWn/s/9C7jH3qX8Q+9q9X4f78pby0Abk3u/9C7jH/oXcX4/6fL7QDWn/s/9KTVvNe/VonyIm/vb9TE1o3RjHVMRLohmiHRIlHc0F/8ZeXH6fKFCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoEP+CwAA//87LfR5") bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x4, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@generic={0x1, 0xc, 0x2, 0xb, 0x6}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$inet(0x2, 0xa, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = getpid() syz_pidfd_open(r1, 0x0) sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) (fail_nth: 27) 5.070983611s ago: executing program 4 (id=214): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) newfstatat(0xffffffffffffff9c, &(0x7f0000001540)='./file0\x00', &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) r4 = syz_clone(0x46008080, 0x0, 0xffffffffffffff55, 0x0, 0x0, 0x0) ptrace(0x10, r4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f0000000000)=0x6) setuid(r6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001600)={0x0, 0x0, 0x0}, &(0x7f0000001640)=0xc) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000001680)=0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000016c0)=0x0) statx(0xffffffffffffff9c, &(0x7f0000001700)='./file0\x00', 0x1000, 0x7be, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r11 = gettid() lstat(&(0x7f0000001840)='./file0\x00', &(0x7f0000001880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000001900)=0x0) statx(r2, &(0x7f0000001940)='./file0\x00', 0x0, 0x4, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003c00)=[{{&(0x7f00000009c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000ac0)=[{&(0x7f0000000a40)="bb92677f5acc591a818c811a7c89169baebcd0ac47902def77b9fc83699265af1e68dd339e12af5a8e6a85d80e3d621893422d6ce09247e2ee5c4b88075dc1d36916fbc3108dc01a43e79f1e38ac389d7c3ac35a0ceea2667a87b013e54f8cbc233a821e28c204034305e6b8ba5fff72255e25a92068a5e4ace29c", 0x7b}], 0x1, &(0x7f0000000b80)=[@rights={{0x20, 0x1, 0x1, [r0, r2, 0xffffffffffffffff, r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r6}}}], 0x40, 0x20000800}}, {{0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000bc0)="5d9e7c23fd9b7b1660155b4960169b64d9fb67b54c92ea7cc58cc469c05308a19d0f15f0ba2ed04c7060ae7ae4e4ecb5c4e07c968fef9eb072f478d25416135bda9b27f759e68e3f666a4b0e3fd16af9203da270a0443398954c2221382e0df76f47042757f9279903df5558fd7f0d3fa9874967581e6f3ac8857ca822a4b16ba7bc581cddcb7fc705e9ff4dc819b62204b76030c06fce229b0bd5070c6684e2954bbd280aea37fbcc15db838290876e68c0a03ccee333be7dc0ebbada4bdc9364623e328ae5bec245ff0246003e21d32cd4b8a16194", 0xd6}, {&(0x7f0000000cc0)="0cc394502e93bcef9bfc3ca3b959a9d906cb41d92b3d71e3df9b2d4fc56167fc6a5b71121b61c9be80ce036e0d01394f0224b583a866f74c5d2f6ab6e9cf8ed7", 0x40}, {&(0x7f0000000d00)="c060806d99fae44eb59d2d1e74c70552459747b3ebc089f9217b3e7208bca2d86f07c34b79426804e1fe46d10bf6839b18d2ab9466332a54135fb1a8423657ccc5c0f6de9b968c8f87e5ca5db5b51f539258d8751cefc7afc412c8b88803", 0x5e}, {&(0x7f0000000d80)='y', 0x1}, {&(0x7f0000000dc0)="ad5ff9079b3a0067eafce1f7544924b47e843358a45b53be1eddf9065a7dfcc79c4f73221aa0a4a69a38eddddb887429f56adce5cf82bc3fd124e9ca66b67518bf045509a427823adee84a468aeaac82b5378702d2a3e6c26f265ad5f746e529954f1a683f9e157fd5159db28d7b5ff30e820d74ffe670", 0x77}, {&(0x7f0000001b00)="4d4c0af8a14b17694473a501e5a209679abeeb688cded629189e1409498bc8eb0283a23bb5718a80f1ae4ddd51f0014280f123822d968a281a5f64a894a3eb6c2f436af6945a1c4c6ac7e4d83ed8ff9b0233c02c78f6bb44dbe02d4b9907d5b74bd633a90932e35727f08f7511bd9e7fb8e36124cfda024cd82172628fea791ee0a69bf9758431df82dd955e3918377e3708ed2f9f84f443eee9a54bacf5e0bd51f70bb023c0dc75de1ae6e4c1bd092d1cca71549e39690df0b755b336f1c8bb701cebd2f8bb2d1cc1d50d69869b952a2269d7a65ffc61275c7479dff007b7870aeef8f59268dad11553819aa9cfc2bcee738c194b9d8ac60f8a3661392154dd2104366f10aab0368cf7acfbb3850a67d0ddd3796162eb533827a7637fa68dc441e59b7ecdee1d08b3fd5dd74e488d0eec41a576688a292be28595fc1e5db39592af85df72c993c7ccd3b90d819a6e2c465a81dcda73f5499c2f294cd5a83370ae1e958aebf9c5beb3e9e2679b9c2c8a3bf33c2bf567614e0d11bf1d4d5355fc3f1963cebecabe5101754f91d656f0cc6477ee4ee5350e2a01fd1b0766f5bb10ee3ecb39a9e1edf924ed2f7757a3797bd623a39f1656eb31883dcb8f26f715d6f2ddc14fef34c6f995d682b268ec111b4ec8f460eee782dce1d39ec5f18aeeb92b9c437c1e0c5c5b2ef7ae7947db04987e5f381daa10ed0d2abaaed459c8adbcc349f088e0e7ecfde82a2adb07d45942bbfd8daa9905148d1c5c7a683a85aaf331379448912167415ddc4f299e5e8ed80accd047018226a40a86a1449abd6fe8e3e3878aa0feda44932124aa7bf4725148202ae4d2804ca03ccbba293c65e9bc7951532227f2dc3abc41310feede10ce2f99862269c122dd5dc7f22cf263872e0ede2ff29c7fe753fc5aef100e4e95d6ee629b916549f3d8b0651ee334c2c31f10cf6e82a9018278f2e5d65ae06691bd44af6b442f6425c8da5239c97e2c5ac45209ccacd1faad122117b3dc4cc576cdb954029129f1809f1b0838119de20bf1c1e9c269e520c705ba7732d7de290826c119cbe20113504b44d3435b6f279855908a0f5cdd8686cc27119e709263f5ca87349d8ec24af5ddb53ede61cccf90ca5fa6cf8566c722d66229c50004d0afcd5c09ddf445f348c3b5d6bc3f3155e599c702c163b0db543bf88c204a145d795d5c6ffdd2272bc5eaceca835dcbd0d194557e903b8e83b7d997e8c76eaf46cdba9a4ccab5851346146163a5b1b57ca251b3ca18531186cad6daba9e40758071736fb354987dc6abcad991560d6ec1e4288573410d5bf810bfac69739f7ea3ee097a91ab49f59f4a1ea81b32ab0314d73fdbda39573ef422d8b2bdbad465aab796b88f35c2143348bb24e135012fa1c1b6e71d22c05be84282156a990f678daf7069b038a89ff34bc802d67e98cd9a39f6658d5275c3ee0c7539744b9afee8a36f79332926b3c8b70e09f3a0c568a739e8a748848dc388448bb337f0464edeebde925307be6de9a304a900efb78bf38adb69a085fb00a24e77bb6450031a35ed64f8ff1f6c749de97ff5a7607a12c1193da74cf8deba1429ad14f9a68a3225138d91e3292a41a310d335125002f3593afff12e955cd6ec54a3f1b08d430f4455ad1e841119d6372bd55c7cff38fee4695557f73df596580b3febfd3bd202e1132c49b057148ea7984d8b6792af05675f675acdb4d33cd2d90760d92a208a13e206d862fca31961d17f9fa4e9ac38ecd9c574e882d142fb87441513f24350c577b01982af88094fc1f3e8334eced22bacbf3fd732e1a9216c3eaed9315eff5e587ea5d1d282d9e9b7e7c7723dcac759adf57946e0fb2061dbd925bdcfec8ade75f33caad9ae7e44285f93ec498d2959cfadc855bcecdf34ee5e7bdcd8cee1931a4bf43582860e51ee934bffbfc02bb38a7dee085bfdf3fa6911909417f3dd088ba17144dbbb28aff2deebf35b725ac2ef723461698ff1637972fdfb1355d2a3279608cf22db4f1fb00a7aaef0be99f5dd1cafe0e7c1f42b7323617dc713957742c5c554c965205b42da096f5b07a2d37569abdaebe6974580303552d541f6d222f9b425823ae682e73a6b068be09d2c6596d1f0b50e29e337ac3a3ee55e2daa604978c880ff97edc660d56c21600534edfd235a900a811a0f6d5c5bd3cd71c0342651eb212780f440145ae0843472d69e3458df281076fcc269a48147a3757fef6684ae08f42e681c00bb5bbeff8e4c955c115f6a3596c1c63dca2cfcb11bd8c9385d01fd5ce02bfdf134f975a5681b8a7fd947aa46751bc72708969abea9ce2204b1172e0ec6ab08730430597f9a17f033eaf5d19f436d3ba516dc39a95045a182c63b20d67895682373edb29e485c7e90378ecb237e9e966c6ecbb10af4865ad61bcf4c5b5fddaa68cac2f7d9d5afb4e912be32837a490957d4aff98d2db661074cd5042d8aa719b6438655c89b30d213274a8159263b26d8ebf84a9a24f2d9841ae30a8c4555b894293976e3429700b740b6be1758a32db25e113e2342186137ad7b6e1eb11a679bd4ee0bd835d0288ff406be5dfa59fca1ee85010f4855dd769654824271487c610e8d2e7f904e44634e06804bf0b6ac3113ad9e0ec406fcaedfc0e7748557b4af7119fbcedcc79809108fe2a67d4c69acca65587404c0993050abc9842f2c028f994660621756c39b4a92134e70a1842e31d41de45e100a2dddc4a350e36ccdce91606a630320f269d78228ff0b66f3e3ff4bbb933262a873c6b915da746c32e16b2e8bdcbe7f0448df77cc3f55c8ef3bfce2b5d5e26150262eed795b336c28f54a2f2253501d299569b665f591031a17b156db286cc2c7dae34926d179d745a086dbb7e390020e896401a4ffb7b9791911f04d0c5b845cc50c0a1cdf739a7d3721b919e1f7b7820d1199620664314b9deeaa3002ab57c9ddb47740a5dfe19467a779659e3caeebae674c63ac25a9f5b7a0f3eb5c2af098bd2cce061739b616829e340ea343b20320096fca698f94c5110a44e66c8f11eee9f531b7639bbd61c38c4f9acb4aa2f4f11079bb4080f196a611e1e9d5e107bd484a528742b78ca24089efd3ac30f36c1c8c48f93a12aaa997fb8d11853bcd584f6bd4df082a095728dd74f123aebde282ba70008af53c933a7806ec34abe083b5600d8692ea5e3cf36c566150ecd3943a1c008dbdc86e123fd284d97399f19fefd0898cdd8bf9278e0464f52484ea53fe69ae6da46f0f43b46b38e6ab6aead92a58b05d04dd622144dc09ca23bb106e6e843e8d96287cf151e71a47469758bfcee315c6ecae7de78e234373cc327d6bf12836d167e005ba8060f2148a911532059172d8a902de3d1ff116d72ef32aa8d973ebe55ebb66687593dc5851bca5eab19b788d7b83f72f9900161c1b3cb7a0e2f0b38eb1bd975f4f498e5ee22128198b4693bc2d89fd53a43440617924256a0b4fca9e77f863bdb5ee27fe98b32da24cdc74bc7f91c7591ab0f65ced4dd3d669de4d7b5c5494b5228d36e9f5e448ed332d83f430b7f8cb2d80d868048b6f7ccd48735cf6346f8c6dc7893ac060f70071fec0507029953ca49f3de7dc948b5b7772f98998447edc27d9bff727872d5d19b87e88e110a1f1afe3f715a42a6e33b9a225efb2cccc9d1e2691deac840b379c5cfd99c10351723c80096e9763c1ed2885480b57f0c99499e5fe6bdf8ffa584e3b4e074a3f26a6405b17d6a48da09f9607367190627bf84e0f3e2233b350f0b4e390ca59f9389d8a2fadbe4f093eb3fb4afe7ef1adce941d433018c8720695555930586e9251ff07c9ae2d9a910cd680d7a93fe2d67eb4f498209c8b6abde397da56e2d72e0fe65beafdcb414bb64dabbba6de4c1456d8645f9762ebfe3bbdcb9a96b1171ab658427128013497d939feade9c375224e9fdc0f6aae490b48b7c720cfb61382d6af165c9b366bb4cd138dbaf8fa631bd32d3831b0c323a9eddbc64c5101b4a19ca6b99bcae3a6e569af178ab9097d1ea4dc69b5d02cc085ad2493c628b8da1009bf097488e1ca7f1846539ce9ba622f159045c05a7d078903b0beb211259650185799fdda22f0c9e2f9c1fca8f2765a83db127942c3418e66caf846643a4ef283bfd458d961de4421be74f37127f2d5ea8984a476f356a7c80d961111eb2d6f955db761b6fd4b46ddf8bd8b2a9839744cd15ff9dd39beb0c41268f2af5242c0139da50a704e90b512965682c0b49d3d97847a38424e87e73568e9234922614344f0d97a7cb29fa39f1eae7f29476eae7905a1d1cf0b235cb0647f9169164c7275f3d31c70e3d26f76540791be47ae77408c9d3e5b33e9985619ef0276788c2a75eede2e8e9e10f78056ba14c8ad564857be34ef85c0c8efd39ddd9b7ee9c076e9d25d421dd5b82f027b6c07231eec499d768793af4842c2808a4513ed5ae4f86cb93082a8361193e47a22b73baa6a152d3f3158f502aa1d27fcb23f848a03184b32bf098fe7eeafc11f6c1d3617071a90a2e6663686e5ea7bbd1b718c332a4448260a8e130e571795f192de1d68dbf6042e42b5cc958c469e2c330c9275d7601a8d2d77d082c65f4f5a1a9f643fb4bdb962ade32da301e0a5c67ae74c19aed5db21b327f69257c69a31b3e7a23acf30d762340a934424a638f478ded898dac0ae80cf50fe6a9c2f33313c29d14bedcb266a8cf3b9fb4d90520d2e5d749575bd5d9c779a099d7fa0e501d496e0c28ce303da4d7590799d4cb54cf150c5dfc80ca199305cf1b958a228d14ac65ff40b0f15c5e1c7f067e001e7c99b3cbd37a1c3f9b3d322c91afc0fd50d443d0d5075b725a4ebe045cbe0fe6eaac673b9f04c07bbe6dbfb3c9ce713cd3e866b4902a8a8f5b4e88f364f6c9cd455e695d5102810da99176e470105fe30ce59042bef6340d58ee7640c1a985ac754a3a404b4b9f34d9d2c1cd8bc5f6e3f5f28dbfe09cf5a3b2c07703b11112d2947a17fd9b232387d8dba86450ce7229f19b9ec0e3fef985f60c62a1b4c3a1fd33043c4d2cfaa658d8ec3eb07df8a029ef680a377120c27920d7aac89bd1a60429b24eb7b130c0069cc74fc4149b05f26a890ee1211d30d41d8d4bae89184b408ce251db84206d0d3dd55c927301c3c6b63cc1a98338e4212426b006714150906a862b4ddab668102e8e151aac3d65755ee5b5a836caee15096f22e56b3b25328c50fbbb59a7beba503d3797e56c2615528be8f210f38a4c5f0d660bc048bbab0aada04540979917a52f70664ee7f6f17415d0ab3c25ac687622dc6b78ac3868876e2465e0fe7cffa05108f9b1dae7cd5ea0cdf4e6ec9e6337ef5211f82da866af29fad6502221a8dfa36965729c1d24d9665d896e1cdc2da63f3f10d2bf663e0ba8a461f398338bf69eed9397263cf11650e602daec6ae94cf448f819325292fd10212184e7226b5bf854a2f4f1c6abb5c3b882b30d0c56316b0a2a0432a5626a190dc08c0e7af2ff5ffcb4c3f571ee5bbb6c8588872dd3308e7e80e4cd65431e341a4b373f43cc2e192696a0344483a43d133ffca778deb8edc9a4df8532864844ccfeff9290c7ec731fbccd5539855fd5cf07e427d7fc5f37863f31ba377ae4678846eea1cd93ef64cc81914a6b38cfb7139f860198e565c19e76d45ef6739b37d1b415585537a5a85f7e1b4999994cdb3f096d4c70d74e6e5565a7c1c1c279c5dc5cf9b7585cd0e7a32bd0796a7c5f05de8b00eaa17cf758a6ce6c3c59528342b3ae9bff1a75bf1d23bf21329273139bf", 0x1000}, {&(0x7f0000000e40)="7959c6a7cefaf4d1cd2b24b5091214e6a2144bc0ec1d4ce001658958ad011ce7a8ae53bd2fc05b407d46b25cdb153b5d684e531d9df5af8866c96fe08d9e1cf759460ff61f1a18875f2a4f2880899802eeff6cf6f3eec7984f744bb186b8b6bf9b864a3d8e1b27856486e45f2e4d460ccbe059608b1de4fd587ad1f5735ee1c3066b", 0x82}, {&(0x7f0000000f00)="1a8d508a5c667b1b14328413505c1abca0940f580eda7a6111b8fc2c2e1ca9f6b4dd2e1dad5cefaf4ee55fe11b7738adc4ab449c4555940d0087f037d5ea6c89dbaa9307c25ea488698a12c06d10486064ad1dde7145e62b7fd5083f3b75a46e373649c24752a0f5b2f2299f2569c67cef5a6632ddd7863edffc4385790a89b88a", 0x81}, {&(0x7f0000000fc0)="b29d14801ec61d52735ed6366918a24da21530945881deccd59341e20b9f26676c57290513033e0136a8895386ea1d13cadc173472f6081f43b1460eaa21a5eb4684fa26acd7a02f19b0fdcf588d7c5770905d89ad385eb182cfb0867481edc27e464dc49e0729e55046cf88bd6b43f01fe31fe85a7d17d12ef709032c610e537e1b61d27b1fc8733660e41ece5ae56f70181d43749da46146", 0x99}], 0x9, &(0x7f0000001140)=[@rights={{0x2c, 0x1, 0x1, [r2, r5, r5, r0, 0xffffffffffffffff, 0xffffffffffffffff, r1]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @cred={{0x1c}}], 0x88, 0x40002}}, {{&(0x7f0000001380)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000001400)=[{&(0x7f0000002b00)="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", 0x1000}], 0x1, &(0x7f0000003b00)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r3}}}, @rights={{0x34, 0x1, 0x1, [r2, r0, r1, r1, r0, r1, r0, r2, r2]}}, @cred={{0x1c, 0x1, 0x2, {r4, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, r9, r10}}}, @cred={{0x1c, 0x1, 0x2, {r11, 0xee01, r12}}}, @rights={{0x1c, 0x1, 0x1, [r0, r0, r1]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r13, r14}}}], 0xf8, 0x4804}}], 0x3, 0x24048059) r15 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x74, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r16 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r15}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa1000000000000f8ffffffb702000008000000b70300000000000085000000710400009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x2b, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x5}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7}, @generic={0x7, 0x5, 0x1, 0x46, 0x7}, @exit, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @func={0x85, 0x0, 0x1, 0x0, 0x7}]}, &(0x7f0000000280)='GPL\x00', 0x200, 0x30, &(0x7f00000002c0)=""/48, 0x40f00, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000340)={0x0, 0x7, 0x4, 0x3ff}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000004c0)=[r16, r1, r1, r1], &(0x7f0000000500)=[{0x3, 0x5, 0x5, 0xc}, {0x0, 0x3, 0xd, 0x3}], 0x10, 0x5}, 0x90) r17 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x4, &(0x7f0000000640)=ANY=[@ANYBLOB="185600000f000000000000000000000000000000000013000000000000000000"], &(0x7f0000000680)='syzkaller\x00', 0xfffffffd, 0x0, 0x0, 0x41100, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[r1, r1, r1, r1]}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='softirq_noise\x00', r17}, 0x10) r18 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) fcntl$lock(r18, 0x26, &(0x7f0000000000)) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000000c0)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2={0xff, 0x3}}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendto$inet6(r0, &(0x7f0000000740)="9e3b22e0a8caa3a072ddb05e68ba296c3847d8671d988c4b", 0x18, 0x0, 0x0, 0x0) 4.907970205s ago: executing program 4 (id=216): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000005c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000800)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, 0x18, &(0x7f00000004c0)={@ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x50}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x0, 0x16}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) 4.751267148s ago: executing program 4 (id=217): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="05010000000000107d1e222e00000000000109022400010000000009040000020300020009210000000122020009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="000004000000040078e44f217dcffff346e63b697b4e96ab6d1bdd17931d1f483c7074cf376115175b75f5ec651764e4ac6ef062a0524a1bc4a4db586168afb17ee898bcc7e5"], 0x0, 0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x8}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x19, &(0x7f0000000400)=0xa4, 0x4) syz_emit_ethernet(0xe3, &(0x7f00000004c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "828bf7", 0xad, 0x3a, 0x0, @private0, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x4, {0x7, 0x6, "e766d3", 0x0, 0x21, 0x0, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [@routing={0x4, 0x2, 0x2, 0xab, 0x0, [@remote]}], "32a93438f4960e1e8b5159230f2c02ca02efd86f05c0607461d996b4cef996ee8c865b7e7ec695c16e78362fd324d5ce216a83184dba2f6472078204e48e25f604ffc1be7ab8acbf1beb5fb4830de748c240ef35b3290e7836761bf6a7cd449df2e5165c45"}}}}}}}, 0x0) recvmmsg(r2, &(0x7f0000002780)=[{{0x0, 0xfffffffffffffde1, 0x0}}], 0x1, 0x2140, 0x0) recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@cred, @cred], 0x148}, 0x20010063) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0xac}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="b80000000001010400000084ffffff000a0000003c0001802c000180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000aa0c000280050001000000000008000740000000002400068014000400200100000000000000000000000000010c0003800600010000000000dd255ab8d423a7a1d15ecd3e38ecae438f533618fbca411c3f36835f"], 0xb8}}, 0x0) r6 = gettid() rt_sigprocmask(0x0, &(0x7f0000000040)={[0xfffffffffffffff9]}, 0x0, 0x8) timer_create(0x0, &(0x7f0000001080)={0x0, 0x12, 0x4, @tid=r6}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000040fe0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) rt_sigaction(0x12, &(0x7f0000000140)={0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x8, &(0x7f0000000080)) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x128}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) close(0xffffffffffffffff) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x90) 4.384353059s ago: executing program 1 (id=220): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x8, 0x8}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x7cee9000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x0) getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r5, @ANYBLOB], 0x48}}, 0x0) 3.848228824s ago: executing program 0 (id=221): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, &(0x7f0000000000)={0xffffffffffffffff}) r2 = gettid() timer_create(0x3, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @thr={&(0x7f0000000240)="03eda2368f19e5bdd39140e941ab382a688e442a4ccf36d2445b5b8650d242afe09d168f09cadbbb", &(0x7f0000000440)="d0d82b60607834d29c2694e85b06d85437b16f53a9c574d1abb91e845f62233561007c3aee06a707b087b7dc8f18b17f24b7303a74c8270b928e133b64c574aeef9444bed3847c4745a788cc2cfb032584686de4b0c6f9ee35895e5fa3bbe5f12103fb47cef7a30a81f622586d7e9716f79b8d6c199cc38631761ee5cadd0296623dddb8605f0863289db2f58ab3f1f2"}}, &(0x7f0000bbdffc)=0x0) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r4, 0x29, 0x3, &(0x7f0000000540)=0x40000006, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) recvmmsg(r4, &(0x7f0000004100)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/19, 0x13}}], 0x1, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f00000000c0)=ANY=[], 0x8) setsockopt$inet6_int(r1, 0x29, 0x4, &(0x7f0000000500)=0x8000007f, 0x4) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x8, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x1000}, 0x8, 0x10, &(0x7f0000000000)={0x3, 0x0, 0x0, 0x8000000}, 0x10}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, r1, 0x90, '\x00', 0x0, r1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="1800"/13, @ANYBLOB="66e773541cd4e8d389d7b99112afb1c52671b1392e345bfe4a89a8ab660ec1a5ffc7c96f4cc97059e32d5b846967f0b9d46c2749a51e031f2e8f5be1759dce01f3cec7a1ace8987ed4f94b5b081e0f2df404e0d57539edadb6", @ANYRES64=r3], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='sys_enter\x00'}, 0x10) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg(r5, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="506db08b9f497cbdf896d903665e98"], 0x10}, 0x4000801) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) tee(r7, r6, 0x8, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_emit_ethernet(0x42, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa20000000000088a828008100150008044503002c000000000004907800000000e0000001000000000005907804000000000800"/66], 0x0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r2, 0x10, &(0x7f0000000200)={0x100000009}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) 3.54611779s ago: executing program 1 (id=222): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000004200)={{0x12, 0x1, 0x0, 0xe2, 0x79, 0x3b, 0x10, 0x5d1, 0x2001, 0x900, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4d, 0x2f, 0x9c}}]}}]}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) syz_usb_connect$uac1(0x0, 0xa5, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x93, 0x3, 0x1, 0x2, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@feature_unit={0x13, 0x24, 0x6, 0x0, 0x0, 0x6, [0x0, 0x0, 0x0, 0x0, 0x4, 0x0]}, @output_terminal={0x9}, @selector_unit={0x9, 0x24, 0x5, 0x0, 0x0, "f8431cfd"}, @output_terminal={0x9, 0x24, 0x3, 0x0, 0x303, 0x0, 0x4, 0x7}, @selector_unit={0x6, 0x24, 0x5, 0x4, 0x0, '('}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000200)='kmem_cache_free\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00'}, 0x80) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={r3, r5, 0x1, 0x0, @val=@iter={0x0}}, 0x40) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0xb, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000001300010000ff8d000000000000000000", @ANYRES32=r7, @ANYBLOB="000000000000000005002700000000001c001a8018000a80140007"], 0x44}}, 0x0) syz_usb_connect$cdc_ecm(0x5, 0x50, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3e, 0x1, 0x1, 0x8, 0x0, 0x8, [{{0x9, 0x4, 0x0, 0x1, 0x3, 0x2, 0x6, 0x0, 0x1, {{0x8, 0x24, 0x6, 0x0, 0x0, "5c8d3a"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x2, 0xffff, 0xe}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x10, 0xe5, 0xca, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x7, 0x4, 0x2}}}}}]}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x110, 0xf2, 0x7, 0xd, 0x5e8742c3c877c89d, 0x81}, 0x24, &(0x7f0000000180)={0x5, 0xf, 0x24, 0x3, [@ssp_cap={0xc, 0x10, 0xa, 0x5, 0x0, 0x7, 0x0, 0x6fb2}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x8, 0x0, 0x1c}, @ssp_cap={0xc, 0x10, 0xa, 0x40, 0x0, 0x0, 0xf000, 0x706e}]}, 0x5, [{0x75, &(0x7f00000001c0)=@string={0x75, 0x3, "87a1555daa9a622eadb9384a20765950dbd587d4f782c7f2099c4f236f94c3c8ebc60fe100000000e8e757b7f3b1a5f7f3c72829efa1cd404634c013898e906d934f4a6e84ef568c82b3cd403a2c1b2d66424bb1baee88460487791eac2c70a99aab4976c7a12bd2c525ce7b414a63eb847fce"}}, {0xaf, &(0x7f0000000240)=@string={0xaf, 0x3, "034557a64b870e7b53aa4c9ccbb691caa5eea0f2457027574bff1a7e446e1f34c0d78976312f031867545a2328c73626bd9a5b902d097d28118ebb957f1efaf019bb1c00a5b4277abe37da15650e675829917ef093eb7e8efee067503be890b7d9e1696512cfbd509d4652a3743ef74f168d03ada2113a093c29ec95a080accb313f0dcc8493d405d51afea0b0dcb77e8e44ed7b7bd8a0ebb9ad71209bfb63b01fc685927d45e4f08eda230815"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x400a}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x82c}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x2c09}}]}) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10) syz_usb_disconnect(r0) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000000), r9) 2.95998564s ago: executing program 0 (id=223): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/249, 0xf9}], 0x1}, 0x0) close(r0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0x0) 2.941331761s ago: executing program 0 (id=224): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x400940, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x90) setsockopt$packet_int(r1, 0x107, 0x13, &(0x7f0000000040)=0x4, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000009c0)='kfree\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x3ffffffffffffda, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000022008500000083000000bf090000000000005509010000000000"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x2d) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @local, @multicast1}}}}) syz_genetlink_get_family_id$ethtool(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x90) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000440)={0x1c, r9, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 2.695764792s ago: executing program 4 (id=225): bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x300, 0xffffffffffffffff, 0x3ffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x5}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0xff) r1 = dup2(r0, r0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) read$FUSE(r1, &(0x7f0000001f40)={0x2020}, 0x2020) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) read$FUSE(r2, &(0x7f0000003f80)={0x2020}, 0x2020) ptrace(0x10, 0x1) write$selinux_load(0xffffffffffffffff, 0x0, 0x20) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x90) ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4030ae7b, &(0x7f0000000080)={0xef1, 0x3, 0x2, 0x983e, 0x30}) 2.548888315s ago: executing program 3 (id=227): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000480, &(0x7f0000000000)={[{@jqfmt_vfsv0}, {@errors_remount}]}, 0x1, 0x784, &(0x7f00000007c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x80) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="010000000000000000007e"], 0x14}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000980)=ANY=[@ANYBLOB="98030000", @ANYRES16=r4, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r6, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='6T<=', @ANYRES16=r2, @ANYBLOB="00042abd7000fcdbdf256b00000008000300", @ANYRES32=r6, @ANYBLOB="0a001a0008021100000000000a001a0008021100000100000a001a000802110000000000"], 0x40}, 0x1, 0x0, 0x0, 0x4001}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r7 = getpid() sched_setscheduler(r7, 0x1, &(0x7f0000000300)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x1, 0x0, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200000100"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r11 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r10}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="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"/2356, @ANYRES64=r11], &(0x7f0000000340)='syzkaller\x00'}, 0x90) ptrace$ARCH_GET_CPUID(0x1e, r7, 0x0, 0x1011) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xb, 0x5, 0x2, 0x0, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) 1.853326613s ago: executing program 2 (id=228): syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000540)={[], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}]}) 1.844124734s ago: executing program 0 (id=229): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x7fe4, 0x1}, 0x48) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x400940, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x90) setsockopt$packet_int(r1, 0x107, 0x13, &(0x7f0000000040)=0x4, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000008000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0xfffffffffffffe71) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x3ffffffffffffda, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000022008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @local, @multicast1}}}}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_EEE_GET(r7, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x90) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000440)={0x1c, r9, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 1.587979496s ago: executing program 3 (id=230): syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000540)={[], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}]}) 1.253230444s ago: executing program 1 (id=231): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x558, 0x320, 0xffffff80, 0x178, 0x0, 0x178, 0x488, 0x22b, 0x258, 0x488, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0x300, 0x320, 0x340, {0x1e0002a8, 0x7203000000000000}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x1a, 0x64, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}]}}, @inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x0, 0x0, 0x0, 0x8000000], [], 'veth1_to_bridge\x00', 'geneve1\x00'}, 0x0, 0x100, 0x168, 0x0, {}, [@common=@ah={{0x30}}, @common=@ipv6header={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) 1.109561826s ago: executing program 2 (id=232): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x8, 0x8}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x7cee9000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x0) getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r5, @ANYBLOB], 0x48}}, 0x0) 1.108824066s ago: executing program 0 (id=233): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x11f25000) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='freezer.self_freezing\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x8, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x90) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'lo\x00'}) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x1c0002, 0x0) write$vga_arbiter(r5, &(0x7f0000000000)=ANY=[], 0xc) close(r5) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'tunl0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 1.019994574s ago: executing program 1 (id=234): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/249, 0xf9}], 0x1}, 0x0) close(r0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="ff009dbb57e0a66a00"/20, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0x0) 1.003230705s ago: executing program 1 (id=235): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = syz_open_dev$vcsu(&(0x7f0000000040), 0xb, 0x3b6abb789c9b8381) ioctl$TCSETS(r1, 0x5402, &(0x7f00000000c0)={0x101, 0x80000001, 0x0, 0x4, 0x15, "1a6f003aad44c60001969f5d84f403ae133177"}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000180)={'gre0\x00', &(0x7f00000006c0)={'syztnl0\x00', 0x0, 0x10, 0x7800, 0x5d6, 0x0, {{0x49, 0x4, 0x2, 0x3b, 0x124, 0x64, 0x0, 0x81, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x3a}, @private=0xa010100, {[@ssrr={0x89, 0x13, 0x21, [@dev={0xac, 0x14, 0x14, 0x33}, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101, @multicast1]}, @cipso={0x86, 0x4c, 0xffffffffffffffff, [{0x7, 0xa, "b7fc0dc391d5198e"}, {0x6, 0x10, "4faaa9753499e3748e56d63f471e"}, {0x2, 0x2}, {0x7, 0xa, "88b75aec9ccbad81"}, {0x5, 0x7, "b042a20772"}, {0x2, 0x10, "b30629c8e74c729b28eb3807f7f1"}, {0x6, 0x9, "0ccd242fad3417"}]}, @noop, @cipso={0x86, 0x62, 0x0, [{0x5, 0x9, "79ffecdac763dc"}, {0x2, 0xd, "5771b66348c7d7cb7b99b8"}, {0x7, 0xb, "595eb2a344b36ea78d"}, {0x5, 0xc, "957491e1f30d2795a9ca"}, {0x0, 0x2}, {0x5, 0xf, "b8853a66151294e4e35a52a086"}, {0x6, 0x8, "b866fe9a874e"}, {0x2, 0xe, "b961421e5fceed6fc7195862"}, {0xbda3dc416313bdc7, 0x8, "43f7394cfa73"}]}, @cipso={0x86, 0x1d, 0xffffffffffffffff, [{0x0, 0xa, "94ec397d1dda1140"}, {0x2, 0xb, "c13878622aaf08908a"}, {0x5, 0x2}]}, @timestamp_addr={0x44, 0x1c, 0x1a, 0x1, 0x7, [{@broadcast, 0x7}, {@private=0xa010102, 0x6}, {@multicast1, 0x4}]}, @generic={0x7, 0x12, "a119efef1bf1e77ecbc852e237eed7a4"}]}}}}}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000003c0)={0x8}, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000001880)={'wg1\x00', 0x0}) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000fc0), 0xffffffffffffffff) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r9}, 0x10) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000014c0)={0x40, r7, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r6}]}, 0x40}}, 0x0) 657.319165ms ago: executing program 3 (id=236): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r1, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000240)={0x58, r2, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4048004}, 0x40000) ioctl$UI_BEGIN_FF_UPLOAD(r0, 0xc06855c8, &(0x7f00000001c0)={0x3, 0xfffffffe, {0x54, 0x4, 0x1, {0x7, 0x6}, {0x2, 0x789}, @const={0x88, {0x1, 0x1, 0xc3, 0x66}}}, {0x54, 0x0, 0x4, {0xce00}, {0xffff, 0x2}, @const={0x3, {0xfffe, 0x2b, 0x1ff, 0x6}}}}) 604.123709ms ago: executing program 3 (id=237): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="b800000000010104000000000000002f0a0000003c0001802c000180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000aa0c000280050001000000000008000740000000002400068014000400200100000000000000000000000000010c0003800600010000000000dd255ab8d423a7a1d15ecd3e38ecae438f533618fbca411c3f36835f"], 0xb8}}, 0x0) 598.676099ms ago: executing program 3 (id=238): r0 = gettid() (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) (async) fcntl$setsig(r1, 0xa, 0x12) (async) openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) (async) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) getresgid(0x0, 0x0, 0x0) (async) clock_nanosleep(0x2, 0x0, &(0x7f0000000200)={0x0, r3+10000000}, &(0x7f0000000240)) (async) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x16, 0x4, 0x80000001, 0x1, 0x20}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000400)={r5, &(0x7f0000000380), 0x20000000}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000a200000000000100020000f8ffffffb703000008000000b7040000000000008500000003000000950000000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_ext={0x1c, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000c57128000000000000000000851000000700000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000000000000850000008600000085100000faffffff85000000b20000002d55fcffffffffff9d88feff040000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x400, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x2, 0xf, 0xfffffffd, 0x2}, 0x10, 0x1c167, r6, 0x8, &(0x7f0000000300)=[r5, r5, r5, r5, r5, r5, r5, r5, r5, r5], &(0x7f0000000340)=[{0x4, 0x5, 0x10, 0x9}, {0x1, 0x4, 0xa}, {0x0, 0x1, 0x0, 0x8}, {0x1, 0x4, 0x3, 0x3}, {0x3, 0x2, 0xf, 0xc}, {0x0, 0x4, 0xb, 0x3}, {0x0, 0x4, 0xe, 0x5}, {0x4, 0x3, 0x9, 0x7}], 0x10, 0xfffffff9}, 0x90) ppoll(&(0x7f00000003c0)=[{r4, 0xb}, {r5, 0x412}, {r7, 0x8014}, {r7, 0xe7e9fb84eb6ee581}], 0x4, 0x0, 0x0, 0x0) dup2(r1, r2) fcntl$setown(r2, 0x8, r0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x57, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20005}, 0x90) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) syz_open_dev$evdev(0x0, 0x0, 0x2000) r9 = getpid() sched_setscheduler(r9, 0x1, &(0x7f0000000100)=0x5) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r10, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r11, &(0x7f00000bd000), 0x318, 0x0) 598.468869ms ago: executing program 3 (id=239): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x3810744, &(0x7f00000001c0)={[{}, {@minixdf}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@data_err_abort}, {@grpquota}, {@noinit_itable}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x400000}}, {@max_batch_time={'max_batch_time', 0x3d, 0x8000000000000000}}, {@acl}]}, 0xff, 0x46b, &(0x7f0000000800)="$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") bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x4, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@generic={0x1, 0xc, 0x2, 0xb, 0x6}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$inet(0x2, 0xa, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = getpid() syz_pidfd_open(r1, 0x0) sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) (fail_nth: 28) 107.786921ms ago: executing program 1 (id=240): r0 = socket$inet_udplite(0x2, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f00000003c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x1}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) syz_open_dev$usbfs(0x0, 0x76, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='contention_begin\x00'}, 0x10) ioctl$USBDEVFS_DISCSIGNAL(r4, 0x8010550e, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r4, 0x8108551b, &(0x7f00000006c0)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a02fa560186d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f68530c2b21a100efb76cba37ff3111d6847e0c7f719e169a596e5fc008daeffa68f6222103472bc55704cdb72b4b996ed82ccb1eaae27969d008ba7d34171113cc06726615380fe65a6a0a72e19c2b60bd6276fd363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13e4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe3635b2ee97c143f28def4b73905ca14d90d1f600"}) ioctl$USBDEVFS_ALLOW_SUSPEND(r4, 0x5522) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) splice(0xffffffffffffffff, 0x0, r4, 0x0, 0xb7c, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='svcrdma_wc_read\x00', r5}, 0x10) write$P9_RRENAMEAT(r5, 0x0, 0x0) write$uinput_user_dev(r5, &(0x7f0000000640)={'syz0\x00', {0x0, 0x3}, 0x0, [0x4, 0x40, 0xa7, 0x4, 0x6, 0x5, 0x0, 0x8, 0x80, 0x8, 0x0, 0x1f82, 0x6, 0x80000000, 0x0, 0x3, 0x7, 0x101, 0x94, 0x64, 0x7fff, 0x6da, 0x9, 0xff, 0x6, 0x0, 0x3ff, 0x4, 0x8, 0x800, 0x1ff, 0x400, 0x5, 0x1f, 0x8a2a, 0x4, 0xfff, 0xfffffffb, 0x2, 0xf2aa, 0x3ff, 0x10001, 0x0, 0x7, 0x80000000, 0x2, 0x3f, 0x2, 0xffffff81, 0x7, 0x3f, 0x3, 0x81, 0x100, 0x1, 0x7, 0x8, 0x0, 0x80, 0x401, 0x0, 0x0, 0x3ff], [0x6, 0x4000000, 0x1f, 0x6, 0x1, 0x200, 0xbf, 0x4, 0x7f, 0x4000, 0x0, 0xff, 0x4, 0x9, 0xfffffffc, 0x0, 0x26, 0xa7, 0xfff, 0x1ffc, 0x1, 0x9, 0x1, 0xff, 0xd3, 0xed, 0x40, 0x7fffffff, 0x2, 0x1, 0xfff, 0x9, 0x8cc4, 0x3, 0x4, 0x0, 0x2000000, 0xffffffff, 0x10000000, 0x9, 0x80000001, 0x8, 0x6, 0x4dda, 0x2, 0x0, 0x8, 0x29, 0x7, 0x9, 0x8, 0x6, 0x0, 0x7fe000, 0x8, 0x3, 0x1f, 0xfffff800, 0x3f, 0x1, 0x6, 0x9, 0x4, 0x10], [0x1000, 0x80000000, 0x0, 0x2, 0x81, 0x6, 0x7, 0x1ff, 0x1, 0x4, 0x5, 0x9, 0x5, 0x5, 0x1, 0x7ff, 0x100, 0x6, 0x1, 0x5, 0x1, 0x80000001, 0xfffffffe, 0x0, 0x5, 0x317, 0x5, 0x5, 0x1, 0x6, 0x1000, 0x40, 0xcc, 0x5, 0x1, 0x6, 0xacf0, 0x7b0, 0x7f, 0x0, 0x2, 0x4, 0xffffffcd, 0xf20, 0x27, 0x1, 0x0, 0xffffffff, 0x5d3a38a8, 0xefe3, 0x80000000, 0x1, 0x8, 0x0, 0xcdec, 0x5, 0x2, 0x951, 0x8, 0x9, 0x8, 0xdb15, 0x7, 0x101], [0x80000000, 0x8, 0xff, 0x7, 0x2, 0x2, 0x7fffffff, 0x6, 0x7, 0xffff, 0x2, 0x6, 0x4e8d3541, 0x5, 0x800, 0x7, 0x3b, 0x400, 0x8, 0x9, 0xffff, 0x3, 0x100, 0x4, 0xff, 0x588, 0xfffffffc, 0x1, 0x5, 0x10001, 0x7, 0x3, 0x9da, 0x3, 0x4, 0xfffff801, 0x943, 0x9, 0x4, 0x1ff, 0x8001, 0x4543b62, 0x8, 0x100, 0xa3, 0x8, 0x6, 0xe5, 0x17a, 0xffff, 0x6, 0x80000, 0x6, 0x9, 0x200, 0x7, 0x7, 0x80000000, 0x3, 0x7a, 0x3f, 0x5, 0x40, 0xfbb]}, 0x45c) writev(r5, &(0x7f0000000040)=[{&(0x7f0000000000)='5', 0xfdef}], 0x1) dup3(r2, r0, 0x80000) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000880}, 0x80) ioctl$USBDEVFS_SETINTERFACE(r4, 0x80045510, &(0x7f0000000380)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000400)={&(0x7f0000000400)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x8000) 66.851564ms ago: executing program 0 (id=241): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="300000001800010300000000000000000a800000ff0300060000000014000100fc020000000000000000000000000000f74efbae4e6617e286094810b36fd447e5583aa19c55a59bbc8971152f3dfb3aa2a9ade7c77559d0d1c6defaa5ddd2b296df6ca8de226873dd57703af7658528561d81516414c3a601ad3e03af74f30908e8b9998e28443d5881122b4d93e590ab"], 0x30}}, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000001380)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa08004501003c0000000000299078ac1e0001ac141400888b1d007460a166a5ef0af5ef1371b4064a7bcd02cacf20f80523eb3790a848b63dcb7fcec100da"], 0x0) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x80000) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x6}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x2484}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, &(0x7f0000000180)={0x8, 0x311, 0x2, 0x1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) timer_create(0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000580)=ANY=[@ANYRES64=r1, @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r4}, 0x0, &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 0s ago: executing program 2 (id=242): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0}, 0x90) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (rerun: 64) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) setpriority(0x1, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x1008a, &(0x7f00000000c0)={[{@nomblk_io_submit}, {@usrjquota, 0x22}, {@errors_continue}, {@noload}, {@data_err_ignore}, {@grpjquota, 0x22}, {@errors_continue}, {@errors_remount}, {@jqfmt_vfsv1}]}, 0xfe, 0x464, &(0x7f0000000940)="$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") (async) syslog(0x2, 0xffffffffffffffff, 0x1000000) r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r2, 0x0, 0x0) kernel console output (not intermixed with test programs): T24] audit: type=1400 audit(1724727047.650:74): avc: denied { read } for pid=269 comm="syz-executor" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 18.500692][ T24] audit: type=1400 audit(1724727047.650:75): avc: denied { open } for pid=269 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 19.296721][ T284] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.303692][ T284] bridge0: port 1(bridge_slave_0) entered disabled state [ 19.310934][ T284] device bridge_slave_0 entered promiscuous mode [ 19.325652][ T279] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.332536][ T279] bridge0: port 1(bridge_slave_0) entered disabled state [ 19.339663][ T279] device bridge_slave_0 entered promiscuous mode [ 19.346298][ T279] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.353283][ T279] bridge0: port 2(bridge_slave_1) entered disabled state [ 19.360439][ T279] device bridge_slave_1 entered promiscuous mode [ 19.368059][ T284] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.374879][ T284] bridge0: port 2(bridge_slave_1) entered disabled state [ 19.382148][ T284] device bridge_slave_1 entered promiscuous mode [ 19.412667][ T281] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.419588][ T281] bridge0: port 1(bridge_slave_0) entered disabled state [ 19.426733][ T281] device bridge_slave_0 entered promiscuous mode [ 19.433492][ T281] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.440506][ T281] bridge0: port 2(bridge_slave_1) entered disabled state [ 19.447706][ T281] device bridge_slave_1 entered promiscuous mode [ 19.453965][ T280] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.460882][ T280] bridge0: port 1(bridge_slave_0) entered disabled state [ 19.467931][ T280] device bridge_slave_0 entered promiscuous mode [ 19.475493][ T280] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.482453][ T280] bridge0: port 2(bridge_slave_1) entered disabled state [ 19.489622][ T280] device bridge_slave_1 entered promiscuous mode [ 19.578300][ T282] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.585162][ T282] bridge0: port 1(bridge_slave_0) entered disabled state [ 19.592473][ T282] device bridge_slave_0 entered promiscuous mode [ 19.618054][ T282] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.624891][ T282] bridge0: port 2(bridge_slave_1) entered disabled state [ 19.632057][ T282] device bridge_slave_1 entered promiscuous mode [ 19.681511][ T280] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.688367][ T280] bridge0: port 2(bridge_slave_1) entered forwarding state [ 19.695433][ T280] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.702268][ T280] bridge0: port 1(bridge_slave_0) entered forwarding state [ 19.719037][ T284] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.725869][ T284] bridge0: port 2(bridge_slave_1) entered forwarding state [ 19.732970][ T284] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.739784][ T284] bridge0: port 1(bridge_slave_0) entered forwarding state [ 19.754322][ T279] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.761168][ T279] bridge0: port 2(bridge_slave_1) entered forwarding state [ 19.768245][ T279] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.775041][ T279] bridge0: port 1(bridge_slave_0) entered forwarding state [ 19.783579][ T281] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.790412][ T281] bridge0: port 2(bridge_slave_1) entered forwarding state [ 19.797708][ T281] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.804467][ T281] bridge0: port 1(bridge_slave_0) entered forwarding state [ 19.821276][ T282] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.828127][ T282] bridge0: port 2(bridge_slave_1) entered forwarding state [ 19.835191][ T282] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.842022][ T282] bridge0: port 1(bridge_slave_0) entered forwarding state [ 19.866032][ T25] bridge0: port 1(bridge_slave_0) entered disabled state [ 19.873182][ T25] bridge0: port 2(bridge_slave_1) entered disabled state [ 19.880766][ T25] bridge0: port 1(bridge_slave_0) entered disabled state [ 19.887870][ T25] bridge0: port 2(bridge_slave_1) entered disabled state [ 19.894753][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 19.902128][ T25] bridge0: port 1(bridge_slave_0) entered disabled state [ 19.909071][ T25] bridge0: port 1(bridge_slave_0) entered disabled state [ 19.915895][ T25] bridge0: port 2(bridge_slave_1) entered disabled state [ 19.922852][ T25] bridge0: port 2(bridge_slave_1) entered disabled state [ 19.930219][ T25] bridge0: port 1(bridge_slave_0) entered disabled state [ 19.937236][ T25] bridge0: port 2(bridge_slave_1) entered disabled state [ 19.959797][ T288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 19.967267][ T288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 19.974436][ T288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 19.981768][ T288] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 19.990056][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.996874][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.004201][ T288] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 20.012182][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.019009][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.026183][ T288] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 20.034412][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.041253][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.062286][ T288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 20.070982][ T288] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 20.079060][ T288] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 20.086706][ T288] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 20.094596][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.101440][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.108607][ T288] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 20.116553][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.123396][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.130556][ T288] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 20.138686][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.145501][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.152747][ T288] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 20.160689][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.167531][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.194454][ T288] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 20.202798][ T288] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 20.210886][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.217723][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.224908][ T288] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 20.232734][ T288] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 20.240531][ T288] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 20.248293][ T288] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 20.255989][ T288] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 20.278336][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 20.285533][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 20.293390][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 20.301459][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 20.309498][ T15] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.316312][ T15] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.323491][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 20.331511][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 20.339432][ T15] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.346255][ T15] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.353436][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 20.361179][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 20.368902][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 20.376675][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 20.393383][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 20.401619][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 20.409711][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 20.417661][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 20.425329][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 20.433499][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 20.442875][ T280] device veth0_vlan entered promiscuous mode [ 20.455206][ T284] device veth0_vlan entered promiscuous mode [ 20.461236][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 20.468443][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 20.475534][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 20.484450][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 20.492574][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 20.500678][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 20.508831][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 20.516454][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 20.524419][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 20.531690][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 20.540654][ T281] device veth0_vlan entered promiscuous mode [ 20.551678][ T282] device veth0_vlan entered promiscuous mode [ 20.558888][ T280] device veth1_macvtap entered promiscuous mode [ 20.567240][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 20.574887][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 20.583079][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 20.591148][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 20.599120][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 20.606419][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 20.614486][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 20.622574][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 20.630303][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 20.638237][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 20.645462][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 20.652874][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 20.660316][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 20.673907][ T284] device veth1_macvtap entered promiscuous mode [ 20.684546][ T279] device veth0_vlan entered promiscuous mode [ 20.691352][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 20.700057][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 20.708176][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 20.715645][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 20.723780][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 20.731807][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 20.739916][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 20.748008][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 20.755950][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 20.764060][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 20.771782][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 20.779568][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 20.786767][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 20.801109][ T279] device veth1_macvtap entered promiscuous mode [ 20.808230][ T282] device veth1_macvtap entered promiscuous mode [ 20.825663][ T281] device veth1_macvtap entered promiscuous mode [ 20.833034][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 20.841057][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 20.849057][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 20.856875][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 20.864265][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 20.872190][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 20.880442][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 20.888522][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 20.896524][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 20.904531][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 20.912906][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 20.921035][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 20.929139][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 20.937108][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 20.944940][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 20.957267][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 20.965262][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 20.973760][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 20.982103][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 21.009252][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 21.017324][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 21.025352][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 21.033640][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 21.045921][ T280] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation [ 21.232461][ T313] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 21.239676][ T313] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 21.302537][ T313] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,errors=remount-ro,dioread_nolock,max_dir_size_kb=0x0000000000000009,nomblk_io_submit,data_err=abort, [ 21.466621][ T330] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6'. [ 21.482098][ T330] device vlan2 entered promiscuous mode [ 21.548973][ T307] syz.3.4[307] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 21.549815][ T307] syz.3.4[307] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 21.594810][ T325] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 21.718846][ T280] EXT4-fs error (device loop3): ext4_map_blocks:600: inode #2: block 48: comm syz-executor: lblock 0 mapped to illegal pblock 48 (length 1) [ 21.737787][ T280] EXT4-fs (loop3): Remounting filesystem read-only [ 22.156969][ T5] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 22.201155][ T341] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.208275][ T341] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.215471][ T341] device bridge_slave_0 entered promiscuous mode [ 22.223805][ T341] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.230833][ T341] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.238183][ T341] device bridge_slave_1 entered promiscuous mode [ 22.288104][ T341] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.295069][ T341] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.302153][ T341] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.308952][ T341] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.337070][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.344849][ T303] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.352631][ T303] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.369091][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.379171][ T15] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.386011][ T15] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.393806][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.401773][ T5] usb 3-1: Using ep0 maxpacket: 16 [ 22.407128][ T15] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.413974][ T15] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.421471][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.438262][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.453214][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 22.461887][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 22.470632][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 22.478190][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 22.486073][ T341] device veth0_vlan entered promiscuous mode [ 22.502386][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 22.510604][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 22.520295][ T341] device veth1_macvtap entered promiscuous mode [ 22.531465][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 22.539541][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 22.551105][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 22.567364][ T5] usb 3-1: unable to get BOS descriptor or descriptor too short [ 22.574938][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 22.583684][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 22.658166][ T5] usb 3-1: config 129 has an invalid interface number: 26 but max is 1 [ 22.675282][ T5] usb 3-1: config 129 has an invalid descriptor of length 238, skipping remainder of the config [ 22.686157][ T5] usb 3-1: config 129 has 1 interface, different from the descriptor's value: 2 [ 22.695156][ T5] usb 3-1: config 129 has no interface number 0 [ 22.702503][ T5] usb 3-1: config 129 interface 26 altsetting 213 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 22.725911][ T5] usb 3-1: config 129 interface 26 has no altsetting 0 [ 22.737279][ T356] ====================================================== [ 22.737279][ T356] WARNING: the mand mount option is being deprecated and [ 22.737279][ T356] will be removed in v5.15! [ 22.737279][ T356] ====================================================== [ 22.837636][ T304] device bridge_slave_1 left promiscuous mode [ 22.843830][ T304] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.851142][ T304] device bridge_slave_0 left promiscuous mode [ 22.857199][ T304] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.864714][ T304] device veth1_macvtap left promiscuous mode [ 22.870738][ T304] device veth0_vlan left promiscuous mode [ 22.879029][ T356] syz.0.13 uses obsolete (PF_INET,SOCK_PACKET) [ 22.885189][ T358] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 22.887028][ T5] usb 3-1: New USB device found, idVendor=1f38, idProduct=0001, bcdDevice=29.ec [ 22.910510][ T5] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 22.913629][ T351] EXT4-fs (loop3): mounted filesystem without journal. Opts: delalloc,nouid32,,errors=continue [ 22.919694][ T5] usb 3-1: Product: syz [ 22.932853][ T5] usb 3-1: Manufacturer: syz [ 22.937877][ T5] usb 3-1: SerialNumber: syz [ 22.939926][ T351] ext4 filesystem being mounted at /0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 22.988233][ T358] EXT4-fs (loop1): mounted filesystem without journal. Opts: nombcache,usrjquota=,errors=remount-ro,norecovery,abort,mblk_io_submit,nouid32,barrier=0x0000000000000000,grpjquota=,bsddf, [ 23.071594][ T24] kauditd_printk_skb: 56 callbacks suppressed [ 23.071606][ T24] audit: type=1400 audit(1724727052.320:132): avc: denied { create } for pid=350 comm="syz.3.11" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 23.215943][ T24] audit: type=1400 audit(1724727052.450:133): avc: denied { unlink } for pid=355 comm="syz.0.13" name="#1" dev="tmpfs" ino=34 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 23.308090][ T372] overlayfs: failed to create directory ./bus/work (errno: 28); mounting read-only [ 23.482186][ T24] audit: type=1400 audit(1724727052.540:134): avc: denied { create } for pid=350 comm="syz.3.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 23.551831][ T24] audit: type=1400 audit(1724727052.540:135): avc: denied { setopt } for pid=350 comm="syz.3.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 23.569481][ T367] exfat: Unknown parameter 'ÿÿârîM#œ:n>̱ÄûH û aø*49ünÕ¹V2{_–L9ì ¥áQ¬ñkv†ßg-dt¬íEŒ0ßfí-6jD©Ðv÷¸<Εÿÿÿÿÿÿÿÿ0xffffffffffffffff' [ 23.574414][ T24] audit: type=1400 audit(1724727052.550:136): avc: denied { mounton } for pid=350 comm="syz.3.11" path="/0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/bus" dev="loop3" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 23.628884][ T24] audit: type=1400 audit(1724727052.550:137): avc: denied { write } for pid=350 comm="syz.3.11" name="bus" dev="loop3" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 23.650128][ T24] audit: type=1400 audit(1724727052.560:138): avc: denied { add_name } for pid=350 comm="syz.3.11" name="work" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 23.670928][ T24] audit: type=1400 audit(1724727052.800:139): avc: denied { remove_name } for pid=341 comm="syz-executor" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 23.714627][ T24] audit: type=1400 audit(1724727052.800:140): avc: denied { unlink } for pid=341 comm="syz-executor" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 23.727074][ T5] usb 3-1: unknown interface protocol 0x7d, assuming v1 [ 23.758842][ T24] audit: type=1400 audit(1724727052.820:141): avc: denied { rmdir } for pid=341 comm="syz-executor" name="lost+found" dev="loop3" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 23.764612][ T5] usb 3-1: 26:2 : does not exist [ 23.798405][ T5] usb 3-1: USB disconnect, device number 2 [ 23.984616][ T379] xt_l2tp: invalid flags combination: 0 [ 23.997711][ T374] udevd[374]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:129.26/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 24.170861][ T15] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 24.707052][ T15] usb 4-1: Using ep0 maxpacket: 16 [ 24.868674][ T387] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 24.881824][ T387] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 24.898341][ T387] F2FS-fs (loop4): Found nat_bits in checkpoint [ 24.966589][ T387] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 24.989032][ T387] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 24.999093][ T387] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 25.048774][ T15] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 25.062758][ T15] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 25.071132][ T15] usb 4-1: Product: syz [ 25.075139][ T15] usb 4-1: Manufacturer: syz [ 25.091899][ T15] usb 4-1: SerialNumber: syz [ 25.107286][ T15] usb 4-1: config 0 descriptor?? [ 25.147762][ T15] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 25.158131][ T15] usb 4-1: Detected FT232H [ 25.363557][ T376] udc-core: couldn't find an available UDC or it's busy [ 25.379396][ T376] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 25.418460][ T376] syz.3.16[376] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 25.418980][ T376] syz.3.16[376] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 25.440608][ T376] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 25.480634][ T376] udc-core: couldn't find an available UDC or it's busy [ 25.491738][ T376] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 25.536962][ T15] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 25.557221][ T15] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 25.577279][ T15] ftdi_sio 4-1:0.0: GPIO initialisation failed: -71 [ 25.589321][ T15] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 25.598283][ T5] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 25.621428][ T15] usb 4-1: USB disconnect, device number 2 [ 25.632431][ T15] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 25.651086][ T15] ftdi_sio 4-1:0.0: device disconnected [ 25.736601][ T408] 9pnet: Insufficient options for proto=fd [ 25.743279][ T408] netlink: 8 bytes leftover after parsing attributes in process `syz.1.21'. [ 25.779663][ T410] xt_CT: netfilter: NOTRACK target is deprecated, use CT instead or upgrade iptables [ 25.867018][ T5] usb 3-1: Using ep0 maxpacket: 32 [ 26.607095][ T5] usb 3-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 26.619884][ T5] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.628816][ T5] usb 3-1: Product: syz [ 26.632874][ T5] usb 3-1: Manufacturer: syz [ 26.637614][ T5] usb 3-1: SerialNumber: syz [ 26.645033][ T5] usb 3-1: config 0 descriptor?? [ 26.876192][ T432] FAULT_INJECTION: forcing a failure. [ 26.876192][ T432] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 26.895641][ T432] CPU: 1 PID: 432 Comm: syz.0.29 Not tainted 5.10.223-syzkaller-01561-g0890c03b8b7d #0 [ 26.905246][ T432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 26.915150][ T432] Call Trace: [ 26.918277][ T432] dump_stack_lvl+0x1e2/0x24b [ 26.922785][ T432] ? bfq_pos_tree_add_move+0x43b/0x43b [ 26.928074][ T432] dump_stack+0x15/0x17 [ 26.932059][ T432] should_fail+0x3c6/0x510 [ 26.936313][ T432] should_fail_usercopy+0x1a/0x20 [ 26.941187][ T432] copy_page_from_iter+0x398/0x6e0 [ 26.946120][ T432] skb_copy_datagram_from_iter+0x2f3/0x6d0 [ 26.951764][ T432] packet_sendmsg+0x3f2a/0x60a0 [ 26.956447][ T432] ? sysvec_irq_work+0xc8/0xd0 [ 26.961047][ T432] ? avc_has_perm+0x14d/0x400 [ 26.965569][ T432] ? __irq_work_queue_local+0x111/0x180 [ 26.970943][ T432] ? memset+0x35/0x40 [ 26.974770][ T432] ? selinux_socket_sendmsg+0x243/0x340 [ 26.980143][ T432] ? selinux_socket_accept+0x5b0/0x5b0 [ 26.985436][ T432] ? packet_getsockopt+0xea0/0xea0 [ 26.990385][ T432] ? check_stack_object+0xf4/0x130 [ 26.995330][ T432] ? security_socket_sendmsg+0x82/0xb0 [ 27.000624][ T432] ? packet_getsockopt+0xea0/0xea0 [ 27.005573][ T432] __sys_sendto+0x545/0x700 [ 27.009913][ T432] ? __ia32_sys_getpeername+0x90/0x90 [ 27.015121][ T432] ? __ia32_sys_read+0x90/0x90 [ 27.019720][ T432] __x64_sys_sendto+0xe5/0x100 [ 27.024320][ T432] do_syscall_64+0x34/0x70 [ 27.028578][ T432] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 27.034301][ T432] RIP: 0033:0x7facdb033e79 [ 27.038555][ T432] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 27.057993][ T432] RSP: 002b:00007facd9cb1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 27.066254][ T432] RAX: ffffffffffffffda RBX: 00007facdb1cff80 RCX: 00007facdb033e79 [ 27.074056][ T432] RDX: 000000000001000a RSI: 0000000020000180 RDI: 0000000000000003 [ 27.081962][ T432] RBP: 00007facd9cb1090 R08: 0000000020000140 R09: 0000000000000014 [ 27.089870][ T432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 27.097669][ T432] R13: 0000000000000000 R14: 00007facdb1cff80 R15: 00007ffe6f72a178 [ 27.219847][ T436] EXT4-fs (loop0): 1 truncate cleaned up [ 27.225574][ T436] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 27.634624][ T442] Zero length message leads to an empty skb [ 28.159607][ T444] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 28.193769][ T453] EXT4-fs (loop1): Ignoring removed orlov option [ 28.201317][ T453] EXT4-fs (loop1): Test dummy encryption mode enabled [ 28.210221][ T453] EXT4-fs warning (device loop1): ext4_enable_quotas:6467: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 28.225486][ T453] EXT4-fs (loop1): mount failed [ 28.330062][ T24] kauditd_printk_skb: 51 callbacks suppressed [ 28.330074][ T24] audit: type=1400 audit(1724727057.580:193): avc: denied { mounton } for pid=456 comm="syz.0.36" path="/7/bus/bus" dev="loop0" ino=1048595 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1 [ 28.396424][ T24] audit: type=1400 audit(1724727057.640:194): avc: denied { ioctl } for pid=456 comm="syz.0.36" path="socket:[15297]" dev="sockfs" ino=15297 ioctlcmd=0x48ca scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 28.426952][ T444] usb 4-1: Using ep0 maxpacket: 32 [ 28.547002][ T444] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 28.567847][ T444] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 28.598127][ T444] usb 4-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 28.618369][ T444] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.638779][ T444] usb 4-1: config 0 descriptor?? [ 28.661222][ T24] audit: type=1400 audit(1724727057.910:195): avc: denied { write } for pid=468 comm="syz.4.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 28.786963][ T400] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 29.098068][ T448] udc-core: couldn't find an available UDC or it's busy [ 29.104902][ T448] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 29.117799][ T444] hkems 0003:2006:0118.0001: unbalanced delimiter at end of report description [ 29.126794][ T444] hkems 0003:2006:0118.0001: parse failed [ 29.132435][ T444] hkems: probe of 0003:2006:0118.0001 failed with error -22 [ 29.266950][ T400] usb 2-1: Using ep0 maxpacket: 16 [ 29.318128][ T444] usb 4-1: USB disconnect, device number 3 [ 29.387073][ T400] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 29.397834][ T400] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 29.407401][ T400] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 29.420056][ T400] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 29.428937][ T400] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.437445][ T400] usb 2-1: config 0 descriptor?? [ 29.917897][ T400] koneplus 0003:1E7D:2E22.0002: unknown main item tag 0x0 [ 29.925722][ T400] koneplus 0003:1E7D:2E22.0002: hidraw0: USB HID v0.00 Device [HID 1e7d:2e22] on usb-dummy_hcd.1-1/input0 [ 29.939828][ T481] netlink: 4 bytes leftover after parsing attributes in process `syz.3.42'. [ 29.948629][ T481] netlink: 12 bytes leftover after parsing attributes in process `syz.3.42'. [ 29.958300][ T481] netlink: 4 bytes leftover after parsing attributes in process `syz.3.42'. [ 29.978383][ T24] audit: type=1400 audit(1724727059.230:196): avc: denied { read } for pid=482 comm="syz.3.43" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 30.001353][ T483] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 30.017254][ T24] audit: type=1400 audit(1724727059.250:197): avc: denied { open } for pid=482 comm="syz.3.43" path="/dev/kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 30.043290][ T24] audit: type=1400 audit(1724727059.250:198): avc: denied { ioctl } for pid=482 comm="syz.3.43" path="/dev/kvm" dev="devtmpfs" ino=82 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 30.120547][ T24] audit: type=1400 audit(1724727059.370:199): avc: denied { read } for pid=464 comm="syz.1.37" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 30.140654][ T400] koneplus 0003:1E7D:2E22.0002: couldn't init struct koneplus_device [ 30.148611][ T400] koneplus 0003:1E7D:2E22.0002: couldn't install mouse [ 30.155984][ T400] koneplus: probe of 0003:1E7D:2E22.0002 failed with error -71 [ 30.163821][ T24] audit: type=1400 audit(1724727059.370:200): avc: denied { write } for pid=464 comm="syz.1.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 30.193330][ T400] usb 2-1: USB disconnect, device number 2 [ 30.657001][ T5] rtl8150 3-1:0.0: couldn't reset the device [ 30.663016][ T5] rtl8150: probe of 3-1:0.0 failed with error -5 [ 30.669965][ T5] usb 3-1: USB disconnect, device number 3 [ 31.006955][ T400] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 31.016959][ T5] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 31.185447][ T24] audit: type=1400 audit(1724727060.430:201): avc: denied { connect } for pid=495 comm="syz.3.47" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 31.270445][ T24] audit: type=1400 audit(1724727060.520:202): avc: denied { create } for pid=499 comm="syz.3.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 31.297052][ T400] usb 2-1: Using ep0 maxpacket: 16 [ 31.337016][ T400] usb 2-1: too many configurations: 218, using maximum allowed: 8 [ 31.576991][ T288] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 31.677035][ T400] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 31.684425][ T400] usb 2-1: can't read configurations, error -61 [ 31.836983][ T400] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 31.856987][ T288] usb 4-1: Using ep0 maxpacket: 8 [ 32.087830][ T507] fuse: Unknown parameter 'batadv0' [ 32.096941][ T400] usb 2-1: Using ep0 maxpacket: 16 [ 32.137081][ T400] usb 2-1: too many configurations: 218, using maximum allowed: 8 [ 32.145625][ T288] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 32.156773][ T288] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 32.166521][ T288] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 32.256969][ T400] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 32.264375][ T400] usb 2-1: can't read configurations, error -61 [ 32.272505][ T400] usb usb2-port1: attempt power cycle [ 32.337318][ T288] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 32.346469][ T288] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.354407][ T288] usb 4-1: Product: Ð [ 32.358542][ T288] usb 4-1: Manufacturer: ï„€æ‹ä‚°ïŸè¦’딑짬탻厾签ç–뀲牪ံ毘☷⇿䗠븻둣帨â¤ïµžìµˆç¼²ì™‘⪢ [ 32.370398][ T288] usb 4-1: SerialNumber:   [ 32.686965][ T400] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 32.689501][ T501] EXT4-fs (loop3): 1 orphan inode deleted [ 32.699950][ T501] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,resuid=0x000000000000ee01,usrquota, [ 32.720197][ T501] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038 (0x7fffffff) [ 32.797118][ T288] cdc_ncm 4-1:1.0: bind() failure [ 32.802813][ T288] cdc_ncm 4-1:1.1: bind() failure [ 32.812970][ T288] usb 4-1: USB disconnect, device number 4 [ 32.827015][ T400] usb 2-1: Using ep0 maxpacket: 16 [ 32.867053][ T400] usb 2-1: too many configurations: 218, using maximum allowed: 8 [ 32.956212][ T517] netlink: 4 bytes leftover after parsing attributes in process `syz.2.53'. [ 32.965239][ T517] netlink: 12 bytes leftover after parsing attributes in process `syz.2.53'. [ 33.007047][ T400] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 33.014603][ T400] usb 2-1: can't read configurations, error -61 [ 33.392900][ T24] kauditd_printk_skb: 16 callbacks suppressed [ 33.393373][ T24] audit: type=1400 audit(1724727062.640:219): avc: denied { ioctl } for pid=521 comm="syz.4.55" path="socket:[15436]" dev="sockfs" ino=15436 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 33.593269][ T400] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 33.687055][ T400] usb 2-1: Using ep0 maxpacket: 16 [ 33.727011][ T400] usb 2-1: too many configurations: 218, using maximum allowed: 8 [ 33.754182][ T24] audit: type=1400 audit(1724727063.000:220): avc: denied { read } for pid=532 comm="syz.1.58" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 33.776600][ T24] audit: type=1400 audit(1724727063.000:221): avc: denied { open } for pid=532 comm="syz.1.58" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 33.805615][ T24] audit: type=1400 audit(1724727063.000:222): avc: denied { ioctl } for pid=532 comm="syz.1.58" path="/dev/binderfs/binder0" dev="binder" ino=10 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 34.095736][ T24] audit: type=1400 audit(1724727063.000:223): avc: denied { map } for pid=532 comm="syz.1.58" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 34.119896][ T400] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 34.127901][ T400] usb 2-1: can't read configurations, error -71 [ 34.135051][ T400] usb usb2-port1: unable to enumerate USB device [ 34.221457][ T538] EXT4-fs (loop1): Ignoring removed orlov option [ 34.230786][ T538] EXT4-fs (loop1): Test dummy encryption mode enabled [ 34.527829][ T538] EXT4-fs warning (device loop1): ext4_enable_quotas:6467: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 34.545268][ T538] EXT4-fs (loop1): mount failed [ 35.495070][ T559] capability: warning: `syz.4.64' uses deprecated v2 capabilities in a way that may be insecure [ 35.584585][ T24] audit: type=1400 audit(1724727064.830:224): avc: denied { create } for pid=562 comm="syz.4.65" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 35.607693][ T24] audit: type=1400 audit(1724727064.860:225): avc: denied { write } for pid=562 comm="syz.4.65" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 35.648204][ T24] audit: type=1400 audit(1724727064.900:226): avc: denied { write } for pid=562 comm="syz.4.65" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 35.732560][ T24] audit: type=1400 audit(1724727064.970:227): avc: denied { unmount } for pid=341 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 35.780596][ T565] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 35.788930][ T571] EXT4-fs (loop1): bad s_want_extra_isize: 11962 [ 36.045159][ T576] netlink: 165 bytes leftover after parsing attributes in process `syz.1.68'. [ 36.294946][ T578] EXT4-fs (loop4): bad s_want_extra_isize: 11962 [ 36.347020][ T399] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 36.405476][ T586] FAULT_INJECTION: forcing a failure. [ 36.405476][ T586] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 36.418922][ T586] CPU: 1 PID: 586 Comm: syz.2.71 Not tainted 5.10.223-syzkaller-01561-g0890c03b8b7d #0 [ 36.428375][ T586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 36.438257][ T586] Call Trace: [ 36.441389][ T586] dump_stack_lvl+0x1e2/0x24b [ 36.445900][ T586] ? bfq_pos_tree_add_move+0x43b/0x43b [ 36.451195][ T586] dump_stack+0x15/0x17 [ 36.455184][ T586] should_fail+0x3c6/0x510 [ 36.459456][ T586] should_fail_usercopy+0x1a/0x20 [ 36.464300][ T586] copy_page_from_iter+0x398/0x6e0 [ 36.469255][ T586] skb_copy_datagram_from_iter+0x2f3/0x6d0 [ 36.474887][ T586] packet_sendmsg+0x3f2a/0x60a0 [ 36.479574][ T586] ? sysvec_irq_work+0xc8/0xd0 [ 36.484169][ T586] ? avc_has_perm+0x14d/0x400 [ 36.488697][ T586] ? __irq_work_queue_local+0x111/0x180 [ 36.494068][ T586] ? memset+0x35/0x40 [ 36.497887][ T586] ? selinux_socket_sendmsg+0x243/0x340 [ 36.503280][ T586] ? selinux_socket_accept+0x5b0/0x5b0 [ 36.508564][ T586] ? packet_getsockopt+0xea0/0xea0 [ 36.513512][ T586] ? check_stack_object+0xf4/0x130 [ 36.518459][ T586] ? security_socket_sendmsg+0x82/0xb0 [ 36.523747][ T586] ? packet_getsockopt+0xea0/0xea0 [ 36.528695][ T586] __sys_sendto+0x545/0x700 [ 36.533387][ T586] ? __ia32_sys_getpeername+0x90/0x90 [ 36.538596][ T586] ? __ia32_sys_read+0x90/0x90 [ 36.543194][ T586] __x64_sys_sendto+0xe5/0x100 [ 36.547796][ T586] do_syscall_64+0x34/0x70 [ 36.552049][ T586] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 36.557771][ T586] RIP: 0033:0x7f4b80d77e79 [ 36.562026][ T586] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 36.565056][ T587] netlink: 165 bytes leftover after parsing attributes in process `syz.4.69'. [ 36.581470][ T586] RSP: 002b:00007f4b7f9f5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 36.581486][ T586] RAX: ffffffffffffffda RBX: 00007f4b80f13f80 RCX: 00007f4b80d77e79 [ 36.581494][ T586] RDX: 000000000001000a RSI: 0000000020000180 RDI: 0000000000000003 [ 36.581501][ T586] RBP: 00007f4b7f9f5090 R08: 0000000020000140 R09: 0000000000000014 [ 36.581508][ T586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 36.581526][ T586] R13: 0000000000000000 R14: 00007f4b80f13f80 R15: 00007ffcc126a968 [ 36.786991][ T399] usb 4-1: Using ep0 maxpacket: 8 [ 37.114847][ T597] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 37.233649][ T24] audit: type=1400 audit(1724727066.480:228): avc: denied { create } for pid=598 comm="syz.2.74" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 37.326990][ T399] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 37.337197][ T399] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 37.949305][ T399] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 37.958307][ T399] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.966111][ T399] usb 4-1: Product: syz [ 37.970126][ T399] usb 4-1: Manufacturer: syz [ 37.974535][ T399] usb 4-1: SerialNumber: syz [ 37.980192][ T399] usb 4-1: config 0 descriptor?? [ 38.290953][ T615] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.297672][ T399] usb 4-1: USB disconnect, device number 5 [ 38.303850][ T615] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.311903][ T615] device bridge_slave_0 entered promiscuous mode [ 38.318963][ T615] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.325925][ T615] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.333482][ T615] device bridge_slave_1 entered promiscuous mode [ 38.358380][ T15] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 38.384982][ T615] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.391971][ T615] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.399050][ T615] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.405823][ T615] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.424573][ T288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 38.432118][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.439519][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.448341][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 38.456360][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.463234][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.471856][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 38.480112][ T370] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.486995][ T370] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.538778][ T288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 38.547980][ T288] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 38.555789][ T288] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 38.623085][ T615] device veth0_vlan entered promiscuous mode [ 38.629521][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 38.637555][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 38.644734][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 38.655898][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 38.665106][ T615] device veth1_macvtap entered promiscuous mode [ 38.676939][ T370] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 38.697999][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 39.007064][ T15] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 39.018725][ T15] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 39.028624][ T15] usb 3-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 39.047741][ T15] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.073917][ T15] usb 3-1: config 0 descriptor?? [ 39.267059][ T5] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 39.318220][ T613] udc-core: couldn't find an available UDC or it's busy [ 39.325160][ T613] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 39.355853][ T24] kauditd_printk_skb: 4 callbacks suppressed [ 39.355865][ T24] audit: type=1400 audit(1724727068.600:233): avc: denied { unmount } for pid=341 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 39.381589][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 39.507064][ T5] usb 1-1: Using ep0 maxpacket: 32 [ 39.601019][ T24] audit: type=1326 audit(1724727068.830:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=632 comm="syz.3.83" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e01c78e79 code=0x7ffc0000 [ 39.738593][ T24] audit: type=1326 audit(1724727068.830:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=632 comm="syz.3.83" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e01c78e79 code=0x7ffc0000 [ 39.755137][ T9] device bridge_slave_1 left promiscuous mode [ 39.769472][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.776834][ T9] device bridge_slave_0 left promiscuous mode [ 39.783051][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.790134][ T370] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 39.800932][ T24] audit: type=1326 audit(1724727068.830:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=632 comm="syz.3.83" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5e01c78e79 code=0x7ffc0000 [ 39.824795][ T370] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 39.836445][ T370] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 39.846506][ T24] audit: type=1326 audit(1724727068.830:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=632 comm="syz.3.83" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e01c78e79 code=0x7ffc0000 [ 39.871072][ T370] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.897760][ T9] device veth1_macvtap left promiscuous mode [ 39.904174][ T9] device veth0_vlan left promiscuous mode [ 39.947196][ T24] audit: type=1326 audit(1724727068.830:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=632 comm="syz.3.83" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e01c78e79 code=0x7ffc0000 [ 39.978176][ T370] usb 5-1: config 0 descriptor?? [ 40.011630][ T24] audit: type=1326 audit(1724727068.830:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=632 comm="syz.3.83" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5e01c78e79 code=0x7ffc0000 [ 40.034575][ T24] audit: type=1326 audit(1724727068.830:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=632 comm="syz.3.83" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e01c78e79 code=0x7ffc0000 [ 40.057613][ T24] audit: type=1326 audit(1724727068.830:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=632 comm="syz.3.83" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e01c78e79 code=0x7ffc0000 [ 40.080659][ T24] audit: type=1326 audit(1724727068.830:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=632 comm="syz.3.83" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5e01c78e79 code=0x7ffc0000 [ 40.137063][ T5] usb 1-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 40.146125][ T5] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.154013][ T5] usb 1-1: Product: syz [ 40.158059][ T5] usb 1-1: Manufacturer: syz [ 40.162439][ T5] usb 1-1: SerialNumber: syz [ 40.168098][ T5] usb 1-1: config 0 descriptor?? [ 40.265204][ T642] overlayfs: statfs failed on './file0' [ 40.336949][ T444] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 40.413969][ T648] FAULT_INJECTION: forcing a failure. [ 40.413969][ T648] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 40.426950][ T648] CPU: 1 PID: 648 Comm: syz.3.87 Not tainted 5.10.223-syzkaller-01561-g0890c03b8b7d #0 [ 40.436380][ T648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 40.446282][ T648] Call Trace: [ 40.449404][ T648] dump_stack_lvl+0x1e2/0x24b [ 40.453912][ T648] ? bfq_pos_tree_add_move+0x43b/0x43b [ 40.459210][ T648] ? shmem_getpage_gfp+0x2230/0x2480 [ 40.464328][ T648] dump_stack+0x15/0x17 [ 40.468317][ T648] should_fail+0x3c6/0x510 [ 40.472567][ T648] should_fail_usercopy+0x1a/0x20 [ 40.477438][ T648] iov_iter_copy_from_user_atomic+0x391/0xd80 [ 40.483332][ T648] ? shmem_getpage+0xa0/0xa0 [ 40.487767][ T648] ? iov_iter_fault_in_readable+0x31f/0x4f0 [ 40.493487][ T648] ? memzero_page+0x100/0x100 [ 40.498006][ T648] generic_perform_write+0x34c/0x570 [ 40.503149][ T648] ? grab_cache_page_write_begin+0xa0/0xa0 [ 40.508763][ T648] ? file_remove_privs+0x570/0x570 [ 40.513716][ T648] ? __kasan_check_write+0x14/0x20 [ 40.518663][ T648] __generic_file_write_iter+0x23c/0x560 [ 40.524127][ T648] ? generic_write_checks+0x3b9/0x470 [ 40.529338][ T648] generic_file_write_iter+0xaf/0x1c0 [ 40.534539][ T648] vfs_write+0xb4c/0xe70 [ 40.538622][ T648] ? virtio_read+0x210/0x210 [ 40.543046][ T648] ? kernel_write+0x3d0/0x3d0 [ 40.547572][ T648] ? __fdget_pos+0x209/0x3a0 [ 40.551989][ T648] ? ksys_write+0x77/0x2c0 [ 40.556244][ T648] ksys_write+0x199/0x2c0 [ 40.560411][ T648] ? sched_clock+0x3a/0x40 [ 40.564662][ T648] ? sched_clock_cpu+0x1b/0x3b0 [ 40.569348][ T648] ? __ia32_sys_read+0x90/0x90 [ 40.573948][ T648] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 40.579852][ T648] ? handle_fasteoi_nmi+0x390/0x390 [ 40.584885][ T648] __x64_sys_write+0x7b/0x90 [ 40.589311][ T648] do_syscall_64+0x34/0x70 [ 40.593562][ T648] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 40.599292][ T648] RIP: 0033:0x7f5e01c7795f [ 40.603541][ T648] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48 [ 40.622987][ T648] RSP: 002b:00007f5e008b3df0 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 40.631231][ T648] RAX: ffffffffffffffda RBX: 0000000000040000 RCX: 00007f5e01c7795f [ 40.639050][ T648] RDX: 0000000000040000 RSI: 00007f5df8494000 RDI: 0000000000000008 [ 40.646857][ T648] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000463 [ 40.654668][ T648] R10: 00000000000003bc R11: 0000000000000293 R12: 0000000000000008 [ 40.662475][ T648] R13: 00007f5e008b3ef0 R14: 00007f5e008b3eb0 R15: 00007f5df8494000 [ 40.700007][ T648] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 40.708662][ T648] EXT4-fs (loop3): invalid journal inode [ 40.714267][ T648] EXT4-fs (loop3): can't get journal size [ 40.721514][ T648] EXT4-fs (loop3): 1 truncate cleaned up [ 40.727111][ T648] EXT4-fs (loop3): mounted filesystem without journal. Opts: norecovery,,errors=continue [ 40.787456][ T444] usb 2-1: Using ep0 maxpacket: 16 [ 40.867060][ T5] (unnamed net_device) (uninitialized): Assigned a random MAC address: f2:00:71:19:d4:a1 [ 40.879440][ T5] rtl8150 1-1:0.0: eth1: rtl8150 is detected [ 40.886233][ T5] usb 1-1: USB disconnect, device number 2 [ 41.146763][ T444] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 41.159103][ T444] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.169931][ T444] usb 2-1: Product: syz [ 41.174030][ T444] usb 2-1: Manufacturer: syz [ 41.177140][ T15] usbhid 3-1:0.0: can't add hid device: -71 [ 41.178500][ T444] usb 2-1: SerialNumber: syz [ 41.179139][ T444] usb 2-1: config 0 descriptor?? [ 41.194692][ T15] usbhid: probe of 3-1:0.0 failed with error -71 [ 41.201713][ T15] usb 3-1: USB disconnect, device number 5 [ 41.478392][ T620] process 'syz.4.80' launched './file0' with NULL argv: empty string added [ 41.506375][ T370] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0003/input/input4 [ 41.558707][ T370] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0003/input/input5 [ 41.571268][ T370] uclogic 0003:256C:006D.0003: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.4-1/input0 [ 42.021801][ T620] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 42.023857][ T15] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 42.090065][ T688] F2FS-fs (loop0): Found nat_bits in checkpoint [ 42.159134][ T688] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 42.276682][ T702] xt_CT: No such helper "snmp_trap" [ 42.467416][ T704] netlink: 12 bytes leftover after parsing attributes in process `syz.0.90'. [ 42.476048][ T704] netlink: 12 bytes leftover after parsing attributes in process `syz.0.90'. [ 42.736958][ T15] usb 3-1: Using ep0 maxpacket: 32 [ 42.857072][ T15] usb 3-1: config 1 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 51, changing to 9 [ 42.867952][ T15] usb 3-1: config 1 interface 0 altsetting 9 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 42.880707][ T15] usb 3-1: config 1 interface 0 has no altsetting 0 [ 43.155250][ T301] usb 5-1: USB disconnect, device number 2 [ 43.232199][ T444] r8152 2-1:0.0: Unknown version 0x0000 [ 43.255366][ T444] usb 2-1: USB disconnect, device number 7 [ 43.327014][ T15] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 43.336091][ T15] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.346545][ T15] usb 3-1: Product: 㶇넦ꮑᘫ鳸枭á­à»šåŽ¸á´¶æ…‹îœ‚뛆஼壵㸪桅ê¬î—ƒï«®â‚€ê•šï¡‡á½ŽáŸ¡é¢¨á‚Œê«¾ç¡“î¾³ [ 43.359896][ T15] usb 3-1: Manufacturer: Ðœ [ 43.364311][ T15] usb 3-1: SerialNumber: ဉ [ 43.387015][ T681] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 43.427089][ T370] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 43.484856][ T719] overlayfs: failed to get index nlink (file1/bus, err=-61) [ 43.707025][ T444] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 43.714382][ T370] usb 4-1: Using ep0 maxpacket: 16 [ 43.807478][ T15] cdc_ether: probe of 3-1:1.0 failed with error -22 [ 43.817247][ T15] usb 3-1: USB disconnect, device number 6 [ 44.057078][ T370] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 44.065999][ T370] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.073944][ T370] usb 4-1: Product: syz [ 44.078039][ T370] usb 4-1: Manufacturer: syz [ 44.082454][ T370] usb 4-1: SerialNumber: syz [ 44.087777][ T370] usb 4-1: config 0 descriptor?? [ 44.126990][ T444] usb 2-1: config 0 has an invalid descriptor of length 31, skipping remainder of the config [ 44.137887][ T444] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 44.357451][ T444] usb 2-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 44.377644][ T444] usb 2-1: New USB device strings: Mfr=0, Product=194, SerialNumber=207 [ 44.461107][ T444] usb 2-1: Product: syz [ 44.481442][ T444] usb 2-1: SerialNumber: syz [ 44.516074][ T444] usb 2-1: config 0 descriptor?? [ 44.520981][ T370] r8152 4-1:0.0: Unknown version 0x0000 [ 44.528252][ T370] usb 4-1: USB disconnect, device number 6 [ 44.540997][ T737] overlayfs: unrecognized mount option "uuid=off" or missing value [ 44.550227][ T737] syz.3.100[737] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 44.550267][ T737] syz.3.100[737] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 44.562212][ T24] kauditd_printk_skb: 40 callbacks suppressed [ 44.562224][ T24] audit: type=1400 audit(1724727073.820:283): avc: denied { read } for pid=736 comm="syz.3.100" name="event2" dev="devtmpfs" ino=176 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 44.601816][ T24] audit: type=1400 audit(1724727073.820:284): avc: denied { open } for pid=736 comm="syz.3.100" path="/dev/input/event2" dev="devtmpfs" ino=176 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 44.637723][ T24] audit: type=1400 audit(1724727073.890:285): avc: denied { write } for pid=738 comm="syz.2.101" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 44.639962][ T737] EXT4-fs (loop3): Unrecognized mount option "appraise_type=imasig" or missing value [ 44.660996][ T24] audit: type=1400 audit(1724727073.920:286): avc: denied { add_name } for pid=738 comm="syz.2.101" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 44.688839][ T24] audit: type=1400 audit(1724727073.920:287): avc: denied { associate } for pid=738 comm="syz.2.101" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 44.887425][ T444] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 44.895455][ T444] usb 2-1: USB disconnect, device number 8 [ 45.090115][ T746] EXT4-fs (loop4): Unrecognized mount option "permit_directio" or missing value [ 45.299042][ T751] exfat: Unknown parameter 'ÿÿârîM#œ:n>̱ÄûH û aø*49ünÕ¹V2{_–L9ì ¥áQ¬ñkv†ßg-dt¬íEŒ0ßfí-6jD©Ðv÷¸<Εÿÿÿÿÿÿÿÿ0xffffffffffffffff' [ 45.353504][ T24] audit: type=1400 audit(1724727074.600:288): avc: denied { write } for pid=753 comm="syz.1.105" name="uinput" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 45.357546][ T754] FAULT_INJECTION: forcing a failure. [ 45.357546][ T754] name failslab, interval 1, probability 0, space 0, times 1 [ 45.394892][ T754] CPU: 1 PID: 754 Comm: syz.1.105 Not tainted 5.10.223-syzkaller-01561-g0890c03b8b7d #0 [ 45.404441][ T754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 45.414334][ T754] Call Trace: [ 45.417469][ T754] dump_stack_lvl+0x1e2/0x24b [ 45.421986][ T754] ? panic+0x812/0x812 [ 45.425881][ T754] ? bfq_pos_tree_add_move+0x43b/0x43b [ 45.431176][ T754] dump_stack+0x15/0x17 [ 45.435174][ T754] should_fail+0x3c6/0x510 [ 45.439418][ T754] ? audit_log_start+0x4ae/0x9b0 [ 45.444187][ T754] __should_failslab+0xa4/0xe0 [ 45.448791][ T754] should_failslab+0x9/0x20 [ 45.453128][ T754] __kmalloc_track_caller+0x5f/0x320 [ 45.458251][ T754] ? kmem_cache_alloc+0x168/0x2e0 [ 45.463106][ T754] ? __alloc_skb+0x80/0x510 [ 45.467479][ T754] ? audit_log_start+0x4ae/0x9b0 [ 45.472219][ T754] __alloc_skb+0xbc/0x510 [ 45.476391][ T754] audit_log_start+0x4ae/0x9b0 [ 45.480989][ T754] ? audit_serial+0x30/0x30 [ 45.485331][ T754] ? debug_smp_processor_id+0x17/0x20 [ 45.490536][ T754] ? slow_avc_audit+0x3c0/0x3c0 [ 45.495232][ T754] ? avc_audit_pre_callback+0x2b0/0x2b0 [ 45.500602][ T754] common_lsm_audit+0xe4/0x1ba0 [ 45.505293][ T754] ? ipv6_skb_to_auditdata+0xe80/0xe80 [ 45.510585][ T754] ? __kasan_check_write+0x14/0x20 [ 45.515532][ T754] ? _raw_spin_lock_irqsave+0xf9/0x210 [ 45.520825][ T754] ? _raw_spin_lock+0x1b0/0x1b0 [ 45.525512][ T754] slow_avc_audit+0x26c/0x3c0 [ 45.530025][ T754] ? avc_get_hash_stats+0x180/0x180 [ 45.535059][ T754] ? avc_denied+0x13f/0x1b0 [ 45.539399][ T754] avc_has_extended_perms+0x8c6/0xf70 [ 45.544608][ T754] ? kasan_set_free_info+0x23/0x40 [ 45.549553][ T754] ? ____kasan_slab_free+0x121/0x160 [ 45.554673][ T754] ? __kasan_slab_free+0x11/0x20 [ 45.559450][ T754] ? slab_free_freelist_hook+0xc0/0x190 [ 45.564834][ T754] ? kmem_cache_free+0xa9/0x1e0 [ 45.569519][ T754] ? putname+0xe7/0x140 [ 45.573536][ T754] ? do_sys_openat2+0x1fc/0x710 [ 45.578198][ T754] ? avc_ss_reset+0x280/0x280 [ 45.582708][ T754] ? _kstrtoull+0x3a0/0x4a0 [ 45.587047][ T754] ? kstrtouint_from_user+0x20a/0x2a0 [ 45.592262][ T754] ? kstrtol_from_user+0x310/0x310 [ 45.597209][ T754] ? __fsnotify_parent+0x4b9/0x6c0 [ 45.602152][ T754] ? __fsnotify_update_child_dentry_flags+0x2b0/0x2b0 [ 45.608747][ T754] ? proc_fail_nth_write+0x20b/0x290 [ 45.613878][ T754] ? ioctl_has_perm+0x1f8/0x560 [ 45.618565][ T754] ioctl_has_perm+0x3f0/0x560 [ 45.623068][ T754] ? preempt_count_add+0x92/0x1a0 [ 45.627928][ T754] ? has_cap_mac_admin+0x3c0/0x3c0 [ 45.632874][ T754] ? kernel_write+0x3d0/0x3d0 [ 45.637409][ T754] selinux_file_ioctl+0x3cc/0x540 [ 45.642250][ T754] ? selinux_file_alloc_security+0x120/0x120 [ 45.648068][ T754] ? __fget_files+0x31e/0x380 [ 45.652581][ T754] security_file_ioctl+0x74/0xb0 [ 45.657355][ T754] __se_sys_ioctl+0x53/0x190 [ 45.661780][ T754] __x64_sys_ioctl+0x7b/0x90 [ 45.666204][ T754] do_syscall_64+0x34/0x70 [ 45.670463][ T754] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 45.676186][ T754] RIP: 0033:0x7f8206402e79 [ 45.680437][ T754] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 45.699877][ T754] RSP: 002b:00007f8205080038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 45.708123][ T754] RAX: ffffffffffffffda RBX: 00007f820659ef80 RCX: 00007f8206402e79 [ 45.715934][ T754] RDX: 00000000200001c0 RSI: 00000000c06855c8 RDI: 0000000000000003 [ 45.723747][ T754] RBP: 00007f8205080090 R08: 0000000000000000 R09: 0000000000000000 [ 45.731558][ T754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 45.739368][ T754] R13: 0000000000000000 R14: 00007f820659ef80 R15: 00007ffd8af43258 [ 45.747468][ T754] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 45.755064][ T754] audit: out of memory in audit_log_start [ 45.884216][ T761] udc-core: couldn't find an available UDC or it's busy [ 45.891414][ T761] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 46.407025][ T301] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 46.408947][ T774] xt_l2tp: invalid flags combination: 0 [ 46.547084][ T288] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 46.728318][ T783] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 46.748762][ T783] EXT4-fs error (device loop1) in ext4_do_update_inode:5275: error 27 [ 46.757186][ T783] EXT4-fs error (device loop1): ext4_dirty_inode:6079: inode #3: comm syz.1.114: mark_inode_dirty error [ 46.768542][ T783] EXT4-fs error (device loop1) in ext4_do_update_inode:5275: error 27 [ 46.776665][ T783] EXT4-fs error (device loop1): __ext4_ext_dirty:182: inode #3: comm syz.1.114: mark_inode_dirty error [ 46.788298][ T783] Quota error (device loop1): write_blk: dquota write failed [ 46.795909][ T783] Quota error (device loop1): qtree_write_dquot: Error -27 occurred while creating quota [ 46.807285][ T783] EXT4-fs error (device loop1): ext4_acquire_dquot:6219: comm syz.1.114: Failed to acquire dquot type 0 [ 46.836992][ T301] usb 1-1: device descriptor read/64, error -71 [ 46.908975][ T783] EXT4-fs error (device loop1) in ext4_do_update_inode:5275: error 27 [ 46.919943][ T783] EXT4-fs error (device loop1): ext4_dirty_inode:6079: inode #16: comm syz.1.114: mark_inode_dirty error [ 46.931538][ T444] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 46.941481][ T783] EXT4-fs error (device loop1) in ext4_do_update_inode:5275: error 27 [ 46.952030][ T783] EXT4-fs error (device loop1): __ext4_ext_dirty:182: inode #16: comm syz.1.114: mark_inode_dirty error [ 46.965697][ T783] EXT4-fs error (device loop1) in ext4_do_update_inode:5275: error 27 [ 46.977744][ T783] EXT4-fs error (device loop1) in ext4_orphan_del:3246: error 27 [ 46.985585][ T783] EXT4-fs error (device loop1) in ext4_do_update_inode:5275: error 27 [ 46.993959][ T783] EXT4-fs error (device loop1): ext4_truncate:4361: inode #16: comm syz.1.114: mark_inode_dirty error [ 47.005102][ T783] EXT4-fs error (device loop1) in ext4_orphan_cleanup:3108: error 27 [ 47.013498][ T783] EXT4-fs (loop1): 1 truncate cleaned up [ 47.019063][ T783] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 47.027871][ T783] ext4 filesystem being mounted at /25/bus supports timestamps until 2038 (0x7fffffff) [ 47.267729][ T288] usb 3-1: New USB device found, idVendor=0df6, idProduct=061c, bcdDevice=e4.e6 [ 47.277544][ T288] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.285485][ T288] usb 3-1: Product: syz [ 47.291391][ T288] usb 3-1: Manufacturer: syz [ 47.295930][ T288] usb 3-1: SerialNumber: syz [ 47.322844][ T288] usb 3-1: config 0 descriptor?? [ 47.328627][ T444] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 47.328650][ T301] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 47.350429][ T301] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 47.360103][ T301] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 47.369009][ T301] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.376766][ T444] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 47.386747][ T444] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 47.395859][ T301] usb 1-1: config 0 descriptor?? [ 47.401126][ T444] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.410435][ T444] usb 4-1: config 0 descriptor?? [ 47.533943][ T793] FAULT_INJECTION: forcing a failure. [ 47.533943][ T793] name failslab, interval 1, probability 0, space 0, times 0 [ 47.546523][ T793] CPU: 1 PID: 793 Comm: syz.4.115 Not tainted 5.10.223-syzkaller-01561-g0890c03b8b7d #0 [ 47.555969][ T793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 47.565856][ T793] Call Trace: [ 47.568995][ T793] dump_stack_lvl+0x1e2/0x24b [ 47.573497][ T793] ? bfq_pos_tree_add_move+0x43b/0x43b [ 47.578794][ T793] ? proc_fail_nth_write+0x20b/0x290 [ 47.583912][ T793] ? ioctl_has_perm+0x1f8/0x560 [ 47.588601][ T793] dump_stack+0x15/0x17 [ 47.592592][ T793] should_fail+0x3c6/0x510 [ 47.596847][ T793] ? input_allocate_device+0x50/0x220 [ 47.602061][ T793] __should_failslab+0xa4/0xe0 [ 47.606656][ T793] should_failslab+0x9/0x20 [ 47.610996][ T793] kmem_cache_alloc_trace+0x3a/0x2e0 [ 47.616113][ T793] ? ww_mutex_unlock+0x110/0x110 [ 47.620891][ T793] input_allocate_device+0x50/0x220 [ 47.626010][ T793] uinput_ioctl_handler+0x13c/0x16a0 [ 47.631216][ T793] ? uinput_release+0x50/0x50 [ 47.635730][ T793] ? __fget_files+0x31e/0x380 [ 47.640263][ T793] uinput_ioctl+0x28/0x30 [ 47.644406][ T793] ? uinput_poll+0x120/0x120 [ 47.648843][ T793] __se_sys_ioctl+0x114/0x190 [ 47.653349][ T793] __x64_sys_ioctl+0x7b/0x90 [ 47.657778][ T793] do_syscall_64+0x34/0x70 [ 47.662030][ T793] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 47.667755][ T793] RIP: 0033:0x7fb5aede3e79 [ 47.672008][ T793] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 47.691448][ T793] RSP: 002b:00007fb5ada61038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 47.699694][ T793] RAX: ffffffffffffffda RBX: 00007fb5aef7ff80 RCX: 00007fb5aede3e79 [ 47.707504][ T793] RDX: 0000000000000000 RSI: 00000000c06855c8 RDI: 0000000000000003 [ 47.715318][ T793] RBP: 00007fb5ada61090 R08: 0000000000000000 R09: 0000000000000000 [ 47.723129][ T793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 47.730940][ T793] R13: 0000000000000000 R14: 00007fb5aef7ff80 R15: 00007ffd7b764bf8 [ 48.018326][ T444] hid (null): bogus close delimiter [ 48.048294][ T301] hid (null): bogus close delimiter [ 48.257105][ T301] usb 1-1: language id specifier not provided by device, defaulting to English [ 48.269903][ T776] 9pnet: Insufficient options for proto=fd [ 48.438771][ T763] EXT4-fs (loop2): Ignoring removed nobh option [ 48.444977][ T763] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 48.458920][ T763] EXT4-fs error (device loop2): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 18 vs 41 free clusters [ 48.473171][ T763] EXT4-fs error (device loop2): ext4_acquire_dquot:6219: comm syz.2.106: Failed to acquire dquot type 1 [ 48.484418][ T763] EXT4-fs (loop2): 1 truncate cleaned up [ 48.489933][ T763] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrjquota=,nodiscard,nobh,barrier=0x0000000000000003,journal_ioprio=0x0000000000000007,discard,nobarrier,noblock_validity,resgid=0x000000000000ee002,errors=continue [ 48.526983][ T444] usb 4-1: string descriptor 0 read error: -71 [ 48.547125][ T444] uclogic 0003:256C:006D.0004: failed retrieving string descriptor #200: -71 [ 48.558896][ T444] uclogic 0003:256C:006D.0004: failed retrieving pen parameters: -71 [ 48.574022][ T444] uclogic 0003:256C:006D.0004: failed probing pen v2 parameters: -71 [ 48.607065][ T444] uclogic 0003:256C:006D.0004: failed probing parameters: -71 [ 48.614591][ T444] uclogic: probe of 0003:256C:006D.0004 failed with error -71 [ 48.628936][ T444] usb 4-1: USB disconnect, device number 7 [ 48.687914][ T301] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0005/input/input7 [ 48.698803][ T809] EXT4-fs (loop4): bad s_want_extra_isize: 11962 [ 48.706954][ T5] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 48.716752][ T301] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0005/input/input8 [ 48.797892][ T301] uclogic 0003:256C:006D.0005: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.0-1/input0 [ 48.891819][ T813] netlink: 165 bytes leftover after parsing attributes in process `syz.4.119'. [ 49.145151][ T301] usb 1-1: USB disconnect, device number 3 [ 49.236933][ T5] usb 2-1: Using ep0 maxpacket: 8 [ 49.565394][ T5] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 49.654608][ T820] netlink: 24 bytes leftover after parsing attributes in process `syz.4.121'. [ 49.668323][ T820] sch_tbf: burst 88 is lower than device veth3 mtu (1514) ! [ 49.677147][ T5] usb 2-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 49.686021][ T5] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 49.695840][ T5] usb 2-1: SerialNumber: syz [ 49.701137][ T5] usb 2-1: config 0 descriptor?? [ 49.737487][ T5] uvcvideo: Found UVC 0.00 device (05ac:8501) [ 49.748562][ T822] EXT4-fs (loop4): Test dummy encryption mode enabled [ 49.756821][ T822] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue [ 49.767619][ T822] ext4 filesystem being mounted at /31/mnt supports timestamps until 2038 (0x7fffffff) [ 49.790556][ T24] kauditd_printk_skb: 43 callbacks suppressed [ 49.790569][ T24] audit: type=1400 audit(1724727079.040:328): avc: denied { map } for pid=821 comm="syz.4.122" path="socket:[16902]" dev="sockfs" ino=16902 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 49.957013][ T5] uvcvideo: Failed to query (GET_INFO) UVC control 3 on unit 0: -71 (exp. 1). [ 49.965843][ T5] uvcvideo: No valid video chain found. [ 49.978603][ T5] usb 2-1: USB disconnect, device number 9 [ 50.476998][ T288] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 50.486998][ T288] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 50.523055][ T840] FAULT_INJECTION: forcing a failure. [ 50.523055][ T840] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 50.536029][ T840] CPU: 1 PID: 840 Comm: syz.2.126 Not tainted 5.10.223-syzkaller-01561-g0890c03b8b7d #0 [ 50.545546][ T840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 50.555438][ T840] Call Trace: [ 50.558564][ T840] dump_stack_lvl+0x1e2/0x24b [ 50.563078][ T840] ? bfq_pos_tree_add_move+0x43b/0x43b [ 50.568375][ T840] dump_stack+0x15/0x17 [ 50.572360][ T840] should_fail+0x3c6/0x510 [ 50.576619][ T840] should_fail_usercopy+0x1a/0x20 [ 50.581476][ T840] _copy_from_user+0x20/0xd0 [ 50.586076][ T840] kstrtouint_from_user+0xca/0x2a0 [ 50.591022][ T840] ? kstrtol_from_user+0x310/0x310 [ 50.595969][ T840] ? snprintf+0xd6/0x120 [ 50.600054][ T840] ? bust_spinlocks+0xe0/0xe0 [ 50.604562][ T840] ? memset+0x35/0x40 [ 50.608392][ T840] proc_fail_nth_write+0xa6/0x290 [ 50.613241][ T840] ? security_file_permission+0x7b/0xb0 [ 50.618622][ T840] ? proc_fail_nth_read+0x210/0x210 [ 50.623659][ T840] ? security_file_permission+0x86/0xb0 [ 50.629035][ T840] ? rw_verify_area+0x1c3/0x360 [ 50.633725][ T840] ? proc_fail_nth_read+0x210/0x210 [ 50.638861][ T840] vfs_write+0x36a/0xe70 [ 50.642941][ T840] ? kernel_write+0x3d0/0x3d0 [ 50.647462][ T840] ? __kasan_check_write+0x14/0x20 [ 50.652398][ T840] ? mutex_lock+0xa5/0x110 [ 50.656651][ T840] ? mutex_trylock+0xa0/0xa0 [ 50.661091][ T840] ? __fdget_pos+0x2e7/0x3a0 [ 50.665502][ T840] ? ksys_write+0x77/0x2c0 [ 50.669757][ T840] ksys_write+0x199/0x2c0 [ 50.673928][ T840] ? __ia32_sys_read+0x90/0x90 [ 50.678525][ T840] ? debug_smp_processor_id+0x17/0x20 [ 50.683730][ T840] __x64_sys_write+0x7b/0x90 [ 50.688160][ T840] do_syscall_64+0x34/0x70 [ 50.692412][ T840] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 50.698137][ T840] RIP: 0033:0x7f4b80d7695f [ 50.702390][ T840] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48 [ 50.721829][ T840] RSP: 002b:00007f4b7f9f5030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 50.730078][ T840] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f4b80d7695f [ 50.737887][ T840] RDX: 0000000000000001 RSI: 00007f4b7f9f50a0 RDI: 0000000000000004 [ 50.745702][ T840] RBP: 00007f4b7f9f5090 R08: 0000000000000000 R09: 0000000000000000 [ 50.753510][ T840] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 50.761326][ T840] R13: 0000000000000000 R14: 00007f4b80f13f80 R15: 00007ffcc126a968 [ 50.820181][ T288] asix 3-1:0.0 eth1: register 'asix' at usb-dummy_hcd.2-1, ASIX AX88178 USB 2.0 Ethernet, aa:aa:aa:aa:aa:bb [ 50.836462][ T288] usb 3-1: USB disconnect, device number 7 [ 50.843743][ T288] asix 3-1:0.0 eth1: unregister 'asix' usb-dummy_hcd.2-1, ASIX AX88178 USB 2.0 Ethernet [ 50.939730][ T849] FAULT_INJECTION: forcing a failure. [ 50.939730][ T849] name failslab, interval 1, probability 0, space 0, times 0 [ 50.955494][ T849] CPU: 1 PID: 849 Comm: syz.1.131 Not tainted 5.10.223-syzkaller-01561-g0890c03b8b7d #0 [ 50.965034][ T849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 50.968207][ T24] audit: type=1400 audit(1724727080.210:329): avc: denied { nlmsg_read } for pid=850 comm="syz.4.128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 50.974953][ T849] Call Trace: [ 50.974970][ T849] dump_stack_lvl+0x1e2/0x24b [ 50.974989][ T849] ? panic+0x812/0x812 [ 51.006619][ T849] ? bfq_pos_tree_add_move+0x43b/0x43b [ 51.011909][ T849] dump_stack+0x15/0x17 [ 51.015895][ T849] should_fail+0x3c6/0x510 [ 51.020144][ T849] ? __ip_append_data+0x2404/0x3630 [ 51.025209][ T849] __should_failslab+0xa4/0xe0 [ 51.029772][ T849] should_failslab+0x9/0x20 [ 51.034113][ T849] __kmalloc_track_caller+0x5f/0x320 [ 51.039236][ T849] ? kmem_cache_alloc+0x168/0x2e0 [ 51.044105][ T849] ? __alloc_skb+0x80/0x510 [ 51.048438][ T849] ? __ip_append_data+0x2404/0x3630 [ 51.053468][ T849] __alloc_skb+0xbc/0x510 [ 51.057639][ T849] __ip_append_data+0x2404/0x3630 [ 51.062499][ T849] ? ip_do_fragment+0x2310/0x2310 [ 51.067358][ T849] ? ip_setup_cork+0x890/0x890 [ 51.071975][ T849] ? __local_bh_enable_ip+0x53/0x80 [ 51.077007][ T849] ? local_bh_enable+0x1f/0x30 [ 51.081589][ T849] ? lock_sock_nested+0x26a/0x300 [ 51.086454][ T849] ip_append_data+0x120/0x190 [ 51.090975][ T849] ? ip_do_fragment+0x2310/0x2310 [ 51.095835][ T849] udp_sendmsg+0x594/0x2a80 [ 51.100181][ T849] ? memcpy+0x56/0x70 [ 51.103985][ T849] ? avc_has_perm_noaudit+0x240/0x240 [ 51.109192][ T849] ? ip_do_fragment+0x2310/0x2310 [ 51.114050][ T849] ? udp_cmsg_send+0x3a0/0x3a0 [ 51.118657][ T849] ? memset+0x35/0x40 [ 51.122472][ T849] ? selinux_socket_sendmsg+0x243/0x340 [ 51.127858][ T849] ? inet_send_prepare+0x5e/0x4a0 [ 51.132709][ T849] inet_sendmsg+0xa1/0xc0 [ 51.136877][ T849] ? inet_send_prepare+0x4a0/0x4a0 [ 51.141827][ T849] __sys_sendto+0x545/0x700 [ 51.146165][ T849] ? __kasan_check_write+0x14/0x20 [ 51.151113][ T849] ? __ia32_sys_getpeername+0x90/0x90 [ 51.156323][ T849] ? __ia32_sys_read+0x90/0x90 [ 51.160924][ T849] __x64_sys_sendto+0xe5/0x100 [ 51.165522][ T849] do_syscall_64+0x34/0x70 [ 51.169778][ T849] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 51.175500][ T849] RIP: 0033:0x7f8206402e79 [ 51.179753][ T849] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 51.199194][ T849] RSP: 002b:00007f8205080038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 51.207437][ T849] RAX: ffffffffffffffda RBX: 00007f820659ef80 RCX: 00007f8206402e79 [ 51.215248][ T849] RDX: 0000000000006200 RSI: 0000000020000c80 RDI: 0000000000000007 [ 51.223058][ T849] RBP: 00007f8205080090 R08: 0000000000000000 R09: 0000000000000000 [ 51.230869][ T849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 51.238680][ T849] R13: 0000000000000000 R14: 00007f820659ef80 R15: 00007ffd8af43258 [ 51.467747][ T859] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsv0,errors=remount-ro, [ 51.491548][ T859] EXT4-fs error (device loop2): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 51.511234][ T859] EXT4-fs (loop2): Remounting filesystem read-only [ 51.702100][ T349] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 52.192063][ T349] usb 5-1: Using ep0 maxpacket: 16 [ 52.496847][ T886] EXT4-fs (loop1): 1 orphan inode deleted [ 52.502572][ T886] EXT4-fs (loop1): mounted filesystem without journal. Opts: noauto_da_alloc,user_xattr,stripe=0x0000000000000008,resuid=0x0000000000000000,stripe=0x0000000000000004,data_err=ignore,user_xattr,min_batch_time=0x0000000000000a9f,nodiscard,,errors=continue [ 52.546946][ T444] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 52.636994][ T349] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 52.645855][ T349] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.654321][ T349] usb 5-1: Product: syz [ 52.658453][ T349] usb 5-1: Manufacturer: syz [ 52.662852][ T349] usb 5-1: SerialNumber: syz [ 52.671606][ T349] usb 5-1: config 0 descriptor?? [ 52.705616][ T24] audit: type=1326 audit(1724727081.950:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=890 comm="syz.2.142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b80d77e79 code=0x7ffc0000 [ 52.738730][ T24] audit: type=1326 audit(1724727081.990:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=890 comm="syz.2.142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b80d77e79 code=0x7ffc0000 [ 52.762797][ T24] audit: type=1326 audit(1724727081.990:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=890 comm="syz.2.142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=448 compat=0 ip=0x7f4b80d77e79 code=0x7ffc0000 [ 52.785840][ T24] audit: type=1326 audit(1724727081.990:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=890 comm="syz.2.142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b80d77e79 code=0x7ffc0000 [ 52.809558][ T24] audit: type=1326 audit(1724727081.990:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=890 comm="syz.2.142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b80d77e79 code=0x7ffc0000 [ 52.867064][ T444] usb 4-1: Using ep0 maxpacket: 8 [ 53.027604][ T288] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 53.052128][ T444] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 53.062815][ T24] audit: type=1400 audit(1724727082.300:335): avc: denied { map } for pid=863 comm="syz.4.136" path="socket:[16998]" dev="sockfs" ino=16998 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 53.104710][ T24] audit: type=1400 audit(1724727082.350:336): avc: denied { ioctl } for pid=863 comm="syz.4.136" path="/dev/ppp" dev="devtmpfs" ino=133 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 53.176979][ T444] usb 4-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 53.185992][ T444] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 53.193993][ T444] usb 4-1: SerialNumber: syz [ 53.199308][ T444] usb 4-1: config 0 descriptor?? [ 53.247555][ T444] uvcvideo: Found UVC 0.00 device (05ac:8501) [ 53.310160][ T24] audit: type=1400 audit(1724727082.560:337): avc: denied { remove_name } for pid=279 comm="syz-executor" name=".index" dev="loop1" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 53.434841][ T898] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.441727][ T898] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.449206][ T898] device bridge_slave_0 entered promiscuous mode [ 53.456105][ T898] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.462999][ T898] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.466991][ T444] uvcvideo: Failed to query (GET_INFO) UVC control 3 on unit 0: -71 (exp. 1). [ 53.470603][ T898] device bridge_slave_1 entered promiscuous mode [ 53.478623][ T288] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 53.495828][ T444] uvcvideo: No valid video chain found. [ 53.501483][ T288] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 53.512373][ T444] usb 4-1: USB disconnect, device number 8 [ 53.519227][ T288] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 53.528877][ T288] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.537713][ T288] usb 3-1: config 0 descriptor?? [ 53.544398][ T898] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.551245][ T898] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.558346][ T898] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.565116][ T898] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.584069][ T348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.591410][ T348] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.599548][ T348] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.608569][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.616590][ T301] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.623442][ T301] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.637672][ T348] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.645757][ T348] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.652627][ T348] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.659876][ T348] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.668786][ T348] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.683171][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 53.694655][ T898] device veth0_vlan entered promiscuous mode [ 53.700970][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 53.708807][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 53.716002][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 53.728560][ T898] device veth1_macvtap entered promiscuous mode [ 53.737549][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 53.746367][ T348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 53.758050][ T348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 54.417073][ T349] r8152 5-1:0.0: Unknown version 0x0000 [ 54.424442][ T349] usb 5-1: USB disconnect, device number 3 [ 54.430318][ T348] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 54.467024][ T301] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 54.640867][ T933] overlayfs: failed to resolve './file1': -2 [ 54.767142][ T301] usb 2-1: Using ep0 maxpacket: 8 [ 54.847399][ T933] EXT4-fs (loop4): VFS: Can't find ext4 filesystem [ 54.857145][ T24] kauditd_printk_skb: 6 callbacks suppressed [ 54.857157][ T24] audit: type=1400 audit(1724727084.110:344): avc: denied { link } for pid=928 comm="syz.4.156" name="file1" dev="tmpfs" ino=210 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 54.927064][ T301] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 54.941336][ T301] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.953331][ T527] device bridge_slave_1 left promiscuous mode [ 54.975496][ T301] usb 2-1: config 0 descriptor?? [ 54.981002][ T527] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.991814][ T527] device bridge_slave_0 left promiscuous mode [ 54.997989][ T527] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.006075][ T527] device veth1_macvtap left promiscuous mode [ 55.011996][ T527] device veth0_vlan left promiscuous mode [ 55.037048][ T348] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 55.048231][ T348] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 55.058239][ T348] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 55.069098][ T348] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.077656][ T348] usb 4-1: config 0 descriptor?? [ 55.477043][ T301] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 55.487201][ T301] asix 2-1:0.0 (unnamed net_device) (uninitialized): Error reading PHYID register: ffffffe0 [ 55.646985][ T383] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 56.057053][ T383] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 56.068426][ T383] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 56.078546][ T383] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 56.087468][ T383] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.102487][ T383] usb 1-1: config 0 descriptor?? [ 56.142090][ T24] audit: type=1326 audit(1724727085.390:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=946 comm="syz.4.161" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb5aede3e79 code=0x0 [ 56.244871][ T24] audit: type=1400 audit(1724727085.490:346): avc: denied { audit_write } for pid=946 comm="syz.4.161" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 56.265832][ T24] audit: type=1107 audit(1724727085.490:347): pid=946 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 56.607137][ T383] hid (null): bogus close delimiter [ 56.812600][ T944] udc-core: couldn't find an available UDC or it's busy [ 56.819503][ T944] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 57.065898][ T301] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 57.075930][ T301] asix: probe of 2-1:0.0 failed with error -71 [ 57.083963][ T301] usb 2-1: USB disconnect, device number 10 [ 57.297339][ T383] uclogic 0003:256C:006D.0006: failed retrieving Huion firmware version: -71 [ 57.306078][ T383] uclogic 0003:256C:006D.0006: failed probing parameters: -71 [ 57.317096][ T288] usbhid 3-1:0.0: can't add hid device: -71 [ 57.341822][ T288] usbhid: probe of 3-1:0.0 failed with error -71 [ 57.348586][ T383] uclogic: probe of 0003:256C:006D.0006 failed with error -71 [ 57.398572][ T957] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 57.431609][ T288] usb 3-1: USB disconnect, device number 8 [ 57.478334][ T383] usb 1-1: USB disconnect, device number 4 [ 57.931617][ T24] audit: type=1400 audit(1724727087.160:348): avc: denied { connect } for pid=963 comm="syz.0.166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 58.007541][ T967] EXT4-fs (loop0): Ignoring removed oldalloc option [ 58.014165][ T967] EXT4-fs (loop0): Test dummy encryption mode enabled [ 58.027894][ T967] EXT4-fs error (device loop0): __ext4_iget:4958: inode #11: block 1: comm syz.0.166: invalid block [ 58.038905][ T967] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.166: couldn't read orphan inode 11 (err -117) [ 58.050937][ T967] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpid,acl,sysvgroups,resgid=0x0000000000000000,nogrpid,oldalloc,inode_readahead_blks=0x0000000000100000,noauto_da_alloc,test_dummy_encryption,,errors=continue [ 58.707160][ T348] usbhid 4-1:0.0: can't add hid device: -71 [ 58.786739][ T981] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 58.797758][ T981] FAT-fs (loop3): unable to read boot sector [ 58.827549][ T24] audit: type=1400 audit(1724727088.030:349): avc: denied { create } for pid=977 comm="syz.1.170" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 58.887301][ T24] audit: type=1400 audit(1724727088.030:350): avc: denied { mounton } for pid=977 comm="syz.1.170" path="/10/file0" dev="tmpfs" ino=70 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 58.975571][ T348] usbhid: probe of 4-1:0.0 failed with error -71 [ 58.983999][ T348] usb 4-1: USB disconnect, device number 9 [ 59.136943][ T383] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 59.136954][ T349] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 59.437132][ T383] usb 5-1: Using ep0 maxpacket: 8 [ 59.487393][ T24] audit: type=1400 audit(1724727088.740:351): avc: denied { unlink } for pid=898 comm="syz-executor" name="file0" dev="tmpfs" ino=70 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 59.497000][ T349] usb 1-1: config 0 has an invalid descriptor of length 39, skipping remainder of the config [ 59.522831][ T349] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 59.531915][ T349] usb 1-1: New USB device found, idVendor=056a, idProduct=0094, bcdDevice= 0.00 [ 59.541106][ T349] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.549917][ T349] usb 1-1: config 0 descriptor?? [ 59.610183][ T383] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 59.619698][ T383] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 59.779652][ T992] overlayfs: failed to get index nlink (file1/bus, err=-61) [ 59.927520][ T348] usb 1-1: USB disconnect, device number 5 [ 59.987128][ T383] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 59.996343][ T383] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.997081][ T998] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 60.008321][ T383] usb 5-1: Product: syz [ 60.015110][ T383] usb 5-1: Manufacturer: syz [ 60.019285][ T998] EXT4-fs (loop0): Mount option "noacl" will be removed by 3.5 [ 60.019285][ T998] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 60.019285][ T998] [ 60.019895][ T383] usb 5-1: SerialNumber: syz [ 60.042523][ T998] EXT4-fs error (device loop0): ext4_find_inline_data_nolock:163: inode #12: comm syz.0.176: inline data xattr refers to an external xattr inode [ 60.057331][ T998] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.176: couldn't read orphan inode 12 (err -117) [ 60.069251][ T998] EXT4-fs (loop0): mounted filesystem without journal. Opts: prjquota,mblk_io_submit,grpjquota=,resuid=0x0000000000000000,prjquota,noacl,usrjquota=,norecovery,max_dir_size_kb=0x0000000000000003,,errors=continue [ 60.442905][ T983] F2FS-fs (loop4): Unrecognized mount option "" or missing value [ 60.687346][ T983] EXT4-fs (loop4): Unrecognized mount option "subj_role='!]" or missing value [ 60.737835][ T383] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 60.751054][ T383] usb 5-1: USB disconnect, device number 4 [ 60.757685][ T383] usblp0: removed [ 60.837042][ T348] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 61.347069][ T348] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 61.348591][ T1023] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 61.356615][ T348] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 61.381476][ T24] audit: type=1326 audit(1724727090.630:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1022 comm="syz.4.183" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb5aede3e79 code=0x0 [ 61.536986][ T348] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 61.545875][ T348] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.553665][ T348] usb 2-1: Product: syz [ 61.557658][ T348] usb 2-1: Manufacturer: syz [ 61.562046][ T348] usb 2-1: SerialNumber: syz [ 61.567048][ T348] usb 2-1: config 0 descriptor?? [ 61.587009][ T1011] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 61.593809][ T1011] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 61.807823][ T1011] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 61.814657][ T1011] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 62.185927][ T1037] netlink: 4 bytes leftover after parsing attributes in process `syz.4.186'. [ 62.359062][ T1043] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 62.814319][ T1048] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.821353][ T1048] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.828606][ T1048] device bridge_slave_0 entered promiscuous mode [ 62.838483][ T1048] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.845433][ T1048] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.852896][ T1048] device bridge_slave_1 entered promiscuous mode [ 62.888541][ T1048] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.895377][ T1048] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.902502][ T1048] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.909283][ T1048] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.917704][ T1011] udc-core: couldn't find an available UDC or it's busy [ 62.924632][ T1011] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 62.935565][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.943048][ T399] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.950279][ T399] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.961721][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.996657][ T383] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.003679][ T383] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.015998][ T349] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.024385][ T349] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.031249][ T349] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.054947][ T1048] device veth0_vlan entered promiscuous mode [ 63.063716][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.072132][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.079715][ T348] dm9601 2-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 63.089588][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 63.096822][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 63.104268][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.112713][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.134155][ T348] dm9601 2-1:0.0 eth1: register 'dm9601' at usb-dummy_hcd.1-1, Davicom DM96xx USB 10/100 Ethernet, 54:01:47:1e:47:20 [ 63.149297][ T348] usb 2-1: USB disconnect, device number 11 [ 63.168223][ T24] audit: type=1400 audit(1724727092.420:353): avc: denied { watch watch_reads } for pid=1054 comm="syz.4.192" path="/47/control" dev="tmpfs" ino=281 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 63.169651][ T1048] device veth1_macvtap entered promiscuous mode [ 63.199390][ T348] dm9601 2-1:0.0 eth1: unregister 'dm9601' usb-dummy_hcd.1-1, Davicom DM96xx USB 10/100 Ethernet [ 63.216209][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 63.240151][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 63.250360][ T24] audit: type=1400 audit(1724727092.500:354): avc: denied { unmount } for pid=1048 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 63.270814][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.279517][ T1057] EXT4-fs (loop4): Test dummy encryption mode enabled [ 63.286668][ T1057] EXT4-fs (loop4): Ignoring removed orlov option [ 63.293374][ T1057] EXT4-fs (loop4): Journaled quota options ignored when QUOTA feature is enabled [ 63.317040][ T1057] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,usrjquota=./bus,nodelalloc,,errors=continue [ 63.367390][ T24] audit: type=1400 audit(1724727092.620:355): avc: denied { mount } for pid=1054 comm="syz.4.192" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 63.394669][ T24] audit: type=1400 audit(1724727092.640:356): avc: denied { setopt } for pid=1054 comm="syz.4.192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 63.461215][ T9] device bridge_slave_1 left promiscuous mode [ 63.468197][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.482117][ T9] device bridge_slave_0 left promiscuous mode [ 63.488079][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.507061][ T9] device veth1_macvtap left promiscuous mode [ 63.512893][ T9] device veth0_vlan left promiscuous mode [ 63.523587][ T24] audit: type=1400 audit(1724727092.770:357): avc: denied { name_bind } for pid=1067 comm="syz.1.195" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 64.276498][ T24] audit: type=1400 audit(1724727093.510:358): avc: denied { read } for pid=1074 comm="syz-executor" dev="nsfs" ino=4026531999 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 64.312735][ T24] audit: type=1400 audit(1724727093.510:359): avc: denied { open } for pid=1074 comm="syz-executor" path="net:[4026531999]" dev="nsfs" ino=4026531999 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 64.491965][ T1074] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.498849][ T1074] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.506013][ T1074] device bridge_slave_0 entered promiscuous mode [ 64.790913][ T1092] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 64.886563][ T1074] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.893601][ T1074] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.901070][ T1074] device bridge_slave_1 entered promiscuous mode [ 65.058063][ T1094] overlayfs: failed to get index nlink (file1/bus, err=-61) [ 65.113130][ T1074] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.120039][ T1074] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.127104][ T1074] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.133865][ T1074] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.526343][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.535054][ T15] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.542597][ T15] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.630094][ T1074] device veth0_vlan entered promiscuous mode [ 65.642866][ T1074] device veth1_macvtap entered promiscuous mode [ 65.786991][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.942733][ T1121] overlayfs: failed to get index nlink (file1/bus, err=-61) [ 65.955556][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.978372][ T383] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.985249][ T383] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.995054][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.031351][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.040637][ T383] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.047526][ T383] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.057421][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.070116][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.079524][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.090238][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.130216][ T348] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 66.135893][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.145723][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.154224][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.162101][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.169995][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.177954][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.185848][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.193440][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.201483][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.209551][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.217637][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.230856][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.238289][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.308284][ T24] audit: type=1400 audit(1724727095.560:360): avc: denied { sys_module } for pid=1126 comm="syz.2.210" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 66.383069][ T1130] device vlan2 entered promiscuous mode [ 66.388841][ T1130] device vlan0 entered promiscuous mode [ 66.395247][ T1130] device vlan0 left promiscuous mode [ 66.417016][ T348] usb 1-1: Using ep0 maxpacket: 8 [ 66.509416][ T1135] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 66.937036][ T348] usb 1-1: invalid descriptor for config index 0: type = 0x2, length = 42 [ 66.945502][ T348] usb 1-1: can't read configurations, error -22 [ 67.039682][ T1141] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 67.067261][ T9] device bridge_slave_1 left promiscuous mode [ 67.073541][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.081023][ T9] device bridge_slave_0 left promiscuous mode [ 67.087182][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.095169][ T9] device veth1_macvtap left promiscuous mode [ 67.101131][ T9] device veth0_vlan left promiscuous mode [ 67.101467][ T348] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 67.255995][ T24] audit: type=1400 audit(1724727096.500:361): avc: denied { getopt } for pid=1145 comm="syz.4.214" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 67.395822][ T1154] FAULT_INJECTION: forcing a failure. [ 67.395822][ T1154] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 67.408993][ T1154] CPU: 1 PID: 1154 Comm: syz.2.213 Not tainted 5.10.223-syzkaller-01561-g0890c03b8b7d #0 [ 67.418601][ T1154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 67.428496][ T1154] Call Trace: [ 67.431627][ T1154] dump_stack_lvl+0x1e2/0x24b [ 67.436132][ T1154] ? bfq_pos_tree_add_move+0x43b/0x43b [ 67.441428][ T1154] ? wake_up_klogd+0xb8/0xf0 [ 67.445854][ T1154] dump_stack+0x15/0x17 [ 67.449849][ T1154] should_fail+0x3c6/0x510 [ 67.454106][ T1154] should_fail_alloc_page+0x52/0x60 [ 67.459133][ T1154] __alloc_pages_nodemask+0x1b3/0xaf0 [ 67.464340][ T1154] ? __this_cpu_preempt_check+0x13/0x20 [ 67.469723][ T1154] ? __kasan_slab_alloc+0x63/0xe0 [ 67.474585][ T1154] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 67.479969][ T1154] new_slab+0x80/0x400 [ 67.483874][ T1154] ___slab_alloc+0x302/0x4b0 [ 67.488298][ T1154] ? preempt_schedule_irq+0xe7/0x140 [ 67.493413][ T1154] ? getname_kernel+0x59/0x2e0 [ 67.498016][ T1154] ? preempt_schedule_notrace+0x140/0x140 [ 67.503573][ T1154] __slab_alloc+0x63/0xa0 [ 67.507129][ T348] usb 1-1: Using ep0 maxpacket: 8 [ 67.507747][ T1154] ? getname_kernel+0x59/0x2e0 [ 67.517218][ T1154] ? getname_kernel+0x59/0x2e0 [ 67.521801][ T1154] kmem_cache_alloc+0x1b9/0x2e0 [ 67.526492][ T1154] ? ovl_mount_dir+0x29/0x2c0 [ 67.531000][ T1154] ? getname_kernel+0x59/0x2e0 [ 67.535604][ T1154] getname_kernel+0x59/0x2e0 [ 67.540031][ T1154] kern_path+0x1f/0x40 [ 67.543936][ T1154] ovl_mount_dir_noesc+0x5b/0x1a0 [ 67.548800][ T1154] ovl_mount_dir+0x195/0x2c0 [ 67.553225][ T1154] ovl_get_upper+0xb5/0x610 [ 67.557569][ T1154] ? ovl_fill_super+0x26d0/0x26d0 [ 67.562428][ T1154] ? __kasan_kmalloc+0x9/0x10 [ 67.566940][ T1154] ? __kmalloc+0x1aa/0x330 [ 67.571192][ T1154] ? ovl_fill_super+0x1273/0x26d0 [ 67.576058][ T1154] ovl_fill_super+0x153d/0x26d0 [ 67.580752][ T1154] ? ovl_mount+0x40/0x40 [ 67.584841][ T1154] ? register_shrinker_prepared+0x11a/0x150 [ 67.590549][ T1154] ? free_anon_bdev+0x30/0x30 [ 67.595055][ T1154] ? ovl_mount+0x40/0x40 [ 67.599134][ T1154] mount_nodev+0x57/0xf0 [ 67.603213][ T1154] ovl_mount+0x2c/0x40 [ 67.607119][ T1154] legacy_get_tree+0xf1/0x190 [ 67.611634][ T1154] ? virtio_fs_request_complete+0xa70/0xa70 [ 67.617363][ T1154] vfs_get_tree+0x88/0x290 [ 67.621620][ T1154] do_new_mount+0x2ba/0xb30 [ 67.625967][ T1154] ? do_move_mount_old+0x160/0x160 [ 67.627011][ T348] usb 1-1: invalid descriptor for config index 0: type = 0x2, length = 42 [ 67.630895][ T1154] ? security_capable+0x87/0xb0 [ 67.630914][ T1154] ? ns_capable+0x89/0xe0 [ 67.648082][ T1154] path_mount+0x56f/0xcb0 [ 67.652246][ T1154] __se_sys_mount+0x2c4/0x3b0 [ 67.656762][ T1154] ? __x64_sys_mount+0xd0/0xd0 [ 67.661371][ T1154] ? fpu__clear_all+0x20/0x20 [ 67.665876][ T1154] __x64_sys_mount+0xbf/0xd0 [ 67.670299][ T1154] do_syscall_64+0x34/0x70 [ 67.674554][ T1154] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 67.680278][ T1154] RIP: 0033:0x7f8387d5be79 [ 67.684534][ T1154] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 67.703972][ T1154] RSP: 002b:00007f8386997038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 67.712216][ T1154] RAX: ffffffffffffffda RBX: 00007f8387ef8130 RCX: 00007f8387d5be79 [ 67.720113][ T1154] RDX: 0000000020000000 RSI: 0000000020000080 RDI: 0000000000000000 [ 67.727923][ T1154] RBP: 00007f8386997090 R08: 0000000020000140 R09: 0000000000000000 [ 67.735733][ T1154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 67.743549][ T1154] R13: 0000000000000000 R14: 00007f8387ef8130 R15: 00007ffd2f278778 [ 67.762849][ T348] usb 1-1: can't read configurations, error -22 [ 67.775453][ T348] usb usb1-port1: attempt power cycle [ 67.936948][ T399] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 67.956947][ T444] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 67.995446][ T1163] netlink: 40 bytes leftover after parsing attributes in process `syz.1.220'. [ 68.176946][ T399] usb 5-1: Using ep0 maxpacket: 16 [ 68.196979][ T348] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 68.237015][ T444] usb 4-1: Using ep0 maxpacket: 32 [ 68.288008][ T348] usb 1-1: Using ep0 maxpacket: 8 [ 68.297070][ T399] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 68.308057][ T399] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 68.317647][ T399] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 68.330295][ T399] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 68.339222][ T399] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.347542][ T399] usb 5-1: config 0 descriptor?? [ 68.367145][ T444] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 68.377953][ T444] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 68.386806][ T444] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.396071][ T444] usb 4-1: config 0 descriptor?? [ 68.407027][ T348] usb 1-1: invalid descriptor for config index 0: type = 0x2, length = 42 [ 68.415440][ T348] usb 1-1: can't read configurations, error -22 [ 68.429045][ T24] audit: type=1400 audit(1724727097.680:362): avc: denied { name_bind } for pid=1165 comm="syz.0.221" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 68.447658][ T444] hub 4-1:0.0: USB hub found [ 68.747061][ T444] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 68.827774][ T399] koneplus 0003:1E7D:2E22.0007: unknown main item tag 0x0 [ 68.835332][ T399] koneplus 0003:1E7D:2E22.0007: hidraw0: USB HID v0.00 Device [HID 1e7d:2e22] on usb-dummy_hcd.4-1/input0 [ 68.997058][ T400] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 69.001419][ T1149] erofs: (device loop3): mounted with root inode @ nid 36. [ 69.037056][ T399] koneplus 0003:1E7D:2E22.0007: couldn't init struct koneplus_device [ 69.045328][ T399] koneplus 0003:1E7D:2E22.0007: couldn't install mouse [ 69.052774][ T399] koneplus: probe of 0003:1E7D:2E22.0007 failed with error -71 [ 69.061308][ T399] usb 5-1: USB disconnect, device number 5 [ 69.096968][ T444] usbhid 4-1:0.0: can't add hid device: -71 [ 69.102775][ T444] usbhid: probe of 4-1:0.0 failed with error -71 [ 69.137190][ T444] usb 4-1: USB disconnect, device number 10 [ 69.236934][ T400] usb 2-1: Using ep0 maxpacket: 16 [ 69.498213][ T1179] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 69.552262][ T400] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 69.581859][ T400] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.599078][ T400] usb 2-1: Product: syz [ 69.621774][ T400] usb 2-1: Manufacturer: syz [ 69.626202][ T400] usb 2-1: SerialNumber: syz [ 69.697192][ T400] usb 2-1: config 0 descriptor?? [ 69.711045][ T1184] 9pnet: Insufficient options for proto=fd [ 69.747872][ T400] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 69.755474][ T400] usb 2-1: Detected FT232H [ 69.768823][ T1186] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsv0,errors=remount-ro, [ 69.781963][ T1186] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 69.792344][ T24] audit: type=1400 audit(1724727099.040:363): avc: denied { ioctl } for pid=1185 comm="syz.3.227" path="socket:[17831]" dev="sockfs" ino=17831 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 69.798678][ T1186] netlink: 4 bytes leftover after parsing attributes in process `syz.3.227'. [ 69.948790][ T1170] udc-core: couldn't find an available UDC or it's busy [ 69.955641][ T1170] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 69.963562][ T1170] syz.1.222[1170] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 69.963618][ T1170] syz.1.222[1170] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 69.977992][ T1170] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 70.005727][ T1170] udc-core: couldn't find an available UDC or it's busy [ 70.012642][ T1170] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 70.036975][ T400] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 70.056995][ T400] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 70.076972][ T400] ftdi_sio 2-1:0.0: GPIO initialisation failed: -71 [ 70.084001][ T400] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 70.093090][ T400] usb 2-1: USB disconnect, device number 12 [ 70.099606][ T400] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 70.109231][ T400] ftdi_sio 2-1:0.0: device disconnected [ 70.420749][ T1198] SELinux: security_context_str_to_sid(sysadm_u) failed for (dev bpf, type bpf) errno=-22 [ 70.631126][ T1199] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 70.910449][ T1203] SELinux: security_context_str_to_sid(sysadm_u) failed for (dev bpf, type bpf) errno=-22 [ 71.177061][ T1210] xt_CT: netfilter: NOTRACK target is deprecated, use CT instead or upgrade iptables [ 71.473893][ T1217] netlink: 40 bytes leftover after parsing attributes in process `syz.2.232'. [ 71.855593][ T1233] FAULT_INJECTION: forcing a failure. [ 71.855593][ T1233] name failslab, interval 1, probability 0, space 0, times 0 [ 71.868097][ T1233] CPU: 1 PID: 1233 Comm: syz.3.239 Not tainted 5.10.223-syzkaller-01561-g0890c03b8b7d #0 [ 71.877850][ T1233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 71.887739][ T1233] Call Trace: [ 71.890877][ T1233] dump_stack_lvl+0x1e2/0x24b [ 71.895395][ T1233] ? bfq_pos_tree_add_move+0x43b/0x43b [ 71.900685][ T1233] dump_stack+0x15/0x17 [ 71.904675][ T1233] should_fail+0x3c6/0x510 [ 71.908924][ T1233] ? security_inode_alloc+0x29/0x120 [ 71.914055][ T1233] __should_failslab+0xa4/0xe0 [ 71.918653][ T1233] should_failslab+0x9/0x20 [ 71.923111][ T1233] kmem_cache_alloc+0x3d/0x2e0 [ 71.927708][ T1233] security_inode_alloc+0x29/0x120 [ 71.932649][ T1233] inode_init_always+0x767/0x9f0 [ 71.937425][ T1233] ? ovl_lookup_inode+0x130/0x130 [ 71.942284][ T1233] ? ovl_get_trap_inode+0x1a0/0x1a0 [ 71.947326][ T1233] iget5_locked+0xe5/0x280 [ 71.951579][ T1233] ? ovl_get_trap_inode+0x1a0/0x1a0 [ 71.956600][ T1233] ovl_get_trap_inode+0x8a/0x1a0 [ 71.961380][ T1233] ovl_get_upper+0x261/0x610 [ 71.965808][ T1233] ? ovl_fill_super+0x26d0/0x26d0 [ 71.970659][ T1233] ? __kasan_kmalloc+0x9/0x10 [ 71.975168][ T1233] ? __kmalloc+0x1aa/0x330 [ 71.979423][ T1233] ? ovl_fill_super+0x1273/0x26d0 [ 71.984284][ T1233] ovl_fill_super+0x153d/0x26d0 [ 71.988974][ T1233] ? ovl_mount+0x40/0x40 [ 71.993050][ T1233] ? register_shrinker_prepared+0x11a/0x150 [ 71.998790][ T1233] ? free_anon_bdev+0x30/0x30 [ 72.003296][ T1233] ? ovl_mount+0x40/0x40 [ 72.007378][ T1233] mount_nodev+0x57/0xf0 [ 72.011458][ T1233] ovl_mount+0x2c/0x40 [ 72.015356][ T1233] legacy_get_tree+0xf1/0x190 [ 72.019872][ T1233] ? virtio_fs_request_complete+0xa70/0xa70 [ 72.025598][ T1233] vfs_get_tree+0x88/0x290 [ 72.029851][ T1233] do_new_mount+0x2ba/0xb30 [ 72.034190][ T1233] ? do_move_mount_old+0x160/0x160 [ 72.039136][ T1233] ? security_capable+0x87/0xb0 [ 72.043823][ T1233] ? ns_capable+0x89/0xe0 [ 72.047999][ T1233] path_mount+0x56f/0xcb0 [ 72.052162][ T1233] ? __se_sys_mount+0x1b1/0x3b0 [ 72.056844][ T1233] __se_sys_mount+0x2c4/0x3b0 [ 72.061555][ T1233] ? __x64_sys_mount+0xd0/0xd0 [ 72.066141][ T1233] ? fpu__clear_all+0x20/0x20 [ 72.070922][ T1233] __x64_sys_mount+0xbf/0xd0 [ 72.075449][ T1233] do_syscall_64+0x34/0x70 [ 72.079701][ T1233] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 72.085430][ T1233] RIP: 0033:0x7f5f030a6e79 [ 72.089680][ T1233] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 72.109122][ T1233] RSP: 002b:00007f5f01ce2038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 72.117366][ T1233] RAX: ffffffffffffffda RBX: 00007f5f03243130 RCX: 00007f5f030a6e79 [ 72.125186][ T1233] RDX: 0000000020000000 RSI: 0000000020000080 RDI: 0000000000000000 [ 72.132992][ T1233] RBP: 00007f5f01ce2090 R08: 0000000020000140 R09: 0000000000000000 [ 72.140805][ T1233] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 72.148614][ T1233] R13: 0000000000000000 R14: 00007f5f03243130 R15: 00007fff0292c978 [ 72.215876][ T1238] IPv6: Can't replace route, no match found [ 72.876873][ C1] sched: RT throttling activated [ 76.046943][ T399] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 84.047328][ T399] usb 1-1: device descriptor read/64, error -110 [ 97.036914][ T399] usb 1-1: device descriptor read/64, error -32 [ 101.036950][ T399] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 113.066933][ T399] usb 1-1: device descriptor read/64, error -32 [ 126.036901][ T399] usb 1-1: device descriptor read/64, error -32 [ 127.076954][ T399] usb usb1-port1: attempt power cycle [ 143.046950][ T399] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 149.036894][ T399] usb 1-1: device descriptor read/8, error -32 [ 155.066964][ T399] usb 1-1: device descriptor read/8, error -32 [ 166.077215][ T399] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 175.056886][ T399] usb 1-1: device descriptor read/8, error -32 [ 182.056915][ T399] usb 1-1: device descriptor read/8, error -32 [ 184.069163][ T399] usb usb1-port1: unable to enumerate USB device [ 195.420715][ T1241] EXT4-fs (loop2): Unrecognized mount option "." or missing value SYZFAIL: failed to send rpc fd=3 want=296 sent=0 n=-1 (errno 32: Broken pipe) [ 196.577644][ T9] device bridge_slave_1 left promiscuous mode [ 196.583647][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.591347][ T9] device bridge_slave_0 left promiscuous mode [ 196.597361][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.605117][ T9] device veth1_macvtap left promiscuous mode [ 196.611027][ T9] device veth0_vlan left promiscuous mode [ 197.997959][ T9] device bridge_slave_1 left promiscuous mode [ 198.003962][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.011270][ T9] device bridge_slave_0 left promiscuous mode [ 198.017250][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.024696][ T9] device bridge_slave_1 left promiscuous mode [ 198.030686][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.037815][ T9] device bridge_slave_0 left promiscuous mode [ 198.043727][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.051429][ T9] device bridge_slave_1 left promiscuous mode [ 198.057395][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.064486][ T9] device bridge_slave_0 left promiscuous mode [ 198.070490][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.078094][ T9] device bridge_slave_1 left promiscuous mode [ 198.083989][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.091275][ T9] device bridge_slave_0 left promiscuous mode [ 198.097282][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.105383][ T9] device veth1_macvtap left promiscuous mode [ 198.111292][ T9] device veth0_vlan left promiscuous mode [ 198.116967][ T9] device veth1_macvtap left promiscuous mode [ 198.122756][ T9] device veth0_vlan left promiscuous mode [ 198.128636][ T9] device veth1_macvtap left promiscuous mode [ 198.134431][ T9] device veth0_vlan left promiscuous mode [ 198.140279][ T9] device veth1_macvtap left promiscuous mode [ 198.146074][ T9] device veth0_vlan left promiscuous mode