last executing test programs: 5.261835149s ago: executing program 2 (id=3387): pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0x18) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$FUSE_INIT(r2, &(0x7f0000000100)={0x50, 0x0, 0x0, {0x7, 0x27}}, 0x50) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache}]}}) chown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) mount$fuseblk(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x1c000000, 0x0) 5.201190764s ago: executing program 2 (id=3388): openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000800000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={r2, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={r2, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r4, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r4, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r4}, 0x0, 0x0}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r4}, 0x0, 0x0}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0xffffffff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000180), 0x0) (async) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r8, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r9 = dup(r8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000002c0), 0x2, &(0x7f0000000440)=ANY=[]) write$FUSE_BMAP(r9, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r9, &(0x7f0000000b40)=ANY=[@ANYBLOB="b8"], 0xb8) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r8]) open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) (async) r10 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r10, &(0x7f0000000080)='./file0\x00') syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) (async) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES64=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES64=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r11}, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) 4.802490086s ago: executing program 4 (id=3390): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000005640)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf7cf39e3100c8acaa47684f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d7559f3b14820ed58b15627c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e000000000000041201baa87ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000fb1a26abfb0767192361448279b05d96a703a660587a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc7505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09002100000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec0271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761036eafed1fb2b98b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf4ece4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a515d83129cd857c775f9e7d6101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbe3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562e00e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb2214209ed2d5d776e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b55ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c7f5db2fea6f26e4a4304e50c349f4f608ce27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e30400000000000000000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f921860c6e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a95d32f46ed9bd1f00fb8191bbab2dc599dda61fe2010000294800323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854256cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd210819203828b202779d386ed295f023c67d867014d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e824f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd009e9e1cc9eb3d541e407cc2dae5cd628ab84875f2deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c49a0189da9173c62f0ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f00000000010000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b0600b805d5edd9d188daf28d8935a9c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e46d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1202000000b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7000000000000000542954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c9e281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b630500163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc11680bf9b017c8a6e452a31bde54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f700400fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc87746e1785a8214454d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b036e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e010000005a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb3985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe307d5bc72183a4c2d35732ab9100781b9912160a3fd2a2e74dd690c57bdfdc1f069f9491bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958c906321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b863af34bac64c247672a8f1ef60407d39a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677ec97c5c568a89d6e36b165c39132a0f27080ece2a94c360b002c77f82662675a7713c7067081cac1599a998c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc215a18ca0265400abf38e90000000000000000008faf2cddffbfa66bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353026bdc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5435bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de286553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c03f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c872a4882d21db2046a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340103fc6265441d513a1294b8439276394945d94a589708e32a1cb30a8b07b391201385e0b92ecbb7b13d7a87284164018ace6ce58a82c5de321452461089cdd69259f5390f5f508646a524490583c30630bedd47e158ad41c0a653e86a4f4f255cd2a6e95f33b586823aef5564d9de1f5bdd8c80e193f0597b8003860302cd243c00bc5a82c52afb115d16258d507937966bb89409d6d7346b652d0761d7c72875ae1efb9bc7c6807c2d783e31fd9cd7e84d3d50d8fc44ab8ac9ccd2c0d42e3bd4c029241320446bbf47e23d1320de30fbdf7ed13f80c28fb5c13fccc2e3f73509bdcddad8a2fe48cdd61f2f43611704af64eed8b0cbbd08754f93b8f3d6347aad5cde1ccc5cbd5eaa87e52cea257c856a4af5243eeb5e89f0000000000000000f420df5e4c6d856b3d55e455c08110b2ef4255a38f81555e8e1f22d59c0bc3c9013e66a1f5bda1b695e1602c0afb5c35b2f68f3b151b1e869f40ff4d1bef5e926e1ff95f6321131e4cb797f53455a093a95e67605222d6acc29c46e5db1ef3b8b07e2169fb24ced4b3ae87ebeca06df93212e465bbd1a7e41df2e1a0d508f86cfc7a469ac682685c44692877d03c34c23a65d2677acc73b5d276fdebd685c9b7a079eae228d8426188cb19b083548f5f29e493ab079f33d1965dcbb165015c46998ad410d60cc65fcfa73bd65a43fc024455c4bf530d663976cf71490577251780ab6b1cf8d397444b5be575229f687a3d95ea6b2aa62fce8acb3d4a6a130b4fefa55d0c1d6f3fa448ee24e588e2965c9a442f0baf90923dda91a6850fb3b9c7f432b63001423fedcf053fa28024cc9a178a07042dabc07176fc524032c2edb340c9c18a83565c431aeb0c869683507255254430f90f61e4eca9c8fa98c000b35fec357ee1ebd08439bd95c1ab0753dfd2603d1608bd8c589a1e160000a6ee0ad13346e08738c2d7b00b5d121d918f1dc8bceded939fa8605b54b37cdfcea0bf2bc63e655dc04a2e50212ff89d6587d49896ce18916cf3adc12839c345ca91bb232b891fae2fdd68aaa38281c0feb2c107af3e080d6cdd1c6646ec6804d7e9960c02aa0db9eda24bbcb287fd2a890fa7f9d6ae0c0b1f8dd1603c9ea2f66b572276f96a28b5b6dd9f9bf6ad4bdaa2139b90faf1f40b0f141258578bd825daaaf718d21b7ac05fe5d1b699e5422ca341fe1c944f68fe3a6d783dcf30b0e09d7688f696883b61cb64464b04d351a0a69b0733c348049b0430ed40e200f4050000000000000000000000996bcc1b721b152c892fab887e7d20466d90c049c0fdf51dcc16d226a2619c6f47bc25b7f5df5c09fed638922ed127ab36aa7b0c58a2ce5894b1b0f5375d340d96b69b966b05daaf585121a9c7605ed8e9964eef1f14b74cbb2ccdadc6d0b77cf0492b75e1cd11bfdcfddde91b20366715ba0cbe1041be2a65c25d7ca15ef8b71bd2ab9a4294899a1964b0152518fc2ac15a728bcb9e2bc4b551dfdf9011a2a607bc39ad2c4d7c64dcf967724e9b63c397d5265ad3f1da4395a5a800d8845257dcbf210d4f00fe0bd3deed05e506736e6bb6d40ee6cb960bcdb33633ee87f82beb665a9a4c2d4d2b06479ade3a4cd6bba765c9f52b52a0bdd0849ab92baae3775570accb5a57ee9f0035fc6d3df4eebec2e7eb4ff863d3979a2002e5f2f7f4428ddca471037b49d4fd130743a97faa02c293b721e52bf53d64c6585e138162331ef98792e1e9b21a6a084fb7b42c64062ef1323a8a65a8ed6038f274f28ff4f78123a1ef108efbe8c4f4e347d50dcdbc33bf3ade4c3a39d316061930d7dd39b8acdecc3f27830e3eda40e648328d95a9aee65a9dd09fd4e96d5b852025dc53ec3f30cc753e6a796084b4e34f521dbb230ae0f3b79142073d437e1fd22d3b7503ffa95b1d5c7740b0ecbfd35dc0f8af895583dfcc2689f6f62c2dd4b57f3dcac54f40da013eb221fa3d65de760576031052c25a96ed4b20230b36d46d3d3fd6bb1d77cc8a48a6b10fa0149e55ccde4a2b26cca2d1ca9191c74ab006a602543fc24d1283e353cfb917620000000024bf3eed258c02a591ec4cd295212d9a98d38745f6f6c4537b2ccc5f9602da15f184f239098bf32551c7cf454e2faa2b9e17965b71104f8e311e1e936ce0cf783eb978fcd56f225f782d00e7008c664e34a3cc563e5fc4fa6aeced4bf805f71fc74472c0386aee070339af9fee8b32efad7fd0a0c7b3045d74bcb568a888fc9aa4599b71adad2135acbb600000fd2fd1755764ebfdf13f8633fe6358c8e05a792f0b9f133687041254cdf6cadeadcaa557de5fd2d3da5a75168fc36847cfa9b7c1a51f05bdb9bd36e9b17a75000000000000000000060000000000000074f3f5c25cb1d09b"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0086dd6002000800fe2c00fe8000000000000000000000000000bbff02000e40000000000000000000000132"], 0x0) 4.773691288s ago: executing program 4 (id=3391): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x9, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b00)={{r1}, &(0x7f0000000040), &(0x7f00000005c0)}, 0x20) (async, rerun: 32) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) (async, rerun: 32) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r2}, 0x10) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1d, 0x4, 0x8, 0x8, 0x180}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r5, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) (async) connect$inet6(r5, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000003840)=[{&(0x7f00000006c0)="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", 0xfe7c}, {&(0x7f0000000000)="87", 0x1}, {&(0x7f0000003300)="9a", 0x1}], 0x3}}], 0x4000000000002e4, 0x4000000) (async, rerun: 32) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r6}, 0x10) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) io_getevents(0x0, 0xb, 0x0, 0x0, 0x0) (async, rerun: 32) r8 = socket$tipc(0x1e, 0x5, 0x0) (rerun: 32) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) bind$tipc(r8, 0x0, 0x0) (async) r9 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r9, &(0x7f0000000240)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10, 0x0}, 0x0) (async, rerun: 64) ioctl$TUNSETQUEUE(r7, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) (async, rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@bloom_filter={0x1e, 0x1, 0xffff, 0x0, 0x1644, r3, 0x6d, '\x00', 0x0, 0xffffffffffffffff, 0x20001, 0x0, 0x1, 0xb}, 0x48) (async) socket$netlink(0x10, 0x3, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x7, 0x2, 0x4, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r10}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) 4.608689381s ago: executing program 2 (id=3393): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0xb}, 0x48) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000ec000000001000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000007f1600850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6}]}, 0x10) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000001000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaa2aaaaaaa007b8f5f2ae77c1f6e000000119078000000000000000000004e20000c907801000000"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000001000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008180000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4dc}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r3}, 0x10) chmod(0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x1808014, &(0x7f0000000600)=ANY=[@ANYBLOB="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"/716], 0x5, 0x558b, &(0x7f00000079c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1a000000, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]}) mknodat$loop(0xffffffffffffffff, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') lstat(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000840)) 4.608435081s ago: executing program 4 (id=3394): socket$inet6_udplite(0xa, 0x2, 0x88) setxattr$trusted_overlay_origin(0x0, &(0x7f0000000200), &(0x7f0000000280), 0x2, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r6, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000140)="be38", 0xffe7}], 0x1, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x5865, {0x0, @local, @dev}}}, @ip_retopts={{0x14, 0x0, 0x7, {[@rr={0x7, 0x3, 0x8b}, @noop]}}}], 0x38}, 0x0) 3.977140372s ago: executing program 2 (id=3397): syz_mount_image$ext4(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffffed7a00000800395032303030"], 0x15) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x3, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f00000002c0), 0x80000075, r2}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) r4 = dup(r1) write$FUSE_BMAP(r4, &(0x7f0000000200)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000740)=ANY=[@ANYBLOB='P'], 0x150) write$cgroup_int(r4, 0x0, 0x0) write$FUSE_OPEN(0xffffffffffffffff, 0x0, 0x0) getresuid(&(0x7f0000000380), &(0x7f00000001c0), &(0x7f0000000180)=0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',privport,access=', @ANYRESDEC=r5]) mknod$loop(&(0x7f0000000080)='./file0/bus\x00', 0x0, 0x0) connect$inet6(r4, &(0x7f0000000400)={0xa, 0x4e23, 0x1, @mcast1, 0x2}, 0x1c) 3.529617438s ago: executing program 3 (id=3403): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x5, 0xff, 0x0, 0x1}, 0x48) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000940)={0x1b, 0x0, 0x0, 0x40000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400f400b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, 0x0, &(0x7f0000048000), 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="4c00000010004b0422001200000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c000280080004000000000008"], 0x4c}}, 0x0) 3.417238766s ago: executing program 4 (id=3404): prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) pipe(0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x0, 0x6b, 0xa, 0xff00}, [@call={0x55}, @exit, @map_fd, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x0, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0xe, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) socket$igmp(0x2, 0x3, 0x2) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000140000200000000000000079102000000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x4, 0xc4, &(0x7f00000002c0)=""/196}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x11, &(0x7f0000000500)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="000000008100000018200000", @ANYRES32=0x1, @ANYBLOB="000000000600000018260000", @ANYRES32=0x1, @ANYBLOB="000000000500000018110000", @ANYRES32=0x1, @ANYBLOB="00000000000000009500000000020000"], &(0x7f0000000280)='GPL\x00', 0xdc7f, 0xd, &(0x7f00000003c0)=""/13, 0x40f00, 0x10, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x4, 0x5}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, r3, 0x0, &(0x7f0000000680)=[0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x1]}, 0x90) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000d40)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x2}, 0x48) 2.592524843s ago: executing program 3 (id=3408): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$selinux_load(r0, &(0x7f00000004c0)={0xf97cff8c, 0x10}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="00010000", @ANYRES16=0x0, @ANYBLOB="000227bd7000fedbdf253600000008000300", @ANYRES32=r2, @ANYBLOB], 0x1c}}, 0x408c4) r3 = syz_usb_connect$hid(0x0, 0x6d, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x5ac, 0x22b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb}}}}]}}]}}, 0x0) syz_usb_control_io(r3, 0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) syz_usb_control_io$hid(r3, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00620b000000a3738d42e40bf8c1281704"], 0x0}, 0x0) 2.394323399s ago: executing program 4 (id=3409): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x1800, &(0x7f0000007840)=[{&(0x7f0000000680)=ANY=[@ANYBLOB="180100001c0001000000000000ebffff080100801400030018000100000000f35e000000000000000c0002000000000000000000080001"], 0x118}], 0x1}, 0x0) 2.297177096s ago: executing program 4 (id=3410): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000406d041bc700000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@bridge_delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r3}, [@NDA_LLADDR={0xa, 0x2, @broadcast}]}, 0x28}}, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0xc4000, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x4, 0x2, 0x6ce, 0x3444, 0xffffffffffffffff, 0xb68b, '\x00', r3, r4, 0x1, 0x0, 0x4, 0x8}, 0x48) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600"}) r7 = syz_open_pts(r6, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(r7, 0x5428, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7020000ff000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r8}, 0x10) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) recvfrom$inet(r9, &(0x7f0000000080), 0x0, 0x20, &(0x7f0000000180)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="400e080000000d278863"], 0x0, 0x0, 0x0, 0x0}, 0x0) 1.862541291s ago: executing program 1 (id=3411): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x8, 0x8, 0x42, 0x1}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x90) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) creat(0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000680)=ANY=[@ANYBLOB="050000000000000071119700000000008510000002000000850000000000000095000000e4ff03009500a50500000000329c6bb91e0eb62ca21034db2ce7b2217eb10bf7b23fbe8af8cdcbdcb411d299ddd7325b1d65cac349f729e5d883cdc60cbd61857f00bde90b699aa3ac5273fc3f3aa00bd196123275d792a73692c52b3eebf7783ffe1ac895bd49394c7638dd36bb7f411a1c0aa101ea826740d4fa367f189748fbdbe5b3513d4d6947d3b2139f5bf0ce139ac05cbc643d3853b119ee01427bdcdf7a222fc594d273b8ab7878927753d9d3678916c27354a748e859b0d53d3df17526b27e2e2e72afa5fa2b5e0b2bf8dfe5c00873351d162a51b990b3c4f0da7d5e4956ec62c87f142fc5411cac97d5709ea0db3ce911b1f8b7cd25b20b368112b7c57aaea56b16e8f9ff2abd7cb6bc6110a0a356f752338ca8c057aa687b21dee9829d2753b12b7a28ba2f3494c5e2"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x12, &(0x7f0000000080)=ANY=[@ANYBLOB="180500000400000000000000000000000000000000001810", @ANYRES32, @ANYBLOB="0000000000000000000000000000000018000000000000000000000000000000950000000000000018010000756c6c2500000000002020207a0af8ff00000000cf510000000000000701000000feffffb702000008000000b703000000000000850000002d00000095"], 0x0}, 0x90) socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000477c82d4df511eb2055dadbde5da777a5e2c9703f33b9b242efdb29452b4b21a06115b71be04a0915a8ff2d8633f652ed66ad6", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.653118218s ago: executing program 0 (id=3413): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x1c}}, &(0x7f0000000480)='GPL\x00'}, 0x80) socket$can_bcm(0x1d, 0x2, 0x2) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f0000000700)=ANY=[@ANYRES8=0x0], 0x1, 0x217, &(0x7f00000004c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x6, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9}, [@jmp={0x5, 0x0, 0xc, 0x0, 0x1, 0xffffffffffffffe0, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}]}, 0x0, 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x0, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000007c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000800)=[{0x2, 0x4, 0x0, 0x7}, {0x1, 0x0, 0x10, 0xb}, {0x4, 0x4, 0x0, 0xa}, {0x3, 0x1, 0xf, 0x1}]}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) tgkill(r0, r0, 0xd) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) creat(&(0x7f0000000240)='./bus\x00', 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/timer_list\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4400000010000104410500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800500190000000000080004"], 0x44}}, 0x0) 918.414426ms ago: executing program 1 (id=3414): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe28, 0xfffffffffffffff5, &(0x7f0000000980)="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", 0x0, 0x2f, 0xe8034000, 0xf000, 0xfffffffffffffe2a, &(0x7f0000000000), &(0x7f00000000c0)="c6769e45b7c61302926682c7f9e9bb5ba2b3cdf023e8da0392a4cd62e2370f25ae5ba0dab896bcf5b774cd28bebbde39f796ae27d04582bb7c03e9fe830ea22c9fd03f6d2779515fdad3f5d0de07b7b70996102fdb67b1e77a34a5b7136a212fa2c0ea502588309dc3e42c55a6f93e6ba5e1b492f9db48f0fdd2f9fb937b3e8a63dcf9dd855837433998ba579da27559", 0x5dc}, 0x28) 904.814068ms ago: executing program 1 (id=3415): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="c51d369fc079d43442f78e1869eb0312aac75c24f78597ab58453c83c6c69f0fd81fdfffca76e3c7d4bfc4acbfe46b3691e34e56cadef35d35f773b4ff6bae9ec19ace6ba5947d0cf021ce9d4bb69b8385b136ecb7bc9dee4146813405efe2654f750a4bd3f0fe0b5a18388c5876c2322280d549ac8641baef941cf8564ce2cfe40490015513ebf3086f7b18d8691682a6a505ae383ae0d097e67f802bac013feff2bc75bd89", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000840)={{r2}, &(0x7f00000001c0), &(0x7f00000005c0)=r3}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r5, 0x11, 0x64, &(0x7f0000000280)=0x2, 0x4) bind$inet6(r5, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x6e, &(0x7f00000004c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0x38, 0x11, 0x0, @dev={0xfe, 0x80, '\x00', 0x8}, @mcast2, {[], {0x0, 0xe22, 0x38, 0x0, @opaque="9cf45387bd639da3dc5f746e89961083462cee05ef33e5fb87811673f19b555f4bb54ab728cc585a04d182daf1f2038e"}}}}}}, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r7, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r8 = dup(r7) write$FUSE_BMAP(r8, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r8, &(0x7f0000000600)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_INIT(r8, &(0x7f0000000300)={0x50}, 0x50) getresuid(&(0x7f0000000440), &(0x7f0000000480), &(0x7f0000000380)=0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r8, @ANYBLOB=',privport,access=', @ANYRESDEC=r9]) r10 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r10, &(0x7f0000000080)='./file0\x00') 813.182875ms ago: executing program 1 (id=3416): socket$nl_route(0x10, 0x3, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) mknodat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) setgid(0x0) (async) setgid(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x8, 0x0, 0x0}, 0x90) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_ext={0x1c, 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB="180100002020702500000000002020207b1a01ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000540), 0x10, 0x0, 0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000600)=[{0x0, 0x0, 0x0, 0x5}], 0x10, 0x8001}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0x1b, &(0x7f0000000340)=ANY=[@ANYRES16=r0, @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a500000018110000", @ANYBLOB="0000000000000000b70200000000000085000000860000000500feff000000008520000000000000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000018"], &(0x7f0000000440)='GPL\x00', 0x401, 0x8b, &(0x7f0000000480)=""/139, 0x41000, 0x0, '\x00', 0x0, 0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0xa, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, &(0x7f0000000780), &(0x7f0000000980)=[{0x1, 0x1}, {0x1, 0x0, 0xf, 0x1}, {0x5, 0x2, 0x6}, {0x0, 0x0, 0x0, 0x7}, {0x0, 0x3}, {0x0, 0x1}, {0x0, 0x3, 0x0, 0x8}], 0x10, 0x7}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9, 0x84, 0x144}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r4}, 0x38) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r4}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, &(0x7f0000000840)=""/121, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r4}, 0x38) (async) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, &(0x7f0000000840)=""/121, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r4}, 0x38) mount$overlay(0x0, &(0x7f00000001c0)='./bus\x00', 0x0, 0x0, 0x0) (async) mount$overlay(0x0, &(0x7f00000001c0)='./bus\x00', 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() (async) getpid() 740.869281ms ago: executing program 0 (id=3417): socket$pptp(0x18, 0x1, 0x2) ppoll(&(0x7f0000000340)=[{0xffffffffffffffff, 0x4020}, {0xffffffffffffffff, 0x6010}, {}], 0x3, &(0x7f0000000380)={0x0, 0x3938700}, &(0x7f00000003c0)={[0xffffffff]}, 0x8) 665.384566ms ago: executing program 0 (id=3418): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x13, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff0000000071106800000000009500000018000000"], &(0x7f0000000480)='syzkaller\x00'}, 0x80) 638.560319ms ago: executing program 0 (id=3419): r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x1, 0x1) write$UHID_INPUT(r0, &(0x7f0000000d00)={0x8, {"7894e6e62ce0f10fcdce74f21ad5b47c923d4dec90cefd599912070f341d59a8802e33af9869738f25b2f72093dd0ffa688e8e417c6e0e09b99649818d7caca39e142ef69d9101397854c3f51bde013686a626b2120c03d98c0ad981069188fbbddb88bf41a6b29ed43d1244e6025e1e4a2f40577619ccee39385bfc86461023a7906e5c07d16415140f4ab26db004362c885ef2c9ee82d3dd7e2ac42ca05d81ccea87dc0ec4a8f222013d6d4d0b0c828f3d2e3151dce87bfb335c1ad67bb3323564022ab23a6ba54ca117ca592c8d4227922347ea6f7c9d3dbdbc8d235f2d03e688d5ca7718d60e911534f964bf20359a0057847e7d7fd2cc463784aab2b06ba95512cfc427da44aa73634b0797b9baab391aa176d259c047ee9d346e63903860ab3c571d064509a715c5c4c6edffce9e1701e8291c2d937e3ff18691fe9a665b1a3b717a40205f8efa239b37e6b33f5c8ac28e616f788d0294c8d39ff4a63aaca7d4c578a935dd84850432201081bc1b00c5797847eaff8cecf8af8a60f075b5ff1c3dc9e62f9a3cfc4333a7501dd8badfdc691a9d35d3fc2c0e8f1b21a2c619201004a0d82bace1738ba9ca93e6fbf8ebaa78b5423efb19d3337ad050a7a1a634737a0169921911b277ab235f8b186efd60c3eff58e974a856ba460c5fbd91c1b5c999a7f6b4474560e0c5698085e1ff96381999bf7338dddab4499c6ae315245ecc98d3ca2ebc11214a4115e9205e7d1705591be4029a5e92ae06c02ba39ac70cf1ba082ccee070bf2feafa55ac6e863adb6f89a7475c2dc073058b0f8a52151d8c3ced025463656942bfd257ace6c54bd57985a44cef1c20777db47d12bd34371ef6f537e455b7787e3a853713877fa9465937602ceef8b9439507ab802ea4eaf5ee2ecd710b1840d8b8c995b5904434198abd8f0e830857ed1af53f3bcede9d57afb1cd7ad27bf222a6d1c58286c40d22211a3b2b7b7bbf5923a528fa4d781aaec1f67e013392b17197d2f6ff2d0e68bea94ce57cc516daffdf2348333a8dc596894540aa2a79437d95465fc27627b0e26871d5248c39e1a3badb319d449a7d67145418e1a35cb4bf950a5483d6e80763ea676b89d1f1e2cea20c590c76ae9fb228ffd638ccabdb3830cf944e1cccfb7ba8b1d1f0aabc498155ddda8404ebe2e25cfcfa9058af7d66bef79e592a579d556404ea3f28d6ddb3fdead9123247e23827f729eee41540d0f0e94027d65eee4e7c1c913c634f9abf546388cd2e4b351b16bd97faae3b54f5b2750495619ec36d97a1080564fa30a9f8a2700b77340b5bbd9cc377ee35420b5b762935047af7837e973a9da42ef93c11f145704d041054bcc4680363cbbee16a2bc0eaaa49cfa23330a666dff32daa17a6ea425f1ed2354d0c36893c895a0564e100d3e1385467405ca2706cfb62453faf72b1648727faeffb3c934bc4e48e4ce93af11bff3208cb3843da7ed68451b4af747ef72e2fb78a73990c95097c9504aacddffc5caadeb171e95ad113561144907d361fd28695239f6619360b9d0eead653cc83ab13fc7c0c60237e3363b6f319daa38d792426393e2396404a112ed9e70b378f494d4b540bf9b44d76b347a12c8cdaeed350a85698eb71bd126f75b9aa0ff7435926a4a4ce04e4187eae5a80b1ff56aa7f1b005a9a057b6ace4cf08c404f66c0b31974d151e9a2840ebcbfbfd898e6694b89fe78a68b90551c9d33c14914dceff64a699c1cf1570c2d1f53e905abef9f954fbdd100b1b18f10dbd673bd6c7a9693286cf2dc0ab9919466750aa42ccfa27e9ff4190dd784ec6f2e19270521f98561a959152b16a80f0b1e183375d3886936ae03ff4949777d30481c24bbae918d5fdcc8f46ff05e2370095bc85cde086dc1e32423f21c13c42490fb679462f35dd0c4ef06f8c3f24327af47ea2c73a856f112385094fe138022e308c157adb19b94ed0e8d94b805883318b33b22f371d62f0b764b2a44b65018bef417357aa997ea4ef95a2899963e06a3c553943e14d3364b73919f5e6d8395d56d522f1b19ae37d48f1534d92e4248824adb555281aea2fb317bfb30cdc7d4efada900006f45578a061b19e2eeefffdbf1974a1633182501611724079f926122c1c8fd9b1d8e6302d76ed90616abcfcac478e3b8d3be91eee5f9c653f8fed3afc1eb33d9314aaa021e8b53ab7ba3e59b301a6c757efd95c6661d7d3e8a73cdec7833f4608dc238d8e144a5b0196a9aea6fb30efdfdb05f9529c52af93cd78d857e3cc920bf30b2292380c662890f3679c09aea55c77a75dbb4da338c0fb737a5fc31252d9fa798f9dd70947f6cfa0474a7a835c694dfbb5c678216915d1f04c81d5df8f2efde80fdbce8248525d9b639f394847b9a8c2e7f7288b031df91db059eabb750c1bfe732b78001c2cca0f74cd8873cc2a892d26e1dbd48db297853775c21d68ce1daebee4f4d65bf8e448b1c80da35eaff3295ffe0aef68baff15f7585aba741699c3ed9a62f2c18200e40cbb383b844459ca9636d61645470d4f8b04704b84a7986d816c037d368d807ab936faa842a427cc4987ab506f3f08841195c893f39656547ff62730ec43aa78311d57defe4002301f6b9e1f6573f3a46715e2d1f899480e8bc97f5dfe48ad14df280126998d32dc0a63231584b5ee82d5f90d5ccd3eb3923cee0dfe0eb9b1ac54fd97214ad86c6459cf916ba0bfc9d4210a95346d753f4bc7440d78274c4cd1850907a2bf150a1c1b511bf0438494a6aa1a197f787c96b410d866b4cb284f74122ffbb2f5fa7c2c22f935c7e1542ff83f01e3024ee6e3d7fd0fba2754e635c8116a27f15586300d6522979822c1f97038f33c644ef82e9818f4a09388cb9a69514c929e9bc149fd7a26b458d89abb5e3ae1de29ed1f28d613878a24a9296c967339b9c6749f92c720982cb78a120bcf7593c6fbae36f9a06caa384a7e5d3f05442b0a69f72518a76a916968aae56abda54dac318fd726335e95592f80d030ef51aea41d5e348267fcea65e49d8e36e711fedb3fb9ad37d3fdf2185dcc3ff44736d6a0d4b4bd1810f89ec6e0e6b6f58f74d73ddd2a27fcfaf36d1aec6c3769787a1d3b8514487a399e6497bd0bf4c4242868d599aeb2202cae535e8118d478fc43b4c8bfdcf024f36f5d7c9f75c69bc9d4d5414e8bef740bcaf9027dbdb0f47643b984406c9ce1999d7631243c26d6824ae74ab71f536e40e934a5dfea7f5c5d10713c831df6ba168f4080a4b082e94bc23c0807aab7c0bc29f327d185a2a9302cc255aa54764c4eb8ef5b17d640afa30b36572294914d51ac146f87af6f5abd97823724aba25f589e769aa1047e72365e9ee67e7f90e80542cc842aebabc97679dd893075e8a1bd6934ac9e768e20bcf4c2fa29c5f7a103d3ff689c721e08ef1d0ca61ee3e07a815aa943879dd5c406dcff6a946b0a12980620cfb224912e27accbb63b1e2d571c65918c806060dcd08d5cef341e5c5705021ec19605b809a44d2a8f6f27e18f2b8fd268e23706564df5501096fd8f8261e27d5c8b582673f0c76bf78b27f754cddb5b64a33c87841681d8eef2b5abe8a8deabee587189f75b8b518909cd2a6f89910425e8647f25077829f1b400b3abcaeff6f54ccc00f6fb7abeeefe0226e4e2b55fba0925b49be8310fc5a490384e4a5e7216b0fd0c09c00e3327ada8c59eb37443ac9148a9df92b0d4e6851cd93b784d3e0a236d9fe7c483f03d813fc98e632cf6255dc4a70a0458570776509ebfb545f35956c7e32493f6ad886ec858bfc29bffb7f2ae7eed7d83e3075554dd81e72c93f4c2e4dcdb0832e76861b983b17c2a6f887a988e4fd47459fd45134560b5b1bec10c50914f2d7f327a4e68a0c453f067035f243ca01aa22969481d5fb48d1da82f35222c4e8d249625c454159f7b00a85d43414eb5e7c8044922b323f2473af648d1dba5ffff34bd5e023a2fe4860d7568fa4d35ad20c461eb38bced561edcef853dbcdd7b69bb40e9cda525a71a286c956a1268cacad0bc0c79ed7632aedbb8dc78ba1a2adea2b650314072d1ebc08f9753d6d38e53a758ea4700160588e819239711a506f004ec57037cd6efcbb9cee3bba556eaaa008bf8e8390085b85653c7aa006dd836c7ad025bed9dec77a4a00b309776862fca4dd01dff16aa6bd70a876662093b85ffbb07b2f8b4361f5dc635f940571239a71865e8f1a289f449ae9a74266205c8b1fe8a732db502c9ea5e5c379b704d43ef795b40450aa498535803767d2c2cbd2749474d2997e00f37612fcc0ae7322b8c8e2a90cf66ada69bd05b82d5707562b37e40674f0a3f58d9c776a931b8768d5c23f17c5f9135e7a4ce0c6eb356d9fb4a53d112194c19e6f045d2bd44132a70b9ccd7e65d2787899785f7ee9185589136c847347142440e0a405c18ff3f31acb791a805dd281aaf97aee708dcce2f1aa53161b7716fa0978c0d02871637ad7e1af5a158b727a1dfc2ae1aafbb9c516469ee89fa0f1de23a17115ded5e9c560a468c5192943be74aeaba51083ca0379563f1fa78e29eca1eaf849cd00f419ceb59e640248c332c845e68e9a398281b962ae59aa5b18006b6ea6e0c5f1b30665e1fb975da11ed6a47bd44b4241bbf0443f178e8249805cc3f980a4bb2f46baab0a12e9e9b2aaa7e0ca22b2314a9e5ef6412f4efe31381e3d716244af3112444eabbb0c353acafc0f1179ad4c63b81e5f5bfd771591d24e5254fa72e30aa53717c24b49cee71cdd9368e207af5e992a04f06de912cfcfca38732f5c8393d466d209680ebfa5764897f04531138beff3f65691593e334c2ae2825ffa9353e8aeef37b90691ea5c78d7c86124abf6491a068bf03c3467e5e42ca4b58192d17856722207568777141ccbef3f3891708897af9c196be92056527a8da820d28dccaf4dfed4d38fb8fe826b238d31bad751631a0d8b1eabdfa7bffe65241238ff982d21b2222cdd3a536385d0ab2180ccdf4672d0b21156377fe640ee8c8744b9ba1efce91c295e83a4271a34a1f70adbc2ff0aa6ba9e1965061cadcd3d824636bbc1f977c78dde1859d752c86b099705616edf6e94523f108af79ab5073d26f3788c4d56f1b17b764c1bc387e531dab5dd71198c56b02c68552dc1098beec85dc1bbe2dde316e6093a9a33f578d789da9b2a9209ed6e73a0597bc62467afc42f0348c9b885b92f37569a953f6316d5c8b188539474da3836abeae7ec259cf8fd28f02593597e9206e05e8da4f4346aab36f179deb68a9dab9b550d6fe4f0c88563935328a699b9cbb2015be57c28beaf60be499114f04a96a2f7fb3bf3b5b31e422954c96790aa1e49c5bc1946df0df2b4be63c0aac1ddcf187714f6e67a076a823feaeba5db4a99e5f494ec939d1b0ecd23752c08c3b788704612127e7f080ef581b4990accd6dca7ce52844bc7bbc8c8752497c171d8e628c53609a920fb5a1bc740cb05e2035de72f636ef0498ed2f3cccb64d5740afbc30015442ca0511160787b2c763072c70035f7f3bbbd3966bcc80d021ce1482e27681b963a28189c2ee9d64d0622a94eac689d3fc1a4137c4d62a4c73fab4b0175a8ff8fa256118affd94aaeee33b155043f53d9e3d4eb82173df0938c6c3e51c118c1acf187c84f12090ad1dd663013e433455290f87ca88959f9f481e4dd05e6a483abe00f7c974e5ff602a7a6eaa71f8ac06c50afac0c2858b554f59bf88002766a619ae9b0864926d07b273238e1ebd456543f77ea800231dbf4479f0b90fc607", 0x1000}}, 0x1006) socket$inet_udplite(0x2, 0x2, 0x88) socketpair(0x2b, 0x800, 0x6, &(0x7f00000009c0)) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='nodiscard,resuid=', @ANYRESHEX, @ANYBLOB="2c61636c2c616c6c6f635f6d6f64653d72657573652c696e6c696e655f78617474722c64697361626c655f726f6c6c5f666f72776172642c6261636b67726f756e645f67633d6f6e2c6e6f757365725f78617474722c6e6f666c7573685f6d657267652c757365725f78617474722c6673796e635f6d6f64653d7374726963742c6db46f64653d61646170746976652c6a71666d743d7666736f6c642c6e6f696e6c696e655f64656e7472792c"], 0x1, 0x5515, &(0x7f00000079c0)="$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") r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000002d00000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='sys_enter\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = eventfd(0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r5, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x10) r7 = eventfd(0x0) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000100)={r7}) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000040)={r7, 0x0, 0x2, r4}) socket(0x1e, 0x805, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 638.020329ms ago: executing program 2 (id=3420): syz_mount_image$vfat(&(0x7f0000000500), &(0x7f0000000040)='./file0\x00', 0x300001a, &(0x7f0000000b00)=ANY=[@ANYBLOB="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", @ANYRES64], 0xd, 0x2a0, &(0x7f0000002100)="$eJzs3c9qM1UUAPAzSZpGXSSIG0VwQBeuyle3bhrlE8SulAjqQoNtQZJQaCFgBWNXfQKXvoeP4MaNbyC4Fdy1i8rIZGaahKZ/qDGF+vutDnPnnHsyt6SrnPnq9dFg7zCJ0/Pfo9VKorYTO3GRRCdqUfkhGgEAPB0XWRZ/ZQ/JbNRW3w0AsA7F///CY/cCAKzHJ599/lF3d/f5x2nailfbZ+NeEhGjs3GvWO8exDcxjP14Fu24jMiuFPEHH+4+j0aa68Rbo8m4l2eOvvy1rN/9M2Kavx3t6CzP304Lc/mTcW8jXow0ugcbVavteGV5/jtL8qPXjLffnOt/K9rx29dxGMPYizx3lv/9dpq+n/14/t0X+TZ5flKL3ub0vpmsvs5zAQAAAAAAAAAAAAAAAAAAAADgadtK06QY3zOd35NfKufv1C+n61tppbM4n6fIT6pCxXygLMoRPZMsfqrm6zxL0zQrb5zlN+K1hhcLAAAAAAAAAAAAAAAAAAAAQO7425NBfzjcP1pJUE0DqH7W/9A6O3NX3oiTQb9+c8HN++81P20g7/XWm6PRiBU9lruCF/J+Vl55c3a4n0YRVAez0r1efq8oejLop+VS9ZAH/eSuvVrVwf08v9SMf9tYNv2TuMwWz7R11epiVnNFT6P50tKlv7Msu1+dd/8ozqi8kkxHbNxv940yWPoB86B1/Sx+ubngjV8Z9ZV88QAAAAAAAAAAAAAAAAAAANfMfvS7ZPH01tTaf9YUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKzZ7P3/VdCKiMUr14JJmXzbPWXQjKPjR/6IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/A/8EwAA//9s0FAH") bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r3, &(0x7f0000000080)="7b934a23d1dda2c1", 0x8, 0x0, &(0x7f0000000340)={0x2, 0x0, @empty}, 0x10) (async) sendto$inet(r3, &(0x7f0000000080)="7b934a23d1dda2c1", 0x8, 0x0, &(0x7f0000000340)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_int(r3, 0x0, 0x14, &(0x7f0000000040)=0x4c54, 0x1) recvmmsg(r3, &(0x7f0000000780)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=""/215, 0xd7}, 0x2}], 0x1, 0x0, 0x0) mkdir(&(0x7f0000000540)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000540)='./file0\x00', 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) timer_create(0x1, &(0x7f0000000300)={0x0, 0x5, 0x2, @thr={&(0x7f0000000680)="aefb7b02a342e8d1f6a0a5a2acbdf1faa409c071f5d5a353e1b3cc577cef12e234f1bbdb19423865b7f5212525c6eeefa71bbbc6bcaf1f000e151d2748fead6315b35f092546a19e076c0559b37f69e2c55708a0d1acbe34ff4ea1622bc180b448504d4278e2ddad85e7d3a61eb8d39d183d9e601bb65aebc49da052f4d2e824ec8a3ecb831ec2de3710d617d461423343561992e3d4039ea2e5767da1c9879f9037e0e28fa85f1c010cd956a3a99c435314ecfc88ba3d4c266b61610edb1901eccd280ed0e93e2f1783492734522e0e1abdbddbebb7baa7b376", &(0x7f0000000e40)="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"}}, &(0x7f0000000400)) (async) timer_create(0x1, &(0x7f0000000300)={0x0, 0x5, 0x2, @thr={&(0x7f0000000680)="aefb7b02a342e8d1f6a0a5a2acbdf1faa409c071f5d5a353e1b3cc577cef12e234f1bbdb19423865b7f5212525c6eeefa71bbbc6bcaf1f000e151d2748fead6315b35f092546a19e076c0559b37f69e2c55708a0d1acbe34ff4ea1622bc180b448504d4278e2ddad85e7d3a61eb8d39d183d9e601bb65aebc49da052f4d2e824ec8a3ecb831ec2de3710d617d461423343561992e3d4039ea2e5767da1c9879f9037e0e28fa85f1c010cd956a3a99c435314ecfc88ba3d4c266b61610edb1901eccd280ed0e93e2f1783492734522e0e1abdbddbebb7baa7b376", &(0x7f0000000e40)="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"}}, &(0x7f0000000400)=0x0) timer_gettime(r5, &(0x7f0000000480)) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) (async) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r8 = dup(r7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095", @ANYRESHEX=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r9, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r9, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r9], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r10}, 0x10) ioctl$KVM_SET_CPUID(r8, 0x4008ae8a, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000"]) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000900)='./file0\x00', 0x0, 0x100000, 0x0) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) sendmsg$DEVLINK_CMD_GET(r8, &(0x7f0000000a80)={&(0x7f00000008c0), 0xc, &(0x7f0000000a40)={&(0x7f0000000980)={0x30, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@pci={{0x8}, {0x11}}]}, 0x30}, 0x1, 0x0, 0x0, 0x400c004}, 0x20004018) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1adc51, 0x0) 500.34114ms ago: executing program 3 (id=3421): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000000)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000000)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x10) sched_setscheduler(r0, 0x2, &(0x7f0000000200)) (async) sched_setscheduler(r0, 0x2, &(0x7f0000000200)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) (async) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) prctl$PR_SET_PDEATHSIG(0x1, 0x0) (async) prctl$PR_SET_PDEATHSIG(0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x510, 0x5, 0xa, 0x148, 0x368, 0x10, 0x4a0, 0x2a8, 0x2a8, 0x4a0, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x3c0, 0x2f8, 0x368, 0x70, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @rand_addr, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0xb0, 0x110, 0x0, {}, [@common=@set={{0x40}}]}, @common=@SET={0x60}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x570) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000240), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000000)=0x655e, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x3ff, 0x8, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x10}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000002400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r6}, 0x10) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) (async) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) openat$incfs(r7, &(0x7f0000000080)='.log\x00', 0x0, 0x0) 381.262929ms ago: executing program 2 (id=3422): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="6c617a7974696d652c6e6f696e6c696e655f78617474722c6c617a7974696d652c6e6f626172726965722c6163746976655f6c6f67733d342c757365725f78617474722c6d6f64653d6c66732c616c6c6f635f6d6f64653d64656661756c742c00be9ee044c45511e65887f6fac9eba6d787c3684a836f23dbf8ad3dd5931c08b4d8bde7e8acbbf3bf3326f2faa5952a332ad2ced40c98a2affa2dad4d623f9ff3ffa81e45095548ab6200f069d0f63d20fd71d3043b0dd5c4cf9785f3f531abc19bc1678f5e0b33006bd1049ca45fd8500d67a5aa6e1c23d900000000007867738729e703bb122283fb2fae9813a0cfefcdf3dc968af1cf80e96649d943198a96d9b1af9c91506b30922be8537f54e65cf60c6b6a5798955796aea325770d6ccc93a95fad93b2c7bad114fcbc55036a301c23b07073c71555791db8919235022bb0ee4294211ab9b43f3fbedecd223722d937aa22b31e2e9c97e5ea94e4ab83d4e5811c7556813c334aec856af0a0c12b3c93ba5aa906c6e2268a0c6cbbb13f496d87c608604eb02b2c031d5ae40c75"], 0x1, 0x5500, &(0x7f000000ad00)="$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") syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nouid32}, {@minixdf}]}, 0x1, 0x504, &(0x7f0000001480)="$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") r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) ftruncate(r0, 0x4000000) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x1}], 0x1, 0x0, 0x0, 0x3) r2 = open(&(0x7f0000000100)='./bus\x00', 0x101c42, 0x0) fallocate(r2, 0x20, 0x3029, 0x10000) 381.141299ms ago: executing program 1 (id=3423): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xb, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 366.260041ms ago: executing program 1 (id=3424): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) connect$inet6(0xffffffffffffffff, 0x0, 0x0) epoll_create1(0x0) socket$unix(0x1, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x0, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) socket$inet6(0xa, 0x1, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000100)=@getstats={0x1c, 0x1a, 0x309, 0x0, 0x1b}, 0x1c}}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 249.22329ms ago: executing program 3 (id=3425): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0xc}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000280)=@newqdisc={0x4c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0xff81}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c}}]}, 0x4c}}, 0x0) 133.301109ms ago: executing program 0 (id=3426): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x0, 0x5, 0x10001, 0x0, 0x1}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100000000000000", @ANYRES32=r2], 0x20}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r3, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000002000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000440)='qdisc_create\x00', r5}, 0x10) r6 = socket(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0xfeffffff, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0x0, 0x8, 0x101}}}]}, 0x78}}, 0x0) 41.970386ms ago: executing program 3 (id=3427): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffe}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_HELLO_TIME={0x8, 0x2, 0x101}]}}}]}, 0x3c}}, 0x0) 287.54µs ago: executing program 0 (id=3428): mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4000004, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0xc, 0x0, &(0x7f0000000100)) 0s ago: executing program 3 (id=3429): syz_emit_ethernet(0xa0e, &(0x7f0000000180)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x9d8, 0x3a, 0xff, @dev, @local, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x25, 0x16, "004af660fdcd2a9d3fea8639c367475824e5ff1fec61d05cd2481e5f16a2e0c0c7a77da8e54574913307583a126de92dd2f27575716d36ceade2ad37f45e18289a13311b1525e24fd1078f16a632b7d9e170e1e59580de090000000000000026862b4351000964ab32e55e4339bb2937602534c310d016fa7537403ddcdd12341a16f2bdef862e5ba4d76e965de44b86e123844d8361242c7809117c5eacdc237022f54dc68760d4711978c0575160dd2dfe2e85"}, {0x0, 0x7, "3abc2ac2bfb0f9366574005770a981d0425b685b7f39f2bf671c534e4af4347759f70e051bc102a9d7655956b8bc8486cde8bc388d38"}, {0x0, 0x11b, "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"}]}}}}}}, 0x0) kernel console output (not intermixed with test programs): e strings: Mfr=0, Product=0, SerialNumber=0 [ 382.713933][ T9888] usb 1-1: config 0 descriptor?? [ 382.824526][ T9984] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=36 sclass=netlink_audit_socket pid=9984 comm=syz.3.2805 [ 383.011368][ T8773] isku 0003:1E7D:319C.002B: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.1-1/input0 [ 383.228052][ T9972] bridge: RTM_NEWNEIGH with invalid ether address [ 383.236833][ T7031] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 383.239290][ T9888] wacom 0003:056A:0331.002C: hidraw1: USB HID v0.00 Device [HID 056a:0331] on usb-dummy_hcd.0-1/input0 [ 383.422183][ T9994] FAULT_INJECTION: forcing a failure. [ 383.422183][ T9994] name failslab, interval 1, probability 0, space 0, times 0 [ 383.434947][ T9994] CPU: 0 PID: 9994 Comm: syz.4.2810 Tainted: G W 5.10.218-syzkaller-00638-g3feee789f446 #0 [ 383.446017][ T9994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 383.456006][ T9994] Call Trace: [ 383.459135][ T9994] dump_stack_lvl+0x1e2/0x24b [ 383.463653][ T9994] ? bfq_pos_tree_add_move+0x43b/0x43b [ 383.468939][ T9994] ? vsnprintf+0x1c70/0x1c70 [ 383.473357][ T9994] ? vsnprintf+0x1e1/0x1c70 [ 383.477700][ T9994] dump_stack+0x15/0x17 [ 383.481690][ T9994] should_fail+0x3c6/0x510 [ 383.486049][ T9994] ? sidtab_sid2str_get+0x12b/0x2a0 [ 383.491188][ T9994] __should_failslab+0xa4/0xe0 [ 383.495873][ T9994] should_failslab+0x9/0x20 [ 383.500305][ T9994] __kmalloc_track_caller+0x5f/0x320 [ 383.506048][ T9994] ? ptr_to_hashval+0x70/0x70 [ 383.510545][ T9994] kmemdup+0x24/0x50 [ 383.514338][ T9994] sidtab_sid2str_get+0x12b/0x2a0 [ 383.519200][ T9994] security_sid_to_context_core+0x2b5/0x490 [ 383.524925][ T9994] security_sid_to_context+0x33/0x40 [ 383.530131][ T9994] avc_audit_post_callback+0x1af/0xb20 [ 383.535918][ T9994] ? avc_audit_pre_callback+0x2b0/0x2b0 [ 383.541277][ T9994] ? avc_audit_pre_callback+0x2b0/0x2b0 [ 383.546653][ T9994] common_lsm_audit+0x1745/0x1ba0 [ 383.551516][ T9994] ? avc_audit_pre_callback+0x2b0/0x2b0 [ 383.556895][ T9994] ? ipv6_skb_to_auditdata+0xe80/0xe80 [ 383.562190][ T9994] ? _raw_spin_lock_irqsave+0xf9/0x210 [ 383.567483][ T9994] ? _raw_spin_lock+0x1b0/0x1b0 [ 383.572329][ T9994] ? avc_audit_pre_callback+0x2b0/0x2b0 [ 383.577714][ T9994] slow_avc_audit+0x26c/0x3c0 [ 383.582212][ T9994] ? avc_get_hash_stats+0x180/0x180 [ 383.587251][ T9994] ? avc_denied+0x13f/0x1b0 [ 383.591583][ T9994] avc_has_perm+0x20b/0x400 [ 383.595930][ T9994] ? avc_denied+0x13f/0x1b0 [ 383.600523][ T9994] ? avc_has_perm_noaudit+0x240/0x240 [ 383.605835][ T9994] ? audit_inode_permission+0x1ce/0x2a0 [ 383.611205][ T9994] ? may_link+0x5d0/0x5d0 [ 383.615371][ T9994] may_create+0x2ea/0x900 [ 383.619542][ T9994] ? show_sid+0x250/0x250 [ 383.623709][ T9994] selinux_inode_create+0x22/0x30 [ 383.628661][ T9994] security_inode_create+0xac/0x100 [ 383.633688][ T9994] path_openat+0xe21/0x3000 [ 383.638116][ T9994] ? do_filp_open+0x460/0x460 [ 383.642628][ T9994] do_filp_open+0x21c/0x460 [ 383.646967][ T9994] ? vfs_tmpfile+0x2b0/0x2b0 [ 383.651396][ T9994] ? get_unused_fd_flags+0x94/0xa0 [ 383.656337][ T9994] do_sys_openat2+0x13f/0x6f0 [ 383.660854][ T9994] ? mutex_trylock+0xa0/0xa0 [ 383.665278][ T9994] ? do_sys_open+0x220/0x220 [ 383.669707][ T9994] ? __kasan_check_write+0x14/0x20 [ 383.674652][ T9994] ? fput_many+0x160/0x1b0 [ 383.678905][ T9994] ? fput+0x1a/0x20 [ 383.682549][ T9994] ? ksys_write+0x260/0x2c0 [ 383.686896][ T9994] __x64_sys_creat+0x11f/0x160 [ 383.691491][ T9994] ? __x32_compat_sys_openat+0x290/0x290 [ 383.696962][ T9994] ? debug_smp_processor_id+0x17/0x20 [ 383.702167][ T9994] do_syscall_64+0x34/0x70 [ 383.706683][ T9994] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 383.712404][ T9994] RIP: 0033:0x7f43ff8d1bd9 [ 383.716661][ T9994] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 383.736103][ T9994] RSP: 002b:00007f43feb53048 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 383.744346][ T9994] RAX: ffffffffffffffda RBX: 00007f43ffa5ff60 RCX: 00007f43ff8d1bd9 [ 383.752154][ T9994] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000200 [ 383.760147][ T9994] RBP: 00007f43feb530a0 R08: 0000000000000000 R09: 0000000000000000 [ 383.767963][ T9994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 383.775767][ T9994] R13: 000000000000000b R14: 00007f43ffa5ff60 R15: 00007fffc69810d8 [ 383.792738][ T8773] usb 2-1: USB disconnect, device number 76 [ 383.798961][ T282] usb 1-1: USB disconnect, device number 62 [ 383.843739][ T9999] fuse: Bad value for 'fd' [ 383.941131][ T7031] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 383.951961][ T7031] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 383.960784][ T7031] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.969905][ T7031] usb 4-1: config 0 descriptor?? [ 384.450622][T10020] udc-core: couldn't find an available UDC or it's busy [ 384.457574][T10020] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 384.471684][T10022] binder: 10019:10022 ioctl c0306201 20000480 returned -22 [ 384.479921][T10020] binder: BINDER_SET_CONTEXT_MGR already set [ 384.486217][T10020] binder: 10019:10020 ioctl 4018620d 200001c0 returned -16 [ 384.494254][ T7031] keytouch 0003:0926:3333.002D: fixing up Keytouch IEC report descriptor [ 384.504963][ T7031] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.002D/input/input38 [ 384.660374][T10035] overlayfs: failed to resolve './file2': -2 [ 384.674659][T10027] tap0: tun_chr_ioctl cmd 1074025673 [ 384.733850][ T7031] keytouch 0003:0926:3333.002D: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 384.824129][ T8773] usb 4-1: USB disconnect, device number 73 [ 385.025742][T10049] udc-core: couldn't find an available UDC or it's busy [ 385.032899][T10049] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 385.392699][T10057] 9pnet: Insufficient options for proto=fd [ 385.639574][T10075] fuse: Bad value for 'fd' [ 386.141672][T10084] udc-core: couldn't find an available UDC or it's busy [ 386.148749][T10084] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 386.172984][ T9888] usb 1-1: new full-speed USB device number 63 using dummy_hcd [ 386.440461][T10086] EXT4-fs (loop1): Mount option "dioread_nolock" incompatible with ext3 [ 386.585042][ T9888] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 386.604015][ T9888] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 386.622011][ T9888] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 576, setting to 64 [ 386.633802][ T24] kauditd_printk_skb: 166 callbacks suppressed [ 386.633813][ T24] audit: type=1400 audit(372.519:1679): avc: denied { mount } for pid=10085 comm="syz.1.2839" name="/" dev="ramfs" ino=60500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 386.633912][ T9888] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 386.676511][ T24] audit: type=1400 audit(372.556:1680): avc: denied { getopt } for pid=10085 comm="syz.1.2839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 386.708818][ T24] audit: type=1400 audit(372.575:1681): avc: denied { unmount } for pid=8051 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 386.768906][ T9888] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 386.780189][ T9888] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 386.795819][ T9888] usb 1-1: SerialNumber: syz [ 386.823037][T10071] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 386.829916][T10071] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 386.842389][ T24] audit: type=1400 audit(372.704:1682): avc: denied { write } for pid=10099 comm="syz.2.2845" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 387.052083][ T9888] cdc_acm 1-1:1.0: Control and data interfaces are not separated! [ 387.061651][ T9888] cdc_acm 1-1:1.0: ttyACM0: USB ACM device [ 387.103046][ T24] audit: type=1400 audit(372.944:1683): avc: denied { write } for pid=10070 comm="syz.0.2834" name="task" dev="proc" ino=60476 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 387.136186][ T24] audit: type=1400 audit(372.944:1684): avc: denied { add_name } for pid=10070 comm="syz.0.2834" name="cpuacct.usage_sys" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 387.161275][ T24] audit: type=1400 audit(372.944:1685): avc: denied { create } for pid=10070 comm="syz.0.2834" name="cpuacct.usage_sys" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=file permissive=1 [ 387.165625][ T9888] usb 1-1: USB disconnect, device number 63 [ 387.201451][ T24] audit: type=1400 audit(372.944:1686): avc: denied { associate } for pid=10070 comm="syz.0.2834" name="cpuacct.usage_sys" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 387.234678][ T24] audit: type=1400 audit(372.972:1687): avc: denied { mount } for pid=10103 comm="syz.2.2846" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 387.257336][ T24] audit: type=1400 audit(372.972:1688): avc: denied { remount } for pid=10103 comm="syz.2.2846" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 387.524526][T10113] FAULT_INJECTION: forcing a failure. [ 387.524526][T10113] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 387.538085][T10113] CPU: 1 PID: 10113 Comm: syz.3.2849 Tainted: G W 5.10.218-syzkaller-00638-g3feee789f446 #0 [ 387.549345][T10113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 387.559229][T10113] Call Trace: [ 387.562368][T10113] dump_stack_lvl+0x1e2/0x24b [ 387.566873][T10113] ? bfq_pos_tree_add_move+0x43b/0x43b [ 387.572169][T10113] ? arch_stack_walk+0xf3/0x140 [ 387.576853][T10113] dump_stack+0x15/0x17 [ 387.580843][T10113] should_fail+0x3c6/0x510 [ 387.585100][T10113] should_fail_usercopy+0x1a/0x20 [ 387.590168][T10113] _copy_from_user+0x20/0xd0 [ 387.594590][T10113] __copy_msghdr_from_user+0xaf/0x7c0 [ 387.599796][T10113] ? kmem_cache_free+0xa9/0x1e0 [ 387.604488][T10113] ? __ia32_sys_shutdown+0x70/0x70 [ 387.609591][T10113] ? kasan_set_track+0x5d/0x70 [ 387.614186][T10113] ? do_sys_openat2+0x5e1/0x6f0 [ 387.618869][T10113] ? __x64_sys_openat+0x243/0x290 [ 387.623734][T10113] ? do_syscall_64+0x34/0x70 [ 387.628163][T10113] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 387.634061][T10113] ___sys_sendmsg+0x166/0x2e0 [ 387.638658][T10113] ? __sys_sendmsg+0x280/0x280 [ 387.643263][T10113] ? __fsnotify_update_child_dentry_flags+0x2b0/0x2b0 [ 387.649853][T10113] ? proc_fail_nth_write+0x20b/0x290 [ 387.654979][T10113] ? __fdget+0x1bc/0x240 [ 387.659055][T10113] __sys_sendmmsg+0x2c3/0x510 [ 387.663570][T10113] ? __ia32_sys_sendmsg+0x90/0x90 [ 387.668425][T10113] ? mutex_lock+0xa5/0x110 [ 387.672683][T10113] ? __kasan_check_write+0x14/0x20 [ 387.677890][T10113] ? __ia32_sys_read+0x90/0x90 [ 387.682490][T10113] __x64_sys_sendmmsg+0xa0/0xb0 [ 387.687176][T10113] do_syscall_64+0x34/0x70 [ 387.691431][T10113] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 387.697154][T10113] RIP: 0033:0x7f60f8f2bbd9 [ 387.701409][T10113] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 387.721180][T10113] RSP: 002b:00007f60f81ad048 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 387.729547][T10113] RAX: ffffffffffffffda RBX: 00007f60f90b9f60 RCX: 00007f60f8f2bbd9 [ 387.739230][T10113] RDX: 0000000000000002 RSI: 0000000020003f40 RDI: 0000000000000003 [ 387.747036][T10113] RBP: 00007f60f81ad0a0 R08: 0000000000000000 R09: 0000000000000000 [ 387.754843][T10113] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 387.762653][T10113] R13: 000000000000000b R14: 00007f60f90b9f60 R15: 00007fff93ddc7c8 [ 387.994386][T10132] udc-core: couldn't find an available UDC or it's busy [ 388.001479][T10132] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 388.087564][T10142] overlayfs: overlapping lowerdir path [ 388.097224][T10142] netlink: 'syz.1.2852': attribute type 3 has an invalid length. [ 388.231461][ T1424] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 388.838764][ T1424] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 388.850047][ T1424] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 388.875476][ T1424] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 388.884669][ T1424] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.900723][ T1424] usb 1-1: config 0 descriptor?? [ 389.093380][T10168] udc-core: couldn't find an available UDC or it's busy [ 389.100459][T10168] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 389.163212][ T9842] usb 2-1: new full-speed USB device number 77 using dummy_hcd [ 389.434250][ T1424] hid (null): bogus close delimiter [ 389.509882][ T9842] usb 2-1: device descriptor read/64, error -71 [ 389.677515][ T1424] usb 1-1: language id specifier not provided by device, defaulting to English [ 389.798875][T10176] __nla_validate_parse: 44 callbacks suppressed [ 389.798885][T10176] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2869'. [ 389.848122][T10177] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2868'. [ 390.127431][ T9842] usb 2-1: device descriptor read/64, error -71 [ 390.140841][T10187] netlink: 116 bytes leftover after parsing attributes in process `syz.3.2872'. [ 390.149932][T10187] device bridge_slave_0 left promiscuous mode [ 390.155958][T10187] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.441641][ T9842] usb 2-1: new full-speed USB device number 78 using dummy_hcd [ 390.940362][ T1424] uclogic 0003:256C:006D.002E: failed retrieving string descriptor #100: -71 [ 390.967206][ T1424] uclogic 0003:256C:006D.002E: failed retrieving pen parameters: -71 [ 390.975107][ T9842] usb 2-1: device descriptor read/64, error -71 [ 390.975668][ T1424] uclogic 0003:256C:006D.002E: failed probing pen v1 parameters: -71 [ 390.989885][ T1424] uclogic 0003:256C:006D.002E: failed probing parameters: -71 [ 390.997414][ T1424] uclogic: probe of 0003:256C:006D.002E failed with error -71 [ 391.006594][ T1424] usb 1-1: USB disconnect, device number 64 [ 391.579212][ T9842] usb 2-1: device descriptor read/64, error -71 [ 391.720224][ T9842] usb usb2-port1: attempt power cycle [ 391.785209][ T757] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 392.040524][T10221] input: syz0 as /devices/virtual/input/input39 [ 392.066724][ T757] usb 4-1: Using ep0 maxpacket: 32 [ 392.197158][ T757] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 392.207170][ T757] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 392.305183][ T757] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 392.314738][ T757] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 392.322638][ T757] usb 4-1: SerialNumber: syz [ 392.348525][T10209] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 392.435119][ T8773] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 392.550181][T10229] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2885'. [ 392.590214][T10209] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 392.605548][ T24] kauditd_printk_skb: 11 callbacks suppressed [ 392.605561][ T24] audit: type=1400 audit(378.020:1700): avc: denied { read } for pid=10231 comm="syz.0.2886" path="socket:[60061]" dev="sockfs" ino=60061 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 392.847180][ T8773] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 392.857330][ T8773] usb 5-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db [ 392.866518][ T8773] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.874943][ T8773] usb 5-1: config 0 descriptor?? [ 392.934325][ T8773] rndis_host 5-1:0.0: skipping garbage [ 392.939659][ T8773] usb 5-1: bad CDC descriptors [ 393.032686][T10238] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.2888: bad orphan inode 8192 [ 393.043069][T10238] EXT4-fs (loop1): mounted filesystem without journal. Opts: quota,dioread_lock,resuid=0x0000000000000000,,errors=continue [ 393.056052][ T24] audit: type=1400 audit(378.445:1701): avc: denied { mount } for pid=10237 comm="syz.1.2888" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 393.111228][ T757] cdc_ether 4-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.3-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 393.125711][ T24] audit: type=1326 audit(378.510:1702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10237 comm="syz.1.2888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61db0d3bd9 code=0x7ffc0000 [ 393.149132][ T24] audit: type=1326 audit(378.510:1703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10237 comm="syz.1.2888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61db0d3bd9 code=0x7ffc0000 [ 393.172496][ T24] audit: type=1326 audit(378.510:1704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10237 comm="syz.1.2888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f61db0d3bd9 code=0x7ffc0000 [ 393.203215][ T24] audit: type=1326 audit(378.510:1705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10237 comm="syz.1.2888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61db0d3bd9 code=0x7ffc0000 [ 393.233886][ T24] audit: type=1326 audit(378.510:1706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10237 comm="syz.1.2888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61db0d3bd9 code=0x7ffc0000 [ 393.261591][ T24] audit: type=1326 audit(378.510:1707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10237 comm="syz.1.2888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=251 compat=0 ip=0x7f61db0d3bd9 code=0x7ffc0000 [ 393.284868][ T24] audit: type=1326 audit(378.510:1708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10237 comm="syz.1.2888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61db0d3bd9 code=0x7ffc0000 [ 393.308496][ T24] audit: type=1326 audit(378.510:1709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10237 comm="syz.1.2888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61db0d3bd9 code=0x7ffc0000 [ 393.361657][T10261] usb usb8: usbfs: process 10261 (syz.1.2889) did not claim interface 0 before use [ 393.411172][T10269] tmpfs: Unknown parameter 'r' [ 393.696073][T10209] device syzkaller0 entered promiscuous mode [ 393.719347][ T9842] usb 4-1: USB disconnect, device number 75 [ 395.554252][ T9842] cdc_ether 4-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.3-1, CDC Ethernet Device [ 395.700483][T10300] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=39 sclass=netlink_xfrm_socket pid=10300 comm=syz.3.2901 [ 395.708629][ T1424] usb 5-1: USB disconnect, device number 77 [ 396.158066][T10316] fuse: Bad value for 'user_id' [ 396.168282][T10316] 9pnet: Insufficient options for proto=fd [ 396.226315][T10323] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2907'. [ 396.235913][T10323] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2907'. [ 396.255887][T10323] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2907'. [ 396.677507][T10365] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 396.751982][T10373] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2915'. [ 396.881800][T10375] 9pnet: Insufficient options for proto=fd [ 396.888026][T10375] 9pnet: Insufficient options for proto=fd [ 397.543402][T10388] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.550372][T10388] bridge0: port 1(bridge_slave_0) entered disabled state [ 397.557562][T10388] device bridge_slave_0 entered promiscuous mode [ 397.564819][T10388] bridge0: port 2(bridge_slave_1) entered blocking state [ 397.571996][T10388] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.579300][T10388] device bridge_slave_1 entered promiscuous mode [ 397.596932][ T48] tipc: Disabling bearer [ 397.602116][ T48] tipc: Left network mode [ 398.098566][T10403] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2925'. [ 398.107834][T10403] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2925'. [ 398.117030][T10403] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2925'. [ 398.126117][T10403] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2925'. [ 398.135114][T10403] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2925'. [ 398.144004][T10403] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2925'. [ 398.357866][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 398.368778][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 398.523480][T10416] device wireguard0 entered promiscuous mode [ 398.532719][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 398.536764][T10401] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x810) [ 398.541401][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 398.552959][T10401] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 398.557687][ T340] bridge0: port 1(bridge_slave_0) entered blocking state [ 398.566610][T10401] F2FS-fs (loop1): SIT is corrupted node# 2 vs 7 [ 398.571222][ T340] bridge0: port 1(bridge_slave_0) entered forwarding state [ 398.571875][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 398.577815][T10401] F2FS-fs (loop1): Failed to initialize F2FS segment manager (-117) [ 398.593218][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 398.608827][ T340] bridge0: port 2(bridge_slave_1) entered blocking state [ 398.615729][ T340] bridge0: port 2(bridge_slave_1) entered forwarding state [ 398.634656][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 398.642443][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 398.650583][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 398.659071][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 398.667403][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 398.675211][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 398.683592][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 398.693874][T10388] device veth0_vlan entered promiscuous mode [ 398.700314][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 398.708415][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 398.722983][T10388] device veth1_macvtap entered promiscuous mode [ 398.736306][ T1424] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 398.736436][ T24] kauditd_printk_skb: 52 callbacks suppressed [ 398.736446][ T24] audit: type=1400 audit(383.688:1762): avc: denied { bind } for pid=10426 comm="syz.0.2933" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 398.744058][ T1424] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 398.750219][T10427] FAULT_INJECTION: forcing a failure. [ 398.750219][T10427] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 398.773354][ T1424] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 398.796887][T10427] CPU: 0 PID: 10427 Comm: syz.0.2933 Tainted: G W 5.10.218-syzkaller-00638-g3feee789f446 #0 [ 398.800178][ T1424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 398.807981][T10427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 398.807985][T10427] Call Trace: [ 398.808004][T10427] dump_stack_lvl+0x1e2/0x24b [ 398.808017][T10427] ? bfq_pos_tree_add_move+0x43b/0x43b [ 398.808027][T10427] dump_stack+0x15/0x17 [ 398.808036][T10427] should_fail+0x3c6/0x510 [ 398.808047][T10427] should_fail_alloc_page+0x52/0x60 [ 398.808056][T10427] __alloc_pages_nodemask+0x1b3/0xaf0 [ 398.808067][T10427] ? kasan_poison+0x5d/0x70 [ 398.808077][T10427] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 398.808086][T10427] ? __kmalloc_track_caller+0xe0/0x320 [ 398.808095][T10427] ? __kasan_check_write+0x14/0x20 [ 398.808105][T10427] ? __alloc_skb+0x37c/0x510 [ 398.808115][T10427] alloc_skb_with_frags+0x1b3/0x570 [ 398.808129][T10427] sock_alloc_send_pskb+0x915/0xa50 [ 398.808140][T10427] ? sock_kzfree_s+0x60/0x60 [ 398.808149][T10427] ? copyin+0x90/0x90 [ 398.808162][T10427] packet_sendmsg+0x39a2/0x60a0 [ 398.808172][T10427] ? avc_has_perm+0x14d/0x400 [ 398.808185][T10427] ? arch_stack_walk+0xf3/0x140 [ 398.808198][T10427] ? selinux_socket_sendmsg+0x243/0x340 [ 398.808208][T10427] ? selinux_socket_accept+0x5b0/0x5b0 [ 398.808219][T10427] ? packet_getsockopt+0xea0/0xea0 [ 398.808230][T10427] ? __asan_store8+0x4e/0x90 [ 398.808238][T10427] ? kasan_set_free_info+0x23/0x40 [ 398.808259][T10427] ? check_stack_object+0x114/0x130 [ 398.816747][ T1424] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 398.825847][T10427] ? security_socket_sendmsg+0x82/0xb0 [ 398.956545][T10427] ? packet_getsockopt+0xea0/0xea0 [ 398.961522][T10427] ____sys_sendmsg+0x59e/0x8f0 [ 398.966080][T10427] ? __sys_sendmsg_sock+0x40/0x40 [ 398.970950][T10427] ? import_iovec+0xe5/0x120 [ 398.975464][T10427] ___sys_sendmsg+0x252/0x2e0 [ 398.979971][T10427] ? __sys_sendmsg+0x280/0x280 [ 398.984572][T10427] ? rw_verify_area+0x1c3/0x360 [ 398.989261][T10427] ? __fdget+0x1bc/0x240 [ 398.993344][T10427] __se_sys_sendmsg+0x1b1/0x280 [ 398.998022][T10427] ? __x64_sys_sendmsg+0x90/0x90 [ 399.002815][T10427] ? ksys_write+0x260/0x2c0 [ 399.007140][T10427] ? debug_smp_processor_id+0x17/0x20 [ 399.012343][T10427] __x64_sys_sendmsg+0x7b/0x90 [ 399.016943][T10427] do_syscall_64+0x34/0x70 [ 399.021198][T10427] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 399.026926][T10427] RIP: 0033:0x7f06270b0bd9 [ 399.031303][T10427] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 399.050740][T10427] RSP: 002b:00007f0626332048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 399.058983][T10427] RAX: ffffffffffffffda RBX: 00007f062723ef60 RCX: 00007f06270b0bd9 [ 399.066792][T10427] RDX: 0000000000000000 RSI: 0000000020002ac0 RDI: 0000000000000003 [ 399.074601][T10427] RBP: 00007f06263320a0 R08: 0000000000000000 R09: 0000000000000000 [ 399.082499][T10427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 399.090390][T10427] R13: 000000000000000b R14: 00007f062723ef60 R15: 00007fff96aef978 [ 399.109741][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 399.137549][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 399.154533][T10429] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 399.163229][T10429] EXT4-fs (loop1): #blocks per group too big: 24576 [ 399.165264][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 399.178173][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 399.199801][ T24] audit: type=1400 audit(384.112:1763): avc: denied { mounton } for pid=10388 comm="syz-executor" path="/root/syzkaller.xg490z/syz-tmp" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 399.224011][ T24] audit: type=1400 audit(384.112:1764): avc: denied { mount } for pid=10388 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 399.245768][ T24] audit: type=1400 audit(384.140:1765): avc: denied { mounton } for pid=10388 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=357 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 399.328618][T10442] device syzkaller0 entered promiscuous mode [ 399.337246][ T24] audit: type=1400 audit(384.241:1766): avc: denied { unlink } for pid=10433 comm="syz.0.2935" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 399.337498][T10442] device syzkaller0 left promiscuous mode [ 399.579268][ T48] device bridge_slave_1 left promiscuous mode [ 399.614104][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.621884][ T48] device bridge_slave_0 left promiscuous mode [ 399.627940][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.646770][ T48] device veth1_macvtap left promiscuous mode [ 399.653522][ T48] device veth0_vlan left promiscuous mode [ 400.515662][ T24] audit: type=1400 audit(385.321:1767): avc: denied { create } for pid=10465 comm="syz.4.2946" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 400.534727][ T24] audit: type=1400 audit(385.321:1768): avc: denied { setopt } for pid=10465 comm="syz.4.2946" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 400.553923][ T24] audit: type=1400 audit(385.321:1769): avc: denied { write } for pid=10465 comm="syz.4.2946" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 400.631791][T10475] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 400.638761][T10478] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10478 comm=syz.0.2949 [ 400.639722][T10475] EXT4-fs (loop1): Ignoring removed orlov option [ 400.663671][T10475] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 400.671613][T10475] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=802c01c, mo2=0002] [ 400.679794][T10475] EXT4-fs (loop1): couldn't mount RDWR because of unsupported optional features (80) [ 400.689507][T10475] EXT4-fs (loop1): Skipping orphan cleanup due to unknown ROCOMPAT features [ 400.698268][T10475] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000004,noinit_itable,nomblk_io_submit,noblock_validity,sb=0x0000000000000001,jqfmt=vfsold,jqfmt=vfsold,noinit_itable,debug,orlov,,errors=continue [ 400.734185][ T9845] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 401.037461][ T9845] usb 4-1: Using ep0 maxpacket: 32 [ 401.405927][ T24] audit: type=1400 audit(386.134:1770): avc: denied { create } for pid=10488 comm="syz.2.2953" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 401.455560][ T24] audit: type=1400 audit(386.134:1771): avc: denied { write } for pid=10488 comm="syz.2.2953" path="socket:[61644]" dev="sockfs" ino=61644 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 401.492659][ T9845] usb 4-1: New USB device found, idVendor=0763, idProduct=1041, bcdDevice=e1.78 [ 401.501684][ T9845] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.509850][ T9845] usb 4-1: Product: syz [ 401.513964][ T9845] usb 4-1: Manufacturer: syz [ 401.518703][ T9845] usb 4-1: SerialNumber: syz [ 401.538176][ T9845] usb 4-1: config 0 descriptor?? [ 401.768858][ T9845] snd-usb-audio: probe of 4-1:0.0 failed with error -2 [ 402.606336][T10525] fuse: Bad value for 'fd' [ 402.611685][T10525] netlink: 'syz.1.2962': attribute type 3 has an invalid length. [ 403.090831][T10537] __nla_validate_parse: 47 callbacks suppressed [ 403.090841][T10537] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2966'. [ 403.231862][T10542] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2967'. [ 403.249972][T10542] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2967'. [ 403.481801][ T9845] usb 4-1: USB disconnect, device number 76 [ 403.495937][T10546] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2968'. [ 403.982771][T10560] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Dropping request. Check SNMP counters. [ 404.049952][ T9845] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 404.071097][ T9846] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 404.331359][ T7031] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 404.472007][ T9846] usb 2-1: Using ep0 maxpacket: 16 [ 404.548013][T10573] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2977'. [ 404.623760][ T9845] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 404.634530][ T9846] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 404.645315][ T9845] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 404.654802][ T9846] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 404.664614][ T9845] usb 4-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 404.673956][ T9846] usb 2-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 404.686705][ T9845] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.695764][ T9846] usb 2-1: config 0 interface 0 has no altsetting 0 [ 404.762758][ T7031] usb 5-1: config 0 has no interfaces? [ 404.800331][ T7031] usb 5-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 404.824779][ T7031] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.837519][ T7031] usb 5-1: config 0 descriptor?? [ 404.892437][ T9846] usb 2-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00 [ 404.902098][ T9845] usb 4-1: config 0 descriptor?? [ 404.907086][ T9846] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.915921][ T9846] usb 2-1: config 0 descriptor?? [ 405.042873][T10581] udc-core: couldn't find an available UDC or it's busy [ 405.049786][T10581] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 405.102013][ T8773] usb 5-1: USB disconnect, device number 78 [ 405.178631][ T24] kauditd_printk_skb: 7 callbacks suppressed [ 405.178640][ T24] audit: type=1400 audit(389.632:1779): avc: denied { bind } for pid=10553 comm="syz.3.2970" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 405.208971][ T24] audit: type=1400 audit(389.632:1780): avc: denied { node_bind } for pid=10553 comm="syz.3.2970" saddr=fe80::bb scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 405.317160][ T9845] usbhid 4-1:0.0: can't add hid device: -71 [ 405.323012][ T9845] usbhid: probe of 4-1:0.0 failed with error -71 [ 405.330283][ T9845] usb 4-1: USB disconnect, device number 77 [ 405.505138][ T24] audit: type=1400 audit(389.936:1781): avc: denied { mount } for pid=10557 comm="syz.1.2972" name="/" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 405.544109][T10558] kvm: MWAIT instruction emulated as NOP! [ 405.631261][ T9846] usbhid 2-1:0.0: can't add hid device: -71 [ 405.636370][ T24] audit: type=1400 audit(390.056:1782): avc: denied { accept } for pid=10602 comm="syz.0.2986" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 405.639072][ T9846] usbhid: probe of 2-1:0.0 failed with error -71 [ 405.679059][ T9846] usb 2-1: USB disconnect, device number 80 [ 405.705517][T10607] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2988'. [ 406.097113][ T7031] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 406.221327][T10627] bridge0: port 1(bridge_slave_0) entered blocking state [ 406.228683][T10627] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.235892][T10627] device bridge_slave_0 entered promiscuous mode [ 406.244646][T10627] bridge0: port 2(bridge_slave_1) entered blocking state [ 406.251603][T10627] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.261140][T10627] device bridge_slave_1 entered promiscuous mode [ 406.329597][T10627] bridge0: port 2(bridge_slave_1) entered blocking state [ 406.336463][T10627] bridge0: port 2(bridge_slave_1) entered forwarding state [ 406.343540][T10627] bridge0: port 1(bridge_slave_0) entered blocking state [ 406.350348][T10627] bridge0: port 1(bridge_slave_0) entered forwarding state [ 406.370670][ T9846] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 406.377999][ T9846] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.455643][T10646] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3000'. [ 406.489180][ T7031] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 406.503170][ T7031] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 406.514891][ T7031] usb 1-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 406.525194][ T7031] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.572781][ T7031] usb 1-1: config 0 descriptor?? [ 406.579337][ T9846] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.590512][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 406.598777][ T340] bridge0: port 1(bridge_slave_0) entered blocking state [ 406.605625][ T340] bridge0: port 1(bridge_slave_0) entered forwarding state [ 406.623295][ T9846] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 406.631449][ T9846] bridge0: port 2(bridge_slave_1) entered blocking state [ 406.638298][ T9846] bridge0: port 2(bridge_slave_1) entered forwarding state [ 406.645536][ T9846] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 406.654027][ T9846] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 406.667199][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 406.678410][ T9845] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 406.686434][ T9845] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 406.694474][ T9845] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 406.703043][T10627] device veth0_vlan entered promiscuous mode [ 406.713414][ T9845] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 406.724500][T10627] device veth1_macvtap entered promiscuous mode [ 406.734700][ T9845] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 406.746971][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 406.824842][T10648] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 406.888816][ T3361] device bridge_slave_1 left promiscuous mode [ 406.894815][ T3361] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.902343][ T3361] device bridge_slave_0 left promiscuous mode [ 406.908532][ T3361] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.917054][ T3361] device veth1_macvtap left promiscuous mode [ 406.959245][T10654] erofs: (device loop1): mounted with root inode @ nid 36. [ 407.101820][ T7031] hid-generic 0003:05AC:0269.002F: unbalanced delimiter at end of report description [ 407.112173][ T7031] hid-generic: probe of 0003:05AC:0269.002F failed with error -22 [ 407.331875][ T7031] usb 1-1: USB disconnect, device number 65 [ 407.396080][T10666] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3004'. [ 408.474687][T10682] bridge0: port 2(gretap0) entered blocking state [ 408.481216][T10682] bridge0: port 2(gretap0) entered disabled state [ 408.491439][T10682] device gretap0 entered promiscuous mode [ 408.517721][T10682] xt_CT: You must specify a L4 protocol and not use inversions on it [ 408.827877][ T24] audit: type=1400 audit(393.001:1783): avc: denied { nlmsg_read } for pid=10688 comm="syz.3.3010" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 409.238891][T10700] EXT4-fs (loop1): Unrecognized mount option "smackfsfloor=" or missing value [ 409.348097][ T9846] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 409.373334][T10709] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 409.381967][T10709] overlayfs: bad mount option "redirect_dir=./file1" [ 409.466119][T10712] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3017'. [ 409.618221][ T9846] usb 1-1: Using ep0 maxpacket: 32 [ 409.664434][ T24] audit: type=1400 audit(393.776:1784): avc: denied { create } for pid=10719 comm="syz.2.3020" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 409.683522][ T24] audit: type=1400 audit(393.776:1785): avc: denied { write } for pid=10719 comm="syz.2.3020" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 409.759110][ T9846] usb 1-1: config 0 has an invalid interface number: 224 but max is 0 [ 409.767219][ T9846] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 409.777463][ T9846] usb 1-1: config 0 has no interface number 0 [ 409.784070][ T9846] usb 1-1: config 0 interface 224 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 409.797262][ T9846] usb 1-1: Dual-Role OTG device on HNP port [ 409.834937][ T9846] usb 1-1: New USB device found, idVendor=1a0a, idProduct=0108, bcdDevice=4c.b4 [ 409.847142][ T9846] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.857346][ T8773] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 409.928192][ T9846] usb 1-1: config 0 descriptor?? [ 409.965874][T10736] udc-core: couldn't find an available UDC or it's busy [ 409.972700][T10736] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 409.981984][ T24] audit: type=1400 audit(394.062:1786): avc: denied { map } for pid=10728 comm="syz.1.3024" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 410.038137][T10736] udc-core: couldn't find an available UDC or it's busy [ 410.045217][T10736] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 410.192630][ T8773] usb 5-1: Using ep0 maxpacket: 32 [ 410.268406][ T9846] usb 1-1: string descriptor 0 read error: -71 [ 410.275224][ T9846] usb_ehset_test: probe of 1-1:0.224 failed with error -32 [ 410.283555][ T9846] usb 1-1: USB disconnect, device number 66 [ 410.539190][ T8773] usb 5-1: New USB device found, idVendor=0763, idProduct=1041, bcdDevice=e1.78 [ 410.548103][ T8773] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.556619][ T8773] usb 5-1: Product: syz [ 410.560631][ T8773] usb 5-1: Manufacturer: syz [ 410.565066][ T8773] usb 5-1: SerialNumber: syz [ 410.570090][ T8773] usb 5-1: config 0 descriptor?? [ 410.625709][T10740] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3028'. [ 410.626492][ T8773] snd-usb-audio: probe of 5-1:0.0 failed with error -2 [ 410.803676][ T24] audit: type=1400 audit(394.828:1787): avc: denied { create } for pid=10752 comm="syz.1.3032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 410.845381][ T8773] usb 5-1: USB disconnect, device number 79 [ 410.858628][ T24] audit: type=1400 audit(394.874:1788): avc: denied { connect } for pid=10752 comm="syz.1.3032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 410.900855][ T24] audit: type=1400 audit(394.893:1789): avc: denied { unmount } for pid=10627 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 411.009758][ T24] audit: type=1400 audit(395.013:1790): avc: denied { write } for pid=10759 comm="syz.0.3035" name="if_inet6" dev="proc" ino=4026532402 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 411.693871][ T24] audit: type=1400 audit(395.640:1791): avc: denied { read } for pid=10766 comm="syz.4.3036" name="usbmon0" dev="devtmpfs" ino=134 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 411.718421][T10777] udc-core: couldn't find an available UDC or it's busy [ 411.728084][T10777] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 411.736960][ T24] audit: type=1400 audit(395.677:1792): avc: denied { open } for pid=10766 comm="syz.4.3036" path="/dev/usbmon0" dev="devtmpfs" ino=134 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 411.774220][T10777] netlink: 172 bytes leftover after parsing attributes in process `syz.2.3040'. [ 411.784505][T10777] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3040'. [ 411.793526][ T24] audit: type=1400 audit(395.677:1793): avc: denied { map } for pid=10766 comm="syz.4.3036" path="/dev/usbmon0" dev="devtmpfs" ino=134 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 411.832173][ T24] audit: type=1400 audit(395.677:1794): avc: denied { execute } for pid=10766 comm="syz.4.3036" path="/dev/usbmon0" dev="devtmpfs" ino=134 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 411.886751][T10777] kvm: pic: non byte write [ 412.261784][ T7031] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 412.305181][ T9846] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 412.439832][T10811] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3051'. [ 412.463988][ T24] audit: type=1400 audit(396.354:1795): avc: denied { create } for pid=10814 comm="syz.4.3053" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 412.565096][ T7031] usb 1-1: Using ep0 maxpacket: 32 [ 412.818436][T10819] udc-core: couldn't find an available UDC or it's busy [ 412.825527][T10819] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 412.833711][ T24] audit: type=1400 audit(396.696:1796): avc: denied { read append } for pid=10818 comm="syz.2.3054" name="vga_arbiter" dev="devtmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 412.879424][ T7031] usb 1-1: New USB device found, idVendor=0763, idProduct=1041, bcdDevice=e1.78 [ 412.888484][ T7031] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.896497][ T7031] usb 1-1: Product: syz [ 412.900568][ T7031] usb 1-1: Manufacturer: syz [ 412.905784][ T7031] usb 1-1: SerialNumber: syz [ 412.910766][ T7031] usb 1-1: config 0 descriptor?? [ 412.922734][ T9846] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 412.933554][ T9846] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 412.943536][ T9846] usb 4-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 412.952744][ T9846] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.956247][ T7031] snd-usb-audio: probe of 1-1:0.0 failed with error -2 [ 412.961198][ T9846] usb 4-1: config 0 descriptor?? [ 413.171877][ T9845] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 413.180987][ T7031] usb 1-1: USB disconnect, device number 67 [ 413.245104][T10807] EXT4-fs warning (device sda1): verify_group_input:147: Cannot add at group 1 (only 8 groups) [ 413.431891][ T9845] usb 2-1: Using ep0 maxpacket: 32 [ 413.605251][ T9846] usbhid 4-1:0.0: can't add hid device: -71 [ 413.611030][ T9846] usbhid: probe of 4-1:0.0 failed with error -71 [ 413.621302][ T9846] usb 4-1: USB disconnect, device number 78 [ 413.702749][ T7031] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 413.746109][ T9845] usb 2-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 413.755454][ T9845] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.764268][ T9845] usb 2-1: Product: syz [ 413.768346][ T9845] usb 2-1: Manufacturer: syz [ 413.772714][ T9845] usb 2-1: SerialNumber: syz [ 413.778128][ T9845] usb 2-1: config 0 descriptor?? [ 413.962769][ T7031] usb 5-1: Using ep0 maxpacket: 32 [ 414.179505][ T7031] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 414.189572][ T7031] usb 5-1: config 1 interface 0 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 414.203005][ T7031] usb 5-1: config 1 interface 0 has no altsetting 0 [ 414.385520][ T7031] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 414.438454][ T7031] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.446801][ T7031] usb 5-1: Product: 파肪ﰭⲚጥ䎸롮뺈悅ᇘ㹥쌋燼搆곁掹퓣閌咐贫땸⴯譟獷荃蘈웁騙颇嵒㙑钇묁囻釸ᆛ鐬嬐慤ᔟ뒙骄栖産ﹿ䶊ሃ⾜࿡ᮼ鰙込띐봲텵ꎵ⌂蟫桛枊੾彥춍 [ 414.469783][ T7031] usb 5-1: Manufacturer: 팝㙞땚ꖠᐖ고䙪ײ橼㠧ᶏᖂ寷叨䛏ᎊ歹왯骚勋핛騕✻ꮏ鉯ࠟ⛭䔸ﹶ㞥诙緽冲탍ﻃ쮈싲럍銣⺸䭯 [ 414.485984][ T7031] usb 5-1: SerialNumber: syz [ 414.537012][ T25] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 414.818651][ T25] usb 4-1: Using ep0 maxpacket: 16 [ 414.948732][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 414.959581][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 414.969888][ T25] usb 4-1: New USB device found, idVendor=17ef, idProduct=6009, bcdDevice= 0.00 [ 414.979111][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.988288][ T25] usb 4-1: config 0 descriptor?? [ 416.301871][T10883] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.308804][T10883] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.316057][T10883] device bridge_slave_0 entered promiscuous mode [ 416.322946][T10883] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.329877][T10883] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.337132][T10883] device bridge_slave_1 entered promiscuous mode [ 416.377327][T10883] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.384180][T10883] bridge0: port 2(bridge_slave_1) entered forwarding state [ 416.391295][T10883] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.398135][T10883] bridge0: port 1(bridge_slave_0) entered forwarding state [ 416.418050][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 416.426663][ T340] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.434459][ T340] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.451569][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 416.459648][ T340] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.466504][ T340] bridge0: port 1(bridge_slave_0) entered forwarding state [ 416.473952][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 416.482017][ T340] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.488937][ T340] bridge0: port 2(bridge_slave_1) entered forwarding state [ 416.496150][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 416.504415][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 416.520503][ T8773] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 416.532411][ T1424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 416.540410][ T1424] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 416.548684][ T1424] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 416.556998][T10883] device veth0_vlan entered promiscuous mode [ 416.569572][ T1424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 416.579101][T10883] device veth1_macvtap entered promiscuous mode [ 416.591982][ T9842] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 416.605665][ T9846] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 416.634333][T10891] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3073'. [ 416.762473][T10897] fuse: Unknown parameter 'cser_id' [ 416.843250][ T7031] usb 5-1: USB disconnect, device number 80 [ 417.008065][ T48] device bridge_slave_1 left promiscuous mode [ 417.014048][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.021409][ T48] device bridge_slave_0 left promiscuous mode [ 417.027393][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.038530][ T48] device veth1_macvtap left promiscuous mode [ 417.044873][ T48] device veth0_vlan left promiscuous mode [ 417.252008][ T9846] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 417.387799][T10907] usb usb8: usbfs: process 10907 (syz.3.3080) did not claim interface 0 before use [ 417.398809][ T24] kauditd_printk_skb: 3 callbacks suppressed [ 417.398820][ T24] audit: type=1400 audit(400.914:1800): avc: denied { unlink } for pid=10906 comm="syz.3.3080" name="#2e" dev="tmpfs" ino=836 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 417.418938][ T25] usbhid 4-1:0.0: can't add hid device: -71 [ 417.432811][ T25] usbhid: probe of 4-1:0.0 failed with error -71 [ 417.442123][ T25] usb 4-1: USB disconnect, device number 79 [ 417.487088][T10911] device syzkaller0 entered promiscuous mode [ 417.536073][T10922] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=36 sclass=netlink_tcpdiag_socket pid=10922 comm=syz.2.3083 [ 417.566651][T10926] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3085'. [ 417.584602][T10928] syz.2.3086[10928] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 417.584661][T10928] syz.2.3086[10928] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 417.757101][T10958] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3086'. [ 417.875876][ T9846] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 417.886719][ T9846] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 417.896421][ T9846] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 417.905259][ T9846] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.913826][ T9846] usb 1-1: config 0 descriptor?? [ 417.935463][ T24] audit: type=1400 audit(401.403:1801): avc: denied { create } for pid=10961 comm="syz.4.3093" dev="anon_inodefs" ino=64553 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 417.960156][ T24] audit: type=1400 audit(401.412:1802): avc: denied { ioctl } for pid=10961 comm="syz.4.3093" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=64553 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 418.285638][ T25] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 418.328987][ T9845] rtl8150 2-1:0.0: couldn't reset the device [ 418.334886][ T9845] rtl8150: probe of 2-1:0.0 failed with error -5 [ 418.345225][ T9845] usb 2-1: USB disconnect, device number 81 [ 418.545612][ T25] usb 5-1: Using ep0 maxpacket: 32 [ 418.610951][ T9846] usb 1-1: string descriptor 0 read error: -71 [ 418.620957][T10984] SELinux: security_context_str_to_sid(s) failed for (dev bpf, type bpf) errno=-22 [ 418.632453][ T9846] uclogic 0003:256C:006D.0030: failed retrieving string descriptor #200: -71 [ 418.634880][ T24] audit: type=1400 audit(402.058:1803): avc: denied { unmount } for pid=6913 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 418.641164][ T9846] uclogic 0003:256C:006D.0030: failed retrieving pen parameters: -71 [ 418.641176][ T9846] uclogic 0003:256C:006D.0030: failed probing pen v2 parameters: -71 [ 418.641194][ T9846] uclogic 0003:256C:006D.0030: failed probing parameters: -71 [ 418.641257][ T9846] uclogic: probe of 0003:256C:006D.0030 failed with error -71 [ 418.694535][ T9846] usb 1-1: USB disconnect, device number 68 [ 418.702304][ T6913] device syz_tun left promiscuous mode [ 418.707684][ T6913] bridge0: port 3(syz_tun) entered disabled state [ 418.762415][ T9845] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 418.800334][T10987] bridge0: port 1(bridge_slave_0) entered blocking state [ 418.807578][T10987] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.814781][T10987] device bridge_slave_0 entered promiscuous mode [ 418.823403][T10987] bridge0: port 2(bridge_slave_1) entered blocking state [ 418.830318][T10987] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.837364][T10987] device bridge_slave_1 entered promiscuous mode [ 418.849064][ T25] usb 5-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 418.857991][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.866005][ T25] usb 5-1: Product: syz [ 418.870076][ T25] usb 5-1: Manufacturer: syz [ 418.874567][ T25] usb 5-1: SerialNumber: syz [ 418.879562][ T25] usb 5-1: config 0 descriptor?? [ 418.888466][T10987] bridge0: port 2(bridge_slave_1) entered blocking state [ 418.895335][T10987] bridge0: port 2(bridge_slave_1) entered forwarding state [ 418.902383][T10987] bridge0: port 1(bridge_slave_0) entered blocking state [ 418.909205][T10987] bridge0: port 1(bridge_slave_0) entered forwarding state [ 418.916821][ T9842] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 418.931814][ T1424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 418.939237][ T1424] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.946223][ T1424] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.955622][ T8773] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 418.963914][ T8773] bridge0: port 1(bridge_slave_0) entered blocking state [ 418.970770][ T8773] bridge0: port 1(bridge_slave_0) entered forwarding state [ 418.980941][ T1424] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 418.988993][ T1424] bridge0: port 2(bridge_slave_1) entered blocking state [ 418.995849][ T1424] bridge0: port 2(bridge_slave_1) entered forwarding state [ 419.012846][ T757] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 419.020907][ T757] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 419.028799][ T757] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 419.040655][ T8773] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 419.048287][ T9845] usb 2-1: Using ep0 maxpacket: 32 [ 419.053589][ T8773] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 419.060957][ T8773] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 419.070766][T10987] device veth0_vlan entered promiscuous mode [ 419.080510][ T8773] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 419.088509][ T9846] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 419.097280][T10987] device veth1_macvtap entered promiscuous mode [ 419.108063][ T757] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 419.117632][ T8773] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 419.128023][ T48] device gretap0 left promiscuous mode [ 419.133538][ T48] bridge0: port 2(gretap0) entered disabled state [ 419.174445][ T9842] usb 4-1: Using ep0 maxpacket: 16 [ 419.184991][ T9845] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 419.198183][ T9845] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 419.289184][ T48] device bridge_slave_0 left promiscuous mode [ 419.295563][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.553350][ T9842] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 419.561280][ T9845] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 419.570213][ T9842] usb 4-1: config 0 has no interface number 0 [ 419.576440][ T9842] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 419.577149][ T24] audit: type=1400 audit(402.926:1804): avc: denied { write } for pid=76 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 419.585937][ T9845] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 419.585946][ T9845] usb 2-1: Product: syz [ 419.585955][ T9845] usb 2-1: Manufacturer: syz [ 419.586297][ T9842] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 419.618915][ T24] audit: type=1400 audit(402.926:1805): avc: denied { remove_name } for pid=76 comm="syslogd" name="messages" dev="tmpfs" ino=11 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 419.654778][ T24] audit: type=1400 audit(402.926:1806): avc: denied { rename } for pid=76 comm="syslogd" name="messages" dev="tmpfs" ino=11 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 419.676847][ T24] audit: type=1400 audit(402.926:1807): avc: denied { add_name } for pid=76 comm="syslogd" name="messages.0" dev="tmpfs" ino=10 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 419.698775][ T24] audit: type=1400 audit(402.926:1808): avc: denied { unlink } for pid=76 comm="syslogd" name="messages.0" dev="tmpfs" ino=10 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 419.699216][ T9845] hub 2-1:4.0: USB hub found [ 419.720877][ T24] audit: type=1400 audit(402.954:1809): avc: denied { create } for pid=76 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 419.770078][ T9846] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 242, changing to 11 [ 419.781126][ T9846] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 50582, setting to 1024 [ 419.792481][ T9846] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 419.801525][ T9846] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.810500][ T9846] usb 1-1: config 0 descriptor?? [ 419.815357][ T9842] usb 4-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.88 [ 419.824387][ T9842] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 419.832261][ T9842] usb 4-1: Product: syz [ 419.836481][ T9842] usb 4-1: SerialNumber: syz [ 419.841937][ T9842] usb 4-1: config 0 descriptor?? [ 419.846886][T10984] raw-gadget.4 gadget: fail, usb_ep_enable returned -22 [ 419.975950][ T9845] hub 2-1:4.0: config failed, can't read hub descriptor (err -22) [ 419.980239][T11002] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1aabf3fb, utbl_chksum : 0xe619d30d) [ 419.999087][T11002] input: syz1 as /devices/virtual/input/input40 [ 420.087585][T11008] udc-core: couldn't find an available UDC or it's busy [ 420.094420][T11008] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 420.104651][T11008] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 420.139332][T10981] device syzkaller0 entered promiscuous mode [ 420.203533][ T9845] usb 2-1: reset high-speed USB device number 82 using dummy_hcd [ 420.246671][ T9845] usb 2-1: device reset changed ep0 maxpacket size! [ 420.253282][ T9845] usb 2-1: USB disconnect, device number 82 [ 420.658350][ T9845] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 420.689476][T11013] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3109'. [ 420.717131][T11018] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3111'. [ 420.726094][T11019] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3111'. [ 420.735722][T11017] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3111'. [ 420.790617][ T9842] snd-usb-audio: probe of 4-1:0.2 failed with error -12 [ 420.803847][ T9842] usb 4-1: USB disconnect, device number 80 [ 420.940031][ T9846] usb 1-1: string descriptor 0 read error: -71 [ 420.961927][ T9846] uclogic 0003:256C:006D.0031: failed retrieving string descriptor #200: -71 [ 420.970745][ T9846] uclogic 0003:256C:006D.0031: failed retrieving pen parameters: -71 [ 420.979123][ T9846] uclogic 0003:256C:006D.0031: failed probing pen v2 parameters: -71 [ 420.987302][ T9846] uclogic 0003:256C:006D.0031: failed probing parameters: -71 [ 420.994855][ T9846] uclogic: probe of 0003:256C:006D.0031 failed with error -71 [ 421.007405][ T9846] usb 1-1: USB disconnect, device number 69 [ 421.059469][ T9845] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 421.069647][ T9845] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 421.156789][ T9845] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 421.165678][ T9845] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 421.173575][ T9845] usb 2-1: SerialNumber: syz [ 421.308339][ T9842] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 421.460691][ T9845] usb 2-1: 0:2 : does not exist [ 421.590020][ T9842] usb 4-1: Using ep0 maxpacket: 32 [ 421.764051][ T9842] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 421.777044][ T9845] usb 2-1: USB disconnect, device number 83 [ 421.791635][T11003] udevd[11003]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 421.807492][ T9842] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 421.818111][ T9842] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 421.827098][ T9842] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.836046][ T9842] usb 4-1: config 0 descriptor?? [ 421.904254][ T25] rtl8150 5-1:0.0: couldn't reset the device [ 421.911499][ T25] rtl8150: probe of 5-1:0.0 failed with error -5 [ 421.919061][ T25] usb 5-1: USB disconnect, device number 81 [ 421.988894][T11057] FAULT_INJECTION: forcing a failure. [ 421.988894][T11057] name failslab, interval 1, probability 0, space 0, times 0 [ 422.002572][T11057] CPU: 0 PID: 11057 Comm: syz.0.3125 Tainted: G W 5.10.218-syzkaller-00638-g3feee789f446 #0 [ 422.013746][T11057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 422.023630][T11057] Call Trace: [ 422.026765][T11057] dump_stack_lvl+0x1e2/0x24b [ 422.031271][T11057] ? bfq_pos_tree_add_move+0x43b/0x43b [ 422.036918][T11057] dump_stack+0x15/0x17 [ 422.040871][T11057] should_fail+0x3c6/0x510 [ 422.045299][T11057] ? getname_flags+0xba/0x520 [ 422.049816][T11057] __should_failslab+0xa4/0xe0 [ 422.054498][T11057] should_failslab+0x9/0x20 [ 422.058842][T11057] kmem_cache_alloc+0x3d/0x2e0 [ 422.063436][T11057] getname_flags+0xba/0x520 [ 422.067780][T11057] __x64_sys_renameat2+0xc8/0xf0 [ 422.072557][T11057] do_syscall_64+0x34/0x70 [ 422.076818][T11057] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 422.082619][T11057] RIP: 0033:0x7f06270b0bd9 [ 422.086869][T11057] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 422.106316][T11057] RSP: 002b:00007f0626332048 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 422.114560][T11057] RAX: ffffffffffffffda RBX: 00007f062723ef60 RCX: 00007f06270b0bd9 [ 422.122476][T11057] RDX: 0000000000000003 RSI: 0000000020005780 RDI: 0000000000000003 [ 422.130285][T11057] RBP: 00007f06263320a0 R08: 0000000000000000 R09: 0000000000000000 [ 422.138098][T11057] R10: 00000000200016c0 R11: 0000000000000246 R12: 0000000000000001 [ 422.146011][T11057] R13: 000000000000000b R14: 00007f062723ef60 R15: 00007fff96aef978 [ 422.305182][ T25] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 422.470585][ T9842] lua 0003:1E7D:2C2E.0032: item fetching failed at offset 5/7 [ 422.478044][ T9842] lua 0003:1E7D:2C2E.0032: parse failed [ 422.484153][ T9842] lua: probe of 0003:1E7D:2C2E.0032 failed with error -22 [ 422.525030][T11074] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3132'. [ 422.616217][ T757] usb 4-1: USB disconnect, device number 81 [ 422.630114][ T25] usb 5-1: Using ep0 maxpacket: 32 [ 422.682441][T11078] netlink: 'syz.2.3131': attribute type 1 has an invalid length. [ 422.701011][T11078] netlink: 492 bytes leftover after parsing attributes in process `syz.2.3131'. [ 422.760191][ T25] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 422.777638][ T25] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 422.798503][ T25] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 422.808037][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.862495][ T25] hub 5-1:4.0: USB hub found [ 423.034865][T11076] F2FS-fs (loop1): invalid crc value [ 423.041573][T11076] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 275811881701387) [ 423.067275][T11076] F2FS-fs (loop1): Mounted with checkpoint version = 753bd00b [ 423.130443][T11085] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=36 sclass=netlink_audit_socket pid=11085 comm=syz.0.3134 [ 423.156208][T11087] syz.0.3135[11087] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 423.156270][T11087] syz.0.3135[11087] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 423.286820][ T24] kauditd_printk_skb: 3 callbacks suppressed [ 423.286832][ T24] audit: type=1400 audit(406.341:1813): avc: denied { read } for pid=11094 comm="syz.3.3138" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 423.336312][ T24] audit: type=1400 audit(406.397:1814): avc: denied { open } for pid=11094 comm="syz.3.3138" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 423.426370][ T24] audit: type=1326 audit(406.470:1815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11075 comm="syz.1.3133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82bb866bd9 code=0x7ffc0000 [ 423.489466][ T24] audit: type=1326 audit(406.470:1816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11075 comm="syz.1.3133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82bb866bd9 code=0x7ffc0000 [ 423.579501][ T24] audit: type=1326 audit(406.470:1817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11075 comm="syz.1.3133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7f82bb866bd9 code=0x7ffc0000 [ 423.653805][ T24] audit: type=1326 audit(406.470:1818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11075 comm="syz.1.3133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82bb866bd9 code=0x7ffc0000 [ 423.751116][ T24] audit: type=1326 audit(406.470:1819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11075 comm="syz.1.3133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82bb866bd9 code=0x7ffc0000 [ 423.827321][T11111] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3143'. [ 423.853535][ T24] audit: type=1326 audit(406.470:1820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11075 comm="syz.1.3133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=234 compat=0 ip=0x7f82bb866bd9 code=0x7ffc0000 [ 423.876119][ T25] hub 5-1:4.0: 2 ports detected [ 423.886269][ T25] usb 5-1: selecting invalid altsetting 1 [ 423.903436][ T25] hub 5-1:4.0: Using single TT (err -22) [ 423.925703][ T24] audit: type=1326 audit(406.470:1821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11075 comm="syz.1.3133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82bb866bd9 code=0x7ffc0000 [ 423.970757][ T24] audit: type=1326 audit(406.470:1822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11075 comm="syz.1.3133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82bb866bd9 code=0x7ffc0000 [ 424.300595][T11133] fuse: Bad value for 'fd' [ 424.775547][ T757] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 425.081405][T11146] netlink: 'syz.3.3155': attribute type 4 has an invalid length. [ 425.089033][T11146] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3155'. [ 425.165523][ T757] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 425.182216][ T757] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 425.200479][ T757] usb 1-1: too many endpoints for config 1 interface 1 altsetting 255: 255, using maximum allowed: 30 [ 425.219351][ T757] usb 1-1: config 1 interface 1 altsetting 255 endpoint 0x3 has invalid wMaxPacketSize 0 [ 425.230346][ T25] hub 5-1:4.0: hub_hub_status failed (err = -32) [ 425.236505][ T25] hub 5-1:4.0: config failed, can't get hub status (err -32) [ 425.250656][ T757] usb 1-1: config 1 interface 1 altsetting 255 bulk endpoint 0x3 has invalid maxpacket 0 [ 425.270082][ T757] usb 1-1: config 1 interface 1 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 255 [ 425.292851][ T757] usb 1-1: config 1 interface 1 has no altsetting 1 [ 425.299849][ T25] usb 5-1: USB disconnect, device number 82 [ 425.479625][ T757] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 425.488714][ T757] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.496564][ T757] usb 1-1: Product: syz [ 425.500647][ T757] usb 1-1: Manufacturer: syz [ 425.505043][ T757] usb 1-1: SerialNumber: syz [ 425.545262][ T757] usb 1-1: selecting invalid altsetting 1 [ 425.932698][T11167] syz.4.3163[11167] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 425.932811][T11167] syz.4.3163[11167] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 426.021415][ T757] cdc_ncm 1-1:1.0: failed GET_NTB_PARAMETERS [ 426.057823][ T757] cdc_ncm 1-1:1.0: bind() failure [ 426.071306][ T757] cdc_ncm 1-1:1.1: bind() failure [ 426.275799][T11184] xt_SECMARK: invalid security context 'system_u:object_r:devicekit_exec_t:s0' [ 426.324984][ T9846] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 426.500833][T11195] kernel profiling enabled (shift: 0) [ 426.560850][T11196] device wg2 entered promiscuous mode [ 426.725542][ T9846] usb 5-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 426.735511][ T9846] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 426.844892][ T9846] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 426.853864][ T9846] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 426.861983][ T9846] usb 5-1: SerialNumber: syz [ 426.880010][ T9842] usb 1-1: USB disconnect, device number 70 [ 427.171090][T11201] EXT4-fs (loop1): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000000,,errors=continue [ 427.183443][ T9846] usb 5-1: 0:2 : does not exist [ 427.188272][ T9846] usb 5-1: unit 5: unexpected type 0x0a [ 427.196832][ T9846] usb 5-1: USB disconnect, device number 83 [ 427.217688][ T350] udevd[350]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 427.493259][T11216] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3177'. [ 427.520837][T11220] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11220 comm=syz.1.3178 [ 427.693230][T11232] netlink: 'syz.1.3182': attribute type 1 has an invalid length. [ 427.700864][T11232] netlink: 480 bytes leftover after parsing attributes in process `syz.1.3182'. [ 427.863125][ T9845] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 428.231514][ T9842] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 428.307336][ T9845] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 428.318066][ T9845] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 428.327563][ T9845] usb 4-1: New USB device found, idVendor=056a, idProduct=0016, bcdDevice= 0.00 [ 428.339987][ T9845] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.353081][ T9845] usb 4-1: config 0 descriptor?? [ 428.664889][ T9842] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 428.676030][ T9842] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 428.685691][ T9842] usb 5-1: too many endpoints for config 1 interface 1 altsetting 255: 255, using maximum allowed: 30 [ 428.696982][ T9842] usb 5-1: config 1 interface 1 altsetting 255 endpoint 0x3 has invalid wMaxPacketSize 0 [ 428.706917][ T9842] usb 5-1: config 1 interface 1 altsetting 255 bulk endpoint 0x3 has invalid maxpacket 0 [ 428.717406][ T9842] usb 5-1: config 1 interface 1 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 255 [ 428.731006][ T9842] usb 5-1: config 1 interface 1 has no altsetting 1 [ 428.738861][T11262] udc-core: couldn't find an available UDC or it's busy [ 428.751746][T11262] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 428.893730][ T9845] wacom 0003:056A:0016.0033: Unknown device_type for 'HID 056a:0016'. Assuming pen. [ 428.903904][ T9845] wacom 0003:056A:0016.0033: hidraw0: USB HID v0.00 Device [HID 056a:0016] on usb-dummy_hcd.3-1/input0 [ 428.915336][ T9845] input: Wacom Graphire4 6x8 Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:0016.0033/input/input41 [ 428.946566][ T9842] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 428.955475][ T9842] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.963240][ T9842] usb 5-1: Product: syz [ 428.967243][ T9842] usb 5-1: Manufacturer: syz [ 428.971671][ T9842] usb 5-1: SerialNumber: syz [ 429.024194][ T9842] usb 5-1: selecting invalid altsetting 1 [ 429.171541][T11271] ip6_tunnel: non-ECT from fe88:0000:0000:0000:0000:0000:0000:0001 with DS=0x2 [ 429.466625][ T25] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 429.486826][T11275] FAULT_INJECTION: forcing a failure. [ 429.486826][T11275] name failslab, interval 1, probability 0, space 0, times 0 [ 429.499285][T11275] CPU: 1 PID: 11275 Comm: syz.2.3196 Tainted: G W 5.10.218-syzkaller-00638-g3feee789f446 #0 [ 429.510419][T11275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 429.520313][T11275] Call Trace: [ 429.523452][T11275] dump_stack_lvl+0x1e2/0x24b [ 429.527959][T11275] ? bfq_pos_tree_add_move+0x43b/0x43b [ 429.533253][T11275] ? sysvec_reschedule_ipi+0x83/0x160 [ 429.538467][T11275] ? pcpu_memcg_post_alloc_hook+0x1c8/0x360 [ 429.544196][T11275] dump_stack+0x15/0x17 [ 429.548224][T11275] should_fail+0x3c6/0x510 [ 429.552440][T11275] ? dev_addr_init+0xe0/0x3f0 [ 429.556950][T11275] __should_failslab+0xa4/0xe0 [ 429.561543][T11275] should_failslab+0x9/0x20 [ 429.565878][T11275] kmem_cache_alloc_trace+0x3a/0x2e0 [ 429.571006][T11275] dev_addr_init+0xe0/0x3f0 [ 429.575340][T11275] alloc_netdev_mqs+0x129/0xcd0 [ 429.580027][T11275] ? ppp_ccp_closed+0x2c0/0x2c0 [ 429.584719][T11275] ppp_ioctl+0x669/0x1810 [ 429.588884][T11275] ? switch_mm_irqs_off+0x2f9/0x9a0 [ 429.593913][T11275] ? ppp_poll+0x250/0x250 [ 429.598082][T11275] ? __fget_files+0x31e/0x380 [ 429.602592][T11275] ? security_file_ioctl+0x84/0xb0 [ 429.607536][T11275] ? ppp_poll+0x250/0x250 [ 429.611703][T11275] __se_sys_ioctl+0x114/0x190 [ 429.616231][T11275] __x64_sys_ioctl+0x7b/0x90 [ 429.620644][T11275] do_syscall_64+0x34/0x70 [ 429.624899][T11275] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 429.630624][T11275] RIP: 0033:0x7fc8a973fbd9 [ 429.634878][T11275] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 429.654323][T11275] RSP: 002b:00007fc8a897f048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 429.662571][T11275] RAX: ffffffffffffffda RBX: 00007fc8a98ce110 RCX: 00007fc8a973fbd9 [ 429.670387][T11275] RDX: 0000000020001400 RSI: 00000000c004743e RDI: 0000000000000008 [ 429.678275][T11275] RBP: 00007fc8a897f0a0 R08: 0000000000000000 R09: 0000000000000000 [ 429.686177][T11275] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 429.693991][T11275] R13: 000000000000006e R14: 00007fc8a98ce110 R15: 00007fff8b8c8938 [ 429.705002][ T9842] cdc_ncm 5-1:1.0: failed GET_NTB_PARAMETERS [ 429.710920][ T9842] cdc_ncm 5-1:1.0: bind() failure [ 429.716998][ T9842] cdc_ncm 5-1:1.1: bind() failure [ 429.824575][ T9842] usb 4-1: USB disconnect, device number 82 [ 429.947896][ T24] kauditd_printk_skb: 90 callbacks suppressed [ 429.948999][ T24] audit: type=1400 audit(412.498:1913): avc: denied { mounton } for pid=11286 comm="syz.3.3200" path="/181/file0" dev="tmpfs" ino=1009 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 429.956015][ T25] usb 1-1: Using ep0 maxpacket: 16 [ 430.084421][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 430.117030][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 430.126685][ T25] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 430.135482][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.144426][ T25] usb 1-1: config 0 descriptor?? [ 430.326181][T11293] syz.2.3202[11293] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 430.326261][T11293] syz.2.3202[11293] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 430.648401][T11271] udc-core: couldn't find an available UDC or it's busy [ 430.702725][T11271] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 430.800774][ T24] audit: type=1400 audit(413.282:1914): avc: denied { write } for pid=11300 comm="syz.1.3204" path="socket:[64367]" dev="sockfs" ino=64367 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 431.255019][T11315] incfs: mount failed -22 [ 431.259712][T11315] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 431.276054][ T25] usbhid 1-1:0.0: can't add hid device: -71 [ 431.281846][ T25] usbhid: probe of 1-1:0.0 failed with error -71 [ 431.290827][ T25] usb 1-1: USB disconnect, device number 71 [ 431.330019][ T340] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 431.433137][T11317] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.440113][T11317] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.447266][T11317] device bridge_slave_0 entered promiscuous mode [ 431.454405][T11317] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.461333][T11317] bridge0: port 2(bridge_slave_1) entered disabled state [ 431.468421][T11317] device bridge_slave_1 entered promiscuous mode [ 431.503011][T11317] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.509868][T11317] bridge0: port 2(bridge_slave_1) entered forwarding state [ 431.516990][T11317] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.523733][T11317] bridge0: port 1(bridge_slave_0) entered forwarding state [ 431.544800][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 431.552154][ T25] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.560244][ T25] bridge0: port 2(bridge_slave_1) entered disabled state [ 431.571433][ T9888] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 431.579447][ T9888] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.586265][ T9888] bridge0: port 1(bridge_slave_0) entered forwarding state [ 431.601595][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 431.609698][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.616458][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 431.624671][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 431.632409][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 431.649738][T11317] device veth0_vlan entered promiscuous mode [ 431.656017][ T757] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 431.664136][ T757] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 431.672869][ T757] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 431.680256][ T757] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 431.693339][ T9888] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 431.702368][T11317] device veth1_macvtap entered promiscuous mode [ 431.712353][ T9888] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 431.723594][ T757] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 431.745151][ T24] audit: type=1400 audit(414.159:1915): avc: denied { bind } for pid=11321 comm="syz.2.3213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 431.854930][T11337] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3218'. [ 431.883510][ T7] device bridge_slave_1 left promiscuous mode [ 431.890522][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 431.908865][ T9888] usb 5-1: USB disconnect, device number 84 [ 431.915135][ T340] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 431.924193][ T7] device bridge_slave_0 left promiscuous mode [ 431.926870][ T340] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.940269][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.948223][ T340] usb 4-1: Product: syz [ 431.956862][ T7] device veth1_macvtap left promiscuous mode [ 431.957708][ T340] usb 4-1: Manufacturer: syz [ 431.968295][ T7] device veth0_vlan left promiscuous mode [ 431.969251][T11343] exfat: Deprecated parameter 'utf8' [ 431.993928][T11343] exfat: Deprecated parameter 'namecase' [ 431.999505][ T340] usb 4-1: SerialNumber: syz [ 432.045443][T11343] exfat: Deprecated parameter 'utf8' [ 432.052690][T11343] exFAT-fs (loop1): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d) [ 432.110800][T11343] syz.1.3220[11343] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 432.110862][T11343] syz.1.3220[11343] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 433.021144][T11358] EXT4-fs (loop1): invalid first ino: 0 [ 433.433548][T11370] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3226'. [ 434.347766][ T340] usb 4-1: USB disconnect, device number 83 [ 434.877326][T11384] EXT4-fs error (device loop1): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 434.891484][T11384] EXT4-fs error (device loop1): ext4_free_branches:1026: inode #11: comm syz.1.3229: invalid indirect mapped block 1 (level 1) [ 434.904943][T11384] EXT4-fs (loop1): 1 truncate cleaned up [ 434.910479][T11384] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 436.555664][T11417] xt_NFQUEUE: number of total queues is 0 [ 436.666080][T11417] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 436.674295][T11417] EXT4-fs (loop1): orphan cleanup on readonly fs [ 436.681061][T11417] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2204: inode #15: comm syz.1.3239: corrupted in-inode xattr [ 436.693469][T11417] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.3239: couldn't read orphan inode 15 (err -117) [ 436.705617][T11417] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 437.452688][T11433] fuse: Bad value for 'user_id' [ 438.553576][ T24] audit: type=1400 audit(420.435:1916): avc: denied { map } for pid=11467 comm="syz.0.3256" path="socket:[66841]" dev="sockfs" ino=66841 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 438.594495][ T24] audit: type=1400 audit(420.463:1917): avc: denied { read } for pid=11467 comm="syz.0.3256" path="socket:[66841]" dev="sockfs" ino=66841 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 438.691378][ T24] audit: type=1400 audit(420.565:1918): avc: denied { getopt } for pid=11476 comm="syz.0.3260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 438.711628][ T9844] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 439.027577][T11489] udc-core: couldn't find an available UDC or it's busy [ 439.065369][T11489] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 439.182465][T11497] FAULT_INJECTION: forcing a failure. [ 439.182465][T11497] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 439.195689][ T9844] usb 5-1: device descriptor read/64, error -71 [ 439.216672][T11497] CPU: 1 PID: 11497 Comm: syz.3.3266 Tainted: G W 5.10.218-syzkaller-00638-g3feee789f446 #0 [ 439.227845][T11497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 439.237736][T11497] Call Trace: [ 439.240960][T11497] dump_stack_lvl+0x1e2/0x24b [ 439.245468][T11497] ? bfq_pos_tree_add_move+0x43b/0x43b [ 439.250775][T11497] dump_stack+0x15/0x17 [ 439.254750][T11497] should_fail+0x3c6/0x510 [ 439.259009][T11497] should_fail_alloc_page+0x52/0x60 [ 439.264055][T11497] __alloc_pages_nodemask+0x1b3/0xaf0 [ 439.269248][T11497] ? kasan_poison+0x5d/0x70 [ 439.273592][T11497] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 439.278969][T11497] ? __kmalloc_track_caller+0xe0/0x320 [ 439.284269][T11497] ? __kasan_check_write+0x14/0x20 [ 439.289294][T11497] ? __alloc_skb+0x37c/0x510 [ 439.293735][T11497] alloc_skb_with_frags+0x1b3/0x570 [ 439.298761][T11497] sock_alloc_send_pskb+0x915/0xa50 [ 439.303796][T11497] ? sock_kzfree_s+0x60/0x60 [ 439.308217][T11497] ? copyin+0x90/0x90 [ 439.312041][T11497] packet_sendmsg+0x39a2/0x60a0 [ 439.316904][T11497] ? avc_has_perm+0x14d/0x400 [ 439.321417][T11497] ? arch_stack_walk+0xf3/0x140 [ 439.326103][T11497] ? selinux_socket_sendmsg+0x243/0x340 [ 439.331477][T11497] ? selinux_socket_accept+0x5b0/0x5b0 [ 439.336773][T11497] ? packet_getsockopt+0xea0/0xea0 [ 439.341725][T11497] ? __kasan_check_write+0x14/0x20 [ 439.346669][T11497] ? check_stack_object+0x114/0x130 [ 439.351706][T11497] ? security_socket_sendmsg+0x82/0xb0 [ 439.357003][T11497] ? packet_getsockopt+0xea0/0xea0 [ 439.362051][T11497] ____sys_sendmsg+0x59e/0x8f0 [ 439.366632][T11497] ? __sys_sendmsg_sock+0x40/0x40 [ 439.371499][T11497] ? import_iovec+0xe5/0x120 [ 439.375932][T11497] ___sys_sendmsg+0x252/0x2e0 [ 439.380521][T11497] ? __sys_sendmsg+0x280/0x280 [ 439.385131][T11497] ? rw_verify_area+0x1c3/0x360 [ 439.389819][T11497] ? __fdget+0x1bc/0x240 [ 439.393886][T11497] __se_sys_sendmsg+0x1b1/0x280 [ 439.398569][T11497] ? __x64_sys_sendmsg+0x90/0x90 [ 439.403343][T11497] ? ksys_write+0x260/0x2c0 [ 439.407710][T11497] ? debug_smp_processor_id+0x17/0x20 [ 439.412901][T11497] __x64_sys_sendmsg+0x7b/0x90 [ 439.417491][T11497] do_syscall_64+0x34/0x70 [ 439.421745][T11497] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 439.427475][T11497] RIP: 0033:0x7f60f8f2bbd9 [ 439.431725][T11497] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 439.451254][T11497] RSP: 002b:00007f60f81ad048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 439.459695][T11497] RAX: ffffffffffffffda RBX: 00007f60f90b9f60 RCX: 00007f60f8f2bbd9 [ 439.467482][T11497] RDX: 0000000000000000 RSI: 0000000020002ac0 RDI: 0000000000000003 [ 439.475477][T11497] RBP: 00007f60f81ad0a0 R08: 0000000000000000 R09: 0000000000000000 [ 439.483283][T11497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 439.491212][T11497] R13: 000000000000004d R14: 00007f60f90b9f60 R15: 00007fff93ddc7c8 [ 439.516440][T11501] udc-core: couldn't find an available UDC or it's busy [ 439.523230][T11501] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 439.550367][T11501] udc-core: couldn't find an available UDC or it's busy [ 439.557937][T11501] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 439.759032][ T9844] usb 5-1: device descriptor read/64, error -71 [ 439.986537][ T25] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 439.986621][ T9888] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 440.084086][ T9844] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 440.387478][ T9844] usb 5-1: device descriptor read/64, error -71 [ 440.387487][ T25] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 440.387505][ T25] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 440.420047][ T9888] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 440.433643][ T25] usb 4-1: config 1 has no interface number 0 [ 440.441597][ T9888] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 440.445839][ T25] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 440.462030][ T9888] usb 1-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 440.471038][ T25] usb 4-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 440.475715][ T9888] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.482834][ T25] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 440.499280][ T9888] usb 1-1: config 0 descriptor?? [ 440.669196][ T25] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 440.678698][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.686927][ T25] usb 4-1: Product: syz [ 440.691091][ T25] usb 4-1: Manufacturer: syz [ 440.695481][ T25] usb 4-1: SerialNumber: syz [ 440.831632][ T9844] usb 5-1: device descriptor read/64, error -71 [ 440.961713][ T9844] usb usb5-port1: attempt power cycle [ 441.071568][T11512] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 441.078723][T11512] EXT4-fs (loop1): Ignoring removed nobh option [ 441.084811][T11512] EXT4-fs (loop1): Ignoring removed oldalloc option [ 441.092188][T11512] EXT4-fs (loop1): 1 truncate cleaned up [ 441.097697][T11512] EXT4-fs (loop1): mounted filesystem without journal. Opts: mblk_io_submit,max_dir_size_kb=0x0000000000000002,max_dir_size_kb=0x0000000000000006,nobh,oldalloc,grpid,user_xattr,,errors=continue [ 441.212137][T11518] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,bsdgroups,nogrpid,noauto_da_alloc,auto_da_alloc,,errors=continue [ 441.235276][ T24] audit: type=1400 audit(422.918:1919): avc: denied { create } for pid=11517 comm="syz.1.3274" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 441.238861][T11518] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.3274: inode #115: comm syz.1.3274: iget: illegal inode # [ 441.267853][T11518] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.3274: error while reading EA inode 115 err=-117 [ 441.319483][ T9888] usbhid 1-1:0.0: can't add hid device: -71 [ 441.325336][ T9888] usbhid: probe of 1-1:0.0 failed with error -71 [ 441.333260][ T9888] usb 1-1: USB disconnect, device number 72 [ 441.345932][ T24] audit: type=1400 audit(423.011:1920): avc: denied { create } for pid=11523 comm="syz.1.3275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 441.405894][ T9844] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 441.600960][ T9844] usb 5-1: device descriptor read/8, error -71 [ 441.839245][ T9844] usb 5-1: device descriptor read/8, error -71 [ 441.916206][ T25] cdc_ncm 4-1:1.1: bind() failure [ 442.394259][ T9842] usb 4-1: USB disconnect, device number 84 [ 442.770996][ T9888] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 442.792159][T11559] F2FS-fs (loop1): invalid crc value [ 442.847672][T11559] F2FS-fs (loop1): Found nat_bits in checkpoint [ 442.921428][T11559] F2FS-fs (loop1): Cannot turn on quotas: -2 on 0 [ 442.944572][T11559] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 442.990323][T11559] netlink: 'syz.1.3286': attribute type 4 has an invalid length. [ 443.008993][T11559] netlink: 17 bytes leftover after parsing attributes in process `syz.1.3286'. [ 443.034274][T10883] attempt to access beyond end of device [ 443.034274][T10883] loop1: rw=2049, want=45104, limit=40427 [ 443.049621][T11569] bridge0: port 1(bridge_slave_0) entered blocking state [ 443.063834][T11569] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.085676][T11569] device bridge_slave_0 entered promiscuous mode [ 443.101437][T11569] bridge0: port 2(bridge_slave_1) entered blocking state [ 443.110796][T11569] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.131434][T11569] device bridge_slave_1 entered promiscuous mode [ 443.182800][ T9888] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 443.211355][ T9888] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 443.237250][T11569] bridge0: port 2(bridge_slave_1) entered blocking state [ 443.244127][T11569] bridge0: port 2(bridge_slave_1) entered forwarding state [ 443.251219][T11569] bridge0: port 1(bridge_slave_0) entered blocking state [ 443.258070][T11569] bridge0: port 1(bridge_slave_0) entered forwarding state [ 443.280748][ T9888] usb 1-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 443.289600][ T9888] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.310594][ T9888] usb 1-1: config 0 descriptor?? [ 443.343916][ T9845] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 443.351816][ T9845] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.364384][ T9845] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.386801][ T9845] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 443.396908][ T9845] bridge0: port 1(bridge_slave_0) entered blocking state [ 443.403760][ T9845] bridge0: port 1(bridge_slave_0) entered forwarding state [ 443.412053][ T9845] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 443.420146][ T9845] bridge0: port 2(bridge_slave_1) entered blocking state [ 443.427099][ T9845] bridge0: port 2(bridge_slave_1) entered forwarding state [ 443.681086][ T9845] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 443.689162][ T9845] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 443.697110][T11577] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3289'. [ 443.706082][T11577] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3289'. [ 443.714996][T11577] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3289'. [ 443.723843][T11577] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3289'. [ 443.732713][T11577] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3289'. [ 443.741737][T11577] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3289'. [ 443.750608][T11577] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3289'. [ 443.759599][T11577] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3289'. [ 443.768584][T11577] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3289'. [ 443.798943][ T9846] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 443.818792][ T9845] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 443.828746][ T24] audit: type=1400 audit(425.309:1921): avc: denied { bind } for pid=11578 comm="syz.2.3290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 443.853096][ T9845] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 443.861307][ T9845] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 443.870539][ T9888] hid-multitouch 0003:1FD2:6007.0034: unknown main item tag 0x7 [ 443.878871][ T9888] hid-multitouch 0003:1FD2:6007.0034: item fetching failed at offset 3/5 [ 443.888150][ T9888] hid-multitouch: probe of 0003:1FD2:6007.0034 failed with error -22 [ 443.921056][T11569] device veth0_vlan entered promiscuous mode [ 443.939462][ T9888] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 443.949113][T11569] device veth1_macvtap entered promiscuous mode [ 443.960415][ T9888] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 443.982380][ T9845] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 444.093869][ T303] usb 1-1: USB disconnect, device number 73 [ 444.238046][ T9845] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 444.342888][ T9] device veth1_macvtap left promiscuous mode [ 444.348728][ T9] device veth0_vlan left promiscuous mode [ 444.448337][ T24] audit: type=1400 audit(425.872:1922): avc: denied { ioctl } for pid=11596 comm="syz.3.3294" path="/2/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x6725 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 444.569469][ T25] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 444.827090][T11616] syz.2.3301[11616] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 444.827184][T11616] syz.2.3301[11616] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 444.851137][ T25] usb 2-1: Using ep0 maxpacket: 16 [ 444.981635][ T9844] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 444.992044][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 445.003646][ T25] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 445.016881][ T25] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 445.025892][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.037764][ T25] usb 2-1: config 0 descriptor?? [ 445.509151][T11625] bridge0: port 3(syz_tun) entered blocking state [ 445.516011][T11625] bridge0: port 3(syz_tun) entered disabled state [ 445.522643][T11625] device syz_tun entered promiscuous mode [ 445.528447][T11625] bridge0: port 3(syz_tun) entered blocking state [ 445.534710][T11625] bridge0: port 3(syz_tun) entered forwarding state [ 445.541906][T11625] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 445.562627][ T25] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0035/input/input44 [ 445.566251][ T9844] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 445.590369][ T9844] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 445.600011][ T9844] usb 1-1: New USB device found, idVendor=172f, idProduct=0032, bcdDevice= 0.00 [ 445.608752][ T9844] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.618907][ T9844] usb 1-1: config 0 descriptor?? [ 445.646779][ T25] microsoft 0003:045E:07DA.0035: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 445.881044][ T7031] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 446.013600][T11586] udc-core: couldn't find an available UDC or it's busy [ 446.065908][T11586] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 446.087330][ T757] usb 2-1: USB disconnect, device number 84 [ 446.119427][ T24] audit: type=1400 audit(427.422:1923): avc: denied { append } for pid=11609 comm="syz.0.3298" name="001" dev="devtmpfs" ino=157 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 446.324722][ T7031] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 446.346742][ T7031] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 446.356404][ T7031] usb 4-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 446.365484][ T7031] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.368175][ T9844] usbhid 1-1:0.0: can't add hid device: -71 [ 446.385845][ T7031] usb 4-1: config 0 descriptor?? [ 446.401056][ T9844] usbhid: probe of 1-1:0.0 failed with error -71 [ 446.421609][ T9844] usb 1-1: USB disconnect, device number 74 [ 446.471171][ T24] audit: type=1400 audit(427.746:1924): avc: denied { getattr } for pid=11671 comm="syz.2.3313" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 446.495468][T11672] overlayfs: statfs failed on './file0' [ 446.591625][T11668] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.3310: bg 0: block 288: padding at end of block bitmap is not set [ 446.684832][T11668] EXT4-fs error (device loop1) in ext4_mb_clear_bb:5646: Corrupt filesystem [ 446.728694][T11668] EXT4-fs error (device loop1): ext4_clear_blocks:880: inode #13: comm syz.1.3310: attempt to clear invalid blocks 1024 len 1 [ 446.901178][T11668] EXT4-fs error (device loop1): ext4_free_branches:1026: inode #13: comm syz.1.3310: invalid indirect mapped block 1819239214 (level 0) [ 447.021277][ T7031] pantherlord 0003:0F30:0111.0036: unknown main item tag 0x0 [ 447.055160][ T7031] pantherlord 0003:0F30:0111.0036: unknown main item tag 0x0 [ 447.134235][ T7031] pantherlord 0003:0F30:0111.0036: hidraw0: USB HID v0.00 Device [HID 0f30:0111] on usb-dummy_hcd.3-1/input0 [ 447.137263][T11668] EXT4-fs (loop1): 1 truncate cleaned up [ 447.164446][ T7031] pantherlord 0003:0F30:0111.0036: no output reports found [ 447.169628][T11668] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 447.226707][ T25] usb 4-1: USB disconnect, device number 85 [ 448.285584][ T9846] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 448.472766][T11709] bridge: RTM_NEWNEIGH with invalid ether address [ 448.547293][T11713] udc-core: couldn't find an available UDC or it's busy [ 448.558828][T11713] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 448.935720][ T9846] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 448.957630][ T9846] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 448.967196][ T9846] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 449.000632][ T9846] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.009145][ T9846] usb 4-1: config 0 descriptor?? [ 449.271519][ T1424] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 449.382297][T11726] __nla_validate_parse: 46 callbacks suppressed [ 449.382306][T11726] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3331'. [ 449.591198][ T1424] usb 2-1: Using ep0 maxpacket: 32 [ 449.716009][ T1424] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 449.739568][T11730] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3332'. [ 449.755749][ T1424] usb 2-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 449.766746][ T1424] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.800010][ T1424] usb 2-1: config 0 descriptor?? [ 449.820766][ T9846] usb 4-1: language id specifier not provided by device, defaulting to English [ 450.097369][T11736] xt_CT: You must specify a L4 protocol and not use inversions on it [ 450.192501][ T9846] uclogic 0003:256C:006D.0037: failed retrieving Huion firmware version: -71 [ 450.201165][ T9846] uclogic 0003:256C:006D.0037: failed probing parameters: -71 [ 450.209777][ T9846] uclogic: probe of 0003:256C:006D.0037 failed with error -71 [ 450.218278][ T9846] usb 4-1: USB disconnect, device number 86 [ 450.809326][T11742] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3336'. [ 450.846760][ T1424] hid-rmi 0003:0461:4E72.0038: hidraw0: USB HID v0.00 Device [HID 0461:4e72] on usb-dummy_hcd.1-1/input0 [ 451.071784][ T303] usb 2-1: USB disconnect, device number 85 [ 451.167786][ T1424] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 451.178502][ T340] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 451.438376][ T340] usb 1-1: Using ep0 maxpacket: 32 [ 451.460003][ T9846] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 451.557583][ T1424] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 451.568662][ T340] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 451.579336][ T1424] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 451.588930][ T340] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 451.598566][ T1424] usb 5-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 451.607766][ T340] usb 1-1: New USB device found, idVendor=056a, idProduct=002a, bcdDevice= 0.00 [ 451.616643][ T1424] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.624728][ T340] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.634212][ T1424] usb 5-1: config 0 descriptor?? [ 451.639668][ T340] usb 1-1: config 0 descriptor?? [ 451.868839][T11768] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3346'. [ 452.077718][ T9846] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 452.088514][ T9846] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 452.098060][ T9846] usb 4-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 452.107110][ T9846] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.118685][ T9846] usb 4-1: config 0 descriptor?? [ 452.186691][ T1424] dragonrise 0003:0079:0006.0039: unknown main item tag 0x0 [ 452.194016][ T1424] dragonrise 0003:0079:0006.0039: unknown main item tag 0x0 [ 452.202870][ T1424] dragonrise 0003:0079:0006.0039: unknown main item tag 0x0 [ 452.210357][ T1424] dragonrise 0003:0079:0006.0039: unknown main item tag 0x0 [ 452.217498][ T1424] dragonrise 0003:0079:0006.0039: unknown main item tag 0x0 [ 452.226984][ T340] wacom 0003:056A:002A.003A: Unknown device_type for 'HID 056a:002a'. Assuming pen. [ 452.237239][ T1424] dragonrise 0003:0079:0006.0039: hidraw0: USB HID v0.00 Device [HID 0079:0006] on usb-dummy_hcd.4-1/input0 [ 452.249597][ T1424] dragonrise 0003:0079:0006.0039: no inputs found [ 452.256250][ T340] wacom 0003:056A:002A.003A: hidraw1: USB HID v0.00 Device [HID 056a:002a] on usb-dummy_hcd.0-1/input0 [ 452.267923][ T1424] dragonrise 0003:0079:0006.0039: force feedback init failed [ 452.276682][ T340] input: Wacom Intuos5 M Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:056A:002A.003A/input/input45 [ 452.405748][ T9888] usb 5-1: USB disconnect, device number 89 [ 452.444908][ T9844] usb 1-1: USB disconnect, device number 75 [ 453.486061][ T9888] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 453.883151][T11815] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3357'. [ 454.052508][T11816] udc-core: couldn't find an available UDC or it's busy [ 454.068267][T11816] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 454.114656][ T9888] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 454.124713][ T9888] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 454.212175][ T9888] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 454.221129][ T9888] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 454.229118][ T9888] usb 2-1: SerialNumber: syz [ 454.341985][ T340] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 454.537109][ T9846] usbhid 4-1:0.0: can't add hid device: -71 [ 454.543522][ T9888] usb 2-1: 0:2 : does not exist [ 454.548285][ T9888] usb 2-1: unit 5 not found! [ 454.552731][ T9846] usbhid: probe of 4-1:0.0 failed with error -71 [ 454.561764][ T9888] usb 2-1: USB disconnect, device number 86 [ 454.567644][ T9846] usb 4-1: USB disconnect, device number 87 [ 454.602281][ T340] usb 1-1: Using ep0 maxpacket: 16 [ 454.818738][ T340] usb 1-1: config 1 interface 0 altsetting 17 endpoint 0x81 has invalid maxpacket 1503, setting to 1024 [ 454.840301][ T340] usb 1-1: config 1 interface 0 altsetting 17 bulk endpoint 0x82 has invalid maxpacket 16 [ 454.850110][ T340] usb 1-1: config 1 interface 0 has no altsetting 0 [ 454.970337][ T9846] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 455.025969][ T340] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 455.039974][ T340] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.048726][ T340] usb 1-1: Product: ␉ [ 455.052808][ T340] usb 1-1: Manufacturer: 皊鱷錛媿뀕킗ꏨ㝩᩶䝯猚꧘㜊⛃줅띪윏钊⁨맚裐쎥顾䶓埈兟⚆ꧺ﬍豰⢒䋑搤ౄޝ춴䦦즚쌝晹퐱Ȱ毓ᶷ䴲ߘ珋賊쒍䋮Ꚏ銜櫡ሳ뢟㾰㕽㿣㩏澗䀐䯽著﷭‷ﶚᳵ⁐邷꾬ⅈ撗 [ 455.086702][ T340] usb 1-1: SerialNumber: ⳳЉ⷗逝匨뛔ݢŽ嵠᩸灈ꑈ䒲ꇎ䜿䟄꺊唻띀翰撦稣磱鰟৅웥謟ꐸⶇ✲黯䆑닕ࡳ袢訾ꪯ輻剟铮襢✛햐毇兡ৎ肩ᨸ룒ꋝ掍띊뿅퐈䃃ൕ枏㺝檑Ẇ焮鿛␴㊣䓫컁㸽稛Ȱ☪谟퓖瓜꟟謹㗮⼞ᒀ愼糏碦졕뽜⸓ [ 455.143776][T11817] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 455.156833][T11817] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 455.652952][ T9846] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 455.663636][ T9846] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 455.664246][ T340] cdc_ether: probe of 1-1:1.0 failed with error -71 [ 455.673432][ T9846] usb 4-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 455.673443][ T9846] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.674122][ T9846] usb 4-1: config 0 descriptor?? [ 455.702424][ T340] usb 1-1: USB disconnect, device number 76 [ 456.359920][T11871] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3373'. [ 456.534354][ T9846] usbhid 4-1:0.0: can't add hid device: -71 [ 456.598274][ T9846] usbhid: probe of 4-1:0.0 failed with error -71 [ 456.733332][ T9846] usb 4-1: USB disconnect, device number 88 [ 457.092380][ T24] audit: type=1400 audit(437.548:1925): avc: denied { read } for pid=11880 comm="syz.4.3378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 457.208670][ T24] audit: type=1400 audit(437.659:1926): avc: denied { unmount } for pid=11569 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 457.245640][T11891] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3382'. [ 457.478169][T11883] F2FS-fs (loop1): invalid crc value [ 457.499146][T11883] F2FS-fs (loop1): Found nat_bits in checkpoint [ 457.549029][T11883] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 458.162736][ T24] audit: type=1400 audit(438.535:1927): avc: denied { relabelfrom } for pid=11917 comm="syz.4.3391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 458.200526][ T24] audit: type=1400 audit(438.554:1928): avc: denied { relabelto } for pid=11917 comm="syz.4.3391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 458.219569][ T24] audit: type=1400 audit(438.554:1929): avc: denied { bind } for pid=11917 comm="syz.4.3391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 458.868220][T11926] overlayfs: './file0' not a directory [ 459.040625][T11909] F2FS-fs (loop1): Invalid log_blocksize (32), supports only 12 [ 459.076664][T11909] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 459.138365][T11909] F2FS-fs (loop1): Found nat_bits in checkpoint [ 459.218152][T11949] fuse: Unknown parameter 'group_i00000000000000000000' [ 459.270036][T11909] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 459.283878][T11909] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 459.446458][T11963] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3403'. [ 459.728627][ T24] audit: type=1400 audit(439.985:1930): avc: denied { mounton } for pid=11908 comm="syz.1.3386" path="/65/file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 459.863238][ T24] audit: type=1400 audit(439.985:1931): avc: denied { setattr } for pid=11908 comm="syz.1.3386" path="/65/file0" dev="loop1" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 459.885556][ T24] audit: type=1400 audit(439.985:1932): avc: denied { remove_name } for pid=11908 comm="syz.1.3386" name="file2" dev="loop1" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 459.907778][ T24] audit: type=1400 audit(439.985:1933): avc: denied { rename } for pid=11908 comm="syz.1.3386" name="file2" dev="loop1" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 459.929891][ T24] audit: type=1400 audit(439.985:1934): avc: denied { unlink } for pid=11908 comm="syz.1.3386" name="file1" dev="loop1" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 460.431496][T11977] SELinux: policydb string length 16 does not match expected length 8 [ 460.453802][T11977] SELinux: failed to load policy [ 460.525758][T11980] netlink: 220 bytes leftover after parsing attributes in process `syz.4.3409'. [ 460.535019][T11980] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3409'. [ 460.544657][T11980] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3409'. [ 460.766618][ T9846] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 460.875039][ T9845] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 461.034611][ T9846] usb 4-1: Using ep0 maxpacket: 32 [ 461.152173][T11986] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=36 sclass=netlink_tcpdiag_socket pid=11986 comm=syz.0.3412 [ 461.167649][ T9846] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 461.184547][ T9846] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 461.212523][ T9846] usb 4-1: New USB device found, idVendor=05ac, idProduct=022b, bcdDevice= 0.00 [ 461.224605][ T9846] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.286831][ T9845] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 461.298850][ T9846] usb 4-1: config 0 descriptor?? [ 461.306849][ T9845] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 461.316865][ T9845] usb 5-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 461.326081][ T9845] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.345028][ T9845] usb 5-1: config 0 descriptor?? [ 461.915131][ T9846] usbhid 4-1:0.0: can't add hid device: -71 [ 461.921021][ T9846] usbhid: probe of 4-1:0.0 failed with error -71 [ 461.928723][ T9846] usb 4-1: USB disconnect, device number 89 [ 462.002954][ T9845] logitech-djreceiver 0003:046D:C71B.003B: item fetching failed at offset 3/7 [ 462.014722][ T9845] logitech-djreceiver 0003:046D:C71B.003B: logi_dj_probe: parse failed [ 462.022944][ T9845] logitech-djreceiver: probe of 0003:046D:C71B.003B failed with error -22 [ 462.472277][T11317] ------------[ cut here ]------------ [ 462.481202][T11317] WARNING: CPU: 0 PID: 11317 at fs/inode.c:304 drop_nlink+0xc1/0x110 [ 462.502104][T11317] Modules linked in: [ 462.506572][T11317] CPU: 0 PID: 11317 Comm: syz-executor Tainted: G W 5.10.218-syzkaller-00638-g3feee789f446 #0 [ 462.528503][T11317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 462.544559][T11317] RIP: 0010:drop_nlink+0xc1/0x110 [ 462.549506][T11317] Code: 1e 48 8d bb b8 04 00 00 be 08 00 00 00 e8 77 ce f0 ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 af 38 b3 ff <0f> 0b eb 88 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 62 ff ff ff 4c [ 462.577727][T11317] RSP: 0018:ffffc90000cd7cc0 EFLAGS: 00010293 [ 462.589483][T11317] RAX: ffffffff81b771d1 RBX: 0000000000000000 RCX: ffff8881288e93c0 [ 462.620621][T11317] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 462.633325][T11317] RBP: ffffc90000cd7ce8 R08: ffffffff81b77154 R09: 0000000000000003 [ 462.641813][T11317] R10: fffff5200019af88 R11: dffffc0000000001 R12: dffffc0000000000 [ 462.650344][T11317] R13: 1ffff11021512089 R14: ffff88810a890400 R15: ffff88810a890448 [ 462.660692][T11317] FS: 00005555560f8500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 462.669970][T11317] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 462.676769][T11317] CR2: 00007ff39faefa6c CR3: 0000000111d49000 CR4: 00000000003526a0 [ 462.684818][T11317] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 462.692720][T11317] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 462.700741][T11317] Call Trace: [ 462.703972][T11317] ? show_regs+0x58/0x60 [ 462.708428][T11317] ? __warn+0x160/0x2f0 [ 462.712557][T11317] ? drop_nlink+0xc1/0x110 [ 462.717023][T11317] ? report_bug+0x3d9/0x5b0 [ 462.721433][T11317] ? drop_nlink+0xc1/0x110 [ 462.725640][T11317] ? handle_bug+0x41/0x70 [ 462.729962][T11317] ? exc_invalid_op+0x1b/0x50 [ 462.734495][T11317] ? asm_exc_invalid_op+0x12/0x20 [ 462.739541][T11317] ? drop_nlink+0x44/0x110 [ 462.743839][T11317] ? drop_nlink+0xc1/0x110 [ 462.748058][T11317] ? drop_nlink+0xc1/0x110 [ 462.752506][T11317] shmem_rmdir+0x59/0x90 [ 462.756615][T11317] vfs_rmdir+0x2b7/0x3f0 [ 462.760847][T11317] incfs_kill_sb+0x108/0x220 [ 462.765675][T11317] deactivate_locked_super+0xad/0x110 [ 462.771475][T11317] deactivate_super+0xbe/0xf0 [ 462.776002][T11317] cleanup_mnt+0x45c/0x510 [ 462.780339][T11317] __cleanup_mnt+0x19/0x20 [ 462.784793][T11317] task_work_run+0x129/0x190 [ 462.789370][T11317] exit_to_user_mode_loop+0xbf/0xd0 [ 462.794659][T11317] syscall_exit_to_user_mode+0xa2/0x1a0 [ 462.800274][T11317] do_syscall_64+0x40/0x70 [ 462.804816][T11317] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 462.810655][T11317] RIP: 0033:0x7fb382c85f07 [ 462.815121][T11317] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 462.835681][T11317] RSP: 002b:00007fff535995c8 EFLAGS: 00000202 ORIG_RAX: 00000000000000a6 [ 462.839547][T12032] device bridge3 entered promiscuous mode [ 462.844296][T11317] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fb382c85f07 [ 462.857664][T11317] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff53599680 [ 462.866166][T11317] RBP: 00007fff53599680 R08: 0000000000000000 R09: 0000000000000000 [ 462.882978][T11317] R10: 00000000ffffffff R11: 0000000000000202 R12: 00007fff5359a750 [ 462.891147][T11317] R13: 00007fb382cf2515 R14: 000000000006c00f R15: 0000000000000028 [ 462.899202][T11317] ---[ end trace 914eb026960e91c5 ]--- [ 462.904932][T11317] ================================================================== [ 462.912805][T11317] BUG: KASAN: null-ptr-deref in ihold+0x20/0x60 [ 462.918875][T11317] Write of size 4 a