last executing test programs: 16.302515703s ago: executing program 4 (id=5430): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000300)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000001440)=ANY=[@ANYBLOB="0017"], 0xc0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0104000000000000000001000000000000000c4100000014001462726f6164636173742d6c696e6ba1", @ANYBLOB="85"], 0x30}}, 0x0) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r2}, 0x10) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r5}, 0x8) close(r6) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) unshare(0x22020600) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, 0x0, 0x0) 16.293735314s ago: executing program 4 (id=5431): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000100)={0x4, &(0x7f0000000000)=[{0x2000, 0x5, 0x6, 0x8}, {0x6, 0x1, 0x3}, {0xa, 0x1, 0x0, 0xffffffff}, {0x9, 0x3, 0x9}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) close(r3) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) close(r3) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe15, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8, 0xffffffffffffff4b, 0x0}}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='pids.current\x00', 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r5, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r5}, 0x0, 0x0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r5, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"/1551], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000e00)='./file0\x00', 0x90e, &(0x7f0000000e40)={[{@init_itable_val={'init_itable', 0x3d, 0x4}}, {@grpjquota}, {@dioread_lock}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10000}}, {@errors_remount}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}]}, 0x3, 0x44d, &(0x7f0000000280)="$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") 14.05478804s ago: executing program 4 (id=5437): syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9e, 0x17, 0x36, 0x10, 0x17ef, 0x721e, 0xde06, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6}}]}}]}}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000950000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x10) rt_sigaction(0x19, 0x0, 0x0, 0x8, &(0x7f0000000440)) openat(0xffffffffffffff9c, 0x0, 0x141842, 0x0) r5 = socket$inet(0x2, 0x2, 0x1) bind$inet(r5, &(0x7f00000004c0)={0x2, 0x4e24, @empty}, 0x10) close(r0) 12.47254733s ago: executing program 0 (id=5444): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000002800)={'#! ', './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xff1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xf9, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = getpid() process_vm_readv(r5, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write(r6, &(0x7f0000000000)="fa", 0xfffffdef) madvise(&(0x7f000000b000/0x3000)=nil, 0x3000, 0x8) fsmount(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='cgroup.max.depth\x00', 0x2, 0x0) 11.279549754s ago: executing program 0 (id=5446): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5}]}, 0x1c}}, 0x0) r2 = creat(0x0, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) faccessat2(r2, &(0x7f0000000000)='./file0\x00', 0x80, 0x1300) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES32], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r4, 0xd01c4813, &(0x7f0000000a00)={0x2, 0xffffffff, 0x0, 0x0, 0x2000000}) socket$inet6(0xa, 0x3, 0xff) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x3, &(0x7f0000000040)=@framed={{0x76, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xa8}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/schedstat\x00', 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000340)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001000)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r7], 0x20}}, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) 10.62089793s ago: executing program 4 (id=5449): ioctl$HIDIOCSREPORT(0xffffffffffffffff, 0x81044805, &(0x7f0000000040)={0x1}) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005340)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000740)="9aa47acb7acd95f5c25619b90172db8c03b338d584f6bbf9e198a7f5fcac7fb2ebe1b7ea14b04c4674e889caa080f898137534a7ec67fe044c7ada0e1a49761e080f265470810b762022b57beaf771d11c734dcbd2b7b921449c2a47d61b88e3adf7ab8e6851845af299960ddb95146b06328ece6a753ee759265d3eb475483211efdd51754a9bbc6a984a1327dd2d66623506cc106570870cbc", 0x9a}], 0x1, &(0x7f0000000c40)=ANY=[@ANYBLOB="1c00000000000000010000", @ANYRES32=0x0, @ANYRESHEX=r1, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYRESOCT=r1, @ANYRES32, @ANYBLOB="1c000000000000100100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES16=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="d6d7bd6a35f1a5818b049a524ff038d25fe5a0a28e6c8fe1788a2113eadfa5d3d4a8ea392cf7a995607a5b47143e603362b09e5f2442c34853f4542ce94bca8a09b6c12cb4c1682e9f8aaf1fef2878d240b42b968cc55612cab85c042955d172f0ff50df995c756858cebf551e2f3090b49c3134c10d76c7dba1b75d06c6e4a4db6abd781aa20a0c7e68b60e06416edd3cc4d96352da3fa85488c9ef4c54b0ea92230198dbcba56c1db69d0d4dee934e45b8a102a776a609b9e341fddb37c7f0784c4cfb2401643b79249487cd17054a479de51b7ae9e896d736df90fd944065abce95cdd3f5cd6602be7de60d81615d98c6c0dd18", @ANYRES32, @ANYRES32, @ANYBLOB="00000000100000000000000001000000010000001c00000000000000010000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x128, 0x4000000}}, {{&(0x7f0000002dc0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000030c0)=[{&(0x7f0000002e40)="3bd73d11f1e05c345f8039c4f8cab9cf2c9a7ca709a2b4fd1e669ae7b805c7a5f49da0ae0130403acb6cbf5eaa62ca236f4f65a2b654c7202a3476e06ae55306073e0b8c45890d105ab610e84f8988c4f4524e944b9c61920aa0062b0ca759a9cabfa19f9fb5626786a832d8f7449a24e6ca907c1e49742e49e536969569b0d319fd2c636f536c902920d2f38f6e5bccfaf8aaa68aee91d75dc8e3052f71d1c07ad2fc919308edc3d8474f95c37d33142c23582d9d623d8c0c533a44822494016063a505d7b7e11acac4689ddf0197f11a2105782f4fd8c9a704d7fb10ec3400bc3ec32d5ee535020654db84104255d6", 0xf0}, {0x0}, {&(0x7f0000000440)}, {&(0x7f0000000e80)="ad5a0015a91e25e686573dd2d3e7330213fc3b6e223a78c56ff5f278c84ddd02bde0dbfdc2e94461d31cc04477acb776f4955f922c4110bad10b13d6c28cafbc126f2854b95308c8e8ac076b83d81c1644f52639cb74f861142a4ccdfb6704b0d08bcb8840bf89d2312c20f56c15", 0x6e}], 0x4, 0x0, 0x0, 0x8801}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x78, 0x40000}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20004080}}], 0x4, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000580)={0xa6, {{0xa, 0x0, 0x0, @mcast1={0xff, 0xf}}}, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x108) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0xf}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180), &(0x7f00000004c0)=0xc) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000300)={'#! ', './file0', [{0x20, '\xebX\xce\xd0\xaaw\xf5\x80\xa3\b\xa1\xa3\xa2\xca.\t'}, {}], 0xa, "ad1323096beb292b360dcdb5eda5f942ae53820460a2f8978019972662a15c30ad7df41dd6297e0a83d8dbe22b2a9eb8af089cc1053f2040d7f5a2e62a398e3d2ad88340e07b2e92270f3f45c41f56e91b6fba146ba124cb6a363445"}, 0x79) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$sock_SIOCGIFBR(r3, 0x8940, &(0x7f0000000400)=@get={0x1, &(0x7f00000003c0), 0xf31}) socket$netlink(0x10, 0x3, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000840)={r5, 0x0, 0x0, 0xe6, 0x0, &(0x7f0000000900)=""/230, 0x4d, 0x0, 0x93, 0x0, &(0x7f0000000a00)="d1b12a3b202eb13039ffa15e7ea6b15ec4591b6438c851e13e218576fa0d96377fb39b2ea0a4337b78cc5a24e0ebbadf8a55f486093995a47392c8d662ee9ffc277042f5c7b2d874619989c430626ccabccd9be29702623ad8bf052cd3c6e3a5b52736ba4884f5c10a957062da2ac10cfbb7625cc6bb78159ffcfc3d142e1db34cfc967136dd321e37c06f4326728307719f71", &(0x7f0000000ac0), 0x3, 0x0, 0x5879}, 0x50) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newtaction={0x44, 0x31, 0x103, 0x0, 0x0, {}, [{0x30, 0x1, [@m_bpf={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x44}}, 0x40) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000000000401904000600000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 9.211048118s ago: executing program 1 (id=5461): socket$inet6(0xa, 0x3, 0x1) r0 = socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x2000000000000344, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x5, 0x400, 0x9, 0x41, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r4, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x4f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8}, 0x1c) 8.345859758s ago: executing program 1 (id=5453): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001800010300000000000000000a8000000003"], 0x30}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r6 = fcntl$dupfd(r5, 0x0, r5) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc08, 0x3, 0x1e8, 0xc, 0x5002004a, 0xb, 0x310, 0xea02, 0x3d0, 0x3c8, 0x3c8, 0x3d0, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'erspan0\x00', 'ip6tnl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x248) 8.147382572s ago: executing program 0 (id=5455): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$vcsn(&(0x7f0000000280), 0x9, 0x210000) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r3, 0x0, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="8e"], 0x1) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000000c0)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000000)={@private0, 0x10, r4}) r6 = socket(0xa, 0x1, 0x0) ioctl(r6, 0x8916, &(0x7f0000000000)) ioctl(r6, 0x8936, &(0x7f0000000000)) 7.498680488s ago: executing program 4 (id=5456): syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x3, &(0x7f0000000000), 0xfc, 0x553, &(0x7f0000000180)="$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") bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000080)={0x49de, 0x0, 0x0, 0xbfff, 0x0, "ec28a144f13d7607"}) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000002c7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r4 = syz_open_pts(r0, 0x0) r5 = dup3(r4, r0, 0x0) ioctl$TIOCSTI(r5, 0x5412, 0x0) socket$nl_route(0x10, 0x3, 0x0) 7.376946236s ago: executing program 1 (id=5459): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffffff, 0x0, 0x40600, 0x100) syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x1, 0x0, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='tracefs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x2200c3a, &(0x7f0000000140)={[{@mode}]}) 6.342790588s ago: executing program 0 (id=5460): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pwrite64(r1, &(0x7f0000000080)='3', 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) 6.342182478s ago: executing program 2 (id=5462): bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "2af01c3d0040fbffffffffffffff00"}) r6 = syz_open_pts(r5, 0x0) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000140)=0x2d) connect$pppl2tp(r4, 0x0, 0x0) 4.719048021s ago: executing program 0 (id=5463): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r1, 0x7}, 0xa) ioperm(0x0, 0x3, 0x2) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001380)=ANY=[@ANYBLOB="b012000011002104fcffffff00000000000000000000000000000000000000000000000002efff0014000d007f00000100000000000000000000000008000b000300000008001d000000000028001a00fe880000000000000000000000000101200100000000000000000000000000010a00100414000e00200100000000000000000000000000020c0015"], 0x12b0}}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x6, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x3}, @call={0x85, 0x0, 0x0, 0x26}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r5, 0x5, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r4, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r3}, 0x20) shutdown(r3, 0x1) recvmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/132, 0x84}], 0x1}, 0x0) futex(&(0x7f0000004000), 0x3, 0x0, 0x0, &(0x7f0000004000), 0x0) bind$pptp(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xe5, 0x93, 0x2, 0x40, 0x403, 0xda73, 0xdc8d, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2f, 0xd2, 0xa4}}]}}]}}, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, 0x0) ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, &(0x7f0000000400)={0x7, 0x0, 0x0, 0x1b9, 0x4}) 4.718346011s ago: executing program 1 (id=5464): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x7, 0x8000, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='jbd2_checkpoint\x00', r1}, 0x10) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x5412, &(0x7f00000000c0)=0x13) syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0xc0109207, &(0x7f00000001c0)) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r2) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000140)={0x0, 0x0}) r5 = syz_open_procfs(r4, &(0x7f0000000600)='fd/4\x00') ioctl$EXT4_IOC_GROUP_EXTEND(r5, 0x40086607, &(0x7f0000000040)) syz_usb_connect(0x0, 0x4d, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000735aca105e042107c4900102030109023b00010000000009040000000e010000052406000105240300000d240f01000000"], 0x0) 4.717812381s ago: executing program 2 (id=5465): socket$inet6(0xa, 0x3, 0x1) r0 = socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x2000000000000344, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x5, 0x400, 0x9, 0x41, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r4, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x4f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8}, 0x1c) 3.670896164s ago: executing program 2 (id=5467): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) quotactl$Q_QUOTAON(0xffffffff80000102, &(0x7f0000000140)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c0000002600bdab"], 0x2c}}, 0x0) 3.430600091s ago: executing program 4 (id=5468): ioctl$HIDIOCSREPORT(0xffffffffffffffff, 0x81044805, &(0x7f0000000040)={0x1}) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005340)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000740)="9aa47acb7acd95f5c25619b90172db8c03b338d584f6bbf9e198a7f5fcac7fb2ebe1b7ea14b04c4674e889caa080f898137534a7ec67fe044c7ada0e1a49761e080f265470810b762022b57beaf771d11c734dcbd2b7b921449c2a47d61b88e3adf7ab8e6851845af299960ddb95146b06328ece6a753ee759265d3eb475483211efdd51754a9bbc6a984a1327dd2d66623506cc106570870cbc", 0x9a}], 0x1, &(0x7f0000000c40)=ANY=[@ANYBLOB="1c00000000000000010000", @ANYRES32=0x0, @ANYRESHEX=r1, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYRESOCT=r1, @ANYRES32, @ANYBLOB="1c000000000000100100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES16=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="d6d7bd6a35f1a5818b049a524ff038d25fe5a0a28e6c8fe1788a2113eadfa5d3d4a8ea392cf7a995607a5b47143e603362b09e5f2442c34853f4542ce94bca8a09b6c12cb4c1682e9f8aaf1fef2878d240b42b968cc55612cab85c042955d172f0ff50df995c756858cebf551e2f3090b49c3134c10d76c7dba1b75d06c6e4a4db6abd781aa20a0c7e68b60e06416edd3cc4d96352da3fa85488c9ef4c54b0ea92230198dbcba56c1db69d0d4dee934e45b8a102a776a609b9e341fddb37c7f0784c4cfb2401643b79249487cd17054a479de51b7ae9e896d736df90fd944065abce95cdd3f5cd6602be7de60d81615d98c6c0dd18", @ANYRES32, @ANYRES32, @ANYBLOB="00000000100000000000000001000000010000001c00000000000000010000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x128, 0x4000000}}, {{&(0x7f0000002dc0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000030c0)=[{&(0x7f0000002e40)="3bd73d11f1e05c345f8039c4f8cab9cf2c9a7ca709a2b4fd1e669ae7b805c7a5f49da0ae0130403acb6cbf5eaa62ca236f4f65a2b654c7202a3476e06ae55306073e0b8c45890d105ab610e84f8988c4f4524e944b9c61920aa0062b0ca759a9cabfa19f9fb5626786a832d8f7449a24e6ca907c1e49742e49e536969569b0d319fd2c636f536c902920d2f38f6e5bccfaf8aaa68aee91d75dc8e3052f71d1c07ad2fc919308edc3d8474f95c37d33142c23582d9d623d8c0c533a44822494016063a505d7b7e11acac4689ddf0197f11a2105782f4fd8c9a704d7fb10ec3400bc3ec32d5ee535020654db84104255d6", 0xf0}, {0x0}, {&(0x7f0000000440)}, {&(0x7f0000000e80)="ad5a0015a91e25e686573dd2d3e7330213fc3b6e223a78c56ff5f278c84ddd02bde0dbfdc2e94461d31cc04477acb776f4955f922c4110bad10b13d6c28cafbc126f2854b95308c8e8ac076b83d81c1644f52639cb74f861142a4ccdfb6704b0d08bcb8840bf89d2312c20f56c15", 0x6e}], 0x4, 0x0, 0x0, 0x8801}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x78, 0x40000}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20004080}}], 0x4, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000580)={0xa6, {{0xa, 0x0, 0x0, @mcast1={0xff, 0xf}}}, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x108) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0xf}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180), &(0x7f00000004c0)=0xc) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000300)={'#! ', './file0', [{0x20, '\xebX\xce\xd0\xaaw\xf5\x80\xa3\b\xa1\xa3\xa2\xca.\t'}, {}], 0xa, "ad1323096beb292b360dcdb5eda5f942ae53820460a2f8978019972662a15c30ad7df41dd6297e0a83d8dbe22b2a9eb8af089cc1053f2040d7f5a2e62a398e3d2ad88340e07b2e92270f3f45c41f56e91b6fba146ba124cb6a363445"}, 0x79) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$sock_SIOCGIFBR(r3, 0x8940, &(0x7f0000000400)=@get={0x1, &(0x7f00000003c0), 0xf31}) socket$netlink(0x10, 0x3, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000840)={r5, 0x0, 0x0, 0xe6, 0x0, &(0x7f0000000900)=""/230, 0x4d, 0x0, 0x93, 0x0, &(0x7f0000000a00)="d1b12a3b202eb13039ffa15e7ea6b15ec4591b6438c851e13e218576fa0d96377fb39b2ea0a4337b78cc5a24e0ebbadf8a55f486093995a47392c8d662ee9ffc277042f5c7b2d874619989c430626ccabccd9be29702623ad8bf052cd3c6e3a5b52736ba4884f5c10a957062da2ac10cfbb7625cc6bb78159ffcfc3d142e1db34cfc967136dd321e37c06f4326728307719f71", &(0x7f0000000ac0), 0x3, 0x0, 0x5879}, 0x50) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newtaction={0x44, 0x31, 0x103, 0x0, 0x0, {}, [{0x30, 0x1, [@m_bpf={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x44}}, 0x40) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000000000401904000600000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 2.655906855s ago: executing program 2 (id=5470): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000340)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x8, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @loopback, {[@generic={0x0, 0x9, "ba8fab810cab6c"}]}}}}}) fchdir(0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f00000000c0)={'wg0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="340000001000110400"/20, @ANYRES32=r6, @ANYBLOB="000000000000000008000400000000000c001a80080002"], 0x34}}, 0x0) 1.843035582s ago: executing program 3 (id=5471): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000100)={0x4, &(0x7f0000000000)=[{0x2000, 0x5, 0x6, 0x8}, {0x6, 0x1, 0x3}, {0xa, 0x1, 0x0, 0xffffffff}, {0x9, 0x3, 0x9}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) close(r3) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) close(r3) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe15, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8, 0xffffffffffffff4b, 0x0}}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='pids.current\x00', 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r5, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r5}, 0x0, 0x0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r5, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"/1551], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000e00)='./file0\x00', 0x90e, &(0x7f0000000e40)={[{@init_itable_val={'init_itable', 0x3d, 0x4}}, {@grpjquota}, {@dioread_lock}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10000}}, {@errors_remount}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}]}, 0x3, 0x44d, &(0x7f0000000280)="$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") 1.748287348s ago: executing program 2 (id=5472): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000600)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc08, 0x3, 0x468, 0xc, 0x5002004a, 0xb, 0x310, 0xea13, 0x3d0, 0x3c8, 0x3c8, 0x3d0, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'erspan0\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0x2c8, 0x310, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{}, {0x16}]}}, @common=@ttl={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4c8) 1.057038606s ago: executing program 1 (id=5473): r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r2, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r3}, 0x10) write(r1, &(0x7f0000000000)="fa", 0xfffffdef) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 992.676951ms ago: executing program 3 (id=5474): syz_mount_image$fuse(0x0, 0x0, 0x674db47dd4c2936c, 0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x182403a, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f000000a400)={0x2020}, 0x202d) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x1000004, &(0x7f0000001080)={[{@stripe={'stripe', 0x3d, 0x8}}, {@errors_continue}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@jqfmt_vfsv1}, {@norecovery}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@orlov}, {@bsdgroups}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@min_batch_time={'min_batch_time', 0x3d, 0x40000002}}, {@quota}]}, 0x1, 0x54f, &(0x7f0000000b00)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbZdnamc8HbnvOvTc995t7v6fn5iQkgKE1kf0oRLwcEd8kEQfbto1GvnFibb/V+1dnsyWJRuPTv5JI8nWt/ZP89/688lJE/PZVxPHCxnZryysLpXI5Xczrk/XKpcna8sqJC5XSfDqfXpyemTn19sz0e+++M7BY3zj7z/ef3P7w1NdHV7/75e6hm0mcjgP5tvY4nsC19spETOTPyVicfmTHqQE0tpMk230A9GUkz/OxyPqAgzGSZz3w//dlRDSAIZXIfxhSrXFA695+QPfBz417H6zdAG2Mf3TttZHY07w32reaPHRnlN3vjg+g/ayNX/+8dTNbYnCvQwBs6dr1iDg5Orqx/0vy/q9/J3vY59E29H/w7NzOxj9vdhr/FNbHP9Fh/LO/Q+72Y+v8L9wdQDNdZeO/9zuOf9cnrcZH8toLzTHfWHL+QjnN+rYXI+JYjO3O6pvN55xavdPotq19/JctWfutsWB+HHdHdz/8mLlSvfQkMbe7dz3ilY7j32T9/Ccdzn/2fJztsY0j6a3Xum3bOv6nq/FTxOsdz/+DGa1k8/nJyeb1MNm6Kjb6+8aR37u1v93xZ+d/3+bxjyft87W1x2/jxz3/pt229Xv970o+a5Z35euulOr1xamIXcnHG9dPP3hsq97aP4v/2NHN+79O1//eiPi8x/hvHP751f7jf7qy+Oce6/w/fuHOR1/80K393s7/W83SsXxNL/1frwf4JM8dAAAAAAAA7DSFiDgQSaG4Xi4UisW193ccjn2FcrVWP36+unRxLpqflR2PsUJrpvtg2/shpvL3w7bq04/UZyLiUER8O7K3WS/OVstz2x08AAAAAAAAAAAAAAAAAAAA7BD7u3z+P/PHyHYfHfDU+cpvGF5b5v8gvukJ2JH8/4fhJf9heMl/GF7yH4aX/IfhJf9heMl/GF7yHwAAAAAAAAAAAAAAAAAAAAAAAAAAAAbq7Jkz2dJYvX91NqvPXV5eWqhePjGX1haKlaXZ4mx18VJxvlqdL6fF2Wplq79XrlYvTU3H0pXJelqrT9aWV85VqksX6+cuVErz6bl07JlEBQAAAAAAAAAAAAAAAAAAAM+X2vLKQqlcThcVFPoqjO6Mw1AYcGG7eyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeOC/AAAA///ktDiZ") r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mounts\x00') r1 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x0, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x1217880, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) sendfile(r1, r0, 0x0, 0x8000000d) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, 0x0, 0x0) 924.137776ms ago: executing program 2 (id=5475): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f00001001"], 0x0) syz_usb_connect$hid(0x4, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x0, 0x1b, 0x0, 0x1, [{0x0, 0x0}]}) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x48) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000180)='./file1\x00', 0x0, &(0x7f0000000840)={[{@fat=@fmask={'fmask', 0x3d, 0x5}}, {@numtail}, {@rodir}, {@rodir}, {@utf8no}, {@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'cp1250'}}, {@numtail}, {@numtail}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'euc-jp'}}, {@utf8no}, {@rodir}]}, 0x3, 0x35c, &(0x7f00000004c0)="$eJzs3U9om/UbAPAne9OkHezXHn4wFIRXb4KWteJBTy2jg2EuKsE/BzG4TqWpgwaD3aFZvYhHwaOevHnQg4edRVDEmwevTpCpeNDdBg5fSd6kedMkXSd2s/j5HMKT5/s8+37f5aV5+4Z8+/JKbFyYiYs3blyP2dlSlFfOrsTNUixEEgNXYlxlQg4AOB5uZln8nuUO2VI64iUBAEes9/7/6qlC5u0vD6rPvPsDwLHX//1/Ln+WTKyZndZ86ciWBQAcobH7/w+NDFdGP+ovT7lCAACOk2dfePGp1VrEM2k6G7H5TrverseTw/HVi/F6NGM9zsR83IrILxS6D6Xe47nztbUzaZp24qeFqHc72vWIzU67nl8prCa9/mosxXws9Pv7VxtZliXnPqutLaVpmvY+V7jS6c0fm6V2fSZO9uf//mSsx3Kk8f+x/ojztbXlNBf1zUF/J2J3eN+iu/7FmI9vX4lL0YwL0e0dXNbU1naW0vRsVhvpb9ervbrc1DsgAAAAAAAAAAAAAAAAAAAAAADwtyymexb29r/Jhvv3LC5OGO/tj5P39/cH2s33B8qqWWTZb289Wn83iZH9gfbvz9Oul+PEvT10AAAAAAAAAAAAAAAAAAAA+NdobVei0Wyub7W2L28Ug85Wa/tERHQzb3z9yRdzMV5zm6Dcn6MwlPZTlzcaWTIozpK8Zm6kPelOPsh8fHVvxcWa6t5RTFxGdfpQs3nqwR8/GGYeSAb/8p/DmiQmH2CybxnFYPN/+ZLu5D9qL1i+Tc21LMumte+8NN4VpYjynb9wBwdZN/jq+mv3PdY6/Xgv83mWe/iR+eeuvf/RLxuNZnfm6L2Cla3WrWyj0X8++WSbHiSF86cUeVAqngnlg9p3RzON5Ltfn7//vW8ON3tWzLw5oSbJD+fT/UOVPOguc9/Q3KS5ZqJ88Gn8zwSnP1xpXN354efDdhV+SNioAwAAAAAAAAAAAAAAAAAA7orCd8X7+l/2nTmo64mnj35lAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHD3DP/+fyHYHcuMB9XYn/mjE+PF1fWtVkTlXh8mAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/cX8FAAD//76aaas=") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'erspan0\x00'}) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=[0x0], 0x0) 734.651509ms ago: executing program 3 (id=5476): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000002800)={'#! ', './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xff1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = getpid() process_vm_readv(r5, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write(r6, &(0x7f0000000000)="fa", 0xfffffdef) madvise(&(0x7f000000b000/0x3000)=nil, 0x3000, 0x8) fsmount(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='cgroup.max.depth\x00', 0x2, 0x0) 695.426432ms ago: executing program 0 (id=5477): syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007c1905409904e25a0f09010207010902"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(r1, &(0x7f0000000280)={&(0x7f0000000180)=@ethernet={0x0, @local}, 0x80, &(0x7f0000000940)=[{0x0}, {&(0x7f00000004c0)=""/147, 0x93}, {&(0x7f0000000780)=""/150, 0x96}, {&(0x7f0000000840)=""/76, 0x4c}, {&(0x7f00000008c0)=""/82, 0x52}], 0x5, &(0x7f0000000200)=""/13, 0xd}, 0x40000042) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) sendmsg$sock(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa008100000086dd60f5240400483a00fe8000000000000000000000000000bbff02000000000000000000000000000102009078000005006050835900000000fc010000000000000000000000000000ff0100000000000000000000000000013a01000000000000070800"/130], 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x35, 0x1, 0x8, 0x0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000680)='cachefiles_vfs_error\x00', r3}, 0x10) r5 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) write$selinux_context(r5, 0x0, 0x0) write$FUSE_NOTIFY_STORE(r4, &(0x7f00000002c0)=ANY=[@ANYRESHEX=r4], 0x28) 629.003847ms ago: executing program 3 (id=5478): openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0500000001ea", @ANYRES64], 0x20000600}}, 0x0) 108.594613ms ago: executing program 3 (id=5479): r0 = epoll_create1(0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0xe000001a}) r2 = io_uring_setup(0x6771, &(0x7f00000001c0)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) close(r3) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) close(r3) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe15, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8, 0xffffffffffffff4b, 0x0}}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r5, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r5}, 0x0, 0x0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r5, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r6}, 0x10) r7 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) sendfile(r7, r1, 0x0, 0x7) dup2(r7, r2) 86.910264ms ago: executing program 1 (id=5480): socket$packet(0x11, 0x3, 0x300) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000003c0)='percpu_alloc_percpu\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(&(0x7f0000000080)='binder\x00', 0x0) syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x0, &(0x7f0000000140)=ANY=[], 0xfd, 0x1501, &(0x7f00000002c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) syz_emit_ethernet(0x156, &(0x7f0000001800)=ANY=[@ANYBLOB="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"], 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYRES8=r1], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$inet6_tcp(0xa, 0x1, 0x0) 0s ago: executing program 3 (id=5481): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x1, 0x56a, &(0x7f00000015c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r2}, 0x10) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000008c0)={0x0, 0x2904c, 0x0, 0x10003, '\x00', [{}, {0xffffffff}]}) kernel console output (not intermixed with test programs): d/GreenAsia devices by Anssi Hannula [ 1559.649722][T22209] EXT4-fs (loop0): unmounting filesystem. [ 1559.834988][T23053] loop3: detected capacity change from 0 to 512 [ 1559.863771][T23053] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1560.071192][T23056] loop0: detected capacity change from 0 to 256 [ 1560.091730][T23056] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 1560.270218][T22623] usb 3-1: USB disconnect, device number 99 [ 1560.276479][T23053] EXT4-fs (loop3): 1 orphan inode deleted [ 1560.282016][T23053] EXT4-fs (loop3): 1 truncate cleaned up [ 1560.288058][T23053] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1560.320186][T23059] mmap: syz.4.5102 (23059): VmData 29085696 exceed data ulimit 65536. Update limits or use boot option ignore_rlimit_data. [ 1560.333392][ T28] audit: type=1400 audit(2000008545.083:2718): avc: denied { bind } for pid=23058 comm="syz.4.5102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1560.365978][T23063] loop4: detected capacity change from 0 to 512 [ 1560.372499][T23063] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1560.379710][T23063] EXT4-fs (loop4): Test dummy encryption mode enabled [ 1560.387597][T23063] EXT4-fs error (device loop4): ext4_orphan_get:1396: inode #17: comm syz.4.5104: iget: bogus i_mode (0) [ 1560.398889][T23063] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz.4.5104: couldn't read orphan inode 17 (err -117) [ 1560.410708][T23063] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1560.480686][T22411] EXT4-fs (loop3): unmounting filesystem. [ 1560.526814][ T28] audit: type=1400 audit(2000008545.273:2719): avc: denied { read } for pid=23062 comm="syz.4.5104" name="usbmon0" dev="devtmpfs" ino=139 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1560.558459][ T28] audit: type=1400 audit(2000008545.273:2720): avc: denied { open } for pid=23062 comm="syz.4.5104" path="/dev/usbmon0" dev="devtmpfs" ino=139 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1560.714411][T23073] loop3: detected capacity change from 0 to 512 [ 1560.726752][T23073] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1560.789766][T23073] EXT4-fs (loop3): 1 orphan inode deleted [ 1560.795399][T23073] EXT4-fs (loop3): 1 truncate cleaned up [ 1560.800836][T23073] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1561.084473][T22623] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 1561.225414][T22788] EXT4-fs (loop4): unmounting filesystem. [ 1561.510002][T23086] loop4: detected capacity change from 0 to 512 [ 1561.522475][T23086] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1561.537771][T22411] EXT4-fs (loop3): unmounting filesystem. [ 1561.617057][T23086] EXT4-fs (loop4): 1 orphan inode deleted [ 1561.622650][T23086] EXT4-fs (loop4): 1 truncate cleaned up [ 1561.628141][T23086] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1561.714498][T22623] usb 1-1: Using ep0 maxpacket: 32 [ 1561.754148][T23090] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5110'. [ 1561.834553][T22623] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1561.845384][T22623] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1561.854977][T22623] usb 1-1: New USB device found, idVendor=044f, idProduct=b324, bcdDevice= 0.00 [ 1561.863852][T22623] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1561.872093][T22623] usb 1-1: config 0 descriptor?? [ 1562.082819][T22788] EXT4-fs (loop4): unmounting filesystem. [ 1562.124753][ T39] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 1562.425149][T22623] thrustmaster 0003:044F:B324.007B: item fetching failed at offset 0/3 [ 1562.433416][T22623] thrustmaster 0003:044F:B324.007B: parse failed [ 1562.439500][T22623] thrustmaster: probe of 0003:044F:B324.007B failed with error -22 [ 1562.524508][ T39] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1562.535243][ T39] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1562.546936][ T39] usb 2-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 1562.555810][ T39] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1562.564079][ T39] usb 2-1: config 0 descriptor?? [ 1562.628578][ T297] usb 1-1: USB disconnect, device number 110 [ 1562.814471][T22623] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 1563.070954][T23112] loop4: detected capacity change from 0 to 512 [ 1563.080205][T23112] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1563.162206][ T39] logitech-hidpp-device 0003:046D:C086.007C: hidraw0: USB HID v0.00 Device [HID 046d:c086] on usb-dummy_hcd.1-1/input0 [ 1563.222819][T23112] EXT4-fs (loop4): 1 orphan inode deleted [ 1563.228481][T23112] EXT4-fs (loop4): 1 truncate cleaned up [ 1563.233880][T23112] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1563.346028][ T6] usb 2-1: USB disconnect, device number 87 [ 1563.431730][T23120] loop0: detected capacity change from 0 to 256 [ 1563.446474][T22623] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1563.448400][T23120] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 1563.473915][T22623] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1563.513328][T22623] usb 4-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 1563.523265][T22623] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1563.585742][T22623] usb 4-1: config 0 descriptor?? [ 1563.920065][T22788] EXT4-fs (loop4): unmounting filesystem. [ 1563.928850][T23105] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1563.937352][T23105] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1563.945704][T23126] loop4: detected capacity change from 0 to 512 [ 1563.955288][T23126] EXT4-fs: Mount option(s) incompatible with ext2 [ 1564.005248][T23126] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5119'. [ 1564.016522][T23126] bridge0: port 1(bridge_slave_0) entered disabled state [ 1564.023831][T23126] device bridge_slave_0 left promiscuous mode [ 1564.034198][T23126] bridge0: port 1(bridge_slave_0) entered disabled state [ 1564.094655][T23105] loop3: detected capacity change from 0 to 40427 [ 1564.112995][T23105] F2FS-fs (loop3): invalid crc value [ 1564.119432][T23105] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1564.154148][T23105] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1564.174810][T23132] f2fs_ckpt-7:3: attempt to access beyond end of device [ 1564.174810][T23132] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1564.294652][T22623] usbhid 4-1:0.0: can't add hid device: -71 [ 1564.301001][T22623] usbhid: probe of 4-1:0.0 failed with error -71 [ 1564.311921][T22623] usb 4-1: USB disconnect, device number 101 [ 1564.317897][ T314] usb 2-1: new full-speed USB device number 88 using dummy_hcd [ 1564.758382][T22411] syz-executor: attempt to access beyond end of device [ 1564.758382][T22411] loop3: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 1564.772773][T22411] syz-executor: attempt to access beyond end of device [ 1564.772773][T22411] loop3: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 1564.854521][ T314] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1564.963730][T23152] bridge0: port 1(bridge_slave_0) entered blocking state [ 1564.970685][T23152] bridge0: port 1(bridge_slave_0) entered disabled state [ 1564.978093][T23152] device bridge_slave_0 entered promiscuous mode [ 1564.986172][T23152] bridge0: port 2(bridge_slave_1) entered blocking state [ 1564.993044][T23152] bridge0: port 2(bridge_slave_1) entered disabled state [ 1565.000231][T23152] device bridge_slave_1 entered promiscuous mode [ 1565.034598][ T314] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1565.058106][ T314] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1565.074387][ T314] usb 2-1: Product: syz [ 1565.079473][ T314] usb 2-1: Manufacturer: syz [ 1565.083921][ T314] usb 2-1: SerialNumber: syz [ 1565.097582][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1565.104941][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1565.113016][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1565.150096][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1565.171698][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 1565.178554][ T297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1565.191987][T23159] loop4: detected capacity change from 0 to 512 [ 1565.199873][T23159] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1565.250709][T23159] EXT4-fs (loop4): 1 orphan inode deleted [ 1565.256360][T23159] EXT4-fs (loop4): 1 truncate cleaned up [ 1565.261935][T23159] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1565.474599][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1565.482014][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1565.696341][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1565.704393][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 1565.711266][ T297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1565.724135][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1565.731999][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1565.739766][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1565.747573][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1565.760720][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1565.768841][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1565.779229][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1565.787013][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1565.794903][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1565.802091][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1565.811214][T23152] device veth0_vlan entered promiscuous mode [ 1565.820644][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1565.828657][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1565.837604][T23152] device veth1_macvtap entered promiscuous mode [ 1565.846493][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1565.854517][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1565.863586][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1565.872201][ T314] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 88 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 1565.883275][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1565.892830][ T43] device bridge_slave_1 left promiscuous mode [ 1565.899645][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 1565.907505][ T43] device bridge_slave_0 left promiscuous mode [ 1565.913473][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 1565.921537][T22788] EXT4-fs (loop4): unmounting filesystem. [ 1565.927203][ T43] device veth1_macvtap left promiscuous mode [ 1565.933058][ T43] device veth0_vlan left promiscuous mode [ 1565.958432][T23174] loop4: detected capacity change from 0 to 512 [ 1565.965198][T23174] EXT4-fs (loop4): Test dummy encryption mode enabled [ 1565.976057][T23174] EXT4-fs error (device loop4): __ext4_iget:5046: inode #11: block 1: comm syz.4.5129: invalid block [ 1565.988163][T23174] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz.4.5129: couldn't read orphan inode 11 (err -117) [ 1566.000144][T23174] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1566.435126][ T28] audit: type=1400 audit(2000008551.183:2721): avc: denied { read write } for pid=23127 comm="syz.1.5120" name="lp0" dev="devtmpfs" ino=3582 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 1566.460477][ T28] audit: type=1400 audit(2000008551.183:2722): avc: denied { open } for pid=23127 comm="syz.1.5120" path="/dev/usb/lp0" dev="devtmpfs" ino=3582 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 1566.589327][T23187] loop0: detected capacity change from 0 to 512 [ 1566.602766][T23187] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1566.625825][T22623] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 1566.635408][T23187] EXT4-fs (loop0): 1 orphan inode deleted [ 1566.644020][T23187] EXT4-fs (loop0): 1 truncate cleaned up [ 1566.649521][T23187] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1566.744553][ T39] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 1566.814224][T22788] EXT4-fs (loop4): unmounting filesystem. [ 1566.828528][T23190] loop4: detected capacity change from 0 to 512 [ 1566.847073][T23190] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1566.855908][T23190] ext4 filesystem being mounted at /24/file0 supports timestamps until 2038 (0x7fffffff) [ 1566.964476][T22623] usb 4-1: Using ep0 maxpacket: 16 [ 1567.104521][ T39] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1567.104679][T22623] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1567.115509][ T39] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1567.126347][T22623] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1567.135915][ T39] usb 3-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 1567.145542][T22623] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1567.154161][ T39] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1567.163907][T22623] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1567.172109][ T39] usb 3-1: config 0 descriptor?? [ 1567.183716][T22623] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1567.195307][T22623] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 1567.282692][T22209] EXT4-fs (loop0): unmounting filesystem. [ 1567.573671][T22623] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1567.582579][T22623] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1567.590358][T22623] usb 4-1: Product: syz [ 1567.594439][T22623] usb 4-1: Manufacturer: syz [ 1567.598860][T22623] usb 4-1: SerialNumber: syz [ 1567.666511][ T39] logitech-hidpp-device 0003:046D:C086.007D: hidraw0: USB HID v0.00 Device [HID 046d:c086] on usb-dummy_hcd.2-1/input0 [ 1567.688069][T22788] EXT4-fs (loop4): unmounting filesystem. [ 1567.874702][T22623] cdc_ncm 4-1:1.0: bind() failure [ 1567.880819][T22623] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 1567.887526][T22623] cdc_ncm 4-1:1.1: bind() failure [ 1567.895306][T22623] usb 4-1: USB disconnect, device number 102 [ 1567.902130][ T39] usb 3-1: USB disconnect, device number 100 [ 1568.055077][ T314] usb 2-1: USB disconnect, device number 88 [ 1568.074458][ C1] usblp0: nonzero write bulk status received: -108 [ 1568.084365][T23180] usblp0: removed [ 1568.823420][ T28] audit: type=1326 audit(2000008553.553:2723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23217 comm="syz.2.5142" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f18a0f7def9 code=0x0 [ 1568.838443][T23223] loop3: detected capacity change from 0 to 512 [ 1568.898542][T23223] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1568.975967][T23223] EXT4-fs (loop3): 1 orphan inode deleted [ 1568.981604][T23223] EXT4-fs (loop3): 1 truncate cleaned up [ 1568.987168][T23223] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1569.792339][T23152] EXT4-fs (loop3): unmounting filesystem. [ 1570.244516][ T314] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 1570.274345][T23240] loop3: detected capacity change from 0 to 40427 [ 1570.284624][T23240] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 1570.292286][T23240] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1570.309145][T23240] F2FS-fs (loop3): invalid crc value [ 1570.330384][T23240] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1570.600841][T23240] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 1570.607962][T23240] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1570.844114][T23256] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5149'. [ 1570.897275][ T314] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1570.909002][ T314] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1570.939109][ T314] usb 5-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 1570.948010][ T314] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1570.959451][ T314] usb 5-1: config 0 descriptor?? [ 1570.971358][ T43] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 1570.980420][ T43] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 1571.117148][T23261] loop0: detected capacity change from 0 to 128 [ 1571.446884][ T297] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 1571.784166][ T28] audit: type=1400 audit(2000008556.523:2724): avc: denied { execute } for pid=23272 comm="syz.2.5154" path="/17/bus" dev="tmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1571.914533][ T297] usb 1-1: Using ep0 maxpacket: 16 [ 1572.173272][ T297] usb 1-1: config 0 has no interfaces? [ 1572.319020][ T314] usbhid 5-1:0.0: can't add hid device: -71 [ 1572.337246][ T297] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 1572.357469][ T314] usbhid: probe of 5-1:0.0 failed with error -71 [ 1572.371312][T23289] loop4: detected capacity change from 0 to 512 [ 1572.378306][T23289] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1572.401333][ T297] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1572.409525][T23289] EXT4-fs (loop4): 1 orphan inode deleted [ 1572.415815][T23289] EXT4-fs (loop4): 1 truncate cleaned up [ 1572.421341][T23289] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1572.615961][T23294] bridge0: port 3(vlan2) entered blocking state [ 1572.642876][T23294] bridge0: port 3(vlan2) entered disabled state [ 1572.677890][ T314] usb 5-1: USB disconnect, device number 103 [ 1572.683756][ T297] usb 1-1: Product: syz [ 1572.688711][ T297] usb 1-1: Manufacturer: syz [ 1572.693165][ T297] usb 1-1: SerialNumber: syz [ 1572.698200][ T297] usb 1-1: config 0 descriptor?? [ 1573.105268][T22788] EXT4-fs (loop4): unmounting filesystem. [ 1573.137060][T23312] loop4: detected capacity change from 0 to 512 [ 1573.150484][T23312] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2213: inode #15: comm syz.4.5165: corrupted in-inode xattr [ 1573.162473][T23312] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz.4.5165: couldn't read orphan inode 15 (err -117) [ 1573.175115][T23312] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1573.372539][ T28] audit: type=1400 audit(2000008558.113:2725): avc: denied { compute_member } for pid=23311 comm="syz.4.5165" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 1573.526904][ T6] usb 1-1: USB disconnect, device number 111 [ 1573.659806][T23321] loop3: detected capacity change from 0 to 512 [ 1573.666405][T23321] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1573.678701][T23321] EXT4-fs error (device loop3): mb_free_blocks:1815: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 1573.693950][T23321] EXT4-fs (loop3): Remounting filesystem read-only [ 1573.701715][T23321] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.5168: invalid indirect mapped block 1 (level 1) [ 1574.329179][T22788] EXT4-fs (loop4): unmounting filesystem. [ 1574.338423][T23321] EXT4-fs (loop3): 1 truncate cleaned up [ 1574.344029][T23321] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1575.108437][T23340] tipc: Started in network mode [ 1575.113221][T23340] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 1575.122037][T23340] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 1575.130335][T23340] tipc: Enabled bearer , priority 10 [ 1575.565743][T23152] EXT4-fs (loop3): unmounting filesystem. [ 1576.018031][ T512] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 1576.257134][ T6] tipc: Node number set to 1 [ 1576.387265][T23363] loop4: detected capacity change from 0 to 512 [ 1576.394444][ T414] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 1576.424955][T23363] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1577.119875][ T28] audit: type=1326 audit(2000008561.743:2726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23359 comm="syz.0.5177" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3b23d7def9 code=0x0 [ 1577.215056][ T512] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1577.250590][ T512] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1577.261494][ T512] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1577.273340][T23363] EXT4-fs (loop4): 1 orphan inode deleted [ 1577.278982][T23363] EXT4-fs (loop4): 1 truncate cleaned up [ 1577.278995][ T512] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1577.279029][ T512] usb 2-1: New USB device found, idVendor=17ef, idProduct=6085, bcdDevice= 0.00 [ 1577.284390][T23363] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1577.297630][ T512] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1577.358879][ T512] usb 2-1: config 0 descriptor?? [ 1577.584831][ T414] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1577.603555][T22788] EXT4-fs (loop4): unmounting filesystem. [ 1577.636780][ T414] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1577.697558][ T414] usb 3-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 1577.708159][ T414] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1577.716734][ T414] usb 3-1: config 0 descriptor?? [ 1578.399370][T23383] loop4: detected capacity change from 0 to 256 [ 1578.445291][ T512] usbhid 2-1:0.0: can't add hid device: -71 [ 1578.452989][ T512] usbhid: probe of 2-1:0.0 failed with error -71 [ 1578.471226][T23383] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 1578.710649][ T512] usb 2-1: USB disconnect, device number 89 [ 1579.097264][T23396] netlink: 68 bytes leftover after parsing attributes in process `syz.4.5185'. [ 1579.206280][T23390] loop0: detected capacity change from 0 to 40427 [ 1579.216458][T23390] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 1579.224119][T23390] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 1579.234214][T23390] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1579.258936][T23390] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 1579.265878][T23390] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1579.279841][ T28] audit: type=1400 audit(2000008564.023:2727): avc: denied { read } for pid=23389 comm="syz.0.5184" name="ppp" dev="devtmpfs" ino=138 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1579.515781][T23407] syz.2.5186[23407] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1579.515861][T23407] syz.2.5186[23407] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1579.624609][ T414] usbhid 3-1:0.0: can't add hid device: -71 [ 1579.646862][ T414] usbhid: probe of 3-1:0.0 failed with error -71 [ 1579.725181][ T414] usb 3-1: USB disconnect, device number 101 [ 1580.086341][T23424] overlayfs: failed to resolve './file1': -2 [ 1580.508799][T23429] loop0: detected capacity change from 0 to 512 [ 1580.545352][T23429] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1580.779861][T23429] EXT4-fs (loop0): 1 orphan inode deleted [ 1580.785443][T23429] EXT4-fs (loop0): 1 truncate cleaned up [ 1580.791054][T23429] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1581.231228][T22209] EXT4-fs (loop0): unmounting filesystem. [ 1581.264128][T23448] tipc: Can't bind to reserved service type 0 [ 1581.264147][ T28] audit: type=1400 audit(2000008566.003:2728): avc: denied { bind } for pid=23447 comm="syz.4.5196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1581.329611][ T28] audit: type=1400 audit(2000008566.073:2729): avc: denied { setopt } for pid=23443 comm="syz.1.5194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1581.353672][ T28] audit: type=1400 audit(2000008566.103:2730): avc: denied { bind } for pid=23443 comm="syz.1.5194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1581.679975][T23458] loop3: detected capacity change from 0 to 512 [ 1581.901199][T23458] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1582.157327][T23458] EXT4-fs (loop3): 1 orphan inode deleted [ 1582.162893][T23458] EXT4-fs (loop3): 1 truncate cleaned up [ 1582.168387][T23458] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1583.592349][T23152] EXT4-fs (loop3): unmounting filesystem. [ 1584.271043][ T28] audit: type=1400 audit(2000008568.643:2731): avc: denied { audit_read } for pid=23477 comm="syz.2.5203" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1584.676107][T23498] tipc: Enabling of bearer rejected, failed to enable media [ 1585.484478][ T39] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 1585.873783][T23526] loop3: detected capacity change from 0 to 512 [ 1585.886354][T23526] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1585.896434][ T39] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1585.989430][ T39] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1586.032052][T23526] EXT4-fs (loop3): 1 orphan inode deleted [ 1586.037666][T23526] EXT4-fs (loop3): 1 truncate cleaned up [ 1586.043130][T23526] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1586.204495][ T39] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1586.222526][ T39] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1586.231661][ T39] usb 1-1: SerialNumber: syz [ 1586.587834][T23152] EXT4-fs (loop3): unmounting filesystem. [ 1586.625136][ T39] usb 1-1: 0:2 : does not exist [ 1586.646061][T23536] loop3: detected capacity change from 0 to 512 [ 1586.685039][T23536] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1586.723976][T23536] EXT4-fs error (device loop3): __ext4_iget:5046: inode #11: block 1: comm syz.3.5216: invalid block [ 1586.752653][T23536] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz.3.5216: couldn't read orphan inode 11 (err -117) [ 1586.764625][T23536] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1586.871466][ T28] audit: type=1400 audit(2000008571.613:2732): avc: denied { create } for pid=23539 comm="syz.1.5217" name="#165" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1586.874694][T23513] loop0: detected capacity change from 0 to 512 [ 1586.920042][T23513] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2213: inode #15: comm syz.0.5211: corrupted in-inode xattr [ 1587.214704][T23513] EXT4-fs error (device loop0): ext4_orphan_get:1401: comm syz.0.5211: couldn't read orphan inode 15 (err -117) [ 1587.220345][ T28] audit: type=1400 audit(2000008571.613:2733): avc: denied { link } for pid=23539 comm="syz.1.5217" name="#165" dev="tmpfs" ino=770 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1587.234599][T23513] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1587.253510][ T28] audit: type=1400 audit(2000008571.613:2734): avc: denied { rename } for pid=23539 comm="syz.1.5217" name="#166" dev="tmpfs" ino=770 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1587.260024][T23513] EXT4-fs (loop0): unmounting filesystem. [ 1587.835843][T23152] EXT4-fs (loop3): unmounting filesystem. [ 1588.440184][ T7301] usb 1-1: USB disconnect, device number 112 [ 1588.444013][T23559] loop3: detected capacity change from 0 to 8192 [ 1588.648318][T23573] loop4: detected capacity change from 0 to 128 [ 1589.460977][T23584] loop3: detected capacity change from 0 to 512 [ 1589.469446][T23584] EXT4-fs error (device loop3): __ext4_iget:5046: inode #11: block 1: comm syz.3.5228: invalid block [ 1589.480449][T23584] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz.3.5228: couldn't read orphan inode 11 (err -117) [ 1589.494848][T23584] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1589.608487][T23152] EXT4-fs (loop3): unmounting filesystem. [ 1590.298327][ T7301] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 1590.834719][ T7301] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1590.864035][ T7301] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1591.024789][ T7301] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1591.040384][ T7301] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1591.083040][ T7301] usb 1-1: SerialNumber: syz [ 1591.189217][T23622] loop4: detected capacity change from 0 to 256 [ 1591.202912][T23622] FAT-fs (loop4): Directory bread(block 64) failed [ 1591.209432][T23622] FAT-fs (loop4): Directory bread(block 65) failed [ 1591.216160][T23622] FAT-fs (loop4): Directory bread(block 66) failed [ 1591.222647][T23622] FAT-fs (loop4): Directory bread(block 67) failed [ 1591.229041][T23622] FAT-fs (loop4): Directory bread(block 68) failed [ 1591.235500][T23622] FAT-fs (loop4): Directory bread(block 69) failed [ 1591.241904][T23622] FAT-fs (loop4): Directory bread(block 70) failed [ 1591.248526][T23622] FAT-fs (loop4): Directory bread(block 71) failed [ 1591.255018][T23622] FAT-fs (loop4): Directory bread(block 72) failed [ 1591.261416][T23622] FAT-fs (loop4): Directory bread(block 73) failed [ 1591.454542][ T512] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 1591.489840][ T7301] usb 1-1: 0:2 : does not exist [ 1591.644460][ T414] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 1591.689587][T23599] loop0: detected capacity change from 0 to 512 [ 1591.703301][T23599] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2213: inode #15: comm syz.0.5232: corrupted in-inode xattr [ 1591.715331][ T512] usb 3-1: Using ep0 maxpacket: 8 [ 1591.717912][T23599] EXT4-fs error (device loop0): ext4_orphan_get:1401: comm syz.0.5232: couldn't read orphan inode 15 (err -117) [ 1591.732151][T23599] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1591.741300][T23599] EXT4-fs (loop0): unmounting filesystem. [ 1591.834591][ T512] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1591.845420][ T512] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1591.855032][ T512] usb 3-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 1591.863887][ T512] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1591.872529][ T512] usb 3-1: config 0 descriptor?? [ 1591.997816][ T7301] usb 1-1: USB disconnect, device number 113 [ 1592.014571][ T414] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1592.025540][ T414] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1592.035419][ T414] usb 2-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 1592.044260][ T414] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1592.053229][ T414] usb 2-1: config 0 descriptor?? [ 1592.074116][T23632] loop3: detected capacity change from 0 to 512 [ 1592.088126][T23632] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2213: inode #15: comm syz.3.5250: corrupted in-inode xattr [ 1592.100317][T23632] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz.3.5250: couldn't read orphan inode 15 (err -117) [ 1592.112374][T23632] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1592.244592][ T512] usbhid 3-1:0.0: can't add hid device: -71 [ 1592.250537][ T512] usbhid: probe of 3-1:0.0 failed with error -71 [ 1592.264789][ T512] usb 3-1: USB disconnect, device number 102 [ 1592.600549][T23642] loop0: detected capacity change from 0 to 512 [ 1592.607154][T23642] EXT4-fs: dax option not supported [ 1592.975369][T23152] EXT4-fs (loop3): unmounting filesystem. [ 1593.463279][T23652] loop4: detected capacity change from 0 to 512 [ 1593.473199][T23652] EXT4-fs (loop4): Test dummy encryption mode enabled [ 1593.483823][T23656] loop3: detected capacity change from 0 to 512 [ 1593.497108][T23652] EXT4-fs error (device loop4): __ext4_fill_super:5386: inode #2: comm syz.4.5244: casefold flag without casefold feature [ 1593.510013][T23652] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 1593.520508][T23652] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1593.545133][T23656] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 1593.560097][T23656] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.5254: invalid indirect mapped block 1 (level 1) [ 1593.573586][T23656] EXT4-fs (loop3): 1 truncate cleaned up [ 1593.575234][T23652] EXT4-fs warning (device loop4): dx_probe:838: inode #18: comm syz.4.5244: Hash in dirent, but hash is not SIPHASH [ 1593.579241][T23656] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1593.591302][T23652] EXT4-fs warning (device loop4): dx_probe:965: inode #18: comm syz.4.5244: Corrupt directory, running e2fsck is recommended [ 1593.613068][T23652] EXT4-fs error (device loop4): ext4_readdir:260: inode #18: block 44: comm syz.4.5244: path /46/bus/bus: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 1593.634000][T23652] EXT4-fs error (device loop4): ext4_readdir:260: inode #18: block 255: comm syz.4.5244: path /46/bus/bus: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 1593.654801][T23652] EXT4-fs error (device loop4): ext4_readdir:260: inode #18: block 253: comm syz.4.5244: path /46/bus/bus: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 1593.693780][T22788] EXT4-fs error (device loop4): ext4_lookup:1855: inode #15: comm syz-executor: iget: bad extra_isize 65531 (inode size 512) [ 1593.711710][T22788] EXT4-fs error (device loop4): ext4_lookup:1855: inode #15: comm syz-executor: iget: bad extra_isize 65531 (inode size 512) [ 1593.757268][T22788] EXT4-fs (loop4): unmounting filesystem. [ 1593.888953][T23666] 9pnet_fd: Insufficient options for proto=fd [ 1593.888997][ T28] audit: type=1400 audit(2000008578.633:2735): avc: denied { mounton } for pid=23654 comm="syz.3.5254" path="/22/file2/file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1594.344592][ T414] usbhid 2-1:0.0: can't add hid device: -71 [ 1594.350722][ T414] usbhid: probe of 2-1:0.0 failed with error -71 [ 1594.541472][ T414] usb 2-1: USB disconnect, device number 90 [ 1594.675983][T23672] bridge0: port 1(bridge_slave_0) entered blocking state [ 1594.763166][T23682] blk_print_req_error: 110 callbacks suppressed [ 1594.763198][T23682] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 1 [ 1594.887484][T23672] bridge0: port 1(bridge_slave_0) entered disabled state [ 1594.932205][T23672] device bridge_slave_0 entered promiscuous mode [ 1594.974044][T23672] bridge0: port 2(bridge_slave_1) entered blocking state [ 1595.004114][T23672] bridge0: port 2(bridge_slave_1) entered disabled state [ 1595.023770][T23672] device bridge_slave_1 entered promiscuous mode [ 1595.109523][ T1575] device bridge_slave_1 left promiscuous mode [ 1595.116696][ T1575] bridge0: port 2(bridge_slave_1) entered disabled state [ 1595.124880][ T1575] device veth1_macvtap left promiscuous mode [ 1595.160010][T23152] EXT4-fs (loop3): unmounting filesystem. [ 1595.660949][ T414] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1595.668726][ T414] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1595.686837][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1595.699628][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1595.710551][ T512] bridge0: port 1(bridge_slave_0) entered blocking state [ 1595.717408][ T512] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1595.733725][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1595.745649][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1595.759125][ T512] bridge0: port 2(bridge_slave_1) entered blocking state [ 1595.766002][ T512] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1595.782287][ T414] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1595.789852][ T414] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1595.798046][ T414] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1595.822819][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1595.847423][T23701] loop3: detected capacity change from 0 to 512 [ 1595.854724][T23701] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1595.908442][T23701] EXT4-fs (loop3): 1 truncate cleaned up [ 1595.916577][T23701] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1595.926564][ T414] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1595.929698][T23704] loop0: detected capacity change from 0 to 2048 [ 1595.936749][ T414] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1596.014742][ T414] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1596.028686][T23672] device veth0_vlan entered promiscuous mode [ 1596.083846][T23704] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1596.091985][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1596.102421][T23672] device veth1_macvtap entered promiscuous mode [ 1596.127043][ T28] audit: type=1400 audit(2000008580.873:2736): avc: denied { bind } for pid=23703 comm="syz.0.5256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1596.160696][ T414] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1596.169042][ T43] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 1596.184981][ T43] EXT4-fs (loop0): Delayed block allocation failed for inode 19 at logical offset 0 with max blocks 1 with error 28 [ 1596.187046][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1596.204886][ T43] EXT4-fs (loop0): This should not happen!! Data will be lost [ 1596.204886][ T43] [ 1596.215130][ T28] audit: type=1400 audit(2000008580.893:2737): avc: denied { write } for pid=23703 comm="syz.0.5256" path="socket:[116224]" dev="sockfs" ino=116224 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1596.275027][ T43] EXT4-fs (loop0): Total free blocks count 0 [ 1596.280882][ T43] EXT4-fs (loop0): Free/Dirty block details [ 1596.287857][ T43] EXT4-fs (loop0): free_blocks=2415919104 [ 1596.293430][ T43] EXT4-fs (loop0): dirty_blocks=16 [ 1596.298719][ T43] EXT4-fs (loop0): Block reservation details [ 1596.304763][ T43] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 1596.312193][T22209] EXT4-fs (loop0): unmounting filesystem. [ 1596.392374][T23711] tmpfs: Unknown parameter 'huce' [ 1596.654486][ T414] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 1596.964538][T17188] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 1596.992960][T23152] EXT4-fs (loop3): unmounting filesystem. [ 1597.074584][ T414] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1597.085474][ T414] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1597.110672][ T414] usb 2-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 1597.120791][ T414] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1597.136802][ T414] usb 2-1: config 0 descriptor?? [ 1597.224473][T17188] usb 5-1: Using ep0 maxpacket: 8 [ 1597.344488][T17188] usb 5-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1597.367131][T17188] usb 5-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1597.383080][T17188] usb 5-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 1597.392276][T17188] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1597.585749][T23738] loop0: detected capacity change from 0 to 512 [ 1597.616355][T23740] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5266'. [ 1598.004379][T23738] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1598.119094][T23738] EXT4-fs (loop0): 1 orphan inode deleted [ 1598.124768][T23738] EXT4-fs (loop0): 1 truncate cleaned up [ 1598.130286][T23738] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1598.325258][T22209] EXT4-fs (loop0): unmounting filesystem. [ 1598.608160][T23746] loop3: detected capacity change from 0 to 40427 [ 1598.619462][T23746] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 1598.624574][T17188] usb 5-1: string descriptor 0 read error: -71 [ 1598.627396][T23746] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1598.641564][T17188] hub 5-1:32.0: USB hub found [ 1598.660618][T23746] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1598.704044][T23746] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 1598.711125][T23746] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1598.742528][T23761] loop0: detected capacity change from 0 to 512 [ 1598.749684][T23761] EXT4-fs (loop0): Test dummy encryption mode enabled [ 1598.756389][T17188] hub 5-1:32.0: config failed, can't read hub descriptor (err -22) [ 1598.756736][T23761] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz.0.5271: casefold flag without casefold feature [ 1598.777250][T23761] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 1598.787322][T23761] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1598.794854][T17188] usb 5-1: USB disconnect, device number 104 [ 1599.060203][T23761] EXT4-fs warning (device loop0): dx_probe:838: inode #18: comm syz.0.5271: Hash in dirent, but hash is not SIPHASH [ 1599.072649][T23761] EXT4-fs warning (device loop0): dx_probe:965: inode #18: comm syz.0.5271: Corrupt directory, running e2fsck is recommended [ 1599.085776][T23761] EXT4-fs error (device loop0): ext4_readdir:260: inode #18: block 44: comm syz.0.5271: path /76/bus/bus: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 1599.106374][T23761] EXT4-fs error (device loop0): ext4_readdir:260: inode #18: block 255: comm syz.0.5271: path /76/bus/bus: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 1599.127173][T23761] EXT4-fs error (device loop0): ext4_readdir:260: inode #18: block 253: comm syz.0.5271: path /76/bus/bus: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 1599.155185][T22209] EXT4-fs error (device loop0): ext4_lookup:1855: inode #15: comm syz-executor: iget: bad extra_isize 65531 (inode size 512) [ 1599.168350][T22209] EXT4-fs error (device loop0): ext4_lookup:1855: inode #15: comm syz-executor: iget: bad extra_isize 65531 (inode size 512) [ 1599.194589][ T297] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 1599.242144][T22209] EXT4-fs (loop0): unmounting filesystem. [ 1599.293530][T23770] loop4: detected capacity change from 0 to 512 [ 1599.305368][T23770] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1599.324694][ T414] usbhid 2-1:0.0: can't add hid device: -71 [ 1599.336493][ T414] usbhid: probe of 2-1:0.0 failed with error -71 [ 1599.359810][ T414] usb 2-1: USB disconnect, device number 91 [ 1599.421637][T23770] EXT4-fs (loop4): 1 orphan inode deleted [ 1599.427447][T23770] EXT4-fs (loop4): 1 truncate cleaned up [ 1599.433013][T23770] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1599.878402][ T28] audit: type=1400 audit(2000008584.463:2738): avc: denied { read write } for pid=23768 comm="syz.1.5274" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1599.919244][ T28] audit: type=1400 audit(2000008584.463:2739): avc: denied { open } for pid=23768 comm="syz.1.5274" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1600.070564][ T297] usb 4-1: Using ep0 maxpacket: 16 [ 1600.098388][T23672] EXT4-fs (loop4): unmounting filesystem. [ 1600.122815][T23777] bridge0: port 1(bridge_slave_0) entered blocking state [ 1600.129912][T23777] bridge0: port 1(bridge_slave_0) entered disabled state [ 1600.138555][T23777] device bridge_slave_0 entered promiscuous mode [ 1600.147188][T23785] loop4: detected capacity change from 0 to 1024 [ 1600.147221][T23777] bridge0: port 2(bridge_slave_1) entered blocking state [ 1600.153641][T23785] EXT4-fs: Ignoring removed nobh option [ 1600.166168][T23777] bridge0: port 2(bridge_slave_1) entered disabled state [ 1600.173403][T23777] device bridge_slave_1 entered promiscuous mode [ 1600.181798][T23785] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1600.224595][ T297] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1600.239363][ T297] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1600.249571][ T297] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1600.264397][ T297] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1600.303447][ T3993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1600.311026][ T3993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1600.325730][ T3993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1600.334020][ T3993] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1600.344478][ T3993] bridge0: port 1(bridge_slave_0) entered blocking state [ 1600.351325][ T3993] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1600.359908][ T3993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1600.368102][ T3993] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1600.376387][ T3993] bridge0: port 2(bridge_slave_1) entered blocking state [ 1600.383231][ T3993] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1600.392758][ T28] audit: type=1400 audit(2000008585.143:2740): avc: denied { bind } for pid=23789 comm="syz.1.5279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1600.423245][ T3993] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1600.433285][ T3993] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1600.441157][ T297] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1600.454547][ T297] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1600.468501][ T3993] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1600.479902][ T297] usb 4-1: Product: syz [ 1600.504028][ T297] usb 4-1: Manufacturer: syz [ 1600.514858][T20930] device bridge_slave_1 left promiscuous mode [ 1600.520784][T20930] bridge0: port 2(bridge_slave_1) entered disabled state [ 1600.531807][ T297] usb 4-1: SerialNumber: syz [ 1600.536385][T20930] device bridge_slave_0 left promiscuous mode [ 1600.542403][T20930] bridge0: port 1(bridge_slave_0) entered disabled state [ 1600.568171][T20930] device veth1_macvtap left promiscuous mode [ 1600.635270][T20930] device veth0_vlan left promiscuous mode [ 1600.898527][T23777] device veth0_vlan entered promiscuous mode [ 1600.906817][T22623] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1600.917370][T22623] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1600.928512][T22623] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1600.940460][T22623] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1600.962425][T23777] device veth1_macvtap entered promiscuous mode [ 1600.971443][ T297] usb 4-1: USB disconnect, device number 103 [ 1601.010306][T22623] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1601.037970][ T7301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1601.057115][ T414] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1601.103938][T23672] EXT4-fs (loop4): unmounting filesystem. [ 1601.120407][T23804] loop4: detected capacity change from 0 to 512 [ 1601.127016][T23804] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1601.139295][T23804] EXT4-fs error (device loop4): mb_free_blocks:1815: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 1601.153807][T23804] EXT4-fs (loop4): Remounting filesystem read-only [ 1601.160514][T23804] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.5281: invalid indirect mapped block 1 (level 1) [ 1601.174014][T23804] EXT4-fs (loop4): 1 truncate cleaned up [ 1601.179856][T23804] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1602.242342][T23672] EXT4-fs (loop4): unmounting filesystem. [ 1602.258061][ T3993] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 1602.519627][T23822] overlayfs: failed to resolve './file1': -2 [ 1602.846617][ T28] audit: type=1400 audit(2000008587.203:2741): avc: denied { name_bind } for pid=23818 comm="syz.4.5284" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 1603.058347][T23826] loop3: detected capacity change from 0 to 512 [ 1603.064801][T23826] EXT4-fs: Ignoring removed nobh option [ 1603.076578][T23826] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2926: inode #16: comm syz.3.5286: corrupted xattr block 8 [ 1603.088894][T23826] EXT4-fs (loop3): Remounting filesystem read-only [ 1603.095329][T23826] EXT4-fs warning (device loop3): ext4_evict_inode:299: xattr delete (err -117) [ 1603.104388][T23826] EXT4-fs (loop3): 1 orphan inode deleted [ 1603.110437][T23826] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1603.128834][T23826] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038 (0x7fffffff) [ 1603.163303][T23830] loop4: detected capacity change from 0 to 256 [ 1603.176725][T23830] FAT-fs (loop4): Directory bread(block 64) failed [ 1603.183140][T23830] FAT-fs (loop4): Directory bread(block 65) failed [ 1603.190092][T23830] FAT-fs (loop4): Directory bread(block 66) failed [ 1603.199357][T23830] FAT-fs (loop4): Directory bread(block 67) failed [ 1603.206228][T23830] FAT-fs (loop4): Directory bread(block 68) failed [ 1603.212826][T23830] FAT-fs (loop4): Directory bread(block 69) failed [ 1603.220754][T23830] FAT-fs (loop4): Directory bread(block 70) failed [ 1603.227256][T23830] FAT-fs (loop4): Directory bread(block 71) failed [ 1603.233629][T23830] FAT-fs (loop4): Directory bread(block 72) failed [ 1603.240049][T23830] FAT-fs (loop4): Directory bread(block 73) failed [ 1603.771973][ T3993] usb 1-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 1603.784597][ T28] audit: type=1400 audit(2000008588.533:2742): avc: denied { accept } for pid=23831 comm="syz.1.5297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1603.982701][ T3993] usb 1-1: config 17 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1603.995562][ T3993] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1604.004459][ T3993] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1604.005458][T23152] EXT4-fs (loop3): unmounting filesystem. [ 1604.075061][ T3993] aiptek 1-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 1604.113366][ T3993] usb 1-1: USB disconnect, device number 114 [ 1604.451127][T23850] loop4: detected capacity change from 0 to 512 [ 1604.546602][T23850] EXT4-fs (loop4): 1 orphan inode deleted [ 1604.557559][T23850] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1604.618872][T23850] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038 (0x7fffffff) [ 1605.126684][T23672] EXT4-fs (loop4): unmounting filesystem. [ 1605.182135][T23844] loop3: detected capacity change from 0 to 40427 [ 1605.203976][T23844] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 1605.211699][T23844] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1605.236946][T23844] F2FS-fs (loop3): invalid crc value [ 1605.243277][T23844] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1605.282636][T23844] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 1605.289837][T23844] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1605.443274][ T512] usb 3-1: new full-speed USB device number 103 using dummy_hcd [ 1605.876790][T20930] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 1605.886112][T20930] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 1605.954521][ T512] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1606.067216][T23891] loop4: detected capacity change from 0 to 128 [ 1606.594674][ T512] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1606.653436][ T512] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1606.712186][ T512] usb 3-1: Product: syz [ 1606.730381][ T512] usb 3-1: Manufacturer: syz [ 1606.750882][ T512] usb 3-1: SerialNumber: syz [ 1606.835900][T23901] loop0: detected capacity change from 0 to 512 [ 1606.853012][T23904] loop3: detected capacity change from 0 to 256 [ 1606.853299][T23901] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 1606.866811][T23904] exFAT-fs (loop3): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0aabff0a, utbl_chksum : 0xe619d30d) [ 1606.876308][T23901] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.5301: invalid indirect mapped block 1 (level 1) [ 1606.904115][T23901] EXT4-fs (loop0): 1 truncate cleaned up [ 1606.909746][T23901] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1607.324477][ T39] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 1607.353632][T23912] 9pnet_fd: Insufficient options for proto=fd [ 1607.491289][ T512] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 103 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 1607.594493][ T39] usb 5-1: Using ep0 maxpacket: 16 [ 1607.702061][T23777] EXT4-fs (loop0): unmounting filesystem. [ 1607.716760][ T39] usb 5-1: config 0 has no interfaces? [ 1607.914538][ T39] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 1607.923458][ T39] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1607.931250][ T39] usb 5-1: Product: syz [ 1607.935223][ T39] usb 5-1: Manufacturer: syz [ 1607.939599][ T39] usb 5-1: SerialNumber: syz [ 1607.944740][ T39] usb 5-1: config 0 descriptor?? [ 1608.345835][ T3993] usb 5-1: USB disconnect, device number 105 [ 1608.886077][T23918] loop0: detected capacity change from 0 to 1024 [ 1609.253873][T23918] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1610.094449][ C0] usblp0: nonzero write bulk status received: -71 [ 1610.100896][ T297] usb 3-1: USB disconnect, device number 103 [ 1610.112259][T23777] EXT4-fs (loop0): unmounting filesystem. [ 1610.112425][T23926] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 1610.126045][T23915] usblp0: removed [ 1610.143681][T23939] loop3: detected capacity change from 0 to 512 [ 1610.154805][T23939] EXT4-fs: dax option not supported [ 1610.205953][T16234] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1611.504471][ T3993] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 1611.864612][ T3993] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1611.875311][ T3993] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1611.885058][ T3993] usb 1-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 1611.893992][ T3993] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1611.902663][ T3993] usb 1-1: config 0 descriptor?? [ 1612.124672][T12642] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1613.260688][T23973] loop4: detected capacity change from 0 to 1024 [ 1613.273334][T23973] EXT4-fs: Ignoring removed nobh option [ 1613.291721][T23979] loop3: detected capacity change from 0 to 128 [ 1613.323786][T23973] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1613.334458][ T3993] usbhid 1-1:0.0: can't add hid device: -71 [ 1613.341270][ T3993] usbhid: probe of 1-1:0.0 failed with error -71 [ 1613.349520][ T28] audit: type=1400 audit(2000008598.093:2743): avc: denied { setattr } for pid=23972 comm="syz.4.5315" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1613.377981][ T3993] usb 1-1: USB disconnect, device number 115 [ 1613.694482][ T39] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 1613.934520][ T39] usb 4-1: Using ep0 maxpacket: 16 [ 1614.054502][ T39] usb 4-1: config 0 has no interfaces? [ 1614.157017][T23672] EXT4-fs (loop4): unmounting filesystem. [ 1614.209710][ T28] audit: type=1400 audit(2000008598.953:2744): avc: denied { append } for pid=23995 comm="syz.4.5322" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1614.234653][ T39] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 1614.244564][ T39] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1614.252466][ T39] usb 4-1: Product: syz [ 1614.256398][ T39] usb 4-1: Manufacturer: syz [ 1614.260804][ T39] usb 4-1: SerialNumber: syz [ 1614.265875][ T39] usb 4-1: config 0 descriptor?? [ 1614.634825][ T28] audit: type=1400 audit(2000008599.383:2745): avc: denied { name_bind } for pid=24000 comm="syz.2.5324" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 1615.294773][T24012] loop0: detected capacity change from 0 to 16 [ 1615.303959][T24012] erofs: (device loop0): mounted with root inode @ nid 36. [ 1615.336979][T24012] syz.0.5326: attempt to access beyond end of device [ 1615.336979][T24012] loop0: rw=0, sector=8, nr_sectors = 16 limit=16 [ 1615.361308][T24012] syz.0.5326: attempt to access beyond end of device [ 1615.361308][T24012] loop0: rw=0, sector=8, nr_sectors = 16 limit=16 [ 1615.468223][ T28] audit: type=1400 audit(2000008600.213:2746): avc: denied { create } for pid=24013 comm="syz.2.5327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1615.935422][ T3993] usb 4-1: USB disconnect, device number 104 [ 1616.482516][T24024] binder: 24021:24024 ioctl 4018620d 0 returned -22 [ 1616.564444][ T39] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 1616.944552][ T512] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 1616.974990][ T39] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1617.005751][ T39] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1617.015644][ T39] usb 1-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 1617.024605][ T39] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1617.032867][ T39] usb 1-1: config 0 descriptor?? [ 1617.314510][ T512] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1617.324829][ T512] usb 4-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 1617.333731][ T512] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1617.335772][T24035] loop4: detected capacity change from 0 to 128 [ 1617.342423][ T512] usb 4-1: config 0 descriptor?? [ 1617.355122][T24035] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1617.363606][T24035] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038 (0x7fffffff) [ 1617.409887][ T512] usb 4-1: Found UVC 0.00 device (046d:08c1) [ 1617.416709][ T512] usb 4-1: No valid video chain found. [ 1617.525694][T24040] overlayfs: upper fs needs to support d_type. [ 1617.696385][ T28] audit: type=1400 audit(2000008602.443:2747): avc: denied { connect } for pid=24025 comm="syz.3.5330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1618.120312][ T28] audit: type=1400 audit(2000008602.733:2748): avc: denied { bpf } for pid=24048 comm="syz.1.5336" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1618.150219][ T28] audit: type=1400 audit(2000008602.733:2749): avc: denied { map_create } for pid=24048 comm="syz.1.5336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1618.171510][ T28] audit: type=1400 audit(2000008602.733:2750): avc: denied { perfmon } for pid=24048 comm="syz.1.5336" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1618.195503][ T28] audit: type=1400 audit(2000008602.733:2751): avc: denied { map_read map_write } for pid=24048 comm="syz.1.5336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1618.216011][ T28] audit: type=1400 audit(2000008602.753:2752): avc: denied { prog_load } for pid=24048 comm="syz.1.5336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1618.217804][T23672] EXT4-fs (loop4): unmounting filesystem. [ 1618.551767][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 1618.551780][ T28] audit: type=1400 audit(2000008603.223:2760): avc: denied { read } for pid=84 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 1618.579248][ T28] audit: type=1400 audit(2000008603.233:2761): avc: denied { search } for pid=84 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1618.600489][ T28] audit: type=1400 audit(2000008603.233:2762): avc: denied { open } for pid=84 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=23 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1618.651251][ T28] audit: type=1400 audit(2000008603.233:2763): avc: denied { getattr } for pid=84 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=23 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1618.788038][ T28] audit: type=1400 audit(2000008603.533:2764): avc: denied { create } for pid=24058 comm="syz.2.5338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1618.808868][ T28] audit: type=1400 audit(2000008603.533:2765): avc: denied { bind } for pid=24058 comm="syz.2.5338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1618.829411][ T28] audit: type=1400 audit(2000008603.533:2766): avc: denied { listen } for pid=24058 comm="syz.2.5338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1618.863445][ T28] audit: type=1400 audit(2000008603.533:2767): avc: denied { connect } for pid=24058 comm="syz.2.5338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1618.883780][ T28] audit: type=1400 audit(2000008603.603:2768): avc: denied { write } for pid=24058 comm="syz.2.5338" path="socket:[117863]" dev="sockfs" ino=117863 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1618.909471][ T28] audit: type=1400 audit(2000008603.603:2769): avc: denied { accept } for pid=24058 comm="syz.2.5338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1618.933846][T24064] tmpfs: Unknown parameter 'huce' [ 1619.134763][ T39] usbhid 1-1:0.0: can't add hid device: -71 [ 1619.140773][ T39] usbhid: probe of 1-1:0.0 failed with error -71 [ 1619.152908][ T39] usb 1-1: USB disconnect, device number 116 [ 1620.159674][T24081] loop4: detected capacity change from 0 to 256 [ 1620.192023][T24081] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1620.199563][ T414] usb 4-1: USB disconnect, device number 105 [ 1620.220481][T24083] loop0: detected capacity change from 0 to 512 [ 1620.256442][T24083] EXT4-fs: Ignoring removed nobh option [ 1620.267040][T24083] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2926: inode #16: comm syz.0.5344: corrupted xattr block 8 [ 1620.279356][T24083] EXT4-fs (loop0): Remounting filesystem read-only [ 1620.286362][T24083] EXT4-fs warning (device loop0): ext4_evict_inode:299: xattr delete (err -117) [ 1620.295343][T24083] EXT4-fs (loop0): 1 orphan inode deleted [ 1620.300925][T24083] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1620.309911][T24083] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038 (0x7fffffff) [ 1620.344483][T22623] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 1621.165939][ T414] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 1621.175092][T23777] EXT4-fs (loop0): unmounting filesystem. [ 1621.184535][T22623] usb 3-1: Using ep0 maxpacket: 16 [ 1621.264083][T24105] loop3: detected capacity change from 0 to 512 [ 1621.285848][T24105] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1621.294626][T24105] ext4 filesystem being mounted at /38/file0 supports timestamps until 2038 (0x7fffffff) [ 1621.395241][T22623] usb 3-1: config 0 has no interfaces? [ 1621.814484][ T414] usb 5-1: config 0 has an invalid descriptor of length 25, skipping remainder of the config [ 1621.814491][T22623] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 1621.814513][T22623] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1621.826284][ T414] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1621.842590][T22623] usb 3-1: Product: syz [ 1621.867988][T22623] usb 3-1: Manufacturer: syz [ 1621.877278][T22623] usb 3-1: SerialNumber: syz [ 1621.888159][T22623] usb 3-1: config 0 descriptor?? [ 1622.024493][ T414] usb 5-1: New USB device found, idVendor=0421, idProduct=0492, bcdDevice=22.e3 [ 1622.068231][ T414] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1622.077651][ T414] usb 5-1: Product: syz [ 1622.081680][ T414] usb 5-1: Manufacturer: syz [ 1622.138548][ T414] usb 5-1: SerialNumber: syz [ 1622.143787][ T414] usb 5-1: config 0 descriptor?? [ 1622.292002][T24120] bridge0: port 3(erspan0) entered blocking state [ 1622.298324][T24120] bridge0: port 3(erspan0) entered disabled state [ 1622.312662][T24120] device erspan0 entered promiscuous mode [ 1622.319554][T24120] bridge0: port 3(erspan0) entered blocking state [ 1622.325801][T24120] bridge0: port 3(erspan0) entered forwarding state [ 1623.117444][T23152] EXT4-fs (loop3): unmounting filesystem. [ 1624.174537][ T28] kauditd_printk_skb: 28 callbacks suppressed [ 1624.174555][ T28] audit: type=1400 audit(2000008608.893:2798): avc: denied { create } for pid=24139 comm="syz.1.5356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1624.182836][ T39] usb 3-1: USB disconnect, device number 104 [ 1624.219674][ T28] audit: type=1400 audit(2000008608.893:2799): avc: denied { write } for pid=24139 comm="syz.1.5356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1624.240124][ T28] audit: type=1400 audit(2000008608.893:2800): avc: denied { read } for pid=24139 comm="syz.1.5356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1624.260387][ T28] audit: type=1400 audit(2000008608.903:2801): avc: denied { bind } for pid=24139 comm="syz.1.5356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1624.700956][T24148] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5358'. [ 1625.774093][ T28] audit: type=1400 audit(2000008608.903:2802): avc: denied { execute } for pid=24139 comm="syz.1.5356" path="/168/cpuacct.usage_percpu_user" dev="tmpfs" ino=949 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1625.805578][ T28] audit: type=1400 audit(2000008608.903:2803): avc: denied { write } for pid=24139 comm="syz.1.5356" path="socket:[118003]" dev="sockfs" ino=118003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1626.107902][ T39] usb 5-1: USB disconnect, device number 106 [ 1626.159360][ T28] audit: type=1400 audit(2000008610.873:2804): avc: denied { sys_module } for pid=24156 comm="syz.0.5361" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1626.181456][ T28] audit: type=1400 audit(2000008610.903:2805): avc: denied { module_request } for pid=24156 comm="syz.0.5361" kmod="tty-ldisc-3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1626.696986][T24168] loop3: detected capacity change from 0 to 40427 [ 1626.703695][T24168] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 1626.711453][T24168] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1626.721583][T24168] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1626.787420][T24168] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 1626.794504][T24168] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1627.144487][T15350] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 1627.414442][T15350] usb 4-1: device descriptor read/64, error -71 [ 1627.944449][T15350] usb 4-1: device descriptor read/64, error -71 [ 1628.224474][T15350] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 1628.514633][T15350] usb 4-1: device descriptor read/64, error -71 [ 1628.904451][T15350] usb 4-1: device descriptor read/64, error -71 [ 1629.024479][T15350] usb usb4-port1: attempt power cycle [ 1629.454462][T15350] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 1629.644500][T15350] usb 4-1: device descriptor read/8, error -71 [ 1630.850456][ T28] audit: type=1400 audit(2000008615.593:2806): avc: denied { remount } for pid=24167 comm="syz.3.5363" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1630.954526][T15350] usb 4-1: device descriptor read/8, error -71 [ 1630.974205][ T28] audit: type=1400 audit(2000008615.713:2807): avc: denied { mounton } for pid=24212 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 1630.998537][ T414] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 1631.015361][ T28] audit: type=1400 audit(2000008615.713:2808): avc: denied { mount } for pid=24212 comm="syz-executor" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 1631.162804][ T28] audit: type=1400 audit(2000008615.713:2809): avc: denied { mounton } for pid=24212 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 1631.244365][T24212] bridge0: port 1(bridge_slave_0) entered blocking state [ 1631.251319][T24212] bridge0: port 1(bridge_slave_0) entered disabled state [ 1631.258576][T24212] device bridge_slave_0 entered promiscuous mode [ 1631.265262][T24212] bridge0: port 2(bridge_slave_1) entered blocking state [ 1631.272107][T24212] bridge0: port 2(bridge_slave_1) entered disabled state [ 1631.279524][T24212] device bridge_slave_1 entered promiscuous mode [ 1631.288454][ T28] audit: type=1400 audit(2000008616.033:2810): avc: denied { mount } for pid=24208 comm="syz.0.5372" name="/" dev="cgroup" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 1631.304449][ T414] usb 2-1: Using ep0 maxpacket: 16 [ 1631.350887][T24212] bridge0: port 2(bridge_slave_1) entered blocking state [ 1631.357773][T24212] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1631.364841][T24212] bridge0: port 1(bridge_slave_0) entered blocking state [ 1631.371617][T24212] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1631.384528][T15350] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 1631.392754][T17188] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1631.400812][T17188] bridge0: port 1(bridge_slave_0) entered disabled state [ 1631.408048][T17188] bridge0: port 2(bridge_slave_1) entered disabled state [ 1631.418441][ T3993] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1631.426462][ T3993] bridge0: port 1(bridge_slave_0) entered blocking state [ 1631.433289][ T3993] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1631.442472][T17188] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1631.450483][T17188] bridge0: port 2(bridge_slave_1) entered blocking state [ 1631.457328][T17188] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1631.464568][ T414] usb 2-1: config 0 has no interfaces? [ 1631.475223][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1631.482918][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1631.496463][ T3993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1631.507473][ T3993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1631.515273][ T3993] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1631.522453][ T3993] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1631.530291][T24212] device veth0_vlan entered promiscuous mode [ 1631.541493][T24212] device veth1_macvtap entered promiscuous mode [ 1631.548456][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1631.558751][T17188] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1631.568247][ T3993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1631.583774][ T28] audit: type=1400 audit(2000008616.323:2811): avc: denied { mounton } for pid=24212 comm="syz-executor" path="/root/syzkaller.IXQf0C/syz-tmp" dev="sda1" ino=8421 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 1631.608148][T15350] usb 4-1: device descriptor read/8, error -71 [ 1631.609524][ T28] audit: type=1400 audit(2000008616.323:2812): avc: denied { mount } for pid=24212 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1631.636278][ T28] audit: type=1400 audit(2000008616.333:2813): avc: denied { mount } for pid=24212 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1631.636766][ T414] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 1631.659104][ T28] audit: type=1400 audit(2000008616.353:2814): avc: denied { mounton } for pid=24212 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=370 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 1631.676310][ T414] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1631.691529][ T28] audit: type=1400 audit(2000008616.353:2815): avc: denied { mount } for pid=24212 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1631.697832][ T414] usb 2-1: Product: syz [ 1631.765515][ T414] usb 2-1: Manufacturer: syz [ 1631.782030][ T414] usb 2-1: SerialNumber: syz [ 1631.837392][ T414] usb 2-1: config 0 descriptor?? [ 1631.849017][T20930] device bridge_slave_1 left promiscuous mode [ 1631.858409][T20930] bridge0: port 2(bridge_slave_1) entered disabled state [ 1631.868099][T20930] device bridge_slave_0 left promiscuous mode [ 1631.874093][T20930] bridge0: port 1(bridge_slave_0) entered disabled state [ 1631.881342][T15350] usb 4-1: device descriptor read/8, error -71 [ 1631.888638][T20930] device veth1_macvtap left promiscuous mode [ 1632.576685][T24230] syz.0.5375[24230] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1632.576809][T24230] syz.0.5375[24230] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1632.939460][T15350] usb usb4-port1: unable to enumerate USB device [ 1632.970075][ T414] usb 2-1: USB disconnect, device number 92 [ 1632.971338][T20930] device veth0_vlan left promiscuous mode [ 1633.090921][T24230] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1633.098823][T24230] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1633.143709][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 1633.164769][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1633.176572][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 1633.204629][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1633.212664][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1633.233598][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1633.271931][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1633.290166][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1633.652420][T24246] binder: 24244:24246 ioctl 4018620d 0 returned -22 [ 1634.187880][T24255] loop4: detected capacity change from 0 to 512 [ 1634.205861][T24255] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1634.214668][T24255] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038 (0x7fffffff) [ 1634.278902][T24261] loop0: detected capacity change from 0 to 256 [ 1634.318117][T24261] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 1634.472145][T24255] EXT4-fs error (device loop4): ext4_do_update_inode:5212: inode #2: comm syz.4.5384: corrupted inode contents [ 1634.484742][T24255] EXT4-fs error (device loop4): ext4_dirty_inode:6074: inode #2: comm syz.4.5384: mark_inode_dirty error [ 1634.505346][T24255] EXT4-fs error (device loop4): ext4_do_update_inode:5212: inode #2: comm syz.4.5384: corrupted inode contents [ 1634.517557][T24255] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #2: comm syz.4.5384: mark_inode_dirty error [ 1634.532267][T24264] futex_wake_op: syz.4.5384 tries to shift op by 144; fix this program [ 1634.550276][T24212] EXT4-fs (loop4): unmounting filesystem. [ 1634.573792][T24266] loop4: detected capacity change from 0 to 256 [ 1634.586742][T24266] exFAT-fs (loop4): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0aabff0a, utbl_chksum : 0xe619d30d) [ 1634.614493][ T3993] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 1635.569273][ T3993] usb 2-1: config 0 has an invalid descriptor of length 25, skipping remainder of the config [ 1635.645430][ T3993] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1635.854556][ T3993] usb 2-1: New USB device found, idVendor=0421, idProduct=0492, bcdDevice=22.e3 [ 1635.863655][ T3993] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1635.871629][ T3993] usb 2-1: Product: syz [ 1635.875775][ T3993] usb 2-1: Manufacturer: syz [ 1635.880278][ T3993] usb 2-1: SerialNumber: syz [ 1636.281520][ T3993] usb 2-1: config 0 descriptor?? [ 1636.640280][ T28] kauditd_printk_skb: 24 callbacks suppressed [ 1636.640296][ T28] audit: type=1400 audit(2000008621.383:2840): avc: denied { create } for pid=24292 comm="syz.2.5391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1636.757101][T24297] loop0: detected capacity change from 0 to 512 [ 1636.778955][T24297] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1636.790613][T24297] EXT4-fs (loop0): 1 truncate cleaned up [ 1636.796149][T24297] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1637.078863][T24298] bridge0: port 1(bridge_slave_0) entered blocking state [ 1637.085810][T24298] bridge0: port 1(bridge_slave_0) entered disabled state [ 1637.092905][T24298] device bridge_slave_0 entered promiscuous mode [ 1637.099585][T24298] bridge0: port 2(bridge_slave_1) entered blocking state [ 1637.106555][T24298] bridge0: port 2(bridge_slave_1) entered disabled state [ 1637.113691][T24298] device bridge_slave_1 entered promiscuous mode [ 1637.154792][T24298] bridge0: port 2(bridge_slave_1) entered blocking state [ 1637.161640][T24298] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1637.168756][T24298] bridge0: port 1(bridge_slave_0) entered blocking state [ 1637.175764][T24298] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1637.199643][ T414] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1637.207072][ T414] bridge0: port 1(bridge_slave_0) entered disabled state [ 1637.214185][ T414] bridge0: port 2(bridge_slave_1) entered disabled state [ 1637.221366][ T28] audit: type=1400 audit(2000008621.973:2841): avc: denied { write } for pid=84 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1637.242567][ T28] audit: type=1400 audit(2000008621.973:2842): avc: denied { remove_name } for pid=84 comm="syslogd" name="messages" dev="tmpfs" ino=23 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1637.264455][ T39] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 1637.266231][ T28] audit: type=1400 audit(2000008621.973:2843): avc: denied { rename } for pid=84 comm="syslogd" name="messages" dev="tmpfs" ino=23 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1637.294468][ T28] audit: type=1400 audit(2000008621.973:2844): avc: denied { add_name } for pid=84 comm="syslogd" name="messages.0" dev="tmpfs" ino=22 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1637.316782][ T28] audit: type=1400 audit(2000008621.973:2845): avc: denied { unlink } for pid=84 comm="syslogd" name="messages.0" dev="tmpfs" ino=22 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1637.339037][ T28] audit: type=1400 audit(2000008621.973:2846): avc: denied { create } for pid=84 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1637.364707][ T414] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1637.372670][ T414] bridge0: port 1(bridge_slave_0) entered blocking state [ 1637.379515][ T414] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1637.387136][ T414] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1637.395281][ T414] bridge0: port 2(bridge_slave_1) entered blocking state [ 1637.402109][ T414] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1637.411847][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1637.421247][T17188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1637.434778][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1637.444173][T17188] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1637.453814][T17188] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1637.461189][T17188] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1637.468804][T24298] device veth0_vlan entered promiscuous mode [ 1637.480345][T17188] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1637.509405][T24298] device veth1_macvtap entered promiscuous mode [ 1637.519848][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1637.532824][ T3993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1637.644597][ T39] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1637.655970][ T39] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1637.666166][ T39] usb 1-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 1638.283891][ T39] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1638.329798][ T39] usb 1-1: config 0 descriptor?? [ 1638.475730][T20930] device bridge_slave_1 left promiscuous mode [ 1638.481839][T20930] bridge0: port 2(bridge_slave_1) entered disabled state [ 1638.489134][T20930] device bridge_slave_0 left promiscuous mode [ 1638.495233][T20930] bridge0: port 1(bridge_slave_0) entered disabled state [ 1638.503119][T20930] device veth1_macvtap left promiscuous mode [ 1638.508988][T20930] device veth0_vlan left promiscuous mode [ 1638.594758][ T28] audit: type=1400 audit(2000008623.343:2847): avc: denied { write } for pid=24314 comm="syz.2.5396" name="001" dev="devtmpfs" ino=159 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1638.622824][ T28] audit: type=1400 audit(2000008623.363:2848): avc: denied { getopt } for pid=24314 comm="syz.2.5396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1638.764433][ T512] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 1638.805358][ T39] arvo 0003:1E7D:30D4.007E: unknown main item tag 0x0 [ 1638.812076][ T39] arvo 0003:1E7D:30D4.007E: unknown main item tag 0x0 [ 1638.819351][ T39] arvo 0003:1E7D:30D4.007E: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.0-1/input0 [ 1639.004455][ T512] usb 4-1: Using ep0 maxpacket: 8 [ 1639.007030][ T28] audit: type=1400 audit(2000008623.753:2849): avc: denied { mounton } for pid=24296 comm="syz.0.5393" path="/26/bus/file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1639.024729][ T39] arvo 0003:1E7D:30D4.007E: couldn't init struct arvo_device [ 1639.039371][ T39] arvo 0003:1E7D:30D4.007E: couldn't install keyboard [ 1639.046740][ T39] arvo: probe of 0003:1E7D:30D4.007E failed with error -71 [ 1639.055310][ T39] usb 1-1: USB disconnect, device number 117 [ 1639.124456][ T512] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1639.135171][ T512] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1639.144700][ T512] usb 4-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 1639.153517][ T512] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1639.161874][ T512] usb 4-1: config 0 descriptor?? [ 1639.535644][T17188] usb 2-1: USB disconnect, device number 93 [ 1639.564566][ T512] usbhid 4-1:0.0: can't add hid device: -71 [ 1639.566402][T23777] EXT4-fs (loop0): unmounting filesystem. [ 1639.570339][ T512] usbhid: probe of 4-1:0.0 failed with error -71 [ 1639.585479][ T512] usb 4-1: USB disconnect, device number 110 [ 1639.693551][T24325] bridge0: port 1(bridge_slave_0) entered blocking state [ 1639.700698][T24325] bridge0: port 1(bridge_slave_0) entered disabled state [ 1639.707982][T24325] device bridge_slave_0 entered promiscuous mode [ 1639.716200][T24325] bridge0: port 2(bridge_slave_1) entered blocking state [ 1639.723076][T24325] bridge0: port 2(bridge_slave_1) entered disabled state [ 1639.730440][T24325] device bridge_slave_1 entered promiscuous mode [ 1639.770295][T24325] bridge0: port 2(bridge_slave_1) entered blocking state [ 1639.777144][T24325] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1639.784196][T24325] bridge0: port 1(bridge_slave_0) entered blocking state [ 1639.791047][T24325] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1639.809526][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1639.816936][ T512] bridge0: port 1(bridge_slave_0) entered disabled state [ 1639.823972][ T512] bridge0: port 2(bridge_slave_1) entered disabled state [ 1639.834367][ T3993] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1639.842646][ T3993] bridge0: port 1(bridge_slave_0) entered blocking state [ 1639.849512][ T3993] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1639.866259][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1639.874206][ T512] bridge0: port 2(bridge_slave_1) entered blocking state [ 1639.881043][ T512] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1639.888210][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1639.896564][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1639.905462][T20930] bridge0: port 3(erspan0) entered disabled state [ 1639.912280][T20930] device erspan0 left promiscuous mode [ 1639.917616][T20930] bridge0: port 3(erspan0) entered disabled state [ 1639.928521][T24325] device veth0_vlan entered promiscuous mode [ 1639.935126][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1639.943309][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1639.951447][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1639.959218][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1639.971821][T24325] device veth1_macvtap entered promiscuous mode [ 1639.978766][T17188] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1639.991296][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1639.999721][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1640.111808][T24332] loop3: detected capacity change from 0 to 512 [ 1640.120849][T24332] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1640.267298][T24332] EXT4-fs (loop3): 1 orphan inode deleted [ 1640.272892][T24332] EXT4-fs (loop3): 1 truncate cleaned up [ 1640.278563][T24332] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1640.300554][T20930] device bridge_slave_1 left promiscuous mode [ 1640.311811][T20930] bridge0: port 2(bridge_slave_1) entered disabled state [ 1640.319405][T20930] device bridge_slave_0 left promiscuous mode [ 1640.340478][T20930] bridge0: port 1(bridge_slave_0) entered disabled state [ 1640.350711][T20930] device veth1_macvtap left promiscuous mode [ 1640.356604][T20930] device veth0_vlan left promiscuous mode [ 1641.047283][T24343] netlink: 'syz.2.5401': attribute type 12 has an invalid length. [ 1641.828709][T24298] EXT4-fs (loop3): unmounting filesystem. [ 1641.858219][T24346] loop3: detected capacity change from 0 to 512 [ 1641.868139][T24346] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 1641.877047][T24346] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1641.883300][T24346] EXT4-fs error (device loop3): ext4_orphan_get:1422: comm syz.3.5402: bad orphan inode 15 [ 1641.893517][T24346] ext4_test_bit(bit=14, block=18) = 1 [ 1641.898899][T24346] is_bad_inode(inode)=0 [ 1641.902899][T24346] NEXT_ORPHAN(inode)=1023 [ 1641.907094][T24346] max_ino=32 [ 1641.910105][T24346] i_nlink=0 [ 1641.913149][T24346] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2926: inode #15: comm syz.3.5402: corrupted xattr block 19 [ 1641.925294][T24346] EXT4-fs warning (device loop3): ext4_evict_inode:299: xattr delete (err -117) [ 1641.934281][T24346] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1642.344443][ T6] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 1642.690861][T24298] EXT4-fs (loop3): unmounting filesystem. [ 1642.711222][ T28] kauditd_printk_skb: 16 callbacks suppressed [ 1642.711237][ T28] audit: type=1400 audit(2000008627.453:2866): avc: denied { create } for pid=24354 comm="syz.3.5404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1642.719113][ T6] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1642.742562][ T28] audit: type=1400 audit(2000008627.493:2867): avc: denied { mount } for pid=24354 comm="syz.3.5404" name="/" dev="ramfs" ino=119296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 1642.749002][ T6] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1642.780577][ T6] usb 1-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 1642.789856][ T6] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1642.821944][ T28] audit: type=1400 audit(2000008627.553:2868): avc: denied { unmount } for pid=24298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 1642.837415][ T6] usb 1-1: config 0 descriptor?? [ 1642.844625][T24361] loop3: detected capacity change from 0 to 2048 [ 1642.865681][T24361] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1642.877209][ T28] audit: type=1400 audit(2000008627.623:2869): avc: denied { remove_name } for pid=24360 comm="syz.3.5406" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1642.899948][ T28] audit: type=1400 audit(2000008627.623:2870): avc: denied { unlink } for pid=24360 comm="syz.3.5406" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1643.310821][ T28] audit: type=1400 audit(2000008628.053:2871): avc: denied { create } for pid=24356 comm="syz.2.5405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1643.330654][ T28] audit: type=1400 audit(2000008628.073:2872): avc: denied { connect } for pid=24356 comm="syz.2.5405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1643.702031][T24298] EXT4-fs (loop3): unmounting filesystem. [ 1643.773983][T24375] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5408'. [ 1643.784253][ T28] audit: type=1400 audit(2000008628.533:2873): avc: denied { write } for pid=24373 comm="syz.3.5408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1643.809644][ T28] audit: type=1400 audit(2000008628.553:2874): avc: denied { block_suspend } for pid=24369 comm="syz.2.5407" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1644.404495][ T6] usbhid 1-1:0.0: can't add hid device: -71 [ 1644.410899][ T6] usbhid: probe of 1-1:0.0 failed with error -71 [ 1644.457142][ T6] usb 1-1: USB disconnect, device number 118 [ 1644.552477][T24384] bridge0: port 1(bridge_slave_0) entered blocking state [ 1644.559391][T24384] bridge0: port 1(bridge_slave_0) entered disabled state [ 1644.567193][T24384] device bridge_slave_0 entered promiscuous mode [ 1644.574112][T24384] bridge0: port 2(bridge_slave_1) entered blocking state [ 1644.577489][T24390] loop3: detected capacity change from 0 to 1024 [ 1644.581175][T24384] bridge0: port 2(bridge_slave_1) entered disabled state [ 1644.594990][T24384] device bridge_slave_1 entered promiscuous mode [ 1644.598640][T24390] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1644.862408][T24384] bridge0: port 2(bridge_slave_1) entered blocking state [ 1644.869279][T24384] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1644.876358][T24384] bridge0: port 1(bridge_slave_0) entered blocking state [ 1644.883137][T24384] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1644.932732][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1644.943758][ T512] bridge0: port 1(bridge_slave_0) entered disabled state [ 1645.038133][ T512] bridge0: port 2(bridge_slave_1) entered disabled state [ 1645.084599][T17188] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1645.094292][T17188] bridge0: port 1(bridge_slave_0) entered blocking state [ 1645.101162][T17188] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1645.108394][T17188] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1645.116816][T17188] bridge0: port 2(bridge_slave_1) entered blocking state [ 1645.123654][T17188] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1645.135027][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1645.146305][T17188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1645.156892][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1645.164868][ T6] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 1645.176584][T17188] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1645.184246][T17188] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1645.191526][T17188] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1645.199559][T24384] device veth0_vlan entered promiscuous mode [ 1645.210236][T17188] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1645.218856][T24384] device veth1_macvtap entered promiscuous mode [ 1645.228189][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1645.237484][T17188] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1645.368528][T20930] device bridge_slave_1 left promiscuous mode [ 1645.374999][T20930] bridge0: port 2(bridge_slave_1) entered disabled state [ 1645.386855][T20930] device veth1_macvtap left promiscuous mode [ 1645.392744][T20930] device veth0_vlan left promiscuous mode [ 1646.141824][T24298] EXT4-fs (loop3): unmounting filesystem. [ 1646.261451][ T6] usb 1-1: Using ep0 maxpacket: 8 [ 1646.384765][ T6] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1646.404246][ T6] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1646.462337][T24403] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1646.727169][ T6] usb 1-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 1646.736063][ T6] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1646.745884][ T6] usb 1-1: config 0 descriptor?? [ 1646.825945][T24411] bridge0: port 1(bridge_slave_0) entered blocking state [ 1646.832877][T24411] bridge0: port 1(bridge_slave_0) entered disabled state [ 1646.840324][T24411] device bridge_slave_0 entered promiscuous mode [ 1646.847464][T24411] bridge0: port 2(bridge_slave_1) entered blocking state [ 1646.854296][T24411] bridge0: port 2(bridge_slave_1) entered disabled state [ 1646.863110][T24411] device bridge_slave_1 entered promiscuous mode [ 1647.211196][T24409] loop3: detected capacity change from 0 to 40427 [ 1647.221246][T24409] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 1647.227724][T24409] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 1647.248081][T24411] bridge0: port 2(bridge_slave_1) entered blocking state [ 1647.254966][T24411] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1647.256249][T24409] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 1647.262039][T24411] bridge0: port 1(bridge_slave_0) entered blocking state [ 1647.279881][T24411] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1647.292206][T24409] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 1647.299275][T24409] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1647.333946][ T3993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1647.347285][ T3993] bridge0: port 1(bridge_slave_0) entered disabled state [ 1647.354951][ T3993] bridge0: port 2(bridge_slave_1) entered disabled state [ 1647.368011][ T3993] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1647.376849][ T3993] bridge0: port 1(bridge_slave_0) entered blocking state [ 1647.383708][ T3993] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1647.391360][ T3993] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1647.411334][ T3993] bridge0: port 2(bridge_slave_1) entered blocking state [ 1647.418196][ T3993] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1647.425306][ T6] usbhid 1-1:0.0: can't add hid device: -71 [ 1647.430950][ T6] usbhid: probe of 1-1:0.0 failed with error -71 [ 1647.440276][ T6] usb 1-1: USB disconnect, device number 119 [ 1647.449995][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1647.985909][T24429] overlayfs: missing 'lowerdir' [ 1648.004306][ T28] audit: type=1400 audit(2000008632.733:2875): avc: denied { mounton } for pid=24408 comm="syz.3.5417" path="/8/file1/bus" dev="loop3" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 1648.026896][T22623] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1648.047319][ T414] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1648.056042][ T414] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1648.072717][T24411] device veth0_vlan entered promiscuous mode [ 1648.079559][T22623] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1648.087562][T22623] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1648.101536][T24411] device veth1_macvtap entered promiscuous mode [ 1648.110773][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1648.118387][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1648.125888][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1648.156063][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1648.180355][T24298] syz-executor: attempt to access beyond end of device [ 1648.180355][T24298] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1648.194598][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1648.213813][ T414] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1648.222257][ T414] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1648.231239][ T414] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1648.240477][ T414] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1648.886444][T24448] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5422'. [ 1649.126309][T20930] device bridge_slave_1 left promiscuous mode [ 1649.134472][T20930] bridge0: port 2(bridge_slave_1) entered disabled state [ 1649.158244][T20930] device bridge_slave_0 left promiscuous mode [ 1649.165412][ T28] audit: type=1400 audit(2000008633.913:2876): avc: denied { create } for pid=24451 comm="syz.4.5423" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1649.196232][T20930] bridge0: port 1(bridge_slave_0) entered disabled state [ 1649.204519][T17188] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 1649.230376][ T28] audit: type=1400 audit(2000008633.933:2877): avc: denied { ioctl } for pid=24451 comm="syz.4.5423" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=119658 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1649.257326][T20930] device veth1_macvtap left promiscuous mode [ 1649.259239][T24456] loop0: detected capacity change from 0 to 256 [ 1649.263171][T20930] device veth0_vlan left promiscuous mode [ 1649.271532][T24456] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 1649.291963][ T28] audit: type=1400 audit(2000008634.033:2878): avc: denied { read } for pid=24451 comm="syz.4.5423" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=119658 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1649.322625][ T28] audit: type=1400 audit(2000008634.033:2879): avc: denied { read } for pid=24451 comm="syz.4.5423" name="uinput" dev="devtmpfs" ino=170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1649.358446][ T28] audit: type=1400 audit(2000008634.033:2880): avc: denied { open } for pid=24451 comm="syz.4.5423" path="/dev/uinput" dev="devtmpfs" ino=170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1649.392251][ T28] audit: type=1400 audit(2000008634.093:2881): avc: denied { mounton } for pid=24458 comm="syz.4.5425" path="/2/file0" dev="tmpfs" ino=27 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1649.457970][ T28] audit: type=1400 audit(2000008634.133:2882): avc: denied { create } for pid=24460 comm="syz.4.5426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1649.552104][ T28] audit: type=1400 audit(2000008634.173:2883): avc: denied { setopt } for pid=24460 comm="syz.4.5426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1650.224551][T17188] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1650.236213][T17188] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1650.246214][T17188] usb 4-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 1650.300711][ T28] audit: type=1400 audit(2000008635.043:2884): avc: denied { ioctl } for pid=24470 comm="syz.0.5428" path="socket:[119695]" dev="sockfs" ino=119695 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1650.360464][T17188] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1650.369481][T17188] usb 4-1: config 0 descriptor?? [ 1650.512118][T24482] loop4: detected capacity change from 0 to 512 [ 1650.520941][T24482] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1650.607363][T24482] EXT4-fs (loop4): 1 orphan inode deleted [ 1650.612978][T24482] EXT4-fs (loop4): 1 truncate cleaned up [ 1650.618522][T24482] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1652.606969][T24411] EXT4-fs (loop4): unmounting filesystem. [ 1652.649795][T24501] loop3: detected capacity change from 0 to 16 [ 1652.673053][T24501] erofs: (device loop3): mounted with root inode @ nid 36. [ 1652.751720][T24511] loop0: detected capacity change from 0 to 256 [ 1652.765157][T24511] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1654.064732][T22623] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 1654.085315][T24501] erofs: (device loop3): z_erofs_readahead: readahead error at page 13 @ nid 36 [ 1654.086559][T17188] usbhid 4-1:0.0: can't add hid device: -71 [ 1654.175433][T17188] usbhid: probe of 4-1:0.0 failed with error -71 [ 1654.182726][T17188] usb 4-1: USB disconnect, device number 111 [ 1654.186582][T24501] erofs: (device loop3): z_erofs_readahead: readahead error at page 8 @ nid 36 [ 1654.202436][T24501] erofs: (device loop3): z_erofs_readahead: readahead error at page 6 @ nid 36 [ 1655.259019][T24501] erofs: (device loop3): z_erofs_readahead: readahead error at page 4 @ nid 36 [ 1655.389734][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 1655.389749][ T28] audit: type=1400 audit(2000008640.133:2887): avc: denied { read write } for pid=24532 comm="syz.2.5445" name="fuse" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1655.396262][T24501] erofs: (device loop3): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 36 [ 1655.421556][ T28] audit: type=1400 audit(2000008640.173:2888): avc: denied { ioctl } for pid=24500 comm="syz.3.5438" path="socket:[120013]" dev="sockfs" ino=120013 ioctlcmd=0x745a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1655.429754][T24501] erofs: (device loop3): z_erofs_readahead: readahead error at page 0 @ nid 36 [ 1655.466020][T24501] syz.3.5438: attempt to access beyond end of device [ 1655.466020][T24501] loop3: rw=524288, sector=296, nr_sectors = 16 limit=16 [ 1655.479787][T24501] syz.3.5438: attempt to access beyond end of device [ 1655.479787][T24501] loop3: rw=524288, sector=1049264, nr_sectors = 16 limit=16 [ 1655.493951][T24501] syz.3.5438: attempt to access beyond end of device [ 1655.493951][T24501] loop3: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 1655.508446][T24501] syz.3.5438: attempt to access beyond end of device [ 1655.508446][T24501] loop3: rw=524288, sector=720, nr_sectors = 80 limit=16 [ 1655.514827][ T28] audit: type=1400 audit(2000008640.183:2889): avc: denied { open } for pid=24532 comm="syz.2.5445" path="/dev/fuse" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1655.538582][T22623] usb 5-1: Using ep0 maxpacket: 16 [ 1655.550416][ T28] audit: type=1400 audit(2000008640.213:2890): avc: denied { append } for pid=24532 comm="syz.2.5445" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1655.831724][T24544] loop3: detected capacity change from 0 to 512 [ 1655.841062][T24544] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1655.933095][T24544] EXT4-fs (loop3): 1 orphan inode deleted [ 1655.938823][T24544] EXT4-fs (loop3): 1 truncate cleaned up [ 1655.944300][T24544] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1656.048018][T22623] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 1656.111267][ T297] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 1656.121058][T22623] usb 5-1: can't read configurations, error -71 [ 1656.568959][T24298] EXT4-fs (loop3): unmounting filesystem. [ 1656.924484][T22623] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 1656.974531][ T297] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 1656.985535][ T297] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 1656.996664][ T297] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1657.009461][ T297] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1657.018258][ T297] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1657.026821][ T297] usb 1-1: config 0 descriptor?? [ 1657.044510][T24534] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1657.284509][T22623] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1657.295448][T22623] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1657.305033][T22623] usb 5-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 1657.314083][T22623] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1657.322869][T22623] usb 5-1: config 0 descriptor?? [ 1657.498789][ T297] plantronics 0003:047F:FFFF.007F: unknown main item tag 0xd [ 1657.507378][ T297] plantronics 0003:047F:FFFF.007F: No inputs registered, leaving [ 1657.518326][ T297] plantronics 0003:047F:FFFF.007F: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 1657.957397][ T39] usb 1-1: USB disconnect, device number 120 [ 1657.974538][T24567] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5452'. [ 1658.376435][ T28] audit: type=1400 audit(2000008643.123:2891): avc: denied { unmount } for pid=22859 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 1659.180810][T24584] loop4: detected capacity change from 0 to 512 [ 1659.203800][T24584] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 1659.213525][T24584] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1659.220216][T24584] EXT4-fs error (device loop4): ext4_orphan_get:1422: comm syz.4.5456: bad orphan inode 15 [ 1659.234050][T24584] ext4_test_bit(bit=14, block=18) = 1 [ 1659.250685][T24584] is_bad_inode(inode)=0 [ 1659.255043][T22623] usbhid 5-1:0.0: can't add hid device: -71 [ 1659.260820][T22623] usbhid: probe of 5-1:0.0 failed with error -71 [ 1659.270458][T22623] usb 5-1: USB disconnect, device number 108 [ 1659.277466][T24584] NEXT_ORPHAN(inode)=1023 [ 1659.283959][T24584] max_ino=32 [ 1659.305938][T24584] i_nlink=0 [ 1659.310046][T24584] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2926: inode #15: comm syz.4.5456: corrupted xattr block 19 [ 1660.364757][T24584] EXT4-fs warning (device loop4): ext4_evict_inode:299: xattr delete (err -117) [ 1660.378205][T24584] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1661.692420][ T28] audit: type=1400 audit(2000008645.793:2892): avc: denied { mount } for pid=24588 comm="syz.1.5459" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 1661.952036][ T28] audit: type=1400 audit(2000008645.793:2893): avc: denied { remount } for pid=24588 comm="syz.1.5459" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 1661.955778][T24612] netlink: 4636 bytes leftover after parsing attributes in process `syz.0.5463'. [ 1661.971933][ T28] audit: type=1326 audit(2000008646.363:2894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24595 comm="syz.0.5460" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efc4e37def9 code=0x0 [ 1662.003755][ T28] audit: type=1400 audit(2000008646.673:2895): avc: denied { read write } for pid=24298 comm="syz-executor" name="loop3" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1662.028017][ T28] audit: type=1400 audit(2000008646.673:2896): avc: denied { open } for pid=24298 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1662.052516][ T28] audit: type=1400 audit(2000008646.673:2897): avc: denied { ioctl } for pid=24298 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=117 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1662.078128][ T28] audit: type=1400 audit(2000008646.673:2898): avc: denied { unmount } for pid=24384 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 1662.098244][ T28] audit: type=1400 audit(2000008646.683:2899): avc: denied { bpf } for pid=24583 comm="syz.4.5456" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1662.118720][ T28] audit: type=1400 audit(2000008646.683:2900): avc: denied { map_create } for pid=24583 comm="syz.4.5456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1662.137816][ T28] audit: type=1400 audit(2000008646.683:2901): avc: denied { map_read map_write } for pid=24583 comm="syz.4.5456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1662.914695][T24622] loop3: detected capacity change from 0 to 512 [ 1662.967172][T24622] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1663.133812][T22623] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 1663.139793][T24622] EXT4-fs (loop3): 1 orphan inode deleted [ 1663.148787][T24622] EXT4-fs (loop3): 1 truncate cleaned up [ 1663.154241][T24622] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1663.230688][T24411] EXT4-fs (loop4): unmounting filesystem. [ 1663.264490][T15350] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 1663.291441][T24298] EXT4-fs (loop3): unmounting filesystem. [ 1663.594555][T24632] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5467'. [ 1664.513247][T24641] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5470'. [ 1664.521954][T24641] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5470'. [ 1664.532293][T24641] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check. [ 1664.754453][T15350] usb 2-1: Using ep0 maxpacket: 16 [ 1664.774458][ T314] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 1664.784497][T22623] usb 1-1: New USB device found, idVendor=0403, idProduct=da73, bcdDevice=dc.8d [ 1664.793697][T22623] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1664.805791][T22623] usb 1-1: config 0 descriptor?? [ 1664.845082][T22623] usb 1-1: NDI device with a latency value of 1 [ 1664.969011][T15350] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1665.000364][T24648] loop3: detected capacity change from 0 to 512 [ 1665.392024][T24648] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1665.493539][T24648] EXT4-fs (loop3): 1 orphan inode deleted [ 1665.499189][T24648] EXT4-fs (loop3): 1 truncate cleaned up [ 1665.504613][T24648] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1665.555294][T22623] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 1665.563107][T22623] ftdi_sio ttyUSB0: unknown device type: 0xdc8d [ 1665.575855][T22623] usb 1-1: USB disconnect, device number 121 [ 1665.581974][T22623] ftdi_sio 1-1:0.0: device disconnected [ 1665.594446][T15350] usb 2-1: string descriptor 0 read error: -71 [ 1665.600470][T15350] usb 2-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=90.c4 [ 1665.609563][T15350] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1665.618073][T15350] usb 2-1: config 0 descriptor?? [ 1665.644462][T15350] usb 2-1: can't set config #0, error -71 [ 1665.650482][T15350] usb 2-1: USB disconnect, device number 94 [ 1665.669195][T24298] EXT4-fs (loop3): unmounting filesystem. [ 1665.698281][T24659] loop3: detected capacity change from 0 to 1024 [ 1665.732096][T24659] EXT4-fs: Ignoring removed orlov option [ 1665.746037][T24659] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1665.794454][ T314] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1665.811255][ T314] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1665.844420][ T314] usb 5-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 1665.853330][ T314] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1665.861892][ T314] usb 5-1: config 0 descriptor?? [ 1665.978425][T24298] EXT4-fs (loop3): unmounting filesystem. [ 1666.014475][T15350] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 1666.130117][T24669] bridge0: port 1(bridge_slave_0) entered blocking state [ 1666.137033][T24669] bridge0: port 1(bridge_slave_0) entered disabled state [ 1666.144285][T24669] device bridge_slave_0 entered promiscuous mode [ 1666.153967][T24669] bridge0: port 2(bridge_slave_1) entered blocking state [ 1666.161032][T24669] bridge0: port 2(bridge_slave_1) entered disabled state [ 1666.168442][T24669] device bridge_slave_1 entered promiscuous mode [ 1666.234412][ T6] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 1666.252332][T24669] bridge0: port 2(bridge_slave_1) entered blocking state [ 1666.259206][T24669] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1666.266285][T24669] bridge0: port 1(bridge_slave_0) entered blocking state [ 1666.273068][T24669] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1666.300300][ T414] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1666.308218][ T414] bridge0: port 1(bridge_slave_0) entered disabled state [ 1666.316262][ T414] bridge0: port 2(bridge_slave_1) entered disabled state [ 1666.328367][ T859] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1666.336465][ T859] bridge0: port 1(bridge_slave_0) entered blocking state [ 1666.343302][ T859] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1666.359935][ T414] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1666.367957][ T414] bridge0: port 2(bridge_slave_1) entered blocking state [ 1666.374504][T15350] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1666.374887][ T414] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1666.375285][ T414] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1666.400130][ T414] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1666.405718][T15350] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1666.418518][T15350] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1666.432669][T15350] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1666.439051][ T859] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1666.441573][T15350] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1666.453740][T24669] device veth0_vlan entered promiscuous mode [ 1666.465035][ T414] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1666.472696][ T414] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1666.480252][ T414] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1666.491942][ T414] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1666.496262][T15350] usb 3-1: invalid MIDI out EP 0 [ 1666.501403][T24669] device veth1_macvtap entered promiscuous mode [ 1666.515460][ T414] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1666.516676][T15350] snd-usb-audio: probe of 3-1:27.0 failed with error -22 [ 1666.536077][ T859] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1666.595400][ T8501] device bridge_slave_1 left promiscuous mode [ 1666.601432][ T8501] bridge0: port 2(bridge_slave_1) entered disabled state [ 1666.608864][ T6] usb 1-1: config 0 has no interfaces? [ 1666.614725][ T8501] device bridge_slave_0 left promiscuous mode [ 1666.621394][ T8501] bridge0: port 1(bridge_slave_0) entered disabled state [ 1666.629162][ T8501] device veth1_macvtap left promiscuous mode [ 1666.635238][ T8501] device veth0_vlan left promiscuous mode [ 1666.673019][T24680] loop3: detected capacity change from 0 to 1024 [ 1666.691666][T24680] EXT4-fs: Ignoring removed orlov option [ 1666.699245][T24680] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1666.844854][ T6] usb 1-1: New USB device found, idVendor=0499, idProduct=5ae2, bcdDevice= 9.0f [ 1666.860541][T24680] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1666.940099][ T6] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=7 [ 1666.954292][ T6] usb 1-1: Product: syz [ 1666.961452][ T6] usb 1-1: Manufacturer: syz [ 1666.966037][ T28] kauditd_printk_skb: 57 callbacks suppressed [ 1666.966050][ T28] audit: type=1400 audit(2000008651.713:2959): avc: denied { read append open } for pid=24679 comm="syz.3.5481" path="/1/file1/cpu.stat" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 1669.034600][ T6] usb 1-1: SerialNumber: syz [ 1676.034995][ T6] usb 1-1: config 0 descriptor?? [ 1678.014567][ T314] usbhid 5-1:0.0: can't add hid device: -71 [ 1678.020329][ T314] usbhid: probe of 5-1:0.0 failed with error -71 [ 1681.037706][ T314] usb 5-1: USB disconnect, device number 109 [ 1682.014437][ T6] usb 1-1: can't set config #0, error -110 SYZFAIL: failed to send rpc fd=3 want=520 sent=0 n=-1 (errno 32: Broken pipe) [ 1696.091947][ T39] usb 3-1: USB disconnect, device number 105 [ 1696.104719][T24669] EXT4-fs (loop3): unmounting filesystem. [ 1696.142659][ T28] audit: type=1400 audit(2000008680.883:2960): avc: denied { write } for pid=282 comm="syz-executor" path="pipe:[1998]" dev="pipefs" ino=1998 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 1696.272311][ T414] usb 1-1: USB disconnect, device number 122 [ 1696.394905][T24690] bridge0: port 1(bridge_slave_0) entered blocking state [ 1696.401757][T24690] bridge0: port 1(bridge_slave_0) entered disabled state [ 1696.409292][T24690] device bridge_slave_0 entered promiscuous mode [ 1696.454740][T24690] bridge0: port 2(bridge_slave_1) entered blocking state [ 1696.461592][T24690] bridge0: port 2(bridge_slave_1) entered disabled state [ 1696.469089][T24690] device bridge_slave_1 entered promiscuous mode [ 1696.874819][ T8501] device bridge_slave_1 left promiscuous mode [ 1696.880725][ T8501] bridge0: port 2(bridge_slave_1) entered disabled state [ 1696.888025][ T8501] device bridge_slave_0 left promiscuous mode [ 1696.893913][ T8501] bridge0: port 1(bridge_slave_0) entered disabled state [ 1696.901437][ T8501] device veth1_macvtap left promiscuous mode [ 1696.907258][ T8501] device veth0_vlan left promiscuous mode [ 1697.705025][ T8501] device bridge_slave_1 left promiscuous mode [ 1697.710946][ T8501] bridge0: port 2(bridge_slave_1) entered disabled state [ 1697.718187][ T8501] device bridge_slave_0 left promiscuous mode [ 1697.724081][ T8501] bridge0: port 1(bridge_slave_0) entered disabled state [ 1697.732427][ T8501] device bridge_slave_1 left promiscuous mode [ 1697.738369][ T8501] bridge0: port 2(bridge_slave_1) entered disabled state [ 1697.745536][ T8501] device bridge_slave_0 left promiscuous mode [ 1697.751426][ T8501] bridge0: port 1(bridge_slave_0) entered disabled state [ 1697.758957][ T8501] device bridge_slave_1 left promiscuous mode [ 1697.764912][ T8501] bridge0: port 2(bridge_slave_1) entered disabled state [ 1697.771941][ T8501] device bridge_slave_0 left promiscuous mode [ 1697.777926][ T8501] bridge0: port 1(bridge_slave_0) entered disabled state [ 1697.785342][ T8501] device bridge_slave_1 left promiscuous mode [ 1697.791227][ T8501] bridge0: port 2(bridge_slave_1) entered disabled state [ 1697.798446][ T8501] device bridge_slave_0 left promiscuous mode [ 1697.804334][ T8501] bridge0: port 1(bridge_slave_0) entered disabled state [ 1697.812186][ T8501] device veth1_macvtap left promiscuous mode [ 1697.818089][ T8501] device veth0_vlan left promiscuous mode [ 1697.823674][ T8501] device veth1_macvtap left promiscuous mode [ 1697.829527][ T8501] device veth0_vlan left promiscuous mode [ 1697.835341][ T8501] device veth1_macvtap left promiscuous mode [ 1697.841137][ T8501] device veth0_vlan left promiscuous mode