last executing test programs: 19.083300317s ago: executing program 0 (id=371): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x4, &(0x7f0000000780)=ANY=[@ANYBLOB="660a00000000000061114c0000000000850000005500000095"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000014da2108ab1204000000000000010902240001b30000040904410c17ff5d810009050f1f05e13f000009058303"], 0x0) syz_mount_image$exfat(&(0x7f0000000000), &(0x7f00000018c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800, &(0x7f00000001c0)={[{@gid}, {@discard}, {@namecase}, {@iocharset={'iocharset', 0x3d, 'cp1251'}}, {@dmask={'dmask', 0x3d, 0x9}}, {}, {@gid}, {@errors_remount}, {@iocharset={'iocharset', 0x3d, 'iso8859-1'}}, {@fmask}]}, 0x26, 0x1512, &(0x7f0000001b40)="$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") bpf$TOKEN_CREATE(0x24, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in6=@private1, 0x0, 0x4}]}]}, 0xfc}}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e1d, @broadcast}, 0x10) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b000000070000d60e0000000900000001"], 0x48) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x480, 0x0) io_setup(0x7f, &(0x7f0000000000)=0x0) io_getevents(r7, 0x3, 0x3, &(0x7f0000000040)=[{}, {}, {}], &(0x7f00000000c0)={0x0, 0x3938700}) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x18) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) userfaultfd(0x80001) 11.571330898s ago: executing program 0 (id=406): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000f0000000000000c00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000200b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) socket$inet(0x2, 0x3, 0x2) socket$inet(0x2, 0x3, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20000000) socket$packet(0x11, 0x2, 0x300) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x55f, &(0x7f0000000d00)="$eJzs3c9vHFcdAPDvjH9t0zROoAeogAQoBBRlN960UdVLwwWEqkqIigPikBp7Y5nsZkN2XWoTCfdvAAkkTvAncEDigNQTB24cEELigBDlgFTAAsVIHBbN7Njd2rvNNl7v1t7PR5rMj/dmvu+ts/PevrXnBTC1LkXEdkTMR8RrEbFYHE+KJW52lyzfw50HK7s7D1aS6HRe/WeSp2fHoueczJPFNUsR8fWvRHw7ORy3tbl1Z7ler90v9ivtxr1Ka3Pr6npjea22Vrtbrd5YunHthevPVw+c+Ydzj1vXi41fvPPl9Ze/8etfffLt321/8ftZsc4Wab31GKVu1ef242RmI+Ll4wg2ATPFen7C5eDxpBHxkYj4TP7+X4yZ/H8nAHCadTqL0Vns3R+gNDAFADhh0nwMLEnLEZGmRSeg3B3DezrOpPVmq33ldnPj7mp3rOx8zKW31+u1axcW/vTdPPNcku0v5Wl5er5fPbB/PSIuRMSPFp7I98srzfrqZLo8ADD1nuxt/yPiPwtpWi4PdWqfb/UAgBOjNOkCAABjp/0HgOmj/QeA6TNE+1982b997GUBAMbD538AmD7afwCYPtp/AJgqX3vllWzp7BbPv159fXPjTvP1q6u11p1yY2OlvNK8f6+81myu5c/saTzqevVm897Sc7HxRqVda7Urrc2tW43mxt32rfy53rdqc2OpFQDwfi5cfOuPSURsv/hEvkTPXA7aajjd0hHmAk6WmaOcrIMAJ5rZvmB6DdWE552E3x57WYDJ6Psw71Lfzff6yQcI4veM4EPl8seHH/83xzOcLh9wZP/3xzJJPjARjzf+/9LIywGMn/F/mF6dTnJwzv/5/SQA4FQ6wq/wdX4wqk4IMFGPmsx7JN//AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwClzNiK+E0lazucCT7N/03I54qmIOB9zye31eu1aRJyLixExt5DtL0260ADAEaV/T4r5vy4vPnv2YOp88t+FfB0R3/vpqz9+Y7ndvr+UHf/X/vGFvenDqu+ed4R5BQGA4f11mEx5+10t1j0f5B/uPFjZW46xjIe886X9yUdXdnce5Es3ZTY6nU4nopT3Jc78O4nZ4pxSRDwTETMjiL/9ZkR8rF/9k3xs5Hwx82lv/ChiPzXW+Ol74qd5WnedvXwfHUFZYNq8ld1/bvZ7/6VxKV/3f/+X8jvU0eX3v1LE3r1vtyf+bBFppk/87D1/adgYz/3mq4cOdha7aW9GPDPbL36yHz8ZEP/ZIeP/+ROf+uFLA9I6P4u4HP3j98aqtBv3Kq3NravrjeW12lrtbrV6Y+nGtReuP1+t5GPUlb2R6sP+8eKVc4PKltX/zID4pb71n98/93ND1v/n/3vtW59+d3fhYPwvfLb/z//pvvG7sjbx80PGXz7zy4HTd2fxVwfU/1E//ytDxn/7b1urQ2YFAMagtbl1Z7ler90/0kb2KXQU1zm0kRVxuMx73cXBeYoMN9/vOn+JfGNEL8uAjawzNkzmueN6VY99Y3a/rzjaK38zu+KYq5OOvBZH2ng4rliTuR8B43OoeQQAAAAAAAAAAAAAAD50xvGnS5OuIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKfX/wMAAP//8RXBxA==") r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r5, &(0x7f0000000340)={0x0, 0xffffffffffffff96, &(0x7f0000000000)={&(0x7f0000000040)={0x5, 0x609f, 0x0, {0x0, 0x2710}, {0x0, 0x2710}, {}, 0x1, @can={{0x3, 0x1}, 0x1, 0x3, 0x0, 0x0, "6ee7ba2197db18bc"}}, 0x48}, 0x1, 0x108, 0x0, 0x4}, 0x8800) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 10.562765694s ago: executing program 1 (id=411): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400ffd9b7030000000000008500000083000000bf09"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000f40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000f80)=0x15) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x4d68f}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x3c}}, 0x0) sendto$packet(r3, &(0x7f00000003c0)="8001c83a9c9e2e7312074a2786dd7b20850f9b646ef91a3d0930bbcad263d7", 0x1f, 0x20000000, &(0x7f0000000000)={0x11, 0x15, r6, 0x1, 0x10, 0x6, @local}, 0x14) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) 9.736146686s ago: executing program 1 (id=415): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000880)=@raw={'raw\x00', 0xe501, 0x3, 0x338, 0x1a0, 0x6affffff, 0x3403000b, 0x0, 0x7, 0x2a0, 0x230, 0x230, 0x2a0, 0x223, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1a0, 0x0, {}, [@common=@unspec=@conntrack3={{0xc8}, {{@ipv4, [], @ipv6=@private2, [], @ipv6=@dev, [], @ipv6=@empty}}}, @common=@unspec=@helper={{0x48}, {0x0, 'ftp-20000\x00'}}]}, @unspec=@NOTRACK={0x20}}, {{@ip={@multicast1, @multicast2, 0x0, 0x0, 'veth1_to_batadv\x00', 'batadv0\x00'}, 0x0, 0x98, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x398) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000d8ffffffb703000008000000b70400000000925e850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r2}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f00000002c0)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000fdfdfff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040000010000400404000001f7ff04b7050000040000006a0a00fe00000000850000000a000000b70000000000000095000000000000009cc6b3fcd62c061c6238975d43a4505f80e39c9f3c530cf08e467b592f868ee3b0a435df0a0e8c1bf176db2a6b2feb4b77d339707bfd2d84aaa3b1d4e984c46ea7e2b347a36f5662403e1b2be4284322a4908a0d411a9872971c7c56f0979bd10b97163c066d0e196bf02f46c7953ab1abdaf90a70f2bdf4000200000000b0c2c125080963f63223b7b80197aa3161f45346b100000000000000000089070000009876b588743794298b79dc192dff048fc207c81f28bdd3e26a1a8a0481e9f0da43bb6ca66e2f55a9ff19ffcafe3e64be06000000000000005064caec04a367c23d9fb6a6991ddb737d527d6acb15426406991c3b404984dfa2c6e94bd0339454c13a0100000082c15dc760a313e3b3ca5d3393404029e98fa883c71949a34d84030323e3d54fc5b29d27643453ad9211e3550ee5520211d9370175133f260c6882a146880b9387f1beb5418618bc83a3becf9bb57da7ba8b913c685fc6700848dc6665d73248c1f74e08ad04ce905faf32706e0000249a028044ede964362cfb2f30a246c3b2f60000fc4deb91da1368b0960b8d69bd99c64893d44f962524429dc058528e7e541c903869d96989b9a986620cb2c95c83f2a082c52764f49e51188f9418b01bcd8ae164acdac95318ec8b2c6feacdcf4b528e5e58219bc54f6ad5679e7f430e6960ed048c46e1dccca05bfa1d67c83795eae2d31968c055d325a9c794ef88b30c2de4a274878b73c05ffa88b7073be648b12bb1fee58958d6a6f31bfe568215dfbde59dad00008a73b40f09cf018cd496b36050d7fd45e3620c28f76749262e33e16429a6da35ceb1a989de81c3f8b8bc348ef2ac3781b847611fcb0a26acafdd6d9a1b17dcb9f7c493d8f8cd344a1d470ca0d6f16ab0293774b5509fb0e7113936d59d5a60dbd84a938476adeebab9ff44f531bb0200000000000000cc1fbc455a64fd449284f71761092a0302000000000000008a05d36fd9b814b4292745418c92d944763a4bf5e138d810e29a31f08f7dea7762d2d8f7e1d24cabe17ad4135d8872935ceac6eb4f046f2acc1b0efb4438abddcabb4e4e72705edfa2cddb01f44c850e4ea450aab72b589bec83bbb688e659fb426cb43d0ee993516fd4e867232cde69b6ffad447dcd92e0ef8234ff850ec3948dd1fa7afb77d951fe4abf618121b7894c106beb49a71c62df5544ef221973432ccc7e62b151eb898a01010a7ec5acd0a5dcb2de443880c8a682515d1da9a3048744acb44384d1591df789883c0560495cb0cb32283529926d25e5c7f481112ab8a82247e927fb6f256830dab3671f00500d36a17790bab7d0e89e6c15314f2b963bfc867953476b0505c7d728326d666f39e82cfcf7e7a85df288d75df24c5e4d529c349923f9a4fb882310391dd58b4cbd8def239a227724d39c3e6c40e20e07e68a22888a5c3941b7a765b92bcb37f302487bcbd93ccf3a104021ff34ddf7ffcca1a04eae963e25516a114573779b24a341dfb2e80f1f345c6d96493ffc2a18478b5bf3aab2ea59c51cf0678e1a57d0ea042d911548ff612002ddb2d54d42fbdde42b56887003d27468225b2594a05044baf314113e8894680600000000000000db6b56557a5adad95cb9a69d4de50642b4b9d6d3ba7eb534c88d443ac8b3685135dfc4da06e7f8695be614c557caed7eb0120516e1351fed7d8ffa31c8f4be364185469cfc5f25c90d71bce745dd2d58a30e0844f12c4cbbdd7a08465e665c2620d78673dfb6d9263ed7def8924cfcd48a8a3534f1a3eac9ee9f18a18106ba3d7c7a62330f5c0e98cb7982dd7bad02c8dba9c13894185bfc4bd2520b6e2043fcb3fc5eb55ecf9e6e363ea2ac40a14a6faa21b0f5a0fdb6487c51ef12c27b30255bc4f8813be88beeb5aa6f6a4151cfb90644e50630ed474df7d1635afcb1ea3f6c47b5acbba2ce5099a9387c7acb9bbd1da497611ceda25049e48ddacccbb58dddaf9a3510d65383829a51e0f416661fa80ca1eaaa6cf0824305ba4ec80400c50ffe83ccb0e6fef321190c58aca8c7c8c6d26ff5cbc2cadebda8e1219e04f8dacffd33db1a0a2e74c9eb978d80a12d0b5327bfd053000000000000000000be0d02a14708504412fa93d335992b2983c5addc191b4a21c7b340d0536b01958e15315eb5f3f9f4992c18f666359f40295fa73284c4b607669bae75bd68c3e2b770c324a0ab26b6065d7ea6a7bd80052db57506ec7cc861bf3998d07484c66630ca8173fea3f06ed1dfc70a8b90418e2dc76137e0f68cb1c8a908aef9f0f85647dba54e05028c33d94d463fb20d2e7547184b8d3611e45dff02144387f342ef9b9bf650e9d049bf65258a7bc094a6965e24611c077e1ca0891362a9d68f3ec7610c0449acf18459500f024f9b75885cd79ba32776e4a511c8a4ad922b00000000000000a9241220dfbf7d02ef507ec6fc7f5d37d835f7bed71283c431b9d8cbd9003972bf1dc6a71bedad8e19efc3edd2a7a7e555d5f3176af69920471e6e5bcb8966c813c132d65e2b99d3015e06b372e1aefaae14ee3fbc6349af362c19b59c214de66912d1a9a98d92dc197a51c29443de62caca334c46d110e50896fe50d0477771d387f40c8ef05750ca651e6e69a237dcf78666d6ab2bda1f853525494e4efdd93be38bb5fc671f8794002d7a951fd336aaf4ed1166cb459df70218c571ba1c40b028234505e5477e268326af8812c2fbb8785a223fce0a0601c2a3b58bea8c6216eadabcabe86ab46e4cd3d58ef7ce8d3c4b0bc5952e81dfc0a490d8568db6f9c51fe703c6864fae0053d2f91f49e977cdc1962dbc28c29471a72199862bc8fc6e211d136ecc87185f2437c4fce146d8579cab4fba94b2b613c9b8148d05e0690a4c4ab35aabc45801d2b82081e62b23a01b58b1ffb624f63ad2246796796160cd3682374364edac52f1becb7c6eff50823b75fb2ef516ec4ec1cb20a2535b504502d744f2099674e58f2c117c980cf0d041c8ea5c4f166bab4aa5ed200ef4dcff96f7c9c1ab8c22db0f439b23b04bcd41ffc3a0e01976ca1cf43e12d7d72f3faa4979faabd62e2dc54a980eae4d5e8c6498de331c3aba1144ef1190ea6cda641d9416c4560cab2d819eac7b04c70f141754c3ffd79da363fe8859afee531710caf1b2bf5a51142f4755cbb700c28083525a9093790096cb93417f1216000000000000000000000000000040ceb244e4cae2b65a76d41793aabccd3d0c50486eae0000000000007c012779c14ca94759266200229b58c12279817869e831cade7b09ddffffff9d93e2ad25eed43c0b9ee4fd209b5b919a42f676b9d7236fc8dd5040899d0676291407ce9ac8101dd3512f5b3ac8cf8179d1749de324000030d0f942ec4604c28d5c287d1435956784003a53eb5fe535ead8857acf0166dbd9f30a9b9c8a9b9faf1356faf269cded935b07863e4fdad8aab52686c81babd1c08f6700a2fadd413443022ea5c774ffefdd426abed08d437a4db48611fc82a18ab9f54758a1aad86d95cd186ceb55fafa3930090467b8b7bb8ae7e1c8b4b4106a381cb67fdb86def4de2076dc538bb97502b4b4350e633dc0a53d2f64ec521f6fa1cd02843a5e16074d86c9a01bc5cfae0245f1fab843c633446f5f3a43226109b7dafe7815773bd6969f04cbe15236b90000000000000000000000000000000000000000000000000000ff0779b9c005da21073c6d9680d4e547cb727addb2efe11b8b3a706569f1522b57d71bb0beccab7c8fe9e1330b2f501b2ac3cf4eba7ceda6ff8a0c8b18c5e9e2f505e833217557abb257d61af8e8c473a7585436730db75da167481ab8921fe051b250f8d8ef9c8481bb28a137d15040b0181c28dfad7c17b30c452a64c43a1167b948247c33abc765a6ba695c3cea5e32a4d1ae2dcbec2ff4268e03aad15efc6004e6b3d7f0edf8b5d4ae7846a6d43c16c90b7c5dc13ac2ff0439ab693498964cad2bb533bcd240778b7e49145c48efde42b44c01517f1a7c7707b4c4fc0900e7086ec40354504590696282286db9030f0320e2fcba8723939005347b3f744ff1973431000000000000000000000000000000000000003495d69aaf9a1d83e83511a3bf44fe753b8ad83bc34ea4d46b397e000ff267c50122aa5aaf8474ec2e57d960d963900bef84a4b3c7dd01ae4d6b5522aa8a35ae7996e298bcfea4d3677a67b52041ec21ae8003aa1c9969178b1b00e4d12ac9741fd788fb6260ec043c013907523c77f8acc20b9e2fd224ca8f0000b2b10991881e0a12f4e1c4f54b9ca7c9a0c8298d60b8b6eaa023418992d6d62b0e9faca4a3b3a805e859137cd933ef5eb8db16f159f32505725da51414562d064b551246dacd586f42d04d3fed3c087bb52ae4bc09f3846c785d1b278e661ed01fbc2415288bc9c808c4aef648d431b3029da0dec8886c3ee9cad996843d00a3b5eb54e270dd2e96c8f2fdb4c27c2d1bd467f2a14867dec67730d8a68329839d9feff688dfbe25c73f936338e7b057980da58a6303d95f17712d01005a1066ae457ae32925ce658b559c1182a74e267da57fe25b19153f1cdebaddf3f7a3479c09f2303d000000000000000000000000000000b17fedd6b6501a47d0e5b510f4a4fab5a62d5fa7e8ead851b01dbfdfe5823c2600"/3432], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000080)="5aee41dea43e63a3f7fb7f110000", 0x0, 0xf004, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) dup(r3) 8.425954605s ago: executing program 3 (id=416): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r2}, 0x10) readlink(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x88e, &(0x7f0000000080)={[{@nobarrier}, {@mblk_io_submit}, {@inlinecrypt}, {@test_dummy_encryption_v1}, {@barrier}, {@mblk_io_submit}, {@nogrpid}]}, 0x3, 0x445, &(0x7f0000000800)="$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") socket$netlink(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r6}, &(0x7f0000000240), &(0x7f00000003c0)=r8}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r7, r4, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xd32, &(0x7f0000001a00)={@local, @random="c5f9772bb146", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0xcfc, 0x6, 0x0, @loopback, @local, {[@routing={0x21, 0x8, 0x1, 0x2, 0x0, [@dev={0xfe, 0x80, '\x00', 0x2c}, @loopback, @mcast2, @loopback]}, @dstopts={0x87, 0x11, '\x00', [@pad1, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x38, {0x0, 0xc, 0x8, 0xd2, [0x3, 0x1ff, 0x3, 0x4, 0x8d38, 0x0]}}, @enc_lim={0x4, 0x1, 0x6}, @enc_lim={0x4, 0x1, 0x5}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x8, {0x0, 0x0, 0x5, 0x5}}, @calipso={0x7, 0x28, {0x1, 0x8, 0xdf, 0x9, [0xbd4e, 0x9, 0x0, 0x3b4ac682]}}, @pad1]}, @routing={0x790c9904c12c96ed, 0x0, 0x2, 0x1}, @routing={0x21, 0xe, 0x0, 0xa, 0x0, [@private2, @dev={0xfe, 0x80, '\x00', 0x3f}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @mcast1, @ipv4={'\x00', '\xff\xff', @local}, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}, @dstopts={0x0, 0x3, '\x00', [@pad1, @ra, @pad1, @hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}]}, @dstopts={0x2f, 0x1, '\x00', [@enc_lim={0x4, 0x1, 0x1}, @ra, @enc_lim={0x4, 0x1, 0x28}]}, @hopopts={0x3a, 0x167, '\x00', [@generic={0xf, 0xb3a, "94ad3e83c0c8d0352ec33fb0eab882e08ca43df28741adff949eda9d0523ba804ca24e6798138769a41841af55841d2a0e75fe42d94f402451a4e777d1618021c71fa1e3ff990f01bf992f965d7c063633e9f5305fb16fc3bcae459e72b27337a321a2ab28ffef88a19424593059dc1e90a9b756b7612240202b43a708c3740940e6e0c7e314357e38df0e7112940354d452abbfda6b7ea202a66f1b54c97c5db2d29b35b95e05af58e7f289b97e14233eb13e5ae28a1917c6e81140a42e977247d423518894d2e47c46de4ceb1d27830662536d81e954cce4c88b7e7e55461f1de7a8bdfacbbb6624b21931e69679fd66db6a856a748a8a66280595b745d441f4bd04a7984a9bacec3119520bb4f0d24dd548ca3d243c16b8645a179448880bbec2148fe1ea553f2c2bddefc0d9eca5b821c4454235a80d91ac76886eb09aa57f8e565a2909266a5d4ea7ba35160aa753d6f4ee25944a994357a038ecf64f952238bebd4e7630f1dae3965762898ff9404bd57a8784ccff6da7a60395c350d6ea42018188a0a7f4e08929432a4c16c28b978e3bceacf4f1b03a8c78db022a74adac48039dd0f39e6adfbc62f263dc4142e4cdfac7317e34cd7d65dd7c7354b5aa1caff346de6a7d7bcde6db7670aaa8a1dfd9a146fc0cd9fd2d7d13fce4a0fbc7d190b7a13cb5aff8d8b467d3917cf59c96a6cdd13450786d442d58d56e80197dadd7f1a0a4902140fbfb078609c945619d36023e2ef051122f6d2816c44e539312374245805f71dda92a675dc72d21b6ddfde1b91e5d036c4a64dd9d5a11e64a8880af584d4a5f145cbf6a19b3f0228e62a4f8eb6fa26c54dcd4435973c89f54925ab4b6f5c9795c83088af16ed7db3a5f2a45fefb75c590b5819c7b1d09db9c8fb36d8e0eee7117af57fc87b3ed5e4ce984dad1c8c4f999c701fba4aa6edee22c7b8dd5deaeb48bdfd0e9f4e2385d5ea3dca7b50c93af4db07e2e14669a7f63e490f5f9b6ba1fc8f2d795375892e55f61726754691f8ba8be74ef9fea7aeb8f81a7bcb57b7a45b90b9f8fa7ff39744d73916b231fdfb75568f3093150ee2fc738cc5f2bd6e3a85f60cee7d6e991bfcabb08b97cb9bc5709513ba0361d7c101984efbe9711136d98f17c58463d4855b5e780b92b9a4c433a6828a9bda3e64a085e9bf7ac748581b5867c4a74165777c1b50eeb24e3d8b1871af277afedf5e5e0930a3c42871c8e9e6e2fdff7494515749d5c97d8f30c82ddb69a9dd3797a969d4eef0c2f533aa2f16ea5427567c3c1fc60d4f6a3361b7f1d8e37c5ac22586deca244aee4f732214740823711af51c2b4d61ba0221f77f20c2b18bde044785b961c602b1de5fe6e93e408e1b7a45fdbcb385f177ac6b528c76ff56c58872f7d2761e2fb07fc5eff15d2029f3cb5ad05821ebc7669aa6d2a7f45847b91d174e62196762f3b16be499712cae56c0d91301495329391aa0ab126c53d4b5b2b9f3cdb7aaf4f98e7363724f02db111e0c61df0f22635bba4ea109a1504783de6380f27459e21f5e14a451ceed0fb3a3a9883e1ae2c6c2cfdedf2c6e3de51b9f42fd52598a7ae8fb40518ac83217980783357821696496b33d82ebd0b9645a4469dd928acdfa2173765e92b081ef864019a31749b2fa92b8d56a7ed554b429c874e0e497d0f2d44ed9530dcddf951799d45e7cf919a2f1d866387fe1c84dbaad94ea6540e8bd296ec98d37514b6092bb81fb2bbc0625f2693ab8f24148083ffc17ffb6a7ea6ed266838cdd71e6b7d1f46e67b66ac3cb4c3cbf6f7c716cda649ab939032fdab9154175ef80a502e795eca2fd28afd3d2b3ccfc60bfa1641df4b078cf515a48a2c494bcad2a3fd5b75a3ed10fe9d4ee104b8b772dff599e0cc9c8bcc559e97aedbb136e9a31c3aa4ab77765a8683b9b1c241d5989fad0ff7014b286960bbad0d584210a64d5394cbb53a4ab3fa912d5224674b0c0e6ae8245796fc894cdb71d52d5a7fa0711f3964dc82ec9c52c0a8660b3d647b9f5253b1db9c4b4ca3900f93dc1eb00e0c2d69a0c059f4fe10c3576833101c9f1d4acf54a83f6f82257adaceddb6391502f62dfc7c25f0efc244b1a563c5a26e768a0fb18a82a64ebd01aacd92b261369cfdc957f6ebc2827b5b3f74492441e8555c0fe4189f77b4d31eaa5a20abf6ed3d38494dde559b6d47674d9eceb1cc096a24220d0fbdd725c5efea295b113b3e5aef02f7f983abe2582d75bc05f3ff7491429869b3fdd26b385f8049e90016b788b1f7391c814a904e735b0d18861e6069e9a0b6357dec5d7b1cfae8ecd8ff1e30b178f5640edd597ef5ed409f024dc1cc1390df26e0da868f75407dea0b9e8231ff979a35385d19793f02a691d2458f3b8624b2a1c2bbfcc4985fc95cec87a9988d224feb1534cf2d51bc7cbfda0ba3d4f00cbb59b489c924a96b06f8e815354ca16c49d52172c6043c102339108f68d20d8c73a0c3c2c9176f2353bc9b2a8c9a7ea808168b1dd7c3583153f81f090824f1490bf37d3ad1ccf86b6cb837b971c53255605db5e45f8464b8da78a70f7eeb5abd24f8b8a442c256f21f34ba49a07f7fda2c39c7dd89e185524a4fefbccb626e6f86f6ba03a64dd6d463e26e2bcd4bafad1589fae34ed1e49b340db4f60e7e9e7e9e83c814dac24c1fed622fe5166bba18191500acbfe7795a2625bb9e0a1946f358416b9ad26e23801a8aeacd2065ca6e068314f1d824de574435a17e7e78cbdf6336c004b2b810edde58c7bbe8ac762ad02a171d417f7d49210a31852657a885239a147f958ada5f14becf8059f669bbc2f6a468845a52fb8f6d43f5249f34c5c4dfd2aabea276123e7db9b000880c7269f58d5f158abfd62f902017c9deee2f83a462d7c067d2eb0e71a82e16368e920965e77c4a9524619e7dd5d7d7bc9587fe9fcc370ad95e329690b2bc11741956394ae8a7678673fb56e4d629c02a8e3165afdf169a8b8b53e5fcb02658c82bc56672b93d7f028c4b1e872457802a5b94c5b501afb66c7b3fbcdf03a13446c7ec5df41e365c4210eaed9e2e394f3b8dc727d6ec2671aed1a2b63761faf8fa1b3decdcec4df3ffe3df860d895f5e62fe342103567f2938a42840454c59062f7004fce581515326131d0564762825d24c2c604d1675995d796636fa0950b5d8d09de931786dfd8a781bfe170c914d6c8748e2a3d02bf8f99bcfe59b0cc6262336cffafc3dec23fda41da310c249ec87acbf132bb18923ade989321b18caaf57013d1b99d8310512244eabe87d4b02064249ecbeeeb1a0f3002a5987930a237828de5c2012923c46ea816ca6201a8f1f008cf7fd0cb1bfd6aac7b8f10f63c33ed29648f0ccb6d9f2bcdf4b0406b94a4a1237b9e3ac8a09776df9045541961db37fbbf17b9960331b2556b764ef818d8f03ece4159861f8b234301fa8e8ceb8cf15ba01efb47607f7011cf2a5f42c5c676aa234a6df939ac9d447c2f43857aa0e0f14bd1ce7a4510ed4d935f43c5bd7a5ae0e87c4f95c14a045008035498d93dfea664261f9d55c12b8a08bf2991469fccb28de55cc4adb200a92a5e9e42cf617da8dccf794a94fd650df0587198a3ef2029a06bb01efa434eb82756accabf562b17ce92b49f309a1f70b9463a13e2257dd25d82f186ebce071390d7a69d7426bc2043f9027720bf2ef90989d7cb7a9583decbe2ecad134b25829fe255721a39c916982845c213b7facd958d908d841b16e563babc88d1eacdeca50f4331cefd9dd1b9ca15ff71f2dd90c76d92c1852b23a7e5bbeb3a33a914dbbe7692000f6a7e63d36cdbdffe76cae8a15f6d1a8f947017b69e0064e01924ae618a3cc4df4882dd014ede35e962715f2cee74cb98105a2d5c9bfcb9d11cd4e91b9399671a19f910c03a6fa569e248b339fae6f99c821a7113d2e876b842eb56ed8ecec910f853ab804cba2c04abf00909f2f48438ef44bfc912277bee1f4fe902551e020baaef7fe7f870c5516b852f1e6eb92f27d418f12c9ffa0e25183072d059db35717f2f4c657509c16f834fb7050190bb644c9b4a4"}]}], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x10}}}}}}}, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x140, 0x0) sendfile(0xffffffffffffffff, r9, 0x0, 0x3ffff) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0800000004040000040000000800420a4572d750c6000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r12 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r11}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000040000000900000000000000", @ANYRES16=r1, @ANYBLOB="000002000000002400000000000000000000007ccc63580469f4a11500", @ANYRES32=0x0, @ANYRESOCT=r12, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00'}) 7.563715578s ago: executing program 1 (id=417): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file2\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="66617374626f6f742c6e6f696e6c696e655f64656e7472792c70726a6a71756f74613d000000080000000000000007cd2c6a71666d743d76667376312c636865636b706f696e743d6d657267652c6d656d6f72793d6e6f726d616c2c6661756c745f747970653d30303030303030303030303030303030343031322c7768696e745f6d6f64653d66732d62617365642c6e6f7265236f766572792c646973636172645f756e69743d73656374696f6e2c00"], 0x21, 0x555b, &(0x7f0000006500)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file6\x00', 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000300)={0xffffffffffffffff, 0xfff, {0x0, 0x0, 0x0, 0xfffffffffffff801, 0x7, 0x0, 0x2, 0x1e, 0x0, "f91780919cde13d4c33eb95a7f8c1fbb405d36a74499690b275c505d43ac06bd1b672e886b6ad34420719bc5e27ecf744c96d078939347ef7add84373b9ac35a", "102c719744df0d64f47691147fc6b25cfb3141e90bc44aa47ca79dd0735bfb0baa556cdc260c1430d6233e2abaf148e7b7aa2fddbdba34c0d8c4510117dbac6b", "f48ee6a6808f02c49ba8be413b5d0e393f03d7f582aeafec4875d067934f3632", [0x100000000, 0x2]}}) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000010400000000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="85753eee196ac400001c00128009000100ff1e4cdcc10000000c000000000000000000002b1970c43cc2ae83a9be"], 0x3c}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) gettid() setreuid(0xee01, 0x0) ioprio_get$uid(0x3, 0xee01) creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f0000000100)=ANY=[@ANYRES64=0x0, @ANYRES16, @ANYRES8=0x0, @ANYRES64], 0xb, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x50) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00222200000096231306010003000000002a90a08358477609b3813e2503936fb3ce85eeea9335"], 0x0}, 0x0) 7.378140301s ago: executing program 3 (id=420): rename(0x0, &(0x7f0000001300)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000), 0x8) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x200}, 0x4) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x8) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x5, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x3c1, 0x3, 0x3e8, 0x1c0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x318, 0x20a, 0x278, 0x318, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x0, 0x198, 0x1c0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0x28}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ipv6={@loopback, @private1, [], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@nfacct={{0x48}, {'syz1\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x448) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x9, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0x14}, [@ldst={0x3, 0x0, 0x3, 0xa, 0x0, 0xff00}], {0x95, 0x0, 0x5}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 7.108393815s ago: executing program 4 (id=421): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) mremap(&(0x7f0000340000/0x4000)=nil, 0x4017, 0x3000, 0x3, &(0x7f0000001000/0x3000)=nil) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000080), &(0x7f0000000180)='%pS \x00'}, 0x20) 6.411369585s ago: executing program 0 (id=422): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) mremap(&(0x7f0000340000/0x4000)=nil, 0x4017, 0x3000, 0x3, &(0x7f0000001000/0x3000)=nil) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000080), &(0x7f0000000180)='%pS \x00'}, 0x20) (fail_nth: 1) 6.321242146s ago: executing program 3 (id=423): flock(0xffffffffffffffff, 0x6) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_enter\x00', r0}, 0x10) mkdir(0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000040000000500", @ANYBLOB], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000570000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r2}, 0x10) unlinkat(0xffffffffffffffff, 0x0, 0x200) 6.046173771s ago: executing program 3 (id=424): r0 = syz_usb_connect(0x5, 0x50, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001accd5910a9054a264ce50102030109023e0001030f400809049bbc000e01000d0a0d020101020401727f05240600000509000500030b24130b21c4"], 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120141014812442024040075ee69010203010902240001000010000904b8050296d1ca000905060200020d0006090582020002"], 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000900)={0x84, &(0x7f0000000f80)=ANY=[@ANYBLOB="000504000000ab"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x50, 0x20}, {0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="020000000400000007000000020000000010"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r5}, 0x10) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000180)="0b03feff6d12020002004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r6}, 0x14) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r7}, 0x10) syz_usb_disconnect(r0) r8 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$hid(0x3, 0x3f, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x224, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x4, 0x40, 0x3, [{{0x9, 0x4, 0x0, 0x3, 0x1, 0x3, 0x1, 0x3, 0x80, {0x9, 0x21, 0x4, 0x30, 0x1, {0x22, 0x525}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x80, 0x2, 0x9}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x1, 0xf0}}]}}}]}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x310, 0x0, 0x4, 0x5, 0xfa3e1024324d5e65, 0x4}, 0x10, &(0x7f00000001c0)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x7f, 0xf0, 0x8, 0x4}]}, 0x6, [{0x1c, &(0x7f0000000240)=@string={0x1c, 0x3, "5076c5cb4e1173f71ed4d304d4ab891c91024038038e1ce63ce4"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x422}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0xc2d}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x1009}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x2c01}}, {0x9c, &(0x7f0000000600)=@string={0x9c, 0x3, "3fc8d3054acc899400987073460a0b0d56cf521a2b3b8f5d25be7b345506bfa5e01b9230b2dce53e7ebb9baa11b786cdac7b55d815b9dbb938ed2ce047719e960fab36fe9df9e26234498b07fbdffaf8d1573851a9bd2182652bbab0b1c23c4f3ebc1337fd00604c8987729ea2a43150887265c494a5f48e663d4f7ec2aa4b7932328e5c00ee91ecf655a6f88680fc117d35033301be7e8cefaf"}}]}) flistxattr(r8, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000500)={0x44, &(0x7f00000005c0)={0x40, 0x6, 0x4, "9f434f5d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000b40)={0x2c, &(0x7f00000009c0)={0x0, 0x12, 0x6, "97d30c827497"}, 0x0, 0x0, 0x0, 0x0}) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20000041, 0x0, 0x0) 6.035066091s ago: executing program 0 (id=425): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400ffd9b7030000000000008500000083000000bf09"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000f40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000f80)=0x15) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x4d68f}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x3c}}, 0x0) sendto$packet(r3, &(0x7f00000003c0)="8001c83a9c9e2e7312074a2786dd7b20850f9b646ef91a3d0930bbcad263d7", 0x1f, 0x20000000, &(0x7f0000000000)={0x11, 0x15, r6, 0x1, 0x10, 0x6, @local}, 0x14) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) 5.916655502s ago: executing program 4 (id=426): ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000380)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000280), &(0x7f0000000340)=0x14) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x11, 0x20000000000001d2, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000001000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x30, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_newrule={0x38, 0x20, 0x301, 0x70bd2c, 0x8000040, {0x2, 0x20, 0x0, 0x4, 0xf4, 0x0, 0x0, 0x0, 0x10001}, [@FRA_GENERIC_POLICY=@FRA_OIFNAME={0x14, 0x11, 'pim6reg0\x00'}, @FRA_DST={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x30}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f00000000c0)={0x4, 0x8, 0x2c2f, 0x7f, 0x4, "1381146fee6d8d24902b430211e952c832fe00"}) 5.741811245s ago: executing program 0 (id=427): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) flock(0xffffffffffffffff, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000380)=ANY=[@ANYRESDEC=r0], &(0x7f0000000240)='GPL\x00', 0x1fe00, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdir(0x0, 0x0) listxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000040000000500000000000000", @ANYRES32=0x1, @ANYBLOB], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r2}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) 5.482251949s ago: executing program 0 (id=429): timer_create(0x2, &(0x7f0000000240)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3000490, &(0x7f0000000d80)={[{@dioread_lock}, {@auto_da_alloc}, {@quota}, {@norecovery}, {@auto_da_alloc}, {@noquota}, {@grpquota}, {@barrier_val}, {@grpjquota}, {@jqfmt_vfsold}]}, 0x45, 0x7b1, &(0x7f00000004c0)="$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") futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x10b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x8, 0x1, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000048000)=0x6, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) exit(0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0}, 0x0, 0x0}, 0x20) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000240), 0x208e24b) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000), 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000008400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000380)={0x3, &(0x7f0000000400)=[{0x28, 0x0, 0x0, 0xfffff010}, {0x28, 0x6, 0xec, 0xfffff028}, {0x6, 0xa5, 0x0, 0x6}]}, 0x10) r5 = socket$packet(0x11, 0x3, 0x300) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io(r6, &(0x7f0000000080)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000053c0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000980)}, {0x0}, {&(0x7f00000003c0)="108aa3da742d402ec149fd993fdbaac4f922eaa1f181df9667f853cd78e38362401cc1998f639909aa8a6d02d372df069b3ab67abb1d5e77fa526c3ade3b4093fc842692f75423758c0860", 0x4b}], 0x3}}, {{0x0, 0x0, 0x0}}], 0x2, 0x5146fbf2bca8adb6) syz_usb_ep_write(r6, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r5, &(0x7f00000001c0)="f2435f0100088000000600004305", 0xe, 0x4048040, &(0x7f0000000200)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @local}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001040)={&(0x7f0000000300)='sys_enter\x00'}, 0x10) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) 5.244725712s ago: executing program 2 (id=431): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x1c1842, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$SIOCSIFHWADDR(r4, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="110000000002"}) 5.142187584s ago: executing program 2 (id=432): prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) read$FUSE(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x10) r4 = epoll_create(0x80) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r6}, 0x10) epoll_wait(r4, &(0x7f0000000040)=[{}], 0x1, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) unshare(0x42000000) syz_mount_image$exfat(&(0x7f0000006c00), &(0x7f0000001b40)='./file0\x00', 0x208008de, &(0x7f0000000200)=ANY=[@ANYBLOB='utf8,errors=continue,namecase=1,utf8,gid=', @ANYRESHEX=0x0, @ANYBLOB=',umask=00000000000000000000077,umask=00000000000000000005676,uid=', @ANYRESHEX=0x0, @ANYBLOB=',gid=', @ANYRESHEX=0x0, @ANYBLOB="2c000ca8768ddddc191573cbd33da79641936c9de64e264f331d1b50f4c4f54702f51dcbddb39c14c19175f07a639bb65ea608fbf6fadf5d8da30ace1281bed3e61b084526e10dbe921dad84fbcabc5791f52445cb76b789ed377aa0cd17309c4df04d525e8af05fb246b33836d90656cd2daa991b916be40df3bd607ae5672e1bb90730d0ff03000000000000c5f0cf287ea707c1fc66165f74e7d8a78c37a4b86907cec1df06da3611f616718d88770a2520ceb039bc06ef4d1183", @ANYBLOB="b374a4d331905dccdc859a1983694e8f490512381512741fff30ee27d1f3037d16edba79a31b3bbf830f5e9096eeaaa5aa2b00f8676ca8410e692cb11d2934bf22070b86a25013d519132f5b816747c3879e02b38716dd62d5c238a04218213481e5724acd01f9ac8736be91e2b717e5e033"], 0x1, 0x1503, &(0x7f0000000580)="$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") pwritev2(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x5412, 0x0, 0x0) rmdir(&(0x7f0000000140)='./file0\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x7, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 5.023770446s ago: executing program 4 (id=433): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002078316e00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x8d41, 0x43) flock(r2, 0x5) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141b82, 0x0) write$cgroup_int(r3, &(0x7f0000000000)=0x700, 0x12) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000a80)=ANY=[], 0x1, 0x11e6, &(0x7f0000002480)="$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") mkdir(&(0x7f0000000000)='./control\x00', 0x81) r5 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0) mkdirat(r5, &(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8) rmdir(&(0x7f0000000040)='./control\x00') sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x0, 0x2060, 0x0) r8 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r8, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) write$binfmt_aout(r3, &(0x7f0000000640)={{0x108, 0x7, 0x1, 0x121, 0x65, 0x7ff, 0x263, 0x2}, "6c524100ee782417f4e528c59dbcc2d3f4f68aea65870bb586984a19e95c244c475de643a673df103a4fd42d7dc2d7f8f22fd3425d8ecd643c5df3a9b454b02a47da7902cd62681c5fd006a9fe00e1061038872fdbb1b4f3f5551e343708e46696da73274249bc07f6356b7449165929d857ec15f57b07f4b6e1e36cddaf3a13d85d649e42b375f40585b4aa8ba384bea6c0363576a5c3beb6430a9a1f9f6adb42957646f13ae6cd2e0bb296e80db347ff5a46564f202955f3dcba3232", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x7dd) recvfrom$inet6(r8, 0x0, 0x0, 0x40000000, 0x0, 0x0) 3.739670315s ago: executing program 2 (id=434): flock(0xffffffffffffffff, 0x6) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_enter\x00', r0}, 0x10) mkdir(0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000040000000500", @ANYBLOB], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000570000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r2}, 0x10) unlinkat(0xffffffffffffffff, 0x0, 0x200) 3.629404016s ago: executing program 2 (id=435): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000f0000000000000c00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000200b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000005b80)=@delchain={0x24, 0x26, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r5, 0x29, 0xc8, 0x0, 0xc000000) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$CAN_RAW_RECV_OWN_MSGS(r5, 0x65, 0x4, &(0x7f0000000000), 0x4) setsockopt$packet_int(r5, 0x107, 0xb, &(0x7f0000000340)=0xaf, 0x4) r7 = inotify_init1(0x80000) inotify_add_watch(r7, &(0x7f0000000080)='./file0\x00', 0x21000f82) write(r6, &(0x7f0000000200)="89", 0xffe3) 3.545511457s ago: executing program 1 (id=436): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000006740)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@jqfmt_vfsold}, {@resgid}, {@data_err_ignore}, {@jqfmt_vfsv0}, {@nobh}, {@user_xattr}, {@nobarrier}, {@jqfmt_vfsold}, {@nojournal_checksum}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x147042, 0x9c) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x1a5c42, 0xd) open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', 0xffffffffffffffff, 0x0, 0x400000000001}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r2}, 0x10) r3 = dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) 3.341612631s ago: executing program 4 (id=437): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400ffd9b7030000000000008500000083000000bf09"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000f40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000f80)=0x15) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x4d68f}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x3c}}, 0x0) sendto$packet(r3, &(0x7f00000003c0)="8001c83a9c9e2e7312074a2786dd7b20850f9b646ef91a3d0930bbcad263d7dd", 0x20, 0x20000000, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) 1.575823037s ago: executing program 4 (id=438): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="020000"], 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f00850000000400000095"], &(0x7f0000000040)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000280)='kfree\x00', r2}, 0x18) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0x84, 0x30, 0xffff, 0x0, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {}, 0x9}}]]}, {0x22}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x20000010) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000001823", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r6}, 0x18) r7 = socket(0xa, 0x2, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r9, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) close_range(r7, 0xffffffffffffffff, 0x0) 1.575095987s ago: executing program 3 (id=439): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) flock(0xffffffffffffffff, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000380)=ANY=[@ANYRESDEC=r0], &(0x7f0000000240)='GPL\x00', 0x1fe00, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdir(0x0, 0x0) listxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000040000000500000000000000", @ANYRES32=0x1, @ANYBLOB], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r2}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) 1.572268957s ago: executing program 1 (id=440): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000040)={0x3d17, 0x0, 0x200, 0x8, 0xd, "7e12105588e633bbb1df022dace17a32d211ee"}) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000006c0)=0xd) 1.568176297s ago: executing program 2 (id=441): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x10, 0x200, 0x0, 0x0, 0x94aa, 0x0, 0x0, 0x0, 0xcdf19039b9c0ce0a, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0xf000000, 0x73, 0x11, 0x43}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) 1.509487548s ago: executing program 3 (id=442): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x1c1842, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$SIOCSIFHWADDR(r4, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="110000000002"}) 883.857787ms ago: executing program 1 (id=443): ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000380)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000280), &(0x7f0000000340)=0x14) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x11, 0x20000000000001d2, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000001000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x30, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_newrule={0x38, 0x20, 0x301, 0x70bd2c, 0x8000040, {0x2, 0x20, 0x0, 0x4, 0xf4, 0x0, 0x0, 0x0, 0x10001}, [@FRA_GENERIC_POLICY=@FRA_OIFNAME={0x14, 0x11, 'pim6reg0\x00'}, @FRA_DST={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x30}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f00000000c0)={0x4, 0x8, 0x2c2f, 0x7f, 0x4, "1381146fee6d8d24902b430211e952c832fe00"}) 9.8682ms ago: executing program 2 (id=444): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000001400010000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = gettid() r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) read$ptp(r2, 0x0, 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x1, &(0x7f0000000340)={{}, {0x0, 0x989680}}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r2, 0xffffffffffffffff}, 0x4) r5 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0xa4, 0x0, 0x0, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x10, 0xfffffffc, 0xdc67}}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x9, 0x800, 0x8001, 0x382, r4, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x4, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) syz_open_procfs(r1, &(0x7f0000000380)='net/udplite6\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x2, 0x4, 0x1, 0xbf22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x60, 0x0}) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000400000001000000", @ANYRES32], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r6}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000003c0)=ANY=[@ANYRESOCT, @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe05, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r7}, 0x10) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000002c0)=@req={0x2, 0xffffffdc, 0x5, 0x1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000200)=ANY=[@ANYBLOB="ffffffffff01aaaaaaaaaa0008004500003000"], 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) 0s ago: executing program 4 (id=445): syz_usb_connect$cdc_ecm(0x3, 0x78, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000202505a1a44000000001010902"], 0x0) r0 = open(0x0, 0x121342, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) r1 = syz_open_procfs(0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0xffffffffffffffe0, &(0x7f0000000180)=0x6) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x7b7f38972dea2c54, 0x30, 0xffffffffffffffff, 0x3e25a000) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000140)={'hsr0\x00', @multicast}) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x3f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x10000, @void, @value}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) process_mrelease(r1, 0x0) r4 = creat(&(0x7f00000000c0)='./file1\x00', 0xdb) fallocate(r4, 0x0, 0x0, 0x2000402) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x19, 0x20000000000000d3, &(0x7f0000000380)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002800), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r6, 0x4008af60, &(0x7f0000000040)={@my=0x1}) socket$vsock_stream(0x28, 0x1, 0x0) r7 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r7, &(0x7f0000000200)={0x28, 0x0, 0x2710, @host}, 0xffffffffffffff42) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000380)='selinux_audited\x00', r5, 0x0, 0x3}, 0x18) lseek(r4, 0x0, 0x3) mkdirat(r4, &(0x7f0000000340)='./file1\x00', 0x0) kernel console output (not intermixed with test programs): 3.38" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 44.376859][ T28] audit: type=1400 audit(1746938290.229:177): avc: denied { getopt } for pid=482 comm="syz.3.38" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 44.427818][ T433] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 44.909334][ T433] usb 5-1: config 0 has an invalid interface number: 255 but max is 0 [ 44.957112][ T504] loop3: detected capacity change from 0 to 512 [ 45.008430][ T504] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 45.053640][ T433] usb 5-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 45.100379][ T504] EXT4-fs (loop3): 1 truncate cleaned up [ 45.106125][ T504] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 45.716549][ T433] usb 5-1: config 0 has no interface number 0 [ 45.737787][ T433] usb 5-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 45.770286][ T433] usb 5-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 45.814237][ T433] usb 5-1: config 0 interface 255 has no altsetting 0 [ 45.830286][ T433] usb 5-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 45.857312][ T284] EXT4-fs (loop3): unmounting filesystem. [ 45.863458][ T433] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.903133][ T433] usb 5-1: config 0 descriptor?? [ 45.997816][ T19] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 46.015366][ T28] audit: type=1400 audit(1746938292.019:178): avc: denied { create } for pid=507 comm="syz.3.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 46.199262][ T19] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 46.249057][ T19] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 46.290391][ T19] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 46.475575][ T19] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 46.485742][ T19] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.366095][ T19] usb 1-1: config 0 descriptor?? [ 47.407928][ T19] usb 1-1: can't set config #0, error -71 [ 47.414694][ T521] netlink: 28 bytes leftover after parsing attributes in process `syz.4.49'. [ 47.464283][ T19] usb 1-1: USB disconnect, device number 3 [ 47.474316][ T521] netlink: 28 bytes leftover after parsing attributes in process `syz.4.49'. [ 47.508836][ T433] usb 5-1: string descriptor 0 read error: -71 [ 47.516699][ T433] usb 5-1: selecting invalid altsetting 0 [ 47.687532][ T433] usb 5-1: USB disconnect, device number 3 [ 48.516138][ T28] audit: type=1400 audit(1746938294.519:179): avc: denied { bind } for pid=522 comm="syz.0.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 48.536415][ T523] netlink: 28 bytes leftover after parsing attributes in process `syz.0.50'. [ 48.545801][ T523] netlink: 28 bytes leftover after parsing attributes in process `syz.0.50'. [ 48.608958][ T532] loop1: detected capacity change from 0 to 256 [ 49.756498][ T532] FAT-fs (loop1): Directory bread(block 64) failed [ 49.775059][ T532] FAT-fs (loop1): Directory bread(block 65) failed [ 49.787899][ T532] FAT-fs (loop1): Directory bread(block 66) failed [ 49.796969][ T532] FAT-fs (loop1): Directory bread(block 67) failed [ 49.804015][ T532] FAT-fs (loop1): Directory bread(block 68) failed [ 49.817807][ T532] FAT-fs (loop1): Directory bread(block 69) failed [ 49.824388][ T532] FAT-fs (loop1): Directory bread(block 70) failed [ 49.831969][ T537] overlayfs: missing 'lowerdir' [ 49.844090][ T532] FAT-fs (loop1): Directory bread(block 71) failed [ 49.858689][ T532] FAT-fs (loop1): Directory bread(block 72) failed [ 49.865390][ T532] FAT-fs (loop1): Directory bread(block 73) failed [ 50.039471][ T545] overlayfs: missing 'lowerdir' [ 50.581493][ T28] audit: type=1400 audit(1746938296.589:180): avc: denied { ioctl } for pid=556 comm="syz.4.59" path="socket:[16026]" dev="sockfs" ino=16026 ioctlcmd=0x8955 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 50.770085][ T561] loop1: detected capacity change from 0 to 512 [ 50.798937][ T561] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 50.965719][ T561] EXT4-fs (loop1): 1 truncate cleaned up [ 50.971546][ T561] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 51.244560][ T28] audit: type=1400 audit(1746938296.999:181): avc: denied { mount } for pid=551 comm="syz.1.58" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 51.657000][ T8] Bluetooth: hci0: Frame reassembly failed (-84) [ 51.819680][ T571] loop2: detected capacity change from 0 to 512 [ 51.971964][ T285] EXT4-fs (loop1): unmounting filesystem. [ 52.036635][ T574] loop4: detected capacity change from 0 to 512 [ 52.045285][ T28] audit: type=1400 audit(1746938297.969:182): avc: denied { unmount } for pid=285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 52.066086][ T574] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 52.144129][ T574] EXT4-fs (loop4): 1 truncate cleaned up [ 52.149892][ T574] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 52.200205][ T378] Bluetooth: hci1: sending frame failed (-49) [ 52.206428][ T45] Bluetooth: hci1: Opcode 0x1003 failed: -49 [ 52.389785][ T571] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 52.804289][ T571] EXT4-fs (loop2): 1 truncate cleaned up [ 52.836357][ T571] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 53.097796][ T313] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 53.110502][ T586] loop3: detected capacity change from 0 to 1024 [ 53.153198][ T286] EXT4-fs (loop4): unmounting filesystem. [ 53.159935][ T586] EXT4-fs: Ignoring removed nobh option [ 53.199732][ T586] EXT4-fs: Ignoring removed bh option [ 53.228134][ T586] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 53.328896][ T313] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 53.347013][ T594] overlayfs: bad mount option "redirect_dir=on\fowner<00000000000000000000" [ 53.347797][ T313] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 53.356879][ T586] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 53.377794][ T313] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 53.390814][ T313] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 53.399947][ T313] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.530783][ T313] usb 2-1: config 0 descriptor?? [ 53.688766][ T575] Bluetooth: hci0: command 0x1003 tx timeout [ 53.707924][ T365] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 54.463826][ T28] audit: type=1400 audit(1746938300.359:183): avc: denied { bind } for pid=585 comm="syz.3.65" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 54.549774][ T28] audit: type=1400 audit(1746938300.359:184): avc: denied { name_bind } for pid=585 comm="syz.3.65" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 54.570689][ T28] audit: type=1400 audit(1746938300.369:185): avc: denied { node_bind } for pid=585 comm="syz.3.65" saddr=ff02::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 54.597781][ T313] usbhid 2-1:0.0: can't add hid device: -71 [ 54.603969][ T313] usbhid: probe of 2-1:0.0 failed with error -71 [ 54.610474][ T28] audit: type=1400 audit(1746938300.469:186): avc: denied { connect } for pid=585 comm="syz.3.65" laddr=ff02::1 lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 54.633331][ T313] usb 2-1: USB disconnect, device number 4 [ 54.710288][ T610] Illegal XDP return value 4294967274 on prog (id 52) dev N/A, expect packet loss! [ 54.771246][ T28] audit: type=1400 audit(1746938300.719:187): avc: denied { name_bind } for pid=606 comm="syz.4.70" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 54.804455][ T284] EXT4-fs (loop3): unmounting filesystem. [ 55.077593][ T28] audit: type=1400 audit(1746938300.719:188): avc: denied { node_bind } for pid=606 comm="syz.4.70" saddr=::1 src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 56.658927][ T28] audit: type=1400 audit(1746938302.669:189): avc: denied { read } for pid=620 comm="syz.3.74" path="socket:[16087]" dev="sockfs" ino=16087 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 56.947236][ T624] loop1: detected capacity change from 0 to 512 [ 56.956538][ T624] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 57.072281][ T624] EXT4-fs (loop1): 1 truncate cleaned up [ 57.078092][ T624] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 58.235453][ T285] EXT4-fs (loop1): unmounting filesystem. [ 58.270806][ T630] netlink: 8 bytes leftover after parsing attributes in process `syz.0.75'. [ 58.610384][ T632] overlayfs: conflicting options: userxattr,redirect_dir=on [ 58.696081][ T287] usb 4-1: new low-speed USB device number 2 using dummy_hcd [ 58.703571][ T19] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 58.793610][ T283] EXT4-fs (loop2): unmounting filesystem. [ 58.942472][ T630] syz.0.75 (630) used greatest stack depth: 20696 bytes left [ 58.951578][ T19] usb 5-1: not running at top speed; connect to a high speed hub [ 58.960057][ T19] usb 5-1: config 1 interface 0 altsetting 5 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 59.103494][ T640] loop2: detected capacity change from 0 to 512 [ 59.111987][ T640] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 59.160730][ T640] EXT4-fs (loop2): 1 truncate cleaned up [ 59.166478][ T640] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 59.218173][ T303] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 59.399679][ T303] usb 1-1: too many endpoints for config 0 interface 0 altsetting 141: 131, using maximum allowed: 30 [ 59.411330][ T303] usb 1-1: config 0 interface 0 altsetting 141 endpoint 0xD has an invalid bInterval 26, changing to 4 [ 59.443827][ T303] usb 1-1: config 0 interface 0 altsetting 141 endpoint 0xD has invalid maxpacket 55135, setting to 1023 [ 59.509543][ T303] usb 1-1: config 0 interface 0 altsetting 141 has 1 endpoint descriptor, different from the interface descriptor's value: 131 [ 59.579613][ T303] usb 1-1: config 0 interface 0 has no altsetting 0 [ 59.971927][ T303] usb 1-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 60.108265][ T19] usb 5-1: config 1 interface 0 has no altsetting 0 [ 60.127783][ T19] usb 5-1: string descriptor 0 read error: -71 [ 60.134019][ T19] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 60.232721][ T303] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.240867][ T303] usb 1-1: Product: syz [ 60.245324][ T303] usb 1-1: Manufacturer: syz [ 60.250123][ T303] usb 1-1: SerialNumber: syz [ 60.512078][ T283] EXT4-fs (loop2): unmounting filesystem. [ 60.521551][ T303] usb 1-1: config 0 descriptor?? [ 60.535651][ T303] hub 1-1:0.0: bad descriptor, ignoring hub [ 60.542669][ T303] hub: probe of 1-1:0.0 failed with error -5 [ 60.563066][ T303] snd-usb-audio: probe of 1-1:0.0 failed with error -2 [ 60.667530][ T391] udevd[391]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 60.710901][ T19] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.751012][ T19] usb 5-1: can't set config #1, error -71 [ 60.768808][ T19] usb 5-1: USB disconnect, device number 4 [ 60.935564][ T639] loop0: detected capacity change from 0 to 512 [ 61.242347][ T639] EXT4-fs: Ignoring removed bh option [ 61.256900][ T639] EXT4-fs: Ignoring removed mblk_io_submit option [ 61.275691][ T665] loop4: detected capacity change from 0 to 128 [ 61.284164][ T639] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 61.431451][ T665] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 61.465238][ T639] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 61.608154][ T665] ext4 filesystem being mounted at /16/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 61.636179][ T639] EXT4-fs (loop0): orphan cleanup on readonly fs [ 61.641296][ T665] EXT4-fs (loop4): unmounting filesystem. [ 61.646895][ T639] Quota error (device loop0): do_insert_tree: Free block already used in tree: block 4 [ 62.001618][ T639] Quota error (device loop0): qtree_write_dquot: Error -5 occurred while creating quota [ 62.538484][ T673] syz.1.86 (673) used greatest stack depth: 20536 bytes left [ 62.549530][ T639] EXT4-fs error (device loop0): ext4_acquire_dquot:6789: comm syz.0.78: Failed to acquire dquot type 1 [ 62.561185][ T639] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:477: comm syz.0.78: Invalid block bitmap block 0 in block_group 0 [ 62.575249][ T639] Quota error (device loop0): write_blk: dquota write failed [ 62.582853][ T639] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 62.629705][ T639] EXT4-fs error (device loop0): ext4_acquire_dquot:6789: comm syz.0.78: Failed to acquire dquot type 1 [ 62.643581][ T639] Quota error (device loop0): write_blk: dquota write failed [ 62.651353][ T639] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 62.837869][ T639] EXT4-fs error (device loop0): ext4_acquire_dquot:6789: comm syz.0.78: Failed to acquire dquot type 1 [ 62.898448][ T685] loop2: detected capacity change from 0 to 512 [ 62.907078][ T685] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 63.041176][ T639] EXT4-fs (loop0): 1 orphan inode deleted [ 63.101815][ T679] loop3: detected capacity change from 0 to 512 [ 63.119465][ T685] EXT4-fs (loop2): 1 truncate cleaned up [ 63.125217][ T685] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 63.627237][ T679] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 63.644900][ T639] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 63.654285][ T28] audit: type=1400 audit(1746938309.659:190): avc: denied { write } for pid=664 comm="syz.4.85" lport=135 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 63.686170][ T679] EXT4-fs (loop3): orphan cleanup on readonly fs [ 63.709364][ T679] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.88: bg 0: block 248: padding at end of block bitmap is not set [ 63.725391][ T679] Quota error (device loop3): write_blk: dquota write failed [ 63.733040][ T679] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 63.743233][ T679] EXT4-fs error (device loop3): ext4_acquire_dquot:6789: comm syz.3.88: Failed to acquire dquot type 1 [ 63.755311][ T679] EXT4-fs (loop3): 1 truncate cleaned up [ 63.762960][ T28] audit: type=1400 audit(1746938309.769:191): avc: denied { read } for pid=664 comm="syz.4.85" path="socket:[17257]" dev="sockfs" ino=17257 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 63.820986][ T28] audit: type=1400 audit(1746938309.829:192): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 63.874481][ T283] EXT4-fs (loop2): unmounting filesystem. [ 63.878440][ T679] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 63.904023][ T697] loop2: detected capacity change from 0 to 1024 [ 63.913981][ T697] EXT4-fs: Ignoring removed orlov option [ 63.921712][ T697] EXT4-fs: Ignoring removed nobh option [ 63.927759][ T697] EXT4-fs: dax option not supported [ 63.929208][ T282] EXT4-fs (loop0): unmounting filesystem. [ 63.952780][ T697] loop2: detected capacity change from 0 to 1024 [ 63.967830][ T617] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 63.985169][ T697] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 64.018361][ T283] EXT4-fs (loop2): unmounting filesystem. [ 64.037882][ T675] usb 1-1: USB disconnect, device number 4 [ 64.191029][ T617] usb 2-1: not running at top speed; connect to a high speed hub [ 64.262043][ T617] usb 2-1: config 1 interface 0 altsetting 5 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 64.273662][ T617] usb 2-1: config 1 interface 0 has no altsetting 0 [ 64.385336][ T617] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 64.394493][ T617] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.402648][ T617] usb 2-1: Product: 뻯穢붥玅á€ä®•ë¼³âž¶ì‘§é‡â¹žãº»æ‘°è‰˜êž­éŠŠßŒê¤ê¢ä£›í‡¶î“µë©½èŽ˜ï®³è»¶Ò¹ê•¿ë©‘浂逇ꋩƪ윈숓彼겱䣡厄晴욎㬦致ﴺ즧臤ꈋá„ሔ酻☜牷ï˜çŸŽà¢µê•†Ô²à¤†à³—á¥ãŒ—郴àªè«¼î½¼ê©‘é¾ã¼§ì‰Šâ³šã¯Šá„¹â¨’謓經î¶ãµã‡œáŸ½â©’咷竹啔ꌖ젼龤ëˆê†¸æžµášªî±£æµ°ï±šçŸ·æž†ê€¨ïªˆ [ 64.432360][ T617] usb 2-1: Manufacturer: Ф [ 64.437011][ T617] usb 2-1: SerialNumber: syz [ 64.458340][ T284] EXT4-fs (loop3): unmounting filesystem. [ 64.464328][ T692] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 64.586950][ T723] loop2: detected capacity change from 0 to 256 [ 64.607055][ T723] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 64.837890][ T303] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 65.047845][ T303] usb 4-1: Using ep0 maxpacket: 32 [ 65.071858][ T303] usb 4-1: config 1 has an invalid interface number: 242 but max is 0 [ 65.657795][ T303] usb 4-1: config 1 has no interface number 0 [ 65.664574][ T303] usb 4-1: config 1 interface 242 has no altsetting 0 [ 65.671607][ T617] usblp 2-1:1.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 5 proto 3 vid 0x0525 pid 0xA4A8 [ 65.684358][ T617] usb 2-1: USB disconnect, device number 5 [ 65.693579][ T303] usb 4-1: New USB device found, idVendor=2eca, idProduct=c101, bcdDevice= 7.df [ 65.708048][ T617] usblp0: removed [ 65.713971][ T303] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.784310][ T303] usb 4-1: Product: syz [ 65.788839][ T303] usb 4-1: Manufacturer: syz [ 65.793450][ T303] usb 4-1: SerialNumber: syz [ 66.067870][ T39] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 66.231244][ T744] loop1: detected capacity change from 0 to 256 [ 66.240039][ T744] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x8ee18c8e, utbl_chksum : 0xe619d30d) [ 66.248941][ T39] usb 5-1: too many endpoints for config 0 interface 0 altsetting 141: 131, using maximum allowed: 30 [ 66.254498][ T744] exFAT-fs (loop1): error, invalid access to FAT free cluster (entry 0x00000008) [ 66.264451][ T39] usb 5-1: config 0 interface 0 altsetting 141 endpoint 0xD has an invalid bInterval 26, changing to 4 [ 66.285147][ T39] usb 5-1: config 0 interface 0 altsetting 141 endpoint 0xD has invalid maxpacket 55135, setting to 1023 [ 66.296738][ T39] usb 5-1: config 0 interface 0 altsetting 141 has 1 endpoint descriptor, different from the interface descriptor's value: 131 [ 66.310221][ T39] usb 5-1: config 0 interface 0 has no altsetting 0 [ 66.318693][ T39] usb 5-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 66.327933][ T39] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.335999][ T39] usb 5-1: Product: syz [ 66.340313][ T39] usb 5-1: Manufacturer: syz [ 66.344966][ T39] usb 5-1: SerialNumber: syz [ 66.354568][ T39] usb 5-1: config 0 descriptor?? [ 66.361864][ T39] hub 5-1:0.0: bad descriptor, ignoring hub [ 66.368022][ T39] hub: probe of 5-1:0.0 failed with error -5 [ 66.412669][ T39] snd-usb-audio: probe of 5-1:0.0 failed with error -2 [ 66.421737][ T391] udevd[391]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 66.902397][ T730] loop4: detected capacity change from 0 to 512 [ 66.912192][ T730] EXT4-fs: Ignoring removed bh option [ 66.919666][ T730] EXT4-fs: Ignoring removed mblk_io_submit option [ 66.927110][ T730] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 66.930384][ T756] loop2: detected capacity change from 0 to 512 [ 66.937541][ T730] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 66.948170][ T756] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 66.964007][ T730] EXT4-fs (loop4): orphan cleanup on readonly fs [ 66.973518][ T303] aqc111 4-1:1.242 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 66.986493][ T303] aqc111 4-1:1.242 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 67.050820][ T303] aqc111 4-1:1.242 eth1: register 'aqc111' at usb-dummy_hcd.3-1, Aquantia AQtion USB to 5GbE Controller, 82:ba:77:3a:09:6c [ 67.104408][ T759] loop0: detected capacity change from 0 to 512 [ 67.113895][ T756] EXT4-fs warning (device loop2): ext4_multi_mount_protect:298: Invalid MMP block in superblock [ 67.126546][ T759] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 67.139378][ T730] __quota_error: 8 callbacks suppressed [ 67.139402][ T730] Quota error (device loop4): do_insert_tree: Free block already used in tree: block 4 [ 67.203916][ T730] Quota error (device loop4): qtree_write_dquot: Error -5 occurred while creating quota [ 67.390979][ T759] EXT4-fs (loop0): 1 truncate cleaned up [ 67.396725][ T759] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 67.537954][ T28] audit: type=1400 audit(1746938313.459:201): avc: denied { read } for pid=141 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 68.047915][ T730] EXT4-fs error (device loop4): ext4_acquire_dquot:6789: comm syz.4.104: Failed to acquire dquot type 1 [ 68.060445][ T28] audit: type=1400 audit(1746938313.469:202): avc: denied { search } for pid=141 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 68.090057][ T730] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:477: comm syz.4.104: Invalid block bitmap block 0 in block_group 0 [ 68.126733][ T28] audit: type=1400 audit(1746938313.469:203): avc: denied { read } for pid=141 comm="dhcpcd" name="n15" dev="tmpfs" ino=1527 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 68.127324][ T282] EXT4-fs (loop0): unmounting filesystem. [ 68.150888][ T730] Quota error (device loop4): write_blk: dquota write failed [ 68.163990][ T28] audit: type=1400 audit(1746938313.469:204): avc: denied { open } for pid=141 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=1527 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 68.217810][ T730] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 68.247764][ T28] audit: type=1400 audit(1746938313.469:205): avc: denied { getattr } for pid=141 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=1527 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 68.312232][ T730] EXT4-fs error (device loop4): ext4_acquire_dquot:6789: comm syz.4.104: Failed to acquire dquot type 1 [ 68.331348][ T617] usb 4-1: USB disconnect, device number 3 [ 68.344478][ T617] aqc111 4-1:1.242 eth1: unregister 'aqc111' usb-dummy_hcd.3-1, Aquantia AQtion USB to 5GbE Controller [ 68.350517][ T28] audit: type=1400 audit(1746938314.129:206): avc: denied { read } for pid=771 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=493 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 68.765933][ T730] EXT4-fs error (device loop4): ext4_acquire_dquot:6789: comm syz.4.104: Failed to acquire dquot type 1 [ 68.803013][ T730] EXT4-fs (loop4): 1 orphan inode deleted [ 68.822742][ T730] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 69.038530][ T617] aqc111 4-1:1.242 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 69.057847][ T617] aqc111 4-1:1.242 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 69.067209][ T617] aqc111 4-1:1.242 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 69.122085][ T286] EXT4-fs (loop4): unmounting filesystem. [ 69.238135][ T19] usb 5-1: USB disconnect, device number 5 [ 70.675456][ T818] loop3: detected capacity change from 0 to 512 [ 70.680465][ T816] loop4: detected capacity change from 0 to 512 [ 70.760221][ T818] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 70.769354][ T818] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.781778][ T816] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 70.804449][ T816] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 70.860964][ T823] netlink: 'syz.1.119': attribute type 4 has an invalid length. [ 71.477569][ T825] netlink: 4 bytes leftover after parsing attributes in process `syz.0.116'. [ 71.488213][ T825] netlink: 'syz.0.116': attribute type 4 has an invalid length. [ 71.497676][ T284] EXT4-fs (loop3): unmounting filesystem. [ 71.507669][ T825] netlink: 12 bytes leftover after parsing attributes in process `syz.0.116'. [ 71.689176][ T830] loop1: detected capacity change from 0 to 256 [ 71.967734][ T845] netlink: 'syz.3.127': attribute type 16 has an invalid length. [ 71.977613][ T846] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.984872][ T846] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.089260][ T845] netlink: 'syz.3.127': attribute type 3 has an invalid length. [ 72.139864][ T845] netlink: 64066 bytes leftover after parsing attributes in process `syz.3.127'. [ 72.905064][ T859] loop4: detected capacity change from 0 to 512 [ 72.913763][ T859] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 72.932854][ T28] kauditd_printk_skb: 20 callbacks suppressed [ 72.932878][ T28] audit: type=1400 audit(1746938318.939:225): avc: denied { append } for pid=843 comm="syz.3.127" name="001" dev="devtmpfs" ino=182 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 73.164175][ T870] netlink: 8 bytes leftover after parsing attributes in process `syz.0.131'. [ 73.235001][ T871] loop0: detected capacity change from 0 to 512 [ 73.372324][ T871] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 73.537264][ T871] EXT4-fs (loop0): 1 truncate cleaned up [ 73.543158][ T871] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 73.599665][ T859] EXT4-fs (loop4): 1 truncate cleaned up [ 73.605382][ T859] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 74.099637][ T286] EXT4-fs (loop4): unmounting filesystem. [ 74.111283][ T877] loop3: detected capacity change from 0 to 1024 [ 74.128175][ T877] EXT4-fs: Ignoring removed nobh option [ 74.265448][ T887] loop2: detected capacity change from 0 to 256 [ 74.277901][ T877] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 74.468560][ T282] EXT4-fs (loop0): unmounting filesystem. [ 74.691015][ T877] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 74.750863][ T19] usb 3-1: new low-speed USB device number 2 using dummy_hcd [ 74.854766][ T896] xt_bpf: check failed: parse error [ 75.782040][ T28] audit: type=1400 audit(1746938321.789:226): avc: denied { append } for pid=876 comm="syz.3.133" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 75.890402][ T877] netlink: 20 bytes leftover after parsing attributes in process `syz.3.133'. [ 75.899986][ T28] audit: type=1400 audit(1746938321.859:227): avc: denied { mounton } for pid=876 comm="syz.3.133" path="/25/file1/file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 75.929696][ T19] usb 3-1: unable to get BOS descriptor or descriptor too short [ 75.945390][ T19] usb 3-1: config 1 interface 0 altsetting 210 endpoint 0x81 has invalid maxpacket 512, setting to 8 [ 75.992052][ T284] EXT4-fs (loop3): unmounting filesystem. [ 75.998232][ T19] usb 3-1: config 1 interface 0 altsetting 210 endpoint 0x82 is Bulk; changing to Interrupt [ 76.010985][ T28] audit: type=1400 audit(1746938321.889:228): avc: denied { create } for pid=876 comm="syz.3.133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 76.031049][ T19] usb 3-1: config 1 interface 0 altsetting 210 endpoint 0x3 has invalid maxpacket 65535, setting to 8 [ 76.042969][ T19] usb 3-1: config 1 interface 0 has no altsetting 0 [ 76.053381][ T19] usb 3-1: string descriptor 0 read error: -22 [ 76.061416][ T19] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 76.071243][ T19] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.096859][ T887] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 76.104127][ T887] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 76.111341][ T887] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 76.127628][ T19] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 76.387912][ T28] audit: type=1400 audit(1746938322.389:229): avc: denied { read } for pid=897 comm="syz.4.139" name="event0" dev="devtmpfs" ino=260 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 76.441600][ T28] audit: type=1400 audit(1746938322.389:230): avc: denied { open } for pid=897 comm="syz.4.139" path="/dev/input/event0" dev="devtmpfs" ino=260 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 76.467255][ T28] audit: type=1400 audit(1746938322.419:231): avc: denied { ioctl } for pid=897 comm="syz.4.139" path="/dev/input/event0" dev="devtmpfs" ino=260 ioctlcmd=0x4591 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 76.857820][ T724] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 77.097766][ T724] usb 5-1: Using ep0 maxpacket: 16 [ 77.104053][ T724] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 75, changing to 10 [ 77.115172][ T724] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 77.124920][ T724] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 77.134688][ T724] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 1431, setting to 1024 [ 77.145741][ T724] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 77.147748][ T19] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 77.156498][ T724] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 77.172282][ T724] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 77.180289][ T724] usb 5-1: SerialNumber: syz [ 77.185810][ T898] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 77.193329][ T724] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 77.201394][ T724] cdc_acm: probe of 5-1:1.0 failed with error -12 [ 77.297817][ T303] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 77.348881][ T19] usb 1-1: config 0 has no interfaces? [ 77.355765][ T19] usb 1-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 77.364886][ T19] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.373118][ T19] usb 1-1: Product: syz [ 77.377299][ T19] usb 1-1: Manufacturer: syz [ 77.381915][ T19] usb 1-1: SerialNumber: syz [ 77.386873][ T19] r8152-cfgselector 1-1: config 0 descriptor?? [ 77.410457][ T6] usb 3-1: USB disconnect, device number 2 [ 77.508826][ T303] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.519981][ T303] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 77.529786][ T303] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 77.542981][ T303] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 77.552055][ T303] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.560892][ T303] usb 2-1: config 0 descriptor?? [ 77.728155][ T928] loop2: detected capacity change from 0 to 512 [ 77.736502][ T928] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 77.836501][ T928] EXT4-fs (loop2): 1 truncate cleaned up [ 77.842273][ T928] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 78.076144][ T724] usb 5-1: USB disconnect, device number 6 [ 78.122622][ T303] usbhid 2-1:0.0: can't add hid device: -71 [ 78.144671][ T303] usbhid: probe of 2-1:0.0 failed with error -71 [ 78.201424][ T303] usb 2-1: USB disconnect, device number 6 [ 78.637854][ T287] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 78.646302][ T8] usb 1-1: config 0 descriptor?? [ 78.661798][ T931] capability: warning: `syz.4.148' uses 32-bit capabilities (legacy support in use) [ 78.709739][ T935] netlink: 28 bytes leftover after parsing attributes in process `syz.4.150'. [ 78.719021][ T935] netlink: 28 bytes leftover after parsing attributes in process `syz.4.150'. [ 79.686403][ T8] usb 1-1: can't set config #0, error -71 [ 79.694534][ T19] usb 1-1: USB disconnect, device number 5 [ 79.700983][ T283] EXT4-fs (loop2): unmounting filesystem. [ 79.702229][ T939] loop4: detected capacity change from 0 to 512 [ 79.739832][ T943] loop0: detected capacity change from 0 to 512 [ 79.748632][ T939] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 79.755530][ T943] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 79.778608][ T287] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 79.788033][ T939] EXT4-fs (loop4): Remounting filesystem read-only [ 79.796452][ T939] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.151: invalid indirect mapped block 4278190080 (level 0) [ 79.800692][ T287] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 79.813418][ T943] EXT4-fs warning (device loop0): ext4_multi_mount_protect:298: Invalid MMP block in superblock [ 79.820327][ T287] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 79.846253][ T939] EXT4-fs (loop4): Remounting filesystem read-only [ 79.850357][ T949] netlink: 28 bytes leftover after parsing attributes in process `syz.1.154'. [ 79.853430][ T939] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.151: invalid indirect mapped block 1 (level 1) [ 79.872079][ T949] netlink: 28 bytes leftover after parsing attributes in process `syz.1.154'. [ 79.874826][ T287] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 79.892944][ T287] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.901112][ T939] EXT4-fs (loop4): Remounting filesystem read-only [ 79.911151][ T939] EXT4-fs (loop4): 1 truncate cleaned up [ 79.916824][ T939] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 79.928898][ T287] usb 4-1: config 0 descriptor?? [ 80.470082][ T957] EXT4-fs error (device loop4): __ext4_remount:6598: comm syz.4.151: Abort forced by user [ 80.487496][ T957] EXT4-fs (loop4): Remounting filesystem read-only [ 80.494119][ T957] EXT4-fs (loop4): re-mounted. Quota mode: none. [ 80.993671][ T966] loop1: detected capacity change from 0 to 2048 [ 81.013424][ T966] EXT4-fs: Ignoring removed bh option [ 81.026429][ T966] EXT4-fs: dax option not supported [ 81.088724][ T28] audit: type=1400 audit(1746938327.099:232): avc: denied { nlmsg_read } for pid=965 comm="syz.1.157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 81.111670][ T966] netlink: 8 bytes leftover after parsing attributes in process `syz.1.157'. [ 81.286032][ T286] EXT4-fs (loop4): unmounting filesystem. [ 81.320790][ T971] device wg2 entered promiscuous mode [ 81.422720][ T972] netlink: 4 bytes leftover after parsing attributes in process `syz.3.159'. [ 81.524269][ T972] netlink: 12 bytes leftover after parsing attributes in process `syz.3.159'. [ 81.543814][ T974] xt_hashlimit: size too large, truncated to 1048576 [ 81.544463][ T287] usbhid 4-1:0.0: can't add hid device: -71 [ 81.566814][ T287] usbhid: probe of 4-1:0.0 failed with error -71 [ 81.578719][ T287] usb 4-1: USB disconnect, device number 4 [ 82.445355][ T28] audit: type=1400 audit(1746938328.449:233): avc: denied { create } for pid=988 comm="syz.1.166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 82.625145][ T991] loop3: detected capacity change from 0 to 512 [ 82.633857][ T991] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 82.793773][ T991] EXT4-fs (loop3): 1 truncate cleaned up [ 82.799535][ T991] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 83.408216][ T28] audit: type=1400 audit(1746938328.789:234): avc: denied { connect } for pid=988 comm="syz.1.166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 83.610954][ T284] EXT4-fs (loop3): unmounting filesystem. [ 83.637872][ T989] IPv6: Can't replace route, no match found [ 83.797807][ T28] audit: type=1400 audit(1746938329.789:235): avc: denied { write } for pid=1001 comm="syz.0.169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 83.816045][ T1025] loop3: detected capacity change from 0 to 512 [ 85.228547][ T1032] loop2: detected capacity change from 0 to 512 [ 85.313519][ T1032] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 85.507128][ T1032] EXT4-fs (loop2): 1 truncate cleaned up [ 85.512895][ T1032] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 85.562874][ T28] audit: type=1400 audit(1746938331.569:236): avc: denied { map } for pid=1035 comm="syz.1.178" path="/dev/ashmem" dev="devtmpfs" ino=269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 86.208435][ T1040] loop1: detected capacity change from 0 to 512 [ 86.220715][ T1040] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 89.486438][ T1025] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 89.517804][ T287] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 89.535677][ T1025] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 89.566944][ T1025] EXT4-fs error (device loop3): ext4_acquire_dquot:6789: comm syz.3.176: Failed to acquire dquot type 0 [ 89.649110][ T283] EXT4-fs (loop2): unmounting filesystem. [ 89.662137][ T1025] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 89.678098][ T1025] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 89.724319][ T1025] EXT4-fs error (device loop3): ext4_acquire_dquot:6789: comm syz.3.176: Failed to acquire dquot type 0 [ 89.748625][ T1025] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 89.775446][ T1025] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 89.865638][ T1025] EXT4-fs error (device loop3): ext4_acquire_dquot:6789: comm syz.3.176: Failed to acquire dquot type 0 [ 89.879752][ T1025] EXT4-fs (loop3): 1 orphan inode deleted [ 89.888012][ T1025] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 89.906673][ T1025] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.925983][ T284] EXT4-fs (loop3): unmounting filesystem. [ 89.936815][ T28] audit: type=1400 audit(1746938335.939:237): avc: denied { connect } for pid=1054 comm="syz.4.183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 89.989425][ T28] audit: type=1400 audit(1746938335.969:238): avc: denied { write } for pid=1054 comm="syz.4.183" path="socket:[18730]" dev="sockfs" ino=18730 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 90.024017][ T28] audit: type=1400 audit(1746938335.989:239): avc: denied { ioctl } for pid=1050 comm="syz.1.182" path="socket:[17992]" dev="sockfs" ino=17992 ioctlcmd=0x8941 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 90.049858][ T28] audit: type=1400 audit(1746938335.989:240): avc: denied { create } for pid=1050 comm="syz.1.182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 91.696010][ T1075] netlink: 28 bytes leftover after parsing attributes in process `syz.3.190'. [ 91.725693][ T1075] netlink: 28 bytes leftover after parsing attributes in process `syz.3.190'. [ 91.791562][ T1055] loop4: detected capacity change from 0 to 40427 [ 91.835409][ T1055] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 91.888639][ T1055] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 91.921905][ T1055] F2FS-fs (loop4): invalid crc value [ 91.952837][ T1055] F2FS-fs (loop4): Mismatch valid blocks 0 vs. 1 [ 91.960096][ T1055] F2FS-fs (loop4): Failed to initialize F2FS segment manager (-117) [ 92.272703][ T1093] loop2: detected capacity change from 0 to 2048 [ 92.279571][ T1093] EXT4-fs: Ignoring removed nomblk_io_submit option [ 92.289556][ T1093] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 92.418680][ T1098] fuse: Bad value for 'fd' [ 92.658523][ T283] EXT4-fs (loop2): unmounting filesystem. [ 94.386299][ T1123] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 94.389289][ T1121] loop1: detected capacity change from 0 to 8192 [ 94.393583][ T1123] IPv6: NLM_F_CREATE should be set when creating new route [ 94.417744][ T6] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 94.462387][ T1121] loop1: p1 < > p3[EZD] [ 94.476494][ T1121] loop1: p3 start 3238002688 is beyond EOD, truncated [ 94.486230][ T1130] loop4: detected capacity change from 0 to 512 [ 94.508211][ T1130] EXT4-fs: Ignoring removed mblk_io_submit option [ 94.526974][ T1130] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 94.564077][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 94.564093][ T28] audit: type=1400 audit(1746938340.569:249): avc: denied { append } for pid=1129 comm="syz.4.204" path="/36/file1/blkio.bfq.avg_queue_size" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 94.595716][ T28] audit: type=1400 audit(1746938340.589:250): avc: denied { map } for pid=1129 comm="syz.4.204" path="/36/file1/blkio.bfq.avg_queue_size" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 94.620005][ T6] usb 3-1: Using ep0 maxpacket: 16 [ 94.625900][ T285] __loop_clr_fd: partition scan of loop1 failed (rc=-16) [ 94.633853][ T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.655028][ T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.671003][ T391] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 94.673165][ T6] usb 3-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 94.680684][ T28] audit: type=1400 audit(1746938340.599:251): avc: denied { unlink } for pid=286 comm="syz-executor" name="blkio.bfq.avg_queue_size" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 94.700053][ T6] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.714260][ T28] audit: type=1400 audit(1746938340.599:252): avc: denied { unlink } for pid=286 comm="syz-executor" name="file2" dev="loop4" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 94.721936][ T391] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 94.744877][ T1139] Zero length message leads to an empty skb [ 94.757201][ T6] usb 3-1: config 0 descriptor?? [ 94.759876][ T28] audit: type=1400 audit(1746938340.599:253): avc: denied { rmdir } for pid=286 comm="syz-executor" name="lost+found" dev="loop4" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 94.763681][ T391] Buffer I/O error on dev loop1p1, logical block 0, async page read [ 94.791472][ T28] audit: type=1400 audit(1746938340.769:254): avc: denied { unlink } for pid=286 comm="syz-executor" name="file1" dev="loop4" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 94.817210][ T28] audit: type=1400 audit(1746938340.799:255): avc: denied { bind } for pid=1135 comm="syz.1.205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 94.820505][ T286] EXT4-fs (loop4): unmounting filesystem. [ 94.837351][ T391] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 94.857172][ T391] Buffer I/O error on dev loop1p1, logical block 0, async page read [ 94.868983][ T391] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 94.878286][ T391] Buffer I/O error on dev loop1p1, logical block 0, async page read [ 94.886536][ T391] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 94.895974][ T391] Buffer I/O error on dev loop1p1, logical block 0, async page read [ 94.906054][ T391] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 94.915613][ T391] Buffer I/O error on dev loop1p1, logical block 0, async page read [ 94.925470][ T1144] loop3: detected capacity change from 0 to 1024 [ 94.932783][ T1144] EXT4-fs: Ignoring removed nobh option [ 94.940108][ T1144] EXT4-fs: Ignoring removed bh option [ 94.953900][ T391] udevd[391]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 94.959683][ T1144] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 94.967889][ T1146] netlink: 28 bytes leftover after parsing attributes in process `syz.1.209'. [ 94.984178][ T1146] netlink: 28 bytes leftover after parsing attributes in process `syz.1.209'. [ 94.995524][ T1144] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 95.931986][ T1110] input: syz0 as /devices/virtual/input/input4 [ 96.557663][ T28] audit: type=1400 audit(1746938342.549:256): avc: denied { read } for pid=87 comm="acpid" name="event3" dev="devtmpfs" ino=792 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 96.574322][ T6] gt683r_led 0003:1770:FF00.0001: ignoring exceeding usage max [ 96.589281][ T28] audit: type=1400 audit(1746938342.549:257): avc: denied { open } for pid=87 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=792 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 96.592137][ T284] EXT4-fs (loop3): unmounting filesystem. [ 96.618672][ T6] gt683r_led 0003:1770:FF00.0001: hidraw0: USB HID v0.00 Device [HID 1770:ff00] on usb-dummy_hcd.2-1/input0 [ 96.633840][ T28] audit: type=1400 audit(1746938342.549:258): avc: denied { ioctl } for pid=87 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=792 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 96.702917][ T1159] loop4: detected capacity change from 0 to 512 [ 96.768518][ T1159] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 99.343712][ T1165] loop1: detected capacity change from 0 to 512 [ 100.995071][ T1159] EXT4-fs: failed to create workqueue [ 101.000563][ T1159] EXT4-fs (loop4): mount failed [ 101.009740][ T1165] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 101.101405][ T1165] EXT4-fs (loop1): 1 truncate cleaned up [ 101.107114][ T1165] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 102.239228][ T6] usb 3-1: USB disconnect, device number 3 [ 102.275056][ T19] gt683r_led 0003:1770:FF00.0001: failed to send set report request: -19 [ 102.308898][ T1178] loop2: detected capacity change from 0 to 1024 [ 102.322572][ T1180] loop3: detected capacity change from 0 to 1024 [ 102.327672][ T1178] EXT4-fs: Ignoring removed orlov option [ 102.334804][ T1178] EXT4-fs: Ignoring removed nobh option [ 102.340482][ T1178] EXT4-fs: dax option not supported [ 102.351534][ T1180] EXT4-fs: Ignoring removed orlov option [ 102.370742][ T1180] EXT4-fs: Ignoring removed nobh option [ 102.380122][ T1180] EXT4-fs: dax option not supported [ 102.386077][ T28] audit: type=1400 audit(1746938348.389:259): avc: denied { read } for pid=1182 comm="syz.4.217" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 102.424341][ T1178] loop2: detected capacity change from 0 to 1024 [ 102.428287][ T1183] binder: 1182:1183 ioctl c0306201 2000000003c0 returned -14 [ 102.461645][ T1181] fido_id[1181]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 102.475883][ T28] audit: type=1400 audit(1746938348.419:260): avc: denied { open } for pid=1182 comm="syz.4.217" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 102.475915][ T28] audit: type=1400 audit(1746938348.429:261): avc: denied { ioctl } for pid=1182 comm="syz.4.217" path="/dev/binderfs/binder0" dev="binder" ino=16 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 102.475941][ T28] audit: type=1400 audit(1746938348.429:262): avc: denied { set_context_mgr } for pid=1182 comm="syz.4.217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 102.475962][ T28] audit: type=1400 audit(1746938348.429:263): avc: denied { write } for pid=1182 comm="syz.4.217" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 102.595504][ T28] audit: type=1400 audit(1746938348.429:264): avc: denied { map } for pid=1182 comm="syz.4.217" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 102.619438][ T28] audit: type=1400 audit(1746938348.559:265): avc: denied { call } for pid=1182 comm="syz.4.217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 102.620213][ T1178] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 102.638403][ T28] audit: type=1400 audit(1746938348.559:266): avc: denied { transfer } for pid=1182 comm="syz.4.217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 102.708888][ T283] EXT4-fs (loop2): unmounting filesystem. [ 102.865486][ T1192] loop2: detected capacity change from 0 to 1024 [ 102.897001][ T1192] EXT4-fs: Ignoring removed nobh option [ 102.902656][ T1192] EXT4-fs: Ignoring removed bh option [ 102.918083][ T1192] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 102.988209][ T1192] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 103.063179][ T365] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 103.069540][ T575] Bluetooth: hci0: command 0x1003 tx timeout [ 103.119391][ T1186] loop3: detected capacity change from 0 to 40427 [ 103.255624][ T1186] F2FS-fs (loop3): fault_injection options not supported [ 103.281412][ T285] EXT4-fs (loop1): unmounting filesystem. [ 103.475314][ T1186] F2FS-fs (loop3): invalid crc value [ 103.541037][ T1186] F2FS-fs (loop3): Found nat_bits in checkpoint [ 103.591494][ T1207] loop0: detected capacity change from 0 to 1024 [ 103.605864][ T1186] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 103.615352][ T1207] EXT4-fs: Ignoring removed orlov option [ 103.645512][ T1207] EXT4-fs: Ignoring removed nobh option [ 103.656694][ T1207] EXT4-fs: dax option not supported [ 103.659360][ T1210] loop4: detected capacity change from 0 to 512 [ 103.669541][ T1210] EXT4-fs (loop4): Test dummy encryption mode enabled [ 103.676414][ T1210] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 103.679776][ T284] syz-executor: attempt to access beyond end of device [ 103.679776][ T284] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 103.700985][ T1210] EXT4-fs error (device loop4): ext4_orphan_get:1426: comm syz.4.225: bad orphan inode 131083 [ 103.725407][ T1210] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 103.738309][ T283] EXT4-fs (loop2): unmounting filesystem. [ 103.772342][ T28] audit: type=1400 audit(1746938349.779:267): avc: denied { write } for pid=1213 comm="syz.2.227" name="001" dev="devtmpfs" ino=188 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 103.827576][ T1207] loop0: detected capacity change from 0 to 1024 [ 103.853719][ T28] audit: type=1400 audit(1746938349.849:268): avc: denied { write } for pid=1216 comm="syz.3.226" path="socket:[19028]" dev="sockfs" ino=19028 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 103.857393][ T1167] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 103.894981][ T1207] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 103.922091][ T282] EXT4-fs (loop0): unmounting filesystem. [ 103.938707][ T1228] loop0: detected capacity change from 0 to 1024 [ 103.981125][ T1228] EXT4-fs: Ignoring removed orlov option [ 103.987249][ T1228] EXT4-fs: Ignoring removed nobh option [ 103.998610][ T1228] EXT4-fs: dax option not supported [ 104.057822][ T1167] usb 2-1: device descriptor read/64, error -71 [ 104.347837][ T1167] usb 2-1: device descriptor read/64, error -71 [ 104.387283][ T19] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 104.617766][ T1167] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 104.827753][ T1167] usb 2-1: device descriptor read/64, error -71 [ 106.166685][ T1167] usb 2-1: device descriptor read/64, error -71 [ 106.367818][ T1167] usb usb2-port1: attempt power cycle [ 106.547743][ T366] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 106.665043][ T286] EXT4-fs (loop4): unmounting filesystem. [ 106.727743][ T366] usb 3-1: Using ep0 maxpacket: 32 [ 106.734044][ T366] usb 3-1: config 0 has an invalid interface number: 230 but max is 0 [ 106.742597][ T366] usb 3-1: config 0 has no interface number 0 [ 106.748865][ T366] usb 3-1: config 0 interface 230 has no altsetting 0 [ 106.757166][ T366] usb 3-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 106.766519][ T366] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.774794][ T366] usb 3-1: Product: syz [ 106.779101][ T366] usb 3-1: Manufacturer: syz [ 106.783699][ T366] usb 3-1: SerialNumber: syz [ 106.791780][ T366] usb 3-1: config 0 descriptor?? [ 106.797894][ T366] ums-usbat 3-1:0.230: USB Mass Storage device detected [ 106.807540][ T366] ums-usbat 3-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 107.039088][ T366] ums-usbat: probe of 3-1:0.230 failed with error -5 [ 107.056578][ T366] usb 3-1: USB disconnect, device number 4 [ 107.494184][ T8] Bluetooth: hci0: Frame reassembly failed (-84) [ 107.552609][ T1241] loop0: detected capacity change from 0 to 512 [ 107.566645][ T1262] netlink: 28 bytes leftover after parsing attributes in process `syz.2.240'. [ 107.576330][ T1262] netlink: 28 bytes leftover after parsing attributes in process `syz.2.240'. [ 107.594244][ T1241] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 107.608527][ T1265] loop3: detected capacity change from 0 to 1024 [ 107.616545][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 107.616561][ T28] audit: type=1400 audit(1746938353.619:271): avc: denied { block_suspend } for pid=1259 comm="syz.1.239" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 107.620978][ T1265] EXT4-fs: Ignoring removed orlov option [ 108.495882][ T1241] EXT4-fs (loop0): 1 truncate cleaned up [ 108.501658][ T1241] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 108.510868][ T1265] EXT4-fs: Ignoring removed nobh option [ 108.517188][ T1265] EXT4-fs: dax option not supported [ 108.594817][ T1265] loop3: detected capacity change from 0 to 1024 [ 108.691746][ T1265] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 108.760628][ T19] usb 5-1: device not accepting address 7, error -71 [ 108.800091][ T284] EXT4-fs (loop3): unmounting filesystem. [ 108.825344][ T1288] loop3: detected capacity change from 0 to 256 [ 108.838438][ T1288] exfat: Deprecated parameter 'utf8' [ 108.849313][ T1288] exfat: Deprecated parameter 'utf8' [ 108.862342][ T1288] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x18acca35, utbl_chksum : 0xe619d30d) [ 109.537761][ T575] Bluetooth: hci0: command 0x1003 tx timeout [ 109.543825][ T365] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 109.628775][ T1299] loop2: detected capacity change from 0 to 512 [ 109.643253][ T1299] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 109.786950][ T1299] EXT4-fs (loop2): 1 truncate cleaned up [ 109.792787][ T1299] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 110.107216][ T1295] loop4: detected capacity change from 0 to 40427 [ 110.190085][ T1295] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 110.619561][ T1295] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 110.638221][ T1295] F2FS-fs (loop4): invalid crc value [ 110.760187][ T282] EXT4-fs (loop0): unmounting filesystem. [ 110.813223][ T283] EXT4-fs (loop2): unmounting filesystem. [ 110.827258][ T1295] F2FS-fs (loop4): Found nat_bits in checkpoint [ 110.905392][ T1310] loop2: detected capacity change from 0 to 1024 [ 110.912636][ T1295] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 110.917777][ T1310] EXT4-fs: Ignoring removed nobh option [ 110.925541][ T1295] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 110.966302][ T1310] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 111.241552][ T1310] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 111.423440][ T1310] 9pnet_fd: Insufficient options for proto=fd [ 111.721617][ T283] EXT4-fs (loop2): unmounting filesystem. [ 111.874260][ T28] audit: type=1400 audit(1746938357.879:272): avc: denied { mounton } for pid=1294 comm="syz.4.248" path="/46/bus/file0" dev="loop4" ino=456 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 112.094246][ T1325] netlink: 24 bytes leftover after parsing attributes in process `syz.2.254'. [ 112.114921][ T1327] loop3: detected capacity change from 0 to 1024 [ 112.121737][ T1327] EXT4-fs: Ignoring removed orlov option [ 112.127541][ T1327] EXT4-fs: Ignoring removed nobh option [ 112.133661][ T1327] EXT4-fs: dax option not supported [ 112.201447][ T1327] loop3: detected capacity change from 0 to 1024 [ 112.218849][ T43] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 112.228779][ T43] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 112.239298][ T1327] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 112.247762][ T6] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 112.304427][ T284] EXT4-fs (loop3): unmounting filesystem. [ 112.358658][ T28] audit: type=1400 audit(1746938358.369:273): avc: denied { create } for pid=1337 comm="syz.3.259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 112.397791][ T28] audit: type=1400 audit(1746938358.389:274): avc: denied { ioctl } for pid=1337 comm="syz.3.259" path="socket:[18416]" dev="sockfs" ino=18416 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 112.407756][ T287] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 112.432073][ T6] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 112.443473][ T6] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 112.455216][ T6] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 112.464556][ T6] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.472860][ T6] usb 1-1: Product: syz [ 112.478209][ T6] usb 1-1: Manufacturer: syz [ 112.482823][ T6] usb 1-1: SerialNumber: syz [ 112.587773][ T287] usb 3-1: device descriptor read/64, error -71 [ 112.644102][ T1348] kvm: pic: non byte write [ 112.652780][ T1348] loop1: detected capacity change from 0 to 1024 [ 112.657781][ T1167] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 112.663778][ T1348] EXT4-fs: Ignoring removed orlov option [ 112.673611][ T1348] EXT4-fs: Ignoring removed nomblk_io_submit option [ 112.689077][ T1348] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 112.706104][ T6] usb 1-1: 0:2 : does not exist [ 112.709582][ T1348] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 112.713679][ T6] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 112.720754][ T28] audit: type=1400 audit(1746938358.739:275): avc: denied { relabelto } for pid=1347 comm="syz.1.262" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 112.748390][ T6] usb 1-1: USB disconnect, device number 7 [ 112.754121][ T28] audit: type=1400 audit(1746938358.739:276): avc: denied { write } for pid=1347 comm="syz.1.262" name="uinput" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 112.833987][ T285] EXT4-fs (loop1): unmounting filesystem. [ 112.847762][ T1167] usb 4-1: Using ep0 maxpacket: 16 [ 112.855721][ T28] audit: type=1400 audit(1746938358.859:277): avc: denied { name_bind } for pid=1352 comm="syz.1.263" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 112.877491][ T24] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 112.885163][ T287] usb 3-1: device descriptor read/64, error -71 [ 112.889728][ T1167] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 112.900722][ T1167] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.909043][ T1167] usb 4-1: Product: syz [ 112.913367][ T1167] usb 4-1: Manufacturer: syz [ 112.918006][ T1167] usb 4-1: SerialNumber: syz [ 112.918681][ T1353] loop1: detected capacity change from 0 to 2048 [ 112.926325][ T1167] usb 4-1: config 0 descriptor?? [ 112.934993][ T1167] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 112.942790][ T1167] usb 4-1: Detected FT232H [ 112.977986][ T1353] loop1: p1 < > p2 p3 < p5 p6 > p4 [ 112.983279][ T1353] loop1: partition table partially beyond EOD, truncated [ 112.990563][ T1353] loop1: p1 start 3405774849 is beyond EOD, truncated [ 112.997421][ T1353] loop1: p2 size 5046285 extends beyond EOD, truncated [ 113.005633][ T1353] loop1: p5 size 5046285 extends beyond EOD, truncated [ 113.069349][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.080439][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.090719][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 113.103948][ T24] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 113.113118][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.123575][ T24] usb 5-1: config 0 descriptor?? [ 113.136235][ T1167] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 113.143452][ T1167] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 113.167778][ T287] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 113.183928][ T1167] ftdi_sio 4-1:0.0: GPIO initialisation failed: -71 [ 113.191452][ T1167] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 113.201715][ T1167] usb 4-1: USB disconnect, device number 5 [ 113.209363][ T1167] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 113.219250][ T1167] ftdi_sio 4-1:0.0: device disconnected [ 113.517749][ T410] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 113.615942][ T24] usbhid 5-1:0.0: can't add hid device: -71 [ 113.623699][ T24] usbhid: probe of 5-1:0.0 failed with error -71 [ 113.636656][ T24] usb 5-1: USB disconnect, device number 9 [ 113.698930][ T1360] overlayfs: failed to resolve './file1': -2 [ 113.802135][ T1367] loop3: detected capacity change from 0 to 512 [ 113.821472][ T1367] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 113.831638][ T1367] EXT4-fs (loop3): orphan cleanup on readonly fs [ 113.839265][ T1367] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.267: bg 0: block 248: padding at end of block bitmap is not set [ 113.843663][ T1361] hub 9-0:1.0: USB hub found [ 113.854155][ T1367] Quota error (device loop3): write_blk: dquota write failed [ 113.865651][ T1361] hub 9-0:1.0: 1 port detected [ 113.866599][ T1367] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 113.874282][ T287] usb 3-1: device descriptor read/64, error -71 [ 113.882238][ T1367] EXT4-fs error (device loop3): ext4_acquire_dquot:6789: comm syz.3.267: Failed to acquire dquot type 1 [ 113.898443][ T1367] EXT4-fs (loop3): 1 truncate cleaned up [ 113.904324][ T1367] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 114.092978][ T1371] loop0: detected capacity change from 0 to 1024 [ 114.099768][ T1371] EXT4-fs: Ignoring removed orlov option [ 114.105471][ T1371] EXT4-fs: Ignoring removed nobh option [ 114.111727][ T1371] EXT4-fs: dax option not supported [ 114.145262][ T1371] loop0: detected capacity change from 0 to 1024 [ 114.157849][ T287] usb 3-1: device descriptor read/64, error -71 [ 114.165734][ T1373] netlink: 8 bytes leftover after parsing attributes in process `syz.4.269'. [ 114.170383][ T1371] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 114.215779][ T282] EXT4-fs (loop0): unmounting filesystem. [ 114.278049][ T287] usb usb3-port1: attempt power cycle [ 114.825091][ T284] EXT4-fs (loop3): unmounting filesystem. [ 115.127763][ T287] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 115.182897][ T1393] loop0: detected capacity change from 0 to 40427 [ 115.199697][ T1393] F2FS-fs (loop0): Invalid Fs Meta Ino: node(1) meta(15) root(3) [ 115.207485][ T1393] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 115.226128][ T1393] F2FS-fs (loop0): Unrecognized mount option "a'oc_mode=reuse" or missing value [ 115.406812][ T1395] loop4: detected capacity change from 0 to 40427 [ 115.427545][ T1395] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 115.427654][ T1393] input: syz1 as /devices/virtual/input/input6 [ 115.470070][ T1395] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 115.479448][ T1395] F2FS-fs (loop4): invalid crc value [ 115.498986][ T1395] F2FS-fs (loop4): Found nat_bits in checkpoint [ 115.536010][ T1395] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 115.543207][ T1395] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 115.577750][ T287] usb 3-1: device not accepting address 7, error -71 [ 115.600666][ T28] audit: type=1400 audit(1746938361.609:278): avc: denied { create } for pid=1394 comm="syz.4.276" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 115.647735][ T28] audit: type=1400 audit(1746938361.629:279): avc: denied { ioctl } for pid=1394 comm="syz.4.276" path="/51/bus/file1" dev="loop4" ino=457 ioctlcmd=0x587d scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 115.837038][ T1407] netlink: 28 bytes leftover after parsing attributes in process `syz.0.278'. [ 115.837790][ T1391] loop3: detected capacity change from 0 to 131072 [ 115.855314][ T1407] netlink: 28 bytes leftover after parsing attributes in process `syz.0.278'. [ 115.877434][ T1391] F2FS-fs (loop3): invalid crc value [ 115.962981][ T1391] F2FS-fs (loop3): Found nat_bits in checkpoint [ 115.999085][ T1391] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 116.071592][ T1415] netlink: 28 bytes leftover after parsing attributes in process `syz.2.279'. [ 116.080785][ T1415] netlink: 28 bytes leftover after parsing attributes in process `syz.2.279'. [ 116.091592][ T1391] F2FS-fs (loop3): Corrupted max_depth of 3: 16842753 [ 117.261844][ T410] usb 2-1: unable to get BOS descriptor or descriptor too short [ 117.316514][ T410] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 117.719861][ T410] usb 2-1: can't read configurations, error -71 [ 117.740493][ T1423] loop0: detected capacity change from 0 to 1024 [ 117.747158][ T1423] EXT4-fs: Ignoring removed orlov option [ 117.752952][ T1423] EXT4-fs: Ignoring removed nobh option [ 117.758656][ T1423] EXT4-fs: dax option not supported [ 117.797137][ T1423] loop0: detected capacity change from 0 to 1024 [ 117.804562][ T10] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 117.815458][ T10] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 117.891007][ T1423] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 117.932920][ T282] EXT4-fs (loop0): unmounting filesystem. [ 118.052626][ T1437] loop2: detected capacity change from 0 to 512 [ 118.090791][ T1437] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 118.116796][ T1437] EXT4-fs (loop2): orphan cleanup on readonly fs [ 118.126292][ T1437] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.283: bg 0: block 248: padding at end of block bitmap is not set [ 118.142655][ T1437] Quota error (device loop2): write_blk: dquota write failed [ 118.181241][ T1437] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 118.372949][ T1437] EXT4-fs error (device loop2): ext4_acquire_dquot:6789: comm syz.2.283: Failed to acquire dquot type 1 [ 118.415728][ T1437] EXT4-fs (loop2): 1 truncate cleaned up [ 119.676863][ T1449] loop4: detected capacity change from 0 to 256 [ 119.718232][ T1449] exfat: Deprecated parameter 'utf8' [ 119.729398][ T1437] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 119.745835][ T1449] exfat: Deprecated parameter 'utf8' [ 119.782606][ T1449] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x18acca35, utbl_chksum : 0xe619d30d) [ 119.945833][ T1451] FAULT_INJECTION: forcing a failure. [ 119.945833][ T1451] name failslab, interval 1, probability 0, space 0, times 1 [ 120.127546][ T1451] CPU: 1 PID: 1451 Comm: syz.1.289 Not tainted 6.1.134-syzkaller-00012-g646380b087a5 #0 [ 120.137312][ T1451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 120.147383][ T1451] Call Trace: [ 120.150670][ T1451] [ 120.153605][ T1451] __dump_stack+0x21/0x24 [ 120.157961][ T1451] dump_stack_lvl+0xee/0x150 [ 120.162560][ T1451] ? __cfi_dump_stack_lvl+0x8/0x8 [ 120.167601][ T1451] dump_stack+0x15/0x24 [ 120.171769][ T1451] should_fail_ex+0x3d4/0x520 [ 120.176455][ T1451] ? vm_area_alloc+0xe9/0x1a0 [ 120.181147][ T1451] __should_failslab+0xac/0xf0 [ 120.185915][ T1451] should_failslab+0x9/0x20 [ 120.190438][ T1451] kmem_cache_alloc+0x3b/0x330 [ 120.195210][ T1451] vm_area_alloc+0xe9/0x1a0 [ 120.199725][ T1451] mmap_region+0xf7d/0x2140 [ 120.204251][ T1451] ? __cfi_mmap_region+0x10/0x10 [ 120.209200][ T1451] ? kasan_set_track+0x60/0x70 [ 120.213969][ T1451] ? cap_mmap_addr+0x165/0x2e0 [ 120.218745][ T1451] ? __se_sys_memfd_create+0x339/0x3b0 [ 120.224211][ T1451] ? __x64_sys_memfd_create+0x5b/0x70 [ 120.229585][ T1451] ? x64_sys_call+0x235/0x9a0 [ 120.234263][ T1451] ? get_unmapped_area+0x313/0x380 [ 120.239370][ T1451] do_mmap+0x7ae/0xcf0 [ 120.243436][ T1451] ? __cfi_do_mmap+0x10/0x10 [ 120.248020][ T1451] vm_mmap_pgoff+0x1f5/0x3f0 [ 120.252611][ T1451] ? ____kasan_slab_free+0x13d/0x180 [ 120.257888][ T1451] ? __cfi_vm_mmap_pgoff+0x10/0x10 [ 120.262999][ T1451] ? __se_sys_memfd_create+0x339/0x3b0 [ 120.268457][ T1451] ? __kmem_cache_free+0xb7/0x1b0 [ 120.273477][ T1451] ksys_mmap_pgoff+0xf6/0x1d0 [ 120.278155][ T1451] __x64_sys_mmap+0xfa/0x110 [ 120.282737][ T1451] x64_sys_call+0x8fd/0x9a0 [ 120.287238][ T1451] do_syscall_64+0x4c/0xa0 [ 120.291654][ T1451] ? clear_bhb_loop+0x15/0x70 [ 120.296322][ T1451] ? clear_bhb_loop+0x15/0x70 [ 120.300989][ T1451] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 120.306886][ T1451] RIP: 0033:0x7fecab38e9a3 [ 120.311292][ T1451] Code: f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41 89 ca 41 f7 c1 ff 0f 00 00 75 14 b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 25 c3 0f 1f 40 00 48 c7 c0 a8 ff ff ff 64 c7 [ 120.330925][ T1451] RSP: 002b:00007fecac2e3e18 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 120.339447][ T1451] RAX: ffffffffffffffda RBX: 0000000000001501 RCX: 00007fecab38e9a3 [ 120.347433][ T1451] RDX: 0000000000000003 RSI: 0000000008400000 RDI: 0000000000000000 [ 120.355403][ T1451] RBP: 0000200000000582 R08: 00000000ffffffff R09: 0000000000000000 [ 120.363374][ T1451] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000004 [ 120.371343][ T1451] R13: 00007fecac2e3ef0 R14: 00007fecac2e3eb0 R15: 00002000000004c0 [ 120.379312][ T1451] [ 120.596578][ T1468] netlink: 28 bytes leftover after parsing attributes in process `syz.4.293'. [ 120.630377][ T1468] netlink: 28 bytes leftover after parsing attributes in process `syz.4.293'. [ 120.825569][ T1466] netlink: 4 bytes leftover after parsing attributes in process `syz.1.292'. [ 120.856063][ T1466] netlink: 12 bytes leftover after parsing attributes in process `syz.1.292'. [ 120.878751][ T283] EXT4-fs (loop2): unmounting filesystem. [ 120.937040][ T1477] loop2: detected capacity change from 0 to 1024 [ 120.988089][ T1477] EXT4-fs: Ignoring removed orlov option [ 121.016590][ T1477] EXT4-fs: Ignoring removed nobh option [ 121.039298][ T1477] EXT4-fs: dax option not supported [ 121.126820][ T1477] loop2: detected capacity change from 0 to 1024 [ 121.170569][ T1477] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 121.228545][ T283] EXT4-fs (loop2): unmounting filesystem. [ 121.397749][ T366] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 121.607732][ T366] usb 2-1: Using ep0 maxpacket: 32 [ 121.614414][ T366] usb 2-1: unable to get BOS descriptor or descriptor too short [ 121.634196][ T366] usb 2-1: config 128 has an invalid interface number: 127 but max is 3 [ 121.643379][ T366] usb 2-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 121.668438][ T366] usb 2-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 121.833306][ T366] usb 2-1: config 128 has no interface number 0 [ 121.854839][ T366] usb 2-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 121.887988][ T366] usb 2-1: config 128 interface 127 has no altsetting 0 [ 121.913771][ T366] usb 2-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 121.943028][ T366] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.970415][ T366] usb 2-1: Product: syz [ 121.984302][ T366] usb 2-1: Manufacturer: syz [ 121.999791][ T366] usb 2-1: SerialNumber: syz [ 122.268682][ T1483] netlink: 44 bytes leftover after parsing attributes in process `syz.1.297'. [ 122.289495][ T366] usb 2-1: USB disconnect, device number 12 [ 122.300929][ T391] udevd[391]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:128.127/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 122.487754][ T433] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 122.668853][ T433] usb 4-1: config 0 has no interfaces? [ 122.675506][ T433] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 122.684915][ T433] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 122.693094][ T433] usb 4-1: Product: syz [ 122.697402][ T433] usb 4-1: Manufacturer: syz [ 122.706258][ T433] usb 4-1: config 0 descriptor?? [ 123.080393][ T1502] loop0: detected capacity change from 0 to 512 [ 123.642055][ T1514] loop4: detected capacity change from 0 to 16 [ 123.655930][ T1514] erofs: (device loop4): mounted with root inode @ nid 36. [ 123.710198][ T1514] erofs: (device loop4): z_erofs_fill_inode_lazy: big pcluster head1/2 of compact indexes should be consistent for nid 36 [ 123.723082][ T1514] erofs: (device loop4): z_erofs_fill_inode_lazy: big pcluster head1/2 of compact indexes should be consistent for nid 36 [ 123.743443][ T1514] erofs: (device loop4): z_erofs_read_folio: failed to read, err [-117] [ 123.789563][ T1518] loop2: detected capacity change from 0 to 1024 [ 123.796269][ T1514] erofs: (device loop4): z_erofs_fill_inode_lazy: big pcluster head1/2 of compact indexes should be consistent for nid 36 [ 123.828046][ T1518] EXT4-fs: Ignoring removed orlov option [ 123.841359][ T1518] EXT4-fs: Ignoring removed nobh option [ 123.847181][ T1514] erofs: (device loop4): z_erofs_fill_inode_lazy: big pcluster head1/2 of compact indexes should be consistent for nid 36 [ 123.865582][ T1518] EXT4-fs: dax option not supported [ 123.885667][ T1514] erofs: (device loop4): z_erofs_read_folio: failed to read, err [-117] [ 123.909903][ T1514] erofs: (device loop4): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 123.946015][ T1518] loop2: detected capacity change from 0 to 1024 [ 124.086859][ T1519] erofs: (device loop4): z_erofs_fill_inode_lazy: big pcluster head1/2 of compact indexes should be consistent for nid 36 [ 124.101645][ T1518] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 124.132060][ T283] EXT4-fs (loop2): unmounting filesystem. [ 124.145468][ T1519] erofs: (device loop4): z_erofs_fill_inode_lazy: big pcluster head1/2 of compact indexes should be consistent for nid 36 [ 124.372722][ T1519] erofs: (device loop4): z_erofs_read_folio: failed to read, err [-117] [ 124.568994][ T1514] erofs: (device loop4): z_erofs_fill_inode_lazy: big pcluster head1/2 of compact indexes should be consistent for nid 36 [ 124.582595][ T1514] erofs: (device loop4): z_erofs_fill_inode_lazy: big pcluster head1/2 of compact indexes should be consistent for nid 36 [ 124.597108][ T1514] erofs: (device loop4): z_erofs_read_folio: failed to read, err [-117] [ 124.911497][ T1514] process 'syz.4.305' launched './file0' with NULL argv: empty string added [ 125.063800][ T1530] erofs: (device loop4): z_erofs_fill_inode_lazy: big pcluster head1/2 of compact indexes should be consistent for nid 36 [ 125.076593][ T1530] erofs: (device loop4): z_erofs_fill_inode_lazy: big pcluster head1/2 of compact indexes should be consistent for nid 36 [ 125.084617][ T28] audit: type=1400 audit(1746938371.089:280): avc: denied { listen } for pid=1532 comm="syz.1.311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 125.089400][ T1530] erofs: (device loop4): z_erofs_read_folio: failed to read, err [-117] [ 125.169415][ T1514] erofs: (device loop4): z_erofs_fill_inode_lazy: big pcluster head1/2 of compact indexes should be consistent for nid 36 [ 125.185181][ T366] usb 4-1: USB disconnect, device number 6 [ 125.229192][ T1514] erofs: (device loop4): z_erofs_fill_inode_lazy: big pcluster head1/2 of compact indexes should be consistent for nid 36 [ 125.258554][ T28] audit: type=1400 audit(1746938371.129:281): avc: denied { setopt } for pid=1532 comm="syz.1.311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 125.308025][ T1514] erofs: (device loop4): z_erofs_read_folio: failed to read, err [-117] [ 125.582972][ T1502] EXT4-fs: error -4 creating inode table initialization thread [ 125.590766][ T1502] EXT4-fs (loop0): mount failed [ 125.728344][ T366] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 125.845927][ T1561] loop2: detected capacity change from 0 to 512 [ 125.855448][ T1561] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 125.917851][ T366] usb 2-1: Using ep0 maxpacket: 16 [ 125.925772][ T366] usb 2-1: New USB device found, idVendor=0403, idProduct=fa78, bcdDevice= 0.03 [ 125.969909][ T1561] EXT4-fs (loop2): 1 truncate cleaned up [ 125.975627][ T1561] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 126.111903][ T366] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 126.190017][ T366] usb 2-1: SerialNumber: syz [ 126.249939][ T366] usb 2-1: config 0 descriptor?? [ 126.645851][ T28] audit: type=1400 audit(1746938372.649:282): avc: denied { load_policy } for pid=1544 comm="syz.1.315" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 126.646306][ T1570] SELinux: policydb magic number 0x604 does not match expected magic number 0xf97cff8c [ 126.668012][ T1571] netlink: 4 bytes leftover after parsing attributes in process `syz.3.319'. [ 126.725164][ T1570] SELinux: failed to load policy [ 126.805641][ T1571] netlink: 4 bytes leftover after parsing attributes in process `syz.3.319'. [ 126.825384][ T366] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 126.833828][ T283] EXT4-fs (loop2): unmounting filesystem. [ 126.841896][ T366] usb 2-1: Detected SIO [ 126.846433][ T366] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 126.868519][ T366] usb 2-1: USB disconnect, device number 13 [ 126.875894][ T1573] netlink: 4 bytes leftover after parsing attributes in process `syz.0.321'. [ 126.886770][ T366] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 126.896336][ T366] ftdi_sio 2-1:0.0: device disconnected [ 126.904650][ T1574] netlink: 12 bytes leftover after parsing attributes in process `syz.0.321'. [ 126.997023][ T28] audit: type=1400 audit(1746938372.999:283): avc: denied { remount } for pid=1578 comm="syz.3.323" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 127.017192][ T28] audit: type=1326 audit(1746938373.009:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1578 comm="syz.3.323" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe9d438e969 code=0x0 [ 128.241426][ T1592] input: syz1 as /devices/virtual/input/input7 [ 128.485365][ T1600] syz.1.327[1600] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 128.485682][ T1600] syz.1.327[1600] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 128.580258][ T1597] loop3: detected capacity change from 0 to 1024 [ 128.630180][ T1605] FAULT_INJECTION: forcing a failure. [ 128.630180][ T1605] name failslab, interval 1, probability 0, space 0, times 0 [ 128.643043][ T1605] CPU: 0 PID: 1605 Comm: syz.0.331 Not tainted 6.1.134-syzkaller-00012-g646380b087a5 #0 [ 128.652795][ T1605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 128.662880][ T1605] Call Trace: [ 128.666183][ T1605] [ 128.669129][ T1605] __dump_stack+0x21/0x24 [ 128.673486][ T1605] dump_stack_lvl+0xee/0x150 [ 128.678099][ T1605] ? __cfi_dump_stack_lvl+0x8/0x8 [ 128.683147][ T1605] ? kasan_set_track+0x60/0x70 [ 128.687928][ T1605] ? kasan_set_track+0x4b/0x70 [ 128.692708][ T1605] ? kasan_save_alloc_info+0x25/0x30 [ 128.698017][ T1605] dump_stack+0x15/0x24 [ 128.702182][ T1605] should_fail_ex+0x3d4/0x520 [ 128.706856][ T1605] __should_failslab+0xac/0xf0 [ 128.711615][ T1605] should_failslab+0x9/0x20 [ 128.716124][ T1605] kmem_cache_alloc_node+0x42/0x340 [ 128.721321][ T1605] ? alloc_vmap_area+0x17b/0x1870 [ 128.726352][ T1605] alloc_vmap_area+0x17b/0x1870 [ 128.731203][ T1605] ? vm_map_ram+0x930/0x930 [ 128.735706][ T1605] ? __kasan_kmalloc+0x95/0xb0 [ 128.740463][ T1605] ? kmalloc_node_trace+0x3d/0xb0 [ 128.745485][ T1605] __get_vm_area_node+0x160/0x360 [ 128.750507][ T1605] __vmalloc_node_range+0x326/0x13d0 [ 128.755790][ T1605] ? sel_write_load+0x2cc/0x5e0 [ 128.760637][ T1605] ? __cfi_avc_has_perm_noaudit+0x10/0x10 [ 128.766361][ T1605] ? kstrtoull+0x137/0x1d0 [ 128.770778][ T1605] ? __cfi___vmalloc_node_range+0x10/0x10 [ 128.776495][ T1605] ? __cfi_avc_has_perm+0x10/0x10 [ 128.781535][ T1605] ? mutex_lock+0x8d/0x1a0 [ 128.785951][ T1605] ? sel_write_load+0x2cc/0x5e0 [ 128.790799][ T1605] vmalloc+0x78/0x90 [ 128.794697][ T1605] ? sel_write_load+0x2cc/0x5e0 [ 128.799626][ T1605] sel_write_load+0x2cc/0x5e0 [ 128.804302][ T1605] ? __cfi_sel_write_load+0x10/0x10 [ 128.809494][ T1605] ? security_file_permission+0x94/0xb0 [ 128.815033][ T1605] ? __cfi_sel_write_load+0x10/0x10 [ 128.820229][ T1605] vfs_write+0x40c/0xca0 [ 128.824468][ T1605] ? slab_free_freelist_hook+0xc2/0x190 [ 128.830013][ T1605] ? __cfi_vfs_write+0x10/0x10 [ 128.834772][ T1605] ? __kasan_check_write+0x14/0x20 [ 128.839881][ T1605] ? mutex_lock+0x8d/0x1a0 [ 128.844391][ T1605] ? __cfi_mutex_lock+0x10/0x10 [ 128.849249][ T1605] ? __fdget_pos+0x2cd/0x380 [ 128.853852][ T1605] ? ksys_write+0x71/0x240 [ 128.858269][ T1605] ksys_write+0x140/0x240 [ 128.862609][ T1605] ? __cfi_ksys_write+0x10/0x10 [ 128.867455][ T1605] ? __bpf_trace_sys_enter+0x62/0x70 [ 128.872735][ T1605] __x64_sys_write+0x7b/0x90 [ 128.877322][ T1605] x64_sys_call+0x27b/0x9a0 [ 128.881820][ T1605] do_syscall_64+0x4c/0xa0 [ 128.886236][ T1605] ? clear_bhb_loop+0x15/0x70 [ 128.890906][ T1605] ? clear_bhb_loop+0x15/0x70 [ 128.895574][ T1605] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 128.901555][ T1605] RIP: 0033:0x7fd11258e969 [ 128.905970][ T1605] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 128.925566][ T1605] RSP: 002b:00007fd1133e2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 128.933973][ T1605] RAX: ffffffffffffffda RBX: 00007fd1127b5fa0 RCX: 00007fd11258e969 [ 128.941939][ T1605] RDX: 00000000000044f0 RSI: 0000200000000000 RDI: 0000000000000004 [ 128.949909][ T1605] RBP: 00007fd1133e2090 R08: 0000000000000000 R09: 0000000000000000 [ 128.957870][ T1605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 128.965831][ T1605] R13: 0000000000000000 R14: 00007fd1127b5fa0 R15: 00007fff41e0ca58 [ 128.973797][ T1605] [ 129.543917][ T1597] EXT4-fs: Ignoring removed nobh option [ 129.590222][ T1597] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 129.726523][ T1597] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 130.378174][ T1605] syz.0.331: vmalloc error: size 17648, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz0,mems_allowed=0 [ 130.392535][ T1605] CPU: 0 PID: 1605 Comm: syz.0.331 Not tainted 6.1.134-syzkaller-00012-g646380b087a5 #0 [ 130.402271][ T1605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 130.412331][ T1605] Call Trace: [ 130.415610][ T1605] [ 130.418543][ T1605] __dump_stack+0x21/0x24 [ 130.422873][ T1605] dump_stack_lvl+0xee/0x150 [ 130.427471][ T1605] ? __cfi_dump_stack_lvl+0x8/0x8 [ 130.432496][ T1605] ? pr_cont_kernfs_name+0x133/0x160 [ 130.437780][ T1605] dump_stack+0x15/0x24 [ 130.441930][ T1605] warn_alloc+0x1b0/0x1d0 [ 130.446262][ T1605] ? __cfi_warn_alloc+0x10/0x10 [ 130.451123][ T1605] ? __get_vm_area_node+0x175/0x360 [ 130.456331][ T1605] ? __get_vm_area_node+0x175/0x360 [ 130.461539][ T1605] __vmalloc_node_range+0x34b/0x13d0 [ 130.466831][ T1605] ? __cfi_avc_has_perm_noaudit+0x10/0x10 [ 130.472560][ T1605] ? kstrtoull+0x137/0x1d0 [ 130.476990][ T1605] ? __cfi___vmalloc_node_range+0x10/0x10 [ 130.482713][ T1605] ? __cfi_avc_has_perm+0x10/0x10 [ 130.487738][ T1605] ? mutex_lock+0x8d/0x1a0 [ 130.492161][ T1605] ? sel_write_load+0x2cc/0x5e0 [ 130.497008][ T1605] vmalloc+0x78/0x90 [ 130.500904][ T1605] ? sel_write_load+0x2cc/0x5e0 [ 130.505750][ T1605] sel_write_load+0x2cc/0x5e0 [ 130.510417][ T1605] ? __cfi_sel_write_load+0x10/0x10 [ 130.515614][ T1605] ? security_file_permission+0x94/0xb0 [ 130.521153][ T1605] ? __cfi_sel_write_load+0x10/0x10 [ 130.526347][ T1605] vfs_write+0x40c/0xca0 [ 130.530584][ T1605] ? slab_free_freelist_hook+0xc2/0x190 [ 130.536130][ T1605] ? __cfi_vfs_write+0x10/0x10 [ 130.540887][ T1605] ? __kasan_check_write+0x14/0x20 [ 130.545999][ T1605] ? mutex_lock+0x8d/0x1a0 [ 130.550414][ T1605] ? __cfi_mutex_lock+0x10/0x10 [ 130.555265][ T1605] ? __fdget_pos+0x2cd/0x380 [ 130.559852][ T1605] ? ksys_write+0x71/0x240 [ 130.564266][ T1605] ksys_write+0x140/0x240 [ 130.568594][ T1605] ? __cfi_ksys_write+0x10/0x10 [ 130.573440][ T1605] ? __bpf_trace_sys_enter+0x62/0x70 [ 130.578719][ T1605] __x64_sys_write+0x7b/0x90 [ 130.583304][ T1605] x64_sys_call+0x27b/0x9a0 [ 130.587799][ T1605] do_syscall_64+0x4c/0xa0 [ 130.592218][ T1605] ? clear_bhb_loop+0x15/0x70 [ 130.596884][ T1605] ? clear_bhb_loop+0x15/0x70 [ 130.601556][ T1605] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 130.607452][ T1605] RIP: 0033:0x7fd11258e969 [ 130.611863][ T1605] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 130.631462][ T1605] RSP: 002b:00007fd1133e2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 130.639874][ T1605] RAX: ffffffffffffffda RBX: 00007fd1127b5fa0 RCX: 00007fd11258e969 [ 130.647841][ T1605] RDX: 00000000000044f0 RSI: 0000200000000000 RDI: 0000000000000004 [ 130.655806][ T1605] RBP: 00007fd1133e2090 R08: 0000000000000000 R09: 0000000000000000 [ 130.663770][ T1605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 130.671731][ T1605] R13: 0000000000000000 R14: 00007fd1127b5fa0 R15: 00007fff41e0ca58 [ 130.679696][ T1605] [ 130.728102][ T1624] 9pnet_fd: Insufficient options for proto=fd [ 130.735779][ T1627] loop2: detected capacity change from 0 to 128 [ 130.774020][ T284] EXT4-fs (loop3): unmounting filesystem. [ 130.785596][ T1605] Mem-Info: [ 130.788993][ T1605] active_anon:19151 inactive_anon:0 isolated_anon:0 [ 130.788993][ T1605] active_file:17862 inactive_file:2229 isolated_file:0 [ 130.788993][ T1605] unevictable:0 dirty:218 writeback:0 [ 130.788993][ T1605] slab_reclaimable:7440 slab_unreclaimable:75712 [ 130.788993][ T1605] mapped:42881 shmem:11735 pagetables:735 [ 130.788993][ T1605] sec_pagetables:0 bounce:0 [ 130.788993][ T1605] kernel_misc_reclaimable:0 [ 130.788993][ T1605] free:1500262 free_pcp:7790 free_cma:0 [ 130.834834][ T28] audit: type=1400 audit(1746938376.849:285): avc: denied { bind } for pid=1619 comm="syz.1.333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 130.891216][ T1605] Node 0 active_anon:79988kB inactive_anon:0kB active_file:71448kB inactive_file:8940kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:173560kB dirty:884kB writeback:0kB shmem:50308kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:5072kB pagetables:2968kB sec_pagetables:0kB all_unreclaimable? no [ 130.933733][ T28] audit: type=1400 audit(1746938376.889:286): avc: denied { setopt } for pid=1626 comm="syz.2.334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 130.960478][ T1605] DMA32 free:2968532kB boost:0kB min:62576kB low:78220kB high:93864kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2974284kB mlocked:0kB bounce:0kB free_pcp:5752kB local_pcp:60kB free_cma:0kB [ 131.016662][ T1605] lowmem_reserve[]: 0 3932 3932 3932 [ 131.027492][ T1605] Normal free:3028736kB boost:0kB min:84876kB low:106092kB high:127308kB reserved_highatomic:0KB active_anon:92688kB inactive_anon:0kB active_file:71448kB inactive_file:8940kB unevictable:0kB writepending:884kB present:5242880kB managed:4026656kB mlocked:0kB bounce:0kB free_pcp:14212kB local_pcp:7660kB free_cma:0kB [ 131.076658][ T1605] lowmem_reserve[]: 0 0 0 0 [ 131.084538][ T1605] DMA32: 3*4kB (M) 1*8kB (M) 2*16kB (M) 3*32kB (M) 3*64kB (M) 3*128kB (M) 3*256kB (M) 3*512kB (M) 4*1024kB (UM) 2*2048kB (UM) 722*4096kB (M) = 2968532kB [ 131.109911][ T1605] Normal: 710*4kB (UE) 824*8kB (UME) 833*16kB (UME) 484*32kB (UME) 82*64kB (UME) 41*128kB (UME) 57*256kB (UME) 41*512kB (UME) 17*1024kB (UME) 4*2048kB (UM) 711*4096kB (UM) = 3022184kB [ 131.141267][ T1605] 38048 total pagecache pages [ 131.149251][ T1605] 0 pages in swap cache [ 131.155632][ T1605] Free swap = 124448kB [ 131.163091][ T1605] Total swap = 124996kB [ 131.169475][ T1605] 2097051 pages RAM [ 131.176564][ T1605] 0 pages HighMem/MovableOnly [ 131.184604][ T1605] 346816 pages reserved [ 131.190999][ T1605] 0 pages cma reserved [ 131.253014][ T28] audit: type=1400 audit(1746938377.259:287): avc: denied { sqpoll } for pid=1636 comm="syz.0.338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 131.265546][ T1637] loop0: detected capacity change from 0 to 2048 [ 131.287888][ T1637] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 131.478465][ T1645] loop1: detected capacity change from 0 to 512 [ 131.559128][ T1645] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 131.602443][ T1651] loop2: detected capacity change from 0 to 128 [ 131.616363][ T1645] EXT4-fs (loop1): orphan cleanup on readonly fs [ 131.637241][ T1651] EXT4-fs: Ignoring removed oldalloc option [ 131.651206][ T1645] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.339: bg 0: block 248: padding at end of block bitmap is not set [ 131.670276][ T1651] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 131.686120][ T1651] ext4 filesystem being mounted at /70/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.721898][ T28] audit: type=1326 audit(1746938377.729:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1650 comm="syz.2.342" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3eb9f8e969 code=0x0 [ 131.749588][ T1645] Quota error (device loop1): write_blk: dquota write failed [ 131.767232][ T1645] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 131.802108][ T1645] EXT4-fs error (device loop1): ext4_acquire_dquot:6789: comm syz.1.339: Failed to acquire dquot type 1 [ 131.814962][ T1657] loop3: detected capacity change from 0 to 1024 [ 131.909030][ T1657] EXT4-fs: Ignoring removed orlov option [ 131.914719][ T1657] EXT4-fs: Ignoring removed nobh option [ 131.924790][ T1645] EXT4-fs (loop1): 1 truncate cleaned up [ 131.931818][ T1657] EXT4-fs: dax option not supported [ 131.991149][ T1657] loop3: detected capacity change from 0 to 1024 [ 132.019451][ T1657] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 132.619097][ T1645] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 132.637214][ T284] EXT4-fs (loop3): unmounting filesystem. [ 132.703956][ T283] EXT4-fs (loop2): unmounting filesystem. [ 132.797368][ T1663] loop3: detected capacity change from 0 to 1024 [ 132.868749][ T1663] EXT4-fs: Ignoring removed orlov option [ 132.874446][ T1663] EXT4-fs: Ignoring removed nobh option [ 132.920486][ T1663] EXT4-fs: dax option not supported [ 133.027760][ T1663] loop3: detected capacity change from 0 to 1024 [ 133.093879][ T1663] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 133.167296][ T284] EXT4-fs (loop3): unmounting filesystem. [ 133.177266][ T1665] loop2: detected capacity change from 0 to 40427 [ 133.201827][ T1665] F2FS-fs (loop2): Unrecognized mount option "jqfmt=˜fsold" or missing value [ 133.914855][ T285] EXT4-fs (loop1): unmounting filesystem. [ 134.054264][ T28] audit: type=1400 audit(1746938380.059:289): avc: denied { ioctl } for pid=1689 comm="syz.1.351" path="socket:[20436]" dev="sockfs" ino=20436 ioctlcmd=0x8907 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 134.248886][ T28] audit: type=1400 audit(1746938380.089:290): avc: denied { write } for pid=1689 comm="syz.1.351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 134.303890][ T28] audit: type=1400 audit(1746938380.089:291): avc: denied { read } for pid=1689 comm="syz.1.351" path="socket:[20436]" dev="sockfs" ino=20436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 134.327402][ T282] EXT4-fs (loop0): unmounting filesystem. [ 134.328711][ T28] audit: type=1400 audit(1746938380.129:292): avc: denied { shutdown } for pid=1689 comm="syz.1.351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 134.405591][ T1699] netlink: 28 bytes leftover after parsing attributes in process `syz.2.353'. [ 134.415028][ T1699] netlink: 28 bytes leftover after parsing attributes in process `syz.2.353'. [ 134.467854][ T1707] netlink: 28 bytes leftover after parsing attributes in process `syz.3.358'. [ 134.477059][ T1707] netlink: 28 bytes leftover after parsing attributes in process `syz.3.358'. [ 134.623197][ T1710] loop0: detected capacity change from 0 to 40427 [ 135.819608][ T1710] F2FS-fs (loop0): Found nat_bits in checkpoint [ 135.859455][ T1710] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 137.388106][ T1728] overlayfs: unrecognized mount option "measure" or missing value [ 138.526401][ T1729] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 138.533807][ T1729] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 138.625288][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 138.790357][ T1729] syz.3.362 (1729) used greatest stack depth: 20384 bytes left [ 138.908558][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 138.929306][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 138.937642][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 138.946665][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 138.955280][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 138.964923][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 138.975558][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 138.984018][ T39] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 138.991731][ T39] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 139.010512][ T39] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 139.024151][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 139.024165][ T28] audit: type=1400 audit(1746938385.029:295): avc: denied { write } for pid=1744 comm="syz.4.366" name="tcp6" dev="proc" ino=4026532611 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 139.057080][ T1747] loop1: detected capacity change from 0 to 512 [ 139.124301][ T1747] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 139.133430][ T1747] ext4 filesystem being mounted at /72/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 139.149404][ T282] syz-executor: attempt to access beyond end of device [ 139.149404][ T282] loop0: rw=2049, sector=45096, nr_sectors = 24 limit=40427 [ 139.206421][ T28] audit: type=1400 audit(1746938385.209:296): avc: denied { accept } for pid=1746 comm="syz.1.367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 139.279127][ T1760] loop2: detected capacity change from 0 to 512 [ 139.300196][ T1760] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2186: inode #12: comm syz.2.372: corrupted in-inode xattr [ 139.313120][ T1760] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.372: couldn't read orphan inode 12 (err -117) [ 139.326918][ T1760] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 139.341933][ T28] audit: type=1400 audit(1746938385.349:297): avc: denied { watch watch_reads } for pid=1759 comm="syz.2.372" path="/bus" dev="proc" ino=4026531855 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 139.406576][ T283] EXT4-fs (loop2): unmounting filesystem. [ 139.409466][ T1766] loop4: detected capacity change from 0 to 256 [ 139.425315][ T1766] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 139.631636][ T575] Bluetooth: hci0: sending frame failed (-49) [ 139.638120][ T365] Bluetooth: hci0: Opcode 0x1003 failed: -49 [ 139.647654][ T433] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 139.703371][ T1771] loop2: detected capacity change from 0 to 512 [ 139.738556][ T1771] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 139.833174][ T1771] EXT4-fs (loop2): 1 truncate cleaned up [ 139.838934][ T1771] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 139.929898][ T285] EXT4-fs (loop1): unmounting filesystem. [ 140.019313][ T433] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 140.585281][ T6] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 140.594128][ T283] EXT4-fs (loop2): unmounting filesystem. [ 140.642656][ T1776] netlink: 28 bytes leftover after parsing attributes in process `syz.1.374'. [ 140.657065][ T1776] netlink: 28 bytes leftover after parsing attributes in process `syz.1.374'. [ 140.670457][ T1778] loop2: detected capacity change from 0 to 128 [ 140.777725][ T6] usb 1-1: Using ep0 maxpacket: 8 [ 140.783993][ T6] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 140.792611][ T6] usb 1-1: config 179 has no interface number 0 [ 140.799465][ T6] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 141.183967][ T6] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 141.197034][ T6] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 141.210921][ T6] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 141.221182][ T6] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 141.237244][ T1786] loop3: detected capacity change from 0 to 256 [ 141.244690][ T6] usb 1-1: config 179 interface 65 has no altsetting 0 [ 141.258867][ T6] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 141.268010][ T6] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.285622][ T6] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input8 [ 141.307942][ T1787] loop2: detected capacity change from 0 to 512 [ 141.315427][ T1787] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 141.333362][ T1787] EXT4-fs (loop2): orphan cleanup on readonly fs [ 141.342653][ T1787] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.377: bg 0: block 248: padding at end of block bitmap is not set [ 141.345220][ T1789] loop4: detected capacity change from 0 to 512 [ 141.357816][ T1787] Quota error (device loop2): write_blk: dquota write failed [ 141.370949][ T1787] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 141.379431][ T1789] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8806e01c, mo2=0002] [ 141.381742][ T1787] EXT4-fs error (device loop2): ext4_acquire_dquot:6789: comm syz.2.377: Failed to acquire dquot type 1 [ 141.389821][ T1789] EXT4-fs error (device loop4): dx_probe:823: inode #2: comm syz.4.379: Directory hole found for htree index block 0 [ 141.400862][ T1787] EXT4-fs (loop2): 1 truncate cleaned up [ 141.413787][ T1789] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -117 [ 141.426283][ T1789] EXT4-fs error (device loop4): dx_probe:823: inode #2: comm syz.4.379: Directory hole found for htree index block 0 [ 141.426448][ T1787] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 141.438965][ T1789] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 141.476705][ T1789] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 141.502698][ T1794] loop1: detected capacity change from 0 to 1024 [ 141.510183][ T1794] EXT4-fs: Ignoring removed orlov option [ 141.516028][ T1794] EXT4-fs: Ignoring removed nobh option [ 141.521961][ T1794] EXT4-fs: dax option not supported [ 141.525173][ T1764] loop0: detected capacity change from 0 to 256 [ 141.534817][ T1764] exfat: Deprecated parameter 'namecase' [ 141.545737][ T1764] exFAT-fs (loop0): Invalid boot checksum (boot checksum : 0x1105abd0, checksum : 0x1119abd0) [ 141.557393][ T1764] exFAT-fs (loop0): invalid boot region [ 141.563239][ T1764] exFAT-fs (loop0): failed to recognize exfat type [ 141.567734][ T366] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 141.586290][ T1794] loop1: detected capacity change from 0 to 1024 [ 141.605221][ T1794] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 141.623701][ T285] EXT4-fs (loop1): unmounting filesystem. [ 141.735930][ T1806] netlink: 28 bytes leftover after parsing attributes in process `syz.1.384'. [ 141.744886][ T1806] netlink: 28 bytes leftover after parsing attributes in process `syz.1.384'. [ 141.804765][ T366] usb 4-1: device descriptor read/64, error -71 [ 142.087874][ T366] usb 4-1: device descriptor read/64, error -71 [ 142.208779][ T286] EXT4-fs (loop4): unmounting filesystem. [ 142.283699][ T1812] loop4: detected capacity change from 0 to 512 [ 142.300460][ T283] EXT4-fs (loop2): unmounting filesystem. [ 142.317033][ T1812] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 142.319165][ T28] audit: type=1400 audit(1746938388.329:298): avc: denied { mounton } for pid=1814 comm="syz.2.386" path="/79/file0" dev="tmpfs" ino=459 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 142.326101][ T1812] ext4 filesystem being mounted at /73/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 142.359506][ T366] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 142.506055][ T28] audit: type=1400 audit(1746938388.509:299): avc: denied { mounton } for pid=1814 comm="syz.2.386" path="/79/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 142.537785][ T366] usb 4-1: device descriptor read/64, error -71 [ 142.761760][ T1823] loop1: detected capacity change from 0 to 256 [ 142.768354][ T1823] exfat: Deprecated parameter 'utf8' [ 142.773711][ T1823] exfat: Deprecated parameter 'namecase' [ 142.779573][ T1823] exfat: Deprecated parameter 'utf8' [ 142.794888][ T1823] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 142.859118][ T366] usb 4-1: device descriptor read/64, error -71 [ 142.897812][ C1] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 143.169301][ T366] usb usb4-port1: attempt power cycle [ 143.919978][ T286] EXT4-fs (loop4): unmounting filesystem. [ 143.927935][ T366] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 143.960197][ T366] usb 4-1: device descriptor read/8, error -71 [ 144.153249][ T1832] device sit0 entered promiscuous mode [ 144.154704][ T366] usb 4-1: device descriptor read/8, error -71 [ 144.166568][ T1832] netlink: 'syz.1.390': attribute type 1 has an invalid length. [ 144.175113][ T1832] netlink: 1 bytes leftover after parsing attributes in process `syz.1.390'. [ 144.353934][ T1835] usb usb2: usbfs: process 1835 (syz.1.391) did not claim interface 2 before use [ 144.716890][ T1845] 9pnet_fd: Insufficient options for proto=fd [ 145.246897][ T28] audit: type=1326 audit(1746938391.249:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1856 comm="syz.2.398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3eb9f8e969 code=0x7ffc0000 [ 145.270609][ T28] audit: type=1326 audit(1746938391.269:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1856 comm="syz.2.398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3eb9f8e969 code=0x7ffc0000 [ 145.393872][ T28] audit: type=1326 audit(1746938391.269:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1856 comm="syz.2.398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3eb9f8e969 code=0x7ffc0000 [ 145.425542][ T28] audit: type=1326 audit(1746938391.269:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1856 comm="syz.2.398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3eb9f8e969 code=0x7ffc0000 [ 145.449650][ T28] audit: type=1326 audit(1746938391.269:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1856 comm="syz.2.398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3eb9f8e969 code=0x7ffc0000 [ 145.475489][ T28] audit: type=1326 audit(1746938391.269:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1856 comm="syz.2.398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3eb9f8e969 code=0x7ffc0000 [ 145.788126][ T1865] fuse: Invalid rootmode [ 145.837658][ T28] audit: type=1326 audit(1746938391.269:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1856 comm="syz.2.398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3eb9f8e969 code=0x7ffc0000 [ 145.943267][ T1868] netlink: 28 bytes leftover after parsing attributes in process `syz.3.402'. [ 146.027769][ T312] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 146.069151][ T1868] netlink: 28 bytes leftover after parsing attributes in process `syz.3.402'. [ 146.108478][ T28] audit: type=1326 audit(1746938391.269:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1856 comm="syz.2.398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3eb9f8e969 code=0x7ffc0000 [ 146.132454][ T28] audit: type=1326 audit(1746938391.269:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1856 comm="syz.2.398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f3eb9f8e969 code=0x7ffc0000 [ 146.156231][ T28] audit: type=1326 audit(1746938391.269:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1856 comm="syz.2.398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3eb9f8e969 code=0x7ffc0000 [ 146.260637][ T312] usb 2-1: Using ep0 maxpacket: 16 [ 146.267056][ T312] usb 2-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 146.302689][ T312] usb 2-1: config 0 interface 0 has no altsetting 0 [ 146.329519][ T312] usb 2-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 146.368918][ T312] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.375391][ T366] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 146.401764][ T312] usb 2-1: config 0 descriptor?? [ 146.567724][ T366] usb 5-1: Using ep0 maxpacket: 16 [ 146.573972][ T366] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.584874][ T366] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 146.594736][ T366] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 146.607516][ T366] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 146.616556][ T366] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.625507][ T366] usb 5-1: config 0 descriptor?? [ 146.631571][ T287] usb 1-1: USB disconnect, device number 8 [ 146.637439][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 146.662520][ T287] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 146.820370][ T312] itetech 0003:258A:6A88.0002: unbalanced delimiter at end of report description [ 146.829954][ T312] itetech: probe of 0003:258A:6A88.0002 failed with error -22 [ 147.033751][ T366] microsoft 0003:045E:07DA.0003: unbalanced collection at end of report description [ 147.043751][ T366] microsoft 0003:045E:07DA.0003: parse failed [ 147.050433][ T366] microsoft: probe of 0003:045E:07DA.0003 failed with error -22 [ 147.254036][ T366] usb 5-1: USB disconnect, device number 10 [ 148.518679][ T1899] loop3: detected capacity change from 0 to 256 [ 148.568778][ T1899] exfat: Deprecated parameter 'utf8' [ 148.586602][ T1899] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e00961, utbl_chksum : 0xe619d30d) [ 150.309108][ T1891] loop0: detected capacity change from 0 to 512 [ 150.440460][ T1914] loop3: detected capacity change from 0 to 512 [ 150.457597][ T1914] EXT4-fs: Ignoring removed mblk_io_submit option [ 150.464191][ T1914] EXT4-fs: Ignoring removed mblk_io_submit option [ 150.471149][ T1914] EXT4-fs (loop3): Test dummy encryption mode enabled [ 150.478218][ T1914] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 150.489994][ T1914] EXT4-fs (loop3): 1 truncate cleaned up [ 150.495655][ T1914] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 150.515719][ T1914] fscrypt: AES-256-XTS using blk-crypto-fallback [ 150.530965][ T1914] syz.3.416[1914] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 150.531034][ T1914] syz.3.416[1914] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 150.649986][ T312] usb 2-1: USB disconnect, device number 14 [ 150.762734][ T1925] loop4: detected capacity change from 0 to 1024 [ 150.808770][ T1925] EXT4-fs: Ignoring removed orlov option [ 150.814453][ T1925] EXT4-fs: Ignoring removed nobh option [ 150.844912][ T284] EXT4-fs (loop3): unmounting filesystem. [ 150.868364][ T1925] EXT4-fs: dax option not supported [ 150.878437][ T1927] loop2: detected capacity change from 0 to 2048 [ 150.905500][ T1927] EXT4-fs: Ignoring removed bh option [ 150.922396][ T1925] loop4: detected capacity change from 0 to 1024 [ 150.931502][ T1927] EXT4-fs: dax option not supported [ 150.967896][ C1] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 151.011887][ T1925] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 151.049208][ T1891] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 151.058286][ T1891] ext4 filesystem being mounted at /74/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 151.148716][ T286] EXT4-fs (loop4): unmounting filesystem. [ 151.603035][ T1922] loop1: detected capacity change from 0 to 40427 [ 151.654449][ T1922] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 151.695073][ T1922] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 151.714747][ T1937] netlink: 'syz.2.419': attribute type 13 has an invalid length. [ 151.744046][ T1922] F2FS-fs (loop1): invalid crc value [ 151.766265][ T1922] F2FS-fs (loop1): Found nat_bits in checkpoint [ 151.846410][ T282] EXT4-fs (loop0): unmounting filesystem. [ 151.887993][ T1922] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 151.903872][ T1922] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 151.955302][ T1944] FAULT_INJECTION: forcing a failure. [ 151.955302][ T1944] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 151.968508][ T1944] CPU: 0 PID: 1944 Comm: syz.0.422 Not tainted 6.1.134-syzkaller-00012-g646380b087a5 #0 [ 151.978250][ T1944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 151.988324][ T1944] Call Trace: [ 151.991625][ T1944] [ 151.994560][ T1944] __dump_stack+0x21/0x24 [ 151.998897][ T1944] dump_stack_lvl+0xee/0x150 [ 152.003491][ T1944] ? __cfi_dump_stack_lvl+0x8/0x8 [ 152.008520][ T1944] dump_stack+0x15/0x24 [ 152.012685][ T1944] should_fail_ex+0x3d4/0x520 [ 152.017366][ T1944] should_fail+0xb/0x10 [ 152.021523][ T1944] should_fail_usercopy+0x1a/0x20 [ 152.026545][ T1944] _copy_from_user+0x1e/0xc0 [ 152.031127][ T1944] __sys_bpf+0x277/0x780 [ 152.035377][ T1944] ? bpf_link_show_fdinfo+0x320/0x320 [ 152.040748][ T1944] ? __cfi_ksys_write+0x10/0x10 [ 152.045595][ T1944] ? do_user_addr_fault+0x9ac/0x1050 [ 152.050880][ T1944] ? debug_smp_processor_id+0x17/0x20 [ 152.056246][ T1944] __x64_sys_bpf+0x7c/0x90 [ 152.060660][ T1944] x64_sys_call+0x488/0x9a0 [ 152.065164][ T1944] do_syscall_64+0x4c/0xa0 [ 152.069580][ T1944] ? clear_bhb_loop+0x15/0x70 [ 152.074247][ T1944] ? clear_bhb_loop+0x15/0x70 [ 152.078926][ T1944] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 152.084899][ T1944] RIP: 0033:0x7fd11258e969 [ 152.089322][ T1944] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 152.109185][ T1944] RSP: 002b:00007fd1133e2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 152.117593][ T1944] RAX: ffffffffffffffda RBX: 00007fd1127b5fa0 RCX: 00007fd11258e969 [ 152.125558][ T1944] RDX: 0000000000000020 RSI: 00002000000001c0 RDI: 0000000000000002 [ 152.133526][ T1944] RBP: 00007fd1133e2090 R08: 0000000000000000 R09: 0000000000000000 [ 152.141495][ T1944] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 152.149460][ T1944] R13: 0000000000000000 R14: 00007fd1127b5fa0 R15: 00007fff41e0ca58 [ 152.157431][ T1944] [ 152.178784][ T1937] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.186011][ T1937] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.423007][ T1922] netlink: 28 bytes leftover after parsing attributes in process `syz.1.417'. [ 152.486877][ T28] kauditd_printk_skb: 27 callbacks suppressed [ 152.486930][ T28] audit: type=1400 audit(1746938398.489:337): avc: denied { remount } for pid=1921 comm="syz.1.417" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 152.512804][ T1167] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 152.766277][ T1167] usb 4-1: Using ep0 maxpacket: 16 [ 152.778239][ T1167] usb 4-1: config 3 has an invalid interface number: 155 but max is 0 [ 152.784386][ T1967] loop0: detected capacity change from 0 to 2048 [ 152.803280][ T1167] usb 4-1: config 3 has an invalid interface association descriptor of length 3, skipping [ 152.814201][ T1167] usb 4-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 152.834762][ T1167] usb 4-1: config 3 has no interface number 0 [ 152.844864][ T1167] usb 4-1: config 3 interface 155 has no altsetting 0 [ 152.856112][ T1967] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 152.856415][ T1167] usb 4-1: New USB device found, idVendor=05a9, idProduct=264a, bcdDevice=e5.4c [ 152.894697][ T1167] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.914886][ T1167] usb 4-1: Product: syz [ 152.919815][ T1167] usb 4-1: Manufacturer: syz [ 152.924420][ T1167] usb 4-1: SerialNumber: syz [ 153.017723][ T6] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 153.057709][ T28] audit: type=1400 audit(1746938399.059:338): avc: denied { create } for pid=1966 comm="syz.0.429" name="hugetlb.2MB.usage_in_bytes" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 153.080338][ T28] audit: type=1400 audit(1746938399.089:339): avc: denied { read append open } for pid=1966 comm="syz.0.429" path="/78/file0/hugetlb.2MB.usage_in_bytes" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 153.144001][ T1951] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.155249][ T1951] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.165524][ T28] audit: type=1400 audit(1746938399.169:340): avc: denied { ioctl } for pid=1950 comm="syz.3.424" path="socket:[22297]" dev="sockfs" ino=22297 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 153.278399][ T1984] loop2: detected capacity change from 0 to 256 [ 153.284903][ T1984] exfat: Deprecated parameter 'utf8' [ 153.290257][ T1984] exfat: Deprecated parameter 'namecase' [ 153.295919][ T1984] exfat: Deprecated parameter 'utf8' [ 153.301534][ T6] usb 2-1: Using ep0 maxpacket: 16 [ 153.312819][ T1984] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 153.758831][ T1167] usb 4-1: Found UVC 0.00 device syz (05a9:264a) [ 153.819188][ T1167] usb 4-1: No valid video chain found. [ 153.958726][ T1167] usb 4-1: USB disconnect, device number 11 [ 154.532237][ T6] usb 2-1: device descriptor read/all, error -71 [ 154.543885][ T1987] loop4: detected capacity change from 0 to 8192 [ 154.607750][ T287] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 154.709259][ T285] syz-executor: attempt to access beyond end of device [ 154.709259][ T285] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 154.957866][ T1167] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 155.207921][ T1167] usb 4-1: Using ep0 maxpacket: 8 [ 155.215995][ T1167] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 155.249952][ T1167] usb 4-1: config 1 interface 0 altsetting 3 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 155.292118][ T1167] usb 4-1: config 1 interface 0 has no altsetting 0 [ 155.335721][ T1167] usb 4-1: New USB device found, idVendor=05ac, idProduct=0224, bcdDevice= 0.40 [ 155.366697][ T1167] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.392208][ T1999] loop1: detected capacity change from 0 to 1024 [ 155.399171][ T1167] usb 4-1: Product: à°­ [ 155.403523][ T1167] usb 4-1: Manufacturer: Т [ 155.436648][ T1999] EXT4-fs: Ignoring removed nobh option [ 155.447416][ T1167] usb 4-1: SerialNumber: ဉ [ 155.461643][ T1999] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 155.850183][ T1167] usb 4-1: can't set config #1, error -71 [ 155.878071][ T1167] usb 4-1: USB disconnect, device number 12 [ 155.902075][ T1999] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 156.501459][ T2002] 9pnet_fd: Insufficient options for proto=fd [ 156.669514][ T2005] netlink: 28 bytes leftover after parsing attributes in process `syz.4.438'. [ 156.679263][ T285] EXT4-fs (loop1): unmounting filesystem. [ 156.723525][ T2005] netlink: 28 bytes leftover after parsing attributes in process `syz.4.438'. [ 158.228529][ T1970] ------------[ cut here ]------------ [ 158.234019][ T1970] kernel BUG at fs/buffer.c:2714! [ 158.407562][ T1970] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 158.413850][ T1970] CPU: 1 PID: 1970 Comm: kmmpd-loop0 Not tainted 6.1.134-syzkaller-00012-g646380b087a5 #0 [ 158.423754][ T1970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 158.433816][ T1970] RIP: 0010:submit_bh_wbc+0x4c9/0x4f0 [ 158.439200][ T1970] Code: c3 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c bd fe ff ff 48 89 df e8 48 3d e8 ff e9 b0 fe ff ff e8 2e eb a3 ff 0f 0b e8 27 eb a3 ff <0f> 0b e8 20 eb a3 ff 0f 0b e8 19 eb a3 ff 0f 0b e8 12 eb a3 ff 0f [ 158.458823][ T1970] RSP: 0018:ffffc900119bfca0 EFLAGS: 00010293 [ 158.464905][ T1970] RAX: ffffffff81cbfba9 RBX: 0000000000000000 RCX: ffff88810fc42880 [ 158.472885][ T1970] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 158.480870][ T1970] RBP: ffffc900119bfcf0 R08: dffffc0000000000 R09: ffffed102665b0d3 [ 158.488860][ T1970] R10: ffffed102665b0d3 R11: 1ffff1102665b0d2 R12: 0000000000000000 [ 158.496844][ T1970] R13: 1ffff1102665b0d2 R14: ffff8881332d8690 R15: 0000000000003801 [ 158.504838][ T1970] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 158.513777][ T1970] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 158.520377][ T1970] CR2: 00007fe9d4580178 CR3: 000000012eaba000 CR4: 00000000003506a0 [ 158.528357][ T1970] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 158.536330][ T1970] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 158.544308][ T1970] Call Trace: [ 158.547589][ T1970] [ 158.550527][ T1970] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 158.556349][ T1970] submit_bh+0x1f/0x30 [ 158.560423][ T1970] write_mmp_block_thawed+0x34a/0x4c0 [ 158.565802][ T1970] ? read_mmp_block+0x6d0/0x6d0 [ 158.570660][ T1970] ? __cfi_process_timeout+0x10/0x10 [ 158.575968][ T1970] write_mmp_block+0x138/0x2b0 [ 158.580739][ T1970] kmmpd+0x3ce/0x950 [ 158.584648][ T1970] kthread+0x281/0x320 [ 158.588721][ T1970] ? __cfi_kmmpd+0x10/0x10 [ 158.593141][ T1970] ? __cfi_kthread+0x10/0x10 [ 158.597736][ T1970] ret_from_fork+0x1f/0x30 [ 158.602164][ T1970] [ 158.605179][ T1970] Modules linked in: [ 158.621188][ T1970] ---[ end trace 0000000000000000 ]--- [ 158.626861][ T1970] RIP: 0010:submit_bh_wbc+0x4c9/0x4f0 [ 158.632530][ T1970] Code: c3 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c bd fe ff ff 48 89 df e8 48 3d e8 ff e9 b0 fe ff ff e8 2e eb a3 ff 0f 0b e8 27 eb a3 ff <0f> 0b e8 20 eb a3 ff 0f 0b e8 19 eb a3 ff 0f 0b e8 12 eb a3 ff 0f [ 158.654019][ T1970] RSP: 0018:ffffc900119bfca0 EFLAGS: 00010293 [ 158.660311][ T1970] RAX: ffffffff81cbfba9 RBX: 0000000000000000 RCX: ffff88810fc42880 [ 158.668487][ T1970] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 158.676516][ T1970] RBP: ffffc900119bfcf0 R08: dffffc0000000000 R09: ffffed102665b0d3 [ 158.685027][ T1970] R10: ffffed102665b0d3 R11: 1ffff1102665b0d2 R12: 0000000000000000 [ 158.693676][ T1970] R13: 1ffff1102665b0d2 R14: ffff8881332d8690 R15: 0000000000003801 [ 158.716340][ T1970] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 158.726343][ T1970] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 158.746177][ T1970] CR2: 0000200000000040 CR3: 0000000112b71000 CR4: 00000000003506a0 [ 158.754667][ T1970] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 158.764310][ T366] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 158.787952][ T1970] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 158.807725][ T1970] Kernel panic - not syncing: Fatal exception [ 158.814042][ T1970] Kernel Offset: disabled [ 158.818352][ T1970] Rebooting in 86400 seconds..