last executing test programs: 16.680090814s ago: executing program 0 (id=2566): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1000002, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = getpid() r1 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) getsockopt$inet_int(r1, 0x0, 0x16, &(0x7f00000000c0), &(0x7f0000000100)=0x4) sched_setscheduler(r0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r8 = socket(0x200000100000011, 0x3, 0x0) setsockopt$packet_rx_ring(r8, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r9 = socket$inet6(0xa, 0x1, 0x6) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r9, 0x8983, &(0x7f0000000300)={0x1, 'pimreg\x00'}) close_range(r7, 0xffffffffffffffff, 0x0) 16.605734661s ago: executing program 3 (id=2578): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1000002, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = getpid() r1 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) getsockopt$inet_int(r1, 0x0, 0x16, &(0x7f00000000c0), &(0x7f0000000100)=0x4) sched_setscheduler(r0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r7 = socket(0x200000100000011, 0x3, 0x0) setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) close_range(r6, 0xffffffffffffffff, 0x0) 15.705226654s ago: executing program 3 (id=2574): syz_open_procfs$namespace(0x0, 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) bind$tipc(r0, 0x0, 0x0) close(r0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2800000012202100000000070000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x28}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r5, 0x1, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4008819}, 0x8d0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000300)=ANY=[@ANYRESHEX], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105001a"], 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x24044044) sendmmsg(r6, &(0x7f0000000180), 0x3ef, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x39c}}, 0x0) 15.572533906s ago: executing program 3 (id=2575): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r0}, 0x4) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) write(r2, &(0x7f0000000000)="fa", 0xfffffdef) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8005, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x3f) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000004c0)={[{@noload}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x30}}, {@lazytime}, {@mb_optimize_scan}, {@nogrpid}]}, 0x3, 0x44c, &(0x7f0000001040)="$eJzs3MtvG8UfAPDvrpP8fn2RUMqjDyBQHhWPpEkL9MAFBBJCICHBoRxDklalaYOaINGqgoBQOaJK3BFHJP4CTvSCgBMSVzhwQ5Uq1EsLJ6O1dxvH2G5i7CzUn4+0zszuWDPf7I49s5NNAANrPHtJIrZHxM8RMVrPri0wXv9x/er52T+unp9Nolp9/fekVu7a1fOzRdHifdvyzIE0Iv04ib0t6l06e+7kzMLC/Jk8P7l86p3JpbPnnjxxaub4/PH509NHjhw+NPXM09NP9STOLK5re95f3Lf7pTcvvjp79OJb33+VFPE3xdEj450OPlyt9ri6cu1oSCdDJTaEDalERHa6hmv9fzQqsXryRuPFj0ptHNBX1VybwytV4BaWRNktAMpRfNFn899i27zRR/muPFefAGVxX8+3+pGhSPMyw03z214aj4ijK39+nm3Rn/sQAABrfJONf55oNf5L466GcrflayhjEXF7ROyMiDsiYldE3BlRK3t3RNyzwfqbF0n+Pv5JL3cV2Dpl479n87WtteO/YvQXY5U8t6MW/3By7MTC/MH6sZXsJctPdajj0gs/fdruWOP4L9uy+ouxYN6Oy0P/W/ueuZnlmW7jbXblw4g9Q63iT26sBCQRsTsi9nRZx4nHvtzX7tjN4++gB+tM1S8iHq2f/5Voir+QdF6fnPx/LMwfnGy4Kpr88OOF19rV/4/i74Hs/G9tef3fiH8saVyvXdp4HRd++aTtnKbb638keaOWHsn3vTezvHxmKmIkeaXe6Mb906vvLfJF+Sz+A/tb9/+dsfqb2BsR2UV8b0TcFxH3521/ICIejIj9HeL/7vmH3u4+/v7K4p/b0PlfTYxE857WicrJb79eU+nYRuLPzv/hWupAvqf2+Zd0jms97eruagYAAID/njQitkeSTtxIp+nERP1v+HfF1nRhcWn58WOL756eqz8jMBbDaXGna7ThfuhUPq0v8tNN+UP5fePPKltq+YnZxYW5soOHAbetTf/P/FYpu3VA33leCwaX/g+DS/+HwaX/w+Bq0f+3lNEOYPO1+v7/ICIuPVJCY4BN1dT/Oy37vbzS78YAm8r8HwaX/g+Dax39/9db699VAxGxtCVu/pB8fxOVKLN2iS4Tkf4rmiHRh0Ra9scSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAz/wVAAD//+BF7A8=") socket$inet_udplite(0x2, 0x2, 0x88) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6], 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r7}, 0x10) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') preadv(r8, &(0x7f0000000040)=[{&(0x7f0000000200)=""/233, 0xe9}], 0x1, 0xfff, 0x0) 15.048226794s ago: executing program 0 (id=2579): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) mount$bind(0x0, 0x0, 0x0, 0x0, 0x0) r4 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) r5 = add_key$keyring(&(0x7f0000000100), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, r4) r6 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, r5) r7 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, r6) r8 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x1}, 0x0, 0x0, r7) r9 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, r8) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, r9) r10 = add_key$keyring(0x0, &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) request_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, r10) 14.01182956s ago: executing program 4 (id=2582): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) mount$bind(0x0, 0x0, 0x0, 0x0, 0x0) r4 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) r5 = add_key$keyring(&(0x7f0000000100), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, r4) r6 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, r5) r7 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, r6) r8 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x1}, 0x0, 0x0, r7) r9 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, r8) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, r9) r10 = add_key$keyring(0x0, &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) request_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, r10) 13.992861651s ago: executing program 0 (id=2583): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000ac0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x3810744, &(0x7f0000000700)={[{@noauto_da_alloc}, {@user_xattr}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10000}}, {@jqfmt_vfsv0}, {@delalloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x400000}}, {@noauto_da_alloc}, {@test_dummy_encryption}]}, 0x1, 0x451, &(0x7f0000000d00)="$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") r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @lsm, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5c, @void, @value}, 0x90) r5 = socket$key(0xf, 0x3, 0x2) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000940)=ANY=[@ANYBLOB="38010000100013070000000000000000fe88000000000000000000000000000100000000010000000000000000000000009e43594f00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc0200000000000000000000000000000000000032000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c2900"/240], 0x138}}, 0x0) sendmsg$key(r5, &(0x7f0000000000)={0x400000000000000, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="020300090a0000000000000000000000030006000000800002000000e0000009000000000000000002000100000000002000020200000040030005000000000002"], 0x50}}, 0x0) gettid() r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') read$FUSE(r7, &(0x7f00000029c0)={0x2020}, 0x2020) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000000)={'ip_vti0\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010700000000000000006700000008000100000000000c00990000000000000000000800c3"], 0x38}}, 0x0) 13.130362941s ago: executing program 3 (id=2586): mount$fuse(0x600, 0x0, 0x0, 0x0, 0x0) syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000180)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0xa1000a, &(0x7f00000003c0)=ANY=[], 0x21, 0x1506, &(0x7f0000001b00)="$eJzs3AvYTdX2MPAx5pyLl6Sd5D7HHIudXkyXJLkkySVJkiNJbgkhSZKQ3G9JSELuSe4huYXkfr/lniRJkiQkJJnfo9P5Oud0/v++8//3fZ7v/47f86xnz7HXGnPNucf7vnvN9T57f9NhSOW6VSrUZmb4b8G/PnQHgBQA6A8A1wFABAAlspTIcmV/Bo3d/3snEX+uh6Zf7RGIq0nqn7ZJ/dM2qX/aJvVP26T+aZvUP22T+qdtUn8h0rLtM3JeL1va3eT+f1om7///gxwtPPaLjYVv7PhvpEj90zapf9om9U/bpP5pm9Q/bZP6p21S/7RN6i9EWvZfv3cs/zv4n7Bd7Z8/IYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBpw4XwGwMAf2tf7XEJIYQQQgghhBDizxPSX+0RCCGEEEIIIYQQ4v8+BAUaDESQDtJDCmSAjHANZIJrITNcBwm4HrLADZAVboRskB1yQE7IBbkhD1ggcMAQQ17IB0m4CfLDzZAKBaAgFAIPhaEIFIVicAsUh1uhBNwGJeF2KAWloQyUhTugHNwJ5eEuqAB3Q0WoBJWhCtwDVeFeqAb3QXW4H2rAA1ATHoRa8BeoDQ9BHXgY6sIjUA8ehfrQABpCI2j8X8p/AbrAi9AVukF36AE9oRf0hj7QF/pBf3gJBsDLMBBegUEwGIbAqzAUXoNh8DoMhxG/vGKjYDSMgbEwDsbDBHgTJsJbMAnehskwBabCNJgOM2AmvAOzYDbMgXdhLrwH82A+LICFsAjeh8WwBJbCB7AMPoTlsAJWwipYDWtgLayD9bABNsIm2AxbYCtsg+3wEeyAnbALdsMe2Av74GPYD5/AAfgUDsJn/2b++X/K74iAgAoVGjSYDtNhCqZgRsyImTATZsbMmMAEZsEsmBWzYjbMhjkwB+bCXJgH8yAhISNjXsyLSUxifsyPqZiKBbEgevRYBItgMbwFi2NxLIElsCSWxFJYGktjWSyL5bAclsfyWAErYEWsiJWxMt6D9+C9WA2rYXWsjjWwBtbEmlgLa2FtrI11sA7WxbpYD+thfayPDbEhNsbG2ASbYFNsis2xObbAFtgKW2FrbI1tsA22xbbYDtthe2yPHbADdsRO2AlfwBfwRXwRu2FF1QN7Yk/sjb2xL/bDfvgSDsCX8WV8BQfhYByCr+Kr+BoOw3M4HEfgSByJ5dRoHINjkdV4nIATcCJOxEk4CSfjFJyC03A6zsCZOBNn4Wycje/iXHwP38P5OB8X4iJchItxCS7FpbgMz+NyXIErcRWuxjW4GtfhelyHG3ETbsQtuAW34Tb8CD/CnbgTd+Nu3IsGAD/GT/ATHIQH8SAewkN4GA/jETyCR/EoHsNjeByP4wk8gSfxJJ7C03gGT+NZPIvn8DxewAt4ES/iJXwu11d19hbYMAjUFUYZlU6lUykqRWVUGVUmlUllVplVQiVUFpVFZVVZVTaVTeVQOVQulUvlUXkUKVKsYpVX5VVJlVT5VX6VqlJVQVVQeeVVEVVEFVPFVHFVXJVQt6mS6nZVSpVWzXxZVVaVU819eXWXqqAqqIqqkqqsqqgqqqqqqqqpaqq6qq5qqBqqpnpQ1VI9sC8+pK5Upq4ajPXUEKyvGqiGqpF6DR9TTdQwbKqaqebqCTUCh2Mr1cS3Vk+pNmoMtlXPqLH4rGqvxmMH9bzqqDqpzuoF1UU19V1VNzUZe6ieahr2Vn1UX9VPzcJK6krFKqtX1CA1WA1Rr6qF+Joapl5Xw9UINVK9oUap0WqMGqvGqfFqgnpTTVRvqUnqbTVZTVFT1TQ1Xc1QM9U7apaareaod9Vc9Z6ap+arBWqhWqTeV4vVErVUfaCWqQ/VcrVCrVSr1Gq1Rq1V69R6tUFtVJvUZrVFbVXb1Hb1kdqhdqpdarfao/aqfepjtV99og6oT9VB9Zk6pD5Xh9UX6oj6Uh1VX6lj6mt1XH2jTqhv1Un1nTqlTqsz6nt1Vv2gzqnz6oL6UV1UP6lL6md1WQUFGrXSWhsd6XQ6vU7RGXRGfY3OpK/VmfV1OqGv11n0DTqrvlFn09l1Dp1T59K5dR5tNWmnWcc6r86nk/omnV/frFN1AV1QF9JeF9ZFdFFdTN+ii+tbdQl9my6pb9eldGldRpfVd+hy+k5dXt+lK+i7dUVdSVfWVfQ9uqq+V1fT9+nq+n5dQz+ga+oHdS39F11bP6Tr6Id1Xf2Irqcf1fV1A91QN9KN9WO6iX5cN9XNdHP9hG6hW+pW+kndWj+l2+indVv9jG6nn9Xt9XO6g35ed9SddGf9s76sg+6qu+nuuofuqXvp3rqP7qv76f76JT1Av6wH6lf0ID1YD9Gv6qH6NT1Mv66H6xF6pH5Dj9Kj9Rg9Vo/T4/UE/aaeqN/Sk/TberKeoqfqaXq6nqH7/trTnP+D/Lf+Rf7AX86+TW/XH+kdeqfepXfrPXqv3qf36f16vz6gD+iD+qA+pA/pw/qwPqKP6KP6qD6mj+nj+rg+oU/ok/qkPqVP6x/19/qs/kGf0+f1ef2jvqgv6ku/vgZg0CijjTGRSWfSmxSTwWQ015hM5lqT2VxnEuZ6k8XcYLKaG002k93kMDlNLpPb5DHWkHGGTWzymnwmaW7CXy8oTEFTyHhT2BQxRf+dfJPf3GxSTYF/yP+j8TU2jU0T08Q0NU1Nc9PctDAtTCvTyrQ2rU0b08a0NW1NO9POtDftTQfTwXQ0HU1n09l0MV1MV9PVdDfdTU/Ty/Q2fUxf08/0Ny+ZAWaAGWgGmkFmkBlihpihZqgZZoaZ4Wa4GWlGmlFmlBljxphxZpyZYCaYiWaimWQmmclmsplqpprpZrqZaWaaWWaWmWPmmLlmrpln5pkFZoFZZBaZxWaxWWqWmmVmmVluVpgVZpVZZdaYNWadWWc2mA1mk9lktpgtZrnZbrabHWaH2WV2mT1mj9ln9pn9Zr85YA6Yg+agOWQOmcPmsDlijpij5qg5Zo6Z4+a4OWFOmJPmpDllTpkz5ow5a86ac+acuWAumIvmorlkLpnL5vKVy75IRSoykYnSRemilCglyhhljDJFmaLMUeYoESWiLFGWKGt0Y5Qtyh7liHJGuaLcUZ7IRhS5iKM4yhvli5LRTVH+6OYoNSoQFYwKRT4qHBWJikbFolui4tGtUYnotqhkdHtUKiodlYnKRndE5aI7o/LRXVGF6O6oYlQpqhxVie6Jqkb3RtWi+6Lq0f1RjeiBqGb0YFQr+ktUO3ooqhM9HNWNHonqRY9G9aMGUcOoUdT4T+0/hHPZH/ddbTfb3fawPW0v29v2sX1tP9vfvmQH2JftQPuKHWQH2yH2VTvUvmaH2dftcDvCjrRv2FF2tB1jx9pxdrydYN+0E+1bdpJ92062U+xUO81OtzPsTPuOnWVn2zn2XTvXvmfn2fl2gV1oF9n37WK7xC61H9hl9kO73K6wK+0qu9qusWvtOrvebrAb7Sa72W6xW+02u91+ZHfYnXaX3W332L12n/3Y7ref2AP2U3vQfmYP2c/tYfuFPWK/tEftV/aY/doet9/YE/Zbe9J+Z0/Z0/aM/d6etT/Yc/a8vWB/tBftT/aS/dletuHKxf2Vt3cyZCgdpaMUSqGMlJEyUSbKTJkpQQnKQlkoK2WlbJSNclAOykW5KA/loSuYmPJSXkpSkvJTfkqlVCpIBcmTpyJUhIpRMSpOxakElaCSVJJKUSkqQ2XoDrqD7qQ76S66i+6mu6kSVaIqVIWqUlWqRtWoOlWnGlSDalJNqkW1qDbVpjpUh+pSXapH9ag+1aeG1JAaU2NqQk2oKTWl5tScWlALakWtqDW1pjbUhtpSW2pH7ag9tacO1IE6UkfqTJ2pC3WhrtSVulN36kk9qTf1pr7Ul/pTfxpAA2ggDaRBNIiG0BAaSkNpGA2j4TSCRtIbNIpG0xgaS+NoPE2gCTSRJtIkmkSTaTJNpak0nabTTJpJs2gWzaE5NJfm0jyaRwtoAS2iRbSYFtNSWkrLaBktp+W0klbSalpNa2ktraf1tJE20mbaTFtpK22n7bSDdtAu2kV7aA/to320n/bTATpAB+kgHaJDAQHoCB2ho3SUjtExOk7H6QSdoJN0kk7RKTpDZ+gsnaVzdI4u0AW6SD/RJfqZLlOgFJfBZXTXuEzuWpfZXef+Oc7hcrpcLrfL46zL5rL/Q0zOuVRXwBX82xLTFXWpKVceCznvCrsirqgr5Uq7Mq6su8OVc3e68r+Lq7p7XTV3n6vu7ndV3D3/ENdwD7ia7hFXyz3qarsGro5r5Oq6R1w996ir7xq4hq6Ra+FaulbuSdfaPeXauKd/Fy92S9x6t8FtdJvcfveJu+B+dMfdN+6i+8l1dd1cf/eSG+BedgPdK26QG/y7eKR7w41yo90YN9aNc+N/F09109x0N8PNdO+4WW727+JF7n031y1189x8t8At/CW+Mqal7gO3zH3olrsVbqVb5Va7NW6tW/e/x7rKbXFb3Ta3z33sdridbpfb7fa4vb/EV+ZxwH3qDrrP3DH3tTvsvnBH3Al31H31S3xlfifct+6k+86dcqfdGfe9O+t+cOfc+SvzD1fm/r372V12wQEjK9ZsOOJ0nJ5TOANn5Gs4E1/Lmfk6TvD1nIVv4Kx8I2fj7JyDc3Iuzs152DKxY+aY83I+TvJNnJ9v5lQuwAW5EHsuzEW4KBfjW7g438ol+DYuybdzKS7NZbgs38Hl+E4uz3dxBb6bK3IlrsxV+B6uyvdyNb6Pq/P9XIMf4Jr8INfiv3Btfojr8MNclx/hevwo1+cG3JAbcWN+jJvw49yUm3FzfoJbcEtuxU9ya36K2/DT3Jaf4Xb8LLfn57gDP88duRN35he4C7/IXbkbd+ce3JN7cW/uw325H/fnl3gAv8wD+RUexIN5CL/KQ/k1Hsav83AewSP5DR7Fo3kMj+VxPJ4n8Js8kd/iSfw2T+YpPJWn8XSewTP5HZ7Fs3kOv8tz+T2ex/N5AS/kRfw+L+YlvJQ/4GX8IS/nFbySV/FqXsNreR2v5w28kTfxZt7CW3kbb+ePeAfv5F28m/fwXt7HH/N+zvDrL9xnfIg/58P8BR/hL/kof8XH+Gs+zt/wCf6WT/J3fIpP8xn+ns/yD3yOz/MF/pEv8k98iX/myxwYYoxVrGMTR3G6OH2cEmeIM8bXxJnia+PM8XVxIr4+zhLfEGeNb4yzxdnjHHHOOFecO84T25hiF3Mcx3njfHEyvinOH98cp8YF4oJxodjHheMicdG4WHxLXDy+NS4R3xaXjG+PS8Wl40fuLxvfEZeL74zLx3fFFeK744pxpbhyXCW+J64a3xtXi++Lq8f3x8XjB+Ka8YMx/Pp5lTrxw3Hd+JG4XvxoXD9uEDeMG8WN48fiJvHjcdO4Wdw8fiJuEbeMW8VPxq3jp+I28dN/uL973CPuGfeKe8Uh3KcXJBcmFyXfTy5OLkkuTX6QXJb8MLk8uSK5MrkquTq5Jrk2uS65PrkhuTG5Kbk5uSW5NbktGUKV9ODRK6+98ZFP59P7FJ/BZ/TX+Ez+Wp/ZX+cT/nqfxd/gs/obfTaf3efwOX0un9vn8daTd5597PP6fD7pb/L5/c0+1RfwBX0h731hX8Q38o19Y9/EP+6b+ma+uX/CP+Fb+pb+Sf+kf8q38U/7tv4Z384/69v75/xz/nnf0Xfynf0Lvot/0Xf13Xx339339D19b9/b9/V9fX/f3w/wA/xAP9AP8oP8ED/ED/VD/TA/zA/3w/1IP9KP8qP8GD/Gj/Pj/AQ/wU/0E/0kP8lHADDVT/XT/XQ/08/0s/wsP8fP8XNT5/p5fp5f4Bf4RX6RX+wX+6V+qV/ml/nlfrlf6Vf61X61X+vX+vV+vd/oN/rNfrPf6rf67X673+F3+F1+l9/j9/h9fp/f7/f7A/6AP+gP+kP+kD/sD/sj/kt/1H/lj/mv/XH/jT/hv/Un/Xf+lD/tz/jv/Vn/gz/nz/sL/kd/0f/kL/mf/WUf/ITEm4mJibcSkxJvJyYnpiSmJqYlpidmJGYm3knMSsxOzEm8m5ibeC8xLzE/sSCxMLEo8X5icWJJYmnig8SyxIeJ5YkViZWJVYnViTUGQu4dccgb8oVkuCnkDzeH1FAgFAyFgg+FQ5FQNBQLt4Ti4dZQItwWSobbQ6lQOpQJj4b6oUFoGBqFxuGx0CQ8HpqGZqF5eCK0CC1Dq/BkaB2eCm3C06FteCa0C8+G9uG50CE8HzqGTqFzeCF0CS+GrqFb6B56hJ6hV+gd+oS+oV/oH14KA8LLYWB4JQwKg8OQ8GoYGl4Lw8LrYXgYEUaGN8KoMDqMCWPDuDA+TAhvhonhrTApvB0mhylhapgWpocZYWZ4J8wKs8Oc8G6YG94L88L8sCAsDIvC+2FxWBKWhg/CsvBhWB5WhJVhVVgd1oS1YV1YHzaEjWFT2By2hK1hW9gePgo7ws6wK+wOe8LesC98HPaHT8KB8Gk4GD4Lh8Ln4XD4IhwJX4aj4atwLHwdjodvwonwbTgZvgunwulwJnwfzoYfwrlwPlwIP4aL4adwKfwcLv+bn1mr9OfdQBdCCCGE+P9Krz/Y3+NfPGcAQP3a/imEcO3OnEf/fr8GgM3Z/truo3K1SADAU906PPS3rWLF7t27/3rscg1RvvkAkPinE/war4Dm0BJaQzMo9i/H10d1ush/0H/yNoCMf5eTAr/Fv/X/+X/Q/2NPjFxcMr6Q5T/pfz5Aar7fcq6swv8Wr4DmV2YDzaD4f9B/9iZ/MP4MX0wAaPp3OZkAoGmGfx5/EXgcnobW/3CkEEIIIYQQQgjxV31UmXZ/tH6+sj7PZX7LSQ+/xX+0PhdCCCGEEEIIIcTV92ynzk8+1rp1s3bSkIY00lij5X9yzNX+yySEEEIIIYT4s/120f/bcxmu5oCEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQog06P/FN41d7TkKIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQV9v/CgAA//+LZDZM") setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x6, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r0, &(0x7f0000000000)='u', 0x0}, 0x20) prlimit64(0x0, 0xe, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={0x0}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x0, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000004000000000000000000850000006d00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r5}, 0x10) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000), 0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 13.130027491s ago: executing program 4 (id=2587): r0 = socket$inet(0x2, 0x3, 0x2) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000280)={@empty, @initdev}, &(0x7f00000002c0)=0xc) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='sit0\x00', 0x10) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002"], 0x44}}, 0x0) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) splice(r4, 0x0, r3, 0x0, 0x401, 0x0) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)=""/97, 0x61}], 0x1}}], 0x1, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x8004, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000000480)="d1", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="000000000000ff00000037fc0010000000000007020000f8ffb3c993445f0026b104cd39a5ca5ea1ffffb703000008000000b70400000000000085000000010000009516266ab11aff54f6456141d60c0a0595300c851acb0c58d8a8c81d359d9b0a3c5319c6b972050a17782adb34812959d9ac13ed693ca255d458fb6365272fc84d6f0700000004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES64=r5, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000008500000057"], 0x0, 0x4c7, 0x0, 0x0, 0x41100, 0x15, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in=@multicast1, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xee01}, {}, {0x0, 0x0, 0x0, 0x3}}}, 0xb8}}, 0x20000850) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0xee01}}}, 0xb8}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r7}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 13.101607163s ago: executing program 4 (id=2588): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = gettid() futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) getresuid(&(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) ptrace$getregset(0x4204, r0, 0x200, &(0x7f0000000040)={&(0x7f0000000300)=""/81, 0x51}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x21, &(0x7f0000000000)=0x1f, 0x4) sendmmsg$inet6(r2, &(0x7f0000000800)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000100)="8000102e7577d401", 0x8}], 0x1, &(0x7f0000000080)=ANY=[], 0x28}}], 0x1, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)=ANY=[@ANYBLOB="38010000100001000000000000000000e000000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x138}}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000001b00"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r4}, 0x10) socket$nl_audit(0x10, 0x3, 0x9) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="f00000001000130700000000000000007f000001000000000000000000a700000000000000000000000000000000000000000000000000000a00000000000023", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414bb0000000000000000000000000000000032000000ff0200000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020004004100000000000000"], 0xf0}, 0x1, 0x0, 0x0, 0x20040000}, 0x8c1) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r7}, 0x10) 13.077014416s ago: executing program 0 (id=2590): r0 = syz_open_dev$evdev(&(0x7f00000002c0), 0x0, 0x2000) ioctl$EVIOCGMASK(r0, 0x40049409, 0x0) r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, 0x0) r2 = syz_open_dev$evdev(0x0, 0x0, 0x0) syz_usb_disconnect(r2) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000002c0)) r4 = syz_open_dev$hidraw(&(0x7f0000002300), 0x0, 0x14a042) ioctl$HIDIOCGRDESC(r4, 0x40305829, &(0x7f00000002c0)={0xc, "3a8200000013000000000000"}) ioctl$EVIOCGMASK(r3, 0x5b03, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x2082) write$char_usb(r5, &(0x7f0000000040)="e2", 0x12d8) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000000200)=""/115) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, 0x0) r6 = syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[{{0x9, 0x5, 0x81, 0x3, 0x40}}], {{0x9, 0x5, 0x82, 0x2, 0x60}}, {{0x9, 0x5, 0x3, 0x2, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000a00)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x92, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@feature_unit={0x11, 0x24, 0x6, 0x0, 0x0, 0x5, [0x0, 0x1, 0x9, 0x0, 0x0], 0x4}, @selector_unit={0x5}, @extension_unit={0x7}, @selector_unit={0x7, 0x24, 0x5, 0x0, 0x0, "fde5"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0x0, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0x3}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r6, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r6, 0x82, 0xfffffffffffffd6e, &(0x7f0000000140)="16688a4a3f1cd2db8dcf350051f14ac00d7c36e54167f08f961d2fc0c37d7c8c2136536697a794f470c5f444560dedb1b190fa34325a3c256fb8b4e2297215f331") ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0xd4, 0x28, 0x38, 0x40, 0x4f2, 0xb6ba, 0xaa62, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x1}}]}}]}}, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x18, &(0x7f0000000140)=@string={0x18, 0x3, "6d61a1866c9fe7e0e1c3eaa7a1205e58c483c800740f"}}]}) syz_usb_connect$uac1(0x0, 0xff, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xed, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@feature_unit={0x13, 0x24, 0x6, 0x0, 0x0, 0x6, [0x0, 0x0, 0x0, 0x2, 0x0, 0x0]}, @output_terminal={0x9}, @selector_unit={0x9, 0x24, 0x5, 0x0, 0x0, "f8431cfd"}, @output_terminal={0x9, 0x24, 0x3, 0x0, 0x0, 0x0, 0x4}, @processing_unit={0x7, 0x24, 0x7, 0x6, 0x151b845117ec0700, 0xf9}, @selector_unit={0x7, 0x24, 0x5, 0x0, 0x0, "fde5"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0xff, 0x0, 0xa, {0x7, 0x25, 0x1, 0x83, 0x9, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x0, 0x0, 0x0, "659361f43d22da"}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x0, 0x0, 0x0, "0d04298c169a3c73"}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x6, 0x5, 0x7, "13b5fa9a09e9"}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x0, 0x0, 0x0, 0x2, "a3d4f85cb7ffa2"}, @as_header={0x7}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, "7cfa93", 'I'}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x0, 0x5, 0x0, {0x7, 0x25, 0x1, 0x2, 0x3, 0x7}}}}}}}]}}, &(0x7f0000000c40)={0x0, 0x0, 0x5, &(0x7f0000000b80)={0x5, 0xf, 0x5}, 0x2, [{0xee, &(0x7f00000000c0)=@string={0xee, 0x3, "37af2ca556e8d4989e6b15359b0e32a3428ff823b6bb51093a63ce4d353269c9e25b4bbb0cbccd28766b5fa852518ea8525ffe305932818d664c15fc7624d18a91580c4fd8234778c800489ea9adf040b3ad6ba79a80ba793fdcf8fdde9eaec12a54b3b2f9b45482847f4bea4293b92cff0df620b04bf5a3ad75c50570fece03d36181ebb6964b1d2160bc2d76c96700718238c20b110628738c76d1c602f361acd721d635ba3e6385346c85f708bee763f6e78244c8ddee4b695a5514d994b598024629c18e5938c3b54c4c49dec9c81172cd4faf6f5ae5543325aba7684a0a8b5394954936bcfa3ec1c40a"}}, {0x4, &(0x7f0000000c00)=@lang_id={0x4}}]}) 12.234659123s ago: executing program 4 (id=2592): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00') poll(&(0x7f0000000200)=[{}], 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000001200)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000002000000000000000300000d020000000d00000000000000090000000000000000000000000000000000000000000002020000000000a7f18e11faaefbd94c761d7806f01e6456146a1db7ee65682d8bf24215cb5858a2c3e80bc492437a3070e21800bd1f61e9f38797b1bd258699"], &(0x7f00000002c0)=""/235, 0x4a, 0xeb, 0x1, 0x0, 0x0, @void, @value}, 0x20) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x6, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet(0x2, 0x2, 0x1) signalfd4(r1, &(0x7f0000000280)={[0x8]}, 0x8, 0xc0000) sendmsg$inet(r3, &(0x7f0000000600)={&(0x7f0000000000)={0x2, 0x0, @private}, 0xe, &(0x7f0000000180)=[{&(0x7f0000000400)='*\x00', 0x2}, {&(0x7f0000000200)="140ec82ef63b8e", 0x7}], 0x2}, 0x0) syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000480)='./file0\x00', 0x446, &(0x7f0000000600)=ANY=[@ANYRES32=0x0, @ANYRES64, @ANYRESDEC=0x0, @ANYRESHEX, @ANYRESDEC, @ANYRES8], 0x0, 0x2f8, &(0x7f0000000880)="$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") bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x24, &(0x7f00000000c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x9, 0x3d, &(0x7f0000000240)=""/61, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0), 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 12.210057135s ago: executing program 3 (id=2594): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) mount$bind(0x0, 0x0, 0x0, 0x0, 0x0) r4 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) r5 = add_key$keyring(&(0x7f0000000100), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, r4) r6 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, r5) r7 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, r6) r8 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x1}, 0x0, 0x0, r7) r9 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, r8) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, r9) r10 = add_key$keyring(0x0, &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) request_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, r10) 11.242158135s ago: executing program 2 (id=2595): add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) mount$bind(0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setscheduler(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000008, 0x50, 0xffffffffffffffff, 0x5738d000) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r3, 0x0, 0x8008000000010, &(0x7f00000000c0)="17000000020001000003be8c5ee17688a2003308020300ecff3f0000000300000a0000000098fc5ad9485bbb6a88", 0x2e) pipe2$watch_queue(0x0, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000600000000005e00221a850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, 0x0, 0x0) write$binfmt_misc(r4, &(0x7f0000000200)=ANY=[@ANYBLOB], 0xd) execveat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000700), 0x1000) syz_clone(0x40100000, &(0x7f0000000440)="383131bb83a76fd55646703008f6c5dd71d236739ea014e7d6baa30af163367d4a34860907db4d822cf57d4da13ccf6a1aa2d8cf9ed850b1a18ca98211a56b0d", 0x40, &(0x7f0000000140), &(0x7f0000000580), &(0x7f00000005c0)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 11.224214016s ago: executing program 3 (id=2596): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000340)={[{@journal_checksum}, {@usrjquota_path={'usrjquota', 0x3d, './file2'}}, {@dioread_lock}, {@norecovery}, {@resgid}, {@lazytime}, {@noload}, {@lazytime}, {@noauto_da_alloc}]}, 0xfe, 0x558, &(0x7f0000000c00)="$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") bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYRES64=r0, @ANYRES32=r0, @ANYRESHEX=r0, @ANYRESOCT=r0], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0, r1}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdir(0x0, 0x0) chdir(0x0) renameat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000200)='./bus/file0\x00', 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000000180)=@file={0x1}, 0x6e) listen(r4, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) connect$unix(r5, &(0x7f0000000000)=@file={0x1}, 0x6e) connect$unix(r5, &(0x7f0000000080)=@file={0x1}, 0x6e) ptrace(0x10, 0x1) 11.221067296s ago: executing program 4 (id=2597): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0xc0ed4002, &(0x7f0000000680)={[{@nombcache}, {@noload}, {@bh}, {@noload}, {@data_err_ignore}, {@nojournal_checksum}, {@barrier}]}, 0xfe, 0x444, &(0x7f0000000980)="$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") chdir(&(0x7f0000000080)='./file0\x00') creat(&(0x7f0000000280)='./bus\x00', 0x36b) mount(&(0x7f00000003c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mount$bind(0x0, &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x1718, 0x0, 0x0, 0x0, 0x0, "ef359f413bb93852f7d6d1ce5d29c3ee5e5ca9000f7c41499dc2aac63a4b78c660e677df701908b9aaa3f6a00400", "036c47c6780820d1cbf7896de1fdcf335263bdbcef0100a197fce47ddfdd753abd9501ce721b6ae9b49600002a000000000000000000000000000018c900", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00"}) rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000180)={0xffffffffffffffff, 0x4, 0x80000000, 0x4}) syz_genetlink_get_family_id$gtp(&(0x7f0000000240), 0xffffffffffffffff) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0xf3a, 0x0) ptrace(0x10, 0x1) syz_usb_connect(0x0, 0x24, &(0x7f0000003cc0)=ANY=[@ANYBLOB="12150000"], 0x0) 10.309246221s ago: executing program 2 (id=2600): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) mount$bind(0x0, 0x0, 0x0, 0x0, 0x0) r3 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) r4 = add_key$keyring(&(0x7f0000000100), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, r3) r5 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, r4) r6 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, r5) r7 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x1}, 0x0, 0x0, r6) r8 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, r7) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, r8) r9 = add_key$keyring(0x0, &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) request_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, r9) 9.512324634s ago: executing program 1 (id=2602): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x400003, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRES64=0x0, @ANYRES16=r2, @ANYBLOB="210900000000000000001200000008000600000000000c00018008000100", @ANYRES32=r4, @ANYBLOB="e1511e4174609fc70b060000000000000051170e44"], 0x28}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000040)={'syztnl1\x00', r4, 0x29, 0x7f, 0x0, 0x8, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, 0x80, 0x40, 0x2, 0x3f}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)={0x28, r6, 0x921, 0x0, 0x0, {}, [@ETHTOOL_A_CHANNELS_RX_COUNT={0x8}, @ETHTOOL_A_CHANNELS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x28}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=@ipv6_delrule={0x2c, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e24, 0x4e22}}, @FIB_RULE_POLICY=@FRA_IP_PROTO={0x5}]}, 0x2c}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r10, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) r12 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r12, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x5012}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x333}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4841) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)={0x28, r9, 0x921, 0x0, 0x0, {}, [@ETHTOOL_A_CHANNELS_RX_COUNT={0x8}, @ETHTOOL_A_CHANNELS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}]}, 0x28}}, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000001c0)={0x0, @broadcast, @multicast2}, &(0x7f0000000200)=0xc) r13 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r14 = gettid() r15 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RELOAD(r15, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)={0x3c, r13, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r14}}]}, 0x3c}}, 0x0) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)={0x60, r13, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x60}, 0x1, 0x0, 0x0, 0xc0000}, 0x40) 9.434804731s ago: executing program 1 (id=2603): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffff7f850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000001480)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) futex(0x0, 0xb, 0x0, &(0x7f00000004c0)={r1, r2+60000000}, 0x0, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote}}}}) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r4, 0x0) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, 0x0) ioctl$KVM_NMI(r5, 0xae9a) statx(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x2000, 0x2, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='percpu_create_chunk\x00', r0}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200000100"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='percpu_create_chunk\x00', r6}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x6c, r7, 0x0, 0x70bd2c, 0x25dfdbff, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_TID={0xc}, @GTPA_PEER_ADDR6={0x14, 0xb, @mcast2}, @GTPA_MS_ADDR6={0x14, 0xc, @loopback}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_LINK={0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x844}, 0x44800) 9.149233147s ago: executing program 1 (id=2604): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000380)={[{@test_dummy_encryption}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x84}}, {@stripe={'stripe', 0x3d, 0x7}}, {@commit={'commit', 0x3d, 0x5}}, {@orlov}, {@barrier_val={'barrier', 0x3d, 0x5}}, {@max_batch_time}, {@data_err_abort}]}, 0xd, 0x5d8, &(0x7f0000000c00)="$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") mkdir(&(0x7f0000000000)='./control\x00', 0x0) open$dir(&(0x7f00000002c0)='./control/file0\x00', 0x80040, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x40000000}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sched_getscheduler(0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) socket$netlink(0x10, 0x3, 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x400, &(0x7f0000000680)={[{@fat=@gid={'gid', 0x3d, 0xee01}}, {@shortname_win95}, {@uni_xlate}, {@fat=@showexec}, {@utf8}, {@numtail}, {@rodir}, {@fat=@nfs}, {@uni_xlate}]}, 0x0, 0x237, &(0x7f0000000300)="$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") r6 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0) mkdirat(r6, &(0x7f0000000100)='./control\x00', 0x0) 9.101734332s ago: executing program 2 (id=2605): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80, &(0x7f0000000140)={[], [], 0x22}, 0x0, 0x4c9, &(0x7f0000001a40)="$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") bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x6, 0x8, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_emit_ethernet(0x46, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6064cdd800100000fe0000000000007bae020000c0bd0000000000000000060000000000000000001f00c2"], 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000ca00), 0x0, 0x4004) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000000)) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) readv(r2, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sched_setaffinity(r1, 0x0, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) readv(r3, &(0x7f00000018c0)=[{&(0x7f0000000840)=""/4096, 0x1000}], 0x1) socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, &(0x7f0000000240)) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8002, &(0x7f00000000c0), 0x7, 0x4a9, &(0x7f0000000b40)="$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") chdir(0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, &(0x7f0000000380)) mount(&(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, 0x0, 0x0, 0x1400, 0x0) open(0x0, 0x147842, 0x0) llistxattr(0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x204092, &(0x7f0000000000), 0x6, 0x514, &(0x7f0000001fc0)="$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") ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xe, 0x0, 0x0, 0xfffffffe}}) 8.308731845s ago: executing program 1 (id=2606): bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) pipe(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) creat(&(0x7f0000000280)='./bus\x00', 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040)) epoll_wait(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0) 8.25276678s ago: executing program 2 (id=2607): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) mount$bind(0x0, 0x0, 0x0, 0x0, 0x0) r2 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) r3 = add_key$keyring(&(0x7f0000000100), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, r2) r4 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, r3) r5 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, r4) r6 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x1}, 0x0, 0x0, r5) r7 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, r6) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, r7) r8 = add_key$keyring(0x0, &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) request_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, r8) 7.555767124s ago: executing program 2 (id=2608): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xb, &(0x7f0000000340)=ANY=[@ANYRES32=r1, @ANYRESOCT=r2], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TIOCSTI(r6, 0x5412, &(0x7f00000002c0)) memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff}, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) splice(r4, 0x0, r3, 0x0, 0x401, 0x0) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)=""/97, 0x61}], 0x1}}], 0x1, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x8004, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000000480)="d1", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="000000000000ff00000037fc0010000000000007020000f8ffb3c993445f0026b104cd39a5ca5ea1ffffb703000008000000b70400000000000085000000010000009516266ab11aff54f6456141d60c0a0595300c851acb0c58d8a8c81d359d9b0a3c5319c6b972050a17782adb34812959d9ac13ed693ca255d458fb6365272fc84d6f070000000432e1ff78b4b2cfb0596722e96e3f3808fd5f87290608a9"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES64=r5, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000008500000057"], 0x0, 0x4c7, 0x0, 0x0, 0x41100, 0x15, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in=@multicast1, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xee01}, {}, {0x0, 0x0, 0x0, 0x3}}}, 0xb8}}, 0x20000850) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0xee01}}}, 0xb8}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r7}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 7.438685385s ago: executing program 1 (id=2610): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0x1, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x3) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000118110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$inet_udplite(0x2, 0x2, 0x88) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r5, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x15, &(0x7f0000000b80)=@raw={'raw\x00', 0x4001, 0x3, 0x208, 0xd8, 0x0, 0x148, 0x0, 0x148, 0x170, 0x240, 0x240, 0x170, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0xffffff00, 'ip6gretap0\x00', 'veth1_to_batadv\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x268) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)='/', 0x1}], 0x1}, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x193a, 0x4) recvmmsg(r0, &(0x7f00000005c0), 0x40000000000026c, 0x0, 0x0) 3.91347ms ago: executing program 1 (id=2612): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xe, &(0x7f0000000440), 0x3, 0x440, &(0x7f00000006c0)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00'}, 0x10) epoll_create(0x4) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ptrace$ARCH_GET_CPUID(0x1e, 0x0, 0x0, 0x1011) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r4, &(0x7f0000000000)=0x700, 0x12) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r5, 0x5605, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000200)) setxattr$system_posix_acl(&(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000003c0)='system.posix_acl_default\x00', 0x0, 0x4c, 0x0) listxattr(0x0, 0x0, 0x0) 3.60306ms ago: executing program 2 (id=2613): r0 = socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r4, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x2) read(r6, 0x0, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0), 0x0, 0x4000000) 3.34672ms ago: executing program 4 (id=2611): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, 0x1) syz_usb_connect(0x0, 0x24, &(0x7f0000003cc0)=ANY=[@ANYBLOB="1215"], 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x20081e, &(0x7f00000020c0), 0x1, 0x4ef, &(0x7f0000000a00)="$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") r1 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) ftruncate(r1, 0x4000000) r2 = open(&(0x7f0000000100)='./bus\x00', 0x101c42, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r3, 0x8004587d, &(0x7f0000000140)={0x2, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) fallocate(r2, 0x20, 0x0, 0x10000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = gettid() process_vm_writev(r5, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x229, 0x0) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x15) 0s ago: executing program 0 (id=2621): syz_mount_image$ext4(&(0x7f0000000ac0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x3810744, &(0x7f0000000700), 0x1, 0x451, &(0x7f0000000d00)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) fcntl$setflags(r2, 0x2, 0x1) syz_open_dev$usbfs(0x0, 0x76, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x802c550a, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) kernel console output (not intermixed with test programs): 0) entered disabled state [ 487.834997][ T43] device veth1_macvtap left promiscuous mode [ 487.840953][ T43] device veth0_vlan left promiscuous mode [ 487.916645][ T7724] loop4: detected capacity change from 0 to 40427 [ 487.937071][ T7724] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 488.337237][ T7724] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 488.436821][ T7724] F2FS-fs (loop4): Found nat_bits in checkpoint [ 488.564632][ T7724] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 488.571650][ T7724] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 488.724301][ T7740] bridge0: port 1(bridge_slave_0) entered blocking state [ 488.741437][ T7740] bridge0: port 1(bridge_slave_0) entered disabled state [ 488.893756][ T7740] device bridge_slave_0 entered promiscuous mode [ 489.012616][ T7740] bridge0: port 2(bridge_slave_1) entered blocking state [ 489.092493][ T7778] loop3: detected capacity change from 0 to 2048 [ 489.099183][ T7740] bridge0: port 2(bridge_slave_1) entered disabled state [ 489.106809][ T7740] device bridge_slave_1 entered promiscuous mode [ 489.116351][ T7778] ext4: Unknown parameter 'obj_user' [ 489.297591][ T7785] xt_TCPMSS: Only works on TCP SYN packets [ 489.547168][ T7740] bridge0: port 2(bridge_slave_1) entered blocking state [ 489.554266][ T7740] bridge0: port 2(bridge_slave_1) entered forwarding state [ 489.561478][ T7740] bridge0: port 1(bridge_slave_0) entered blocking state [ 489.568395][ T7740] bridge0: port 1(bridge_slave_0) entered forwarding state [ 489.613824][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 489.623935][ T323] bridge0: port 1(bridge_slave_0) entered disabled state [ 489.639244][ T323] bridge0: port 2(bridge_slave_1) entered disabled state [ 489.722632][ T7792] input: syz1 as /devices/virtual/input/input15 [ 489.875223][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 489.899066][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 489.941869][ T323] bridge0: port 1(bridge_slave_0) entered blocking state [ 489.948937][ T323] bridge0: port 1(bridge_slave_0) entered forwarding state [ 489.957929][ T7794] loop3: detected capacity change from 0 to 256 [ 489.976518][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 490.047857][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 490.061395][ T323] bridge0: port 2(bridge_slave_1) entered blocking state [ 490.068307][ T323] bridge0: port 2(bridge_slave_1) entered forwarding state [ 490.082717][ T3502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 490.097556][ T3502] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 490.345569][ T3502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 490.353850][ T3502] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 490.410185][ T7740] device veth0_vlan entered promiscuous mode [ 490.417935][ T1696] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 490.427483][ T1696] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 490.436021][ T1696] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 490.443894][ T1696] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 490.465680][ T7740] device veth1_macvtap entered promiscuous mode [ 490.484717][ T3502] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 490.493119][ T3502] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 490.509039][ T3502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 490.526652][ T3502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 490.780917][ T3502] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 490.874911][ T1119] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 490.884535][ T1119] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 491.408272][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 491.471093][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 492.516292][ T7827] loop3: detected capacity change from 0 to 512 [ 492.722620][ T7827] ext4: Unknown parameter 'nojournal_checksum"dax' [ 494.617827][ T7853] loop3: detected capacity change from 0 to 512 [ 494.691892][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 494.691955][ T28] audit: type=1400 audit(2000000190.952:871): avc: denied { ioctl } for pid=7842 comm="syz.1.1710" path="/dev/fuse" dev="devtmpfs" ino=93 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 494.722064][ T7853] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 494.732192][ T7853] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038 (0x7fffffff) [ 495.349768][ T7844] bridge0: port 1(bridge_slave_0) entered blocking state [ 495.410373][ T7844] bridge0: port 1(bridge_slave_0) entered disabled state [ 495.424701][ T7844] device bridge_slave_0 entered promiscuous mode [ 495.436266][ T7844] bridge0: port 2(bridge_slave_1) entered blocking state [ 495.443231][ T7844] bridge0: port 2(bridge_slave_1) entered disabled state [ 495.450727][ T7844] device bridge_slave_1 entered promiscuous mode [ 495.702665][ T28] audit: type=1400 audit(2000000191.962:872): avc: denied { rename } for pid=7852 comm="syz.3.1712" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 495.725792][ T7874] EXT4-fs error (device loop3): ext4_get_first_dir_block:3540: inode #12: comm syz.3.1712: Directory hole found for htree leaf block [ 495.746718][ T28] audit: type=1400 audit(2000000191.962:873): avc: denied { reparent } for pid=7852 comm="syz.3.1712" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 495.989331][ T28] audit: type=1400 audit(2000000192.242:874): avc: denied { sqpoll } for pid=7876 comm="syz.0.1716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 496.054477][ T7543] EXT4-fs (loop3): unmounting filesystem. [ 496.115051][ T7844] bridge0: port 2(bridge_slave_1) entered blocking state [ 496.121923][ T7844] bridge0: port 2(bridge_slave_1) entered forwarding state [ 496.129049][ T7844] bridge0: port 1(bridge_slave_0) entered blocking state [ 496.135817][ T7844] bridge0: port 1(bridge_slave_0) entered forwarding state [ 496.143910][ T43] device bridge_slave_1 left promiscuous mode [ 496.150132][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 496.172974][ T43] device bridge_slave_0 left promiscuous mode [ 496.185462][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 496.201547][ T43] device veth1_macvtap left promiscuous mode [ 496.213633][ T43] device veth0_vlan left promiscuous mode [ 496.422211][ T7883] loop3: detected capacity change from 0 to 40427 [ 496.451989][ T7883] F2FS-fs (loop3): Invalid Fs Meta Ino: node(1) meta(262146) root(3) [ 496.460194][ T7883] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 496.537209][ T7883] F2FS-fs (loop3): Found nat_bits in checkpoint [ 496.561636][ T376] bridge0: port 1(bridge_slave_0) entered disabled state [ 496.769286][ T376] bridge0: port 2(bridge_slave_1) entered disabled state [ 496.780405][ T7883] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 496.788758][ T7883] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 496.825532][ T3502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 496.834791][ T3502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 496.878863][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 496.887381][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 496.895692][ T6] bridge0: port 1(bridge_slave_0) entered blocking state [ 496.902592][ T6] bridge0: port 1(bridge_slave_0) entered forwarding state [ 496.910415][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 496.918878][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 497.181664][ T6] bridge0: port 2(bridge_slave_1) entered blocking state [ 497.188559][ T6] bridge0: port 2(bridge_slave_1) entered forwarding state [ 497.195782][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 497.209723][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 497.218013][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 497.238369][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 497.246695][ T7883] syz.3.1717: attempt to access beyond end of device [ 497.246695][ T7883] loop3: rw=2049, sector=40424, nr_sectors = 8 limit=40427 [ 497.299443][ T1119] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 497.310798][ T1119] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 497.326588][ T7887] bridge0: port 1(bridge_slave_0) entered blocking state [ 497.335446][ T7887] bridge0: port 1(bridge_slave_0) entered disabled state [ 497.342919][ T7887] device bridge_slave_0 entered promiscuous mode [ 497.349812][ T7887] bridge0: port 2(bridge_slave_1) entered blocking state [ 497.357089][ T7887] bridge0: port 2(bridge_slave_1) entered disabled state [ 497.364598][ T7887] device bridge_slave_1 entered promiscuous mode [ 497.386722][ T7844] device veth0_vlan entered promiscuous mode [ 497.395597][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 497.403644][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 497.443579][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 497.453192][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 497.476060][ T7911] loop3: detected capacity change from 0 to 16 [ 497.492738][ T7911] erofs: (device loop3): EXPERIMENTAL compressed fragments feature in use. Use at your own risk! [ 497.503869][ T7911] erofs: (device loop3): EXPERIMENTAL global deduplication feature in use. Use at your own risk! [ 497.515536][ T1696] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 497.524012][ T1696] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 497.524433][ T7911] erofs: (device loop3): mounted with root inode @ nid 36. [ 497.547348][ T7844] device veth1_macvtap entered promiscuous mode [ 497.553839][ T7911] syz.3.1723: attempt to access beyond end of device [ 497.553839][ T7911] loop3: rw=0, sector=4294967295, nr_sectors = 1 limit=16 [ 497.575782][ T3502] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 497.583706][ T7911] syz.3.1723: attempt to access beyond end of device [ 497.583706][ T7911] loop3: rw=0, sector=4294967295, nr_sectors = 1 limit=16 [ 497.583821][ T3502] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 497.620208][ T3502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 497.629642][ T3502] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 497.638177][ T3502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 498.173871][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 498.213404][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 498.374629][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 498.384605][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 498.446275][ T376] bridge0: port 1(bridge_slave_0) entered blocking state [ 498.453156][ T376] bridge0: port 1(bridge_slave_0) entered forwarding state [ 498.460881][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 498.474501][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 498.482601][ T376] bridge0: port 2(bridge_slave_1) entered blocking state [ 498.489506][ T376] bridge0: port 2(bridge_slave_1) entered forwarding state [ 498.519837][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 498.691257][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 498.721166][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 498.863877][ T1119] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 498.872417][ T1119] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 499.003530][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 499.048994][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 499.122665][ T7887] device veth0_vlan entered promiscuous mode [ 499.135005][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 499.145459][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 499.164822][ T1696] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 499.176867][ T1696] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 499.203451][ T7887] device veth1_macvtap entered promiscuous mode [ 499.214800][ T1696] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 499.222614][ T1696] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 499.235213][ T1696] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 499.286012][ T43] device bridge_slave_1 left promiscuous mode [ 499.300321][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 499.310955][ T43] device bridge_slave_0 left promiscuous mode [ 499.319769][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 499.328142][ T43] device veth1_macvtap left promiscuous mode [ 499.334090][ T43] device veth0_vlan left promiscuous mode [ 499.923378][ T7949] xt_TCPMSS: Only works on TCP SYN packets [ 500.273349][ T28] audit: type=1400 audit(2000000196.532:875): avc: denied { write } for pid=7952 comm="syz.3.1734" name="file0" dev="tmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 500.318687][ T28] audit: type=1400 audit(2000000196.532:876): avc: denied { open } for pid=7952 comm="syz.3.1734" path="/18/file0" dev="tmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 500.341788][ T28] audit: type=1400 audit(2000000196.532:877): avc: denied { ioctl } for pid=7952 comm="syz.3.1734" path="/18/file0" dev="tmpfs" ino=117 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 500.367113][ T28] audit: type=1400 audit(2000000196.582:878): avc: denied { mounton } for pid=7952 comm="syz.3.1734" path="/18/file0" dev="tmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 500.390348][ T28] audit: type=1400 audit(2000000196.582:879): avc: denied { setattr } for pid=7952 comm="syz.3.1734" name="file0" dev="tmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 500.639941][ T7961] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1735'. [ 500.656826][ T28] audit: type=1400 audit(2000000196.752:880): avc: denied { create } for pid=7950 comm="syz.0.1733" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 500.676721][ T28] audit: type=1400 audit(2000000196.762:881): avc: denied { sys_admin } for pid=7950 comm="syz.0.1733" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 500.713059][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 500.778704][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 503.554215][ T7998] fuse: Bad value for 'fd' [ 504.315354][ T8002] bridge0: port 1(bridge_slave_0) entered blocking state [ 504.322396][ T8002] bridge0: port 1(bridge_slave_0) entered disabled state [ 504.330205][ T8002] device bridge_slave_0 entered promiscuous mode [ 504.337377][ T8002] bridge0: port 2(bridge_slave_1) entered blocking state [ 504.882936][ T8002] bridge0: port 2(bridge_slave_1) entered disabled state [ 504.892314][ T8002] device bridge_slave_1 entered promiscuous mode [ 504.942570][ T8002] bridge0: port 2(bridge_slave_1) entered blocking state [ 504.949496][ T8002] bridge0: port 2(bridge_slave_1) entered forwarding state [ 504.956601][ T8002] bridge0: port 1(bridge_slave_0) entered blocking state [ 504.963540][ T8002] bridge0: port 1(bridge_slave_0) entered forwarding state [ 505.779973][ T8023] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1745'. [ 505.827092][ T315] bridge0: port 1(bridge_slave_0) entered disabled state [ 505.842581][ T315] bridge0: port 2(bridge_slave_1) entered disabled state [ 505.865612][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 505.873295][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 505.899176][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 505.908538][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 505.916836][ T315] bridge0: port 1(bridge_slave_0) entered blocking state [ 505.923723][ T315] bridge0: port 1(bridge_slave_0) entered forwarding state [ 505.931265][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 506.471399][ T28] audit: type=1400 audit(2000000202.272:882): avc: denied { map } for pid=8027 comm="syz.0.1749" path="socket:[59541]" dev="sockfs" ino=59541 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 506.495245][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 506.495269][ T28] audit: type=1400 audit(2000000202.272:883): avc: denied { read } for pid=8027 comm="syz.0.1749" path="socket:[59541]" dev="sockfs" ino=59541 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 506.503351][ T315] bridge0: port 2(bridge_slave_1) entered blocking state [ 506.533094][ T315] bridge0: port 2(bridge_slave_1) entered forwarding state [ 507.619833][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 507.626126][ T8046] syz.2.1752[8046] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 507.627721][ T8046] syz.2.1752[8046] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 507.628317][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 507.863999][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 507.872651][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 507.883756][ T8047] xt_socket: unknown flags 0x50 [ 507.929925][ T8002] device veth0_vlan entered promiscuous mode [ 508.150043][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 508.158597][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 508.166909][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 508.174777][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 508.186342][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 508.193934][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 508.213942][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 508.222477][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 508.232139][ T8002] device veth1_macvtap entered promiscuous mode [ 508.266839][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 508.274710][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 508.283209][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 509.121349][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 509.139703][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 510.195417][ T6] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 510.920516][ T8082] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 511.507939][ T8093] xt_TCPMSS: Only works on TCP SYN packets [ 511.571135][ T8096] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1766'. [ 511.605077][ T43] device bridge_slave_1 left promiscuous mode [ 511.611130][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 511.618448][ T43] device bridge_slave_0 left promiscuous mode [ 511.624725][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 511.632968][ T43] device veth1_macvtap left promiscuous mode [ 511.639463][ T43] device veth0_vlan left promiscuous mode [ 511.644345][ T6] usb 1-1: unable to get BOS descriptor or descriptor too short [ 512.684241][ T28] audit: type=1326 audit(2000000208.922:884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8109 comm="syz.4.1771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67e297df39 code=0x7ffc0000 [ 512.708244][ T28] audit: type=1326 audit(2000000208.922:885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8109 comm="syz.4.1771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67e297df39 code=0x7ffc0000 [ 512.731753][ T28] audit: type=1326 audit(2000000208.922:886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8109 comm="syz.4.1771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=118 compat=0 ip=0x7f67e297df39 code=0x7ffc0000 [ 512.748512][ T6] usb 1-1: config 0 has no interfaces? [ 512.782727][ T28] audit: type=1326 audit(2000000208.922:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8109 comm="syz.4.1771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67e297df39 code=0x7ffc0000 [ 512.842200][ T28] audit: type=1326 audit(2000000208.922:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8109 comm="syz.4.1771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67e297df39 code=0x7ffc0000 [ 513.183414][ T28] audit: type=1326 audit(2000000208.922:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8109 comm="syz.4.1771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f67e297df39 code=0x7ffc0000 [ 513.212022][ T28] audit: type=1326 audit(2000000208.922:890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8109 comm="syz.4.1771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67e297df39 code=0x7ffc0000 [ 513.317660][ T28] audit: type=1326 audit(2000000208.922:891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8109 comm="syz.4.1771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67e297df39 code=0x7ffc0000 [ 513.357601][ T28] audit: type=1326 audit(2000000208.922:892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8109 comm="syz.4.1771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f67e297df39 code=0x7ffc0000 [ 513.382487][ T28] audit: type=1326 audit(2000000208.922:893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8109 comm="syz.4.1771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67e297df39 code=0x7ffc0000 [ 513.454429][ T6] usb 1-1: string descriptor 0 read error: -22 [ 513.461066][ T6] usb 1-1: New USB device found, idVendor=07da, idProduct=104d, bcdDevice=e5.48 [ 513.471399][ T6] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 513.540673][ T6] usb 1-1: config 0 descriptor?? [ 513.677239][ T323] usb 1-1: USB disconnect, device number 16 [ 513.858228][ T1696] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 513.871624][ T1119] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 514.105904][ T8140] device pim6reg1 entered promiscuous mode [ 514.294311][ T1119] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 514.298691][ T8142] xt_hashlimit: size too large, truncated to 1048576 [ 514.305542][ T1119] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 514.311704][ T8142] xt_hashlimit: overflow, try lower: 0/0 [ 514.321638][ T1119] usb 3-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 514.335889][ T1119] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 514.344674][ T1119] usb 3-1: config 0 descriptor?? [ 514.423536][ T8146] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1779'. [ 514.464322][ T1696] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 514.477856][ T1696] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 514.537374][ T8149] xt_TCPMSS: Only works on TCP SYN packets [ 514.659400][ T1696] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 514.660433][ T1696] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 42037, setting to 1024 [ 514.661461][ T1696] usb 5-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 514.894357][ T1696] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 514.903568][ T1696] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.911453][ T1696] usb 5-1: Product: syz [ 514.915526][ T1696] usb 5-1: Manufacturer: syz [ 514.919965][ T1696] usb 5-1: SerialNumber: syz [ 515.116747][ T1119] logitech-hidpp-device 0003:046D:C086.000E: ignoring exceeding usage max [ 515.167883][ T1119] logitech-hidpp-device 0003:046D:C086.000E: hidraw0: USB HID v0.00 Device [HID 046d:c086] on usb-dummy_hcd.2-1/input0 [ 515.182365][ T8113] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 515.232406][ T8162] netlink: 'syz.1.1782': attribute type 12 has an invalid length. [ 515.349512][ T3502] usb 3-1: USB disconnect, device number 21 [ 515.838674][ T317] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 515.914326][ T1696] cdc_ncm 5-1:1.0: bind() failure [ 515.934269][ T1696] cdc_ncm: probe of 5-1:1.1 failed with error -71 [ 515.954269][ T1696] cdc_mbim: probe of 5-1:1.1 failed with error -71 [ 515.969657][ T1696] usb 5-1: USB disconnect, device number 30 [ 516.644303][ T317] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 516.654377][ T317] usb 2-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 516.663288][ T317] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 516.676906][ T317] usb 2-1: config 0 descriptor?? [ 516.739915][ T317] usb 2-1: Found UVC 0.00 device (046d:08c1) [ 516.746741][ T317] usb 2-1: No valid video chain found. [ 516.895915][ T8188] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 516.910653][ T8188] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 517.033585][ T1696] usb 2-1: USB disconnect, device number 15 [ 517.053088][ T8193] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1790'. [ 517.169642][ T8199] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1793'. [ 517.823722][ T28] kauditd_printk_skb: 97 callbacks suppressed [ 517.823812][ T28] audit: type=1400 audit(2000000214.072:991): avc: denied { create } for pid=8208 comm="syz.4.1796" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 517.893023][ T28] audit: type=1400 audit(2000000214.082:992): avc: denied { write } for pid=8208 comm="syz.4.1796" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 517.913755][ T28] audit: type=1400 audit(2000000214.082:993): avc: denied { nlmsg_write } for pid=8208 comm="syz.4.1796" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 517.953552][ T28] audit: type=1400 audit(2000000214.212:994): avc: denied { execmem } for pid=8215 comm="syz.0.1798" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 519.222346][ T8240] xt_socket: unknown flags 0x50 [ 520.111911][ T8251] bridge0: port 1(bridge_slave_0) entered blocking state [ 520.130290][ T8251] bridge0: port 1(bridge_slave_0) entered disabled state [ 520.137887][ T8251] device bridge_slave_0 entered promiscuous mode [ 520.154714][ T8251] bridge0: port 2(bridge_slave_1) entered blocking state [ 520.178366][ T8251] bridge0: port 2(bridge_slave_1) entered disabled state [ 520.186303][ T8251] device bridge_slave_1 entered promiscuous mode [ 520.358617][ T8251] bridge0: port 2(bridge_slave_1) entered blocking state [ 520.365704][ T8251] bridge0: port 2(bridge_slave_1) entered forwarding state [ 520.372781][ T8251] bridge0: port 1(bridge_slave_0) entered blocking state [ 520.379573][ T8251] bridge0: port 1(bridge_slave_0) entered forwarding state [ 520.626473][ T43] device bridge_slave_1 left promiscuous mode [ 520.633159][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 520.653015][ T43] device bridge_slave_0 left promiscuous mode [ 520.669114][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 520.689967][ T43] device veth1_macvtap left promiscuous mode [ 520.705582][ T43] device veth0_vlan left promiscuous mode [ 520.868959][ T1119] bridge0: port 1(bridge_slave_0) entered disabled state [ 520.877959][ T1119] bridge0: port 2(bridge_slave_1) entered disabled state [ 520.926744][ T1696] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 520.936332][ T1696] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 520.960485][ T1468] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 520.970899][ T1468] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 520.986354][ T1468] bridge0: port 1(bridge_slave_0) entered blocking state [ 520.993235][ T1468] bridge0: port 1(bridge_slave_0) entered forwarding state [ 521.015803][ T1468] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 521.024137][ T1468] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 521.040432][ T1468] bridge0: port 2(bridge_slave_1) entered blocking state [ 521.047444][ T1468] bridge0: port 2(bridge_slave_1) entered forwarding state [ 521.070340][ T1468] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 521.080090][ T1468] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 521.091786][ T1468] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 521.100112][ T1468] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 521.116602][ T1468] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 521.138826][ T1468] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 521.153849][ T1468] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 521.174535][ T1468] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 521.183326][ T8251] device veth0_vlan entered promiscuous mode [ 521.194636][ T1696] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 521.201953][ T1696] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 521.220447][ T8251] device veth1_macvtap entered promiscuous mode [ 521.241113][ T1468] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 521.254540][ T1468] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 521.272705][ T1468] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 521.280444][ T1468] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 521.294558][ T1468] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 521.320892][ T1696] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 521.334574][ T1696] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 521.788434][ T28] audit: type=1400 audit(2000000217.832:995): avc: denied { bind } for pid=8276 comm="syz.0.1813" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 521.937441][ T28] audit: type=1400 audit(2000000218.112:996): avc: denied { setopt } for pid=8271 comm="syz.4.1823" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 522.186022][ T8275] syz.1.1808[8275] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 522.186098][ T8275] syz.1.1808[8275] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 523.692714][ T8306] xt_TCPMSS: Only works on TCP SYN packets [ 524.775083][ T2003] device bridge_slave_1 left promiscuous mode [ 524.787640][ T2003] bridge0: port 2(bridge_slave_1) entered disabled state [ 524.809793][ T2003] device bridge_slave_0 left promiscuous mode [ 524.816338][ T2003] bridge0: port 1(bridge_slave_0) entered disabled state [ 524.824773][ T2003] device veth1_macvtap left promiscuous mode [ 524.830800][ T2003] device veth0_vlan left promiscuous mode [ 524.992563][ T8322] bridge0: port 1(bridge_slave_0) entered blocking state [ 525.004842][ T8322] bridge0: port 1(bridge_slave_0) entered disabled state [ 525.020847][ T8322] device bridge_slave_0 entered promiscuous mode [ 525.030214][ T8322] bridge0: port 2(bridge_slave_1) entered blocking state [ 525.037264][ T8322] bridge0: port 2(bridge_slave_1) entered disabled state [ 525.044649][ T8322] device bridge_slave_1 entered promiscuous mode [ 525.460322][ T8338] xt_TCPMSS: Only works on TCP SYN packets [ 525.730158][ T8322] bridge0: port 2(bridge_slave_1) entered blocking state [ 525.737142][ T8322] bridge0: port 2(bridge_slave_1) entered forwarding state [ 525.744436][ T8322] bridge0: port 1(bridge_slave_0) entered blocking state [ 525.751367][ T8322] bridge0: port 1(bridge_slave_0) entered forwarding state [ 525.778556][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 525.786701][ T317] bridge0: port 1(bridge_slave_0) entered disabled state [ 525.794018][ T317] bridge0: port 2(bridge_slave_1) entered disabled state [ 525.811876][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 525.820815][ T317] bridge0: port 1(bridge_slave_0) entered blocking state [ 525.827727][ T317] bridge0: port 1(bridge_slave_0) entered forwarding state [ 525.835662][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 525.843716][ T317] bridge0: port 2(bridge_slave_1) entered blocking state [ 525.850584][ T317] bridge0: port 2(bridge_slave_1) entered forwarding state [ 526.170605][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 526.181077][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 526.194919][ T1119] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 526.213191][ T1119] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 526.234802][ T8322] device veth0_vlan entered promiscuous mode [ 526.265858][ T8322] device veth1_macvtap entered promiscuous mode [ 526.300616][ T1085] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 526.308679][ T1085] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 526.316604][ T1085] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 526.324722][ T1085] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 526.415454][ T8356] xt_TCPMSS: Only works on TCP SYN packets [ 526.422643][ T1085] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 526.431015][ T1085] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 526.440190][ T1085] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 526.449417][ T1085] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 526.458829][ T1085] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 527.021178][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 527.059439][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 527.224075][ T8349] bridge0: port 1(bridge_slave_0) entered blocking state [ 527.239478][ T8349] bridge0: port 1(bridge_slave_0) entered disabled state [ 527.247244][ T8349] device bridge_slave_0 entered promiscuous mode [ 527.254132][ T8349] bridge0: port 2(bridge_slave_1) entered blocking state [ 527.261155][ T8349] bridge0: port 2(bridge_slave_1) entered disabled state [ 527.268829][ T8349] device bridge_slave_1 entered promiscuous mode [ 527.363354][ T8379] hub 6-0:1.0: USB hub found [ 527.368464][ T8379] hub 6-0:1.0: 1 port detected [ 527.631004][ T1119] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 527.638788][ T1119] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 527.658756][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 527.667988][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 527.676361][ T4461] bridge0: port 1(bridge_slave_0) entered blocking state [ 527.683240][ T4461] bridge0: port 1(bridge_slave_0) entered forwarding state [ 527.691998][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 527.700349][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 527.708729][ T4461] bridge0: port 2(bridge_slave_1) entered blocking state [ 527.715721][ T4461] bridge0: port 2(bridge_slave_1) entered forwarding state [ 527.764864][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 527.772676][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 527.780583][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 527.790972][ T1468] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 527.800105][ T2003] device bridge_slave_1 left promiscuous mode [ 527.806375][ T2003] bridge0: port 2(bridge_slave_1) entered disabled state [ 527.896714][ T2003] device bridge_slave_0 left promiscuous mode [ 527.927095][ T2003] bridge0: port 1(bridge_slave_0) entered disabled state [ 527.974558][ T2003] device veth1_macvtap left promiscuous mode [ 528.040662][ T2003] device veth0_vlan left promiscuous mode [ 528.505618][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 528.513399][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 528.521592][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 528.529140][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 528.537027][ T8349] device veth0_vlan entered promiscuous mode [ 528.572325][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 528.582199][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 528.596625][ T8349] device veth1_macvtap entered promiscuous mode [ 528.855744][ T8392] bridge0: port 1(bridge_slave_0) entered blocking state [ 528.862736][ T8392] bridge0: port 1(bridge_slave_0) entered disabled state [ 528.870136][ T8392] device bridge_slave_0 entered promiscuous mode [ 528.877103][ T8392] bridge0: port 2(bridge_slave_1) entered blocking state [ 528.884084][ T8392] bridge0: port 2(bridge_slave_1) entered disabled state [ 528.891475][ T8392] device bridge_slave_1 entered promiscuous mode [ 528.912623][ T1696] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 528.920768][ T1696] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 528.929187][ T1696] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 528.983167][ T1468] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 528.991233][ T1468] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 529.054696][ T1468] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 529.066007][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 529.074078][ T317] bridge0: port 1(bridge_slave_0) entered blocking state [ 529.080957][ T317] bridge0: port 1(bridge_slave_0) entered forwarding state [ 529.108135][ T1468] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 529.116160][ T1468] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 529.124132][ T1468] bridge0: port 2(bridge_slave_1) entered blocking state [ 529.130982][ T1468] bridge0: port 2(bridge_slave_1) entered forwarding state [ 529.139413][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 529.209899][ T8418] xt_TCPMSS: Only works on TCP SYN packets [ 529.411113][ T1468] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 529.433095][ T8392] device veth0_vlan entered promiscuous mode [ 529.447068][ T8392] device veth1_macvtap entered promiscuous mode [ 529.481010][ T1085] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 529.489587][ T1085] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 529.498199][ T1085] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 529.541544][ T1085] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 529.566813][ T1085] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 529.575179][ T1085] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 529.584350][ T1085] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 529.983202][ T8428] xt_TCPMSS: Only works on TCP SYN packets [ 530.867339][ T8429] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1845'. [ 530.876692][ T8429] xt_TCPMSS: Only works on TCP SYN packets [ 530.884729][ T1696] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 531.233888][ T2003] device bridge_slave_1 left promiscuous mode [ 531.242401][ T2003] bridge0: port 2(bridge_slave_1) entered disabled state [ 531.251315][ T2003] device bridge_slave_0 left promiscuous mode [ 531.257837][ T2003] bridge0: port 1(bridge_slave_0) entered disabled state [ 531.269402][ T2003] device veth1_macvtap left promiscuous mode [ 531.304400][ T1696] usb 3-1: unable to get BOS descriptor or descriptor too short [ 532.100573][ T8446] device vlan2 entered promiscuous mode [ 532.114671][ T1696] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 532.122113][ T1696] usb 3-1: can't read configurations, error -71 [ 532.877120][ T8470] xt_socket: unknown flags 0x50 [ 533.331040][ T8481] xt_TCPMSS: Only works on TCP SYN packets [ 533.430423][ T8480] xt_TCPMSS: Only works on TCP SYN packets [ 534.156279][ T8499] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1868'. [ 534.165265][ T8499] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1868'. [ 535.639719][ T28] audit: type=1400 audit(2000000231.902:997): avc: denied { relabelfrom } for pid=8514 comm="syz.1.1875" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 535.659397][ T28] audit: type=1400 audit(2000000231.902:998): avc: denied { relabelto } for pid=8514 comm="syz.1.1875" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 537.037916][ T8535] xt_TCPMSS: Only works on TCP SYN packets [ 537.626510][ T8547] overlayfs: failed to resolve './file0': -2 [ 538.268491][ T28] audit: type=1326 audit(2000000234.532:999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8557 comm="syz.3.1886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddda77df39 code=0x7ffc0000 [ 538.327115][ T28] audit: type=1326 audit(2000000234.552:1000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8557 comm="syz.3.1886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fddda77df39 code=0x7ffc0000 [ 539.379069][ T28] audit: type=1326 audit(2000000234.552:1001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8557 comm="syz.3.1886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddda77df39 code=0x7ffc0000 [ 539.404189][ T28] audit: type=1326 audit(2000000234.552:1002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8557 comm="syz.3.1886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7fddda77df39 code=0x7ffc0000 [ 540.019370][ T28] audit: type=1326 audit(2000000234.552:1003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8557 comm="syz.3.1886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddda77df39 code=0x7ffc0000 [ 540.084282][ T28] audit: type=1326 audit(2000000234.552:1004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8557 comm="syz.3.1886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fddda77df39 code=0x7ffc0000 [ 540.117270][ T28] audit: type=1326 audit(2000000234.552:1005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8557 comm="syz.3.1886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddda77df39 code=0x7ffc0000 [ 540.141706][ T28] audit: type=1326 audit(2000000234.552:1006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8557 comm="syz.3.1886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fddda77df39 code=0x7ffc0000 [ 540.227127][ T8583] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1890'. [ 540.236542][ T8583] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1890'. [ 540.472011][ T8587] input: syz0 as /devices/virtual/input/input16 [ 546.678488][ T8651] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1906'. [ 548.761733][ T8665] xt_TCPMSS: Only works on TCP SYN packets [ 551.328155][ T8700] xt_socket: unknown flags 0x50 [ 555.700917][ T8759] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1934'. [ 557.173484][ T8764] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 557.182268][ T8764] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 557.191612][ T8770] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1935'. [ 557.200877][ T8770] xt_TCPMSS: Only works on TCP SYN packets [ 557.663101][ T8788] xt_socket: unknown flags 0x50 [ 558.654252][ T8053] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 559.232755][ T8802] overlayfs: failed to get inode (-116) [ 559.238490][ T8802] overlayfs: failed to look up (file0) for ino (-116) [ 559.794514][ T8053] usb 2-1: Using ep0 maxpacket: 16 [ 559.924341][ T8053] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 560.028805][ T8817] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1949'. [ 560.038989][ T8817] xt_TCPMSS: Only works on TCP SYN packets [ 560.162921][ T8053] usb 2-1: New USB device found, idVendor=1a0a, idProduct=0104, bcdDevice=dd.d4 [ 560.174984][ T8053] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 560.187042][ T8053] usb 2-1: Product: syz [ 560.194147][ T8053] usb 2-1: Manufacturer: syz [ 560.299876][ T8053] usb 2-1: SerialNumber: syz [ 560.323790][ T8053] usb 2-1: config 0 descriptor?? [ 560.375619][ T8053] usb_ehset_test: probe of 2-1:0.0 failed with error -32 [ 560.408416][ T4461] usb 2-1: USB disconnect, device number 16 [ 560.419630][ T8820] overlayfs: statfs failed on './file0' [ 563.904940][ T8865] overlayfs: failed to get inode (-116) [ 563.910624][ T8865] overlayfs: failed to look up (file0) for ino (-116) [ 564.444273][ T376] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 564.482403][ T8878] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1965'. [ 564.496999][ T8878] xt_TCPMSS: Only works on TCP SYN packets [ 564.871653][ T8881] binder: 8880:8881 ioctl 4018620d 0 returned -22 [ 565.044549][ T376] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 565.055444][ T376] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 565.147601][ T376] usb 5-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 565.159511][ T376] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.162066][ T8887] overlayfs: statfs failed on './file0' [ 565.168271][ T376] usb 5-1: config 0 descriptor?? [ 565.321736][ T8893] overlayfs: failed to resolve './file0': -2 [ 566.084261][ T1468] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 566.391588][ T376] logitech-hidpp-device 0003:046D:C086.000F: item fetching failed at offset 1/5 [ 566.442051][ T376] logitech-hidpp-device 0003:046D:C086.000F: hidpp_probe:parse failed [ 566.455107][ T376] logitech-hidpp-device: probe of 0003:046D:C086.000F failed with error -22 [ 566.605189][ T28] kauditd_printk_skb: 23 callbacks suppressed [ 566.605231][ T28] audit: type=1400 audit(2000000262.872:1030): avc: denied { bind } for pid=8866 comm="syz.4.1963" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 567.373847][ T323] usb 5-1: USB disconnect, device number 31 [ 569.654377][ T323] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 569.904224][ T323] usb 3-1: Using ep0 maxpacket: 16 [ 570.323674][ T28] audit: type=1400 audit(2000000266.462:1031): avc: denied { watch_reads } for pid=8948 comm="syz.3.1983" path="/29/file0" dev="tmpfs" ino=192 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 570.384557][ T323] usb 3-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice=99.81 [ 570.393664][ T323] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 570.402737][ T323] usb 3-1: Product: syz [ 570.407765][ T323] usb 3-1: Manufacturer: syz [ 570.412218][ T323] usb 3-1: SerialNumber: syz [ 570.450431][ T323] usb 3-1: config 0 descriptor?? [ 570.498295][ T323] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 570.508421][ T323] ftdi_sio ttyUSB0: unknown device type: 0x9981 [ 570.701963][ T323] usb 3-1: USB disconnect, device number 24 [ 570.707999][ T323] ftdi_sio 3-1:0.0: device disconnected [ 571.722613][ T8974] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1989'. [ 573.534803][ T9003] device syzkaller0 entered promiscuous mode [ 575.984846][ T9038] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2004'. [ 575.993882][ T9038] xt_TCPMSS: Only works on TCP SYN packets [ 576.279390][ T9043] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2007'. [ 577.004058][ T28] audit: type=1400 audit(2000000273.132:1032): avc: denied { setopt } for pid=9039 comm="syz.3.2006" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 577.061247][ T9041] bridge0: port 1(bridge_slave_0) entered blocking state [ 577.071411][ T9041] bridge0: port 1(bridge_slave_0) entered disabled state [ 577.082295][ T9041] device bridge_slave_0 entered promiscuous mode [ 577.090958][ T9041] bridge0: port 2(bridge_slave_1) entered blocking state [ 577.111941][ T9041] bridge0: port 2(bridge_slave_1) entered disabled state [ 577.119706][ T9041] device bridge_slave_1 entered promiscuous mode [ 577.174288][ T39] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 577.282608][ T9058] overlayfs: failed to get inode (-116) [ 577.288129][ T9058] overlayfs: failed to look up (file0) for ino (-116) [ 577.475400][ T8053] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 577.483771][ T8053] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 577.513784][ T1468] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 577.522015][ T1468] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 577.530037][ T1468] bridge0: port 1(bridge_slave_0) entered blocking state [ 577.536891][ T1468] bridge0: port 1(bridge_slave_0) entered forwarding state [ 577.544516][ T1468] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 577.552564][ T1468] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 577.560655][ T1468] bridge0: port 2(bridge_slave_1) entered blocking state [ 577.567506][ T1468] bridge0: port 2(bridge_slave_1) entered forwarding state [ 577.584897][ T8053] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 577.592272][ T8053] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 577.600173][ T8053] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 577.608234][ T8053] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 577.614338][ T39] usb 3-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 577.616709][ T8053] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 577.625860][ T39] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.632538][ T8053] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 577.644694][ T39] usb 3-1: config 0 descriptor?? [ 577.648282][ T8053] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 577.664005][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 577.672463][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 577.680052][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 577.689719][ T9041] device veth0_vlan entered promiscuous mode [ 577.702548][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 577.711690][ T9041] device veth1_macvtap entered promiscuous mode [ 577.720730][ T8053] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 577.728868][ T8053] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 577.734307][ T376] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 577.740103][ T8053] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 577.752191][ T8053] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 577.825089][ T8] device bridge_slave_1 left promiscuous mode [ 577.831116][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 577.838456][ T8] device bridge_slave_0 left promiscuous mode [ 577.844716][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 577.852253][ T8] device veth1_macvtap left promiscuous mode [ 578.314301][ T376] usb 5-1: Using ep0 maxpacket: 8 [ 578.474315][ T376] usb 5-1: config 0 has an invalid descriptor of length 32, skipping remainder of the config [ 579.036258][ T9075] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2007'. [ 579.119764][ T9075] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2007'. [ 579.168397][ T9075] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 579.182755][ T9075] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 579.236496][ T376] usb 5-1: string descriptor 0 read error: -71 [ 579.242679][ T376] usb 5-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 579.251679][ T376] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 579.260117][ T376] usb 5-1: config 0 descriptor?? [ 579.284326][ T376] usb 5-1: can't set config #0, error -71 [ 579.290482][ T376] usb 5-1: USB disconnect, device number 32 [ 580.240106][ T376] usb 3-1: USB disconnect, device number 25 [ 580.487725][ T8053] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 582.085908][ T9117] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2022'. [ 582.096160][ T9117] xt_TCPMSS: Only works on TCP SYN packets [ 582.150498][ T8053] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 582.253449][ T8053] usb 2-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 582.266753][ T8053] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 582.276218][ T8053] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.327461][ T8053] snd-usb-audio: probe of 2-1:27.0 failed with error -2 [ 582.340457][ T9047] udevd[9047]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 583.677092][ T1696] usb 2-1: USB disconnect, device number 17 [ 583.734922][ T9143] binder: 9139:9143 ioctl 4018620d 0 returned -22 [ 584.010382][ T9146] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2028'. [ 584.019775][ T9146] xt_TCPMSS: Only works on TCP SYN packets [ 585.012163][ T9164] xt_TCPMSS: Only works on TCP SYN packets [ 585.240668][ T9167] tipc: Started in network mode [ 585.255639][ T9167] tipc: Node identity ac1414aa, cluster identity 4711 [ 585.291869][ T9167] tipc: Enabled bearer , priority 10 [ 585.377372][ T9171] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2030'. [ 585.462966][ T9171] netlink: 300 bytes leftover after parsing attributes in process `syz.2.2030'. [ 586.680489][ T8053] tipc: Node number set to 2886997162 [ 589.476059][ T9220] netlink: 'syz.4.2044': attribute type 1 has an invalid length. [ 589.483623][ T9220] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2044'. [ 590.405745][ T9244] xt_TPROXY: Can be used only with -p tcp or -p udp [ 597.189918][ T9290] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9290 comm=syz.4.2060 [ 597.808161][ T9309] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2063'. [ 597.819759][ T9309] xt_TCPMSS: Only works on TCP SYN packets [ 599.784689][ T9342] device syzkaller0 entered promiscuous mode [ 600.101388][ T9348] syz.0.2074[9348] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 600.101758][ T9348] syz.0.2074[9348] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 600.151609][ T9347] syz.2.2075[9347] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 600.163140][ T9347] syz.2.2075[9347] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 601.704228][ T9366] xt_TPROXY: Can be used only with -p tcp or -p udp [ 602.072389][ T9378] xt_TCPMSS: Only works on TCP SYN packets [ 602.504244][ T1085] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 602.916172][ T9400] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2087'. [ 603.022461][ T1085] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 603.033290][ T1085] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 603.043028][ T1085] usb 1-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 603.051954][ T1085] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 604.741962][ T9409] xt_SECMARK: invalid mode: 0 [ 604.749518][ T1085] usb 1-1: config 0 descriptor?? [ 605.561237][ T1085] logitech-hidpp-device 0003:046D:C086.0010: item fetching failed at offset 1/5 [ 605.763600][ T1085] logitech-hidpp-device 0003:046D:C086.0010: hidpp_probe:parse failed [ 605.779032][ T1085] logitech-hidpp-device: probe of 0003:046D:C086.0010 failed with error -22 [ 605.782059][ T9425] device syzkaller0 entered promiscuous mode [ 606.336291][ T9432] bridge0: port 1(bridge_slave_0) entered blocking state [ 606.343258][ T9432] bridge0: port 1(bridge_slave_0) entered disabled state [ 606.351227][ T9432] device bridge_slave_0 entered promiscuous mode [ 606.360501][ T9432] bridge0: port 2(bridge_slave_1) entered blocking state [ 606.403438][ T9432] bridge0: port 2(bridge_slave_1) entered disabled state [ 606.429800][ T9440] xt_TCPMSS: Only works on TCP SYN packets [ 606.692938][ T9432] device bridge_slave_1 entered promiscuous mode [ 606.816618][ T1085] usb 1-1: USB disconnect, device number 18 [ 606.912602][ T9444] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2099'. [ 608.620628][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 608.628283][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 608.644405][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 608.666388][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 608.714448][ T4461] bridge0: port 1(bridge_slave_0) entered blocking state [ 608.721325][ T4461] bridge0: port 1(bridge_slave_0) entered forwarding state [ 610.209749][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 610.886418][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 610.961194][ T4461] bridge0: port 2(bridge_slave_1) entered blocking state [ 610.968117][ T4461] bridge0: port 2(bridge_slave_1) entered forwarding state [ 611.045909][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 611.053744][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 611.061727][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 611.069612][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 611.080644][ T9489] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2110'. [ 611.089702][ T3300] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 611.105730][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 611.114473][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 611.126961][ T9432] device veth0_vlan entered promiscuous mode [ 611.145025][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 611.169225][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 611.178395][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 611.186337][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 611.194295][ T9495] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 611.203035][ T9495] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 611.208766][ T9432] device veth1_macvtap entered promiscuous mode [ 611.472863][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 611.495694][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 611.515405][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 611.531103][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 611.625648][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 611.655082][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 611.672313][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 611.790135][ T9280] device bridge_slave_1 left promiscuous mode [ 611.833466][ T9280] bridge0: port 2(bridge_slave_1) entered disabled state [ 611.908666][ T9280] device bridge_slave_0 left promiscuous mode [ 611.914709][ T9280] bridge0: port 1(bridge_slave_0) entered disabled state [ 611.931281][ T9280] device veth1_macvtap left promiscuous mode [ 611.957987][ T9280] device veth0_vlan left promiscuous mode [ 612.243251][ T9519] xt_TCPMSS: Only works on TCP SYN packets [ 614.152118][ T9540] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2120'. [ 614.204219][ T9546] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2123'. [ 615.801775][ T2666] tipc: Disabling bearer [ 615.834792][ T2666] tipc: Left network mode [ 616.338873][ T9574] bridge0: port 1(bridge_slave_0) entered blocking state [ 616.345843][ T9574] bridge0: port 1(bridge_slave_0) entered disabled state [ 616.353134][ T9574] device bridge_slave_0 entered promiscuous mode [ 616.360304][ T9574] bridge0: port 2(bridge_slave_1) entered blocking state [ 616.369315][ T9574] bridge0: port 2(bridge_slave_1) entered disabled state [ 616.376910][ T9574] device bridge_slave_1 entered promiscuous mode [ 616.426058][ T9574] bridge0: port 2(bridge_slave_1) entered blocking state [ 616.432898][ T9574] bridge0: port 2(bridge_slave_1) entered forwarding state [ 616.440046][ T9574] bridge0: port 1(bridge_slave_0) entered blocking state [ 616.446834][ T9574] bridge0: port 1(bridge_slave_0) entered forwarding state [ 616.592189][ T1085] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 616.607533][ T1085] bridge0: port 1(bridge_slave_0) entered disabled state [ 616.616198][ T1085] bridge0: port 2(bridge_slave_1) entered disabled state [ 616.664843][ T3300] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 616.675164][ T3300] bridge0: port 1(bridge_slave_0) entered blocking state [ 616.682017][ T3300] bridge0: port 1(bridge_slave_0) entered forwarding state [ 616.689595][ T3300] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 616.697895][ T3300] bridge0: port 2(bridge_slave_1) entered blocking state [ 616.704772][ T3300] bridge0: port 2(bridge_slave_1) entered forwarding state [ 616.738266][ T3300] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 616.746063][ T3300] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 616.761812][ T9574] device veth0_vlan entered promiscuous mode [ 616.768635][ T2666] device bridge_slave_1 left promiscuous mode [ 616.774761][ T2666] bridge0: port 2(bridge_slave_1) entered disabled state [ 616.782328][ T2666] device bridge_slave_0 left promiscuous mode [ 616.788910][ T2666] bridge0: port 1(bridge_slave_0) entered disabled state [ 616.852247][ T2666] device veth1_macvtap left promiscuous mode [ 616.873657][ T2666] device veth0_vlan left promiscuous mode [ 618.187796][ T1085] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 618.200370][ T1085] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 618.268007][ T1085] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 618.276085][ T1085] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 618.300629][ T9574] device veth1_macvtap entered promiscuous mode [ 618.446419][ T3300] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 618.595857][ T3300] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 618.609405][ T3300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 618.622678][ T3300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 618.635928][ T3300] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 618.647705][ T3300] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 618.656277][ T3300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 618.669680][ T3300] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 618.684538][ T3300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 618.699122][ T9605] bridge0: port 3(erspan0) entered blocking state [ 618.705408][ T9605] bridge0: port 3(erspan0) entered disabled state [ 618.712104][ T9605] device erspan0 entered promiscuous mode [ 618.717807][ T9605] bridge0: port 3(erspan0) entered blocking state [ 618.724035][ T9605] bridge0: port 3(erspan0) entered forwarding state [ 619.214505][ T28] audit: type=1326 audit(2000000315.472:1033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9592 comm="syz.2.2135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f9037df39 code=0x7ffc0000 [ 619.269371][ T28] audit: type=1326 audit(2000000315.472:1034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9592 comm="syz.2.2135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f9037df39 code=0x7ffc0000 [ 619.293200][ T28] audit: type=1326 audit(2000000315.472:1035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9592 comm="syz.2.2135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0f9037df39 code=0x7ffc0000 [ 619.351299][ T28] audit: type=1326 audit(2000000315.472:1036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9592 comm="syz.2.2135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f9037df39 code=0x7ffc0000 [ 619.374865][ T28] audit: type=1326 audit(2000000315.472:1037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9592 comm="syz.2.2135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f9037df39 code=0x7ffc0000 [ 619.402065][ T28] audit: type=1326 audit(2000000315.472:1038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9592 comm="syz.2.2135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f0f9037c7d7 code=0x7ffc0000 [ 619.426350][ T28] audit: type=1326 audit(2000000315.472:1039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9592 comm="syz.2.2135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f9037df39 code=0x7ffc0000 [ 619.449896][ T28] audit: type=1326 audit(2000000315.472:1040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9592 comm="syz.2.2135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f9037df39 code=0x7ffc0000 [ 619.486358][ T28] audit: type=1326 audit(2000000315.472:1041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9592 comm="syz.2.2135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0f9037df39 code=0x7ffc0000 [ 619.513550][ T28] audit: type=1326 audit(2000000315.472:1042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9592 comm="syz.2.2135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f9037df39 code=0x7ffc0000 [ 621.093976][ T9653] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2148'. [ 621.864218][ T3502] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 622.826371][ T9679] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2152'. [ 622.835675][ T9679] xt_TCPMSS: Only works on TCP SYN packets [ 623.123965][ T9688] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2153'. [ 623.164253][ T3502] usb 4-1: Using ep0 maxpacket: 8 [ 624.354361][ T3502] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 624.385963][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 624.385978][ T28] audit: type=1400 audit(2000004415.658:1050): avc: denied { getopt } for pid=9707 comm="syz.3.2161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 624.411733][ T3502] usb 4-1: can't read configurations, error -71 [ 624.418857][ T9710] input: syz0 as /devices/virtual/input/input17 [ 625.375841][ T9719] overlayfs: failed to resolve './file0': -2 [ 625.747227][ T9732] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2167'. [ 626.088860][ T9739] xt_TCPMSS: Only works on TCP SYN packets [ 626.355784][ T9744] binder: 9725:9744 ioctl 4018620d 0 returned -22 [ 626.564538][ T9750] netlink: 'syz.2.2169': attribute type 12 has an invalid length. [ 626.706660][ T9754] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2171'. [ 626.986209][ T9758] raw_sendmsg: syz.3.2171 forgot to set AF_INET. Fix it! [ 627.065530][ T9761] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2172'. [ 627.104249][ T3502] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 627.564413][ T3502] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 627.574680][ T3502] usb 3-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 627.756778][ T3502] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 627.765403][ T3502] usb 3-1: config 0 descriptor?? [ 627.804797][ T3502] usb 3-1: Found UVC 0.00 device (046d:08c1) [ 627.811607][ T3502] usb 3-1: No valid video chain found. [ 628.035641][ T3502] usb 3-1: USB disconnect, device number 26 [ 628.240465][ T9785] xt_TCPMSS: Only works on TCP SYN packets [ 629.088541][ T9800] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2184'. [ 629.119547][ T9802] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2185'. [ 631.063260][ T9822] syz.4.2190[9822] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 631.063333][ T9822] syz.4.2190[9822] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 632.499888][ T9839] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 633.837156][ T9853] xt_TCPMSS: Only works on TCP SYN packets [ 634.817218][ T9879] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2200'. [ 634.844847][ T9857] kvm: pic: non byte read [ 634.849875][ T9857] kvm: pic: non byte read [ 634.855283][ T9857] kvm: pic: non byte read [ 634.859944][ T9857] kvm: pic: single mode not supported [ 634.859959][ T9857] kvm: pic: level sensitive irq not supported [ 634.865328][ T9857] kvm: pic: non byte read [ 634.876485][ T9857] kvm: pic: level sensitive irq not supported [ 634.876538][ T9857] kvm: pic: non byte read [ 634.886893][ T9857] kvm: pic: non byte read [ 634.891267][ T9857] kvm: pic: level sensitive irq not supported [ 634.891315][ T9857] kvm: pic: non byte read [ 635.370408][ T9891] binder: 9888:9891 ioctl 4018620d 0 returned -22 [ 635.694242][ T9905] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2206'. [ 636.246200][ T9919] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 636.254948][ T9919] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 637.119378][ T9925] xt_TCPMSS: Only works on TCP SYN packets [ 637.461050][ T9932] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2212'. [ 638.916568][ T9949] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2217'. [ 641.081574][ T9991] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 641.090609][ T9991] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 641.277356][ T323] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 641.432215][ T9998] xt_TCPMSS: Only works on TCP SYN packets [ 641.554327][ T323] usb 1-1: Using ep0 maxpacket: 8 [ 641.674294][ T323] usb 1-1: config 0 has an invalid descriptor of length 10, skipping remainder of the config [ 641.943787][ T315] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 642.034747][ T323] usb 1-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 642.043698][ T323] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 642.051888][ T323] usb 1-1: SerialNumber: syz [ 642.059397][ T323] usb 1-1: config 0 descriptor?? [ 642.314312][ T315] usb 2-1: Using ep0 maxpacket: 32 [ 642.444374][ T323] usb 1-1: Found UVC 0.00 device (05ac:8501) [ 642.451389][ T323] usb 1-1: No valid video chain found. [ 642.457685][ T323] usb 1-1: USB disconnect, device number 19 [ 642.464309][ T315] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 642.475464][ T315] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 642.486595][ T315] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 642.495693][ T315] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 642.694999][ T315] usb 2-1: config 0 descriptor?? [ 642.714280][ T9995] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 642.734970][ T315] hub 2-1:0.0: USB hub found [ 642.938126][ T28] audit: type=1400 audit(2000004434.208:1051): avc: denied { compute_member } for pid=9994 comm="syz.1.2227" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 644.451242][ T28] audit: type=1400 audit(2000004435.718:1052): avc: denied { append } for pid=10027 comm="syz.3.2235" name="pfkey" dev="proc" ino=4026532982 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 644.484108][T10033] netlink: 'syz.0.2237': attribute type 12 has an invalid length. [ 644.514333][ T315] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 644.912024][ T315] usbhid 2-1:0.0: can't add hid device: -71 [ 644.917838][ T315] usbhid: probe of 2-1:0.0 failed with error -71 [ 644.944221][ T3300] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 644.964760][ T315] usb 2-1: USB disconnect, device number 18 [ 645.330890][T10049] bridge0: port 3(erspan0) entered blocking state [ 645.337233][T10049] bridge0: port 3(erspan0) entered disabled state [ 645.346559][T10049] device erspan0 entered promiscuous mode [ 645.352677][T10049] bridge0: port 3(erspan0) entered blocking state [ 645.358926][T10049] bridge0: port 3(erspan0) entered forwarding state [ 645.463828][ T3300] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 645.484670][ T3300] usb 1-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 645.497336][ T3300] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 645.553151][ T3300] usb 1-1: config 0 descriptor?? [ 645.594870][ T3300] usb 1-1: Found UVC 0.00 device (046d:08c1) [ 645.602636][ T3300] usb 1-1: No valid video chain found. [ 645.862092][ T317] usb 1-1: USB disconnect, device number 20 [ 646.942435][T10065] xt_TCPMSS: Only works on TCP SYN packets [ 648.567604][T10085] input: syz0 as /devices/virtual/input/input18 [ 651.085005][ T28] audit: type=1326 audit(2000004442.358:1053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10128 comm="syz.3.2261" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fddda77df39 code=0x0 [ 651.583579][T10144] bridge0: port 3(erspan0) entered blocking state [ 651.589937][T10144] bridge0: port 3(erspan0) entered disabled state [ 651.604964][T10144] device erspan0 entered promiscuous mode [ 651.612239][T10144] bridge0: port 3(erspan0) entered blocking state [ 651.618503][T10144] bridge0: port 3(erspan0) entered forwarding state [ 654.745082][T10182] proc: Bad value for 'gid' [ 655.279849][T10195] overlayfs: failed to resolve './file2': -2 [ 656.250732][T10203] bridge0: port 3(erspan0) entered blocking state [ 656.257071][T10203] bridge0: port 3(erspan0) entered disabled state [ 656.264415][T10203] device erspan0 entered promiscuous mode [ 656.270227][T10203] bridge0: port 3(erspan0) entered blocking state [ 656.276500][T10203] bridge0: port 3(erspan0) entered forwarding state [ 656.624499][T10216] sch_tbf: burst 4 is lower than device lo mtu (65550) ! [ 656.763822][T10218] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27 sclass=netlink_route_socket pid=10218 comm=syz.2.2279 [ 659.063904][ T28] audit: type=1400 audit(2000004450.098:1054): avc: denied { bind } for pid=10225 comm="syz.3.2283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 659.185078][ T28] audit: type=1400 audit(2000004450.458:1055): avc: denied { watch_reads } for pid=10238 comm="syz.2.2287" path="/107/file0" dev="tmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 659.434292][ T317] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 659.442072][ T6] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 659.994289][ T6] usb 5-1: Using ep0 maxpacket: 16 [ 660.355081][ T317] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 660.366293][ T6] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 660.377572][ T6] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 660.387486][ T317] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 660.387522][ T317] usb 4-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 660.387546][ T317] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 660.414400][ T317] usb 4-1: config 0 descriptor?? [ 660.420441][ T6] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 660.433753][ T6] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 660.449088][ T6] usb 5-1: config 0 descriptor?? [ 660.904586][ T28] audit: type=1400 audit(2000004452.178:1056): avc: denied { write } for pid=10274 comm="syz.1.2295" path="socket:[68517]" dev="sockfs" ino=68517 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 660.977930][T10246] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 660.986424][T10246] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 661.014693][ T6] hid (null): bogus close delimiter [ 661.020458][ T6] hid (null): report_id 0 is invalid [ 661.025873][ T6] hid (null): unknown global tag 0xd [ 661.047990][ T6] hid (null): global environment stack underflow [ 661.063722][ T6] hid (null): nested delimiters [ 661.080026][T10279] syz.1.2295[10279] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 661.080397][T10279] syz.1.2295[10279] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 661.154830][ T28] audit: type=1400 audit(2000004452.388:1057): avc: denied { read } for pid=10274 comm="syz.1.2295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 661.355241][ T6] hid (null): usage index exceeded [ 661.361250][ T6] hid-generic 0003:0158:0100.0011: unknown main item tag 0x0 [ 661.368798][ T6] hid-generic 0003:0158:0100.0011: unknown main item tag 0x0 [ 661.379282][ T6] hid-generic 0003:0158:0100.0011: bogus close delimiter [ 661.386314][ T6] hid-generic 0003:0158:0100.0011: item 0 0 2 10 parsing failed [ 661.393910][ T6] hid-generic: probe of 0003:0158:0100.0011 failed with error -22 [ 661.754588][T10288] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 661.763011][T10288] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 661.794998][T10292] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2299'. [ 662.284309][ T317] usbhid 4-1:0.0: can't add hid device: -71 [ 662.290157][ T317] usbhid: probe of 4-1:0.0 failed with error -71 [ 662.297317][ T317] usb 4-1: USB disconnect, device number 15 [ 662.370696][T10305] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2303'. [ 662.379526][T10305] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2303'. [ 662.975434][ T315] usb 5-1: USB disconnect, device number 33 [ 664.201690][T10336] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2311'. [ 666.512347][ T28] audit: type=1400 audit(2000004456.708:1058): avc: denied { mount } for pid=10337 comm="syz.0.2312" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 666.570512][ T28] audit: type=1400 audit(2000004457.778:1059): avc: denied { unmount } for pid=9041 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 668.554930][T10383] netlink: 'syz.4.2321': attribute type 12 has an invalid length. [ 669.516219][ T317] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 671.041726][T10419] input: syz0 as /devices/virtual/input/input19 [ 671.455000][T10421] xt_TCPMSS: Only works on TCP SYN packets [ 671.734938][ T28] audit: type=1326 audit(2000004463.008:1060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10426 comm="syz.2.2331" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0f9037df39 code=0x0 [ 671.794295][ T317] usb 5-1: device descriptor read/all, error -71 [ 673.646434][T10446] binder: 10444:10446 ioctl c00c620f 20000340 returned -22 [ 673.699179][T10446] device veth0_vlan left promiscuous mode [ 673.706529][T10446] device veth0_vlan entered promiscuous mode [ 673.713527][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 673.771879][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 673.785207][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 675.504275][ T1468] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 675.789672][T10478] input: syz0 as /devices/virtual/input/input20 [ 676.605751][T10485] netlink: 'syz.1.2344': attribute type 12 has an invalid length. [ 677.286055][T10491] xt_TCPMSS: Only works on TCP SYN packets [ 677.474537][ T323] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 677.734243][ T1468] usb 3-1: device descriptor read/all, error -71 [ 677.924445][ T323] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 677.968345][ T323] usb 2-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 678.067964][ T323] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 678.163466][ T323] usb 2-1: config 0 descriptor?? [ 678.204743][ T323] usb 2-1: Found UVC 0.00 device (046d:08c1) [ 678.211607][ T323] usb 2-1: No valid video chain found. [ 678.975443][ T315] usb 2-1: USB disconnect, device number 19 [ 679.354269][ T317] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 679.624290][ T317] usb 5-1: Using ep0 maxpacket: 32 [ 680.494324][ T317] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 680.511644][ T317] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 681.215705][ T317] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 681.229741][ T317] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 681.272840][ T317] usb 5-1: config 0 descriptor?? [ 681.294301][T10511] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 681.315249][ T317] hub 5-1:0.0: USB hub found [ 681.518456][T10547] device veth0_vlan left promiscuous mode [ 681.532216][T10547] device veth0_vlan entered promiscuous mode [ 682.110666][ T317] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 682.276818][T10561] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2363'. [ 682.304284][ T317] usbhid 5-1:0.0: can't add hid device: -71 [ 682.310587][ T317] usbhid: probe of 5-1:0.0 failed with error -71 [ 682.596263][ T317] usb 5-1: USB disconnect, device number 36 [ 682.683057][T10571] fuse: Unknown parameter 'fKy.'׫trBN' [ 682.690377][ T28] audit: type=1326 audit(2000004473.958:1061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10569 comm="syz.0.2375" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc823d7df39 code=0x0 [ 682.873798][T10577] overlayfs: failed to resolve './file2': -2 [ 683.009966][T10578] block device autoloading is deprecated and will be removed. [ 683.017743][T10578] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 1 [ 683.420079][T10587] xt_TCPMSS: Only works on TCP SYN packets [ 683.805434][T10593] loop0: detected capacity change from 0 to 40427 [ 683.812717][T10593] F2FS-fs (loop0): Invalid segment/section count (31, 24 x 1) [ 683.820494][T10593] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 683.828657][T10593] F2FS-fs (loop0): Unrecognized mount option "whint_mode=fs-based" or missing value [ 685.189477][T10610] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2379'. [ 685.235701][ T28] audit: type=1400 audit(2000004476.508:1062): avc: denied { create } for pid=10609 comm="syz.4.2379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 685.434472][ T24] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 685.694203][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 685.814491][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 685.826174][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 685.839455][ T24] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 685.849609][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 685.858679][ T24] usb 3-1: config 0 descriptor?? [ 685.874324][T10607] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 685.894861][ T24] hub 3-1:0.0: USB hub found [ 686.143758][T10630] loop0: detected capacity change from 0 to 1024 [ 686.152702][T10630] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 687.819309][T10639] overlayfs: failed to resolve './file2': -2 [ 687.890810][ T24] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 687.915490][ T9041] EXT4-fs (loop0): unmounting filesystem. [ 688.142218][ T24] usbhid 3-1:0.0: can't add hid device: -71 [ 688.153312][ T24] usbhid: probe of 3-1:0.0 failed with error -71 [ 688.161395][T10644] netlink: 'syz.3.2385': attribute type 12 has an invalid length. [ 688.204486][ T24] usb 3-1: USB disconnect, device number 29 [ 688.534329][ T9591] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 688.904257][ T9591] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 688.914432][ T9591] usb 4-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 688.923480][ T9591] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 688.932128][ T9591] usb 4-1: config 0 descriptor?? [ 688.974822][ T9591] usb 4-1: Found UVC 0.00 device (046d:08c1) [ 688.981643][ T9591] usb 4-1: No valid video chain found. [ 689.029373][T10658] loop0: detected capacity change from 0 to 2048 [ 689.035962][T10658] ext4: Unknown parameter 'obj_user' [ 689.864209][T10664] xt_TCPMSS: Only works on TCP SYN packets [ 690.073026][ T315] usb 4-1: USB disconnect, device number 16 [ 691.454209][ T315] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 691.473700][T10692] loop0: detected capacity change from 0 to 40427 [ 691.490432][T10692] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 691.498177][T10692] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 691.509848][T10692] F2FS-fs (loop0): Found nat_bits in checkpoint [ 691.551072][T10692] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 691.558026][T10692] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 691.744226][ T315] usb 4-1: device descriptor read/64, error -71 [ 692.194230][ T315] usb 4-1: device descriptor read/64, error -71 [ 692.249588][T10714] bridge0: port 3(erspan0) entered disabled state [ 692.256022][T10714] bridge0: port 2(bridge_slave_1) entered disabled state [ 692.263166][T10714] bridge0: port 1(bridge_slave_0) entered disabled state [ 692.270540][T10715] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2402'. [ 692.287598][T10714] device erspan0 left promiscuous mode [ 692.293056][T10714] bridge0: port 3(erspan0) entered disabled state [ 692.301553][ T28] audit: type=1400 audit(2000004483.568:1063): avc: denied { mounton } for pid=10716 comm="syz.0.2403" path="/80/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 692.326865][T10714] device bridge_slave_1 left promiscuous mode [ 692.332856][T10714] bridge0: port 2(bridge_slave_1) entered disabled state [ 692.340572][T10714] device bridge_slave_0 left promiscuous mode [ 692.351854][T10714] bridge0: port 1(bridge_slave_0) entered disabled state [ 692.484200][ T315] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 692.624306][ T6] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 692.704727][T10722] netlink: 'syz.1.2405': attribute type 12 has an invalid length. [ 692.786594][ T315] usb 4-1: device descriptor read/64, error -71 [ 692.994356][ T6] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 693.004700][ T6] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 693.084305][ T1468] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 693.092068][ T6] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 693.100970][ T6] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 693.108748][ T6] usb 5-1: SerialNumber: syz [ 693.214936][ T315] usb 4-1: device descriptor read/64, error -71 [ 693.641700][ T315] usb usb4-port1: attempt power cycle [ 693.779557][ T6] usb 5-1: 0:2 : does not exist [ 693.794340][ T1468] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 693.804609][ T1468] usb 2-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 693.813476][ T1468] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 693.821839][ T1468] usb 2-1: config 0 descriptor?? [ 693.828094][ T6] usb 5-1: USB disconnect, device number 37 [ 693.864714][ T1468] usb 2-1: Found UVC 0.00 device (046d:08c1) [ 693.871576][ T1468] usb 2-1: No valid video chain found. [ 694.045321][T10512] udevd[10512]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 694.071847][ T6] usb 2-1: USB disconnect, device number 20 [ 694.174215][ T315] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 694.528581][ T315] usb 4-1: device descriptor read/8, error -71 [ 694.834274][ T315] usb 4-1: device descriptor read/8, error -71 [ 695.374246][ T315] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 695.574383][ T315] usb 4-1: device descriptor read/8, error -71 [ 695.854258][ T315] usb 4-1: device descriptor read/8, error -71 [ 696.299941][ T315] usb usb4-port1: unable to enumerate USB device [ 696.778505][T10780] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2428'. [ 698.283253][ T28] audit: type=1326 audit(2000004489.548:1064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10794 comm="syz.4.2422" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f080ed7df39 code=0x0 [ 698.559528][T10793] loop0: detected capacity change from 0 to 40427 [ 698.571457][T10793] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 698.579705][T10793] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 698.593610][T10793] F2FS-fs (loop0): Found nat_bits in checkpoint [ 698.635712][T10793] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 698.642663][T10793] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 699.214094][T10817] xt_TCPMSS: Only works on TCP SYN packets [ 700.742032][T10844] : renamed from pim6reg1 [ 702.887353][T10846] loop0: detected capacity change from 0 to 40427 [ 702.898240][T10846] F2FS-fs (loop0): invalid crc value [ 702.911591][T10846] F2FS-fs (loop0): Found nat_bits in checkpoint [ 702.926581][T10863] bridge0: port 1(bridge_slave_0) entered blocking state [ 702.943672][T10863] bridge0: port 1(bridge_slave_0) entered disabled state [ 702.954259][T10863] device bridge_slave_0 entered promiscuous mode [ 702.972014][T10863] bridge0: port 2(bridge_slave_1) entered blocking state [ 702.988108][T10863] bridge0: port 2(bridge_slave_1) entered disabled state [ 702.996938][T10863] device bridge_slave_1 entered promiscuous mode [ 703.087428][T10863] bridge0: port 2(bridge_slave_1) entered blocking state [ 703.094312][T10863] bridge0: port 2(bridge_slave_1) entered forwarding state [ 703.101493][T10863] bridge0: port 1(bridge_slave_0) entered blocking state [ 703.108467][T10863] bridge0: port 1(bridge_slave_0) entered forwarding state [ 703.133874][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 703.464881][T10846] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 703.592323][T10885] xt_TCPMSS: Only works on TCP SYN packets [ 704.159300][T10888] F2FS-fs (loop0): Unexpected flush for atomic writes: ino=10, npages=16 [ 704.169982][T10888] syz.0.2437: attempt to access beyond end of device [ 704.169982][T10888] loop0: rw=2049, sector=45096, nr_sectors = 128 limit=40427 [ 704.233489][ T6] bridge0: port 1(bridge_slave_0) entered disabled state [ 704.241732][ T6] bridge0: port 2(bridge_slave_1) entered disabled state [ 704.330567][ T9041] syz-executor: attempt to access beyond end of device [ 704.330567][ T9041] loop0: rw=2049, sector=45224, nr_sectors = 8 limit=40427 [ 704.334690][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 704.352793][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 704.361786][ T6] bridge0: port 1(bridge_slave_0) entered blocking state [ 704.368673][ T6] bridge0: port 1(bridge_slave_0) entered forwarding state [ 704.392724][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 704.407203][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 704.415528][ T6] bridge0: port 2(bridge_slave_1) entered blocking state [ 704.422480][ T6] bridge0: port 2(bridge_slave_1) entered forwarding state [ 704.429862][T10896] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2448'. [ 704.454929][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 704.469613][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 704.477947][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 704.485857][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 704.506936][T10863] device veth0_vlan entered promiscuous mode [ 704.520398][ T1568] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 704.530091][ T1568] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 704.540466][ T1568] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 704.548629][ T1568] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 704.559744][ T1568] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 704.568982][ T1568] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 704.582817][T10863] device veth1_macvtap entered promiscuous mode [ 704.590225][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 704.601069][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 704.609198][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 704.641705][ T1468] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 704.652023][ T1468] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 704.666470][ T1468] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 704.680876][ T1468] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 704.932650][ T9280] device bridge_slave_1 left promiscuous mode [ 704.940343][ T9280] bridge0: port 2(bridge_slave_1) entered disabled state [ 704.947950][ T9280] device bridge_slave_0 left promiscuous mode [ 704.953932][ T9280] bridge0: port 1(bridge_slave_0) entered disabled state [ 704.967710][ T9280] device veth1_macvtap left promiscuous mode [ 704.978708][ T9280] device veth0_vlan left promiscuous mode [ 705.106749][ T6] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 705.210200][T10916] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2451'. [ 706.526860][T10939] xt_TCPMSS: Only works on TCP SYN packets [ 706.741203][T10944] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2458'. [ 706.831810][T10949] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2460'. [ 707.249596][T10956] loop0: detected capacity change from 0 to 512 [ 707.412592][T10956] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 707.421564][T10956] ext4 filesystem being mounted at /93/bus supports timestamps until 2038 (0x7fffffff) [ 707.510381][ T9041] EXT4-fs (loop0): unmounting filesystem. [ 707.525434][T10965] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2462'. [ 709.024828][T10986] loop0: detected capacity change from 0 to 512 [ 709.103193][T10986] EXT4-fs (loop0): 1 orphan inode deleted [ 709.108900][T10986] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 709.118445][ T9280] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 709.140160][ T9280] EXT4-fs error (device loop0): ext4_release_dquot:6787: comm kworker/u4:5: Failed to release dquot type 1 [ 709.313024][T10986] ext4 filesystem being mounted at /96/file1 supports timestamps until 2038 (0x7fffffff) [ 709.852341][T11002] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2470'. [ 709.922903][ T9041] EXT4-fs (loop0): unmounting filesystem. [ 710.645050][T11013] tipc: Started in network mode [ 710.650001][T11013] tipc: Node identity 7f000001, cluster identity 4711 [ 710.657283][T11013] tipc: Enabled bearer , priority 10 [ 711.696028][T11020] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2475'. [ 711.793836][T11031] loop0: detected capacity change from 0 to 512 [ 711.879191][T11031] ext4: Unknown parameter 'nojournal_checksum"dax' [ 711.896498][ T1568] tipc: Node number set to 2130706433 [ 712.101649][T11041] overlayfs: './file0' not a directory [ 712.615620][T11048] loop0: detected capacity change from 0 to 128 [ 713.414639][T11050] input: syz0 as /devices/virtual/input/input21 [ 715.614438][T11078] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2488'. [ 715.829254][T11080] bridge0: port 1(bridge_slave_0) entered blocking state [ 715.836288][T11080] bridge0: port 1(bridge_slave_0) entered disabled state [ 715.847207][T11080] device bridge_slave_0 entered promiscuous mode [ 715.986109][T11080] bridge0: port 2(bridge_slave_1) entered blocking state [ 716.051317][T11080] bridge0: port 2(bridge_slave_1) entered disabled state [ 716.138036][T11080] device bridge_slave_1 entered promiscuous mode [ 716.217787][T11080] bridge0: port 2(bridge_slave_1) entered blocking state [ 716.224688][T11080] bridge0: port 2(bridge_slave_1) entered forwarding state [ 716.231813][T11080] bridge0: port 1(bridge_slave_0) entered blocking state [ 716.238769][T11080] bridge0: port 1(bridge_slave_0) entered forwarding state [ 716.267463][ T1119] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 716.284590][ T1119] bridge0: port 1(bridge_slave_0) entered disabled state [ 716.304431][ T1119] bridge0: port 2(bridge_slave_1) entered disabled state [ 716.316076][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 716.324580][ T6] bridge0: port 1(bridge_slave_0) entered blocking state [ 716.332016][ T6] bridge0: port 1(bridge_slave_0) entered forwarding state [ 716.347622][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 716.356220][ T6] bridge0: port 2(bridge_slave_1) entered blocking state [ 716.363072][ T6] bridge0: port 2(bridge_slave_1) entered forwarding state [ 716.370755][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 716.378572][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 716.387960][ T1010] bridge0: port 3(erspan0) entered disabled state [ 716.395494][ T1010] device erspan0 left promiscuous mode [ 716.400845][ T1010] bridge0: port 3(erspan0) entered disabled state [ 716.415989][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 716.428475][T11080] device veth0_vlan entered promiscuous mode [ 716.435086][ T1568] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 716.443436][ T1568] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 716.451211][ T1568] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 716.471841][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 716.488163][T11080] device veth1_macvtap entered promiscuous mode [ 716.507152][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 716.523085][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 716.665650][T11106] netlink: 165 bytes leftover after parsing attributes in process `syz.3.2491'. [ 716.675990][ T28] audit: type=1400 audit(2000004507.938:1065): avc: denied { getopt } for pid=11096 comm="syz.3.2491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 716.703810][ T1010] device bridge_slave_1 left promiscuous mode [ 716.716901][ T1010] bridge0: port 2(bridge_slave_1) entered disabled state [ 716.762081][ T1010] device bridge_slave_0 left promiscuous mode [ 716.776010][ T28] audit: type=1326 audit(2000004507.978:1066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11104 comm="syz.2.2485" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd474d7df39 code=0x0 [ 716.796956][ T1010] bridge0: port 1(bridge_slave_0) entered disabled state [ 716.807082][ T1010] device veth1_macvtap left promiscuous mode [ 716.812979][ T1010] device veth0_vlan left promiscuous mode [ 717.534864][T11123] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2499'. [ 717.818357][T10512] udevd[10512]: inotify_add_watch(7, /dev/loop11, 10) failed: No such file or directory [ 717.915499][T11131] futex_wake_op: syz.2.2501 tries to shift op by 32; fix this program [ 718.218383][ T1119] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 718.745506][ T1119] usb 2-1: device descriptor read/64, error -71 [ 719.006396][T11155] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 1 [ 719.891865][ T1119] usb 2-1: device descriptor read/64, error -71 [ 720.777369][T11175] input: syz0 as /devices/virtual/input/input22 [ 721.081751][ T1119] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 721.110351][T11184] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2511'. [ 721.584336][ T1119] usb 2-1: device descriptor read/64, error -71 [ 721.987122][ T1119] usb 2-1: device descriptor read/64, error -71 [ 722.035815][T11200] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2517'. [ 722.124618][ T1119] usb usb2-port1: attempt power cycle [ 722.130417][ T28] audit: type=1326 audit(2000004513.388:1067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11197 comm="syz.2.2516" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd474d7df39 code=0x0 [ 722.347738][T11208] loop0: detected capacity change from 0 to 512 [ 722.364629][T11208] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 722.448237][T11208] EXT4-fs (loop0): 1 truncate cleaned up [ 722.453797][T11208] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 723.946009][ T1119] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 723.965308][ T9041] EXT4-fs (loop0): unmounting filesystem. [ 724.041081][T11227] loop0: detected capacity change from 0 to 128 [ 724.095945][T10512] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 724.194323][ T1119] usb 2-1: device descriptor read/8, error -71 [ 724.535554][ T1119] usb 2-1: device descriptor read/8, error -71 [ 724.551413][T11234] loop0: detected capacity change from 0 to 512 [ 724.586389][T11234] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 724.595463][T11234] ext4 filesystem being mounted at /110/file0 supports timestamps until 2038 (0x7fffffff) [ 724.972578][T11245] tc_dump_action: action bad kind [ 725.308870][ T1119] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 725.412339][ T9041] EXT4-fs (loop0): unmounting filesystem. [ 725.442838][T11253] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2528'. [ 725.494259][ T1119] usb 2-1: device descriptor read/8, error -71 [ 725.671913][T11263] loop0: detected capacity change from 0 to 256 [ 725.680691][T11263] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xadbf5ead, utbl_chksum : 0xe619d30d) [ 725.744300][ T1119] usb 2-1: device descriptor read/8, error -71 [ 725.864746][ T1119] usb usb2-port1: unable to enumerate USB device [ 726.096663][ T3502] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 726.328710][ T28] audit: type=1400 audit(2000004517.508:1068): avc: denied { setattr } for pid=11262 comm="syz.0.2532" path="/113/file0/memory.current" dev="loop0" ino=1048998 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 726.554574][ T28] audit: type=1400 audit(2000004517.798:1069): avc: denied { rmdir } for pid=9041 comm="syz-executor" name=".index" dev="loop0" ino=1048996 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 726.584292][ T3502] usb 4-1: Using ep0 maxpacket: 8 [ 726.803765][ T3502] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 726.816580][ T3502] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 726.847861][ T3502] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 726.858508][ T3502] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 726.944682][ T3502] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 726.960241][ T3502] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 726.968143][ T3502] usb 4-1: SerialNumber: syz [ 726.980128][T11274] bridge0: port 1(bridge_slave_0) entered blocking state [ 726.987072][T11274] bridge0: port 1(bridge_slave_0) entered disabled state [ 726.987156][T11261] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 726.994528][T11274] device bridge_slave_0 entered promiscuous mode [ 727.007478][ T3502] cdc_ether: probe of 4-1:1.0 failed with error -22 [ 727.007770][T11274] bridge0: port 2(bridge_slave_1) entered blocking state [ 727.014269][ T3502] usb-storage 4-1:1.0: USB Mass Storage device detected [ 727.021165][T11274] bridge0: port 2(bridge_slave_1) entered disabled state [ 727.029615][ T3502] usb-storage 4-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 727.035763][T11274] device bridge_slave_1 entered promiscuous mode [ 727.042812][ T3502] scsi host1: usb-storage 4-1:1.0 [ 727.093248][T11274] bridge0: port 2(bridge_slave_1) entered blocking state [ 727.100192][T11274] bridge0: port 2(bridge_slave_1) entered forwarding state [ 727.107306][T11274] bridge0: port 1(bridge_slave_0) entered blocking state [ 727.114062][T11274] bridge0: port 1(bridge_slave_0) entered forwarding state [ 727.122633][ T8] bridge0: port 3(erspan0) entered disabled state [ 727.129565][ T8] device erspan0 left promiscuous mode [ 727.134908][ T8] bridge0: port 3(erspan0) entered disabled state [ 727.153776][ T3300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 727.161172][ T3300] bridge0: port 1(bridge_slave_0) entered disabled state [ 727.168362][ T3300] bridge0: port 2(bridge_slave_1) entered disabled state [ 727.177226][ T3502] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 727.185511][ T3502] bridge0: port 1(bridge_slave_0) entered blocking state [ 727.192344][ T3502] bridge0: port 1(bridge_slave_0) entered forwarding state [ 727.202372][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 727.210490][ T6] bridge0: port 2(bridge_slave_1) entered blocking state [ 727.217373][ T6] bridge0: port 2(bridge_slave_1) entered forwarding state [ 727.233125][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 727.241436][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 727.247280][ T1119] usb 4-1: USB disconnect, device number 21 [ 727.266207][ T3502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 727.276734][ T3502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 727.285408][T11274] device veth0_vlan entered promiscuous mode [ 727.291768][ T3502] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 727.299047][ T3502] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 727.313149][T11274] device veth1_macvtap entered promiscuous mode [ 727.320268][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 727.332169][ T3300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 727.342571][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 727.356369][ T8] device bridge_slave_1 left promiscuous mode [ 727.362379][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 727.370187][ T8] device bridge_slave_0 left promiscuous mode [ 727.376588][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 727.386888][ T8] device veth1_macvtap left promiscuous mode [ 727.392789][ T8] device veth0_vlan left promiscuous mode [ 727.644143][T11289] bridge0: port 1(bridge_slave_0) entered blocking state [ 727.651170][T11289] bridge0: port 1(bridge_slave_0) entered disabled state [ 727.658810][T11289] device bridge_slave_0 entered promiscuous mode [ 727.665834][T11289] bridge0: port 2(bridge_slave_1) entered blocking state [ 727.672833][T11289] bridge0: port 2(bridge_slave_1) entered disabled state [ 727.680284][T11289] device bridge_slave_1 entered promiscuous mode [ 727.746992][T11286] loop0: detected capacity change from 0 to 512 [ 727.758252][T11286] EXT4-fs (loop0): failed to open journal device unknown-block(0,0) -6 [ 727.780381][T11289] bridge0: port 2(bridge_slave_1) entered blocking state [ 727.787292][T11289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 727.794469][T11289] bridge0: port 1(bridge_slave_0) entered blocking state [ 727.801387][T11289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 727.809731][T11295] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2539'. [ 727.865491][ T1119] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 727.873322][ T1119] bridge0: port 1(bridge_slave_0) entered disabled state [ 727.885977][ T1119] bridge0: port 2(bridge_slave_1) entered disabled state [ 727.902611][ T9591] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 727.967728][ T9591] bridge0: port 1(bridge_slave_0) entered blocking state [ 727.974633][ T9591] bridge0: port 1(bridge_slave_0) entered forwarding state [ 728.003199][ T3502] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 728.011432][ T3502] bridge0: port 2(bridge_slave_1) entered blocking state [ 728.018313][ T3502] bridge0: port 2(bridge_slave_1) entered forwarding state [ 728.034785][ T3502] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 728.042747][ T3502] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 728.155790][ T3502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 728.171825][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 728.180171][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 728.187697][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 728.196899][T11289] device veth0_vlan entered promiscuous mode [ 728.213133][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 728.222758][T11289] device veth1_macvtap entered promiscuous mode [ 728.236212][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 728.278252][ T3502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 728.315873][ T8] bridge0: port 3(erspan0) entered disabled state [ 728.333655][ T8] device erspan0 left promiscuous mode [ 728.351521][ T8] bridge0: port 3(erspan0) entered disabled state [ 728.916066][ T8] device bridge_slave_1 left promiscuous mode [ 728.923125][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 728.945685][ T8] device bridge_slave_0 left promiscuous mode [ 728.985615][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 729.012117][ T8] device veth1_macvtap left promiscuous mode [ 729.973898][T11328] loop0: detected capacity change from 0 to 512 [ 729.994960][T11330] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2549'. [ 730.072931][T11328] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 730.081995][T11328] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038 (0x7fffffff) [ 731.252116][T11274] EXT4-fs (loop0): unmounting filesystem. [ 731.349274][ T6] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 731.397092][ T28] audit: type=1326 audit(2000004522.618:1070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11350 comm="syz.3.2562" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f272217df39 code=0x0 [ 732.651746][ T6] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 732.696832][T11375] netlink: 172 bytes leftover after parsing attributes in process `syz.3.2558'. [ 733.165763][ T6] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 733.174660][ T6] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=3 [ 733.182450][ T6] usb 5-1: Product: syz [ 733.186833][ T6] usb 5-1: Manufacturer: syz [ 733.191281][ T6] usb 5-1: SerialNumber: syz [ 733.204326][ T6] usb 5-1: config 0 descriptor?? [ 733.305613][T11383] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2561'. [ 733.323719][T11370] loop0: detected capacity change from 0 to 40427 [ 733.330669][T11370] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 733.338767][T11370] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 733.349010][T11370] F2FS-fs (loop0): Found nat_bits in checkpoint [ 733.373666][T11370] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 733.380616][T11370] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 733.398034][ T6] usb 5-1: USB disconnect, device number 38 [ 734.514852][T10516] udevd[10516]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 735.116084][ T28] audit: type=1400 audit(2000004526.378:1071): avc: denied { accept } for pid=11418 comm="syz.1.2571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 735.356969][T11430] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2573'. [ 735.376612][T11432] tipc: Failed to remove unknown binding: 66,1,1/0:2889103059/2889103061 [ 735.385588][T11432] tipc: Failed to remove unknown binding: 66,1,1/0:2889103059/2889103061 [ 735.393873][T11432] tipc: Failed to remove unknown binding: 66,1,1/0:2889103059/2889103061 [ 735.403825][T11432] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8210 sclass=netlink_route_socket pid=11432 comm=syz.3.2574 [ 737.102856][T11461] loop0: detected capacity change from 0 to 512 [ 737.124513][T11461] EXT4-fs (loop0): Test dummy encryption mode enabled [ 737.518625][T11461] EXT4-fs error (device loop0): __ext4_iget:5046: inode #11: block 1: comm syz.0.2583: invalid block [ 737.529881][T11461] EXT4-fs error (device loop0): ext4_orphan_get:1401: comm syz.0.2583: couldn't read orphan inode 11 (err -117) [ 737.542192][T11461] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 737.773058][T11472] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2583'. [ 737.902134][T11474] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2587'. [ 737.999235][T11274] EXT4-fs (loop0): unmounting filesystem. [ 738.304422][ T28] audit: type=1400 audit(2000004529.568:1072): avc: denied { read } for pid=11482 comm="syz.1.2589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 738.370509][T11489] syz.4.2588[11489] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 738.370823][T11489] syz.4.2588[11489] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 739.349247][ T3300] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 739.901331][T11518] binder: 11512:11518 ioctl 4018620d 0 returned -22 [ 739.924224][ T3300] usb 1-1: Using ep0 maxpacket: 16 [ 739.981659][T11520] block device autoloading is deprecated and will be removed. [ 740.044275][ T3300] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 740.074352][ T3300] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96 [ 740.084002][ T3300] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 740.135861][ T3300] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 740.194688][T11526] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2598'. [ 740.254300][ T3300] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 740.273322][ T3300] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 740.284614][ T3300] usb 1-1: SerialNumber: syz [ 740.314289][T11492] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 740.321271][T11492] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 740.364222][ T1568] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 740.697814][T11492] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 740.707305][T11492] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 740.864209][ T1568] usb 5-1: device descriptor read/64, error -71 [ 740.934928][T11492] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 740.948193][T11492] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 741.196054][ T3300] cdc_ether 1-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.0-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 741.225487][ T28] audit: type=1400 audit(2000004532.498:1073): avc: denied { read } for pid=141 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 741.256021][ T1568] usb 5-1: device descriptor read/64, error -71 [ 741.440921][T11541] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 741.450125][T11541] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 741.784253][ T1568] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 741.794227][ C1] cdc_ether 1-1:1.0 usb0: CDC: unexpected notification 68! [ 741.872916][T11566] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 741.887084][T11566] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 741.902391][T11566] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 741.919052][T11566] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 742.014212][ C1] cdc_ether 1-1:1.0 usb0: CDC: unexpected notification 01! [ 742.251749][ T1568] usb 5-1: device descriptor read/64, error -71 [ 742.494214][ C1] cdc_ether 1-1:1.0 usb0: CDC: unexpected notification 01! [ 742.664233][ T1568] usb 5-1: device descriptor read/64, error -71 [ 742.784408][ T1568] usb usb5-port1: attempt power cycle [ 743.524513][ T6] usb 1-1: USB disconnect, device number 21 [ 743.546096][ T6] cdc_ether 1-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.0-1, CDC Ethernet Device [ 743.582787][T11602] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2609'. [ 743.991729][ T1568] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 744.184420][ T1568] usb 5-1: device descriptor read/8, error -71 [ 744.570583][ T1568] usb 5-1: device descriptor read/8, error -71 [ 744.864243][ T1568] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 745.074248][ T1568] usb 5-1: device descriptor read/8, error -71 [ 745.374324][ T1568] usb 5-1: device descriptor read/8, error -71 [ 745.494354][ T1568] usb usb5-port1: unable to enumerate USB device [ 750.765030][T11641] bridge0: port 1(bridge_slave_0) entered blocking state [ 750.771971][T11641] bridge0: port 1(bridge_slave_0) entered disabled state [ 750.779692][T11641] device bridge_slave_0 entered promiscuous mode [ 750.786939][T11641] bridge0: port 2(bridge_slave_1) entered blocking state [ 750.793767][T11641] bridge0: port 2(bridge_slave_1) entered disabled state [ 750.801193][T11641] device bridge_slave_1 entered promiscuous mode [ 750.840646][T11641] bridge0: port 2(bridge_slave_1) entered blocking state [ 750.847646][T11641] bridge0: port 2(bridge_slave_1) entered forwarding state [ 750.854871][T11641] bridge0: port 1(bridge_slave_0) entered blocking state [ 750.861813][T11641] bridge0: port 1(bridge_slave_0) entered forwarding state [ 750.883600][ T3502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 750.891026][ T3502] bridge0: port 1(bridge_slave_0) entered disabled state [ 750.898604][ T3502] bridge0: port 2(bridge_slave_1) entered disabled state [ 750.908949][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 750.916990][ T323] bridge0: port 1(bridge_slave_0) entered blocking state [ 750.923818][ T323] bridge0: port 1(bridge_slave_0) entered forwarding state [ 750.942223][T11641] device veth0_vlan entered promiscuous mode [ 750.948888][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 750.957123][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 750.965294][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 750.972458][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 750.980601][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 750.988769][ T323] bridge0: port 2(bridge_slave_1) entered blocking state [ 750.995794][ T323] bridge0: port 2(bridge_slave_1) entered forwarding state [ 751.003002][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 751.010733][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 751.024491][ T3502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 751.033367][T11641] device veth1_macvtap entered promiscuous mode [ 751.042269][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 751.053288][ T3502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 751.089860][T11650] loop0: detected capacity change from 0 to 512 [ 751.211794][T11653] bridge0: port 1(bridge_slave_0) entered blocking state [ 751.222880][T11650] EXT4-fs error (device loop0): __ext4_iget:5046: inode #11: block 1: comm syz.0.2621: invalid block [ 751.223987][T11653] bridge0: port 1(bridge_slave_0) entered disabled state [ 751.235471][T11650] EXT4-fs error (device loop0): ext4_orphan_get:1401: comm syz.0.2621: couldn't read orphan inode 11 (err -117) [ 751.243927][T11653] device bridge_slave_0 entered promiscuous mode [ 751.252722][T11650] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 751.260326][T11653] bridge0: port 2(bridge_slave_1) entered blocking state [ 751.503952][T11655] serio: Serial port tty25 [ 751.511725][T11650] general protection fault, probably for non-canonical address 0xdffffc0000000007: 0000 [#1] PREEMPT SMP KASAN [ 751.523274][T11650] KASAN: null-ptr-deref in range [0x0000000000000038-0x000000000000003f] [ 751.531521][T11650] CPU: 1 PID: 11650 Comm: syz.0.2621 Not tainted 6.1.99-syzkaller-00088-gbcc435d3749c #0 [ 751.541164][T11650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 751.551056][T11650] RIP: 0010:__ext4_journal_get_write_access+0xb0/0x690 [ 751.557732][T11650] Code: 88 ff 49 8d 5e 30 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 ce 0a d0 ff 48 8b 1b 48 83 c3 38 48 89 d8 48 c1 e8 03 <42> 80 3c 28 00 74 08 48 89 df e8 b1 0a d0 ff 4c 8b 23 4d 85 e4 4c [ 751.577351][T11650] RSP: 0018:ffffc900007b76e0 EFLAGS: 00010202 [ 751.583239][T11650] RAX: 0000000000000007 RBX: 0000000000000038 RCX: 0000000000040000 [ 751.591053][T11650] RDX: ffffc90004123000 RSI: 000000000003ffff RDI: 0000000000040000 [ 751.598863][T11650] RBP: ffffc900007b77b0 R08: ffff88813449ec78 R09: 0000000000000001 [ 751.606675][T11650] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000001 [ 751.614489][T11650] R13: dffffc0000000000 R14: ffff88813449ec78 R15: 0000000000000001 [ 751.622318][T11650] FS: 00007f68a8b826c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 751.631262][T11650] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 751.637669][T11650] CR2: 00007f34fe566f98 CR3: 00000001192ef000 CR4: 00000000003506a0 [ 751.645660][T11650] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 751.653465][T11650] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 751.661268][T11650] Call Trace: [ 751.664401][T11650] [ 751.667167][T11650] ? __die_body+0x62/0xb0 [ 751.671349][T11650] ? die_addr+0x9f/0xd0 [ 751.675338][T11650] ? exc_general_protection+0x317/0x4c0 [ 751.680723][T11650] ? asm_exc_general_protection+0x27/0x30 [ 751.686266][T11650] ? __ext4_journal_get_write_access+0xb0/0x690 [ 751.692339][T11650] ? sysvec_reschedule_ipi+0x80/0x160 [ 751.697639][T11650] ? __ext4_journal_ensure_credits+0x470/0x470 [ 751.703638][T11650] ext4_update_superblocks_fn+0x2dc/0x1300 [ 751.709267][T11650] ? ext4_update_superblocks_fn+0x1300/0x1300 [ 751.715166][T11650] ? raw_irqentry_exit_cond_resched+0x2a/0x30 [ 751.721083][T11650] ? ext4_update_overhead+0x170/0x170 [ 751.726285][T11650] ? sysvec_reschedule_ipi+0x80/0x160 [ 751.731492][T11650] ext4_update_overhead+0x143/0x170 [ 751.736524][T11650] ext4_fill_super+0x309b/0x8460 [ 751.741302][T11650] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 751.747377][T11650] ? snprintf+0xd6/0x120 [ 751.751447][T11650] ? set_blocksize+0x1cb/0x360 [ 751.756054][T11650] ? sb_set_blocksize+0xa8/0xf0 [ 751.760732][T11650] get_tree_bdev+0x440/0x680 [ 751.765255][T11650] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 751.771329][T11650] ext4_get_tree+0x1c/0x20 [ 751.775579][T11650] vfs_get_tree+0x88/0x290 [ 751.779827][T11650] do_new_mount+0x2ba/0xb30 [ 751.784172][T11650] ? do_move_mount_old+0x160/0x160 [ 751.789117][T11650] ? security_capable+0x87/0xb0 [ 751.793889][T11650] ? ns_capable+0x89/0xe0 [ 751.798056][T11650] path_mount+0x671/0x1070 [ 751.802317][T11650] ? user_path_at_empty+0x14e/0x1a0 [ 751.807345][T11650] __se_sys_mount+0x2c4/0x3b0 [ 751.811864][T11650] ? __x64_sys_mount+0xd0/0xd0 [ 751.816458][T11650] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 751.822371][T11650] __x64_sys_mount+0xbf/0xd0 [ 751.826792][T11650] x64_sys_call+0x49d/0x9a0 [ 751.831120][T11650] do_syscall_64+0x3b/0xb0 [ 751.835375][T11650] ? clear_bhb_loop+0x55/0xb0 [ 751.839887][T11650] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 751.845625][T11650] RIP: 0033:0x7f68a7d7f6da [ 751.849873][T11650] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 751.869402][T11650] RSP: 002b:00007f68a8b81e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 751.877652][T11650] RAX: ffffffffffffffda RBX: 00007f68a8b81ef0 RCX: 00007f68a7d7f6da [ 751.885589][T11650] RDX: 0000000020000ac0 RSI: 0000000020000180 RDI: 00007f68a8b81eb0 [ 751.893405][T11650] RBP: 0000000020000ac0 R08: 00007f68a8b81ef0 R09: 0000000003810744 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 751.901295][T11650] R10: 0000000003810744 R11: 0000000000000246 R12: 0000000020000180 [ 751.909108][T11650] R13: 00007f68a8b81eb0 R14: 0000000000000451 R15: 0000000020000700 [ 751.916951][T11650] [ 751.919781][T11650] Modules linked in: [ 751.944276][T11653] bridge0: port 2(bridge_slave_1) entered disabled state [ 751.965543][T11653] device bridge_slave_1 entered promiscuous mode [ 751.975749][T11650] ---[ end trace 0000000000000000 ]--- [ 751.981399][T11650] RIP: 0010:__ext4_journal_get_write_access+0xb0/0x690 [ 751.988394][T11650] Code: 88 ff 49 8d 5e 30 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 ce 0a d0 ff 48 8b 1b 48 83 c3 38 48 89 d8 48 c1 e8 03 <42> 80 3c 28 00 74 08 48 89 df e8 b1 0a d0 ff 4c 8b 23 4d 85 e4 4c [ 752.013244][T11650] RSP: 0018:ffffc900007b76e0 EFLAGS: 00010202 [ 752.019781][T11650] RAX: 0000000000000007 RBX: 0000000000000038 RCX: 0000000000040000 [ 752.027826][T11650] RDX: ffffc90004123000 RSI: 000000000003ffff RDI: 0000000000040000 [ 752.036812][T11650] RBP: ffffc900007b77b0 R08: ffff88813449ec78 R09: 0000000000000001 [ 752.054586][ T6] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 752.057842][T11650] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000001 [ 752.091620][T11650] R13: dffffc0000000000 R14: ffff88813449ec78 R15: 0000000000000001 [ 752.115708][T11650] FS: 00007f68a8b826c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 752.145844][T11650] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 752.152268][T11650] CR2: 00007fff38b35ff8 CR3: 00000001192ef000 CR4: 00000000003506b0 [ 752.163502][T11650] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 752.177997][T11650] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 752.186057][T11650] Kernel panic - not syncing: Fatal exception [ 752.192254][T11650] Kernel Offset: disabled [ 752.196380][T11650] Rebooting in 86400 seconds..