last executing test programs: 1m43.543645764s ago: executing program 32 (id=136): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @broadcast}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x4}}, 0xc, {0x2, 0x0, @empty}, 'team_slave_1\x00'}) 1m32.960077624s ago: executing program 2 (id=191): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x120, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{}, [@TCA_NETEM_LOSS={0xb4, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x5, 0xfffffff6, 0x8001, 0x1ff, 0xffffffff}}, @NETEM_LOSS_GE={0x14, 0x2, {0x9, 0x63a5, 0x101, 0x7}}, @NETEM_LOSS_GE={0x14, 0x2, {0xacc, 0x5, 0x13f5, 0xd}}, @NETEM_LOSS_GI={0x18, 0x1, {0x3, 0x1744, 0x3, 0x3}}, @NETEM_LOSS_GI={0x18, 0x1, {0xffffffff, 0x2, 0x401, 0x2, 0xd}}, @NETEM_LOSS_GE={0x0, 0x2, {0x6, 0x9, 0x2, 0x100}}, @NETEM_LOSS_GI={0x18, 0x1, {0x54e71f4d, 0xc6a, 0x4, 0x0, 0x8}}, @NETEM_LOSS_GE={0x14, 0x2, {0x6, 0x5000}}]}, @TCA_NETEM_RATE={0x14, 0xd}, @TCA_NETEM_CORRUPT={0xc, 0x2}]}}}]}, 0x120}}, 0x0) 1m32.883361405s ago: executing program 33 (id=192): openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000400)='./file0\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="73686f72746e616d653d77696e39352c73686f72746e616d653d77696e6e742c756e695f786c6174653d302c756e695f786c6174653d312c757466383d312c757466383d312c646973636172642c757466383d302c756e695f786c6174653d302c666c7573682c73686f72746e616d653d6d697865642c73686f72746e616d653d6c6f7765722c646f733178666c6f7070792c73686f72746e616d653d77696e6e742c73686f72746e616d653d6c6f7765722c757466382c0014697a7960fb374b723f64329787434c6c9f891d2e309efaf1d4e529e1ba0f697fedffb095592bc19d5a8f8141ee9bf46262f3a2b1452bf206c0e2ae8a465e6e1be6eeb5d588035a24458d476fc1f9a234cdc4ba352a4185614ce67df4870bff796357ee95fffb99cde9"], 0xfe, 0x2ae, &(0x7f0000000a40)="$eJzs3c9qY1UYAPDvpkka7SJZuBLBu5iFG8tkti7MIBXErpQs/AM6ODMwNGGggcCoGGblE7hw4Xu4cy+48Q0EH8CdgxSO3NzbJLZp2rSmlfr7bXo45/vu+U7uabO43NPPXxsePHw6evz869+i1cqi1otevMiiE7U4lioBANwKL1KKPy71/V6vbaomAGCzFr7/G2eEbJ/uenvTZQEAG/ThRx+/f39/f++DPG9FDL8d97Mof5bj9x/HkxjEo7gb7TiaPwtIqWy/+97+XtTzQifuDCfjfpE5/OyXxccGRX432tFZnt/NSwv5k3G/ES9HZFnEk15RyL1oxyun8ovxvXtL8qPfjDda1SKL+XejHb9+EU9jEA+nzzTm83/TzfN30nd/fvVJEVzkZ5Nxf3saN5e2rvveAAAAAAAAAAAAAAAAAAAAAABwe+3mM524Myy6qvN3to6m47v/GJ+er1Objpf5WURz2jhxPtAkxQ/H5+vczfM8ZWX8/Hyferxaj/qNLRwAAAAAAAAAAAAAAAAAAAD+Q0bPvjx4MBg8OvxXGtVL/rPX+i97nd5Cz+uxOnh7rbliqwovaj0Z0/350+Gsp1jEZYofN/KIVTU3TvW8VNRz/pX/SimlLIu42m1qXGSucxo7q2OKD/in73fePHiQnfcZto5v3I+LQ804HD07cU8jW6fCtNb2a66IaVY75kLX2bniL9Fbv5eTVT3ZGqtoVI04a/u11trP1/c3CAAAAAAAAAAAAAAAAAAAKM1f+l0y+Hxlam1jRQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADANZv///81GpMqeXlMSmky62nG4eiGlwgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMD/wN8BAAD//7DYbww=") syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20080e, &(0x7f0000000080)={[], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@hash}, {@appraise}, {@seclabel}, {@smackfstransmute={'smackfstransmute', 0x3d, '@-{:$'}}]}, 0x3, 0x443, &(0x7f0000000a40)="$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") r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000300)={0x2, 0x4e24, @broadcast}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x4, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@exit]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r5, &(0x7f0000000000)="0a000000010001", 0x7) 1m32.826286726s ago: executing program 2 (id=195): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x123000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_DEBUGREGS(r2, 0x4080aea2, 0x0) 1m32.605677729s ago: executing program 2 (id=197): capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0x6, 0x0, 0x1, 0xffffff80}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000000180)="10000000000000000100000024000000", 0x10) 1m32.54369095s ago: executing program 2 (id=198): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x80, &(0x7f0000000240), 0x1, 0x50d, &(0x7f0000000980)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) truncate(&(0x7f0000000000)='./file1\x00', 0xf0ffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a) bpf$PROG_LOAD(0x5, 0x0, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000100)='./bus\x00', 0x14113e, 0x0) write$binfmt_script(r1, &(0x7f0000000080), 0x208e24b) fallocate(r0, 0x20, 0x4000, 0x8000) 1m32.099025887s ago: executing program 2 (id=203): socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x10, &(0x7f00000004c0)={[{@debug}, {@nodelalloc}]}, 0x1, 0x793, &(0x7f0000001700)="$eJzs3c1rXFUbAPDnTpKmb9r3TV4QbF0FBA2UTkyNrYKLigsRLBR0bTtMpqFmkimZSWlCoBYR3AhaXAi66dqPunPrx1b/Bd2ISEvVtFhxISN3PjqTZiadtvloze8Htz3n3jM595l77zln5h7mBrBjjab/ZCL2R8R7ScRwY30SEQO1VH/E0Xq5myvL+XRJolp99bekVubGynI+2l6T2tPI7IuIb96OOJBZW295cWkmVywW5hv58crsmfHy4tLB07O56cJ0Ye7wxOTkoSPPHBncuFj/+H5p79X3X3ry86N/vfXo5Xe/TeJo7G1sa49jo4zGaOM9GUjfwlVe3OjKtlmy3TvAPUkvzb76VR77Yzj6aqne9F4SAHiQnI+IKgCwwyT6fwDYYZrfA9xYWc6nS/X89n4fsdWuvRARu+vxN+9v1rf0N+7Z7a7dBx26kay635FExMgG1D8aER9/+fqn6RKbdB8SoJM3L0TEyZHRZvvfan+SNXMW6nqfkPFUD2VGb8tr/2DrfJWOf55tjf9a11/m1vgnOox/Bjtcu/diNGJXe37t9Z+5sgHVdJWO/54faM1tu9kWf8NIXyP339qYbyA5dbpYSNu2/0XEWAwMpvmJdeoYu/739VUr+lrJ9vHf7xff+CStP/2/VSJzpf+2JncqV8ndb9xN1y5EPNbfKf7k1vFPuox/j/dYx8vPvfNRt21p/Gm8zWV1/Js/q6x6KeKJ6Bx/U7Le/MTD47XTYbx5UnTwxU8fDnWrv/34p0taf/OzwFZIj//Q+vGPJO3zNct3X8d3l4a/7rbtzvF3Pv93Ja/V0s3G41yuUpmfiNiVvLJ2/aHWa5v5Zvk0/rHHO1//653/6WfCkz3G33/118/uPf7NlcY/dVfH/+4Tl2/O9HWrv7fjP1lLjTXW9NL+9bqD9/PeAQAAAAAAAAAAAAAAAAAAAAAAAECvMhGxN5JM9lY6k8lm68/wfiSGMsVSuXLgVGlhbipqz8oeiYFM86cuh9t+D3Wi8Xv4zfyh2/JPR8T/I+KDwf/U8tl8qTi13cEDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQMOeLs//T/0yuN17BwBsmt13LHG9sCU7AgBsmTv3/wDAv43+HwB2Hv0/AOw8+n8A2Hn0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGyy48eOpUv1z5XlfJqfOru4MFM6e3CqUJ7Jzi7ks/nS/JnsdKk0XSxk86XZtpf+0OnvFUulM5Mxt3BuvFIoV8bLi0snZksLc5UTp2dz04UThYEtiwwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeldeXJrJFYuFeYmHJVEdrh+6B2V/Nj/x88Ef961X5qLTeOMT290yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwc/gkAAP//skMoxA==") mount$incfs(&(0x7f0000000300)='./file0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000280), 0x0, 0x0) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', &(0x7f0000000380), 0x2200050, 0x0) 1m31.289271099s ago: executing program 5 (id=213): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="000180"], 0x0, 0x0, 0x0}, 0x0) 1m31.18623116s ago: executing program 2 (id=216): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) modify_ldt$write(0x1, 0x0, 0x10) memfd_create(&(0x7f0000000040)='nobarrier', 0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r2, 0x4b6a, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) chdir(&(0x7f0000000280)='./file0\x00') creat(&(0x7f0000000300)='./bus\x00', 0x15d) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x14103e, 0x0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x143042, 0xce) ftruncate(r4, 0x2008002) sendfile(r3, r4, 0x0, 0x80000001) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) 1m31.145207391s ago: executing program 34 (id=216): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) modify_ldt$write(0x1, 0x0, 0x10) memfd_create(&(0x7f0000000040)='nobarrier', 0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r2, 0x4b6a, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) chdir(&(0x7f0000000280)='./file0\x00') creat(&(0x7f0000000300)='./bus\x00', 0x15d) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x14103e, 0x0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x143042, 0xce) ftruncate(r4, 0x2008002) sendfile(r3, r4, 0x0, 0x80000001) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) 1m29.688795653s ago: executing program 5 (id=228): sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = socket$inet6(0xa, 0x80803, 0x87) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r4 = socket$inet6(0xa, 0x3, 0x89) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000019080)={{{@in6=@remote, @in6=@dev={0xfe, 0x80, '\x00', 0x43}, 0x4e22, 0x0, 0x4e20, 0x0, 0x2}, {0x0, 0x4, 0x1, 0x0, 0x0, 0x9}, {0x1ff, 0xffffffffe, 0x4053e5, 0x20}, 0x6, 0x1, 0x1, 0x0, 0x1, 0x2}, {{@in=@empty, 0x1, 0x32}, 0xa, @in6=@private0, 0x3502, 0x1, 0x0, 0x0, 0x800000, 0xfffffffd}}, 0xe8) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x9df}, 0x1c) connect$inet6(r2, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0xb, 0x2, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r5}, 0x0, &(0x7f0000000100)}, 0x20) dup(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x8413, &(0x7f0000000100), 0x1c, 0x549, &(0x7f0000000a80)="$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") 1m29.274944509s ago: executing program 5 (id=232): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000a80)={{0x2, 0x4e22, @empty}, {0x0, @remote}, 0x48, {0x2, 0x4e24, @rand_addr=0x640100ff}, 'veth1_to_bond\x00'}) r2 = add_key$fscrypt_v1(0x0, &(0x7f0000000040)={'fscrypt:', @desc2}, &(0x7f0000000080)={0x0, "69dcaf20127e9a854528f45826cb35be51ca73845d177dd8dba7221daeccfda56b75cfe286fdd14cb5b11b1cab614fec2236da7d88ea0f0700"}, 0x48, 0xfffffffffffffffe) keyctl$search(0xa, r2, &(0x7f0000000340)='asymmetric\x00', 0x0, r2) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f00000002c0)={{0x2, 0x4e21, @broadcast}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}, 0x8, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xb9}}, 'lo\x00'}) r3 = socket$inet6(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r4}, 0x0, 0x0}, 0x1c) socket$packet(0x11, 0x2, 0x300) sendmsg(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x4040044) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 1m28.865164235s ago: executing program 5 (id=240): lstat(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000040)) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x3000410, &(0x7f00000000c0)={[], [{@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@context={'context', 0x3d, 'staff_u'}}]}, 0x6, 0x4fd, &(0x7f0000000a40)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) 1m28.841759836s ago: executing program 7 (id=241): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000240)={[{@grpquota}, {@auto_da_alloc}, {@minixdf}]}, 0x1, 0x50c, &(0x7f0000000ac0)="$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") capset(&(0x7f0000000280)={0x20071026}, &(0x7f0000000340)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x42, 0x1fe) fallocate(r0, 0x10, 0x7, 0x10001) 1m27.823308572s ago: executing program 5 (id=246): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)=""/167, 0xa7}], 0x1, 0x8a, 0x0) socket$packet(0x11, 0x2, 0x300) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x42, &(0x7f0000000000)=0x3, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) shutdown(r4, 0x1) connect$bt_rfcomm(r4, &(0x7f0000000200)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x15}, 0xa) syz_emit_ethernet(0x4a, &(0x7f0000000300)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "000100", 0x14, 0x6, 0x1, @remote, @private1, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_read_part_table(0x5df, &(0x7f0000000000)="$eJzs3DGIE1kYB/CXIBEFETs7gykichAh3UkEDXGQgAnBQ4s70c4t0qyVRYxgQCzMNhE5Gy0UYQ1aaCUiCCImFkIqUXavuN1l2eJY2CawLHMEZrvjYG/JHQe/Hzx4b97/zcfHMOVM4H8tHf6I4zgVQoj37vz0T/OVs+ey9dONCyGkwi8hhN/zs79OdlJJYvuuR5P1YrIuvt3TvDcf3en2Dhx+nd38nE72byVjZfjw8q6bY+qOXT/+/sh4dOhNNTwenBqc3N+8dK2fL7f7X+qvzjzNPtt+7oUp1X9Z+njwdmc26t4ozXyNWkvRanpjPTr/4FEhM9du5NdOJLkrU6rf3LqYef7kQ7mzvK/4qVqr9V58v59rVd51bo6GuW/ju1eT3MI/eLsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPj3Hbt+/P2R8ejQm2p4PDg1OLm/eelaP19u97/UX515mn12NMkVplT/Zenjwdud2ah7ozTzNWotRavpjfXo/INHhcxcu5FfO5HkrvzV4TiO27us39y6mHn+5EO5s7yv+Klaq/VefL+fa1XedW6Ohrlv47tXk9zC3l0WAgAAAAAAAAAAAAAAAAAAgL9ROXsuWz/duDCZ/xxC+GHmx7nJPE6+d08lue3/ACxOrqdDKL7d07w3H93p9g4cfp3d/Pxbkr+VjJXhw8v/QTvs0J8BAAD//9odjZ8=") 1m27.822916672s ago: executing program 7 (id=247): syz_mount_image$exfat(&(0x7f0000006c00), &(0x7f0000001b40)='./file0\x00', 0x800000, &(0x7f0000001dc0)=ANY=[], 0x1, 0x1503, &(0x7f0000000580)="$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") rename(&(0x7f0000001980)='./file1\x00', &(0x7f00000001c0)='./file0/file1\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) 1m27.475415977s ago: executing program 5 (id=250): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x16, @loopback, 0x4e24, 0x3, 'lblcr\x00', 0x0, 0x32bb, 0x12}, {@empty, 0x4e21, 0x0, 0xfffffffe, 0xf336, 0x12d5c}}, 0x44) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000020000/0x18000)=nil, &(0x7f0000001f80)=[@text64={0x40, 0x0}], 0x1, 0x69, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f"], 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file1\x00', 0x50, &(0x7f0000000280)={[{@jqfmt_vfsv1}, {@stripe={'stripe', 0x3d, 0x4}}, {@dioread_nolock}, {@mblk_io_submit}, {@nogrpid}, {@nogrpid}]}, 0x1, 0x3ed, &(0x7f0000001240)="$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") 1m27.23856501s ago: executing program 35 (id=250): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x16, @loopback, 0x4e24, 0x3, 'lblcr\x00', 0x0, 0x32bb, 0x12}, {@empty, 0x4e21, 0x0, 0xfffffffe, 0xf336, 0x12d5c}}, 0x44) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000020000/0x18000)=nil, &(0x7f0000001f80)=[@text64={0x40, 0x0}], 0x1, 0x69, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f"], 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file1\x00', 0x50, &(0x7f0000000280)={[{@jqfmt_vfsv1}, {@stripe={'stripe', 0x3d, 0x4}}, {@dioread_nolock}, {@mblk_io_submit}, {@nogrpid}, {@nogrpid}]}, 0x1, 0x3ed, &(0x7f0000001240)="$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") 1m27.138745772s ago: executing program 7 (id=253): r0 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = creat(&(0x7f00000000c0)='./file1\x00', 0x67) close(r2) r3 = socket$unix(0x1, 0x5, 0x0) bind$unix(r3, 0x0, 0x0) listen(r3, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000001200), 0x0, &(0x7f00000003c0)=ANY=[@ANYRESHEX=r2, @ANYBLOB="d3ad875a8bfd3ea71edaf9185c79bf45b285e913de8e4b062621350000844bbdd05c3802095a986e97b65ec7a12b5884ba448b12c5db38a0ba5bb9239f008cb2fffffffffffffff69379e28cecb32a5b840431099524808f9780a7326ee0c29606a53835a3e0d0a64b393b31578ae6602ca2e67436a748ec4309fb0fa9c7c246a8500da180671b2058c3bbd5cbf73c2f8a69aedae2d396942b4abcb034993a88f0a1ff1eafefcfd8196d68ba905cdaf14a9c9d", @ANYRESHEX=r3, @ANYBLOB=',\x00']) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000080)=0x100, 0x4) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1241, 0x5015, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0xffff, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc, 0xfd}}}}}]}}]}}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b19, 0x0) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000040)='batadv0\x00') syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4016, &(0x7f0000000780), 0x1, 0x447, &(0x7f0000001380)="$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") syz_open_procfs(0x0, 0x0) 1m24.992871494s ago: executing program 6 (id=266): r0 = socket$inet(0x2, 0x3, 0x6) sendto$inet(r0, 0x0, 0xffffff35, 0x8000000, &(0x7f0000000c00)={0x2, 0x4e22, @private=0xa010100}, 0x10) 1m24.937809585s ago: executing program 7 (id=268): lstat(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000040)) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x3000410, &(0x7f00000000c0)={[], [{@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@context={'context', 0x3d, 'staff_u'}}]}, 0x6, 0x4fd, &(0x7f0000000a40)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) 1m24.937636775s ago: executing program 6 (id=269): setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x10, &(0x7f00000004c0)={[{@debug}, {@nodelalloc}]}, 0x1, 0x793, &(0x7f0000001700)="$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") mount$incfs(&(0x7f0000000300)='./file0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000280), 0x0, 0x0) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', &(0x7f0000000380), 0x2200050, 0x0) 1m24.740708718s ago: executing program 7 (id=271): syz_open_dev$usbfs(&(0x7f0000000100), 0x74, 0x101301) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000380)='sys_enter\x00', r0}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) select(0x40, &(0x7f0000000180)={0xd6c, 0x9, 0xffffffffffffffff, 0x7, 0x200, 0x10, 0x800, 0x806}, 0x0, 0x0, 0x0) 1m24.738512298s ago: executing program 6 (id=272): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) r3 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000040)={[{@norecovery}, {@grpquota}, {@debug}, {@discard}]}, 0xee, 0x498, &(0x7f0000001b40)="$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") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1m23.893098741s ago: executing program 7 (id=275): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x4, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="180200000000000000000000000000008500000030000000850000002300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1m23.892984661s ago: executing program 36 (id=275): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x4, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="180200000000000000000000000000008500000030000000850000002300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1m23.609654405s ago: executing program 6 (id=281): lstat(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000040)) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x3000410, &(0x7f00000000c0)={[], [{@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@context={'context', 0x3d, 'staff_u'}}]}, 0x6, 0x4fd, &(0x7f0000000a40)="$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") bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[], 0x50) r0 = socket$inet6(0xa, 0x2, 0x8) fcntl$setlease(r0, 0x400, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x200080, 0x0) r3 = getpid() syz_pidfd_open(r3, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) 1m23.188889162s ago: executing program 6 (id=286): syz_open_dev$usbfs(&(0x7f0000000100), 0x74, 0x101301) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000380)='sys_enter\x00', r0}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) select(0x40, &(0x7f0000000180)={0xd6c, 0x9, 0xffffffffffffffff, 0x7, 0x200, 0x10, 0x800, 0x806}, 0x0, 0x0, 0x0) 1m22.924692425s ago: executing program 6 (id=289): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) keyctl$clear(0x11, 0xfffffffffffffffd) listen(r0, 0xa) setresgid(0xee00, 0xee01, 0x0) close(0x3) 1m22.774581288s ago: executing program 37 (id=289): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) keyctl$clear(0x11, 0xfffffffffffffffd) listen(r0, 0xa) setresgid(0xee00, 0xee01, 0x0) close(0x3) 1m18.68601397s ago: executing program 9 (id=326): syz_mount_image$vfat(&(0x7f0000001200), &(0x7f00000000c0)='./file0\x00', 0x2000400, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1, 0x11eb, &(0x7f00000024c0)="$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") r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat(r0, &(0x7f0000000180)='./bus\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000200)='./bus/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) renameat2(r0, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000100)='./bus/file0\x00', 0x2) 1m18.481967003s ago: executing program 9 (id=335): setpgid(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xff64000) r2 = syz_io_uring_setup(0x94f, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000000080)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r2, 0x7, 0x464f, 0x1, 0x0, 0x0) 1m17.557562857s ago: executing program 9 (id=340): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="18020000000020000000000000000000850000003600000095"], &(0x7f00000000c0)='GPL\x00', 0x5, 0xc5, &(0x7f00000001c0)=""/197, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r1, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x80, &(0x7f0000003780)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, @void, {@mpls_mc={0x8848, {[], @ipv6=@gre_packet={0xb, 0x6, "cbbcf6", 0x4a, 0x2f, 0xff, @ipv4={'\x00', '\xff\xff', @multicast1}, @rand_addr=' \x01\x00', {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}, {0x0, 0x0, 0x0, 0x1}, {0x8, 0x88be, 0x4, {{0x2, 0x1, 0x0, 0x3, 0x0, 0x1, 0x3, 0x2}}}, {0x8, 0x22eb, 0x3, {{0x7, 0x2, 0x2, 0x2, 0x0, 0x1, 0x4, 0xff}, 0x2, {0x10001, 0x7, 0x1, 0x1, 0x0, 0x1, 0x2, 0x1}}}, {0x8, 0x6558, 0x2, "6e6fa615f756"}}}}}}}}, 0x0) 1m16.590354181s ago: executing program 9 (id=347): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x185502, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2000002, 0x28011, r0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) 1m16.281056906s ago: executing program 9 (id=350): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x23, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 1m15.97291867s ago: executing program 9 (id=352): syz_open_procfs(0xffffffffffffffff, 0x0) socket$igmp(0x2, 0x3, 0x2) dup(0xffffffffffffffff) syz_emit_ethernet(0x46, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0xffffffffffffffff, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x10) mount(0x0, 0x0, &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) setns(r2, 0x24020000) syz_clone(0x1fa524000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet(0xa, 0x4, 0x400484) 1m15.713657935s ago: executing program 38 (id=352): syz_open_procfs(0xffffffffffffffff, 0x0) socket$igmp(0x2, 0x3, 0x2) dup(0xffffffffffffffff) syz_emit_ethernet(0x46, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0xffffffffffffffff, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x10) mount(0x0, 0x0, &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) setns(r2, 0x24020000) syz_clone(0x1fa524000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet(0xa, 0x4, 0x400484) 4.387121703s ago: executing program 0 (id=1069): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="b0"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access', 0x3d, 0xee00}}]}}) chdir(&(0x7f00000001c0)='./file0\x00') syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009e602206d0414c340000000000109022400010400a000090480000103010100093700086ce82201000905815f"], 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x0) 3.854372271s ago: executing program 0 (id=1082): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000003200)='./file1\x00', 0x4204, &(0x7f0000003240)=ANY=[], 0x6, 0x325, &(0x7f0000000b40)="$eJzs3M9LG2kYwPEnMcYkoslh2WUXFl92L7uXQbN7XjYsCssGVtQsq4XCqJM2ZJpIJlhSStVTr6X3ngo9iEdvQus/4KW39tJLb14KPdRD6ZSZzJjfGmNsrH4/UObN+75P5n3zvinPDE4O/390J5+1tKxelmBESUBE5EgkIUHxBbxj0C2Hpd6m/Dr6/tWP84tL/6TS6ek5pWZSC78llVLjE8/v3o963fZG5CBx8/Bd8u3BtwffH35auJ2zVM5ShWJZ6Wq5+KasL5uGWs1ZeU2pWdPQLUPlCpZRqrYXq+1Zs7i2VlF6YXUstlYyLEvphYrKGxVVLqpyqaL0W3quoDRNU2MxwWky23NzeqrH4JU+DwYXpFRK6UMiEm1pyWwPZEAAAGCgmvP/oJPS95T/y7ib/zuda/n/zk/75dH/dse9/H8v3C7///119b0a8v+IiPSS/z+RM+T/rRnR9XKu/B+Xw0S4pSrQ8MrJ/2Pe99e1dWNn0i2Q/wMAAAAAAAAAAAAAAAAAAAAA8DU4su24bdtx/+j/qz1C4L3GldRp/UdEJOKsvs36X2Xzi0sScR/cc9bYfLieWc9Uj16HfRExxZBJictHdz94nLL/5JFyJOSFueHFb6xnhtyWVFZybvyUxCXRHG/bM3+np6dUlRd//JhSrD4+KXH5pn18sjHeO39Yfvm5Ll6TuLxckaKYsuru61r8gyml/vo33RQfdfsBAAAAAHAVaOpY2+t3TevUXv2VkVTWvU3U4f5A9fp6su31eSj+Q2jQswcAAAAA4HqwKvfyumkapRMKUTm9T++FUHedw001wyd1HqqbYbfjCbs3MkTOO6+nXX6qDQX/DykamiJeZW/j8efft/XarK8JShdRoebBTzgV6oxn3/Imclzj3zYKd/icZbb1fYIn7IThvu3n7x4/+9C/L8gfu/4OOL3zVq/nijTvOrcwfNH/7wAAAAD48mpJv1/zZ31zYCCDAgAAAAAAAAAAAAAAAAAAAAAAAAAAAADgmrmQn/RrKgx6jgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBl8TkAAP//3cD3xQ==") truncate(&(0x7f00000001c0)='./file2\x00', 0x4008000) 3.798295012s ago: executing program 0 (id=1083): capset(0x0, 0x0) creat(&(0x7f00000000c0)='./bus\x00', 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000040)=ANY=[], 0xfd, 0x386, &(0x7f00000007c0)="$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") 3.797959822s ago: executing program 0 (id=1084): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140), 0xfffffd89) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, &(0x7f0000000140)}) r2 = socket$unix(0x1, 0x5, 0x0) r3 = dup2(r2, r1) close_range(r3, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0xfffffffe, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=r4, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x4, &(0x7f00000001c0)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0xa6, '\x00', 0x0, @cgroup_sock_addr=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) syz_open_dev$tty1(0xc, 0x4, 0x1) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000002c0)='vcan0\x00', 0x10) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r6, &(0x7f0000000440), 0x10) listen(r6, 0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r8 = accept4$unix(r6, 0x0, 0x0, 0x0) recvmsg(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000240)=""/58, 0x3a}, {&(0x7f0000000300)=""/182, 0xb6}], 0x2}, 0x180) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) read$msr(0xffffffffffffffff, &(0x7f0000002700)=""/102392, 0x18ff8) close(0xffffffffffffffff) 2.960015855s ago: executing program 0 (id=1098): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="052000000000000061112c00000000008510000002"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b04, &(0x7f0000000000)={'wlan0\x00'}) 2.897948366s ago: executing program 0 (id=1100): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)=0x0) timer_settime(r0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) timer_gettime(r0, &(0x7f0000000480)) 1.894460451s ago: executing program 1 (id=1126): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0xff58) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x2, 0x1, 0x40}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.871769111s ago: executing program 1 (id=1128): r0 = syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) r1 = dup(r0) write$binfmt_script(r1, 0x0, 0x26) 1.838210202s ago: executing program 1 (id=1129): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x2e0, 0xfe, 0x60000004, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x25, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b311453dcbb62932a01105d0a8066ca8e5e1f2f575d0d6e996b57fd408d420abb7337934e59815d75b4eb3e7206afce", &(0x7f0000000380)="af5fa441b438b5156d8a9fcc090f586e979858f64170cde36889dcc8539ffcca62621a4c3ea3f7acee366e6fb0b94314f91731dec60fed6c9fee64af416c29f65e47110b81f6b4da06db5e1aad1f627acb", 0x0, 0x3}, 0x2c) 1.657936854s ago: executing program 1 (id=1138): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000340)='percpu_free_percpu\x00', r2}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x30, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.633938235s ago: executing program 8 (id=1141): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x4, &(0x7f0000000140)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='signal_generate\x00', r0}, 0x18) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 1.597580086s ago: executing program 1 (id=1142): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x25, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xa0}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0xfffffffa, 0x0, 0xffffffffffffffff, 0xfffffff6, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x1, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/12, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={r1, 0xe0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x6, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x88, &(0x7f0000000540)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000580), &(0x7f0000000680), 0x8, 0xab, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{0x1}, &(0x7f00000003c0), &(0x7f0000000400)=r0}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x3, 0xff, 0x0, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000070018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r5}, 0x10) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r8 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r9, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1, 0x0, 0x20}, 0x1f00) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000700)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0x6, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x5, 0x2}, {0x5, 0x3}]}, @fwd={0xe}, @enum={0xa, 0x2, 0x0, 0x6, 0x4, [{0x3, 0x3}, {0x0, 0x9}]}]}, {0x0, [0x0, 0x61, 0x2e, 0x2e]}}, &(0x7f0000000780)=""/119, 0x62, 0x77, 0x1, 0x0, 0x10000, @value}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000ec69c46a1dfb206f2113ef89f8cfa70fe91a354bbe85c35e52190f9a02868928fcebaf57d809e7763495449951012d7fa7ddfe529998c129231056025185d69780f6960d65778b", @ANYRES16=r8, @ANYRESOCT=r7], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, r11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, r8, 0x0, 0x0, 0x0, 0x0, 0x1000, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x7, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7b}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r12}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r13}, 0x10) sendmsg$tipc(r10, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) close(r6) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 1.518209716s ago: executing program 8 (id=1144): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r0}, &(0x7f0000001c00), &(0x7f0000001c40)=r1}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.488308497s ago: executing program 4 (id=1145): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000016c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000017b8af8ff00000000bfa200000000000007020000f8ffffffb703"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x13, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x28}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r0, 0x0, 0x62, 0xfffffffffffffe74, &(0x7f0000000140)="cb74445b7d4c0b24676c6c71ae37efcedaf46242309766deb4e793f90000000000000000dbc856cbc664650634231454ca2d8034c4ca29e0d99c3b6615e91835a600c08f989af45438a54981be310aad92ae545b1c961e5f3762a51fe4c736edec6f", &(0x7f0000000cc0)=""/265, 0xcb95, 0x0, 0xff, 0x194, &(0x7f0000000980)="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", &(0x7f00000007c0)="4c87fe555ceb79157b1e507ff4d3cc053321e42ae89f596427188b4877ab8f1776c0685784f1174c6401ecc1dd6e2a77bc79238f87ad9215a92ff203a30099e77c543e702b4a4438d358616381745f24f74e585498af129c4b173b242f445b08135f7fa40eb7ba78160ff4f0c80e1b324d0c234cb7f43a3ff9e9535dc16000c797113a039f4508a09144090000009f38a90a24f173b3e68377e4272950a80cfcd3aa6850e917bc7e57370060f5e6db941d67fc98a1e98103830b821657438325578d2af822dd4fc13ea7a7eef8d9be4e715aec8fd6cadc41c8da5ce9da2b9e1559d92a1936fc2b3a00000000000000000072200e10ba6269b634f10f7098c65ba67ba65c0e2687637e131fb8d5ba6c12c09c8356853c434a44ff0878e496dcf9a4f5ca02c293279948f37ebb28843f92c87c057a3b410e04418557d5deda7ddd3bd1d384d64ec980187e8b64a0696571a49e847db79349c9b3c3fab5f1f977bde4d802d9026ae0c11744eb1525c5195fd215d7a432497f35c2f2cfcd2b6336b26dfef0cb968c910ea2af5cdd4d58cc08535d5514", 0x2, 0x0, 0x3ff}, 0x24) 1.464748938s ago: executing program 8 (id=1146): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140), 0xfffffd89) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, &(0x7f0000000140)}) r2 = socket$unix(0x1, 0x5, 0x0) r3 = dup2(r2, r1) close_range(r3, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0xfffffffe, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=r4, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x4, &(0x7f00000001c0)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0xa6, '\x00', 0x0, @cgroup_sock_addr=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) syz_open_dev$tty1(0xc, 0x4, 0x1) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000002c0)='vcan0\x00', 0x10) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r6, &(0x7f0000000440), 0x10) listen(r6, 0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r8 = accept4$unix(r6, 0x0, 0x0, 0x0) recvmsg(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000240)=""/58, 0x3a}, {&(0x7f0000000300)=""/182, 0xb6}], 0x2}, 0x180) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) read$msr(0xffffffffffffffff, &(0x7f0000002700)=""/102392, 0x18ff8) close(0xffffffffffffffff) 1.345929899s ago: executing program 3 (id=1147): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000000010"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000004000000b703000008000040850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x4, 0x2003, 0xc, 0x0, 0xffffffffffffffff, 0xfffffffe, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x66, 0x7f, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000b00), &(0x7f0000000580), 0x7, r6}, 0x38) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={r6, &(0x7f0000001600), &(0x7f0000001680)=""/227}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r7}, 0x10) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70200001400ffd9b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='tlb_flush\x00', r9}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='kfree\x00', r4}, 0x18) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) 1.34571077s ago: executing program 4 (id=1148): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000009e8685000000040000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000cbd520850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='percpu_alloc_percpu\x00', r0}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.337470269s ago: executing program 4 (id=1149): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1a, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x7}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x2, 0x300}, {0x6e}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x38, '\x00', 0x0, @tracing=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1.29976905s ago: executing program 4 (id=1150): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000feffffff0000000002000000850000003600000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001700000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000283d0020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001100)={&(0x7f0000001500)='mm_page_alloc\x00', r1}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x8}, 0x50) 1.206212721s ago: executing program 4 (id=1151): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x500, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x40047452, &(0x7f00000017c0)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8) close(r4) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1e000000d90f0000000000000300000008000300", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="05000000040000000200000002000000000000e8ffffff00efa9f987cb1148776e", @ANYRES32, @ANYBLOB], 0x50) r5 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4f3, 0x755, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc}}}}}]}}]}}, 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f0000000000)={0x2c, &(0x7f0000000040)={0x20, 0x12, 0x7, {0x7, 0x1, "00f4000000"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r6 = syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) r7 = dup(r6) write$binfmt_script(r7, 0x0, 0x26) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0000, 0x0) 1.119302883s ago: executing program 3 (id=1152): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x57) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r2, 0x702, 0xf, 0x0, &(0x7f0000000580)="e460334470d8d400eb00c15286dd4b", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.073810964s ago: executing program 3 (id=1153): openat(0xffffffffffffff9c, 0x0, 0x2040, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) bpf$MAP_DELETE_ELEM(0x2, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000380)=0x2) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r4, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 699.740969ms ago: executing program 4 (id=1154): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f00000000c0)=@framed={{}, [@ldst={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a7fbb}, @ldst={0x6, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}], {0x95, 0x0, 0x0, 0x3000000}}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0x93, &(0x7f00000005c0)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x4c) 626.05355ms ago: executing program 1 (id=1155): sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socket$inet6(0xa, 0x80803, 0x87) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r3 = socket$inet6(0xa, 0x3, 0x89) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000019080)={{{@in6=@remote, @in6=@dev={0xfe, 0x80, '\x00', 0x43}, 0x4e22, 0x0, 0x4e20, 0x0, 0x2}, {0x0, 0x4, 0x1, 0x0, 0x0, 0x9}, {0x1ff, 0xffffffffe, 0x4053e5, 0x20}, 0x6, 0x1, 0x1, 0x0, 0x1, 0x2}, {{@in=@empty, 0x1, 0x32}, 0xa, @in6=@private0, 0x3502, 0x1, 0x0, 0x0, 0x800000, 0xfffffffd}}, 0xe8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x9df}, 0x1c) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0xb, 0x2, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x14, &(0x7f0000000340)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x80}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r4}, 0x0, &(0x7f0000000100)=r5}, 0x20) dup(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x8413, &(0x7f0000000100), 0x1c, 0x549, &(0x7f0000000a80)="$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") 317.694565ms ago: executing program 8 (id=1156): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000001c000000000000002300850000000700000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002c00000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.10518ms ago: executing program 8 (id=1157): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f00000010c0)=ANY=[@ANYRESHEX], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 692.8µs ago: executing program 3 (id=1158): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xb, 0xb9, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0xb, &(0x7f0000000000)=@framed={{0x18, 0x8}, [@printk]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000140), &(0x7f0000000440)=""/183}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000340)={r0, &(0x7f0000000040)}, 0x20) 604.23µs ago: executing program 3 (id=1159): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002ac0)={0x1a, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2008, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 357.1µs ago: executing program 8 (id=1160): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000340)={0xffffffffffffffff, 0x0}, 0x20) 0s ago: executing program 3 (id=1161): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)=""/167, 0xa7}], 0x1, 0x8a, 0x0) socket$packet(0x11, 0x2, 0x300) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x42, &(0x7f0000000000)=0x3, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) shutdown(r4, 0x1) connect$bt_rfcomm(r4, &(0x7f0000000200)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x15}, 0xa) syz_emit_ethernet(0x4a, &(0x7f0000000300)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "000100", 0x14, 0x6, 0x1, @remote, @private1, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_read_part_table(0x5df, &(0x7f0000000000)="$eJzs3DGIE1kYB/CXIBEFETs7gykichAh3UkEDXGQgAnBQ4s70c4t0qyVRYxgQCzMNhE5Gy0UYQ1aaCUiCCImFkIqUXavuN1l2eJY2CawLHMEZrvjYG/JHQe/Hzx4b97/zcfHMOVM4H8tHf6I4zgVQoj37vz0T/OVs+ey9dONCyGkwi8hhN/zs79OdlJJYvuuR5P1YrIuvt3TvDcf3en2Dhx+nd38nE72byVjZfjw8q6bY+qOXT/+/sh4dOhNNTwenBqc3N+8dK2fL7f7X+qvzjzNPtt+7oUp1X9Z+njwdmc26t4ozXyNWkvRanpjPTr/4FEhM9du5NdOJLkrU6rf3LqYef7kQ7mzvK/4qVqr9V58v59rVd51bo6GuW/ju1eT3MI/eLsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPj3Hbt+/P2R8ejQm2p4PDg1OLm/eelaP19u97/UX515mn12NMkVplT/Zenjwdud2ah7ozTzNWotRavpjfXo/INHhcxcu5FfO5HkrvzV4TiO27us39y6mHn+5EO5s7yv+Klaq/VefL+fa1XedW6Ohrlv47tXk9zC3l0WAgAAAAAAAAAAAAAAAAAAgL9ROXsuWz/duDCZ/xxC+GHmx7nJPE6+d08lue3/ACxOrqdDKL7d07w3H93p9g4cfp3d/Pxbkr+VjJXhw8v/QTvs0J8BAAD//9odjZ8=") kernel console output (not intermixed with test programs): 822] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 49.284608][ T822] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 49.306671][ T822] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 49.327665][ T822] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 49.336084][ T822] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 49.344821][ T822] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 49.354845][ T822] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 49.363288][ T822] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 49.370624][ T859] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 49.371822][ T822] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 49.388430][ T822] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 49.397431][ T822] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 49.417894][ T870] loop4: detected capacity change from 0 to 128 [ 49.456504][ T870] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 49.465491][ T870] ext4 filesystem being mounted at /26/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 49.492718][ T870] syz.4.170 (pid 870) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 49.504837][ T870] fscrypt: key with descriptor e355a76a11a1be18 is too short (got 16 bytes, need 32+ bytes) [ 49.634373][ T879] syz.5.172 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 49.649338][ T859] loop0: detected capacity change from 1024 to 0 [ 49.655853][ T28] audit: type=1400 audit(1743157749.754:216): avc: denied { write } for pid=871 comm="syz.5.172" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 49.685883][ T870] fscrypt: key with descriptor e355a76a11a1be18 is too short (got 16 bytes, need 32+ bytes) [ 49.883156][ T887] fscrypt: key with descriptor e355a76a11a1be18 is too short (got 16 bytes, need 32+ bytes) [ 50.688999][ C0] blk_print_req_error: 17 callbacks suppressed [ 50.689020][ C0] I/O error, dev loop0, sector 10 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2 [ 50.704378][ C0] I/O error, dev loop0, sector 12 op 0x0:(READ) flags 0x80700 phys_seg 8 prio class 2 [ 50.714642][ T292] EXT4-fs error (device loop0): ext4_get_inode_loc:4646: inode #2: block 5: comm syz-executor: unable to read itable block [ 50.728580][ T887] fscrypt: key with descriptor e355a76a11a1be18 is too short (got 16 bytes, need 32+ bytes) [ 50.748954][ T28] audit: type=1400 audit(1743157750.034:217): avc: denied { write } for pid=869 comm="syz.4.170" name="encrypted_dir" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 50.779896][ T891] loop: Write error at byte offset 9223372036854776831, length 1024. [ 50.789237][ C0] I/O error, dev loop0, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 50.798592][ C0] buffer_io_error: 12 callbacks suppressed [ 50.798611][ C0] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 50.813361][ T292] EXT4-fs (loop0): I/O error while writing superblock [ 50.823203][ T292] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5887: IO failure [ 50.846168][ T294] EXT4-fs (loop4): unmounting filesystem. [ 50.879982][ T466] loop: Write error at byte offset 9223372036854776831, length 1024. [ 50.890130][ C0] I/O error, dev loop0, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 50.899461][ C0] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 50.907807][ T292] EXT4-fs (loop0): I/O error while writing superblock [ 50.918951][ T28] audit: type=1400 audit(1743157750.034:218): avc: denied { add_name } for pid=869 comm="syz.4.170" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 50.929829][ T292] EXT4-fs error (device loop0): ext4_dirty_inode:6091: inode #2: comm syz-executor: mark_inode_dirty error [ 51.019901][ T320] loop: Write error at byte offset 9223372036854776831, length 1024. [ 51.027848][ C1] I/O error, dev loop0, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 51.037151][ C1] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 51.045468][ T292] EXT4-fs (loop0): I/O error while writing superblock [ 51.059818][ C1] I/O error, dev loop0, sector 14 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2 [ 51.069170][ C1] I/O error, dev loop0, sector 16 op 0x0:(READ) flags 0x80700 phys_seg 6 prio class 2 [ 51.069269][ T292] EXT4-fs error (device loop0): __ext4_get_inode_loc_noinmem:4631: inode #11: block 7: comm syz-executor: unable to read itable block [ 51.078529][ C1] I/O error, dev loop0, sector 10 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 2 [ 51.092530][ T891] loop: Write error at byte offset 9223372036854776831, length 1024. [ 51.102116][ T861] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 51.127685][ T24] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 51.183274][ C1] I/O error, dev loop0, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 51.192624][ C1] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 51.241241][ T292] EXT4-fs (loop0): I/O error while writing superblock [ 51.253855][ C1] I/O error, dev loop0, sector 14 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2 [ 51.265000][ T292] EXT4-fs error (device loop0): __ext4_get_inode_loc_noinmem:4631: inode #11: block 7: comm syz-executor: unable to read itable block [ 51.322781][ T466] loop: Write error at byte offset 9223372036854776831, length 1024. [ 51.336595][ T24] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 51.348856][ T861] usb 3-1: unable to get BOS descriptor or descriptor too short [ 51.363763][ T861] usb 3-1: not running at top speed; connect to a high speed hub [ 51.373349][ C1] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 51.383072][ T292] EXT4-fs (loop0): I/O error while writing superblock [ 51.399278][ T24] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 51.449379][ T861] usb 3-1: config 160 has an invalid interface number: 236 but max is 0 [ 51.877483][ T24] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 51.889261][ T861] usb 3-1: config 160 has no interface number 0 [ 53.160755][ T861] usb 3-1: config 160 interface 236 has no altsetting 0 [ 53.167764][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.176343][ T861] usb 3-1: string descriptor 0 read error: -71 [ 53.183655][ T861] usb 3-1: New USB device found, idVendor=04b8, idProduct=0602, bcdDevice= 1.10 [ 53.192783][ T24] usb 6-1: config 0 descriptor?? [ 53.197645][ T861] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.205655][ T24] usb 6-1: can't set config #0, error -71 [ 53.233320][ T24] usb 6-1: USB disconnect, device number 2 [ 53.239963][ T914] loop2: detected capacity change from 0 to 512 [ 53.247664][ T861] usb 3-1: can't set config #160, error -71 [ 53.254921][ T861] usb 3-1: USB disconnect, device number 5 [ 53.295705][ T43] EXT4-fs error (device loop0): __ext4_get_inode_loc_noinmem:4631: inode #18: block 9: comm kworker/u4:2: unable to read itable block [ 53.310068][ T320] loop: Write error at byte offset 9223372036854776831, length 1024. [ 53.318075][ C1] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 53.326563][ T43] EXT4-fs (loop0): I/O error while writing superblock [ 53.336057][ T43] EXT4-fs error (device loop0): __ext4_get_inode_loc_noinmem:4631: inode #2: block 5: comm kworker/u4:2: unable to read itable block [ 53.352632][ T914] Quota error (device loop2): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 53.363065][ T914] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 53.372763][ T320] loop: Write error at byte offset 9223372036854776831, length 1024. [ 53.384424][ C1] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 53.393710][ T43] EXT4-fs (loop0): I/O error while writing superblock [ 53.400446][ T914] EXT4-fs error (device loop2): ext4_acquire_dquot:6782: comm syz.2.186: Failed to acquire dquot type 0 [ 53.412299][ T292] EXT4-fs (loop0): unmounting filesystem. [ 53.418241][ T914] Quota error (device loop2): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 53.429171][ T43] loop: Write error at byte offset 9223372036854776831, length 1024. [ 53.437362][ T914] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 53.447030][ C1] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 53.455226][ T292] EXT4-fs (loop0): I/O error while writing superblock [ 53.462654][ T914] EXT4-fs error (device loop2): ext4_acquire_dquot:6782: comm syz.2.186: Failed to acquire dquot type 0 [ 53.474460][ T914] Quota error (device loop2): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 53.485595][ T914] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 53.502072][ T914] EXT4-fs error (device loop2): ext4_acquire_dquot:6782: comm syz.2.186: Failed to acquire dquot type 0 [ 53.530342][ T914] EXT4-fs (loop2): 1 orphan inode deleted [ 53.547653][ T914] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 53.565275][ T914] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.608368][ T914] Quota error (device loop2): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 53.618757][ T914] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 53.628246][ T914] EXT4-fs error (device loop2): ext4_acquire_dquot:6782: comm syz.2.186: Failed to acquire dquot type 0 [ 53.719845][ T8] loop: Write error at byte offset 9223372036854841343, length 1024. [ 53.723172][ T295] EXT4-fs (loop2): unmounting filesystem. [ 53.727801][ C0] Buffer I/O error on dev loop0, logical block 64, lost sync page write [ 53.799614][ T933] netlink: 12 bytes leftover after parsing attributes in process `syz.5.194'. [ 53.859838][ T326] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 54.035789][ T942] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.042850][ T942] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.050633][ T942] device bridge_slave_0 entered promiscuous mode [ 54.050948][ T326] usb 5-1: config 1 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 54.057832][ T942] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.078452][ T942] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.081645][ T326] usb 5-1: config 1 interface 0 altsetting 4 endpoint 0x82 has invalid wMaxPacketSize 0 [ 54.095799][ T942] device bridge_slave_1 entered promiscuous mode [ 54.108253][ T326] usb 5-1: config 1 interface 0 altsetting 4 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 54.119264][ T326] usb 5-1: config 1 interface 0 altsetting 4 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 54.140828][ T326] usb 5-1: config 1 interface 0 has no altsetting 0 [ 54.147247][ T950] loop2: detected capacity change from 0 to 512 [ 54.154536][ T326] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 54.173500][ T326] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 54.229351][ T950] EXT4-fs error (device loop2): ext4_do_update_inode:5226: inode #3: comm syz.2.198: corrupted inode contents [ 54.249734][ T950] EXT4-fs error (device loop2): ext4_dirty_inode:6091: inode #3: comm syz.2.198: mark_inode_dirty error [ 54.274786][ T950] EXT4-fs error (device loop2): ext4_do_update_inode:5226: inode #3: comm syz.2.198: corrupted inode contents [ 54.286607][ T950] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #3: comm syz.2.198: mark_inode_dirty error [ 54.298743][ T950] EXT4-fs error (device loop2): ext4_acquire_dquot:6782: comm syz.2.198: Failed to acquire dquot type 0 [ 54.311435][ T950] EXT4-fs (loop2): 1 orphan inode deleted [ 54.317001][ T950] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 54.326298][ T950] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.341070][ T902] device bridge_slave_1 left promiscuous mode [ 54.362391][ T902] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.382804][ T950] EXT4-fs error (device loop2): ext4_xattr_block_get:546: inode #15: comm syz.2.198: corrupted xattr block 19 [ 54.400293][ T902] device bridge_slave_0 left promiscuous mode [ 54.408069][ T902] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.421356][ T950] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5887: Corrupt filesystem [ 54.435337][ T902] device veth1_macvtap left promiscuous mode [ 54.442653][ T950] EXT4-fs error (device loop2): ext4_insert_range:5566: inode #15: comm syz.2.198: mark_inode_dirty error [ 54.454310][ T902] device veth0_vlan left promiscuous mode [ 54.484778][ T295] EXT4-fs error (device loop2): ext4_map_blocks:634: inode #2: block 3: comm syz-executor: lblock 0 mapped to illegal pblock 3 (length 1) [ 54.508227][ T950] syz.2.198 (950) used greatest stack depth: 20808 bytes left [ 54.516993][ T295] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5887: Corrupt filesystem [ 54.526805][ T295] EXT4-fs error (device loop2): ext4_dirty_inode:6091: inode #2: comm syz-executor: mark_inode_dirty error [ 54.708116][ T326] usb 5-1: SerialNumber: syz [ 54.749628][ T906] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 54.759007][ T326] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 54.767023][ T326] cdc_acm: probe of 5-1:1.0 failed with error -12 [ 54.780444][ T295] EXT4-fs (loop2): unmounting filesystem. [ 54.812738][ T891] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.822377][ T891] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.830145][ T295] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5887: Corrupt filesystem [ 54.850501][ T295] EXT4-fs error (device loop2): ext4_quota_off:7071: inode #3: comm syz-executor: mark_inode_dirty error [ 54.862401][ T891] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.882024][ T295] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5887: Corrupt filesystem [ 54.900149][ T295] EXT4-fs error (device loop2): ext4_quota_off:7071: inode #4: comm syz-executor: mark_inode_dirty error [ 54.918828][ T891] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.926988][ T891] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.933871][ T891] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.941527][ T891] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.949769][ T891] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.958322][ T891] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.965212][ T891] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.978385][ T891] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.986357][ T6] usb 5-1: USB disconnect, device number 5 [ 54.988155][ T891] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.017714][ T891] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.035159][ T891] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.046555][ T891] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.066710][ T891] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.080224][ T891] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.115894][ T942] device veth0_vlan entered promiscuous mode [ 55.129695][ T942] device veth1_macvtap entered promiscuous mode [ 55.391045][ T891] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.398957][ T891] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.407718][ T891] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.416271][ T891] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.421473][ T224] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 55.424924][ T891] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 55.439695][ T891] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 55.448207][ T891] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 55.456637][ T891] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 55.465107][ T891] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.472796][ T891] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.570019][ T995] loop4: detected capacity change from 0 to 512 [ 55.595718][ T995] EXT4-fs: Ignoring removed nobh option [ 55.610947][ T995] EXT4-fs: Ignoring removed mblk_io_submit option [ 55.620259][ T224] usb 6-1: Using ep0 maxpacket: 32 [ 55.632793][ T224] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 55.644472][ T995] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 55.649008][ T224] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 55.678786][ T224] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 55.696820][ T224] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 55.713132][ T224] usb 6-1: Product: syz [ 55.717204][ T224] usb 6-1: Manufacturer: syz [ 55.728790][ T224] hub 6-1:4.0: USB hub found [ 55.777370][ T294] EXT4-fs (loop4): unmounting filesystem. [ 55.802122][ T1003] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.809071][ T1003] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.816730][ T1003] device bridge_slave_0 entered promiscuous mode [ 55.826544][ T1003] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.834017][ T1003] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.841796][ T1003] device bridge_slave_1 entered promiscuous mode [ 55.934419][ T224] hub 6-1:4.0: config failed, hub doesn't have any ports! (err -19) [ 56.185116][ T224] usb 6-1: USB disconnect, device number 3 [ 56.224998][ T1003] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.231893][ T1003] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.238973][ T1003] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.245796][ T1003] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.269874][ T891] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.277354][ T891] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.284977][ T891] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.304023][ T891] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.312276][ T891] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.319177][ T891] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.327730][ T891] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.335872][ T891] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.342766][ T891] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.364709][ T891] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.372567][ T891] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.385827][ T891] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.398414][ T891] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.406458][ T891] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.415107][ T891] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.422590][ T891] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.431471][ T1003] device veth0_vlan entered promiscuous mode [ 56.438960][ T8] device bridge_slave_1 left promiscuous mode [ 56.445307][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.453134][ T8] device bridge_slave_0 left promiscuous mode [ 56.459279][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.468460][ T8] device veth1_macvtap left promiscuous mode [ 56.541226][ T8] device veth0_vlan left promiscuous mode [ 57.082155][ T1037] loop5: detected capacity change from 0 to 512 [ 57.095313][ T1037] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 57.104960][ T1037] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 57.114513][ T1037] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 57.143980][ T1037] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 57.152146][ T1037] EXT4-fs (loop5): failed to initialize system zone (-117) [ 57.159688][ T1037] EXT4-fs (loop5): mount failed [ 57.178363][ T1003] device veth1_macvtap entered promiscuous mode [ 57.286894][ T1043] loop6: detected capacity change from 0 to 512 [ 57.321927][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.331780][ T1043] EXT4-fs: Ignoring removed i_version option [ 57.337605][ T1043] EXT4-fs: Ignoring removed nobh option [ 57.359705][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.373559][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.383525][ T1043] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 57.407907][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.427018][ T1043] EXT4-fs (loop6): 1 truncate cleaned up [ 57.435210][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.449850][ T1043] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 57.468445][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.500427][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.568635][ T942] EXT4-fs (loop6): unmounting filesystem. [ 57.736114][ T1063] Zero length message leads to an empty skb [ 57.760478][ T1063] netlink: 'syz.5.232': attribute type 4 has an invalid length. [ 57.839651][ T1068] loop5: detected capacity change from 0 to 512 [ 57.852916][ T1070] loop7: detected capacity change from 0 to 512 [ 57.883861][ T1068] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 57.889673][ T1072] loop4: detected capacity change from 0 to 512 [ 57.898609][ T1072] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 57.928032][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 57.928049][ T28] audit: type=1400 audit(1743157758.074:223): avc: denied { create } for pid=1075 comm="syz.4.242" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 57.969901][ T28] audit: type=1400 audit(1743157758.074:224): avc: denied { write } for pid=1075 comm="syz.4.242" name="file0" dev="tmpfs" ino=213 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 57.993412][ T28] audit: type=1400 audit(1743157758.074:225): avc: denied { open } for pid=1075 comm="syz.4.242" path="/35/file0" dev="tmpfs" ino=213 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 58.016108][ T28] audit: type=1400 audit(1743157758.074:226): avc: denied { ioctl } for pid=1075 comm="syz.4.242" path="/35/file0" dev="tmpfs" ino=213 ioctlcmd=0x127c scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 58.039144][ T1070] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 58.047552][ T28] audit: type=1400 audit(1743157758.084:227): avc: denied { unlink } for pid=294 comm="syz-executor" name="file0" dev="tmpfs" ino=213 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 58.060564][ T1070] ext4 filesystem being mounted at /1/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 58.597285][ T1079] loop4: detected capacity change from 0 to 512 [ 58.786978][ T1079] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 58.796683][ T1079] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 58.806347][ T1079] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 58.844296][ T1079] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 58.852311][ T1079] EXT4-fs (loop4): failed to initialize system zone (-117) [ 58.859471][ T1079] EXT4-fs (loop4): mount failed [ 59.132647][ T1003] EXT4-fs (loop7): unmounting filesystem. [ 59.456353][ T1098] loop7: detected capacity change from 0 to 256 [ 59.482387][ T1098] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 59.496918][ T1100] loop4: detected capacity change from 0 to 16 [ 59.506056][ T1100] erofs: Unknown parameter 'veth1_to_team' [ 59.511989][ T28] audit: type=1400 audit(1743157759.664:228): avc: denied { remove_name } for pid=1097 comm="syz.7.247" name="file1" dev="loop7" ino=1048618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 59.546842][ T1103] loop6: detected capacity change from 0 to 512 [ 59.553153][ T315] blk_print_req_error: 12 callbacks suppressed [ 59.553170][ T315] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 59.557848][ T1100] loop4: detected capacity change from 0 to 512 [ 59.559283][ T315] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 59.570105][ T1103] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 59.574608][ T315] Buffer I/O error on dev loop4, logical block 0, async page read [ 59.599660][ T315] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 59.605522][ T28] audit: type=1400 audit(1743157759.664:229): avc: denied { rename } for pid=1097 comm="syz.7.247" name="file1" dev="loop7" ino=1048618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 59.609757][ T315] Buffer I/O error on dev loop4, logical block 0, async page read [ 59.653060][ T1100] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 59.653102][ T1096] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.668650][ T1096] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.676849][ T1096] device bridge_slave_0 entered promiscuous mode [ 59.680542][ T1100] ext4 filesystem being mounted at /37/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.684567][ T1096] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.700386][ T1096] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.707793][ T1096] device bridge_slave_1 entered promiscuous mode [ 59.731998][ T1112] loop6: detected capacity change from 0 to 256 [ 59.735809][ T28] audit: type=1400 audit(1743157759.884:230): avc: denied { setattr } for pid=1099 comm="syz.4.249" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 59.775593][ T294] EXT4-fs (loop4): unmounting filesystem. [ 59.855377][ T1096] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.862269][ T1096] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.862784][ T6] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 59.869357][ T1096] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.883454][ T1096] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.982112][ T902] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.989453][ T1116] loop6: detected capacity change from 0 to 16 [ 59.997270][ T902] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.005570][ T902] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.012821][ T1116] erofs: (device loop6): mounted with root inode @ nid 36. [ 60.029483][ T1116] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=46 [ 60.040445][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.048506][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.055395][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.080176][ T6] usb 8-1: Using ep0 maxpacket: 8 [ 60.083991][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.088037][ T6] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 60.093698][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.109257][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.122944][ T6] usb 8-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 60.125167][ T1119] loop6: detected capacity change from 0 to 2048 [ 60.144952][ T6] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.154317][ T902] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.163224][ T902] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.172376][ T6] usb 8-1: config 0 descriptor?? [ 60.178009][ T902] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.180903][ T1119] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a002c018, mo2=0002] [ 60.186778][ T902] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.203756][ T1119] System zones: 0-7 [ 60.207945][ T1119] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 60.217069][ T891] device bridge_slave_1 left promiscuous mode [ 60.226596][ T891] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.238991][ T891] device bridge_slave_0 left promiscuous mode [ 60.245432][ T891] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.258668][ T891] device veth1_macvtap left promiscuous mode [ 60.259146][ T942] EXT4-fs (loop6): unmounting filesystem. [ 60.264661][ T891] device veth0_vlan left promiscuous mode [ 60.479927][ T1137] loop6: detected capacity change from 0 to 512 [ 60.564239][ T1137] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 60.573949][ T1137] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 60.583825][ T1137] EXT4-fs (loop6): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 60.640865][ T1139] loop7: detected capacity change from 0 to 512 [ 60.665457][ T1137] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 60.673314][ T1137] EXT4-fs (loop6): failed to initialize system zone (-117) [ 60.680457][ T1137] EXT4-fs (loop6): mount failed [ 60.694258][ T1139] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 60.719527][ T1139] EXT4-fs (loop7): corrupt root inode, run e2fsck [ 60.729340][ T1139] EXT4-fs (loop7): mount failed [ 61.075117][ T891] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 61.083794][ T891] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.100030][ T1096] device veth0_vlan entered promiscuous mode [ 61.106167][ T891] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.114370][ T891] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.123082][ T891] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.175265][ T6] usbhid 8-1:0.0: can't add hid device: -71 [ 61.181395][ T6] usbhid: probe of 8-1:0.0 failed with error -71 [ 61.196204][ T891] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.211095][ T6] usb 8-1: USB disconnect, device number 2 [ 61.241983][ T1096] device veth1_macvtap entered promiscuous mode [ 61.299263][ T891] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.308125][ T891] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.335714][ T891] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 61.705628][ T1155] loop4: detected capacity change from 0 to 256 [ 61.743145][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.754942][ T1158] loop7: detected capacity change from 0 to 512 [ 61.761981][ T1158] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 61.773394][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.796495][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.807202][ T1160] loop6: detected capacity change from 0 to 2048 [ 61.819722][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.871365][ T1160] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a002c018, mo2=0002] [ 61.879416][ T547] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 61.890262][ T1160] System zones: 0-7 [ 61.899125][ T1160] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 61.964277][ T942] EXT4-fs (loop6): unmounting filesystem. [ 62.109811][ T1172] loop4: detected capacity change from 0 to 512 [ 62.340943][ T1172] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 62.350639][ T1172] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 62.360307][ T1172] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 62.410511][ T1172] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 62.418411][ T1172] EXT4-fs (loop4): failed to initialize system zone (-117) [ 62.425826][ T1172] EXT4-fs (loop4): mount failed [ 62.509706][ T1181] loop6: detected capacity change from 0 to 512 [ 62.564542][ T1181] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 62.603663][ T1181] EXT4-fs (loop6): invalid journal inode [ 62.647614][ T1181] EXT4-fs (loop6): can't get journal size [ 62.700126][ T1181] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e016c118, mo2=0002] [ 62.708016][ T1181] System zones: 1-12, 13-13 [ 62.720112][ T1187] loop8: detected capacity change from 0 to 2048 [ 62.751667][ T1181] EXT4-fs (loop6): 1 truncate cleaned up [ 62.757142][ T1181] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 62.788328][ T1187] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 62.838223][ T1187] fscrypt (loop8, inode 15): Error -61 getting encryption context [ 62.907609][ T1096] EXT4-fs (loop8): unmounting filesystem. [ 63.067774][ T942] EXT4-fs (loop6): unmounting filesystem. [ 63.080837][ T28] audit: type=1400 audit(1743157763.234:231): avc: denied { write } for pid=1198 comm="syz.3.280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 63.164214][ T1204] loop6: detected capacity change from 0 to 512 [ 63.180413][ T320] device bridge_slave_1 left promiscuous mode [ 63.186737][ T320] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.231052][ T1204] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 63.252768][ T320] device bridge_slave_0 left promiscuous mode [ 63.258978][ T320] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.301376][ T320] device veth1_macvtap left promiscuous mode [ 63.307395][ T320] device veth0_vlan left promiscuous mode [ 63.729947][ T1200] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.763296][ T1200] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.787367][ T1200] device bridge_slave_0 entered promiscuous mode [ 63.827467][ T1200] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.851735][ T1200] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.875174][ T1200] device bridge_slave_1 entered promiscuous mode [ 64.017044][ T1225] loop8: detected capacity change from 0 to 512 [ 64.024160][ T1225] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 64.047428][ T28] audit: type=1400 audit(1743157764.194:232): avc: denied { create } for pid=1227 comm="syz.4.292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 64.089344][ T1225] EXT4-fs (loop8): invalid journal inode [ 64.103211][ T1200] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.105139][ T1225] EXT4-fs (loop8): can't get journal size [ 64.110101][ T1200] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.116426][ T28] audit: type=1400 audit(1743157764.224:233): avc: denied { sys_admin } for pid=1227 comm="syz.4.292" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 64.122772][ T1200] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.143568][ T28] audit: type=1400 audit(1743157764.224:234): avc: denied { checkpoint_restore } for pid=1227 comm="syz.4.292" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 64.150106][ T1200] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.179167][ T1225] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e016c118, mo2=0002] [ 64.197241][ T1232] loop4: detected capacity change from 0 to 256 [ 64.197967][ T1225] System zones: 1-12, 13-13 [ 64.222735][ T1225] EXT4-fs (loop8): 1 truncate cleaned up [ 64.228845][ T1232] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 64.241843][ T1225] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 64.265866][ T28] audit: type=1400 audit(1743157764.414:235): avc: denied { unlink } for pid=1231 comm="syz.4.293" name="file1" dev="loop4" ino=1048625 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 64.266168][ T1232] exFAT-fs (loop4): error, invalid access to FAT free cluster (entry 0x00000008) [ 64.405311][ T1239] loop4: detected capacity change from 0 to 2048 [ 64.434650][ T1096] EXT4-fs (loop8): unmounting filesystem. [ 64.461240][ T1229] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.486617][ T1229] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.498630][ T1239] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a002c018, mo2=0002] [ 64.507261][ T1229] device bridge_slave_0 entered promiscuous mode [ 64.514038][ T1244] loop8: detected capacity change from 0 to 256 [ 64.539946][ T1239] System zones: 0-7 [ 64.548507][ T1239] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 64.814570][ T1239] incfs: Backing dir is not set, filesystem can't be mounted. [ 64.829510][ T891] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.839649][ T891] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.859529][ T1239] incfs: mount failed -2 [ 64.865442][ T891] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.885352][ T1229] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.890558][ T294] EXT4-fs (loop4): unmounting filesystem. [ 64.893478][ T1229] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.905610][ T1229] device bridge_slave_1 entered promiscuous mode [ 64.946642][ T891] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.955755][ T28] audit: type=1400 audit(1743157765.104:236): avc: denied { setopt } for pid=1248 comm="syz.4.297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 64.963295][ T891] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.983959][ T891] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.990942][ T891] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.998726][ T891] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.006854][ T891] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.014943][ T891] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.023101][ T891] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.056057][ T28] audit: type=1400 audit(1743157765.204:237): avc: denied { watch } for pid=1253 comm="syz.4.299" path="/48/file0" dev="tmpfs" ino=291 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 65.115734][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.124290][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.153166][ T1200] device veth0_vlan entered promiscuous mode [ 65.164523][ T891] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.172645][ T891] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.190177][ T891] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.200304][ T891] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.251808][ T1260] netlink: 4 bytes leftover after parsing attributes in process `syz.3.301'. [ 65.258627][ T1200] device veth1_macvtap entered promiscuous mode [ 65.285617][ T891] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.295250][ T891] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.314373][ T891] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.350924][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.362238][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.388013][ T320] device bridge_slave_1 left promiscuous mode [ 65.395032][ T320] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.405818][ T320] device bridge_slave_0 left promiscuous mode [ 65.412901][ T320] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.421215][ T320] device veth1_macvtap left promiscuous mode [ 65.427108][ T320] device veth0_vlan left promiscuous mode [ 65.516620][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.524847][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.585431][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.593301][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.613431][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.622357][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.631085][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.637975][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.645632][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.654210][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.663403][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.670287][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.698030][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.706027][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.733204][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.749063][ T1229] device veth0_vlan entered promiscuous mode [ 65.757080][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.765730][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.774082][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.782264][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.854438][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.867937][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.885761][ T1229] device veth1_macvtap entered promiscuous mode [ 65.991276][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.000941][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.013563][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.040497][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.049067][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.058358][ T1282] netlink: 'syz.1.290': attribute type 32 has an invalid length. [ 66.066507][ T1282] netlink: 24 bytes leftover after parsing attributes in process `syz.1.290'. [ 66.154873][ T1289] loop4: detected capacity change from 0 to 256 [ 66.784391][ T28] audit: type=1326 audit(1743157766.934:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1304 comm="syz.8.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ed198d169 code=0x7fc00000 [ 66.844550][ T1310] loop8: detected capacity change from 0 to 256 [ 66.861625][ T1310] exFAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 66.872215][ T1310] exFAT-fs (loop8): Medium has reported failures. Some data may be lost. [ 67.357715][ T1310] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 67.540673][ T28] audit: type=1400 audit(1743157767.694:239): avc: denied { append } for pid=1309 comm="syz.8.318" path="/13/file0/file0/file1" dev="loop8" ino=1048638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 67.665182][ T1322] loop4: detected capacity change from 0 to 256 [ 67.737297][ T1326] loop8: detected capacity change from 0 to 128 [ 67.751339][ T1322] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 67.797781][ T1326] EXT4-fs: Ignoring removed bh option [ 67.841834][ T1326] EXT4-fs (loop8): Test dummy encryption mode enabled [ 67.892812][ T1326] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 67.927025][ T1326] ext4 filesystem being mounted at /14/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 67.968662][ T1330] loop9: detected capacity change from 0 to 8192 [ 68.004578][ T1341] netlink: 76 bytes leftover after parsing attributes in process `syz.4.330'. [ 68.013643][ T1341] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 68.033767][ T1326] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 68.204972][ T1096] EXT4-fs (loop8): unmounting filesystem. [ 69.199840][ T1368] loop8: detected capacity change from 0 to 16 [ 69.209191][ T1368] erofs: (device loop8): mounted with root inode @ nid 36. [ 69.770680][ T1374] netlink: 76 bytes leftover after parsing attributes in process `syz.3.342'. [ 69.783035][ T1378] loop1: detected capacity change from 0 to 128 [ 69.830048][ T1374] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 69.837714][ T1378] EXT4-fs: Ignoring removed bh option [ 69.904936][ T1378] EXT4-fs (loop1): Test dummy encryption mode enabled [ 69.957472][ T1387] Illegal XDP return value 4294966772 on prog (id 48) dev syz_tun, expect packet loss! [ 70.005969][ T1382] loop8: detected capacity change from 0 to 8192 [ 70.076399][ T1393] loop9: detected capacity change from 0 to 1024 [ 70.083293][ T1393] EXT4-fs: Ignoring removed orlov option [ 70.085565][ T1378] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 70.096826][ T1393] EXT4-fs: Ignoring removed nomblk_io_submit option [ 70.110697][ T1378] ext4 filesystem being mounted at /5/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 70.126793][ T1393] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 70.272169][ T28] audit: type=1400 audit(1743157770.424:240): avc: denied { append } for pid=1391 comm="syz.9.347" name="loop9" dev="devtmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 70.306080][ T28] audit: type=1400 audit(1743157770.444:241): avc: denied { map } for pid=1391 comm="syz.9.347" path="/11/file1/bus" dev="devtmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 70.321161][ T1399] loop8: detected capacity change from 0 to 512 [ 70.389428][ T1229] EXT4-fs (loop1): unmounting filesystem. [ 70.393235][ T1200] EXT4-fs error (device loop9): ext4_map_blocks:634: inode #2: block 16: comm syz-executor: lblock 0 mapped to illegal pblock 16 (length 1) [ 70.410203][ T1399] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 70.423761][ T1200] EXT4-fs error (device loop9) in ext4_reserve_inode_write:5887: Corrupt filesystem [ 70.438442][ T1399] EXT4-fs error (device loop8): ext4_orphan_get:1426: comm syz.8.348: bad orphan inode 131083 [ 70.461597][ T1200] EXT4-fs error (device loop9): ext4_dirty_inode:6091: inode #2: comm syz-executor: mark_inode_dirty error [ 70.474822][ T1399] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 70.532593][ T1096] EXT4-fs (loop8): unmounting filesystem. [ 70.545795][ T1200] EXT4-fs (loop9): unmounting filesystem. [ 70.852070][ T1409] loop4: detected capacity change from 0 to 512 [ 70.927734][ T1409] ext4: Unknown parameter 'fsname' [ 70.975637][ T1415] netlink: 76 bytes leftover after parsing attributes in process `syz.8.356'. [ 71.005007][ T547] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 71.050667][ T1415] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 71.137765][ T1426] loop8: detected capacity change from 0 to 128 [ 71.151532][ T1426] EXT4-fs: Ignoring removed bh option [ 71.156959][ T1419] loop4: detected capacity change from 0 to 8192 [ 71.160508][ T1426] EXT4-fs (loop8): Test dummy encryption mode enabled [ 71.183535][ T1426] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 71.217332][ T1423] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.224718][ T1423] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.234474][ T1423] device bridge_slave_0 entered promiscuous mode [ 71.307048][ T1432] loop1: detected capacity change from 0 to 2048 [ 71.317476][ T1426] ext4 filesystem being mounted at /20/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 71.353197][ T1432] Alternate GPT is invalid, using primary GPT. [ 71.359544][ T1432] loop1: p1 p2 p3 [ 71.440518][ T1423] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.447704][ T1423] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.459904][ T1423] device bridge_slave_1 entered promiscuous mode [ 71.488356][ T1434] loop4: detected capacity change from 0 to 512 [ 71.500962][ T1434] EXT4-fs warning (device loop4): ext4_multi_mount_protect:324: fsck is running on the filesystem [ 71.517011][ T1096] EXT4-fs (loop8): unmounting filesystem. [ 71.521355][ T1434] EXT4-fs warning (device loop4): ext4_multi_mount_protect:324: MMP failure info: last update time: 1669132786, last update node: dvyukov-desk.muc.corp.google.com, last update device: loop4 [ 71.547205][ T1436] loop8: detected capacity change from 0 to 256 [ 71.622628][ T1423] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.629610][ T1423] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.636722][ T1423] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.643503][ T1423] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.983837][ T891] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.018563][ T891] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.137926][ T891] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.147460][ T891] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.250684][ T28] audit: type=1400 audit(1743157772.394:242): avc: denied { write } for pid=1446 comm="syz.1.365" name="fib_trie" dev="proc" ino=4026532431 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 72.278900][ T891] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.342694][ T891] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.548555][ T6] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 72.550367][ T320] device bridge_slave_1 left promiscuous mode [ 72.574020][ T320] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.586147][ T320] device bridge_slave_0 left promiscuous mode [ 72.592166][ T320] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.762525][ T320] device veth1_macvtap left promiscuous mode [ 72.768636][ T320] device veth0_vlan left promiscuous mode [ 73.763834][ T1459] netlink: 76 bytes leftover after parsing attributes in process `syz.1.369'. [ 73.781182][ T6] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 73.803089][ T6] usb 5-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 73.828285][ T1461] loop8: detected capacity change from 0 to 8192 [ 73.829563][ T6] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.856993][ T6] usb 5-1: config 0 descriptor?? [ 73.914007][ T1470] loop8: detected capacity change from 0 to 512 [ 73.920454][ T28] audit: type=1400 audit(1743157774.064:243): avc: denied { read write } for pid=1469 comm="syz.8.373" name="uhid" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 73.959918][ T28] audit: type=1400 audit(1743157774.064:244): avc: denied { open } for pid=1469 comm="syz.8.373" path="/dev/uhid" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 73.972524][ T1470] EXT4-fs: Ignoring removed oldalloc option [ 73.991281][ T891] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.002472][ T891] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.017191][ T1423] device veth0_vlan entered promiscuous mode [ 74.030162][ T1470] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 74.045682][ T891] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.123063][ T891] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.226297][ T1477] loop1: detected capacity change from 0 to 512 [ 74.237067][ T1477] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 74.246732][ T1477] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 74.256353][ T1477] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 74.332439][ T1470] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec018, mo2=0002] [ 74.350397][ T1470] System zones: 1-12 [ 74.376560][ T1470] EXT4-fs (loop8): 1 truncate cleaned up [ 74.387878][ T1477] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 74.396080][ T1477] EXT4-fs (loop1): failed to initialize system zone (-117) [ 74.403482][ T1477] EXT4-fs (loop1): mount failed [ 74.417904][ T891] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.435494][ T1470] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 74.450301][ T891] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.526960][ T1484] netlink: 112 bytes leftover after parsing attributes in process `syz.3.378'. [ 74.690802][ T6] magicmouse 0003:05AC:0265.0004: hidraw0: USB HID v0.00 Device [HID 05ac:0265] on usb-dummy_hcd.4-1/input0 [ 74.696184][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.703825][ T6] usb 5-1: USB disconnect, device number 6 [ 74.720486][ T1470] loop8: detected capacity change from 512 to 64 [ 74.723041][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.752813][ T1096] EXT4-fs error (device loop8): mb_free_blocks:1815: group 0, inode 16: block 35:freeing already freed block (bit 34); block bitmap corrupt. [ 74.769893][ T28] audit: type=1400 audit(1743157774.904:245): avc: denied { unmount } for pid=1096 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 74.792373][ T1423] device veth1_macvtap entered promiscuous mode [ 74.805651][ T28] audit: type=1400 audit(1743157774.904:246): avc: denied { unlink } for pid=1096 comm="syz-executor" name="bus" dev="loop8" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 74.816938][ T1096] EXT4-fs (loop8): unmounting filesystem. [ 74.839410][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.847424][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.872526][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.961641][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.970194][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.121545][ T1497] loop8: detected capacity change from 0 to 2048 [ 75.212603][ T1497] Alternate GPT is invalid, using primary GPT. [ 75.219003][ T1497] loop8: p1 p2 p3 [ 75.366543][ T1503] loop4: detected capacity change from 0 to 512 [ 75.374225][ T1504] netlink: 76 bytes leftover after parsing attributes in process `syz.0.384'. [ 75.382297][ T1500] loop1: detected capacity change from 0 to 8192 [ 75.417675][ T1503] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 75.431669][ T1503] ext4 filesystem being mounted at /63/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 75.500354][ T294] EXT4-fs (loop4): unmounting filesystem. [ 75.796897][ T1527] loop1: detected capacity change from 0 to 512 [ 75.836126][ T1527] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 75.845886][ T1527] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 75.855570][ T1527] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 75.876916][ T1527] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 75.886072][ T1527] EXT4-fs (loop1): failed to initialize system zone (-117) [ 75.894018][ T1527] EXT4-fs (loop1): mount failed [ 76.090490][ T28] audit: type=1400 audit(1743157776.244:247): avc: denied { ioctl } for pid=1534 comm="syz.8.395" path="/dev/rtc0" dev="devtmpfs" ino=259 ioctlcmd=0x7014 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 76.121421][ T1536] netlink: 76 bytes leftover after parsing attributes in process `syz.4.396'. [ 76.243058][ T1545] loop4: detected capacity change from 0 to 256 [ 76.260676][ T1546] loop8: detected capacity change from 0 to 256 [ 76.290003][ T1545] exfat: Bad value for 'uid' [ 76.301654][ T1546] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 76.351499][ T547] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 77.678193][ T1565] loop8: detected capacity change from 0 to 2048 [ 77.718124][ T1565] Alternate GPT is invalid, using primary GPT. [ 77.724209][ T1565] loop8: p1 p2 p3 [ 77.791554][ T1571] loop4: detected capacity change from 0 to 16 [ 77.826754][ T1571] erofs: (device loop4): EXPERIMENTAL compressed fragments feature in use. Use at your own risk! [ 78.318030][ T1571] erofs: (device loop4): EXPERIMENTAL global deduplication feature in use. Use at your own risk! [ 78.340560][ T1571] erofs: (device loop4): mounted with root inode @ nid 36. [ 78.413885][ T1575] loop0: detected capacity change from 0 to 512 [ 78.417067][ T1571] syz.4.411: attempt to access beyond end of device [ 78.417067][ T1571] loop4: rw=0, sector=4294967295, nr_sectors = 1 limit=16 [ 78.439608][ T1575] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 78.449528][ T1575] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 78.459131][ T1575] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 78.500682][ T1575] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 78.502250][ T1580] netlink: 76 bytes leftover after parsing attributes in process `syz.8.412'. [ 78.508479][ T1575] EXT4-fs (loop0): failed to initialize system zone (-117) [ 78.524198][ T1575] EXT4-fs (loop0): mount failed [ 78.610847][ T1586] loop4: detected capacity change from 0 to 2048 [ 78.643576][ T1586] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a002c018, mo2=0002] [ 78.679933][ T1586] System zones: 0-7 [ 78.692136][ T1586] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 78.760861][ T294] EXT4-fs (loop4): unmounting filesystem. [ 78.816107][ T1599] loop1: detected capacity change from 0 to 512 [ 78.911841][ T1599] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 78.920763][ T1599] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.019715][ T1229] EXT4-fs (loop1): unmounting filesystem. [ 79.158964][ T1617] loop4: detected capacity change from 0 to 2048 [ 79.312204][ T1617] Alternate GPT is invalid, using primary GPT. [ 79.318587][ T1617] loop4: p1 p2 p3 [ 79.373144][ T102] Alternate GPT is invalid, using primary GPT. [ 79.390045][ T102] loop4: p1 p2 p3 [ 79.562843][ T1624] loop1: detected capacity change from 0 to 512 [ 79.583572][ T1624] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 79.620016][ T1624] EXT4-fs (loop1): invalid journal inode [ 79.625594][ T1624] EXT4-fs (loop1): can't get journal size [ 79.660187][ T1624] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e016c118, mo2=0002] [ 79.668456][ T1624] System zones: 1-12, 13-13 [ 79.680909][ T1624] EXT4-fs (loop1): 1 truncate cleaned up [ 79.686438][ T1624] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 79.793239][ T1229] EXT4-fs (loop1): unmounting filesystem. [ 79.855232][ T1637] loop1: detected capacity change from 0 to 256 [ 79.937269][ T28] audit: type=1400 audit(1743157780.084:248): avc: denied { create } for pid=1645 comm="syz.4.436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 79.983169][ T28] audit: type=1400 audit(1743157780.114:249): avc: denied { write } for pid=1645 comm="syz.4.436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 80.086749][ T28] audit: type=1400 audit(1743157780.234:250): avc: denied { sqpoll } for pid=1647 comm="syz.4.437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 80.098464][ T1655] netlink: 16 bytes leftover after parsing attributes in process `syz.3.439'. [ 80.294347][ T1674] netlink: 16 bytes leftover after parsing attributes in process `syz.0.447'. [ 80.449478][ T1685] loop1: detected capacity change from 0 to 256 [ 80.919860][ T224] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 81.114869][ T224] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 81.146480][ T224] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 81.186867][ T224] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 81.197994][ T224] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 81.284994][ T1707] netlink: 16 bytes leftover after parsing attributes in process `syz.3.461'. [ 81.739859][ T224] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 81.748907][ T224] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 81.767430][ T224] usb 1-1: SerialNumber: syz [ 81.784132][ T1688] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 81.792035][ T1688] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 81.800918][ T224] cdc_acm 1-1:1.0: Control and data interfaces are not separated! [ 81.808820][ T224] cdc_acm: probe of 1-1:1.0 failed with error -12 [ 81.851904][ T1720] loop1: detected capacity change from 0 to 8192 [ 81.879861][ T617] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 81.938616][ T1729] loop4: detected capacity change from 0 to 256 [ 81.975701][ T28] audit: type=1400 audit(1743157782.124:251): avc: denied { create } for pid=1730 comm="syz.1.472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 82.002207][ T28] audit: type=1400 audit(1743157782.144:252): avc: denied { write } for pid=1730 comm="syz.1.472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 82.010171][ T326] usb 1-1: USB disconnect, device number 3 [ 82.024110][ T28] audit: type=1400 audit(1743157782.154:253): avc: denied { read } for pid=1730 comm="syz.1.472" path="socket:[22816]" dev="sockfs" ino=22816 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 82.059982][ T617] usb 9-1: Using ep0 maxpacket: 32 [ 82.066048][ T617] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.087035][ T617] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 82.107293][ T617] usb 9-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 82.130776][ T617] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.142591][ T617] usb 9-1: config 0 descriptor?? [ 82.155744][ T617] hub 9-1:0.0: USB hub found [ 83.062869][ T1760] loop4: detected capacity change from 0 to 256 [ 83.215415][ T617] hub 9-1:0.0: 1 port detected [ 83.350270][ T326] hub 9-1:0.0: activate --> -90 [ 85.094034][ T1785] sched: RT throttling activated [ 85.096794][ T861] usb 9-1: USB disconnect, device number 2 [ 85.385360][ T1784] loop1: detected capacity change from 0 to 2048 [ 85.392653][ T326] usb 9-1-port1: config error [ 85.420831][ T1784] Alternate GPT is invalid, using primary GPT. [ 85.426928][ T1784] loop1: p1 p2 p3 [ 85.436283][ T102] Alternate GPT is invalid, using primary GPT. [ 85.442632][ T102] loop1: p1 p2 p3 [ 85.604895][ T1793] loop4: detected capacity change from 0 to 256 [ 85.622756][ T1793] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 85.671719][ T1795] loop1: detected capacity change from 0 to 256 [ 85.694091][ T1795] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 85.704700][ T1795] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 85.717281][ T1795] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 85.830560][ T1803] loop8: detected capacity change from 0 to 16 [ 85.942874][ T1803] erofs: (device loop8): mounted with root inode @ nid 36. [ 86.274569][ T1803] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop8 ino=46 [ 86.339070][ T1797] loop1: detected capacity change from 0 to 8192 [ 86.383287][ T1811] loop8: detected capacity change from 0 to 256 [ 86.792838][ T1820] loop1: detected capacity change from 0 to 512 [ 86.825797][ T1820] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 86.856033][ T1820] EXT4-fs (loop1): corrupt root inode, run e2fsck [ 86.862717][ T1820] EXT4-fs (loop1): mount failed [ 87.209935][ T224] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 87.429897][ T224] usb 1-1: Using ep0 maxpacket: 32 [ 87.449528][ T224] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 87.468662][ T28] audit: type=1400 audit(1743157787.614:254): avc: denied { setopt } for pid=1852 comm="syz.3.515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 87.523412][ T224] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 87.576141][ T224] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 87.615113][ T224] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.680170][ T224] usb 1-1: config 0 descriptor?? [ 87.685926][ T1834] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 87.696262][ T224] hub 1-1:0.0: USB hub found [ 87.904978][ T224] hub 1-1:0.0: config failed, can't read hub descriptor (err -90) [ 88.110121][ T224] usbhid 1-1:0.0: can't add hid device: -71 [ 88.122324][ T224] usbhid: probe of 1-1:0.0 failed with error -71 [ 88.210085][ T224] usb 1-1: USB disconnect, device number 4 [ 88.577436][ T28] audit: type=1400 audit(1743157788.724:255): avc: denied { create } for pid=1908 comm="syz.8.541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 88.961583][ T28] audit: type=1400 audit(1743157789.064:256): avc: denied { relabelfrom } for pid=1924 comm="syz.8.546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 89.316788][ T28] audit: type=1400 audit(1743157789.064:257): avc: denied { relabelto } for pid=1924 comm="syz.8.546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 89.714558][ T1957] loop4: detected capacity change from 0 to 512 [ 89.900165][ T1957] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 90.141922][ T1971] overlayfs: failed to resolve './file1': -2 [ 90.610412][ T861] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 90.707024][ T1962] syz.1.563 (1962) used greatest stack depth: 19016 bytes left [ 90.759879][ T861] usb 9-1: device descriptor read/64, error -71 [ 90.957154][ T1992] loop1: detected capacity change from 0 to 512 [ 91.030166][ T861] usb 9-1: device descriptor read/64, error -71 [ 91.038511][ T1992] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 91.048190][ T1992] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 91.057834][ T1992] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 91.087189][ T1992] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 91.095630][ T1992] EXT4-fs (loop1): failed to initialize system zone (-117) [ 91.102955][ T1992] EXT4-fs (loop1): mount failed [ 91.285642][ T2001] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=2001 comm=syz.4.576 [ 91.309932][ T28] audit: type=1400 audit(1743157791.454:258): avc: denied { read } for pid=2000 comm="syz.4.576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 91.425011][ T547] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 91.569885][ T861] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 91.729841][ T861] usb 9-1: device descriptor read/64, error -71 [ 91.919972][ T28] audit: type=1400 audit(1743157791.984:259): avc: denied { create } for pid=2021 comm="syz.1.585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 92.140036][ T861] usb 9-1: device descriptor read/64, error -71 [ 92.260135][ T861] usb usb9-port1: attempt power cycle [ 92.297661][ T28] audit: type=1400 audit(1743157792.444:260): avc: denied { create } for pid=2017 comm="syz.3.584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 92.583596][ T2035] loop0: detected capacity change from 0 to 2048 [ 93.084515][ T861] usb 9-1: new full-speed USB device number 5 using dummy_hcd [ 93.093834][ T2035] Alternate GPT is invalid, using primary GPT. [ 93.099945][ T2035] loop0: p1 p2 p3 [ 93.242448][ T861] usb 9-1: device descriptor read/8, error -71 [ 93.284568][ T28] audit: type=1400 audit(1743157793.434:261): avc: denied { map } for pid=2047 comm="syz.3.592" path="socket:[24392]" dev="sockfs" ino=24392 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 93.310570][ T315] udevd[315]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 93.322508][ T543] udevd[543]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 93.343683][ T547] udevd[547]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 93.430680][ T861] usb 9-1: device descriptor read/8, error -71 [ 93.437867][ T28] audit: type=1400 audit(1743157793.504:262): avc: denied { read } for pid=2047 comm="syz.3.592" path="socket:[24392]" dev="sockfs" ino=24392 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 93.490144][ T2062] bridge0: port 3(syz_tun) entered blocking state [ 93.511392][ T2062] bridge0: port 3(syz_tun) entered disabled state [ 93.521000][ T2062] device syz_tun entered promiscuous mode [ 93.526809][ T28] audit: type=1400 audit(1743157793.544:263): avc: denied { ioctl } for pid=2052 comm="syz.4.595" path="socket:[24416]" dev="sockfs" ino=24416 ioctlcmd=0x8901 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 93.552893][ T2062] bridge0: port 3(syz_tun) entered blocking state [ 93.559184][ T2062] bridge0: port 3(syz_tun) entered forwarding state [ 93.568185][ T2064] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.732495][ T2075] netlink: 76 bytes leftover after parsing attributes in process `syz.0.604'. [ 94.188838][ T2079] loop8: detected capacity change from 0 to 2048 [ 94.371477][ T2079] Alternate GPT is invalid, using primary GPT. [ 94.377748][ T2079] loop8: p1 p2 p3 [ 94.770413][ T1096] __loop_clr_fd: partition scan of loop8 failed (rc=-16) [ 94.777526][ T315] I/O error, dev loop8, sector 56 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 94.787232][ T547] I/O error, dev loop8, sector 34 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 94.796998][ T543] I/O error, dev loop8, sector 105 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 94.819858][ T547] I/O error, dev loop8, sector 34 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 94.828931][ T547] Buffer I/O error on dev loop8p1, logical block 0, async page read [ 94.838434][ T543] I/O error, dev loop8, sector 105 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 94.838949][ T315] I/O error, dev loop8, sector 56 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 94.865655][ T547] I/O error, dev loop8, sector 36 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 94.875259][ T315] Buffer I/O error on dev loop8p2, logical block 8, async page read [ 94.883419][ T543] Buffer I/O error on dev loop8p3, logical block 8, async page read [ 94.891620][ T315] I/O error, dev loop8, sector 57 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 94.907430][ T547] Buffer I/O error on dev loop8p1, logical block 1, async page read [ 94.919894][ T543] I/O error, dev loop8, sector 106 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 94.939893][ T28] audit: type=1400 audit(1743157795.084:264): avc: denied { create } for pid=2094 comm="syz.0.610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 94.960742][ T315] Buffer I/O error on dev loop8p2, logical block 9, async page read [ 94.968651][ T543] Buffer I/O error on dev loop8p3, logical block 9, async page read [ 94.984129][ T547] Buffer I/O error on dev loop8p1, logical block 2, async page read [ 94.992393][ T315] Buffer I/O error on dev loop8p2, logical block 10, async page read [ 95.000442][ T543] Buffer I/O error on dev loop8p3, logical block 10, async page read [ 95.008544][ T547] Buffer I/O error on dev loop8p1, logical block 3, async page read [ 95.028822][ T315] udevd[315]: inotify_add_watch(7, /dev/loop8p2, 10) failed: No such file or directory [ 95.040256][ T543] udevd[543]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory [ 95.053518][ T547] udevd[547]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 95.075792][ T543] udevd[543]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory [ 95.091436][ T28] audit: type=1400 audit(1743157795.114:265): avc: denied { connect } for pid=2094 comm="syz.0.610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 95.111725][ T28] audit: type=1400 audit(1743157795.114:266): avc: denied { write } for pid=2094 comm="syz.0.610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 95.132284][ T547] udevd[547]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 95.149262][ T315] udevd[315]: inotify_add_watch(7, /dev/loop8p2, 10) failed: No such file or directory [ 95.184304][ T2106] bridge0: port 3(syz_tun) entered blocking state [ 95.191124][ T2106] bridge0: port 3(syz_tun) entered disabled state [ 95.198310][ T2106] device syz_tun entered promiscuous mode [ 95.204303][ T2106] bridge0: port 3(syz_tun) entered blocking state [ 95.210783][ T2106] bridge0: port 3(syz_tun) entered forwarding state [ 95.224175][ T2106] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.360724][ T2115] netlink: 76 bytes leftover after parsing attributes in process `syz.4.616'. [ 95.464185][ T28] audit: type=1400 audit(1743157795.614:267): avc: denied { create } for pid=2116 comm="syz.4.617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 95.485013][ T28] audit: type=1400 audit(1743157795.634:268): avc: denied { listen } for pid=2116 comm="syz.4.617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 95.504597][ T28] audit: type=1400 audit(1743157795.634:269): avc: denied { accept } for pid=2116 comm="syz.4.617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 95.784436][ T2126] netlink: 8 bytes leftover after parsing attributes in process `syz.1.621'. [ 96.089862][ T2136] process 'syz.1.625' launched '/dev/fd/7' with NULL argv: empty string added [ 96.428898][ T28] audit: type=1400 audit(1743157796.254:270): avc: denied { execute_no_trans } for pid=2132 comm="syz.1.625" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=1233 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 97.836734][ T2143] netlink: 'syz.4.628': attribute type 4 has an invalid length. [ 100.093843][ T617] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 100.290993][ T617] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 100.306296][ T617] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 100.665588][ T2199] netlink: 'syz.4.641': attribute type 4 has an invalid length. [ 101.162370][ T617] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 101.171370][ T617] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 101.179281][ T617] usb 9-1: SerialNumber: syz [ 101.214929][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 101.214945][ T28] audit: type=1326 audit(1743157801.364:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2204 comm="syz.4.648" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe5a2d8d169 code=0x0 [ 101.246525][ T326] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 102.312323][ T2203] netlink: 'syz.3.647': attribute type 4 has an invalid length. [ 102.344689][ T617] usb 9-1: invalid UAC_HEADER (v1) [ 102.352074][ T617] snd-usb-audio: probe of 9-1:1.0 failed with error -22 [ 102.381144][ T617] usb 9-1: USB disconnect, device number 7 [ 102.520096][ T326] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 102.531451][ T326] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 102.547136][ T326] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.453681][ T2232] loop8: detected capacity change from 0 to 512 [ 103.465150][ T2232] EXT4-fs (loop8): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 103.474888][ T2232] EXT4-fs (loop8): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 103.484572][ T2232] EXT4-fs (loop8): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 103.585743][ T2232] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 103.593594][ T2232] EXT4-fs (loop8): failed to initialize system zone (-117) [ 103.600689][ T2232] EXT4-fs (loop8): mount failed [ 103.632136][ T326] usb 2-1: config 0 descriptor?? [ 103.637473][ T326] usb 2-1: can't set config #0, error -71 [ 103.645418][ T326] usb 2-1: USB disconnect, device number 4 [ 103.649002][ T28] audit: type=1400 audit(1743157803.794:275): avc: denied { module_load } for pid=2234 comm="syz.4.657" path="/130/bus" dev="tmpfs" ino=734 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 103.673289][ T2236] Invalid ELF header magic: != ELF [ 104.239414][ T28] audit: type=1400 audit(1743157804.384:276): avc: denied { setattr } for pid=2246 comm="syz.3.659" name="NETLINK" dev="sockfs" ino=24783 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 105.417501][ T547] udevd[547]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 105.952664][ T28] audit: type=1400 audit(1743157806.104:277): avc: denied { bind } for pid=2259 comm="syz.0.665" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 105.972754][ T2273] netlink: 8 bytes leftover after parsing attributes in process `syz.0.665'. [ 106.047095][ T2277] input: syz0 as /devices/virtual/input/input7 [ 106.054291][ T28] audit: type=1400 audit(1743157806.124:278): avc: denied { setopt } for pid=2259 comm="syz.0.665" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 106.069301][ T2273] netlink: 8 bytes leftover after parsing attributes in process `syz.0.665'. [ 106.106922][ T2279] netlink: 8 bytes leftover after parsing attributes in process `syz.0.665'. [ 107.716318][ T28] audit: type=1400 audit(1743157807.864:279): avc: denied { name_bind } for pid=2302 comm="syz.1.676" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 108.295883][ T2311] loop1: detected capacity change from 0 to 512 [ 108.302907][ T2311] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 108.312707][ T2311] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 108.322344][ T2311] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 108.364950][ T2311] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 108.372852][ T2311] EXT4-fs (loop1): failed to initialize system zone (-117) [ 108.380013][ T2311] EXT4-fs (loop1): mount failed [ 109.193464][ T28] audit: type=1400 audit(1743157809.344:280): avc: denied { mount } for pid=2330 comm="syz.1.683" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 109.262685][ T28] audit: type=1400 audit(1743157809.414:281): avc: denied { unlink } for pid=2330 comm="syz.1.683" name="#1" dev="tmpfs" ino=439 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 109.326197][ T28] audit: type=1400 audit(1743157809.434:282): avc: denied { mount } for pid=2330 comm="syz.1.683" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 109.387454][ T28] audit: type=1400 audit(1743157809.434:283): avc: denied { read } for pid=87 comm="acpid" name="mouse0" dev="devtmpfs" ino=861 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 109.449032][ T28] audit: type=1400 audit(1743157809.434:284): avc: denied { open } for pid=87 comm="acpid" path="/dev/input/mouse0" dev="devtmpfs" ino=861 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 109.519745][ T28] audit: type=1400 audit(1743157809.434:285): avc: denied { ioctl } for pid=87 comm="acpid" path="/dev/input/mouse0" dev="devtmpfs" ino=861 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 109.575131][ T28] audit: type=1400 audit(1743157809.454:286): avc: denied { unmount } for pid=1229 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 109.606012][ T28] audit: type=1400 audit(1743157809.464:287): avc: denied { unmount } for pid=1229 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 109.626680][ T28] audit: type=1400 audit(1743157809.474:288): avc: denied { bind } for pid=2333 comm="syz.1.684" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 109.780002][ T617] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 109.969879][ T617] usb 2-1: Using ep0 maxpacket: 32 [ 109.976425][ T617] usb 2-1: config 89 has an invalid interface number: 228 but max is 1 [ 110.001520][ T617] usb 2-1: config 89 has an invalid interface number: 251 but max is 1 [ 110.029020][ T617] usb 2-1: config 89 has no interface number 0 [ 110.049615][ T617] usb 2-1: config 89 has no interface number 1 [ 110.069434][ T617] usb 2-1: config 89 interface 228 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 110.103893][ T617] usb 2-1: config 89 interface 228 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 110.139004][ T617] usb 2-1: config 89 interface 251 altsetting 19 has an invalid endpoint descriptor of length 2, skipping [ 110.176264][ T617] usb 2-1: config 89 interface 251 altsetting 19 endpoint 0xF has invalid wMaxPacketSize 0 [ 110.208615][ T617] usb 2-1: config 89 interface 251 altsetting 19 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 110.251205][ T617] usb 2-1: config 89 interface 251 has no altsetting 0 [ 110.275567][ T617] usb 2-1: New USB device found, idVendor=07d1, idProduct=3e01, bcdDevice=2e.9e [ 110.309497][ T617] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.447014][ T2357] device wg1 entered promiscuous mode [ 110.450117][ T617] usb 2-1: Product: syz [ 110.456515][ T617] usb 2-1: Manufacturer: syz [ 110.461409][ T617] usb 2-1: SerialNumber: syz [ 110.953989][ T617] usb 2-1: USB disconnect, device number 5 [ 111.052296][ T2386] netlink: 116 bytes leftover after parsing attributes in process `syz.4.700'. [ 111.530777][ T2397] loop1: detected capacity change from 0 to 512 [ 111.597949][ T2397] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 111.606505][ T2397] EXT4-fs (loop1): invalid journal inode [ 111.613146][ T2397] EXT4-fs (loop1): can't get journal size [ 111.619526][ T2397] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e016c118, mo2=0002] [ 111.627945][ T2397] System zones: 1-12, 13-13 [ 111.634506][ T2397] EXT4-fs (loop1): 1 truncate cleaned up [ 111.640387][ T2397] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 111.947989][ T1229] EXT4-fs (loop1): unmounting filesystem. [ 113.086966][ T2415] xt_l2tp: v2 doesn't support IP mode [ 113.116797][ T2418] device syz_tun left promiscuous mode [ 113.122637][ T2418] bridge0: port 3(syz_tun) entered disabled state [ 113.130362][ T2418] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 113.138803][ T2418] device bridge_slave_0 left promiscuous mode [ 113.145354][ T2418] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.154053][ T2418] device bridge_slave_1 left promiscuous mode [ 113.170797][ T2418] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.198280][ T2420] device vlan0 entered promiscuous mode [ 113.217036][ T2418] netlink: 4 bytes leftover after parsing attributes in process `syz.0.712'. [ 113.452795][ T2415] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=2415 comm=syz.1.711 [ 113.617712][ T2431] loop0: detected capacity change from 0 to 128 [ 113.667552][ T2431] EXT4-fs: Ignoring removed bh option [ 113.695952][ T2431] EXT4-fs (loop0): Test dummy encryption mode enabled [ 113.767100][ T2431] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 113.780368][ T2431] ext4 filesystem being mounted at /55/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 113.864004][ T1423] EXT4-fs (loop0): unmounting filesystem. [ 113.915728][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 113.915744][ T28] audit: type=1400 audit(1743157814.064:292): avc: denied { read } for pid=2448 comm="syz.3.724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 114.050298][ T300] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 114.239845][ T300] usb 2-1: Using ep0 maxpacket: 16 [ 114.246114][ T300] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 238, changing to 11 [ 114.258378][ T300] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 114.272032][ T300] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 114.281361][ T300] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.290763][ T300] usb 2-1: config 0 descriptor?? [ 114.475929][ T2477] serio: Serial port ptm0 [ 114.689815][ T326] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 114.699263][ T300] kovaplus 0003:1E7D:2D50.0005: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.1-1/input0 [ 114.818714][ T2492] loop8: detected capacity change from 0 to 256 [ 114.890951][ T326] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 114.901191][ T326] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 114.910471][ T326] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.923214][ T326] usb 1-1: config 0 descriptor?? [ 115.640821][ T2522] loop8: detected capacity change from 0 to 256 [ 115.798638][ T2531] overlayfs: failed to clone upperpath [ 116.398560][ T28] audit: type=1400 audit(1743157816.544:293): avc: denied { connect } for pid=2544 comm="syz.3.761" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 116.461945][ T2548] tipc: Started in network mode [ 116.466932][ T2548] tipc: Node identity 4, cluster identity 4711 [ 116.473432][ T2548] tipc: Node number set to 4 [ 116.517447][ T300] kovaplus 0003:1E7D:2D50.0005: couldn't init struct kovaplus_device [ 116.528849][ T300] kovaplus 0003:1E7D:2D50.0005: couldn't install mouse [ 116.538350][ T300] kovaplus: probe of 0003:1E7D:2D50.0005 failed with error -71 [ 116.568247][ T300] usb 2-1: USB disconnect, device number 6 [ 116.659956][ T861] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 116.944569][ T2560] netlink: 12 bytes leftover after parsing attributes in process `syz.4.766'. [ 117.019803][ T861] usb 9-1: Using ep0 maxpacket: 32 [ 117.043033][ T861] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 117.056670][ T861] usb 9-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 26 [ 117.075101][ T861] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 117.096198][ T861] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 117.105653][ T861] usb 9-1: SerialNumber: syz [ 117.158157][ T28] audit: type=1400 audit(1743157817.304:294): avc: denied { mounton } for pid=2567 comm="syz.1.770" path="/bus" dev="ramfs" ino=25314 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 117.158319][ T2568] overlayfs: failed to clone upperpath [ 117.320973][ T359] usb 9-1: USB disconnect, device number 8 [ 117.424729][ T2036] usb 1-1: USB disconnect, device number 5 [ 117.509847][ T861] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 117.645699][ T2578] overlayfs: failed to clone upperpath [ 117.689980][ T861] usb 2-1: Using ep0 maxpacket: 16 [ 117.700529][ T861] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 117.720874][ T861] usb 2-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 117.729838][ T861] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.737553][ T861] usb 2-1: Product: syz [ 117.741613][ T861] usb 2-1: Manufacturer: syz [ 117.746117][ T861] usb 2-1: SerialNumber: syz [ 117.755032][ T861] usb 2-1: config 0 descriptor?? [ 117.760186][ T2570] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 117.847134][ T28] audit: type=1400 audit(1743157817.994:295): avc: denied { append } for pid=2584 comm="syz.8.776" name="001" dev="devtmpfs" ino=178 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 117.891794][ T2587] netlink: 76 bytes leftover after parsing attributes in process `syz.8.777'. [ 117.900840][ T2587] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 117.971939][ T359] usb 2-1: USB disconnect, device number 7 [ 118.305334][ T2592] tmpfs: Unknown parameter 'usrquota' [ 118.312238][ T2592] overlayfs: failed to clone upperpath [ 118.516200][ T28] audit: type=1400 audit(1743157818.644:296): avc: denied { create } for pid=2593 comm="syz.0.779" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 118.999868][ T861] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 119.183398][ T861] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.184644][ T2619] loop0: detected capacity change from 0 to 128 [ 119.194397][ T861] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 119.200867][ T2619] EXT4-fs: Ignoring removed bh option [ 119.214592][ T861] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 119.224645][ T2619] EXT4-fs (loop0): Test dummy encryption mode enabled [ 119.225013][ T861] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.236837][ T2619] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 119.243612][ T861] usb 2-1: config 0 descriptor?? [ 119.247994][ T2619] ext4 filesystem being mounted at /60/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 119.252189][ T359] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 119.304382][ T1423] EXT4-fs (loop0): unmounting filesystem. [ 119.376746][ T2610] syz.3.786 (2610) used greatest stack depth: 18640 bytes left [ 119.510154][ T359] usb 9-1: too many configurations: 253, using maximum allowed: 8 [ 119.523935][ T2613] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 119.534110][ T2613] kvm: pic: non byte read [ 119.538716][ T2613] kvm: pic: level sensitive irq not supported [ 119.538786][ T2613] kvm: pic: non byte read [ 119.579775][ T359] usb 9-1: string descriptor 0 read error: -71 [ 119.586146][ T359] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 119.646987][ T2629] netlink: 'syz.3.791': attribute type 4 has an invalid length. [ 119.664400][ T359] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.784988][ T359] usb 9-1: can't set config #1, error -71 [ 119.836445][ T861] cp2112 0003:10C4:EA90.0006: item fetching failed at offset 5/7 [ 119.852413][ T359] usb 9-1: USB disconnect, device number 9 [ 119.858421][ T861] cp2112 0003:10C4:EA90.0006: parse failed [ 119.867675][ T861] cp2112: probe of 0003:10C4:EA90.0006 failed with error -22 [ 119.922766][ T28] audit: type=1400 audit(1743157820.074:297): avc: denied { create } for pid=2642 comm="syz.4.798" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 119.980725][ T300] usb 2-1: USB disconnect, device number 8 [ 120.700311][ T2652] loop0: detected capacity change from 0 to 2048 [ 120.794195][ T2652] Alternate GPT is invalid, using primary GPT. [ 120.800680][ T2652] loop0: p1 p2 p3 [ 121.255908][ T2668] loop8: detected capacity change from 0 to 512 [ 121.276448][ T2668] EXT4-fs (loop8): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 121.286136][ T2668] EXT4-fs (loop8): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 121.295811][ T2668] EXT4-fs (loop8): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 121.356061][ T2668] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 121.363959][ T2668] EXT4-fs (loop8): failed to initialize system zone (-117) [ 121.371081][ T2668] EXT4-fs (loop8): mount failed [ 121.431048][ T28] audit: type=1400 audit(1743157821.584:298): avc: denied { read } for pid=2677 comm="syz.0.809" name="ppp" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 121.518640][ T28] audit: type=1400 audit(1743157821.614:299): avc: denied { open } for pid=2677 comm="syz.0.809" path="/dev/ppp" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 121.577279][ T28] audit: type=1400 audit(1743157821.624:300): avc: denied { ioctl } for pid=2677 comm="syz.0.809" path="/dev/ppp" dev="devtmpfs" ino=154 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 121.759815][ T326] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 121.891929][ T40] hid-generic FFF9:0000:0203.0007: unknown main item tag 0x0 [ 121.898468][ T617] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 121.899889][ T40] hid-generic FFF9:0000:0203.0007: unknown main item tag 0x0 [ 121.917900][ T40] hid-generic FFF9:0000:0203.0007: unknown main item tag 0x0 [ 121.925329][ T40] hid-generic FFF9:0000:0203.0007: unknown main item tag 0x0 [ 121.932549][ T40] hid-generic FFF9:0000:0203.0007: unknown main item tag 0x0 [ 121.939859][ T40] hid-generic FFF9:0000:0203.0007: unknown main item tag 0x0 [ 121.947032][ T40] hid-generic FFF9:0000:0203.0007: unknown main item tag 0x0 [ 121.954272][ T40] hid-generic FFF9:0000:0203.0007: unknown main item tag 0x0 [ 121.961461][ T40] hid-generic FFF9:0000:0203.0007: unknown main item tag 0x0 [ 121.968680][ T40] hid-generic FFF9:0000:0203.0007: unknown main item tag 0x0 [ 121.975939][ T40] hid-generic FFF9:0000:0203.0007: unknown main item tag 0x0 [ 121.983221][ T40] hid-generic FFF9:0000:0203.0007: unknown main item tag 0x0 [ 121.990506][ T40] hid-generic FFF9:0000:0203.0007: unknown main item tag 0x0 [ 121.997641][ T40] hid-generic FFF9:0000:0203.0007: unknown main item tag 0x0 [ 122.004921][ T40] hid-generic FFF9:0000:0203.0007: unknown main item tag 0x0 [ 122.012687][ T40] hid-generic FFF9:0000:0203.0007: unknown main item tag 0x0 [ 122.020670][ T40] hid-generic FFF9:0000:0203.0007: hidraw0: HID v0.00 Device [syz0] on syz1 [ 122.101004][ T326] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 122.118166][ T326] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 122.127490][ T326] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.140027][ T326] usb 1-1: config 0 descriptor?? [ 122.145408][ T2679] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 122.171187][ T617] usb 2-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 122.180422][ T617] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.191273][ T617] usb 2-1: config 0 descriptor?? [ 122.423313][ T2710] loop8: detected capacity change from 0 to 2048 [ 122.444154][ T28] audit: type=1400 audit(1743157822.524:301): avc: denied { read } for pid=2705 comm="syz.8.821" dev="nsfs" ino=4026532375 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 122.465676][ T28] audit: type=1400 audit(1743157822.524:302): avc: denied { open } for pid=2705 comm="syz.8.821" path="net:[4026532375]" dev="nsfs" ino=4026532375 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 122.494657][ T2710] Alternate GPT is invalid, using primary GPT. [ 122.501099][ T2710] loop8: p1 p2 p3 [ 122.572479][ T102] Alternate GPT is invalid, using primary GPT. [ 122.579077][ T102] loop8: p1 p2 p3 [ 122.646745][ T326] hid-generic 0003:04F3:0755.0008: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.0-1/input0 [ 122.874876][ T2036] usb 1-1: USB disconnect, device number 6 [ 123.913830][ T28] audit: type=1326 audit(1743157824.064:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2739 comm="syz.3.830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe75ef8d169 code=0x7ffc0000 [ 123.971194][ T28] audit: type=1326 audit(1743157824.094:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2739 comm="syz.3.830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fe75ef8d169 code=0x7ffc0000 [ 123.994667][ T28] audit: type=1326 audit(1743157824.094:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2739 comm="syz.3.830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe75ef8d169 code=0x7ffc0000 [ 124.017829][ T28] audit: type=1326 audit(1743157824.094:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2739 comm="syz.3.830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7fe75ef8d169 code=0x7ffc0000 [ 124.583539][ T326] usb 2-1: USB disconnect, device number 9 [ 124.821660][ T2764] loop1: detected capacity change from 0 to 2048 [ 124.860675][ T2764] Alternate GPT is invalid, using primary GPT. [ 124.872958][ T2764] loop1: p1 p2 p3 [ 125.815409][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 125.815425][ T28] audit: type=1400 audit(1743157825.964:310): avc: denied { relabelfrom } for pid=2793 comm="syz.4.848" name="PACKET" dev="sockfs" ino=26713 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 125.850172][ T2794] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 125.945713][ T28] audit: type=1400 audit(1743157826.044:311): avc: denied { relabelto } for pid=2793 comm="syz.4.848" name="PACKET" dev="sockfs" ino=26713 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=packet_socket permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 127.992439][ T28] audit: type=1400 audit(1743157828.144:312): avc: denied { getopt } for pid=2821 comm="syz.1.857" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 128.797121][ T28] audit: type=1400 audit(1743157828.944:313): avc: denied { bind } for pid=2854 comm="syz.8.869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 128.875531][ T2862] random: crng reseeded on system resumption [ 128.941902][ T28] audit: type=1400 audit(1743157829.024:314): avc: denied { append } for pid=2861 comm="syz.0.872" name="snapshot" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 128.954774][ T2866] loop8: detected capacity change from 0 to 512 [ 128.971358][ T2866] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 128.986939][ T28] audit: type=1400 audit(1743157829.024:315): avc: denied { open } for pid=2861 comm="syz.0.872" path="/dev/snapshot" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 129.010544][ T28] audit: type=1400 audit(1743157829.064:316): avc: denied { ioctl } for pid=2861 comm="syz.0.872" path="/dev/snapshot" dev="devtmpfs" ino=91 ioctlcmd=0x3312 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 129.060252][ T19] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 129.167632][ T28] audit: type=1326 audit(1743157829.314:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2850 comm="syz.4.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5a2d8d169 code=0x7fc00000 [ 129.357927][ T28] audit: type=1326 audit(1743157829.344:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2850 comm="syz.4.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe5a2d8d169 code=0x7fc00000 [ 129.401859][ T28] audit: type=1326 audit(1743157829.344:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2850 comm="syz.4.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5a2d8d169 code=0x7fc00000 [ 129.531607][ T19] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 129.551356][ T19] usb 2-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 129.563413][ T19] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.577694][ T19] usb 2-1: Product: syz [ 129.589812][ T19] usb 2-1: Manufacturer: syz [ 129.594291][ T19] usb 2-1: SerialNumber: syz [ 129.604063][ T19] usb 2-1: config 0 descriptor?? [ 129.819530][ T2036] usb 2-1: USB disconnect, device number 10 [ 129.869833][ T40] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 130.069906][ T40] usb 1-1: Using ep0 maxpacket: 16 [ 130.077027][ T40] usb 1-1: New USB device found, idVendor=04b4, idProduct=de64, bcdDevice= 0.00 [ 130.120888][ T40] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.173819][ T40] usb 1-1: config 0 descriptor?? [ 130.946734][ T40] cypress 0003:04B4:DE64.0009: hidraw0: USB HID v20.00 Device [HID 04b4:de64] on usb-dummy_hcd.0-1/input0 [ 131.059887][ T40] usb 1-1: USB disconnect, device number 7 [ 131.085098][ T2900] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 132.099862][ T359] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 132.120228][ T28] kauditd_printk_skb: 709 callbacks suppressed [ 132.120247][ T28] audit: type=1400 audit(1743157832.274:1029): avc: denied { getopt } for pid=2936 comm="syz.3.898" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 132.302047][ T359] usb 2-1: config 0 has no interfaces? [ 132.309201][ T359] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 132.565443][ T359] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 132.573530][ T359] usb 2-1: Manufacturer: syz [ 132.580643][ T359] usb 2-1: config 0 descriptor?? [ 132.619807][ T300] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 132.800986][ T300] usb 1-1: config index 0 descriptor too short (expected 45, got 36) [ 132.812086][ T300] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 132.842761][ T300] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 132.853479][ T28] audit: type=1400 audit(1743157832.994:1030): avc: denied { read } for pid=2915 comm="syz.1.889" name="loop-control" dev="devtmpfs" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 132.881530][ T300] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 132.891137][ T28] audit: type=1400 audit(1743157833.034:1031): avc: denied { open } for pid=2915 comm="syz.1.889" path="/dev/loop-control" dev="devtmpfs" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 132.910803][ T300] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.926839][ T359] usb 2-1: USB disconnect, device number 11 [ 133.295714][ T300] usb 1-1: config 0 descriptor?? [ 133.301713][ T2928] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 133.310630][ T300] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 133.454847][ T2968] netlink: 4 bytes leftover after parsing attributes in process `syz.3.910'. [ 133.464423][ T2968] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.479487][ T2968] device bridge_slave_1 left promiscuous mode [ 133.489469][ T2968] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.578521][ T28] audit: type=1400 audit(1743157833.724:1032): avc: denied { ioctl } for pid=2977 comm="syz.3.914" path="socket:[26354]" dev="sockfs" ino=26354 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 133.603975][ T2978] device gre0 entered promiscuous mode [ 134.983723][ T3046] device wg1 entered promiscuous mode [ 135.282762][ T300] usb 1-1: USB disconnect, device number 8 [ 135.387288][ T28] audit: type=1400 audit(1743157835.534:1033): avc: denied { bind } for pid=3067 comm="syz.0.951" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 135.450459][ T3077] netlink: 8 bytes leftover after parsing attributes in process `syz.3.955'. [ 135.462512][ T3076] loop0: detected capacity change from 0 to 512 [ 135.497255][ T3076] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 135.505916][ T3078] loop1: detected capacity change from 0 to 512 [ 135.525712][ T28] audit: type=1400 audit(1743157835.534:1034): avc: denied { name_bind } for pid=3067 comm="syz.0.951" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 135.555953][ T28] audit: type=1400 audit(1743157835.534:1035): avc: denied { node_bind } for pid=3067 comm="syz.0.951" saddr=::ffff:172.20.20.170 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 135.579168][ T28] audit: type=1400 audit(1743157835.624:1036): avc: denied { unlink } for pid=84 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 135.579233][ T3078] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 135.642748][ T3078] [EXT4 FS bs=4096, gc=1, bpg=3008, ipg=32, mo=8003e119, mo2=0000] [ 135.692342][ T3078] Quota error (device loop1): v2_read_file_info: Free block number 1 out of range (1, 6). [ 135.765824][ T3078] EXT4-fs warning (device loop1): ext4_enable_quotas:7017: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 135.818932][ T3078] EXT4-fs (loop1): mount failed [ 135.917775][ T3106] usb usb1: usbfs: process 3106 (syz.1.968) did not claim interface 1 before use [ 135.941930][ T3108] device wg1 entered promiscuous mode [ 135.953084][ T3108] loop1: detected capacity change from 0 to 1024 [ 135.966424][ T3108] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 135.976012][ T3108] EXT4-fs (loop1): group descriptors corrupted! [ 136.725082][ T28] audit: type=1400 audit(1743157836.874:1037): avc: denied { mount } for pid=3129 comm="syz.0.975" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 137.261313][ T3153] mmap: syz.0.980 (3153) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 137.300025][ T28] audit: type=1400 audit(1743157837.384:1038): avc: denied { create } for pid=3150 comm="syz.1.986" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 137.398729][ T3161] kvm: pic: non byte read [ 137.724626][ T28] audit: type=1400 audit(1743157837.864:1039): avc: denied { create } for pid=3187 comm="syz.3.1001" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 138.089239][ T3191] netlink: 8 bytes leftover after parsing attributes in process `syz.1.997'. [ 138.098089][ T3191] netlink: 8 bytes leftover after parsing attributes in process `syz.1.997'. [ 138.108052][ T3191] netlink: 8 bytes leftover after parsing attributes in process `syz.1.997'. [ 138.185991][ T28] audit: type=1400 audit(1743157838.324:1040): avc: denied { unlink } for pid=293 comm="syz-executor" name="file0" dev="tmpfs" ino=1579 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 138.506414][ T3218] loop1: detected capacity change from 0 to 256 [ 138.529862][ T3218] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 138.736119][ T28] audit: type=1400 audit(1743157838.884:1041): avc: denied { map } for pid=3217 comm="syz.1.1014" path="/117/file0/file1" dev="loop1" ino=1048658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 138.760965][ T3218] syz.1.1014: attempt to access beyond end of device [ 138.760965][ T3218] loop1: rw=524288, sector=34359738488, nr_sectors = 8 limit=256 [ 138.776834][ T3218] syz.1.1014: attempt to access beyond end of device [ 138.776834][ T3218] loop1: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 138.791344][ T3217] syz.1.1014: attempt to access beyond end of device [ 138.791344][ T3217] loop1: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 138.805328][ T3217] syz.1.1014: attempt to access beyond end of device [ 138.805328][ T3217] loop1: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 138.819211][ T3218] syz.1.1014: attempt to access beyond end of device [ 138.819211][ T3218] loop1: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 138.833111][ T3218] syz.1.1014: attempt to access beyond end of device [ 138.833111][ T3218] loop1: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 138.846869][ T3217] syz.1.1014: attempt to access beyond end of device [ 138.846869][ T3217] loop1: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 138.860716][ T3218] syz.1.1014: attempt to access beyond end of device [ 138.860716][ T3218] loop1: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 138.874652][ T3218] syz.1.1014: attempt to access beyond end of device [ 138.874652][ T3218] loop1: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 138.888547][ T3218] syz.1.1014: attempt to access beyond end of device [ 138.888547][ T3218] loop1: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 140.608867][ T28] audit: type=1400 audit(1743157840.754:1042): avc: denied { watch_reads } for pid=3257 comm="syz.4.1031" path="/218" dev="tmpfs" ino=1198 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 140.741993][ T3271] device wireguard0 entered promiscuous mode [ 141.038590][ T3282] netlink: 76 bytes leftover after parsing attributes in process `syz.8.1038'. [ 141.140284][ T3284] loop1: detected capacity change from 0 to 4096 [ 141.204007][ T3284] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 141.258746][ T1229] EXT4-fs (loop1): unmounting filesystem. [ 141.264619][ T28] audit: type=1400 audit(1743157841.394:1043): avc: denied { execute } for pid=3283 comm="syz.1.1039" path="/121/file1/blkio.throttle.io_serviced_recursive" dev="loop1" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 142.054887][ T3328] loop1: detected capacity change from 0 to 1024 [ 142.097449][ T3328] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 142.104042][ T28] audit: type=1400 audit(1743157842.244:1044): avc: denied { ioctl } for pid=3343 comm="syz.3.1058" path="socket:[27460]" dev="sockfs" ino=27460 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 142.148528][ T1229] EXT4-fs (loop1): unmounting filesystem. [ 142.212755][ T3366] syz.3.1065[3366] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 142.212838][ T3366] syz.3.1065[3366] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 142.415633][ T3379] netlink: 200 bytes leftover after parsing attributes in process `syz.8.1071'. [ 142.415636][ T28] audit: type=1400 audit(1743157842.564:1045): avc: denied { nlmsg_read } for pid=3378 comm="syz.8.1071" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 143.990066][ T28] audit: type=1400 audit(1743157844.114:1046): avc: denied { wake_alarm } for pid=3450 comm="syz.3.1102" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 144.188404][ T3468] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 144.281203][ T3472] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1105'. [ 144.290457][ T3472] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1105'. [ 144.301159][ T3472] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1105'. [ 144.702595][ T3495] device pim6reg1 entered promiscuous mode [ 146.204634][ T3579] loop1: detected capacity change from 0 to 512 [ 146.216689][ T3579] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 146.226540][ T3579] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 146.236259][ T3579] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 146.389611][ T3579] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 146.397530][ T3579] EXT4-fs (loop1): failed to initialize system zone (-117) [ 146.404715][ T3579] EXT4-fs (loop1): mount failed [ 246.679735][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 246.686567][ C1] (detected by 1, t=10002 jiffies, g=14941, q=214 ncpus=2) [ 246.693670][ C1] rcu: All QSes seen, last rcu_preempt kthread activity 10003 (4294961883-4294951880), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 246.706865][ C1] rcu: rcu_preempt kthread starved for 10004 jiffies! g14941 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 246.718532][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 246.728537][ C1] rcu: RCU grace-period kthread stack dump: [ 246.734279][ C1] task:rcu_preempt state:R running task stack:27496 pid:14 ppid:2 flags:0x00004000 [ 246.744865][ C1] Call Trace: [ 246.747984][ C1] [ 246.750762][ C1] __schedule+0xcb5/0x1560 [ 246.755015][ C1] ? __sched_text_start+0x8/0x8 [ 246.759693][ C1] ? __kasan_check_write+0x14/0x20 [ 246.764642][ C1] schedule+0xc3/0x180 [ 246.768552][ C1] schedule_timeout+0x18c/0x380 [ 246.773228][ C1] ? _raw_spin_unlock_irq+0x4d/0x70 [ 246.778263][ C1] ? console_conditional_schedule+0x10/0x10 [ 246.783998][ C1] ? update_process_times+0x1b0/0x1b0 [ 246.789287][ C1] ? prepare_to_swait_event+0x308/0x320 [ 246.794670][ C1] rcu_gp_fqs_loop+0x2ed/0x10a0 [ 246.799355][ C1] ? _raw_spin_unlock_irq+0x4d/0x70 [ 246.804394][ C1] ? rcu_gp_init+0xc7f/0xfa0 [ 246.808815][ C1] ? rcu_gp_init+0xfa0/0xfa0 [ 246.813241][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 246.818881][ C1] ? finish_swait+0x17d/0x1b0 [ 246.823400][ C1] rcu_gp_kthread+0xa3/0x3a0 [ 246.827912][ C1] ? queued_spin_lock_slowpath+0x50/0x50 [ 246.833376][ C1] ? set_cpus_allowed_ptr+0xa4/0xe0 [ 246.838427][ C1] ? __kasan_check_read+0x11/0x20 [ 246.843273][ C1] ? __kthread_parkme+0x12d/0x180 [ 246.848132][ C1] kthread+0x26d/0x300 [ 246.852036][ C1] ? queued_spin_lock_slowpath+0x50/0x50 [ 246.857507][ C1] ? kthread_blkcg+0xd0/0xd0 [ 246.862021][ C1] ret_from_fork+0x1f/0x30 [ 246.866277][ C1] [ 246.869157][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 246.875313][ C1] Sending NMI from CPU 1 to CPUs 0: [ 246.880350][ C0] NMI backtrace for cpu 0 [ 246.880365][ C0] CPU: 0 PID: 3594 Comm: syz.3.1161 Not tainted 6.1.129-syzkaller-00051-gc1fd50266bd6 #0 [ 246.880386][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 246.880397][ C0] RIP: 0010:check_preemption_disabled+0x44/0x110 [ 246.880422][ C0] Code: 45 d8 65 8b 1d 9d 82 e5 7a 65 8b 05 fe de e5 7a a9 ff ff ff 7f 74 22 65 48 8b 04 25 28 00 00 00 48 3b 45 d8 0f 85 c7 00 00 00 <89> d8 48 83 c4 10 5b 41 5c 41 5e 41 5f 5d c3 48 c7 45 d0 00 00 00 [ 246.880438][ C0] RSP: 0018:ffffc90000007eb0 EFLAGS: 00000046 [ 246.880454][ C0] RAX: 13fdd0e8c5171200 RBX: 0000000000000000 RCX: 1ffff92000000fd0 [ 246.880468][ C0] RDX: 0000000000000001 RSI: ffffffff85ea1e80 RDI: ffffffff85ea1e40 [ 246.880480][ C0] RBP: ffffc90000007ee0 R08: dffffc0000000000 R09: 0000000000000003 [ 246.880492][ C0] R10: ffffffffffffffff R11: dffffc0000000001 R12: ffff88814678d100 [ 246.880506][ C0] R13: 0000000000000000 R14: ffff8881f6e27308 R15: dffffc0000000000 [ 246.880518][ C0] FS: 00007fe75fe816c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 246.880535][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 246.880547][ C0] CR2: 0000001b2e01eff8 CR3: 000000014a287000 CR4: 00000000003506b0 [ 246.880562][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 246.880573][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 246.880584][ C0] Call Trace: [ 246.880589][ C0] [ 246.880594][ C0] ? show_regs+0x58/0x60 [ 246.880613][ C0] ? nmi_cpu_backtrace+0x285/0x2f0 [ 246.880637][ C0] ? nmi_trigger_cpumask_backtrace+0x3b0/0x3b0 [ 246.880656][ C0] ? check_preemption_disabled+0x44/0x110 [ 246.880674][ C0] ? check_preemption_disabled+0x44/0x110 [ 246.880692][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 246.880713][ C0] ? nmi_handle+0xa7/0x280 [ 246.880732][ C0] ? check_preemption_disabled+0x44/0x110 [ 246.880750][ C0] ? default_do_nmi+0x69/0x160 [ 246.880776][ C0] ? exc_nmi+0xad/0x100 [ 246.880800][ C0] ? end_repeat_nmi+0x16/0x31 [ 246.880820][ C0] ? check_preemption_disabled+0x44/0x110 [ 246.880838][ C0] ? check_preemption_disabled+0x44/0x110 [ 246.880856][ C0] ? check_preemption_disabled+0x44/0x110 [ 246.880873][ C0] [ 246.880878][ C0] [ 246.880885][ C0] debug_smp_processor_id+0x17/0x20 [ 246.880901][ C0] irqtime_account_irq+0x6f/0x260 [ 246.880930][ C0] handle_softirqs+0x53a/0x650 [ 246.880954][ C0] __do_softirq+0xb/0xd [ 246.880970][ C0] do_softirq+0xf6/0x150 [ 246.880990][ C0] [ 246.880994][ C0] [ 246.880999][ C0] ? __local_bh_enable_ip+0x80/0x80 [ 246.881023][ C0] __local_bh_enable_ip+0x75/0x80 [ 246.881043][ C0] fpu__restore_sig+0x905/0x10f0 [ 246.881063][ C0] ? fpu__restore_sig+0x3ed/0x10f0 [ 246.881086][ C0] ? copy_fpstate_to_sigframe+0xba0/0xba0 [ 246.881112][ C0] ? __kasan_check_write+0x14/0x20 [ 246.881132][ C0] restore_sigcontext+0x633/0x700 [ 246.881156][ C0] ? arch_irq_work_raise+0xc7/0xd0 [ 246.881179][ C0] ? __do_compat_sys_x32_rt_sigreturn+0x1e0/0x1e0 [ 246.881204][ C0] ? _raw_spin_lock_irq+0xa5/0x1b0 [ 246.881233][ C0] ? bpf_send_signal+0x19/0x20 [ 246.881260][ C0] ? bpf_trace_run2+0x138/0x290 [ 246.881279][ C0] __do_sys_rt_sigreturn+0x153/0x1e0 [ 246.881304][ C0] ? x32_copy_siginfo_to_user+0x270/0x270 [ 246.881329][ C0] ? __bpf_trace_sys_enter+0x62/0x70 [ 246.881352][ C0] x64_sys_call+0x91/0x9a0 [ 246.881371][ C0] do_syscall_64+0x3b/0xb0 [ 246.881395][ C0] ? clear_bhb_loop+0x55/0xb0 [ 246.881411][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 246.881437][ C0] RIP: 0033:0x7fe75ef8d169 [ 246.881457][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 246.881471][ C0] RSP: 002b:00007fe75fe810e8 EFLAGS: 00000246 [ 246.881485][ C0] RAX: fffffffffffffffc RBX: 00007fe75f1a6088 RCX: 00007fe75ef8d169 [ 246.881498][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fe75f1a6088 [ 246.881510][ C0] RBP: 00007fe75f1a6080 R08: 0000000000000000 R09: 0000000000000000 [ 246.881521][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe75f1a608c [ 246.881532][ C0] R13: 0000000000000000 R14: 00007ffe9c286b00 R15: 00007ffe9c286be8 [ 246.881548][ C0] [ 428.819673][ C0] BUG: workqueue lockup - pool cpus=0 node=0 flags=0x0 nice=0 stuck for 281s! [ 428.828413][ C0] BUG: workqueue lockup - pool cpus=1 node=0 flags=0x0 nice=0 stuck for 279s! [ 428.837201][ C0] BUG: workqueue lockup - pool cpus=1 node=0 flags=0x0 nice=-20 stuck for 280s! [ 428.846045][ C0] BUG: workqueue lockup - pool cpus=0-1 flags=0x4 nice=0 stuck for 282s! [ 428.854293][ C0] Showing busy workqueues and worker pools: [ 428.860129][ C0] workqueue events: flags=0x0 [ 428.864613][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=4/256 refcnt=5 [ 428.864661][ C0] pending: bpf_prog_free_deferred, kfree_rcu_monitor, rht_deferred_worker, rht_deferred_worker [ 428.864786][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=7/256 refcnt=8 [ 428.864828][ C0] pending: vmstat_shepherd, psi_avgs_work, kfree_rcu_monitor, xfrm_state_gc_task, rht_deferred_worker, rht_deferred_worker, rht_deferred_worker [ 428.864990][ C0] workqueue events_long: flags=0x0 [ 428.910111][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=6/256 refcnt=7 [ 428.910170][ C0] pending: br_multicast_gc_work, br_fdb_cleanup, br_multicast_gc_work, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup [ 428.910312][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=4/256 refcnt=5 [ 428.910355][ C0] pending: br_multicast_gc_work, br_multicast_gc_work, br_fdb_cleanup, br_multicast_gc_work [ 428.910440][ C0] workqueue events_unbound: flags=0x2 [ 428.953307][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=4/512 refcnt=6 [ 428.953354][ C0] in-flight: 891:fsnotify_mark_destroy_workfn, 902:fsnotify_connector_destroy_workfn [ 428.953414][ C0] pending: toggle_allocation_gate, flush_memcg_stats_dwork [ 428.953536][ C0] workqueue events_power_efficient: flags=0x80 [ 428.983563][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=6/256 refcnt=7 [ 428.983620][ C0] pending: wg_ratelimiter_gc_entries, neigh_managed_work, neigh_managed_work, neigh_periodic_work, neigh_periodic_work, check_lifetime [ 428.983773][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 428.983817][ C0] pending: gc_worker [ 428.983853][ C0] workqueue rcu_gp: flags=0x8 [ 429.021342][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.021394][ C0] pending: process_srcu [ 429.021435][ C0] workqueue mm_percpu_wq: flags=0x8 [ 429.038161][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.038207][ C0] pending: vmstat_update [ 429.038248][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.038289][ C0] pending: vmstat_update [ 429.038330][ C0] workqueue writeback: flags=0x4a [ 429.066946][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=4 [ 429.066995][ C0] pending: wb_workfn, wb_workfn [ 429.067059][ C0] workqueue kblockd: flags=0x18 [ 429.083725][ C0] pwq 3: cpus=1 node=0 flags=0x0 nice=-20 active=2/256 refcnt=3 [ 429.083776][ C0] pending: blk_mq_timeout_work, blk_mq_timeout_work [ 429.084013][ C0] workqueue dm_bufio_cache: flags=0x8 [ 429.103625][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.103681][ C0] pending: work_fn [ 429.103771][ C0] workqueue ipv6_addrconf: flags=0x40008 [ 429.120601][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/1 refcnt=4 [ 429.120649][ C0] pending: addrconf_verify_work [ 429.120700][ C0] inactive: addrconf_verify_work, addrconf_verify_work [ 429.120762][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/1 refcnt=4 [ 429.120806][ C0] pending: addrconf_verify_work [ 429.120842][ C0] inactive: addrconf_verify_work, addrconf_verify_work [ 429.121002][ C0] workqueue wg-kex-wg0: flags=0x6 [ 429.164555][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 429.164606][ C0] pending: wg_packet_handshake_send_worker [ 429.164648][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 429.182702][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.182757][ C0] pending: wg_packet_encrypt_worker [ 429.182799][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.182839][ C0] pending: wg_packet_encrypt_worker [ 429.182877][ C0] workqueue wg-kex-wg1: flags=0x6 [ 429.213421][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 429.213473][ C0] pending: wg_packet_handshake_send_worker [ 429.213513][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 429.231557][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.231608][ C0] pending: wg_packet_encrypt_worker [ 429.231650][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.231691][ C0] pending: wg_packet_encrypt_worker [ 429.231726][ C0] workqueue wg-kex-wg2: flags=0x6 [ 429.262265][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 429.262311][ C0] pending: wg_packet_handshake_send_worker [ 429.262353][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 429.280405][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.280458][ C0] pending: wg_packet_encrypt_worker [ 429.280500][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.280541][ C0] pending: wg_packet_encrypt_worker [ 429.280576][ C0] workqueue wg-kex-wg0: flags=0x6 [ 429.311114][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=4 [ 429.311161][ C0] pending: wg_packet_handshake_send_worker, wg_packet_handshake_send_worker [ 429.311231][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 429.332241][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.332294][ C0] pending: wg_packet_encrypt_worker [ 429.332338][ C0] workqueue wg-kex-wg1: flags=0x6 [ 429.350034][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=4 [ 429.350080][ C0] pending: wg_packet_handshake_send_worker, wg_packet_handshake_send_worker [ 429.350142][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 429.371136][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.371188][ C0] pending: wg_packet_encrypt_worker [ 429.371232][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.371274][ C0] pending: wg_packet_encrypt_worker [ 429.371310][ C0] workqueue wg-kex-wg2: flags=0x6 [ 429.401849][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 429.401897][ C0] pending: wg_packet_handshake_send_worker [ 429.401937][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 429.419993][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.420047][ C0] pending: wg_packet_encrypt_worker [ 429.420087][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.420129][ C0] pending: wg_packet_encrypt_worker [ 429.420170][ C0] workqueue wg-kex-wg0: flags=0x6 [ 429.450721][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 429.450769][ C0] pending: wg_packet_handshake_send_worker [ 429.450811][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 429.468841][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.468889][ C0] pending: wg_packet_encrypt_worker [ 429.468931][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.468971][ C0] pending: wg_packet_encrypt_worker [ 429.469007][ C0] workqueue wg-kex-wg1: flags=0x6 [ 429.499535][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 429.499583][ C0] pending: wg_packet_handshake_send_worker [ 429.512572][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 429.517671][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.517720][ C0] pending: wg_packet_encrypt_worker [ 429.517759][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.517801][ C0] pending: wg_packet_encrypt_worker [ 429.517837][ C0] workqueue wg-kex-wg2: flags=0x6 [ 429.548361][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 429.548407][ C0] pending: wg_packet_handshake_send_worker [ 429.548447][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 429.566501][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.566553][ C0] pending: wg_packet_encrypt_worker [ 429.566593][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.566636][ C0] pending: wg_packet_encrypt_worker [ 429.566672][ C0] workqueue wg-kex-wg0: flags=0x6 [ 429.597202][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 429.597250][ C0] pending: wg_packet_handshake_send_worker [ 429.597291][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 429.615447][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=2/256 refcnt=3 [ 429.615495][ C0] in-flight: 40:wg_packet_tx_worker [ 429.615536][ C0] pending: wg_packet_encrypt_worker [ 429.615573][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.615616][ C0] pending: wg_packet_encrypt_worker [ 429.615650][ C0] workqueue wg-kex-wg1: flags=0x6 [ 429.651569][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 429.651613][ C0] pending: wg_packet_handshake_send_worker [ 429.651654][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 429.669712][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.669763][ C0] pending: wg_packet_encrypt_worker [ 429.669803][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.669843][ C0] pending: wg_packet_encrypt_worker [ 429.669879][ C0] workqueue wg-kex-wg2: flags=0x6 [ 429.700601][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 429.700649][ C0] pending: wg_packet_handshake_send_worker [ 429.700688][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 429.718718][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.718768][ C0] pending: wg_packet_encrypt_worker [ 429.718806][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.718848][ C0] pending: wg_packet_encrypt_worker [ 429.718886][ C0] workqueue wg-kex-wg0: flags=0x6 [ 429.749550][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 429.749601][ C0] pending: wg_packet_handshake_send_worker [ 429.762589][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 429.767689][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.767737][ C0] pending: wg_packet_encrypt_worker [ 429.767779][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.767820][ C0] pending: wg_packet_encrypt_worker [ 429.767857][ C0] workqueue wg-kex-wg1: flags=0x6 [ 429.798378][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 429.798434][ C0] pending: wg_packet_handshake_send_worker [ 429.798473][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 429.816518][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.816568][ C0] pending: wg_packet_encrypt_worker [ 429.816607][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.816648][ C0] pending: wg_packet_encrypt_worker [ 429.816686][ C0] workqueue wg-kex-wg2: flags=0x6 [ 429.847204][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 429.847252][ C0] pending: wg_packet_handshake_send_worker [ 429.847291][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 429.865453][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.865512][ C0] pending: wg_packet_encrypt_worker [ 429.865555][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.865598][ C0] pending: wg_packet_encrypt_worker [ 429.865636][ C0] pool 2: cpus=1 node=0 flags=0x0 nice=0 hung=280s workers=6 idle: 2036 359 861 24 469 [ 429.865712][ C0] pool 4: cpus=0-1 flags=0x4 nice=0 hung=283s workers=5 idle: 8 319 43