last executing test programs: 7m5.117638242s ago: executing program 2 (id=335): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000c00)='/proc/vmallocinfo\x00', 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x61, 0x8e}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000000)={'sit0\x00', {0x2, 0x0, @broadcast}}) getresuid(0x0, 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, 0x0, 0x20000000) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) geteuid() socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x2a801, 0x0) sendfile(r5, r0, 0x0, 0xfffffffc) 7m3.40467168s ago: executing program 2 (id=345): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10e) r1 = syz_open_procfs(0x0, &(0x7f0000001100)='net/protocols\x00') r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x4d, 0x1, 0x3, 0x80000000}, {0x60, 0x8}, {}, {0x2}]}) lseek(r1, 0x6, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f00008aa000/0x1000)=nil, 0x1000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000012c0), 0x0, 0x0) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r8}, 0x10) open_tree(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x1000) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000000)='./file0\x00') getpeername$packet(r1, &(0x7f0000001140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001180)=0x14) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r12 = dup(r11) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r10}, 0x2c, {'wfdno', 0x3d, r12}, 0x2c, {[], [], 0x6b}}) sendmsg$nl_route(r3, &(0x7f0000001280)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001240)={&(0x7f0000001300)=ANY=[@ANYBLOB="6400000015002002dbdf25022098fd", @ANYRES32=r9, @ANYBLOB="1400060049850000ff03000004000000f30d000008000a0002000000080001000a010101080008001002000008000900010400000800010000000000080004000a0101000800040064010101", @ANYRES32=r10, @ANYRES32=r5], 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000080)=""/4097, 0x1001}], 0x1, 0x2, 0x0) 7m2.948463144s ago: executing program 2 (id=348): read(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x810}, 0x200008c4) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_PERTURB={0x8, 0xc, 0x5}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x15625}]}}]}, 0x4c}}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f0000000080)={0x8}) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f0000000180)={0x1}) 7m2.756838023s ago: executing program 2 (id=352): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x2048c5, &(0x7f0000000480)={[{@fat=@dos1xfloppy}, {@fat=@fmask={'fmask', 0x3d, 0x9}}, {@rodir}, {@utf8}, {@shortname_winnt}, {@uni_xlateno}, {@numtail}, {@fat=@dmask={'dmask', 0x3d, 0x100}}, {@fat=@tz_utc}, {@uni_xlate}, {@uni_xlateno}, {@shortname_winnt}]}, 0x0, 0x284, &(0x7f0000000700)="$eJzs3E9rE10Ux/Ffk/5NaZPFwwMK4kE3uhna+AqCtCAGKrURdSFM7URDxqRkYiUitju3vguhuHQnqG+gG3fuxU0RBDddiJEmmSatgbbaONF8PxDmZs6czL2TmXBmIHf75vMHxXwQU0tM2tCOlNLeKg21YxrSqDpt6OLk1w9nrt+6fTWTze7G5jNLl9JmNn32zaMnL8+9q07eeDX9ekxbqTvbX9Ift/7fOrX9fSn89HLVXFsul6vusu/ZSiEoOmbXfM8NPCuUAq+yL573y6urNXNLK1OJ1YoXBOaWalb0alYtW7VSM/eeWyiZ4zg2ldCgiR87I7e5uOhmetIZRGGi28pKJePGuwZzm3+iUwAAoL+06n8n71YVG7ffrP/nFs2OVv/fLwRWCKx0WP0fE/V/71D/D4Ld+j/Run73o/4HAAAAAAAAAAAAAAAAAAAAAOBvsFOvJ+v1ejJchq8xSeOSwvdR9xO9wfc/2Dr+uDcu+c/Wcmu55rIZz+RVkC9PMyPSt8b50NJsz1/Jzs1YQ0pv/fVW/vpaLq6xMD+U6p4/28y3/fkjSnTuP62k/uuen+6aP6oL5zvyHSX1/q7K8rXSOK/b+U9nzS4vZA/kTzS2AwAAAADgX+DYnp/u3xtxx8JpQw7EmyvbzweUPOT5wIH762GdHo5u3AAAAAAADJKg9rjo+r5XoXGcxkKPDt2LfhlgPzRikiLa+2dJ/XEQTrTx6WHzqj/KxlH/MgEAAAA4ae2iP+qeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwuI46eVi4/a/MPdaxu3g0owQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD6w48AAAD//0zfHpw=") r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000077c0)={0x2020, 0x0, 0x0}, 0x2020) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000002240)='./file0\x00', 0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x2c2, &(0x7f00000006c0)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x3, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x100f811a, 0x5000, 0x0, 0x0, 0xc}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000d7c900000900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r4, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000002c0)='mm_page_alloc\x00', r6}, 0x63) r7 = socket(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r9) getsockname$packet(r9, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0xf) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r10, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x14) sendmsg$nl_route_sched(r7, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x60, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x30, 0x2, [@TCA_BASIC_EMATCHES={0x2c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{}, {0x0, 0x0, 0x1}}}, @TCF_EM_META={0xc, 0x2}]}]}]}}]}, 0x60}}, 0x0) r11 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r11, 0x40806685, &(0x7f0000000440)={0x1, 0x3, 0x1000, 0xffffffffffffff72, 0x0, 0x0, 0x0, 0x0}) 6m59.845232099s ago: executing program 2 (id=362): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r1, &(0x7f0000000500)="df01f7deeb16ed93c63040faef25c533afe83cf27efffb3f8227c96c3e93a7db972403e4878b72995a9055d13016ce885c88638cc8e7af1b68b0f7b4fcc34cc4dd3054118a2129a18c054fd7c5754ec8ad2ab0f214d7e3b7cdf7e73f9c07913279c27b57b0a4383725342d278f422f85bf581a15c38c02c548aa5994e10a26c4d6398ad863026a938d96c67782524b76384be0f350df", &(0x7f0000000680)=""/169}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe2d, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) mlock2(&(0x7f0000549000/0x1000)=nil, 0x1000, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x44, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_SNOOPING={0x5}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0x81}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x806}, 0x0) 6m59.42158349s ago: executing program 2 (id=364): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x862b01) (async) r1 = syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x862b01) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000003c0)={0x57, 0x0, 0x4, {0xffff, 0x1}, {0x45, 0x2}, @ramp={0xc, 0x4, {0x6, 0x4, 0x100, 0x5}}}) write$char_usb(r1, &(0x7f0000000040)="e2", 0x2250) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) getpid() (async) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0x8, 0x72}, 0x20) (async) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0x8, 0x72}, 0x20) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) (async) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xffffd000) r5 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000480)={0x288, r6, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x64, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xd}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffffd}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc}]}, @TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x200}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x48}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x401}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x81}]}, @TIPC_NLA_SOCK={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xa}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2000000}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}, @TIPC_NLA_SOCK={0x90, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xc}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xc}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffff8}]}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10001}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xcb}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2a9}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000001}]}, @TIPC_NLA_BEARER={0x8c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x336c}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x18000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}]}, @TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x845}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffff7fff}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'vlan1\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'wlan1\x00'}}]}]}, 0x288}, 0x1, 0x0, 0x0, 0x2000c0f0}, 0x5) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r5, 0x0, 0xa) fchdir(r7) read$FUSE(r7, &(0x7f0000001e00)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_GETXATTR(r7, &(0x7f0000000000)={0x18, 0xfffffffffffffff5, r8, {0x4}}, 0x18) open(&(0x7f00000000c0)='.\x00', 0x0, 0x24) (async) r9 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x24) lseek(r9, 0x1, 0x1) getdents(r9, &(0x7f0000000140)=""/173, 0xad) (async) getdents(r9, &(0x7f0000000140)=""/173, 0xad) syz_usb_connect(0x1, 0x36, &(0x7f0000000340)=ANY=[@ANYRESHEX=r0, @ANYRES32=r0, @ANYBLOB="17e5245fa476c09408e0c6251e43be5e8002459b9a5d02aa620f039acbb2e9a2f05a0b10a044c2cde0914b95748c5c9be95b63b6407181917e96ede57fa0941860af78b4121acc6a54aa37f0adae88f4796aefebe5dc14e3d2a760839612b49c3053968522eed85b92a5f44608a2cdfba712b93b7742341392364a2df13f0e8f96337ab4485b7e59af0b05bcd3e6bb7a2d556bf630d74ce04850b5458ecfb823e061f4fedb837746d4ee1eac45b19d92691ea580883414af182179e2bfefcb7a69f87dbf43b240c7f5f50d3ea5d0e8535a5b4ccf885a68344b9ef3ea273b43ad1dd2bb2502e340cedd82848a12f3b20f34642c13", @ANYRES64, @ANYRESHEX=0x0, @ANYRES32=0x0], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00', r10}, 0x10) getgroups(0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x18ba42, 0x15) (async) openat(0xffffffffffffff9c, 0x0, 0x18ba42, 0x15) 6m59.402153912s ago: executing program 32 (id=364): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x862b01) (async) r1 = syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x862b01) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000003c0)={0x57, 0x0, 0x4, {0xffff, 0x1}, {0x45, 0x2}, @ramp={0xc, 0x4, {0x6, 0x4, 0x100, 0x5}}}) write$char_usb(r1, &(0x7f0000000040)="e2", 0x2250) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) getpid() (async) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0x8, 0x72}, 0x20) (async) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0x8, 0x72}, 0x20) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) (async) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xffffd000) r5 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000480)={0x288, r6, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x64, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xd}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffffd}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc}]}, @TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x200}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x48}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x401}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x81}]}, @TIPC_NLA_SOCK={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xa}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2000000}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}, @TIPC_NLA_SOCK={0x90, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xc}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xc}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffff8}]}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10001}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xcb}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2a9}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000001}]}, @TIPC_NLA_BEARER={0x8c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x336c}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x18000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}]}, @TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x845}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffff7fff}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'vlan1\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'wlan1\x00'}}]}]}, 0x288}, 0x1, 0x0, 0x0, 0x2000c0f0}, 0x5) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r5, 0x0, 0xa) fchdir(r7) read$FUSE(r7, &(0x7f0000001e00)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_GETXATTR(r7, &(0x7f0000000000)={0x18, 0xfffffffffffffff5, r8, {0x4}}, 0x18) open(&(0x7f00000000c0)='.\x00', 0x0, 0x24) (async) r9 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x24) lseek(r9, 0x1, 0x1) getdents(r9, &(0x7f0000000140)=""/173, 0xad) (async) getdents(r9, &(0x7f0000000140)=""/173, 0xad) syz_usb_connect(0x1, 0x36, &(0x7f0000000340)=ANY=[@ANYRESHEX=r0, @ANYRES32=r0, @ANYBLOB="17e5245fa476c09408e0c6251e43be5e8002459b9a5d02aa620f039acbb2e9a2f05a0b10a044c2cde0914b95748c5c9be95b63b6407181917e96ede57fa0941860af78b4121acc6a54aa37f0adae88f4796aefebe5dc14e3d2a760839612b49c3053968522eed85b92a5f44608a2cdfba712b93b7742341392364a2df13f0e8f96337ab4485b7e59af0b05bcd3e6bb7a2d556bf630d74ce04850b5458ecfb823e061f4fedb837746d4ee1eac45b19d92691ea580883414af182179e2bfefcb7a69f87dbf43b240c7f5f50d3ea5d0e8535a5b4ccf885a68344b9ef3ea273b43ad1dd2bb2502e340cedd82848a12f3b20f34642c13", @ANYRES64, @ANYRESHEX=0x0, @ANYRES32=0x0], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00', r10}, 0x10) getgroups(0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x18ba42, 0x15) (async) openat(0xffffffffffffff9c, 0x0, 0x18ba42, 0x15) 4m47.36536456s ago: executing program 5 (id=973): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b70200"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x8}, 0x50) syz_emit_ethernet(0x4e, &(0x7f0000000340)={@random="5b685c7e778f", @multicast, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, '\x00', 0x18, 0x11, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, {[], {0x4e21, 0x4e22, 0x18, 0x0, @wg=@data={0x4, 0x4, 0x1}}}}}}}, 0x0) 4m47.348393822s ago: executing program 5 (id=974): write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000003c0)={'syz0\x00', {0x9, 0x0, 0x1, 0x400}, 0x36, [0xfffffffe, 0x0, 0x0, 0x0, 0x1, 0xfffffffc, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0xa, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x9f1, 0x0, 0x0, 0x4, 0x6, 0x800, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x6, 0x0, 0x58, 0x0, 0x9, 0x0, 0xffffbffc, 0xfffffff8, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8, 0x6], [0x2, 0x1, 0x0, 0xffffbffd, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff57, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x400, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1, 0x4000000, 0x0, 0x40000000, 0x0, 0x0, 0x55], [0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0xbd8f, 0x0, 0x4, 0x0, 0xfffffffd, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffffc, 0x10000, 0x0, 0x0, 0x10001, 0x810, 0x80000000, 0x0, 0x0, 0x800040, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0x1, 0x0, 0xc9d2, 0x0, 0x0, 0x0, 0x0, 0x1c00000, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x1, 0x0, 0x0, 0x1, 0x4, 0x2000000], [0x4, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x3, 0x0, 0xb1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1000, 0xfffffffc, 0x5, 0x0, 0x0, 0x0, 0x80, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x8f4]}, 0x45c) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) timer_settime(0x0, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7f, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r4}, 0x18) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0xfdff) r5 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$TIPC_NL_NAME_TABLE_GET(r5, &(0x7f0000000a40)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB='0\x00E\x00', @ANYRES16=0x0, @ANYBLOB="00032dbd7000fcdbdf25100000001c000980080002000200000008000200020000000800020006000000"], 0x30}, 0x1, 0x0, 0x0, 0x880}, 0x20000801) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r6, 0x5453, 0x0) 4m44.033544787s ago: executing program 5 (id=995): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) fcntl$setstatus(r0, 0x4, 0x40400) (async) prlimit64(0x0, 0xe, 0x0, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x40, 0x40, 0x41}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)="8634240edab305674f756dfbd17b4921e0ec3de64353d06925cecfa46f7978b18dea3849dc8d886259559a2ef0219625f8c35a1a0f6da175c6908b1536", &(0x7f0000000180), 0x1003, r4, 0x4}, 0x38) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r4, 0x0, 0x0}, 0x20) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x44, 0x86}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000900)='ns/net\x00') r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f0000000000)="3c00000058001f000307f4f9002304000a04d65f0800010002010002170003800500000099db973b91aa057972513500b0406700912deb5b85932234", 0x3c) (async) gettid() 4m43.945799025s ago: executing program 5 (id=997): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x1fffffffffffffe}, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) (async) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000600)={[{@nobh}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@barrier_val={'barrier', 0x3d, 0xfb}}, {@user_xattr}, {@usrquota}, {@bsdgroups}, {@minixdf}, {@nobh}, {@init_itable_val={'init_itable', 0x3d, 0x3ff}}, {@nombcache}]}, 0x3, 0x4d9, &(0x7f0000001340)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) (async) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r1, &(0x7f0000006b40)={0x2020}, 0x2020) inotify_add_watch(0xffffffffffffffff, 0x0, 0x52000775) (async) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r2 = getpid() (async) socket$netlink(0x10, 0x3, 0x5) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x202) (async) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) (async) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f00000003c0)={@initdev, 0x0}, &(0x7f0000000400)=0x14) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000003680)='sched_switch\x00', r6}, 0x10) (async) syz_open_dev$tty20(0xc, 0x4, 0x1) keyctl$session_to_parent(0x12) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000140001000000000000004000e0000002000000000000000000000000000000000000000000000000000000000a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbffffffffffffff00000000000000000000000000000000000000000000000200"/112], 0xb8}}, 0x2c000010) 4m43.112081177s ago: executing program 5 (id=1002): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000b40)={[{@user_xattr}, {@resgid}, {@barrier_val={'barrier', 0x3d, 0xb}}]}, 0x1, 0x4a3, &(0x7f0000000580)="$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") r2 = open(0x0, 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x0, 0x0, 0x148, 0x0, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x10000007}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'tunl0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0x14, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r4}, 0xc) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mtu(r5, 0x0, 0xa, &(0x7f0000000000)=0x3, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendto$inet(r5, &(0x7f0000000040)="0400", 0xffec, 0x0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000001c0)=0x10) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) link(0x0, &(0x7f0000000100)='./bus\x00') ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@newqdisc={0x6c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x9, 0x3, 0x0, 0x6, 0xfffffffa, 0x22}, [@TCA_NETEM_RATE={0x14, 0x6, {0xe1, 0x79d, 0x0, 0x3}}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x70, 0x80}}]}}}]}, 0x6c}}, 0x0) 4m41.693490226s ago: executing program 5 (id=1008): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057000000"], 0x0}, 0x94) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3b) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x4, 0x2, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000a61a7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000d80)={0x14, &(0x7f0000000c00)=ANY=[@ANYBLOB="20100c"], 0x0, 0x0, 0x0}, 0x0) 4m41.623197633s ago: executing program 33 (id=1008): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057000000"], 0x0}, 0x94) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3b) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x4, 0x2, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000a61a7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000d80)={0x14, &(0x7f0000000c00)=ANY=[@ANYBLOB="20100c"], 0x0, 0x0, 0x0}, 0x0) 1m50.422852712s ago: executing program 0 (id=1605): syz_usb_connect(0x3, 0x62, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a24010400050201020724070500000508240805040004960d24060101030200010006000609240305050306058109240306010304050507240405"], 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x2000000000000070, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x6}]}) (async) rt_sigaction(0x14, &(0x7f0000000180)={&(0x7f0000000080)="ca00d1c4f04680968300000086196ec866400fe2de0fae4e0afaf2466f8f4a781282c3213c194f6cff2ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x4]}}, 0x0, 0x8, &(0x7f0000000300)) (async) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x9) (async, rerun: 32) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) (async, rerun: 32) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) (async) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async, rerun: 64) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) (rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x40, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2ccf3766}, 0x48) sendmsg$inet(0xffffffffffffffff, 0x0, 0x8c0) (async, rerun: 32) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) (async, rerun: 32) r5 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f00000000c0)=0x60) ioctl$sock_SIOCGIFCONF(r5, 0x8912, &(0x7f0000000140)=@buf) write$UHID_CREATE2(r4, &(0x7f0000000040)=ANY=[], 0x118) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r4, 0x0) syz_usb_connect$uac1(0x6, 0xab, &(0x7f0000000340)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x99, 0x3, 0x1, 0x8, 0xa0, 0x2, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x8, 0x81}, [@selector_unit={0xb, 0x24, 0x5, 0x6, 0x9, "f00b7b9c9131"}, @selector_unit={0x8, 0x24, 0x5, 0x5, 0x7, "5015e7"}, @output_terminal={0x9, 0x24, 0x3, 0x4, 0x101, 0x4, 0x6, 0x1}, @selector_unit={0x7, 0x24, 0x5, 0x3, 0x32, "0311"}, @output_terminal={0x9, 0x24, 0x3, 0x4, 0x302, 0x4, 0x4, 0x67}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x7, 0x7, 0x1005}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x3, 0xb, 0x5, {0x7, 0x25, 0x1, 0x81, 0x5, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x5, 0x8, 0x5}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0xa6, 0x2, 0x30, {0x7, 0x25, 0x1, 0x4, 0x8, 0x9}}}}}}}]}}, &(0x7f00000006c0)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x200, 0x10, 0x7, 0x0, 0x10, 0xe}, 0x17a, &(0x7f0000000440)={0x5, 0xf, 0x17a, 0x5, [@generic={0x8f, 0x10, 0x2, "69f9dd07c79c7d02a84fc654cb831cbb0e7e47ae3ebb5ae52c1670dd26e60e5028886080878af279a6f637772524f8a4d981980acfe5f2998af63b20f6399b984e9e8dcaa4abc089b55dd323e87f03ff66af336b5b63d7157658799932672ef21b0142493020b16cff2983287e4f8a92a1d2e453df8e88e7d0683a7907f2823bf6601f3328e808f41afedd61"}, @generic={0xab, 0x10, 0x1, "6d38377d8cd973bfa6c771bafb3aca66fd9b5228f78379bf362678e18fc466e43d673a8c67204a176a0a5a0c22f90d80bbf24177a162fa44b639e526daadefde23a4c2fc9e6957b5cdeada20e6cef6347d2518210fab1d2b21d698e06cac1076208b3b8758383e9a7b64464093b42bc5be3708600ee861e20ca86b9f3b9097045b32be923ed33f28b73bd7eeb28911fff4ccf91ba1c9024806845fd1b3b1f22e0e8877e26fd884fe"}, @generic={0x1c, 0x10, 0x2, "295c40e7479b92cbcc187c54a4c2f359fb7aee3f46905e6de4"}, @wireless={0xb, 0x10, 0x1, 0xc, 0xb8, 0x9, 0xf, 0x7ff, 0x26}, @ss_container_id={0x14, 0x10, 0x4, 0xab, "592adce8e2aee27ebf7565b66245fa7e"}]}, 0x4, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x420}}, {0x66, &(0x7f0000000740)=ANY=[@ANYBLOB="6603c4bd3dd9149e82ff66bad04bb9db4c7c7aac1c97deaa29bd4454b4114e2093d7104495ef6247114b711d5883f8e9b3e1ef7f2701af2c8e81c98dec8f293efa6aa96ded773246548ab0ebb7c9bf152cddac197b63ef6503d6b6734f7e7bd719c3b247ce9d532ae15ee4d0c2fd7b082e"]}, {0x40, &(0x7f0000000640)=@string={0x40, 0x3, "17ef222a93223245ba2bacef6b98d158c26756b968f2ff7aeae682a38ca6798667980f53c944e83fe7b063e6b9b0eef01db5a197b45e6bf4fcd97eefa472"}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x240a}}]}) (async) ioctl$KVM_X86_SETUP_MCE(r4, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0xe, 0x1c}) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r0) 1m49.188577583s ago: executing program 0 (id=1609): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_procfs(r0, 0x0) getdents64(r3, &(0x7f00000046c0)=""/4096, 0x1000) getdents64(r3, 0x0, 0x0) openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) getsockname$packet(r3, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000380)=0x14) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x9, 0x4, 0x9, 0x10012, r3, 0x9, '\x00', r4, 0xffffffffffffffff, 0x4, 0x2, 0x0, 0x9, @void, @value, @value=r3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffc4, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ptrace$PTRACE_SETSIGMASK(0x420b, r0, 0x8, &(0x7f0000000040)={[0x2]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r6}, 0x10) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000540)=@newtaction={0x88, 0x30, 0xffffffffffffffff, 0x70bd2a, 0x0, {}, [{0x74, 0x1, [@m_bpf={0x70, 0x1, 0x0, 0x0, {{0x8}, {0x48, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1}}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x9}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, 0x0) r9 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) dup3(r9, r8, 0x0) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r10, 0x0) 1m47.022906075s ago: executing program 0 (id=1612): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000000c0)='kmem_cache_free\x00', r1}, 0x18) (async) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) (async) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000140)={0x42}, 0x10) (async) close(r3) (async) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYRES64=r2], 0x0, 0x354, &(0x7f00000002c0)="$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") (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) 1m46.945795743s ago: executing program 0 (id=1613): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) chroot(&(0x7f0000000100)='./file0\x00') openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x6500, 0x0) r0 = socket(0x2, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f00000001c0)=[{0x30, 0x3, 0x51, 0xfffff034}, {0x6, 0x4, 0x6, 0x6}]}, 0x10) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000400)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000600)={{r1, 0x6, 0x400, 0x8, 0x400, 0x0, 0xcb, 0x0, 0x3, 0x10, 0x5, 0x5, 0x5, 0x72, 0x1}, 0x18, [0x0, 0x0, 0x0]}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x58, &(0x7f0000000f00)={[{@abort}, {@errors_remount}, {@nomblk_io_submit}, {@nogrpid}, {@norecovery}, {@minixdf}, {@nobh}]}, 0xfe, 0x7b5, &(0x7f0000000f80)="$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") ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) getpid() r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x1, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xd9, 0x0, 0x1}, 0x80, 0x0, 0x0, 0x0, 0x0, 0xf, 0x2, 0x0, 0x0, 0x0, {0x0, 0x0, 0x6}}}}]}, 0x78}}, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200", @ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x50) rmdir(0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000180)='ramfs\x00', 0x2014050, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)='./file0/../file0\x00') 1m46.417843864s ago: executing program 0 (id=1617): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xb7, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x90}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x47}, 0x48) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x41, 0x3, 0x1c0, 0x0, 0x50020000, 0x0, 0x98, 0x0, 0x128, 0x1f0, 0x1f0, 0x128, 0x1f0, 0x3, 0x0, {[{{@ip={@remote, @multicast2, 0xff, 0x0, 'syzkaller0\x00', 'vlan1\x00', {}, {}, 0x6, 0x3, 0x35}, 0x0, 0x70, 0x98, 0x0, {0x0, 0xffffffffa0028000}}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x220) lsetxattr$trusted_overlay_redirect(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x8, 0x1) 1m46.182159828s ago: executing program 0 (id=1619): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) readv(r0, &(0x7f0000000500)=[{&(0x7f0000001800)=""/154, 0x9a}], 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x70, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_EMATCHES={0x3c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{}, {0x0, 0x0, 0x1}}}, @TCF_EM_META={0x1c, 0x2, 0x0, 0x0, {{0x0, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc}, @TCA_EM_META_RVALUE={0x4}]}}]}]}]}}]}, 0x70}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffc52}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r6}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x3f, 0x40, 0x42}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000001a40), 0x1003, r7}, 0x38) 1m45.921104203s ago: executing program 34 (id=1619): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) readv(r0, &(0x7f0000000500)=[{&(0x7f0000001800)=""/154, 0x9a}], 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x70, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_EMATCHES={0x3c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{}, {0x0, 0x0, 0x1}}}, @TCF_EM_META={0x1c, 0x2, 0x0, 0x0, {{0x0, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc}, @TCA_EM_META_RVALUE={0x4}]}}]}]}]}}]}, 0x70}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffc52}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r6}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x3f, 0x40, 0x42}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000001a40), 0x1003, r7}, 0x38) 5.685823022s ago: executing program 4 (id=2249): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000000b7040000000000ac82fc3300850000000300000095000000000000005c2e665c1d526422e5ef1bdb654e2bbac2cd6e9e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010005000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r4}, 0x10) (async) syz_emit_ethernet(0x9e, &(0x7f0000003680)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @loopback={0x600, 0x1ff0000aa}, @private1}}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r5}, 0x10) (async, rerun: 64) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000200)='fdb_delete\x00', r6}, 0x18) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 5.652538825s ago: executing program 4 (id=2252): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x4000, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$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") (async) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) (async) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) (async) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0xa102, 0x0) ioctl$TIOCSBRK(r3, 0x5427) (async) sendmmsg$unix(r2, 0x0, 0x0, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000280)=@framed={{}, [@printk={@llx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="200000001000010700000000e9ffffff0a0000000c0002006e6c3830323131"], 0x20}}, 0x400c0) r6 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) (async) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) pwrite64(r7, &(0x7f0000000140)='2', 0xfdef, 0xfecc) (async) fallocate(r6, 0x10, 0x0, 0x2000402) (async) ioctl$EXT4_IOC_MOVE_EXT(r7, 0xc028660f, &(0x7f0000000040)={0xc, r6, 0x0, 0x0, 0x0, 0xfffffffffdffffff}) 5.418911878s ago: executing program 4 (id=2257): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x7e, &(0x7f0000000300)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @rand_addr, {[@timestamp_addr={0x44, 0x1c, 0x0, 0x1, 0x0, [{@multicast2}, {@remote}, {@private=0xa010102, 0xc9}]}, @ssrr={0x89, 0x23, 0x9, [@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101, @loopback, @private=0xa010100, @loopback, @remote, @loopback, @empty]}]}}}}}}}, 0x0) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000040)={0x0, 0x8, 0xf001, 0x7, 0x3442, 0x401}) 5.368085253s ago: executing program 4 (id=2259): socket(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x10) io_setup(0x3ff, &(0x7f0000000500)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000d00000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r2, &(0x7f0000000340), &(0x7f0000000500)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r4, 0x702, 0x28, 0x0, &(0x7f0000000580)="e460334470d8d400eb00c15286dd4b3547f2cbfad47001bd34d04351caf1f9a07be047c25d7670ea", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010005000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r7}, 0x10) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xe, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r9, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r10}, 0x10) r11 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r11, &(0x7f0000000380)={0xa, 0x4e22, 0xfffffffe, @empty, 0x4}, 0x1c) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) dup2(r11, r11) 5.19835895s ago: executing program 6 (id=2261): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000140), 0x1, 0x4fa, &(0x7f0000000ac0)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000950000000000000000000000000000000000000000005424f962bd4184d1b6b84fde97e9e9c3a06d093b38a1ae472c48f62d19804ba2c5c822480c723d03449de938d006e05aeb71cc6a51365f6d"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r3, 0x0, 0x408cd, 0x0) write$binfmt_elf64(r5, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000080000000500000001"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8a10ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000008c0)={{r6}, &(0x7f0000000840), &(0x7f0000000880)='%+9llu \x00'}, 0x20) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000002140)={0x20, 0x0, 0x0, {0x403, 0x0, 0x80003ff, 0xfff}}, 0x20) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004340)="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", 0x2000, &(0x7f0000003840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002440)={0x78, 0x0, 0x7, {0x7, 0x0, 0x0, {0xffffffffffffffff, 0x5, 0x101, 0x2c, 0x2, 0x0, 0xff, 0x0, 0x0, 0xc000, 0xbca4, 0x0, 0x0, 0x0, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000240)='./bus\x00', &(0x7f0000000300), 0x10, &(0x7f00000004c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000\"00000001000120000,eser\t\x00d=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',smackfshat=%+9llu \x00,\x00']) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x18) bind$tipc(0xffffffffffffffff, &(0x7f0000000400)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x0, 0x2}}, 0x10) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x10) r9 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002780)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r9, 0x0, 0x0) fchown(r8, 0x0, 0x0) futex(&(0x7f0000004000), 0x5, 0x0, 0x0, &(0x7f0000004000), 0x82020000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='rdma.current\x00', 0x275a, 0x0) unshare(0x64000600) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r10, 0xae03, 0x7a) 4.773498351s ago: executing program 7 (id=2262): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x891c, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="14002bbd7000fbdbdf2552630000"], 0x14}, 0x1, 0x0, 0x0, 0x20000814}, 0x8000) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp\x00') read$FUSE(r3, &(0x7f00000000c0)={0x2020}, 0x2020) ioctl$KVM_CAP_X86_NOTIFY_VMEXIT(r3, 0x4068aea3, &(0x7f0000000040)={0xdb, 0x0, 0xffffffffffffffcc}) 3.909907886s ago: executing program 6 (id=2264): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = accept$inet(0xffffffffffffffff, &(0x7f0000000400)={0x2, 0x0, @multicast1}, &(0x7f00000004c0)=0x10) sendto(r0, &(0x7f0000000380)="6e3d8c1741e259509705b8520aa48578", 0x10, 0x8010, &(0x7f0000000500)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e23, @multicast1}, 0x3, 0x0, 0x4}}, 0x80) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2, 0x0, 0x400}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r4 = socket$packet(0x11, 0x3, 0x300) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) sendfile(r6, r5, 0x0, 0x0) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000300)={0x0, 0x8000}, 0x4) r7 = epoll_create1(0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x9) syz_kvm_setup_cpu$x86(r9, r10, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000680)=[@text64={0x40, 0x0}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_SET_MSRS(r10, 0x4008ae89, &(0x7f0000000240)=ANY=[@ANYBLOB="0100000000000000800000c0"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000040)="66b9800000c00f32663500040000ceb800008ec801cb172e0f01c39a70a50000f2a566b9800000c00f326635001000000f30a9b9150a00000f322db2220fae4013", 0x41}], 0x1, 0x6, 0x0, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) poll(&(0x7f0000000040)=[{r7, 0x10}], 0x1, 0x8000db3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r11, &(0x7f0000000100)) shutdown(r11, 0x0) epoll_wait(r7, &(0x7f0000000000)=[{}], 0x1, 0x101) epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r11, &(0x7f0000000140)={0x2000200b}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) r12 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000180)=0x10, 0x80000) setsockopt$TIPC_GROUP_JOIN(r12, 0x10f, 0x87, &(0x7f00000001c0)={0x42, 0x3, 0x1}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000140)="b9ff03076804268cb89e14f088a847e0ffff2000000000000000ac141416e0885a049a179424", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) 3.056856989s ago: executing program 6 (id=2265): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r3}, 0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x1, 0x10000, 0x1, 0x0, 0x1, 0x40000}, 0x50) unshare(0x20040600) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0xd, 0x5, &(0x7f0000000040)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x1fffffff}]}, &(0x7f0000000380)='GPL\x00', 0x2, 0xff4, &(0x7f0000002000)=""/4084}, 0x80) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet6(0x10, 0x3, 0x0) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r6}, 0x10) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x200, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00', r8}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async) sendto$inet6(r5, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 2.973776578s ago: executing program 6 (id=2266): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) openat(0xffffffffffffff9c, 0x0, 0x103042, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000080000000000000010000009400000007ad4160850000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='netlink_extack\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r5}, 0x10) syz_emit_ethernet(0x4e, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6000000000180000fe80000000000000000000009401a4cb03b40000002cfe8000000000faaf27fbfdcb000000000000000000bb2f0100000000000004017f04"], 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x1b, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x1, 0x2, 0x0, 0x2}, 0x20) r8 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='net/protocols\x00') preadv(r10, &(0x7f0000001400)=[{&(0x7f00000015c0)=""/207, 0xcf}], 0x1, 0x10000, 0x0) setsockopt$inet_pktinfo(r10, 0x0, 0x8, &(0x7f0000000040)={r9, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101}, 0xc) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r9, @ANYBLOB="0000000003120100500012800b0001006272696467650000400002800800050001000000060027000000000008000100150008000500250000000000080004", @ANYRESOCT=r1, @ANYRES64=r9], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) 2.44573359s ago: executing program 4 (id=2269): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x80000, 0x0, 0x0, 0x41100}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$binfmt_register(0xffffff9c, &(0x7f0000003880), 0x1, 0x0) write$binfmt_register(r0, &(0x7f0000000600)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x3, 0x3a, '\\', 0x3a, '\x00\x00\x00\xbe\xefy\n\xbc\xa44{\xb0\x8e\xb0!v|\x00\x00\x00', 0x3a, './file0'}, 0x3c) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=@gettclass={0x24, 0x2a, 0x1, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0xc, 0xffff}, {0x7}, {0xfff2, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000300)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x8, 0x10000000, 0x0, 0x6, 0x80000001, 0x6, 0x0, 0x0, 0x2, 0x4}}, 0x50) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x1058, [{0xa00}, {0x0, 0x100000000000000}]}, 0xa50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0200000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000eebdf3", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001f00)={'syztnl2\x00', &(0x7f0000001e80)={'ip6gre0\x00', 0x0, 0x2f, 0xf3, 0xfb, 0x7, 0x63, @remote, @local, 0x700, 0x1, 0x7, 0xffffffff}}) bpf$PROG_LOAD(0x5, &(0x7f0000002040)={0x0, 0xc, &(0x7f0000001fc0)=ANY=[@ANYBLOB="18000030839375c43eff440000000000000000000000000018110000", @ANYRES32=r4, @ANYRESOCT=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r5, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="101000000400000004000000020000000000000017f0b21ce4b9f450317ebf3b2ebf2aaaf145a2227415e8fd5e20c1089bfc7f8ddf6d1211c249e0e1a22957eb17453683c662f02784b2b5117e95b330f37c9bf9d032012333b1641ee327e089ebeef11d7fed548f", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x10, 0x1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r7}, &(0x7f00000004c0), &(0x7f0000000540)=r6}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r4}, &(0x7f0000001280), &(0x7f00000012c0)}, 0x20) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000001440)={'vcan0\x00'}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001bc0)={0xffffffffffffffff, 0x20, &(0x7f0000001b80)={&(0x7f0000001700)=""/104, 0x68, 0x0, &(0x7f0000001c80)=""/180, 0xb4}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x19, 0x4, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='br_fdb_add\x00', r9}, 0x10) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001c000100000000000000000007000000", @ANYRES32=r12, @ANYBLOB="4000aa000a0002"], 0x28}, 0x1, 0x0, 0x0, 0x40890}, 0x0) 2.44180559s ago: executing program 7 (id=2270): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000001100)=ANY=[@ANYBLOB="18000000000000000000000000000000b70800000c000000638af8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018240000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000008000000850000009e00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002340), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r2, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000002140)={0x50, 0x0, r3, {0x7, 0x27, 0x0, 0x14a5014, 0x0, 0x400, 0x4}}, 0x50) read$FUSE(r2, &(0x7f000000b040)={0x2020}, 0x2020) syz_fuse_handle_req(r2, &(0x7f00000027c0)="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", 0x2000, &(0x7f0000004c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002600)={0x90, 0x0, 0x3, {0x1, 0x0, 0xfe, 0x9, 0x7, 0x2, {0x4, 0x2, 0x0, 0xffff, 0x2, 0x3, 0x352cb80, 0xfffffff4, 0x7fff, 0x2000, 0x140d, r4, r5, 0x7fffffff, 0xff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000002780)='./file0/file0\x00', 0x0, 0x1000) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={r1, 0x0, 0x0}, 0x10) 2.43972992s ago: executing program 1 (id=2271): syz_io_uring_setup(0x4f0e, &(0x7f0000000480)={0x0, 0xfffffffc, 0x0, 0xfffffffd}, &(0x7f0000000080)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x40, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r5, 0x80049367, &(0x7f0000002100)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair(0x11, 0x2, 0x2, &(0x7f0000000000)={0x0, 0x0}) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000240)=0x1) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r7, 0x4004743d, 0x110e22fff6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x12615, 0x2021}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'}) 2.401320944s ago: executing program 4 (id=2273): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="a1ab00000000000000003200000008001781"], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) fstat(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_GETINFO(0xffffffff80000502, &(0x7f0000000080)=@md0, r5, &(0x7f00000001c0)) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000004200)={{0x12, 0x1, 0x0, 0xe2, 0x79, 0x3b, 0x10, 0x5d1, 0x2001, 0x900, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4d, 0x2f, 0x9c}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@block_validity}, {}, {@sysvgroups}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x593, &(0x7f0000000c00)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xeb, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r7}, 0x10) setitimer(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3014850, &(0x7f0000000240), 0x3, 0x4e6, &(0x7f0000001240)="$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") r8 = open(&(0x7f0000000040)='./file1\x00', 0x0, 0x1d9) r9 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r9, 0x89f2, &(0x7f0000000000)={'gre0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x2, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x29, 0x0, @empty, @empty}}}}) ioctl$FS_IOC_FSSETXATTR(r8, 0x401c5820, &(0x7f00000003c0)={0x80d8}) syz_usb_control_io$cdc_ecm(r6, 0x0, &(0x7f0000000280)={0x1c, &(0x7f0000000140)=ANY=[@ANYBLOB="401807000000d508ffffa0b97d"], 0x0, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) 2.253827008s ago: executing program 6 (id=2274): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000060000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xfde1, 0x300, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x4d, 0x0, @wg=@data}}}}}, 0x0) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x400000, &(0x7f0000005880)={[{@nodiscard}, {@nocheckpoint_merge}, {@discard}, {@resuid}, {@user_xattr}, {@extent_cache}, {@discard}, {@noacl}, {@fsync_mode_posix}, {@data_flush}, {@noextent_cache}, {@two_active_logs}, {@fault_type={'fault_type', 0x3d, 0xfffffe}}]}, 0xfd, 0x550d, &(0x7f0000005980)="$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") 2.000730004s ago: executing program 6 (id=2275): write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000003c0)={'syz0\x00', {0x9, 0x0, 0x1, 0x400}, 0x36, [0xfffffffe, 0x0, 0x0, 0x0, 0x1, 0xfffffffc, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0xa, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x9f1, 0x0, 0x0, 0x4, 0x6, 0x800, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x6, 0x0, 0x58, 0x0, 0x9, 0x0, 0xffffbffc, 0xfffffff8, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8, 0x6], [0x2, 0x1, 0x0, 0xffffbffd, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff57, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x400, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1, 0x4000000, 0x0, 0x40000000, 0x0, 0x0, 0x55], [0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0xbd8f, 0x0, 0x4, 0x0, 0xfffffffd, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffffc, 0x10000, 0x0, 0x0, 0x10001, 0x810, 0x80000000, 0x0, 0x0, 0x800040, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0x1, 0x0, 0xc9d2, 0x0, 0x0, 0x0, 0x0, 0x1c00000, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x1, 0x0, 0x0, 0x1, 0x4, 0x2000000], [0x4, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x3, 0x0, 0xb1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1000, 0xfffffffc, 0x5, 0x0, 0x0, 0x0, 0x80, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x8f4]}, 0x45c) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7f, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="020000000400000008000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r4}, 0x18) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0xfdff) r5 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$TIPC_NL_NAME_TABLE_GET(r5, &(0x7f0000000a40)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB='0\x00E\x00', @ANYRES16=0x0, @ANYBLOB="00032dbd7000fcdbdf25100000001c000980080002000200000008000200020000000800020006000000"], 0x30}, 0x1, 0x0, 0x0, 0x880}, 0x20000801) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r6, 0x5453, 0x0) 1.63353252s ago: executing program 7 (id=2276): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x2000) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="680000001000ffff25bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="172000002120000040001280"], 0x68}, 0x1, 0x0, 0x0, 0x1}, 0xc000002) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f000000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x8080) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000080), &(0x7f0000000180), 0x2, 0x1) ioctl$UFFDIO_REGISTER(r2, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) 1.493728733s ago: executing program 1 (id=2277): r0 = socket$inet_udplite(0x2, 0x2, 0x88) io_uring_setup(0x39e1, &(0x7f0000000bc0)={0x0, 0x49fd, 0x12, 0x400, 0x320}) close_range(r0, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv(r1, &(0x7f0000000080)=[{&(0x7f0000000900)=""/257, 0x101}, {&(0x7f0000001d80)=""/164, 0xa4}, {&(0x7f00000002c0)=""/243, 0xfffffe24}], 0x3, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000001e00100000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000fcffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000010000000800000008"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r4, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000300)=r5}, 0x20) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wg2\x00', 0x0}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r8, 0x6, &(0x7f0000000000)={0x0, 0x2, 0x8}) fcntl$lock(r8, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1c, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000600000010000000e7000000feffffff9500"/40], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, &(0x7f0000000380), 0x41000, 0x23, '\x00', r7, 0x0, r8, 0x8, &(0x7f0000000400)={0x0, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x13ba0, r2, 0x4, &(0x7f0000000440)=[r3, r6, r4, r4, r3, r4, r4, r4], &(0x7f0000000480)=[{0x3, 0x4, 0x9}, {0x2, 0x5, 0xe, 0xa}, {0x2, 0x1, 0x1, 0x5}, {0x5, 0x5, 0xb, 0x9}], 0x10, 0xffff0000}, 0x94) syz_emit_ethernet(0x3e, &(0x7f0000000300)=ANY=[@ANYBLOB="0180c20000002059249b379086dd60109114d008"], 0x0) poll(&(0x7f0000000380)=[{r8, 0xa210}, {r8, 0x9608}], 0x2, 0x9) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x818010, &(0x7f0000000300)={[{@minixdf}, {@grpjquota}]}, 0x1, 0x72d, &(0x7f00000014c0)="$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") 1.357775846s ago: executing program 7 (id=2279): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xb, &(0x7f0000000800)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x7, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) socket$key(0xf, 0x3, 0x2) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fe8000000000000000000000000000bbfc010000000000000000000000000001000107144e2300050000000062000000b5aed95cd055ff34d2b97b2dd1c7c1e186ac3face9bfffed9bc35088e344a89e1d2552de4ce07e258288d70ca64e185a8bb44e17fc7c0a93ea34258089ff5dab5b0a3c4a8e37562f3083780867e2edd6316762774ca7a45448b54113eaae3e97031e4f883ffb528dca40638e0bc8becb2542a030c5d5ea0260a3624c01bb228e02f2", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c0000007f000001000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff070000002abd7000043500000a0001002000000000000000480003006465666c61746500"/240], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000018"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001c000100000000000000000007000000", @ANYRES32=r5, @ANYBLOB="4000aa000a0002"], 0x28}}, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0xffe1, 0x0, 0x0, 0x0, '\x00', r5, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x18) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r8 = socket$key(0xf, 0x3, 0x2) readv(r8, &(0x7f0000001700)=[{&(0x7f00000013c0)=""/69, 0x45}], 0x1) sendmsg$key(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x24000000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)={0x28, r7, 0x4, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x6, 0x40}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20044000}, 0x400c000) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, 0x0}) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001a00010029bd70000000000002202000000000000020000008001ec0"], 0x24}, 0x1, 0x0, 0x0, 0x24004005}, 0x0) syz_open_procfs(r10, &(0x7f00000003c0)='net/dev_mcast\x00') 1.355925097s ago: executing program 3 (id=2280): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_emit_ethernet(0x4a, &(0x7f0000000a80)={@local, @local, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev}, "95f326cdcb4700348fb30fb073259ba1d894c8782936a22241940351f63a5d49f6b05a95d6c75bec"}}}}, 0x0) r0 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000000080)='bpf_lsm_ib_endport_manage_subnet\x00') r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000240)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) time(0x0) 1.31831599s ago: executing program 3 (id=2281): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)={0x1c, r1, 0xfc5, 0x0, 0x0, {{0x11}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 1.257537046s ago: executing program 1 (id=2282): signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80000) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x7) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0xb}, 0x38) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x80, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x100e}, @CTA_SEQ_ADJ_REPLY={0x14, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0xe6ba7615268e7f7}]}]}, 0x80}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000540)='inet_sock_set_state\x00', r4}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0x8, 0xc}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) removexattr(0x0, 0x0) write$binfmt_register(r6, &(0x7f0000000000)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x7, 0x3a, ')', 0x3a, '', 0x3a, './file0', 0x3a, [0x46]}, 0x29) 1.251111467s ago: executing program 3 (id=2283): r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) write$FUSE_NOTIFY_RESEND(r0, &(0x7f0000000040)={0x14}, 0x14) (async) r1 = getpid() (async) read$FUSE(r0, &(0x7f0000000080)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) (async) r4 = epoll_create1(0x80000) kcmp$KCMP_EPOLL_TFD(r1, r3, 0x7, r0, &(0x7f00000020c0)={r4, r0, 0x7}) (async) r5 = syz_clone3(&(0x7f0000002340)={0x2000, &(0x7f0000002100), &(0x7f0000002140)=0x0, &(0x7f0000002180)=0x0, {0x3a}, &(0x7f00000021c0)=""/50, 0x32, &(0x7f0000002200)=""/225, &(0x7f0000002300)=[r3], 0x1, {r0}}, 0x58) write$cgroup_pid(r0, &(0x7f00000023c0)=r7, 0x12) (async) eventfd2(0x1, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = socket$can_raw(0x1d, 0x3, 0x1) listen(r9, 0x4) (async, rerun: 32) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f00000024c0)={&(0x7f0000002400)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002480)={&(0x7f0000002440)={0x24, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {{}, {}, {0x8, 0x2, 0xa}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0xc045) (rerun: 32) r10 = syz_open_procfs(r5, &(0x7f0000002500)='net/ip_vs_stats_percpu\x00') prctl$PR_SET_NAME(0xf, &(0x7f0000002540)='^\x16,:&\x00') write$FUSE_OPEN(r10, &(0x7f0000002580)={0x20, 0x0, r2}, 0x20) (async) socket$nl_netfilter(0x10, 0x3, 0xc) syz_clone3(&(0x7f00000037c0)={0x10000, &(0x7f00000025c0)=0xffffffffffffffff, &(0x7f0000002600)=0x0, &(0x7f0000002640), {0x27}, &(0x7f0000002680)=""/4096, 0x1000, &(0x7f0000003680)=""/194, &(0x7f0000003780)=[r1, r5, r6], 0x3, {r10}}, 0x58) kcmp(r6, r12, 0x2, r10, r8) (async, rerun: 64) ioctl$BTRFS_IOC_RM_DEV(r0, 0x5000940b, &(0x7f0000003840)={{r11}, "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"}) (async, rerun: 64) connect$vsock_stream(r0, &(0x7f0000004840)={0x28, 0x0, 0xffffffff, @local}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000004880)={'vxcan0\x00', 0x0}) setsockopt$inet6_mreq(r10, 0x29, 0x1b, &(0x7f00000048c0)={@private0={0xfc, 0x0, '\x00', 0x1}, r13}, 0x14) (async, rerun: 64) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r10, 0x8982, &(0x7f0000004900)={0x6, 'wlan0\x00', {0x7fff}, 0xa0}) (async, rerun: 64) readv(r9, &(0x7f0000004980)=[{&(0x7f0000004940)=""/7, 0x7}], 0x1) (async, rerun: 32) r14 = syz_genetlink_get_family_id$batadv(&(0x7f0000004a00), r0) (rerun: 32) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000004ac0)={&(0x7f00000049c0)={0x10, 0x0, 0x0, 0x45008010}, 0xc, &(0x7f0000004a80)={&(0x7f0000004a40)={0x1c, r14, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xf4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40004000}, 0x4000000) (async) r15 = epoll_create1(0x0) epoll_pwait(r15, &(0x7f0000004b00)=[{}, {}, {}, {}, {}], 0x5, 0x6, &(0x7f0000004b40)={[0x1]}, 0x8) (async, rerun: 64) futex(&(0x7f0000004b80)=0x2, 0x1, 0x0, &(0x7f0000004bc0)={0x0, 0x3938700}, &(0x7f0000004c00)=0x1, 0x1) (rerun: 64) 1.113765241s ago: executing program 3 (id=2284): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) poll(&(0x7f0000000380)=[{r0, 0xc000}], 0x1, 0x80) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000c00)={0x4, 0x49}, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0}, 0x90) sendmsg$802154_dgram(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x24, @none={0x0, 0x2}}, 0x14, &(0x7f0000000200)={&(0x7f0000000180)="40647c014d4079b26d95750f7b457f51506d67d5548b1b9d9d1ac6d1830c7c56d38f27f5fef2138502353192d19432528b6c0cc881fa8b7e4600ad2ffa94abfac1af40f8c6affa70e4", 0x49}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r2}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc}, 0x48) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) bind$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) (async) poll(&(0x7f0000000380)=[{r0, 0xc000}], 0x1, 0x80) (async) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000c00)={0x4, 0x49}, 0x2) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0}, 0x90) (async) sendmsg$802154_dgram(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x24, @none={0x0, 0x2}}, 0x14, &(0x7f0000000200)={&(0x7f0000000180)="40647c014d4079b26d95750f7b457f51506d67d5548b1b9d9d1ac6d1830c7c56d38f27f5fef2138502353192d19432528b6c0cc881fa8b7e4600ad2ffa94abfac1af40f8c6affa70e4", 0x49}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x50) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r2}, 0x18) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc}, 0x48) (async) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (async) 1.107766121s ago: executing program 7 (id=2285): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300020a0000000000000080000000030006000000000002004e20e0000002000000000000000002000100000000000022060000000000030005003c20000002004e2000"/80], 0x50}, 0x1, 0x7}, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000140)={[{@grpid}, {@user_xattr}]}, 0xff, 0x48f, &(0x7f0000000b80)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() keyctl$set_reqkey_keyring(0xe, 0x6) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1e, &(0x7f0000000340)=0xcb6f, 0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000000)={0x0, 'bond_slave_0\x00', {0xfffffffe}, 0xffca}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xa, &(0x7f0000000480)=0x47a, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r5, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000340), 0x0, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9b, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x6f, r7, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}}}, 0xfd53}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000040)='./file1\x00', 0x1018e58, &(0x7f00000000c0)={[{@journal_dev={'journal_dev', 0x3d, 0x10001}}, {@noload}], [{@smackfsdef={'smackfsdef', 0x3d, 'ext3\x00'}}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@dont_measure}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}]}, 0x6, 0x601, &(0x7f0000000c00)="$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") 1.027973169s ago: executing program 1 (id=2286): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x6, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioperm(0x0, 0x2, 0x2) ioperm(0x0, 0x9d, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x18) syz_clone(0x44209400, 0x0, 0x0, &(0x7f0000000180), 0x0, 0x0) 844.660266ms ago: executing program 3 (id=2287): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1600000000000000040000000500"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) ioctl$FIGETBSZ(r2, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0xd2) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r7}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000c"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x26, 0xd, &(0x7f00000003c0)=ANY=[@ANYBLOB="9c12129e5afab74bba02a60550781218009e01000000", @ANYRES64=r5, @ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r8, &(0x7f0000000040)=0x1c9, 0x12) rt_sigqueueinfo(0x0, 0x11, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r9, 0x6, 0x17, &(0x7f00000000c0)=0x10001, 0x4) bind$inet(r9, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r9, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) 816.985549ms ago: executing program 1 (id=2288): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00', r0}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x1, 0x28}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7030000009c7d00850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000300)='timer_start\x00', r2}, 0x18) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000044, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@nodioread_nolock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@nouid32}, {@nobh}, {@jqfmt_vfsv1}, {@nouid32}, {@dioread_nolock}]}, 0x1, 0x55e, &(0x7f0000001bc0)="$eJzs3d9rW+UbAPDnpM1+f7/rYAwVkcIunMyla+uPCV7MS9HhQO9naM/KaLqMJh1rHbhduBtvZAgiDsR7vfdKhv+Af8VAB0NG0QtvKic9abs1adIuWzrz+cDZ3jfnJO95cs7z9n1zTkgAA2s0+6cQ8WJEfJVEHI6IJF83HPnK0dXtlh9en8qWJFZWPv4zaWyX1Zuv1XzewbzyQkT8+kXEycLmdmuLS7PlSiWdz+tj9bkrY7XFpVOX5soz6Ux6eWJy8sybkxPvvP1Wz2J97fzf33509/0zXx5f/uan+0duJ3E2DuXrNsbxBG5srIzGaP6eFOPsYxuOr/7XizZ3haTfO8CODOV5XoysDzgcQ3nWA/99n0fECjCgEvkPA6o5DmjO7Xs0D35uPHhvdQK0Of7h1c9GYl9jbnRgOXlkZpTNd0d60H7Wxs9/3LmdLdG7zyEAOrpxMyJODw9v7v+SvP/budNdbPN4G/o/eHbuZuOf11uNfwpr459oMf452CJ3d6Jz/hfu96CZtrLx37stx79rF61GhvLa/xpjvmJy8VIlzfq2/0fEiSjuzerjW7RxZvneSrt1G8d/2ZK13xwL5vtxf3jvo8+ZLtfLTxLzRg9uRrzUcvybrB3/pMXxz96P8122cSy980q7dZ3jf7pWfoh4teXxX7+ilWx9fXKscT6MNc+Kzf66dey3du33O/7s+B/YOv6RZOP12tr22/h+3z9pu3WPxB/dn/97kk8a5T35Y9fK9fr8eMSe5MPNj0+sP7dZb26fxX/i+Nb93/r5/8va6+yPiE+7jP/W0R9f3tdN/H06/tPbOv7bL9z74LPv2rXfXf/3RqN0In+km/6vw34VY8dnMwAAAAAAAOxehYg4FEmhtFYuFEql1fs7jsaBQqVaq5+8WF24PB2N78qORLHQvNJ9eMP9EOP5/bDN+sRj9cmIOBIRXw/tb9RLU9XKdL+DBwAAAAAAAAAAAAAAAAAAgF3iYJvv/2d+H+r33gFPnZ/8hsHVMf978UtPwK7k7z8MLvkPg0v+w+CS/zC45D8MLvkPg0v+w+CS/wAAAAAAAAAAAAAAAAAAAAAAAAAAANBT58+dy5aV5YfXp7L69NXFhdnq1VPTaW22NLcwVZqqzl8pzVSrM5W0NFWd6/R6lWr1yvhELFwbq6e1+lhtcenCXHXhcv3CpbnyTHohLT6TqAAAAAAAAAAAAAAAAAAAAOD5Ultcmi1XKum8gsKOCsO7YzcUelzod88EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOv+DQAA//8Kozfs") r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0xf0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r6, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) write(r5, &(0x7f0000001700)="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", 0xfffffed6) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x149241, 0x15a) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) dup3(r7, r4, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00', r0}, 0x18) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x1, 0x28}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7030000009c7d00850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000300)='timer_start\x00', r2}, 0x18) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000044, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@nodioread_nolock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@nouid32}, {@nobh}, {@jqfmt_vfsv1}, {@nouid32}, {@dioread_nolock}]}, 0x1, 0x55e, &(0x7f0000001bc0)="$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") (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0xf0) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) (async) pwrite64(r6, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) (async) write(r5, &(0x7f0000001700)="7e7226ce9b4d692092ffa2b579f0ff5793012c9738a9be19ff3e69a683a0a1bbace0dc3853c661a4e1019e7a1f3af60350126cb99c5f3ace6f5616c00e0fb30b2832398fed6233b8632a001dd0a846cbb8a5d77e3208db486b055edb6ae7917f07ccf4b6811be57047aa17799359e733ec395940d1feb7a9ec2ddadb1ff610706e692e6ac97aaae883e5522f8e86c2403aec0ff8dee1cba5d40f0969470b9a2a95f6f22f9d4250809400ea8403a654094800088dc0b7d3927a76d459e7ba6b588dc122d342047f561e9f5e669da8b1047b56cb2d98cb46b38defeda69888de2d62e7938bdbaada9879313d815294b3d8c753ca30d5c29aae77c981d120375cca5d1e53a9622baed9fd1802e07a72a2a106f594d6e4e62f8b761c0c54adf3f465c096acc07c9e5b72ac30a2d0ea3af63e684abc4d11c0530c1233922e3e0846129038a9514132662b1fce257c7828e33158b139193fd4f9aeedd6ab4f40f1f9b474d512ab80711f8c7604b310fce608afba3d018590a994af", 0xfffffed6) (async) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x149241, 0x15a) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, 0x0) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) (async) dup3(r7, r4, 0x0) (async) 181.645392ms ago: executing program 7 (id=2289): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0xe, @local, 0x7}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x50) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00'}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[], 0x48) sync_file_range(0xffffffffffffffff, 0x6, 0x6, 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800"/15], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r3}, 0x18) ftruncate(0xffffffffffffffff, 0x2007ffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x800000009) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c615b030629a10500"/18, @ANYRES32=0x1, @ANYBLOB='\r\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYRES8, @ANYRES32=0x0, @ANYRES32=r3], 0x50) r5 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r4) syz_clone3(&(0x7f00000004c0)={0x4100, 0x0, 0x0, 0x0, {0x8}, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0x0], 0x1}, 0x58) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000500)=0x1) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000380)={@mcast1, 0x0}, &(0x7f00000003c0)=0x14) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000400)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0], 0x0, 0x96, &(0x7f0000000500)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000540), &(0x7f0000000580), 0x8, 0x48, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xf97a41036b9776f1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1805000000000000000000000000000018110000", @ANYRES32=r1, @ANYRES8], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r8}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) 19.952808ms ago: executing program 3 (id=2290): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48284b70043dc6124d877142a48448b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d4023f210fa34b63a715a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f01000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb796ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab04000000ffe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890decace0200f404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef29cd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf0100483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6c354463d7d0917fc80e5009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab4000000000000000028df75cf43f8ecc8d37b126602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89fa516dab183ee65744fb8fc4f9ce2242e0f00000000010000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f49198e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bde54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85eff010000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1099e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677ec97c5c568a89d6e36b165c391339878b699644c96bd6ea589765ed2a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac4741201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6d00000000000000000000008f6555f3b7d5021dfc8eb504f1e4fef716d60f0d50b03fc014fd3dff46f56750f0ba4f1b9f7de5c17e7d1f18522897edab8e9e76b667ec6b01908400f55e16f0cfbf026be5f5acc681053f697d62b3545aec4606e190216c22c1d8807b6c43f0f0a4b53619fe5c9412821c3816194a5e29cf12cc7a197b5bdafb096d2d7f6be483814c92ef29c3a21c169794c7de3b4c706f4de5f4b93c831944c7b66fa49f317aa22dbc211e19f031c4f8bee14ecd5eb061a052044adc4dd1b63a1500a9c0e09dbba23f2726a55975efb4519d864d984dcb3a1dcafa1124a6b004029a706478df3be2438d2e35e6ca674dc190143a0b6f7db3408c0c08011e5d8f54711a0bd410ab53a15b1596cb77d2b58df2d8d8"], &(0x7f0000000100)='GPL\x00'}, 0x41) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0}, 0x90) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1000040, &(0x7f00000002c0)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@noload}, {@orlov}]}, 0x1, 0x599, &(0x7f0000001280)="$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") pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x83) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000380)='hrtimer_start\x00', r2}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x5, 0x0, 0x0, {}, {0x77359400}, {}, 0x2, @can={{}, 0x0, 0x0, 0x0, 0x0, "3fd31340e92c4bb8"}}, 0x48}, 0x300}, 0x0) sendmsg$can_bcm(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000005900)={0x5, 0x1, 0x0, {0x0, 0x2710}, {}, {}, 0x2, @can={{}, 0x0, 0x0, 0x0, 0x0, "3fd313bc00"}}, 0x48}, 0x300}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x0, 0x4e}, 0x28) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) eventfd2(0x2, 0x801) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f0000000140)={[{@noload}]}, 0xea, 0x472, &(0x7f0000000f40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) 0s ago: executing program 1 (id=2291): r0 = syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000400018105e04da073d80dee50001090224000100000000090400000903000000092100f7ff0022220009058103"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='signal_deliver\x00', r2}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r3, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r4, 0x2, 0x70bd2c, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x5}, 0x2f) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000000)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7060000050000008500000005000000bf0900000000000035090100000000009500000000000000b7020000000000007b9af8ff0000000065090000000000007baaf0ff00000000ad9900000000000007080000f8ff0700000000000000000007040000f0ffffffc70200000800000018260000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00222200000096010006010003000000002a90a01700000000b3813e25030bdde84050b3e7"], 0x0}, 0x0) kernel console output (not intermixed with test programs): x7fc00000 [ 250.373971][ T30] audit: type=1326 audit(1761490704.546:2101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4297 comm="syz.0.1024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f81e8dc1fc9 code=0x7fc00000 [ 250.457760][ T30] audit: type=1400 audit(1761490704.836:2102): avc: denied { create } for pid=4330 comm="syz.1.1033" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 250.480431][ T4332] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1033'. [ 250.497860][ T4332] geneve0: tun_chr_ioctl cmd 1074025677 [ 250.503500][ T4332] geneve0: linktype set to 804 [ 250.536267][ T30] audit: type=1400 audit(1761490704.856:2103): avc: denied { write } for pid=4330 comm="syz.1.1033" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 250.677963][ T4328] loop0: detected capacity change from 0 to 40427 [ 250.709723][ T4328] F2FS-fs (loop0): invalid crc value [ 250.770577][ T4328] F2FS-fs (loop0): Found nat_bits in checkpoint [ 250.887992][ T4328] F2FS-fs (loop0): Start checkpoint disabled! [ 252.467131][ T4328] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 252.477487][ T30] audit: type=1400 audit(1761490706.846:2104): avc: denied { read write } for pid=4348 comm="syz.1.1038" name="fuse" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 252.588585][ T4351] loop6: detected capacity change from 0 to 512 [ 252.710109][ T4351] EXT4-fs (loop6): orphan cleanup on readonly fs [ 252.719780][ T4351] Quota error (device loop6): find_block_dqentry: Quota for id 0 referenced but not present [ 252.730362][ T4351] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0 [ 252.739955][ T4351] EXT4-fs error (device loop6): ext4_acquire_dquot:6200: comm syz.6.1037: Failed to acquire dquot type 1 [ 252.754693][ T4351] EXT4-fs (loop6): 1 truncate cleaned up [ 252.760916][ T4351] EXT4-fs (loop6): mounted filesystem without journal. Opts: noinit_itable,,errors=continue. Quota mode: writeback. [ 252.843636][ T4351] EXT4-fs error (device loop6): ext4_lookup:1862: inode #2: comm syz.6.1037: deleted inode referenced: 12 [ 252.888571][ T4349] fuse: Invalid rootmode [ 253.210874][ T30] audit: type=1400 audit(1761490707.056:2105): avc: denied { open } for pid=4348 comm="syz.1.1038" path="/dev/fuse" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 253.613711][ T4340] loop4: detected capacity change from 0 to 40427 [ 253.830893][ T4340] F2FS-fs (loop4): Unrecognized mount option "w2int_mode=user-based" or missing value [ 253.898373][ T4366] xt_CT: You must specify a L4 protocol and not use inversions on it [ 254.692654][ T4397] loop0: detected capacity change from 0 to 256 [ 254.724456][ T4399] syz.3.1049[4399] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 254.724563][ T4399] syz.3.1049[4399] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 254.749067][ T4397] SELinux: security_context_str_to_sid(unconfined_u) failed for (dev ?, type ?) errno=-22 [ 254.771158][ T4397] exfat: Unknown parameter 'fsmagic' [ 255.685590][ T4402] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1052'. [ 312.444570][ T4418] tipc: Started in network mode [ 312.458510][ T4418] tipc: Node identity ca6e8cc31ac8, cluster identity 4711 [ 312.475892][ T4418] tipc: Enabled bearer , priority 0 [ 312.496861][ T30] kauditd_printk_skb: 69 callbacks suppressed [ 312.496877][ T30] audit: type=1400 audit(1761490766.866:2175): avc: denied { ioctl } for pid=4417 comm="syz.4.1057" path="socket:[29511]" dev="sockfs" ino=29511 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 312.547806][ T4421] loop0: detected capacity change from 0 to 256 [ 312.577910][ T4421] exfat: Deprecated parameter 'utf8' [ 312.583286][ T4421] exfat: Deprecated parameter 'namecase' [ 312.617894][ T4422] device syzkaller0 entered promiscuous mode [ 312.640541][ T4421] exfat: Deprecated parameter 'namecase' [ 312.650564][ T4421] exfat: Deprecated parameter 'utf8' [ 312.693432][ T4417] tipc: Resetting bearer [ 312.703980][ T4424] loop6: detected capacity change from 0 to 256 [ 312.713958][ T4421] exFAT-fs (loop0): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffad0, utbl_chksum : 0xe619d30d) [ 312.743616][ T4406] loop1: detected capacity change from 0 to 40427 [ 312.743942][ T4417] tipc: Disabling bearer [ 312.848933][ T4424] exfat: Deprecated parameter 'utf8' [ 312.854309][ T4424] exfat: Deprecated parameter 'namecase' [ 312.862857][ T4424] exfat: Deprecated parameter 'namecase' [ 312.868841][ T4424] exfat: Deprecated parameter 'utf8' [ 312.897344][ T4406] F2FS-fs (loop1): fault_injection options not supported [ 313.948912][ T4424] exFAT-fs (loop6): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffad0, utbl_chksum : 0xe619d30d) [ 313.961646][ T4406] F2FS-fs (loop1): invalid crc value [ 314.006134][ T4406] F2FS-fs (loop1): Found nat_bits in checkpoint [ 315.870780][ T4444] loop4: detected capacity change from 0 to 1024 [ 317.839862][ T4444] EXT4-fs (loop4): Ignoring removed oldalloc option [ 317.860690][ T4444] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv1,nombcache,barrier,delalloc,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,usrquota,noauto_da_alloc,oldalloc,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 318.714639][ T4452] veth1_to_bridge: renamed from veth0_vlan [ 319.277488][ T4444] EXT4-fs error (device loop4): ext4_read_inline_dir:1622: inode #12: block 7: comm syz.4.1063: path /169/file1/file0: bad entry in directory: inode out of bounds - offset=24, inode=1073741837, rec_len=16, size=80 fake=0 [ 319.307751][ T30] audit: type=1400 audit(1761490773.646:2176): avc: denied { create } for pid=4443 comm="syz.4.1063" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 319.503259][ T30] audit: type=1400 audit(1761490773.646:2177): avc: denied { connect } for pid=4443 comm="syz.4.1063" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 319.664665][ T30] audit: type=1400 audit(1761490773.646:2178): avc: denied { write } for pid=4443 comm="syz.4.1063" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 319.747603][ T1580] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 319.855116][ T4461] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1064'. [ 320.000849][ T1580] usb 1-1: Using ep0 maxpacket: 32 [ 320.061593][ T4468] loop4: detected capacity change from 0 to 4096 [ 320.084154][ T4468] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 320.148232][ T30] audit: type=1400 audit(1761490774.496:2179): avc: denied { write } for pid=4467 comm="syz.4.1068" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 320.170730][ T1580] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 320.179421][ T1580] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 320.190836][ T1580] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 320.205056][ T30] audit: type=1400 audit(1761490774.496:2180): avc: denied { open } for pid=4467 comm="syz.4.1068" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 320.227715][ T1580] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 320.237884][ T1580] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 320.248054][ T30] audit: type=1400 audit(1761490774.506:2181): avc: denied { read } for pid=4467 comm="syz.4.1068" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 320.270720][ T1580] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 14385, setting to 1024 [ 320.282320][ T1580] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 320.292801][ T30] audit: type=1400 audit(1761490774.576:2182): avc: denied { ioctl } for pid=4467 comm="syz.4.1068" path="/171/file3/file1" dev="loop4" ino=15 ioctlcmd=0xaea0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 320.319196][ T1580] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 320.337092][ T1580] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 320.346688][ T1580] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.438906][ T1580] usb 1-1: config 0 descriptor?? [ 320.457716][ T4456] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 321.883409][ T30] audit: type=1400 audit(1761490774.956:2183): avc: denied { name_bind } for pid=4473 comm="syz.3.1069" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 322.062352][ T4477] syz.6.1071[4477] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 322.062461][ T4477] syz.6.1071[4477] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 322.118654][ T1580] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 11 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 322.211668][ T30] audit: type=1326 audit(1761490776.586:2184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4490 comm="syz.1.1075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4785792fc9 code=0x7ffc0000 [ 322.224465][ T4491] UDC core: couldn't find an available UDC or it's busy: -16 [ 322.235453][ T30] audit: type=1326 audit(1761490776.586:2185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4490 comm="syz.1.1075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4785792fc9 code=0x7ffc0000 [ 322.276621][ T4491] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 322.303027][ T4491] input: syz1 as /devices/virtual/input/input8 [ 322.337612][ C1] usblp0: nonzero read bulk status received: -71 [ 322.387630][ T4456] usblp0: error -71 reading from printer [ 322.407591][ C0] usblp0: nonzero read bulk status received: -71 [ 323.317851][ T4506] UDC core: couldn't find an available UDC or it's busy: -16 [ 323.325310][ T4506] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 323.770658][ T6] usb 1-1: USB disconnect, device number 11 [ 323.790218][ T6] usblp0: removed [ 323.878340][ T4512] overlayfs: failed to resolve './file1': -2 [ 324.257593][ T1771] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 324.587718][ T1771] usb 5-1: not running at top speed; connect to a high speed hub [ 324.677904][ T1771] usb 5-1: config 1 interface 0 has no altsetting 0 [ 324.752572][ T4530] incfs: Backing dir is not set, filesystem can't be mounted. [ 324.768202][ T30] kauditd_printk_skb: 106 callbacks suppressed [ 324.768218][ T30] audit: type=1400 audit(1761490779.146:2292): avc: denied { write } for pid=4531 comm="syz.1.1088" name="001" dev="devtmpfs" ino=181 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 324.800793][ T4530] incfs: mount failed -2 [ 324.847942][ T1771] usb 5-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.40 [ 324.857694][ T1771] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.865873][ T1771] usb 5-1: Product: syz [ 324.870640][ T1771] usb 5-1: Manufacturer: syz [ 324.884849][ T1771] usb 5-1: SerialNumber: syz [ 324.933439][ T30] audit: type=1400 audit(1761490779.306:2293): avc: denied { create } for pid=4537 comm="syz.0.1090" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 325.007708][ T30] audit: type=1400 audit(1761490779.306:2294): avc: denied { bind } for pid=4537 comm="syz.0.1090" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 325.028995][ T30] audit: type=1400 audit(1761490779.306:2295): avc: denied { node_bind } for pid=4537 comm="syz.0.1090" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 325.049392][ T30] audit: type=1400 audit(1761490779.336:2296): avc: denied { read } for pid=4537 comm="syz.0.1090" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 325.072169][ T30] audit: type=1400 audit(1761490779.336:2297): avc: denied { open } for pid=4537 comm="syz.0.1090" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 325.158146][ T30] audit: type=1400 audit(1761490779.526:2298): avc: denied { ioctl } for pid=4537 comm="syz.0.1090" path="/dev/binderfs/binder0" dev="binder" ino=13 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 325.946959][ T30] audit: type=1326 audit(1761490780.316:2299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4548 comm="syz.6.1093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb085c09fc9 code=0x7ffc0000 [ 325.980492][ T4552] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1092'. [ 325.984261][ T30] audit: type=1326 audit(1761490780.316:2300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4548 comm="syz.6.1093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb085c09fc9 code=0x7ffc0000 [ 326.013333][ T30] audit: type=1326 audit(1761490780.316:2301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4548 comm="syz.6.1093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb085c09fc9 code=0x7ffc0000 [ 326.044853][ T4557] syz.0.1095[4557] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 326.044956][ T4557] syz.0.1095[4557] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 326.067082][ T4560] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1096'. [ 326.127684][ T1771] usbhid 5-1:1.0: can't add hid device: -71 [ 326.138199][ T1771] usbhid: probe of 5-1:1.0 failed with error -71 [ 326.149881][ T1771] usb 5-1: USB disconnect, device number 23 [ 326.164628][ T4563] loop2: detected capacity change from 0 to 7 [ 326.244198][ T4564] loop1: detected capacity change from 0 to 512 [ 326.395393][ T4564] EXT4-fs error (device loop1): ext4_find_extent:929: inode #4: comm syz.1.1096: pblk 2 bad header/extent: invalid magic - magic 3fff, entries 12, max 508(0), depth 0(0) [ 326.412859][ T4564] EXT4-fs warning (device loop1): ext4_enable_quotas:6452: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 326.428241][ T4564] EXT4-fs (loop1): mount failed [ 326.778373][ T4586] FAULT_INJECTION: forcing a failure. [ 326.778373][ T4586] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 326.793398][ T4586] CPU: 0 PID: 4586 Comm: syz.6.1103 Tainted: G W syzkaller #0 [ 326.802202][ T4586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 326.812280][ T4586] Call Trace: [ 326.815583][ T4586] [ 326.818535][ T4586] __dump_stack+0x21/0x30 [ 326.822924][ T4586] dump_stack_lvl+0xee/0x150 [ 326.827535][ T4586] ? show_regs_print_info+0x20/0x20 [ 326.832751][ T4586] ? format_decode+0x1bb/0x1520 [ 326.837626][ T4586] dump_stack+0x15/0x20 [ 326.841796][ T4586] should_fail+0x3c1/0x510 [ 326.846226][ T4586] should_fail_usercopy+0x1a/0x20 [ 326.851267][ T4586] _copy_from_user+0x20/0xd0 [ 326.855886][ T4586] kstrtouint_from_user+0xbe/0x200 [ 326.861011][ T4586] ? kstrtol_from_user+0x260/0x260 [ 326.866141][ T4586] ? 0xffffffff81000000 [ 326.870312][ T4586] ? _copy_to_user+0x78/0x90 [ 326.874923][ T4586] ? simple_read_from_buffer+0x10f/0x160 [ 326.880584][ T4586] proc_fail_nth_write+0x85/0x1f0 [ 326.885629][ T4586] ? proc_fail_nth_read+0x210/0x210 [ 326.890927][ T4586] ? security_file_permission+0x79/0xa0 [ 326.896494][ T4586] ? security_file_permission+0x83/0xa0 [ 326.902059][ T4586] ? proc_fail_nth_read+0x210/0x210 [ 326.907266][ T4586] vfs_write+0x3ee/0xf70 [ 326.911515][ T4586] ? file_end_write+0x1b0/0x1b0 [ 326.916368][ T4586] ? __traceiter_kmem_cache_free+0x34/0x50 [ 326.922174][ T4586] ? __kasan_check_write+0x14/0x20 [ 326.927303][ T4586] ? mutex_lock+0x95/0x1a0 [ 326.931738][ T4586] ? wait_for_completion_killable_timeout+0x10/0x10 [ 326.938338][ T4586] ? __fget_files+0x2c4/0x320 [ 326.943032][ T4586] ? __fdget_pos+0x2d2/0x380 [ 326.947627][ T4586] ? ksys_write+0x71/0x240 [ 326.952049][ T4586] ksys_write+0x140/0x240 [ 326.956378][ T4586] ? __ia32_sys_read+0x90/0x90 [ 326.961315][ T4586] ? debug_smp_processor_id+0x17/0x20 [ 326.966686][ T4586] __x64_sys_write+0x7b/0x90 [ 326.971280][ T4586] x64_sys_call+0x8ef/0x9a0 [ 326.975793][ T4586] do_syscall_64+0x4c/0xa0 [ 326.980213][ T4586] ? clear_bhb_loop+0x50/0xa0 [ 326.984892][ T4586] ? clear_bhb_loop+0x50/0xa0 [ 326.989567][ T4586] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 326.995467][ T4586] RIP: 0033:0x7fb085c08a7f [ 326.999995][ T4586] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 327.019983][ T4586] RSP: 002b:00007fb084672030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 327.028415][ T4586] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fb085c08a7f [ 327.036389][ T4586] RDX: 0000000000000001 RSI: 00007fb0846720a0 RDI: 0000000000000007 [ 327.044501][ T4586] RBP: 00007fb084672090 R08: 0000000000000000 R09: 0000000000000000 [ 327.052479][ T4586] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 327.060455][ T4586] R13: 00007fb085e61038 R14: 00007fb085e60fa0 R15: 00007ffdcdde5a58 [ 327.068455][ T4586] [ 327.563176][ T4594] loop6: detected capacity change from 0 to 1024 [ 327.863925][ T4601] loop4: detected capacity change from 0 to 512 [ 327.871929][ T4594] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 327.911568][ T4601] EXT4-fs (loop4): Ignoring removed nobh option [ 327.928001][ T4601] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 328.048685][ T4601] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #15: comm syz.4.1108: iget: bad i_size value: 38620345925642 [ 328.062040][ T4601] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.1108: couldn't read orphan inode 15 (err -117) [ 328.076284][ T4601] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobh,auto_da_alloc,sysvgroups,resuid=0x000000000000ee01,dioread_nolock,minixdf,,errors=continue. Quota mode: writeback. [ 328.179101][ T4613] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4613 comm=syz.4.1108 [ 328.266132][ T4616] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.1108: bg 0: block 5: invalid block bitmap [ 328.291436][ T4616] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1936 with error 28 [ 328.375715][ T4632] bridge: RTM_NEWNEIGH with invalid ether address [ 328.392738][ T4616] EXT4-fs (loop4): This should not happen!! Data will be lost [ 328.392738][ T4616] [ 328.422817][ T4616] EXT4-fs (loop4): Total free blocks count 0 [ 328.428927][ T4616] EXT4-fs (loop4): Free/Dirty block details [ 328.466980][ T4616] EXT4-fs (loop4): free_blocks=0 [ 328.478257][ T4616] EXT4-fs (loop4): dirty_blocks=2012 [ 328.483717][ T4616] EXT4-fs (loop4): Block reservation details [ 328.489833][ T4616] EXT4-fs (loop4): i_reserved_data_blocks=2012 [ 328.833810][ T2951] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 1936 with max blocks 76 with error 28 [ 328.908506][ T2951] EXT4-fs (loop4): This should not happen!! Data will be lost [ 328.908506][ T2951] [ 329.380109][ T4642] UDC core: couldn't find an available UDC or it's busy: -16 [ 329.496399][ T4642] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 329.578967][ T4648] overlayfs: failed to clone upperpath [ 329.845818][ T30] kauditd_printk_skb: 131 callbacks suppressed [ 329.845834][ T30] audit: type=1400 audit(1761490784.216:2432): avc: denied { create } for pid=4641 comm="syz.1.1118" name="#18" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 330.049818][ T30] audit: type=1400 audit(1761490784.376:2433): avc: denied { link } for pid=4641 comm="syz.1.1118" name="#18" dev="tmpfs" ino=1238 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 330.079245][ T4653] UDC core: couldn't find an available UDC or it's busy: -16 [ 330.086683][ T4653] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 330.099457][ T30] audit: type=1400 audit(1761490784.376:2434): avc: denied { rename } for pid=4641 comm="syz.1.1118" name="#19" dev="tmpfs" ino=1238 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 330.141102][ T4642] UDC core: couldn't find an available UDC or it's busy: -16 [ 330.157547][ T4642] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 330.175876][ T30] audit: type=1326 audit(1761490784.476:2435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4641 comm="syz.1.1118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4785792fc9 code=0x7ffc0000 [ 330.258173][ T30] audit: type=1326 audit(1761490784.476:2436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4641 comm="syz.1.1118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4785792fc9 code=0x7ffc0000 [ 330.336781][ T30] audit: type=1326 audit(1761490784.506:2437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4641 comm="syz.1.1118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=107 compat=0 ip=0x7f4785792fc9 code=0x7ffc0000 [ 330.360577][ T1591] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 330.417870][ T30] audit: type=1326 audit(1761490784.506:2438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4641 comm="syz.1.1118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4785792fc9 code=0x7ffc0000 [ 330.489753][ T30] audit: type=1326 audit(1761490784.506:2439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4641 comm="syz.1.1118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4785792fc9 code=0x7ffc0000 [ 330.562871][ T30] audit: type=1326 audit(1761490784.506:2440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4641 comm="syz.1.1118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4785792fc9 code=0x7ffc0000 [ 330.633770][ T30] audit: type=1326 audit(1761490784.506:2441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4641 comm="syz.1.1118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4785792fc9 code=0x7ffc0000 [ 330.787712][ T1591] usb 5-1: config index 0 descriptor too short (expected 12370, got 82) [ 330.797337][ T1591] usb 5-1: config 48 has too many interfaces: 48, using maximum allowed: 32 [ 330.827434][ T1591] usb 5-1: config 48 has an invalid descriptor of length 0, skipping remainder of the config [ 330.848030][ T1591] usb 5-1: config 48 has 0 interfaces, different from the descriptor's value: 48 [ 330.871416][ T4663] loop1: detected capacity change from 0 to 256 [ 330.941275][ T4663] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 331.037793][ T1591] usb 5-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 331.037827][ T1591] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.037849][ T1591] usb 5-1: Product: syz [ 331.037865][ T1591] usb 5-1: Manufacturer: syz [ 331.037880][ T1591] usb 5-1: SerialNumber: syz [ 331.148125][ T4670] 9pnet: Insufficient options for proto=fd [ 331.199635][ T4672] loop1: detected capacity change from 0 to 128 [ 331.260626][ T4672] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 331.324652][ T1591] usb 5-1: USB disconnect, device number 24 [ 331.795433][ T4679] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1129'. [ 331.977602][ T1771] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 331.996244][ T4684] syz.4.1130[4684] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 331.997073][ T4684] syz.4.1130[4684] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 332.131937][ T4688] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=8 sclass=netlink_audit_socket pid=4688 comm=syz.1.1132 [ 332.168758][ T4686] loop0: detected capacity change from 0 to 40427 [ 332.251825][ T4686] F2FS-fs (loop0): fault_injection options not supported [ 332.259101][ T4686] F2FS-fs (loop0): fault_type options not supported [ 332.266937][ T4686] F2FS-fs (loop0): invalid crc value [ 332.279006][ T4686] F2FS-fs (loop0): Found nat_bits in checkpoint [ 332.316468][ T4686] F2FS-fs (loop0): Start checkpoint disabled! [ 332.328529][ T4686] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 332.387763][ T1771] usb 7-1: config index 0 descriptor too short (expected 65323, got 119) [ 332.407609][ T1771] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 332.451602][ T1771] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 332.471798][ T1771] usb 7-1: config 1 has no interface number 1 [ 332.769434][ T1771] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 332.795622][ T4688] loop1: detected capacity change from 0 to 40427 [ 332.804158][ T1771] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 332.894641][ T4688] F2FS-fs (loop1): invalid crc value [ 332.928909][ T4688] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 333.016530][ T4688] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 333.132809][ T2951] attempt to access beyond end of device [ 333.132809][ T2951] loop0: rw=2049, want=40976, limit=40427 [ 333.951291][ T4711] 9pnet: Insufficient options for proto=fd [ 333.987721][ T1771] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 334.006364][ T1771] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.014791][ T1771] usb 7-1: Product: syz [ 334.033022][ T1771] usb 7-1: Manufacturer: syz [ 334.037875][ T1771] usb 7-1: SerialNumber: syz [ 334.196513][ T4724] loop0: detected capacity change from 0 to 512 [ 334.486177][ T4724] EXT4-fs (loop0): 1 orphan inode deleted [ 334.492178][ T4724] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpid,,errors=continue. Quota mode: writeback. [ 334.504373][ T4724] ext4 filesystem being mounted at /225/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 335.237623][ T30] kauditd_printk_skb: 57 callbacks suppressed [ 335.237643][ T30] audit: type=1326 audit(1761490789.566:2499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4732 comm="syz.1.1142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4785792fc9 code=0x7ffc0000 [ 335.376810][ T4739] sit: Dst spoofed 0.0.0.0/400:: -> 0.0.0.0/2002:9476:b3ad:dfab:8150:7b25:977f:5d53 [ 335.389610][ T4738] loop1: detected capacity change from 0 to 16 [ 335.432854][ T30] audit: type=1326 audit(1761490789.566:2500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4732 comm="syz.1.1142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4785792fc9 code=0x7ffc0000 [ 335.552178][ T30] audit: type=1326 audit(1761490789.566:2501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4732 comm="syz.1.1142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4785792fc9 code=0x7ffc0000 [ 335.589063][ T4738] erofs: (device loop1): mounted with root inode @ nid 36. [ 335.599222][ T4743] loop6: detected capacity change from 0 to 128 [ 335.610928][ T4738] erofs: (device loop1): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 335.688458][ T49] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[4868] [ 335.735057][ T30] audit: type=1326 audit(1761490789.566:2502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4732 comm="syz.1.1142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4785792fc9 code=0x7ffc0000 [ 335.788995][ T4743] EXT4-fs (loop6): Test dummy encryption mode enabled [ 335.816611][ T4743] EXT4-fs (loop6): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none. [ 335.839132][ T30] audit: type=1326 audit(1761490789.566:2503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4732 comm="syz.1.1142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4785792fc9 code=0x7ffc0000 [ 335.852905][ T4743] ext4 filesystem being mounted at /23/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 335.931821][ T4747] loop1: detected capacity change from 0 to 512 [ 336.027383][ T30] audit: type=1326 audit(1761490789.566:2504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4732 comm="syz.1.1142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4785791810 code=0x7ffc0000 [ 336.068104][ T4747] FAT-fs (loop1): Unrecognized mount option "nonu" or missing value [ 336.147003][ T30] audit: type=1326 audit(1761490789.566:2505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4732 comm="syz.1.1142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4785792fc9 code=0x7ffc0000 [ 336.178178][ T1771] usb 7-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 336.201413][ T1771] usb 7-1: USB disconnect, device number 2 [ 336.216997][ T30] audit: type=1326 audit(1761490789.566:2506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4732 comm="syz.1.1142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4785792fc9 code=0x7ffc0000 [ 336.245521][ T30] audit: type=1326 audit(1761490789.566:2507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4732 comm="syz.1.1142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4785792fc9 code=0x7ffc0000 [ 336.271545][ T30] audit: type=1326 audit(1761490789.566:2508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4732 comm="syz.1.1142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4785792fc9 code=0x7ffc0000 [ 336.335520][ T4756] 9pnet: Insufficient options for proto=fd [ 336.417921][ T4760] loop6: detected capacity change from 0 to 16 [ 336.448588][ T4415] udevd[4415]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 336.478388][ T4760] erofs: (device loop6): erofs_superblock_csum_verify: invalid checksum 0xd42e2186, 0x7bbbea8c expected [ 336.491684][ T4447] udevd[4447]: incorrect erofs checksum on /dev/loop6 [ 336.507596][ T1665] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 336.668446][ T4762] loop6: detected capacity change from 0 to 4096 [ 336.693162][ T4762] EXT4-fs (loop6): Test dummy encryption mode enabled [ 336.728981][ T4762] EXT4-fs (loop6): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,noauto_da_alloc,dioread_nolock,test_dummy_encryption,nobarrier,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 336.907696][ T1665] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 337.097710][ T1665] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 337.116565][ T1665] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.149623][ T1665] usb 1-1: Product: syz [ 337.162080][ T1665] usb 1-1: Manufacturer: syz [ 337.177613][ T1665] usb 1-1: SerialNumber: syz [ 337.527679][ T1665] cdc_ncm 1-1:1.0: bind() failure [ 337.537736][ T1665] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 337.552177][ T1665] cdc_ncm 1-1:1.1: bind() failure [ 337.597116][ T1665] usb 1-1: USB disconnect, device number 12 [ 337.920014][ T4799] loop1: detected capacity change from 0 to 256 [ 337.976016][ T4799] exFAT-fs (loop1): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 338.017315][ T4799] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1157'. [ 338.058826][ T4799] device gretap0 entered promiscuous mode [ 338.157894][ T4807] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1159'. [ 338.233192][ T4810] loop6: detected capacity change from 0 to 1024 [ 338.320229][ T4810] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 338.341185][ T4810] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 338.385772][ T4817] SELinux: security_context_str_to_sid(staff_u) failed for (dev ?, type ?) errno=-22 [ 338.404751][ T4817] fuse: Bad value for 'fd' [ 338.528866][ T4823] loop0: detected capacity change from 0 to 512 [ 338.591432][ T4823] EXT4-fs (loop0): 1 orphan inode deleted [ 338.602254][ T4823] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodioread_nolock,nouid32,debug_want_extra_isize=0x000000000000005c,nouid32,resgid=0x0000000000000000,usrquota,journal_dev=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 338.627620][ T4813] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 393: padding at end of block bitmap is not set [ 338.795371][ T4830] loop4: detected capacity change from 0 to 1024 [ 339.209228][ T4844] loop4: detected capacity change from 0 to 40427 [ 339.237171][ T4844] F2FS-fs (loop4): Current segment's next free block offset is inconsistent with bitmap, logtype:0, segno:3, type:0, next_blkoff:5, blkofs:5 [ 339.253034][ T4844] F2FS-fs (loop4): Failed to initialize F2FS segment manager (-117) [ 339.289369][ T4836] loop0: detected capacity change from 0 to 512 [ 339.350781][ T4836] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 339.384888][ T4836] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 339.407688][ T4836] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 339.437885][ T4836] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 339.467597][ T4836] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c042e01c, mo2=0000] [ 339.476020][ T4836] EXT4-fs (loop0): orphan cleanup on readonly fs [ 339.497775][ T4836] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.1169: bg 0: block 34: padding at end of block bitmap is not set [ 339.537063][ T4836] EXT4-fs error (device loop0): ext4_acquire_dquot:6200: comm syz.0.1169: Failed to acquire dquot type 1 [ 339.580113][ T4836] EXT4-fs (loop0): 1 truncate cleaned up [ 339.601799][ T4836] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,barrier,,errors=continue. Quota mode: writeback. [ 339.674125][ T4844] loop4: detected capacity change from 0 to 40427 [ 339.697932][ T4844] F2FS-fs (loop4): invalid crc value [ 339.721431][ T4844] F2FS-fs (loop4): Found nat_bits in checkpoint [ 339.785478][ T4844] F2FS-fs (loop4): Start checkpoint disabled! [ 339.816387][ T4844] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 339.980269][ T4868] fuseblk: Unknown parameter 'uid' [ 340.036933][ T2974] attempt to access beyond end of device [ 340.036933][ T2974] loop4: rw=2049, want=40976, limit=40427 [ 340.056257][ T4871] fuse: Unknown parameter 'fu' [ 340.076481][ T4871] loop6: detected capacity change from 0 to 256 [ 340.165877][ T4871] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 340.218611][ T4871] overlayfs: unrecognized mount option "nolazytime" or missing value [ 340.226935][ T30] kauditd_printk_skb: 76 callbacks suppressed [ 340.226954][ T30] audit: type=1400 audit(1761491818.613:2583): avc: denied { create } for pid=4874 comm="syz.0.1180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 340.494284][ T30] audit: type=1400 audit(1761491818.897:2584): avc: denied { create } for pid=4882 comm="syz.4.1181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 340.521746][ T4895] 9pnet: Insufficient options for proto=fd [ 340.630032][ T30] audit: type=1326 audit(1761491819.044:2585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4904 comm="syz.3.1189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2771c0fc9 code=0x7ffc0000 [ 340.676380][ T30] audit: type=1326 audit(1761491819.065:2586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4904 comm="syz.3.1189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc2771c0fc9 code=0x7ffc0000 [ 340.726202][ T30] audit: type=1326 audit(1761491819.065:2587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4904 comm="syz.3.1189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2771c0fc9 code=0x7ffc0000 [ 340.775836][ T30] audit: type=1326 audit(1761491819.065:2588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4904 comm="syz.3.1189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc2771c0fc9 code=0x7ffc0000 [ 340.809989][ T30] audit: type=1326 audit(1761491819.075:2589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4904 comm="syz.3.1189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2771c0fc9 code=0x7ffc0000 [ 340.839968][ T30] audit: type=1326 audit(1761491819.075:2590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4904 comm="syz.3.1189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc2771c0fc9 code=0x7ffc0000 [ 340.865312][ T30] audit: type=1326 audit(1761491819.075:2591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4904 comm="syz.3.1189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2771c0fc9 code=0x7ffc0000 [ 340.897988][ T30] audit: type=1326 audit(1761491819.075:2592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4904 comm="syz.3.1189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fc2771c0fc9 code=0x7ffc0000 [ 341.226563][ T4925] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1193'. [ 341.274922][ T4925] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 342.438378][ T4936] 9pnet: Insufficient options for proto=fd [ 342.570473][ T4944] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1201'. [ 343.721502][ T4967] 9pnet: Insufficient options for proto=fd [ 343.734774][ T4969] SELinux: Context system_u:object_r:vmware_device_t:s0 is not valid (left unmapped). [ 343.744838][ T4970] xt_hashlimit: max too large, truncated to 1048576 [ 343.892059][ T4981] loop0: detected capacity change from 0 to 1024 [ 344.046778][ T4981] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 344.811333][ T5001] loop4: detected capacity change from 0 to 40427 [ 344.867854][ T5001] F2FS-fs (loop4): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288) [ 344.885104][ T5001] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 345.104432][ T5001] F2FS-fs (loop4): fault_type options not supported [ 345.123512][ T5001] F2FS-fs (loop4): fault_injection options not supported [ 345.241861][ T5001] F2FS-fs (loop4): invalid crc value [ 345.438443][ T5001] F2FS-fs (loop4): Found nat_bits in checkpoint [ 345.627269][ T5001] F2FS-fs (loop4): Start checkpoint disabled! [ 345.752280][ T5001] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 345.759453][ T5001] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 345.767466][ T30] kauditd_printk_skb: 57 callbacks suppressed [ 345.767484][ T30] audit: type=1400 audit(1761491824.440:2650): avc: denied { setopt } for pid=5015 comm="syz.3.1222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 345.850853][ T5019] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1221'. [ 346.103782][ T30] audit: type=1400 audit(1761491824.734:2651): avc: denied { rename } for pid=5000 comm="syz.4.1218" name="file0" dev="loop4" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 346.199574][ T30] audit: type=1400 audit(1761491824.734:2652): avc: denied { reparent } for pid=5000 comm="syz.4.1218" name="file0" dev="loop4" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 346.277899][ T2951] attempt to access beyond end of device [ 346.277899][ T2951] loop4: rw=2049, want=40984, limit=40427 [ 346.422577][ T5025] raw_sendmsg: syz.0.1225 forgot to set AF_INET. Fix it! [ 346.521186][ T30] audit: type=1400 audit(1761491825.227:2653): avc: denied { mounton } for pid=5026 comm="syz.0.1226" path=2F3234392FE91F7189591E9233614B dev="tmpfs" ino=1393 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 346.611038][ T5040] UDC core: couldn't find an available UDC or it's busy: -16 [ 346.624897][ T30] audit: type=1400 audit(1761491825.332:2654): avc: denied { load_policy } for pid=5037 comm="syz.0.1229" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 346.625007][ T5038] SELinux: policydb magic number 0x69662f2e does not match expected magic number 0xf97cff8c [ 346.655843][ T5038] SELinux: failed to load policy [ 346.666166][ T5040] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 346.812168][ T5043] loop6: detected capacity change from 0 to 1024 [ 346.893973][ T1586] usb 5-1: new full-speed USB device number 25 using dummy_hcd [ 346.902295][ T5043] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 346.915835][ T30] audit: type=1400 audit(1761491825.647:2655): avc: denied { mounton } for pid=5042 comm="syz.6.1231" path="/35/file0/bus" dev="loop6" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 346.939082][ T30] audit: type=1400 audit(1761491825.647:2656): avc: denied { append } for pid=5042 comm="syz.6.1231" name="loop6" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 347.019892][ T5050] syz.3.1233[5050] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 347.019974][ T5050] syz.3.1233[5050] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 347.304771][ T1586] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 347.332867][ T1586] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 347.346869][ T1586] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 347.362784][ T1586] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.374757][ T1586] usb 5-1: config 0 descriptor?? [ 347.695503][ T5064] loop0: detected capacity change from 0 to 256 [ 347.764508][ T5064] exfat: Unknown parameter 'ÿÿÿÿÿÿ' [ 347.827621][ T5064] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1236'. [ 347.838316][ T5064] device gretap0 entered promiscuous mode [ 347.898478][ T1586] hid-generic 0003:04F3:0755.0006: failed to start in urb: -90 [ 348.005596][ T30] audit: type=1400 audit(1761491826.791:2657): avc: denied { unmount } for pid=4252 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 348.061410][ T2974] Trying to write to read-only block-device loop6 [ 348.074478][ T4252] Trying to write to read-only block-device loop6 [ 348.091516][ T2974] Trying to write to read-only block-device loop6 [ 348.116086][ T1586] hid-generic 0003:04F3:0755.0006: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.4-1/input0 [ 348.168010][ T4252] Trying to write to read-only block-device loop6 [ 348.187315][ T2974] Trying to write to read-only block-device loop6 [ 348.448648][ T1586] usb 5-1: USB disconnect, device number 25 [ 348.458889][ T4252] Trying to write to read-only block-device loop6 [ 348.476427][ T4252] Trying to write to read-only block-device loop6 [ 348.482904][ T4252] Trying to write to read-only block-device loop6 [ 348.552300][ T4252] Trying to write to read-only block-device loop6 [ 348.564341][ T5067] fido_id[5067]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 348.590745][ T2974] Trying to write to read-only block-device loop6 [ 348.737334][ T30] audit: type=1400 audit(1761491827.558:2658): avc: denied { read } for pid=5070 comm="syz.4.1241" path="socket:[31875]" dev="sockfs" ino=31875 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 349.488082][ T30] audit: type=1400 audit(1761491828.345:2659): avc: denied { create } for pid=5084 comm="syz.0.1244" dev="anon_inodefs" ino=31527 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 350.542970][ T5106] SELinux: Context system_u:object_r:restorecond_var_run_t:s0 is not valid (left unmapped). [ 350.572192][ T30] kauditd_printk_skb: 61 callbacks suppressed [ 350.572210][ T30] audit: type=1400 audit(1761491829.489:2721): avc: denied { relabelto } for pid=5105 comm="syz.4.1249" name=E91F7189591E9233614B dev="tmpfs" ino=1133 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:restorecond_var_run_t:s0" [ 350.638594][ T30] audit: type=1400 audit(1761491829.489:2722): avc: denied { associate } for pid=5105 comm="syz.4.1249" name=E91F7189591E9233614B dev="tmpfs" ino=1133 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:restorecond_var_run_t:s0" [ 350.996900][ T5110] UDC core: couldn't find an available UDC or it's busy: -16 [ 351.033848][ T5110] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 351.136430][ T5112] netlink: 'syz.6.1252': attribute type 4 has an invalid length. [ 351.144809][ T5112] netlink: 3657 bytes leftover after parsing attributes in process `syz.6.1252'. [ 351.253318][ T30] audit: type=1400 audit(1761491830.193:2723): avc: denied { create } for pid=5125 comm="syz.6.1256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 351.284179][ T30] audit: type=1400 audit(1761491830.214:2724): avc: denied { read } for pid=5125 comm="syz.6.1256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 351.303207][ T5131] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 351.313297][ T5131] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 351.409226][ T5130] mmap: syz.0.1258 (5130): VmData 17453056 exceed data ulimit 8. Update limits or use boot option ignore_rlimit_data. [ 351.503563][ T30] audit: type=1400 audit(1761491830.455:2725): avc: denied { read } for pid=5128 comm="syz.6.1259" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 351.644824][ T5137] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1260'. [ 351.654316][ T30] audit: type=1400 audit(1761491830.455:2726): avc: denied { open } for pid=5128 comm="syz.6.1259" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 351.721912][ T30] audit: type=1400 audit(1761491830.675:2727): avc: denied { write } for pid=5136 comm="syz.1.1260" name="udplite6" dev="proc" ino=4026532986 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 351.764079][ T5141] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5141 comm=syz.1.1262 [ 351.780106][ T5141] UDC core: couldn't find an available UDC or it's busy: -16 [ 351.789147][ T5141] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 351.862749][ T5144] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 351.870602][ T5144] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 351.879658][ T5144] device gretap0 left promiscuous mode [ 351.912857][ T5144] device veth0_vlan left promiscuous mode [ 351.919228][ T5144] device veth0_vlan entered promiscuous mode [ 351.927104][ T5144] device veth1_macvtap left promiscuous mode [ 351.934348][ T5144] device veth1_macvtap entered promiscuous mode [ 351.978269][ T2974] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 352.855936][ T30] audit: type=1400 audit(1761491830.822:2728): avc: denied { wake_alarm } for pid=5138 comm="syz.0.1261" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 352.886080][ T2974] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 353.037180][ T2974] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 353.070828][ T2974] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.077946][ T2974] bridge0: port 1(bridge_slave_0) entered forwarding state [ 353.085845][ T2974] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 353.094383][ T2974] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 353.104309][ T2974] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.111436][ T2974] bridge0: port 2(bridge_slave_1) entered forwarding state [ 353.120085][ T2974] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 353.128985][ T2974] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 353.137479][ T2974] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 353.146190][ T2974] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 353.154644][ T2974] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 353.163108][ T2974] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 353.171533][ T2974] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 353.180240][ T2974] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 353.188908][ T2974] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 353.197452][ T2974] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 353.206086][ T2974] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 353.214973][ T2974] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 353.223578][ T2974] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 353.232337][ T2974] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 353.241612][ T2974] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 353.250140][ T2974] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 353.258481][ T2974] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 353.266725][ T2974] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 353.275689][ T2974] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 353.284369][ T2974] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 353.292827][ T2974] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 353.301050][ T2974] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 353.308930][ T2974] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 353.316720][ T2974] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 353.325242][ T2974] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 353.333594][ T2974] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 353.342078][ T1580] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 353.352868][ T2974] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 353.412333][ T30] audit: type=1400 audit(1761491833.464:2729): avc: denied { unlink } for pid=285 comm="syz-executor" name=E91F7189591E9233614B dev="tmpfs" ino=1133 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:restorecond_var_run_t:s0" [ 353.611897][ T30] audit: type=1400 audit(1761491833.674:2730): avc: denied { bind } for pid=5157 comm="syz.1.1266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 353.635234][ T5158] loop1: detected capacity change from 0 to 512 [ 353.681525][ T5158] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 353.748978][ T5158] EXT4-fs error (device loop1): ext4_orphan_get:1401: inode #15: comm syz.1.1266: iget: bogus i_mode (5) [ 353.760919][ T5158] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.1266: couldn't read orphan inode 15 (err -117) [ 353.773509][ T5158] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 353.782507][ T1580] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 353.784234][ T5158] ext2 filesystem being mounted at /251/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 353.880450][ T1580] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 353.891603][ T1580] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 353.962740][ T5161] loop6: detected capacity change from 0 to 256 [ 354.379107][ T1580] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 354.388430][ T1580] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.398109][ T1580] usb 1-1: config 0 descriptor?? [ 354.466921][ T5176] loop1: detected capacity change from 0 to 16 [ 354.516702][ T5176] erofs: (device loop1): mounted with root inode @ nid 36. [ 354.569643][ T5178] loop4: detected capacity change from 0 to 1024 [ 354.588876][ T5178] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 355.014011][ T5183] UDC core: couldn't find an available UDC or it's busy: -16 [ 355.519286][ T5183] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 355.555578][ T1580] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 355.583429][ T1580] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 355.609823][ T285] bio_check_ro: 1 callbacks suppressed [ 355.609841][ T285] Trying to write to read-only block-device loop4 [ 355.623009][ T5187] syz.1.1273[5187] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 355.623132][ T5187] syz.1.1273[5187] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 355.631416][ T1580] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 355.658355][ T285] Trying to write to read-only block-device loop4 [ 355.666257][ T285] Trying to write to read-only block-device loop4 [ 355.671022][ T1580] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 355.676139][ T285] Trying to write to read-only block-device loop4 [ 355.687373][ T1580] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 355.693506][ T285] Trying to write to read-only block-device loop4 [ 355.701697][ T1580] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 355.706100][ T285] Trying to write to read-only block-device loop4 [ 355.716388][ T1580] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 355.721274][ T285] Trying to write to read-only block-device loop4 [ 355.731501][ T1580] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 355.736896][ T285] Trying to write to read-only block-device loop4 [ 355.747666][ T1580] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 355.758838][ T5147] UDC core: couldn't find an available UDC or it's busy: -16 [ 355.765442][ T285] Trying to write to read-only block-device loop4 [ 355.769088][ T5147] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 355.772819][ T285] Trying to write to read-only block-device loop4 [ 355.783090][ T1580] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 355.801696][ T5147] UDC core: couldn't find an available UDC or it's busy: -16 [ 355.810863][ T1580] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 355.824834][ T5147] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 355.832680][ T1580] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 355.849865][ T1580] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 355.864957][ T1580] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 355.880179][ T1580] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 355.894559][ T1580] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 355.916207][ T1580] plantronics 0003:047F:FFFF.0007: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 356.117973][ T30] kauditd_printk_skb: 45 callbacks suppressed [ 356.117989][ T30] audit: type=1326 audit(1761491836.309:2776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5195 comm="syz.6.1277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb085c09fc9 code=0x7ffc0000 [ 356.149341][ T1580] usb 1-1: USB disconnect, device number 13 [ 356.201434][ T30] audit: type=1326 audit(1761491836.340:2777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5195 comm="syz.6.1277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fb085c09fc9 code=0x7ffc0000 [ 356.274612][ T30] audit: type=1326 audit(1761491836.340:2778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5195 comm="syz.6.1277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb085c09fc9 code=0x7ffc0000 [ 356.325411][ T30] audit: type=1326 audit(1761491836.340:2779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5195 comm="syz.6.1277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7fb085c09fc9 code=0x7ffc0000 [ 356.378454][ T30] audit: type=1326 audit(1761491836.351:2780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5195 comm="syz.6.1277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb085c09fc9 code=0x7ffc0000 [ 356.448917][ T30] audit: type=1326 audit(1761491836.351:2781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5195 comm="syz.6.1277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb085c09fc9 code=0x7ffc0000 [ 356.579305][ T30] audit: type=1326 audit(1761491836.351:2782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5195 comm="syz.6.1277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb085c09fc9 code=0x7ffc0000 [ 356.908284][ T30] audit: type=1326 audit(1761491836.351:2783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5195 comm="syz.6.1277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb085c09fc9 code=0x7ffc0000 [ 357.056983][ T5209] loop0: detected capacity change from 0 to 1024 [ 357.088350][ T5209] SELinux: security_context_str_to_sid(system_u) failed for (dev ?, type ?) errno=-22 [ 357.276620][ T5209] EXT4-fs (loop0): mounted filesystem without journal. Opts: abort,norecovery,nogrpid,,errors=continue. Quota mode: none. [ 357.289613][ T5209] SELinux: security_context_str_to_sid(system_u) failed for (dev loop0, type ext4) errno=-22 [ 357.502755][ T30] audit: type=1326 audit(1761491836.351:2784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5195 comm="syz.6.1277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb085c09fc9 code=0x7ffc0000 [ 357.601924][ T30] audit: type=1326 audit(1761491836.351:2785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5195 comm="syz.6.1277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb085c09fc9 code=0x7ffc0000 [ 357.631879][ T5213] loop6: detected capacity change from 0 to 128 [ 358.435007][ T5224] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1284'. [ 358.454776][ T5224] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1284'. [ 358.906707][ T1602] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 359.106136][ T5231] tmpfs: Bad value for 'uid' [ 359.344810][ T1602] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 359.371327][ T1602] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 359.396239][ T1602] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 359.426182][ T5238] 9pnet: Could not find request transport: fd0x0000000000000003 [ 359.435624][ T1602] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.457869][ T1602] usb 1-1: config 0 descriptor?? [ 359.467064][ T5237] loop6: detected capacity change from 0 to 1024 [ 359.609405][ T5242] xt_SECMARK: invalid mode: 2 [ 359.797037][ T5237] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1287'. [ 359.910732][ T1602] keytouch 0003:0926:3333.0008: fixing up Keytouch IEC report descriptor [ 360.047784][ T1602] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0008/input/input9 [ 360.297379][ T5243] device veth3 entered promiscuous mode [ 360.303500][ T5243] bridge1: port 1(veth3) entered blocking state [ 360.309899][ T5243] bridge1: port 1(veth3) entered disabled state [ 360.315754][ T1602] keytouch 0003:0926:3333.0008: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 360.317251][ T5243] bridge1: port 1(veth3) entered blocking state [ 360.334607][ T5243] bridge1: port 1(veth3) entered forwarding state [ 360.375241][ T2974] bridge1: port 1(veth3) entered disabled state [ 360.492223][ T5257] overlayfs: failed to clone upperpath [ 360.668121][ T5264] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1295'. [ 360.706858][ T5264] sch_fq: defrate 0 ignored. [ 360.772584][ T5270] usb usb8: usbfs: process 5270 (syz.4.1296) did not claim interface 0 before use [ 361.440597][ T1580] usb 1-1: reset high-speed USB device number 14 using dummy_hcd [ 361.948020][ T30] kauditd_printk_skb: 112 callbacks suppressed [ 361.948042][ T30] audit: type=1326 audit(1761491842.408:2898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5269 comm="syz.4.1296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f243711bfc9 code=0x7ffc0000 [ 361.983867][ T5277] loop0: detected capacity change from 0 to 1024 [ 361.999221][ T5276] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1297'. [ 362.010081][ T5279] 9pnet: Insufficient options for proto=fd [ 362.021712][ T5280] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1297'. [ 362.079041][ T5277] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:476: comm syz.0.1298: Invalid block bitmap block 0 in block_group 0 [ 362.093153][ T5277] Quota error (device loop0): write_blk: dquota write failed [ 362.100828][ T5277] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 362.104485][ T30] audit: type=1326 audit(1761491842.408:2899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5269 comm="syz.4.1296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f243711bfc9 code=0x7ffc0000 [ 362.110923][ T5277] EXT4-fs error (device loop0): ext4_acquire_dquot:6200: comm syz.0.1298: Failed to acquire dquot type 0 [ 362.146479][ T5277] EXT4-fs error (device loop0): ext4_free_blocks:6218: comm syz.0.1298: Freeing blocks not in datazone - block = 0, count = 4096 [ 362.148969][ T5285] loop4: detected capacity change from 0 to 1024 [ 362.160360][ T5277] EXT4-fs error (device loop0): ext4_read_inode_bitmap:140: comm syz.0.1298: Invalid inode bitmap blk 0 in block_group 0 [ 362.179590][ T5277] EXT4-fs error (device loop0) in ext4_free_inode:362: Corrupt filesystem [ 362.188310][ T2951] Quota error (device loop0): remove_tree: Getting block too big (0 >= 9) [ 362.196969][ T2951] EXT4-fs error (device loop0): ext4_release_dquot:6236: comm kworker/u4:15: Failed to release dquot type 0 [ 362.208640][ T5277] EXT4-fs (loop0): 1 orphan inode deleted [ 362.214422][ T5277] EXT4-fs (loop0): mounted filesystem without journal. Opts: €; max_batch_time=0x0000000000000006,i_version,,errors=continue. Quota mode: writeback. [ 362.256044][ T30] audit: type=1326 audit(1761491842.744:2900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5284 comm="syz.4.1300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f243711bfc9 code=0x50000 [ 362.299667][ T30] audit: type=1326 audit(1761491842.744:2901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5284 comm="syz.4.1300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f243711bfc9 code=0x50000 [ 362.349771][ T30] audit: type=1326 audit(1761491842.744:2902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5284 comm="syz.4.1300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f243711bfc9 code=0x50000 [ 362.376740][ T5289] incfs: Backing dir is not set, filesystem can't be mounted. [ 362.384413][ T5289] incfs: mount failed -2 [ 362.389416][ T30] audit: type=1326 audit(1761491842.744:2903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5284 comm="syz.4.1300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f243711bfc9 code=0x50000 [ 362.413871][ T30] audit: type=1326 audit(1761491842.744:2904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5284 comm="syz.4.1300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f243711bfc9 code=0x50000 [ 362.658280][ T5297] loop6: detected capacity change from 0 to 4096 [ 362.738362][ T5297] binfmt_misc: register: failed to install interpreter file ./file0 [ 362.794843][ T1591] usb 1-1: USB disconnect, device number 14 [ 362.885071][ T5307] netlink: 'syz.6.1306': attribute type 34 has an invalid length. [ 362.905142][ T5308] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1307'. [ 362.923906][ T5308] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1307'. [ 363.021539][ T5317] 9pnet: Insufficient options for proto=fd [ 363.310344][ T5325] syz.4.1312[5325] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 363.310458][ T5325] syz.4.1312[5325] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 363.819471][ T5333] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1315'. [ 363.867781][ T5333] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1315'. [ 364.764033][ T5343] overlayfs: workdir and upperdir must be separate subtrees [ 364.851096][ T1591] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 365.308178][ T1591] usb 1-1: unable to get BOS descriptor or descriptor too short [ 365.403230][ T1591] usb 1-1: config 1 has an invalid interface number: 121 but max is 0 [ 365.425851][ T1591] usb 1-1: config 1 has no interface number 0 [ 365.593789][ T1591] usb 1-1: New USB device found, idVendor=05ba, idProduct=0007, bcdDevice=3e.97 [ 365.622259][ T1591] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.659831][ T1591] usb 1-1: Product: syz [ 365.669778][ T1591] usb 1-1: Manufacturer: syz [ 365.674440][ T1591] usb 1-1: SerialNumber: syz [ 365.746774][ T1591] hub 1-1:1.121: bad descriptor, ignoring hub [ 365.773039][ T1591] hub: probe of 1-1:1.121 failed with error -5 [ 366.051839][ T1591] usb 1-1: USB disconnect, device number 15 [ 366.296483][ T5357] 9pnet: Insufficient options for proto=fd [ 366.375053][ T5359] loop6: detected capacity change from 0 to 512 [ 366.656481][ T5359] loop6: detected capacity change from 0 to 8192 [ 367.004228][ T5382] loop0: detected capacity change from 0 to 512 [ 367.032095][ T1665] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 367.102019][ T5382] EXT4-fs (loop0): Ignoring removed oldalloc option [ 367.138223][ T5382] EXT4-fs (loop0): 1 truncate cleaned up [ 367.143924][ T5382] EXT4-fs (loop0): mounted filesystem without journal. Opts: quota,bsdgroups,nouid32,errors=remount-ro,jqfmt=vfsv1,oldalloc,stripe=0x0000000000000005,. Quota mode: writeback. [ 367.422780][ T1665] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 367.584497][ T1665] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 367.603787][ T1665] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.611835][ T1665] usb 7-1: Product: syz [ 367.635897][ T1665] usb 7-1: Manufacturer: syz [ 367.640548][ T1665] usb 7-1: SerialNumber: syz [ 368.680741][ T30] kauditd_printk_skb: 95 callbacks suppressed [ 368.680761][ T30] audit: type=1326 audit(1761491849.494:3000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5406 comm="syz.4.1335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f243711bfc9 code=0x7ffc0000 [ 368.718330][ T1771] usb 1-1: new low-speed USB device number 16 using dummy_hcd [ 368.757647][ T5409] tipc: Enabling of bearer rejected, failed to enable media [ 368.824870][ T30] audit: type=1326 audit(1761491849.547:3001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5406 comm="syz.4.1335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f243711bfc9 code=0x7ffc0000 [ 368.849073][ T30] audit: type=1326 audit(1761491849.547:3002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5406 comm="syz.4.1335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f243711bfc9 code=0x7ffc0000 [ 368.879835][ T30] audit: type=1326 audit(1761491849.547:3003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5406 comm="syz.4.1335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f243711bfc9 code=0x7ffc0000 [ 368.903702][ T30] audit: type=1326 audit(1761491849.547:3004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5406 comm="syz.4.1335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f243711bfc9 code=0x7ffc0000 [ 368.927261][ T30] audit: type=1326 audit(1761491849.547:3005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5406 comm="syz.4.1335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f243711bfc9 code=0x7ffc0000 [ 368.956859][ T30] audit: type=1326 audit(1761491849.547:3006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5406 comm="syz.4.1335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f243711bfc9 code=0x7ffc0000 [ 368.996793][ T30] audit: type=1326 audit(1761491849.547:3007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5406 comm="syz.4.1335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f243711bfc9 code=0x7ffc0000 [ 369.050670][ T30] audit: type=1326 audit(1761491849.547:3008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5406 comm="syz.4.1335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f243711bfc9 code=0x7ffc0000 [ 369.288415][ T30] audit: type=1326 audit(1761491849.547:3009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5406 comm="syz.4.1335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f243711bfc9 code=0x7ffc0000 [ 369.623336][ T1771] usb 1-1: config 32 has 1 interface, different from the descriptor's value: 2 [ 369.632363][ T1771] usb 1-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 10 [ 369.670869][ T1771] usb 1-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 369.689919][ T1771] usb 1-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 369.702460][ T1771] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.928155][ T1665] cdc_ncm 7-1:1.0: bind() failure [ 369.934684][ T1665] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found [ 369.965418][ T5436] loop4: detected capacity change from 0 to 40427 [ 369.966184][ T1665] cdc_ncm 7-1:1.1: bind() failure [ 369.999241][ T1665] usb 7-1: USB disconnect, device number 3 [ 370.019875][ T5392] netlink: 'syz.0.1331': attribute type 12 has an invalid length. [ 370.051969][ T1771] usb 1-1: string descriptor 0 read error: -71 [ 370.063963][ T1771] usb 1-1: USB disconnect, device number 16 [ 370.242739][ T5441] syz.4.1345[5441] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 370.242885][ T5441] syz.4.1345[5441] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 370.290690][ T4415] udevd[4415]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:32.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 370.392735][ T5443] loop1: detected capacity change from 0 to 1024 [ 370.405328][ T5443] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 370.415723][ T5443] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,noblock_validity,dioread_lock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 370.535720][ T5455] 9pnet: Insufficient options for proto=fd [ 370.628251][ T5460] loop6: detected capacity change from 0 to 128 [ 370.924189][ T5472] netlink: 'syz.6.1354': attribute type 12 has an invalid length. [ 370.956068][ T5472] netlink: 'syz.6.1354': attribute type 15 has an invalid length. [ 371.301066][ T5475] loop6: detected capacity change from 0 to 40427 [ 373.847698][ T5496] 9pnet: Insufficient options for proto=fd [ 373.872062][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 373.872080][ T30] audit: type=1326 audit(1761491854.943:3042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5497 comm="syz.1.1362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4785792fc9 code=0x7ffc0000 [ 373.952708][ T30] audit: type=1326 audit(1761491854.974:3043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5497 comm="syz.1.1362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4785792fc9 code=0x7ffc0000 [ 374.026517][ T30] audit: type=1326 audit(1761491854.974:3044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5497 comm="syz.1.1362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4785792fc9 code=0x7ffc0000 [ 374.072086][ T5509] UDC core: couldn't find an available UDC or it's busy: -16 [ 374.079645][ T5509] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 374.117449][ T30] audit: type=1326 audit(1761491854.974:3045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5497 comm="syz.1.1362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4785792fc9 code=0x7ffc0000 [ 374.118494][ T5509] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.149002][ T5509] bridge0: port 2(bridge_slave_1) entered forwarding state [ 374.157263][ T5509] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.164534][ T5509] bridge0: port 1(bridge_slave_0) entered forwarding state [ 374.204645][ T30] audit: type=1326 audit(1761491854.974:3046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5497 comm="syz.1.1362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4785792fc9 code=0x7ffc0000 [ 374.258221][ T30] audit: type=1326 audit(1761491854.974:3047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5497 comm="syz.1.1362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4785792fc9 code=0x7ffc0000 [ 374.329333][ T30] audit: type=1326 audit(1761491854.974:3048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5497 comm="syz.1.1362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4785792fc9 code=0x7ffc0000 [ 374.358037][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 374.379291][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 374.394832][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 374.408612][ T30] audit: type=1326 audit(1761491854.974:3049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5497 comm="syz.1.1362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4785792fc9 code=0x7ffc0000 [ 374.433008][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 374.439384][ T5516] loop6: detected capacity change from 0 to 2048 [ 374.452939][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 374.472165][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 374.481508][ T30] audit: type=1326 audit(1761491854.974:3050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5497 comm="syz.1.1362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4785792fc9 code=0x7ffc0000 [ 374.509965][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 374.519347][ T5516] loop6: p1 < > p4 [ 374.528857][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 374.529244][ T5516] loop6: p4 size 8388608 extends beyond EOD, truncated [ 374.544003][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 374.557379][ T30] audit: type=1326 audit(1761491854.974:3051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5497 comm="syz.1.1362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4785792fc9 code=0x7ffc0000 [ 374.586450][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready [ 374.614635][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 374.634322][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth5: link becomes ready [ 374.642166][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth4: link becomes ready [ 374.712081][ T4447] udevd[4447]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 374.730879][ T4415] udevd[4415]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 374.944142][ T5532] sit: Dst spoofed 0.0.0.0/400:: -> 0.0.0.0/2002:9476:b3ad:dfab:8150:7b25:977f:5d53 [ 374.965809][ T5532] loop0: detected capacity change from 0 to 256 [ 374.981815][ T5532] FAT-fs (loop0): Unrecognized mount option "fs" or missing value [ 375.836062][ T5538] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 376.033089][ T5548] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1376'. [ 376.611073][ T5546] loop6: detected capacity change from 0 to 2048 [ 376.804708][ T5553] overlayfs: unrecognized mount option "smackfstransmute=&\)" or missing value [ 376.866203][ T5556] UDC core: couldn't find an available UDC or it's busy: -16 [ 376.873779][ T5556] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 376.970662][ T5560] IPv6: NLM_F_CREATE should be specified when creating new route [ 376.996214][ T5560] IPv6: Can't replace route, no match found [ 377.225035][ T5568] device wg2 entered promiscuous mode [ 377.945023][ T5580] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1385'. [ 378.032750][ T5585] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1388'. [ 378.048448][ T5585] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1388'. [ 378.161003][ T5591] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1390'. [ 378.188341][ T5591] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1390'. [ 378.219030][ T5595] loop0: detected capacity change from 0 to 1024 [ 378.290533][ T5595] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 378.310691][ T5602] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1394'. [ 378.338039][ T5595] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 378.358816][ T5602] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1394'. [ 378.373257][ T5595] JBD2: no valid journal superblock found [ 378.386463][ T5595] EXT4-fs (loop0): error loading journal [ 378.444393][ T5607] loop6: detected capacity change from 0 to 512 [ 378.724240][ T5621] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1400'. [ 378.752049][ T30] kauditd_printk_skb: 50 callbacks suppressed [ 378.752066][ T30] audit: type=1326 audit(1761491860.066:3102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5625 comm="syz.4.1401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f243711bfc9 code=0x7ffc0000 [ 378.833338][ T30] audit: type=1326 audit(1761491860.066:3103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5625 comm="syz.4.1401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f243711bfc9 code=0x7ffc0000 [ 378.857449][ T30] audit: type=1326 audit(1761491860.066:3104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5625 comm="syz.4.1401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f243711bfc9 code=0x7ffc0000 [ 378.882018][ T30] audit: type=1326 audit(1761491860.066:3105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5625 comm="syz.4.1401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f243711bfc9 code=0x7ffc0000 [ 378.905864][ T1771] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 378.915712][ T30] audit: type=1326 audit(1761491860.097:3106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5625 comm="syz.4.1401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f243711bfc9 code=0x7ffc0000 [ 378.943890][ T30] audit: type=1326 audit(1761491860.108:3107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5625 comm="syz.4.1401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f243711bfc9 code=0x7ffc0000 [ 378.974861][ T30] audit: type=1326 audit(1761491860.108:3108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5625 comm="syz.4.1401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f243711bfc9 code=0x7ffc0000 [ 379.003129][ T30] audit: type=1326 audit(1761491860.108:3109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5625 comm="syz.4.1401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f243711bfc9 code=0x7ffc0000 [ 386.362688][ T30] audit: type=1326 audit(1761491860.108:3110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5625 comm="syz.4.1401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f243711bfc9 code=0x7ffc0000 [ 386.398058][ T5639] netlink: 64138 bytes leftover after parsing attributes in process `syz.6.1404'. [ 386.483772][ T1764] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 386.492423][ T1764] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 386.521299][ T1771] usb 1-1: device descriptor read/all, error -71 [ 386.568650][ T30] audit: type=1326 audit(1761491860.108:3111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5625 comm="syz.4.1401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f243711bfc9 code=0x7ffc0000 [ 386.592901][ T5653] binder: BINDER_SET_CONTEXT_MGR already set [ 386.617064][ T5653] binder: 5642:5653 ioctl 4018620d 200000000040 returned -16 [ 386.630579][ T5652] serio: Serial port ptm3 [ 386.673513][ T30] audit: type=1326 audit(1761491860.108:3112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5625 comm="syz.4.1401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f243711bfc9 code=0x7ffc0000 [ 386.824783][ T30] audit: type=1326 audit(1761491860.108:3113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5625 comm="syz.4.1401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f243711bfc9 code=0x7ffc0000 [ 386.940342][ T5665] loop0: detected capacity change from 0 to 512 [ 386.955900][ T30] audit: type=1326 audit(1761491860.108:3114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5625 comm="syz.4.1401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f243711c003 code=0x7ffc0000 [ 386.985696][ T4415] udevd[4415]: incorrect ext4 checksum on /dev/loop0 [ 386.994660][ T5665] EXT4-fs (loop0): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 387.010556][ T30] audit: type=1326 audit(1761491860.108:3115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5625 comm="syz.4.1401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f243711c003 code=0x7ffc0000 [ 387.028730][ T5668] cgroup: Invalid name [ 387.034200][ T30] audit: type=1326 audit(1761491860.108:3116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5625 comm="syz.4.1401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f243711bfc9 code=0x7ffc0000 [ 387.062595][ T30] audit: type=1326 audit(1761491860.108:3117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5625 comm="syz.4.1401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f243711bfc9 code=0x7ffc0000 [ 387.086057][ T30] audit: type=1326 audit(1761491860.108:3118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5625 comm="syz.4.1401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f243711bfc9 code=0x7ffc0000 [ 387.109943][ T30] audit: type=1400 audit(1761491860.118:3119): avc: denied { create } for pid=5627 comm="syz.6.1402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 387.236345][ T1665] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 388.763100][ T5701] fuse: Bad value for 'fd' [ 388.865014][ T5691] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1420'. [ 389.177762][ T5712] syz.6.1424[5712] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 389.177877][ T5712] syz.6.1424[5712] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 389.202915][ T1665] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 389.225111][ T1665] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 389.274320][ T5723] bridge0: port 1(bridge_slave_0) entered forwarding state [ 389.347090][ T5736] loop0: detected capacity change from 0 to 128 [ 389.445738][ T1771] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 389.476541][ T5744] loop4: detected capacity change from 0 to 1024 [ 390.332455][ T5753] FAULT_INJECTION: forcing a failure. [ 390.332455][ T5753] name failslab, interval 1, probability 0, space 0, times 0 [ 390.378484][ T5753] CPU: 1 PID: 5753 Comm: syz.0.1436 Tainted: G W syzkaller #0 [ 390.387297][ T5753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 390.397473][ T5753] Call Trace: [ 390.400765][ T5753] [ 390.403709][ T5753] __dump_stack+0x21/0x30 [ 390.408077][ T5753] dump_stack_lvl+0xee/0x150 [ 390.412683][ T5753] ? show_regs_print_info+0x20/0x20 [ 390.417906][ T5753] dump_stack+0x15/0x20 [ 390.422093][ T5753] should_fail+0x3c1/0x510 [ 390.426531][ T5753] __should_failslab+0xa4/0xe0 [ 390.431312][ T5753] should_failslab+0x9/0x20 [ 390.435833][ T5753] slab_pre_alloc_hook+0x3b/0xe0 [ 390.440785][ T5753] ? p9_client_prepare_req+0x1b7/0xbc0 [ 390.446263][ T5753] kmem_cache_alloc+0x44/0x260 [ 390.451049][ T5753] p9_client_prepare_req+0x1b7/0xbc0 [ 390.456360][ T5753] p9_client_rpc+0x155/0x1070 [ 390.461300][ T5753] ? p9_fid_create+0x280/0x280 [ 390.466107][ T5753] ? locks_free_lock_context+0x42/0x70 [ 390.471595][ T5753] ? __destroy_inode+0x357/0x520 [ 390.476561][ T5753] ? evict+0x7da/0x870 [ 390.480644][ T5753] ? do_syscall_64+0x4c/0xa0 [ 390.485255][ T5753] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 390.491354][ T5753] ? __kasan_check_write+0x14/0x20 [ 390.496489][ T5753] ? _raw_spin_lock+0x8e/0xe0 [ 390.501180][ T5753] ? _raw_spin_trylock_bh+0x130/0x130 [ 390.506602][ T5753] p9_client_clunk+0xbe/0x390 [ 390.511312][ T5753] v9fs_dentry_release+0x11c/0x180 [ 390.516526][ T5753] ? iput+0x635/0x7c0 [ 390.520524][ T5753] ? v9fs_cached_dentry_delete+0x40/0x40 [ 390.526215][ T5753] ? dentry_unlink_inode+0x32f/0x3e0 [ 390.531866][ T5753] ? v9fs_cached_dentry_delete+0x40/0x40 [ 390.537600][ T5753] __dentry_kill+0x4b5/0x650 [ 390.542354][ T5753] dentry_kill+0xc0/0x2a0 [ 390.546718][ T5753] dput+0x47/0x90 [ 390.550374][ T5753] do_one_tree+0xba/0xe0 [ 390.554649][ T5753] shrink_dcache_for_umount+0x6a/0x110 [ 390.560124][ T5753] generic_shutdown_super+0x66/0x330 [ 390.565434][ T5753] kill_anon_super+0x3a/0x70 [ 390.570049][ T5753] v9fs_kill_super+0x4c/0x90 [ 390.574655][ T5753] deactivate_locked_super+0xa0/0x100 [ 390.580138][ T5753] deactivate_super+0xaf/0xe0 [ 390.584937][ T5753] cleanup_mnt+0x446/0x500 [ 390.589387][ T5753] __cleanup_mnt+0x19/0x20 [ 390.593817][ T5753] task_work_run+0x127/0x190 [ 390.598421][ T5753] exit_to_user_mode_loop+0xd0/0xe0 [ 390.603631][ T5753] exit_to_user_mode_prepare+0x87/0xd0 [ 390.609106][ T5753] syscall_exit_to_user_mode+0x1a/0x30 [ 390.614591][ T5753] do_syscall_64+0x58/0xa0 [ 390.619037][ T5753] ? clear_bhb_loop+0x50/0xa0 [ 390.623861][ T5753] ? clear_bhb_loop+0x50/0xa0 [ 390.628556][ T5753] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 390.634487][ T5753] RIP: 0033:0x7f81e8dc1fc9 [ 390.638915][ T5753] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 390.658633][ T5753] RSP: 002b:00007f81e782a038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 390.667071][ T5753] RAX: 0000000000000000 RBX: 00007f81e9018fa0 RCX: 00007f81e8dc1fc9 [ 390.675060][ T5753] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000200000000000 [ 390.683042][ T5753] RBP: 00007f81e782a090 R08: 0000000000000000 R09: 0000000000000000 [ 390.691024][ T5753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 390.699038][ T5753] R13: 00007f81e9019038 R14: 00007f81e9018fa0 R15: 00007ffd1a5b29a8 [ 390.707119][ T5753] [ 391.305630][ T30] kauditd_printk_skb: 114 callbacks suppressed [ 391.305647][ T30] audit: type=1400 audit(1761491873.241:3234): avc: denied { write } for pid=5779 comm="syz.0.1445" name="ppp" dev="devtmpfs" ino=153 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 391.313386][ T5784] bridge0: port 3(syz_tun) entered blocking state [ 391.343435][ T5784] bridge0: port 3(syz_tun) entered disabled state [ 391.350498][ T5784] device syz_tun entered promiscuous mode [ 391.367234][ T5784] bridge0: port 3(syz_tun) entered blocking state [ 391.373758][ T5784] bridge0: port 3(syz_tun) entered forwarding state [ 391.410163][ T5787] loop1: detected capacity change from 0 to 512 [ 391.425029][ T5782] loop0: detected capacity change from 0 to 512 [ 391.473751][ T30] audit: type=1326 audit(1761491873.419:3235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5790 comm="syz.3.1448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2771c0fc9 code=0x7ffc0000 [ 391.559069][ T30] audit: type=1326 audit(1761491873.419:3236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5790 comm="syz.3.1448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc2771c0fc9 code=0x7ffc0000 [ 391.599428][ T5795] loop1: detected capacity change from 0 to 128 [ 391.637363][ T5795] FAT-fs (loop1): Unrecognized mount option "0xffffffffffffffffÿ01777777777777777777777¬‚ú=¨ËdÌž¬· Y ýS«38`¿·˜›‚" or missing value [ 391.663708][ T30] audit: type=1326 audit(1761491873.472:3237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5790 comm="syz.3.1448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2771c0fc9 code=0x7ffc0000 [ 391.700286][ T30] audit: type=1326 audit(1761491873.493:3238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5790 comm="syz.3.1448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7fc2771c0fc9 code=0x7ffc0000 [ 391.757335][ T5798] FAULT_INJECTION: forcing a failure. [ 391.757335][ T5798] name failslab, interval 1, probability 0, space 0, times 0 [ 391.770179][ T5798] CPU: 0 PID: 5798 Comm: syz.0.1450 Tainted: G W syzkaller #0 [ 391.772531][ T30] audit: type=1326 audit(1761491873.493:3239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5790 comm="syz.3.1448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2771c0fc9 code=0x7ffc0000 [ 391.778980][ T5798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 391.778995][ T5798] Call Trace: [ 391.779002][ T5798] [ 391.779010][ T5798] __dump_stack+0x21/0x30 [ 391.823087][ T5798] dump_stack_lvl+0xee/0x150 [ 391.827692][ T5798] ? show_regs_print_info+0x20/0x20 [ 391.832898][ T5798] dump_stack+0x15/0x20 [ 391.837060][ T5798] should_fail+0x3c1/0x510 [ 391.841504][ T5798] __should_failslab+0xa4/0xe0 [ 391.846275][ T5798] should_failslab+0x9/0x20 [ 391.850971][ T5798] slab_pre_alloc_hook+0x3b/0xe0 [ 391.855930][ T5798] ? p9_client_prepare_req+0x317/0xbc0 [ 391.861515][ T5798] kmem_cache_alloc+0x44/0x260 [ 391.866287][ T5798] p9_client_prepare_req+0x317/0xbc0 [ 391.871615][ T5798] p9_client_rpc+0x155/0x1070 [ 391.876336][ T5798] ? p9_fid_create+0x280/0x280 [ 391.881103][ T5798] ? locks_free_lock_context+0x42/0x70 [ 391.886572][ T5798] ? __destroy_inode+0x357/0x520 [ 391.891515][ T5798] ? evict+0x7da/0x870 [ 391.895589][ T5798] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 391.901666][ T5798] ? __kasan_check_write+0x14/0x20 [ 391.906779][ T5798] ? _raw_spin_lock+0x8e/0xe0 [ 391.911470][ T5798] ? _raw_spin_trylock_bh+0x130/0x130 [ 391.916848][ T5798] p9_client_clunk+0xbe/0x390 [ 391.921529][ T5798] v9fs_dentry_release+0x11c/0x180 [ 391.926642][ T5798] ? iput+0x635/0x7c0 [ 391.930628][ T5798] ? v9fs_cached_dentry_delete+0x40/0x40 [ 391.936263][ T5798] ? dentry_unlink_inode+0x32f/0x3e0 [ 391.941553][ T5798] ? v9fs_cached_dentry_delete+0x40/0x40 [ 391.947316][ T5798] __dentry_kill+0x4b5/0x650 [ 391.951911][ T5798] dentry_kill+0xc0/0x2a0 [ 391.956249][ T5798] dput+0x47/0x90 [ 391.959914][ T5798] do_one_tree+0xba/0xe0 [ 391.964161][ T5798] shrink_dcache_for_umount+0x6a/0x110 [ 391.969627][ T5798] generic_shutdown_super+0x66/0x330 [ 391.974919][ T5798] kill_anon_super+0x3a/0x70 [ 391.979521][ T5798] v9fs_kill_super+0x4c/0x90 [ 391.984114][ T5798] deactivate_locked_super+0xa0/0x100 [ 391.989492][ T5798] deactivate_super+0xaf/0xe0 [ 391.994175][ T5798] cleanup_mnt+0x446/0x500 [ 391.998597][ T5798] __cleanup_mnt+0x19/0x20 [ 392.003020][ T5798] task_work_run+0x127/0x190 [ 392.007636][ T5798] exit_to_user_mode_loop+0xd0/0xe0 [ 392.012833][ T5798] exit_to_user_mode_prepare+0x87/0xd0 [ 392.018315][ T5798] syscall_exit_to_user_mode+0x1a/0x30 [ 392.023791][ T5798] do_syscall_64+0x58/0xa0 [ 392.028212][ T5798] ? clear_bhb_loop+0x50/0xa0 [ 392.032900][ T5798] ? clear_bhb_loop+0x50/0xa0 [ 392.037583][ T5798] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 392.043506][ T5798] RIP: 0033:0x7f81e8dc1fc9 [ 392.048198][ T5798] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 392.067807][ T5798] RSP: 002b:00007f81e782a038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 392.076227][ T5798] RAX: 0000000000000000 RBX: 00007f81e9018fa0 RCX: 00007f81e8dc1fc9 [ 392.084203][ T5798] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000200000000000 [ 392.092175][ T5798] RBP: 00007f81e782a090 R08: 0000000000000000 R09: 0000000000000000 [ 392.100150][ T5798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 392.108119][ T5798] R13: 00007f81e9019038 R14: 00007f81e9018fa0 R15: 00007ffd1a5b29a8 [ 392.116099][ T5798] [ 392.179689][ T30] audit: type=1326 audit(1761491873.493:3240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5790 comm="syz.3.1448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2771c0fc9 code=0x7ffc0000 [ 392.875349][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 392.944661][ T5811] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1449'. [ 393.005948][ T30] audit: type=1326 audit(1761491875.025:3241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5825 comm="syz.3.1458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2771c0fc9 code=0x7ffc0000 [ 393.045539][ T30] audit: type=1326 audit(1761491875.025:3242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5825 comm="syz.3.1458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc2771c0fc9 code=0x7ffc0000 [ 393.367546][ T30] audit: type=1326 audit(1761491875.025:3243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5825 comm="syz.3.1458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2771c0fc9 code=0x7ffc0000 [ 393.903281][ T5839] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 394.180382][ T5847] SELinux: policydb magic number 0x6d656d6b does not match expected magic number 0xf97cff8c [ 394.201448][ T5847] SELinux: failed to load policy [ 394.218320][ T1591] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 394.237751][ T5847] loop4: detected capacity change from 0 to 128 [ 394.494304][ T1591] usb 1-1: Using ep0 maxpacket: 16 [ 395.084941][ T1591] usb 1-1: unable to get BOS descriptor set [ 395.117788][ T45] Bluetooth: hci0: Frame reassembly failed (-84) [ 395.161229][ T1591] usb 1-1: config 1 has an invalid descriptor of length 105, skipping remainder of the config [ 395.174992][ T1591] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 395.342615][ T1591] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 395.351815][ T1591] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.361470][ T1591] usb 1-1: Product: syz [ 395.365909][ T1591] usb 1-1: Manufacturer: syz [ 395.370748][ T1591] usb 1-1: SerialNumber: syz [ 395.713881][ T1591] cdc_ether 1-1:1.0: skipping garbage [ 395.719719][ T1591] usb 1-1: bad CDC descriptors [ 395.733005][ T1591] usb 1-1: USB disconnect, device number 19 [ 395.856880][ T5884] loop4: detected capacity change from 0 to 2048 [ 396.713083][ T30] kauditd_printk_skb: 58 callbacks suppressed [ 396.721243][ T30] audit: type=1326 audit(1761491878.920:3302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5895 comm="syz.4.1477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f243711bfc9 code=0x7ffc0000 [ 396.734449][ T5900] loop6: detected capacity change from 0 to 4096 [ 396.745356][ T30] audit: type=1326 audit(1761491878.920:3303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5895 comm="syz.4.1477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f243711bfc9 code=0x7ffc0000 [ 396.774959][ T30] audit: type=1326 audit(1761491878.920:3304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5895 comm="syz.4.1477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f243711bfc9 code=0x7ffc0000 [ 396.799803][ T30] audit: type=1326 audit(1761491878.920:3305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5895 comm="syz.4.1477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f243711bfc9 code=0x7ffc0000 [ 396.823601][ T30] audit: type=1326 audit(1761491878.920:3306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5895 comm="syz.4.1477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f243711bfc9 code=0x7ffc0000 [ 396.853819][ T30] audit: type=1326 audit(1761491878.931:3307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5895 comm="syz.4.1477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f243711bfc9 code=0x7ffc0000 [ 396.878391][ T30] audit: type=1326 audit(1761491878.931:3308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5895 comm="syz.4.1477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f243711bfc9 code=0x7ffc0000 [ 396.902205][ T30] audit: type=1326 audit(1761491878.931:3309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5895 comm="syz.4.1477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f243711bfc9 code=0x7ffc0000 [ 396.930554][ T30] audit: type=1326 audit(1761491878.962:3310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5895 comm="syz.4.1477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=36 compat=0 ip=0x7f243711bfc9 code=0x7ffc0000 [ 396.954636][ T30] audit: type=1326 audit(1761491878.962:3311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5895 comm="syz.4.1477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f243711bfc9 code=0x7ffc0000 [ 397.058110][ T5900] loop6: detected capacity change from 0 to 512 [ 397.066393][ T1591] Bluetooth: hci0: command 0x1003 tx timeout [ 397.079203][ T5907] loop4: detected capacity change from 0 to 512 [ 397.085614][ T5870] Bluetooth: hci0: sending frame failed (-49) [ 397.156647][ T5913] syz.0.1482[5913] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 397.156762][ T5913] syz.0.1482[5913] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 398.081795][ T5922] loop4: detected capacity change from 0 to 512 [ 398.094994][ T1764] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 398.333170][ T1764] usb 7-1: Using ep0 maxpacket: 16 [ 398.447458][ T1764] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 398.464015][ T1764] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 398.484670][ T1764] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 398.511811][ T1764] usb 7-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 398.530725][ T1764] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.554599][ T1764] usb 7-1: config 0 descriptor?? [ 399.020841][ T1764] uclogic 0003:5543:0781.0009: unknown main item tag 0x0 [ 399.027944][ T1764] uclogic 0003:5543:0781.0009: unknown main item tag 0x0 [ 399.035511][ T1764] uclogic 0003:5543:0781.0009: unknown main item tag 0x0 [ 399.042796][ T1764] uclogic 0003:5543:0781.0009: unknown main item tag 0x0 [ 399.050074][ T1764] uclogic 0003:5543:0781.0009: unknown main item tag 0x0 [ 399.057551][ T1764] uclogic 0003:5543:0781.0009: No inputs registered, leaving [ 399.065951][ T1764] uclogic 0003:5543:0781.0009: hidraw0: USB HID v0.04 Device [HID 5543:0781] on usb-dummy_hcd.6-1/input0 [ 399.085558][ T1764] Bluetooth: hci0: command 0x1001 tx timeout [ 399.095305][ T5870] Bluetooth: hci0: sending frame failed (-49) [ 399.264393][ T5931] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1488'. [ 399.274898][ T5931] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1488'. [ 399.602876][ T5940] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1491'. [ 399.612460][ T5940] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1491'. [ 399.787665][ T5944] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 399.796466][ T5944] overlayfs: missing 'lowerdir' [ 399.877406][ T5946] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1493'. [ 399.887286][ T5946] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1493'. [ 400.276318][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 400.647547][ T5969] netlink: 'syz.0.1500': attribute type 12 has an invalid length. [ 401.274061][ T1764] Bluetooth: hci0: command 0x1009 tx timeout [ 401.280458][ T1665] usb 7-1: USB disconnect, device number 4 [ 401.499068][ T5980] syz.6.1501[5980] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 401.505323][ T5980] syz.6.1501[5980] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 401.833932][ T5985] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1506'. [ 401.863377][ T5985] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1506'. [ 402.965285][ T30] kauditd_printk_skb: 34 callbacks suppressed [ 402.965303][ T30] audit: type=1326 audit(1761491885.481:3346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5995 comm="syz.4.1510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f243711bfc9 code=0x7ffc0000 [ 402.996098][ T30] audit: type=1326 audit(1761491885.481:3347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5995 comm="syz.4.1510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f243711bfc9 code=0x7ffc0000 [ 403.029737][ T30] audit: type=1326 audit(1761491885.481:3348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5995 comm="syz.4.1510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f243711bfc9 code=0x7ffc0000 [ 403.083754][ T30] audit: type=1326 audit(1761491885.481:3349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5995 comm="syz.4.1510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f243711bfc9 code=0x7ffc0000 [ 403.124736][ T30] audit: type=1326 audit(1761491885.481:3350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5995 comm="syz.4.1510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f243711bfc9 code=0x7ffc0000 [ 403.181790][ T30] audit: type=1326 audit(1761491885.481:3351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5995 comm="syz.4.1510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f243711bfc9 code=0x7ffc0000 [ 403.255455][ T30] audit: type=1326 audit(1761491885.481:3352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5995 comm="syz.4.1510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f243711bfc9 code=0x7ffc0000 [ 403.282422][ T6006] fuse: Bad value for 'fd' [ 403.326268][ T30] audit: type=1326 audit(1761491885.481:3353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5995 comm="syz.4.1510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f243711bfc9 code=0x7ffc0000 [ 403.381221][ T30] audit: type=1326 audit(1761491885.481:3354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5995 comm="syz.4.1510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f243711bfc9 code=0x7ffc0000 [ 403.434445][ T30] audit: type=1326 audit(1761491885.481:3355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5995 comm="syz.4.1510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f243711bfc9 code=0x7ffc0000 [ 403.505947][ T6020] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1518'. [ 404.311130][ T6051] loop4: detected capacity change from 0 to 256 [ 404.335459][ T6051] /dev/loop4: Can't open blockdev [ 404.342592][ T6051] binder: 6050:6051 ioctl 4018620d 0 returned -22 [ 404.362729][ T6051] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6051 comm=syz.4.1526 [ 404.377110][ T6051] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=6051 comm=syz.4.1526 [ 404.411674][ T6051] loop4: detected capacity change from 0 to 512 [ 404.673670][ T6070] overlayfs: overlapping lowerdir path [ 405.087747][ T6074] xt_CT: You must specify a L4 protocol and not use inversions on it [ 405.434904][ T6078] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1535'. [ 405.485773][ T6087] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 405.500464][ T6083] x_tables: duplicate underflow at hook 2 [ 405.551715][ T6091] loop4: detected capacity change from 0 to 256 [ 406.127331][ T6093] 9pnet: Insufficient options for proto=fd [ 406.198437][ T6111] netlink: 260 bytes leftover after parsing attributes in process `syz.3.1544'. [ 406.334625][ T1665] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 406.486102][ T6115] loop1: detected capacity change from 0 to 40427 [ 406.506319][ T6115] F2FS-fs (loop1): invalid crc value [ 406.518410][ T6115] F2FS-fs (loop1): Found nat_bits in checkpoint [ 406.560960][ T6115] F2FS-fs (loop1): Start checkpoint disabled! [ 406.568963][ T6115] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 406.601404][ T1665] usb 1-1: Using ep0 maxpacket: 8 [ 406.734692][ T1665] usb 1-1: config 0 has an invalid interface number: 255 but max is 0 [ 406.746308][ T1665] usb 1-1: config 0 has no interface number 0 [ 406.759111][ T1665] usb 1-1: New USB device found, idVendor=0403, idProduct=da73, bcdDevice= 8.d0 [ 406.780762][ T1665] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.807305][ T1665] usb 1-1: config 0 descriptor?? [ 406.968279][ T45] attempt to access beyond end of device [ 406.968279][ T45] loop1: rw=2049, want=40968, limit=40427 [ 406.988976][ T45] attempt to access beyond end of device [ 406.988976][ T45] loop1: rw=2049, want=40992, limit=40427 [ 407.053243][ T6123] UDC core: couldn't find an available UDC or it's busy: -16 [ 407.077929][ T6123] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 407.117387][ T1665] usb 1-1: string descriptor 0 read error: -71 [ 407.201871][ T1665] usb 1-1: NDI device with a latency value of 1 [ 407.249416][ T1665] ftdi_sio 1-1:0.255: FTDI USB Serial Device converter detected [ 407.268857][ T1665] usb 1-1: Detected FT232RL [ 407.297140][ T1665] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 407.334801][ T1665] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 407.354326][ T1665] ftdi_sio 1-1:0.255: GPIO initialisation failed: -71 [ 407.395581][ T1665] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 407.479097][ T1665] usb 1-1: USB disconnect, device number 20 [ 407.497805][ T1665] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 407.517289][ T1665] ftdi_sio 1-1:0.255: device disconnected [ 407.873889][ T6125] loop1: detected capacity change from 0 to 40427 [ 407.908251][ T6125] F2FS-fs (loop1): invalid crc value [ 407.929345][ T6125] F2FS-fs (loop1): Found nat_bits in checkpoint [ 408.087870][ T6125] F2FS-fs (loop1): Start checkpoint disabled! [ 408.101491][ T6125] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 408.174044][ T6125] netlink: 165 bytes leftover after parsing attributes in process `syz.1.1547'. [ 408.291582][ T6145] syz.3.1551[6145] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 408.291702][ T6145] syz.3.1551[6145] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 408.435183][ T2970] attempt to access beyond end of device [ 408.435183][ T2970] loop1: rw=2049, want=40968, limit=40427 [ 408.484226][ T2970] attempt to access beyond end of device [ 408.484226][ T2970] loop1: rw=2049, want=40992, limit=40427 [ 408.740320][ T6148] loop4: detected capacity change from 0 to 1024 [ 408.827022][ T6150] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1554'. [ 408.894794][ T6150] bridge0: port 3(syz_tun) entered disabled state [ 408.918506][ T6150] device syz_tun left promiscuous mode [ 408.934660][ T6150] bridge0: port 3(syz_tun) entered disabled state [ 408.942214][ T6155] 9pnet: Insufficient options for proto=fd [ 408.973735][ T30] kauditd_printk_skb: 112 callbacks suppressed [ 408.973751][ T30] audit: type=1400 audit(1761491891.791:3468): avc: denied { write } for pid=6154 comm="syz.4.1556" name="usbmon9" dev="devtmpfs" ino=182 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 409.026412][ T6155] SELinux: policydb version 586747130 does not match my version range 15-33 [ 409.045554][ T6155] SELinux: failed to load policy [ 409.059336][ T30] audit: type=1400 audit(1761491891.791:3469): avc: denied { shutdown } for pid=6154 comm="syz.4.1556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 409.131774][ T6158] fuse: Bad value for 'fd' [ 409.146553][ T6158] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1557'. [ 409.158718][ T6161] loop4: detected capacity change from 0 to 256 [ 409.173654][ T6158] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1557'. [ 409.178354][ T6161] /dev/loop4: Can't open blockdev [ 409.225951][ T6158] netlink: 'syz.1.1557': attribute type 1 has an invalid length. [ 409.278386][ T6158] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1557'. [ 409.459462][ T6171] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1559'. [ 409.488955][ T6171] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1559'. [ 409.762717][ T30] audit: type=1400 audit(1761491892.620:3470): avc: denied { mount } for pid=6173 comm="syz.0.1561" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 409.874105][ T6174] netlink: 'syz.0.1561': attribute type 12 has an invalid length. [ 410.471906][ T30] audit: type=1326 audit(1761491893.365:3471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6187 comm="syz.4.1565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f243711bfc9 code=0x7ffc0000 [ 410.535409][ T30] audit: type=1326 audit(1761491893.365:3472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6187 comm="syz.4.1565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f243711bfc9 code=0x7ffc0000 [ 410.609990][ T30] audit: type=1326 audit(1761491893.386:3473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6187 comm="syz.4.1565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f243711bfc9 code=0x7ffc0000 [ 410.677649][ T30] audit: type=1326 audit(1761491893.386:3474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6187 comm="syz.4.1565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f243711bfc9 code=0x7ffc0000 [ 410.725100][ T30] audit: type=1326 audit(1761491893.386:3475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6187 comm="syz.4.1565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f243711bfc9 code=0x7ffc0000 [ 410.802135][ T30] audit: type=1326 audit(1761491893.386:3476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6187 comm="syz.4.1565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f243711bfc9 code=0x7ffc0000 [ 410.859511][ T30] audit: type=1326 audit(1761491893.386:3477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6187 comm="syz.4.1565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f243711bfc9 code=0x7ffc0000 [ 411.104604][ T6191] loop1: detected capacity change from 0 to 1024 [ 411.236045][ T6191] EXT4-fs (loop1): mounted filesystem without journal. Opts: nojournal_checksum,nodelalloc,max_dir_size_kb=0x0000000000000006,barrier,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none. [ 411.280128][ T6191] ext4 filesystem being mounted at /302/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 411.314423][ T6190] EXT4-fs error (device loop1): ext4_map_blocks:740: inode #15: comm syz.1.1567: lblock 0 mapped to illegal pblock 0 (length 1) [ 411.343399][ T6190] EXT4-fs error (device loop1): ext4_map_blocks:630: inode #15: comm syz.1.1567: lblock 0 mapped to illegal pblock 0 (length 1) [ 411.373985][ T6190] EXT4-fs error (device loop1): ext4_map_blocks:630: inode #15: comm syz.1.1567: lblock 0 mapped to illegal pblock 0 (length 1) [ 411.402685][ T6190] EXT4-fs error (device loop1): ext4_map_blocks:630: inode #15: comm syz.1.1567: lblock 0 mapped to illegal pblock 0 (length 1) [ 411.431262][ T6190] EXT4-fs error (device loop1): ext4_map_blocks:630: inode #15: comm syz.1.1567: lblock 0 mapped to illegal pblock 0 (length 1) [ 411.459605][ T6191] EXT4-fs error (device loop1): ext4_map_blocks:630: inode #15: comm syz.1.1567: lblock 0 mapped to illegal pblock 0 (length 1) [ 411.487612][ T6190] EXT4-fs error (device loop1): ext4_map_blocks:630: inode #15: comm syz.1.1567: lblock 0 mapped to illegal pblock 0 (length 1) [ 411.515800][ T6190] EXT4-fs error (device loop1): ext4_map_blocks:630: inode #15: comm syz.1.1567: lblock 0 mapped to illegal pblock 0 (length 1) [ 411.545771][ T6190] EXT4-fs error (device loop1): ext4_map_blocks:630: inode #15: comm syz.1.1567: lblock 0 mapped to illegal pblock 0 (length 1) [ 411.579390][ T6190] EXT4-fs error (device loop1): ext4_map_blocks:630: inode #15: comm syz.1.1567: lblock 0 mapped to illegal pblock 0 (length 1) [ 411.875342][ T6217] loop6: detected capacity change from 0 to 8192 [ 411.933481][ T6217] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.940784][ T6217] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.098824][ T6203] xt_hashlimit: max too large, truncated to 1048576 [ 412.505016][ T6249] syz.4.1581[6249] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 412.505140][ T6249] syz.4.1581[6249] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 412.702551][ T6254] UDC core: couldn't find an available UDC or it's busy: -16 [ 412.751416][ T6254] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 412.818841][ T6254] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 412.869362][ T1592] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 412.905220][ T6260] A link change request failed with some changes committed already. Interface veth1_to_hsr may have been left with an inconsistent configuration, please check. [ 413.222205][ T1592] usb 7-1: config 220 has an invalid interface number: 76 but max is 2 [ 413.230514][ T1592] usb 7-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 413.259658][ T1592] usb 7-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 413.279127][ T1592] usb 7-1: config 220 has no interface number 2 [ 413.285526][ T1592] usb 7-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 413.317210][ T1592] usb 7-1: config 220 interface 0 has no altsetting 0 [ 413.334113][ T1592] usb 7-1: config 220 interface 76 has no altsetting 0 [ 413.341068][ T1592] usb 7-1: config 220 interface 1 has no altsetting 0 [ 413.419237][ T6272] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.440386][ T6272] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 413.516954][ T1592] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 413.526060][ T1592] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.554329][ T1592] usb 7-1: Product: syz [ 413.565226][ T1592] usb 7-1: Manufacturer: syz [ 413.569869][ T1592] usb 7-1: SerialNumber: syz [ 413.728420][ T6] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 413.742423][ T6283] loop1: detected capacity change from 0 to 128 [ 413.810369][ T6283] UDC core: couldn't find an available UDC or it's busy: -16 [ 413.850886][ T6283] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 413.974097][ T6] usb 1-1: Using ep0 maxpacket: 32 [ 414.107569][ T6] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 414.124800][ T6] usb 1-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 414.143254][ T6] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.166034][ T6] usb 1-1: config 0 descriptor?? [ 414.632551][ T6] elo 0003:04E7:0009.000A: item fetching failed at offset 4/5 [ 414.644100][ T6] elo 0003:04E7:0009.000A: parse failed [ 414.656988][ T6] elo: probe of 0003:04E7:0009.000A failed with error -22 [ 414.844377][ T1580] usb 1-1: USB disconnect, device number 21 [ 415.050535][ T1602] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 415.250545][ T1602] usb 2-1: device descriptor read/64, error -32 [ 415.508261][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 417.130186][ T1602] usb 2-1: device descriptor read/64, error -32 [ 417.308824][ T1592] usb 7-1: Found UVC 7.01 device syz (8086:0b07) [ 417.315357][ T1592] usb 7-1: No valid video chain found. [ 417.321158][ T1592] usb 7-1: selecting invalid altsetting 0 [ 417.329862][ T30] kauditd_printk_skb: 41 callbacks suppressed [ 417.329878][ T30] audit: type=1400 audit(1761491900.567:3519): avc: denied { write } for pid=6307 comm="syz.1.1600" path="socket:[36496]" dev="sockfs" ino=36496 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 417.813440][ T1602] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 417.827320][ T1592] usb 7-1: USB disconnect, device number 5 [ 418.032029][ T1602] usb 2-1: device descriptor read/64, error -32 [ 418.146370][ T6328] syz.3.1604[6328] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 418.146488][ T6328] syz.3.1604[6328] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 418.357068][ T1602] usb 2-1: device descriptor read/64, error -32 [ 418.365444][ T1665] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 418.490956][ T1602] usb usb2-port1: attempt power cycle [ 418.563600][ T6332] UDC core: couldn't find an available UDC or it's busy: -16 [ 418.577813][ T6332] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 418.660749][ T1665] usb 1-1: Using ep0 maxpacket: 8 [ 418.794212][ T1665] usb 1-1: config 0 has an invalid interface number: 31 but max is 0 [ 418.812659][ T1665] usb 1-1: config 0 has no interface number 0 [ 418.879806][ T1602] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 418.975555][ T1665] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 418.994641][ T1602] usb 2-1: device descriptor read/8, error -32 [ 418.994709][ T1665] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.019466][ T1665] usb 1-1: Product: syz [ 419.029361][ T1665] usb 1-1: Manufacturer: syz [ 419.039222][ T1665] usb 1-1: SerialNumber: syz [ 419.049471][ T1665] usb 1-1: config 0 descriptor?? [ 419.210675][ T6336] loop1: detected capacity change from 0 to 256 [ 419.251533][ T1602] usb 2-1: device descriptor read/8, error -32 [ 419.308042][ T6336] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 419.324755][ T6336] incfs: Can't find or create .incomplete dir in ./file0 [ 419.328400][ T1665] usb 1-1: Found UVC 0.04 device syz (046d:08c3) [ 419.332100][ T6336] incfs: mount failed -28 [ 419.403552][ T1665] uvcvideo 1-1:0.31: Entity type for entity Output 6 was not initialized! [ 419.437053][ T1665] usb 1-1: USB disconnect, device number 22 [ 419.856228][ T6346] binder: 6341:6346 ioctl 4018620d 0 returned -22 [ 419.917684][ T30] audit: type=1400 audit(1761491903.254:3520): avc: denied { map } for pid=6341 comm="syz.0.1609" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 419.945390][ T1602] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 420.176968][ T1602] usb 2-1: device descriptor read/8, error -32 [ 420.759582][ T6350] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1611'. [ 421.526739][ T6358] syz.0.1613 uses obsolete (PF_INET,SOCK_PACKET) [ 421.547508][ T1602] usb 2-1: device descriptor read/8, error -32 [ 421.661686][ T1602] usb usb2-port1: unable to enumerate USB device [ 421.734690][ T30] audit: type=1400 audit(1761491905.186:3521): avc: denied { mounton } for pid=6357 comm="syz.0.1613" path="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 421.865591][ T30] audit: type=1400 audit(1761491905.186:3522): avc: denied { mount } for pid=6357 comm="syz.0.1613" name="/" dev="ramfs" ino=37476 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 421.908784][ T30] audit: type=1400 audit(1761491905.218:3523): avc: denied { mounton } for pid=6357 comm="syz.0.1613" path="/" dev="ramfs" ino=37476 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 422.121773][ T30] audit: type=1400 audit(1761491905.417:3524): avc: denied { unmount } for pid=283 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 422.162361][ T6377] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1618'. [ 422.208316][ T6377] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1618'. [ 422.269506][ T30] audit: type=1400 audit(1761491905.428:3525): avc: denied { unmount } for pid=283 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 422.403530][ T30] audit: type=1400 audit(1761491905.449:3526): avc: denied { setopt } for pid=6371 comm="syz.1.1616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 422.541843][ T30] audit: type=1400 audit(1761491905.469:3527): avc: denied { ioctl } for pid=6371 comm="syz.1.1616" path="/dev/snapshot" dev="devtmpfs" ino=90 ioctlcmd=0x9403 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 423.312910][ T6397] loop4: detected capacity change from 0 to 16 [ 423.327514][ T6380] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.349134][ T6380] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.361758][ T6380] device bridge_slave_0 entered promiscuous mode [ 423.381804][ T6380] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.390369][ T6397] erofs: (device loop4): mounted with root inode @ nid 36. [ 423.410494][ T6380] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.418319][ T6380] device bridge_slave_1 entered promiscuous mode [ 423.541038][ T6408] loop6: detected capacity change from 0 to 4096 [ 423.555617][ T2970] device bridge_slave_1 left promiscuous mode [ 423.565043][ T2970] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.573074][ T30] audit: type=1400 audit(1761491907.118:3528): avc: denied { setopt } for pid=6411 comm="syz.3.1629" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 423.592793][ T2970] device bridge_slave_0 left promiscuous mode [ 423.599887][ T2970] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.617008][ T2970] device veth0_vlan left promiscuous mode [ 423.752129][ T6415] syz.1.1630[6415] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 423.752223][ T6415] syz.1.1630[6415] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 423.765793][ T30] audit: type=1326 audit(1761491907.328:3529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6414 comm="syz.1.1630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4785792fc9 code=0x7ffc0000 [ 423.801258][ T30] audit: type=1326 audit(1761491907.328:3530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6414 comm="syz.1.1630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f4785792fc9 code=0x7ffc0000 [ 423.825044][ T30] audit: type=1326 audit(1761491907.328:3531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6414 comm="syz.1.1630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4785792fc9 code=0x7ffc0000 [ 423.850829][ T30] audit: type=1326 audit(1761491907.328:3532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6414 comm="syz.1.1630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f4785792fc9 code=0x7ffc0000 [ 423.881874][ T30] audit: type=1326 audit(1761491907.328:3533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6414 comm="syz.1.1630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4785792fc9 code=0x7ffc0000 [ 424.374285][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 424.382259][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 424.397836][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 424.411808][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 424.420493][ T367] bridge0: port 1(bridge_slave_0) entered blocking state [ 424.427605][ T367] bridge0: port 1(bridge_slave_0) entered forwarding state [ 424.436589][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 424.445245][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 424.479527][ T367] bridge0: port 2(bridge_slave_1) entered blocking state [ 424.486662][ T367] bridge0: port 2(bridge_slave_1) entered forwarding state [ 424.495001][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 424.595224][ T6443] syz.6.1635[6443] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 424.595321][ T6443] syz.6.1635[6443] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 424.614305][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 424.640733][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 424.649747][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 424.669915][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 424.693617][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 424.707921][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 424.727091][ T6380] device veth0_vlan entered promiscuous mode [ 424.749584][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 424.758234][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 424.772040][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 424.780819][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 424.813510][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 424.839440][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 424.872996][ T6380] device veth1_macvtap entered promiscuous mode [ 424.894858][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 424.903676][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 424.926480][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 424.946860][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 425.289768][ T6455] loop4: detected capacity change from 0 to 40427 [ 425.363389][ T6485] loop6: detected capacity change from 0 to 512 [ 425.458730][ T6455] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1642'. [ 425.492929][ T6455] binder: 6454:6455 ioctl c0306201 200000000680 returned -14 [ 425.523634][ T6485] loop6: detected capacity change from 0 to 1024 [ 425.544464][ T6494] syz.7.1651[6494] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 425.544543][ T6494] syz.7.1651[6494] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 425.554530][ T1592] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 425.594864][ T1592] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 425.743843][ T6485] overlayfs: failed to resolve './file0': -2 [ 427.270805][ T30] kauditd_printk_skb: 99 callbacks suppressed [ 427.270825][ T30] audit: type=1400 audit(1761491910.991:3633): avc: denied { create } for pid=6510 comm="syz.6.1660" name="file5" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=blk_file permissive=1 [ 427.398786][ T6511] loop6: detected capacity change from 0 to 512 [ 427.641474][ T6535] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1665'. [ 427.661787][ T6535] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=769 sclass=netlink_route_socket pid=6535 comm=syz.4.1665 [ 427.887421][ T6547] UDC core: couldn't find an available UDC or it's busy: -16 [ 427.903500][ T6544] loop6: detected capacity change from 0 to 4096 [ 427.910796][ T30] audit: type=1400 audit(1761491911.674:3634): avc: denied { ioctl } for pid=6539 comm="syz.4.1669" path="socket:[38188]" dev="sockfs" ino=38188 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 427.911011][ T6547] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 428.059255][ T6552] UDC core: couldn't find an available UDC or it's busy: -16 [ 428.077232][ T6552] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 428.164243][ T30] audit: type=1400 audit(1761491911.936:3635): avc: denied { read } for pid=6539 comm="syz.4.1669" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 428.277874][ T6560] device wireguard0 entered promiscuous mode [ 428.284901][ T6564] SELinux: Context system_u:object_r:gpg_exec_t:s0 is not valid (left unmapped). [ 428.294663][ T30] audit: type=1400 audit(1761491912.073:3636): avc: denied { relabelto } for pid=6563 comm="syz.4.1673" name="bus" dev="tmpfs" ino=1635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:gpg_exec_t:s0" [ 428.321876][ T30] audit: type=1400 audit(1761491912.094:3637): avc: denied { associate } for pid=6563 comm="syz.4.1673" name="bus" dev="tmpfs" ino=1635 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:gpg_exec_t:s0" [ 428.358512][ T30] audit: type=1400 audit(1761491912.146:3638): avc: denied { unlink } for pid=285 comm="syz-executor" name="bus" dev="tmpfs" ino=1635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:gpg_exec_t:s0" [ 428.477422][ T6570] loop4: detected capacity change from 0 to 1024 [ 428.550432][ T6578] loop4: detected capacity change from 0 to 128 [ 429.256594][ T6615] loop6: detected capacity change from 0 to 256 [ 429.274930][ T6615] /dev/loop6: Can't open blockdev [ 429.283111][ T30] audit: type=1326 audit(1761491913.112:3639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6614 comm="syz.6.1689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb085c09fc9 code=0x7ffc0000 [ 429.284932][ T6615] ÿÿÿÿÿÿ: renamed from vlan1 [ 429.323985][ T30] audit: type=1326 audit(1761491913.112:3640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6614 comm="syz.6.1689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb085c09fc9 code=0x7ffc0000 [ 429.390782][ T30] audit: type=1326 audit(1761491913.112:3641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6614 comm="syz.6.1689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb085c09fc9 code=0x7ffc0000 [ 429.425668][ T30] audit: type=1326 audit(1761491913.112:3642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6614 comm="syz.6.1689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fb085c09fc9 code=0x7ffc0000 [ 429.630598][ T6624] syz.3.1690[6624] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 429.630711][ T6624] syz.3.1690[6624] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 429.687144][ T6626] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6626 comm=syz.6.1693 [ 429.812521][ T6630] loop6: detected capacity change from 0 to 512 [ 429.962251][ T6633] loop4: detected capacity change from 0 to 256 [ 430.080454][ T6643] loop4: detected capacity change from 0 to 2048 [ 431.178086][ T6656] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 431.187313][ T6656] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 431.330065][ T6659] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1703'. [ 431.340315][ T6654] loop7: detected capacity change from 0 to 40427 [ 431.361259][ T6654] F2FS-fs (loop7): invalid crc value [ 431.380343][ T6654] F2FS-fs (loop7): Found nat_bits in checkpoint [ 431.390376][ T6659] loop4: detected capacity change from 0 to 512 [ 431.466142][ T6654] F2FS-fs (loop7): Start checkpoint disabled! [ 431.483612][ T6654] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6 [ 431.534595][ T6658] loop4: detected capacity change from 0 to 512 [ 431.626144][ T6663] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1704'. [ 431.765674][ T6670] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 431.774202][ T6670] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 432.185282][ T30] kauditd_printk_skb: 78 callbacks suppressed [ 432.185297][ T30] audit: type=1400 audit(1761491916.156:3721): avc: denied { unmount } for pid=285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 433.121657][ T6697] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1714'. [ 433.238813][ T2951] attempt to access beyond end of device [ 433.238813][ T2951] loop7: rw=2049, want=40968, limit=40427 [ 433.280562][ T2951] attempt to access beyond end of device [ 433.280562][ T2951] loop7: rw=2049, want=41000, limit=40427 [ 433.386163][ T6712] UDC core: couldn't find an available UDC or it's busy: -16 [ 433.393990][ T6712] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 433.397935][ T6710] loop4: detected capacity change from 0 to 8192 [ 433.444814][ T6] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 433.711219][ T6] usb 7-1: Using ep0 maxpacket: 16 [ 434.287458][ T1580] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 434.364083][ T6] usb 7-1: config 0 has an invalid interface number: 41 but max is 0 [ 434.372534][ T6] usb 7-1: config 0 has no interface number 0 [ 434.379018][ T6] usb 7-1: too many endpoints for config 0 interface 41 altsetting 2: 68, using maximum allowed: 30 [ 434.390056][ T6] usb 7-1: config 0 interface 41 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 68 [ 434.403715][ T6] usb 7-1: config 0 interface 41 has no altsetting 0 [ 434.492700][ T6725] syz.4.1722[6725] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 434.492790][ T6725] syz.4.1722[6725] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 434.539910][ T1592] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 434.568655][ T6] usb 7-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 434.585148][ T6] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.611710][ T6] usb 7-1: Product: syz [ 434.625433][ T6] usb 7-1: Manufacturer: syz [ 434.640526][ T6] usb 7-1: SerialNumber: syz [ 434.650241][ T6] usb 7-1: config 0 descriptor?? [ 434.711908][ T1580] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 434.737715][ T30] audit: type=1400 audit(1761491918.833:3722): avc: denied { map } for pid=6729 comm="syz.3.1724" path="socket:[39400]" dev="sockfs" ino=39400 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 434.940424][ T6] CoreChips: probe of 7-1:0.41 failed with error -22 [ 435.134004][ T6] usb 7-1: USB disconnect, device number 6 [ 435.154666][ T1592] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 435.168511][ T1592] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 435.179069][ T1592] usb 8-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 435.188461][ T1592] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.198907][ T1592] usb 8-1: config 0 descriptor?? [ 435.535865][ T6741] loop4: detected capacity change from 0 to 256 [ 435.570243][ T6741] exfat: Deprecated parameter 'utf8' [ 435.576339][ T6741] exfat: Deprecated parameter 'namecase' [ 435.582598][ T6741] exfat: Deprecated parameter 'utf8' [ 435.588237][ T6741] /dev/loop4: Can't open blockdev [ 435.725211][ T6754] x_tables: duplicate underflow at hook 3 [ 435.835342][ T6756] loop4: detected capacity change from 0 to 256 [ 435.982851][ T6756] loop4: detected capacity change from 0 to 256 [ 436.064176][ T6756] /dev/loop4: Can't open blockdev [ 436.797112][ T1591] usb 8-1: USB disconnect, device number 2 [ 436.849712][ T6769] loop4: detected capacity change from 0 to 512 [ 436.897833][ T30] audit: type=1400 audit(1761491921.101:3723): avc: denied { append } for pid=6774 comm="syz.7.1736" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 437.256942][ T6788] syz.4.1738[6788] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 437.257035][ T6788] syz.4.1738[6788] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 437.314343][ T6789] input: syz0 as /devices/virtual/input/input10 [ 437.597990][ T1591] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 437.713314][ T6809] netlink: 'syz.1.1743': attribute type 12 has an invalid length. [ 438.041327][ T6816] loop6: detected capacity change from 0 to 512 [ 438.070982][ T6817] UDC core: couldn't find an available UDC or it's busy: -16 [ 438.093271][ T6817] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 438.110123][ T30] audit: type=1400 audit(1761491922.371:3724): avc: denied { relabelto } for pid=6818 comm="syz.3.1746" name="cgroup.controllers" dev="tmpfs" ino=2299 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="@" [ 438.135886][ T1591] usb 8-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 438.149210][ T1591] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 438.158893][ T1591] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 48, changing to 9 [ 438.171869][ T30] audit: type=1400 audit(1761491922.371:3725): avc: denied { associate } for pid=6818 comm="syz.3.1746" name="cgroup.controllers" dev="tmpfs" ino=2299 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="@" [ 438.198937][ T30] audit: type=1400 audit(1761491922.382:3726): avc: denied { unlink } for pid=282 comm="syz-executor" name="cgroup.controllers" dev="tmpfs" ino=2299 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="@" [ 438.243420][ T30] audit: type=1326 audit(1761491922.518:3727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6812 comm="syz.6.1744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb085c09fc9 code=0x7ffc0000 [ 438.271466][ T30] audit: type=1326 audit(1761491922.518:3728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6812 comm="syz.6.1744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb085c09fc9 code=0x7ffc0000 [ 438.295459][ T30] audit: type=1326 audit(1761491922.518:3729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6812 comm="syz.6.1744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7fb085c09fc9 code=0x7ffc0000 [ 438.319086][ T30] audit: type=1326 audit(1761491922.518:3730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6812 comm="syz.6.1744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb085c09fc9 code=0x7ffc0000 [ 438.343020][ T30] audit: type=1326 audit(1761491922.518:3731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6812 comm="syz.6.1744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb085c09fc9 code=0x7ffc0000 [ 438.366880][ T30] audit: type=1326 audit(1761491922.550:3732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6812 comm="syz.6.1744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fb085c09fc9 code=0x7ffc0000 [ 438.397940][ T1591] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 438.399396][ T30] audit: type=1326 audit(1761491922.550:3733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6812 comm="syz.6.1744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb085c09fc9 code=0x7ffc0000 [ 438.410173][ T1591] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.438738][ T1591] usb 8-1: Product: syz [ 438.443053][ T1591] usb 8-1: Manufacturer: syz [ 438.447752][ T1591] usb 8-1: SerialNumber: syz [ 438.493529][ T1591] hub 8-1:1.0: bad descriptor, ignoring hub [ 438.499543][ T1591] hub: probe of 8-1:1.0 failed with error -5 [ 438.512928][ T1591] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 439.397767][ T1665] usb 8-1: USB disconnect, device number 3 [ 439.584298][ T6854] UDC core: couldn't find an available UDC or it's busy: -16 [ 439.591975][ T6854] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 439.971148][ T6858] syz.7.1759[6858] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 439.971897][ T6858] syz.7.1759[6858] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 443.026127][ T6875] loop6: detected capacity change from 0 to 4096 [ 443.140894][ T6900] loop6: detected capacity change from 0 to 256 [ 443.230115][ T6895] loop4: detected capacity change from 0 to 128 [ 443.805816][ T6908] loop4: detected capacity change from 0 to 256 [ 443.813281][ T6908] /dev/loop4: Can't open blockdev [ 445.321981][ T6915] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1775'. [ 445.341267][ T30] kauditd_printk_skb: 74 callbacks suppressed [ 445.341283][ T30] audit: type=1400 audit(1761491929.961:3808): avc: denied { setopt } for pid=6912 comm="syz.3.1776" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 445.413734][ T6920] loop4: detected capacity change from 0 to 1024 [ 445.439674][ T6915] device wireguard0 entered promiscuous mode [ 446.599809][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 446.930386][ T30] audit: type=1326 audit(1761491931.631:3809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6932 comm="syz.7.1780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d184c4fc9 code=0x7ffc0000 [ 446.967034][ T30] audit: type=1326 audit(1761491931.662:3810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6932 comm="syz.7.1780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=260 compat=0 ip=0x7f5d184c4fc9 code=0x7ffc0000 [ 447.062317][ T30] audit: type=1326 audit(1761491931.662:3811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6932 comm="syz.7.1780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d184c4fc9 code=0x7ffc0000 [ 447.095100][ T30] audit: type=1326 audit(1761491931.662:3812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6932 comm="syz.7.1780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f5d184c4fc9 code=0x7ffc0000 [ 447.158986][ T30] audit: type=1326 audit(1761491931.662:3813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6932 comm="syz.7.1780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d184c4fc9 code=0x7ffc0000 [ 447.189996][ T30] audit: type=1326 audit(1761491931.662:3814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6932 comm="syz.7.1780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7f5d184c4fc9 code=0x7ffc0000 [ 447.258591][ T30] audit: type=1326 audit(1761491931.662:3815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6932 comm="syz.7.1780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d184c4fc9 code=0x7ffc0000 [ 447.311468][ T6964] loop7: detected capacity change from 0 to 16 [ 447.327459][ T30] audit: type=1326 audit(1761491932.061:3816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6965 comm="syz.1.1790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4785792fc9 code=0x7ffc0000 [ 447.360343][ T30] audit: type=1326 audit(1761491932.071:3817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6965 comm="syz.1.1790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7f4785792fc9 code=0x7ffc0000 [ 447.405057][ T1591] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 447.413285][ T6964] erofs: (device loop7): mounted with root inode @ nid 36. [ 447.569786][ T6973] syz.4.1791[6973] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 447.569875][ T6973] syz.4.1791[6973] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 447.782625][ T6974] erofs: (device loop7): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 452.105227][ T6974] erofs: (device loop7): z_erofs_lz4_decompress_mem: failed to decompress -46 in[60, 4036] out[1851] [ 452.118461][ T6974] erofs: (device loop7): z_erofs_readpage: failed to read, err [-117] [ 452.160090][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 452.160111][ T30] audit: type=1400 audit(1761492701.046:3819): avc: denied { listen } for pid=6969 comm="syz.1.1792" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 452.876632][ T1591] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 452.957832][ T6998] loop7: detected capacity change from 0 to 256 [ 453.018973][ T6998] FAT-fs (loop7): Directory bread(block 64) failed [ 453.025747][ T6998] FAT-fs (loop7): Directory bread(block 65) failed [ 453.032410][ T6998] FAT-fs (loop7): Directory bread(block 66) failed [ 453.039169][ T6998] FAT-fs (loop7): Directory bread(block 67) failed [ 453.045747][ T6998] FAT-fs (loop7): Directory bread(block 68) failed [ 453.052392][ T6998] FAT-fs (loop7): Directory bread(block 69) failed [ 453.059028][ T6998] FAT-fs (loop7): Directory bread(block 70) failed [ 453.065564][ T6998] FAT-fs (loop7): Directory bread(block 71) failed [ 453.072241][ T6998] FAT-fs (loop7): Directory bread(block 72) failed [ 453.078803][ T6998] FAT-fs (loop7): Directory bread(block 73) failed [ 453.658041][ T30] audit: type=1400 audit(1761492706.705:3820): avc: denied { write } for pid=7003 comm="syz.7.1799" name="file0" dev="tmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 453.700393][ T30] audit: type=1400 audit(1761492706.736:3821): avc: denied { read } for pid=7003 comm="syz.7.1799" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=41156 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 453.775367][ T30] audit: type=1400 audit(1761492706.820:3822): avc: denied { read append } for pid=7009 comm="syz.4.1802" name="vga_arbiter" dev="devtmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 453.800749][ T1591] usb 7-1: device descriptor read/64, error -71 [ 453.829478][ T30] audit: type=1400 audit(1761492706.820:3823): avc: denied { open } for pid=7009 comm="syz.4.1802" path="/dev/vga_arbiter" dev="devtmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 453.955127][ T30] audit: type=1326 audit(1761492706.925:3824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7006 comm="syz.1.1801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4785792fc9 code=0x7ffc0000 [ 453.979360][ T30] audit: type=1326 audit(1761492706.925:3825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7006 comm="syz.1.1801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4785792fc9 code=0x7ffc0000 [ 454.437594][ T30] audit: type=1326 audit(1761492706.936:3826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7006 comm="syz.1.1801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4785792fc9 code=0x7ffc0000 [ 454.501380][ T30] audit: type=1326 audit(1761492706.936:3827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7006 comm="syz.1.1801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4785792fc9 code=0x7ffc0000 [ 454.526061][ T30] audit: type=1326 audit(1761492706.936:3828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7006 comm="syz.1.1801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f4785792fc9 code=0x7ffc0000 [ 454.552865][ T7017] binder: 7016:7017 ioctl c0306201 0 returned -14 [ 454.612611][ T7017] loop7: detected capacity change from 0 to 1024 [ 454.657737][ T1591] usb 7-1: device descriptor read/64, error -71 [ 454.784712][ T7031] tipc: Started in network mode [ 454.789972][ T7031] tipc: Node identity , cluster identity 4711 [ 454.801803][ T1591] usb usb7-port1: attempt power cycle [ 454.810414][ T7031] tipc: Failed to set node id, please configure manually [ 454.817581][ T7031] tipc: Enabling of bearer rejected, failed to enable media [ 455.339476][ T7040] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1807'. [ 456.028809][ T6873] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 456.097490][ T7052] syz.6.1812[7052] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 456.097578][ T7052] syz.6.1812[7052] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 456.581364][ T6873] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 456.610744][ T6873] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 456.781333][ T6873] usb 8-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 456.790619][ T6873] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.799021][ T6873] usb 8-1: Product: syz [ 456.934445][ T6873] usb 8-1: Manufacturer: syz [ 456.939463][ T6873] usb 8-1: SerialNumber: syz [ 456.948521][ T6873] usb 8-1: config 0 descriptor?? [ 457.143551][ T30] kauditd_printk_skb: 61 callbacks suppressed [ 457.149898][ T30] audit: type=1400 audit(1761492710.369:3890): avc: denied { watch watch_reads } for pid=7081 comm="syz.6.1822" path="/138" dev="tmpfs" ino=790 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 457.175558][ T30] audit: type=1400 audit(1761492710.401:3891): avc: denied { connect } for pid=7081 comm="syz.6.1822" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 457.199697][ T7039] UDC core: couldn't find an available UDC or it's busy: -16 [ 457.207413][ T30] audit: type=1400 audit(1761492710.401:3892): avc: denied { prog_load } for pid=7081 comm="syz.6.1822" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 457.227153][ T7039] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 457.234958][ T30] audit: type=1400 audit(1761492710.401:3893): avc: denied { execmem } for pid=7081 comm="syz.6.1822" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 457.256105][ T6873] usb 8-1: USB disconnect, device number 4 [ 457.268473][ T30] audit: type=1400 audit(1761492710.411:3894): avc: denied { bpf } for pid=7038 comm="syz.7.1811" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 457.289532][ T30] audit: type=1400 audit(1761492710.411:3895): avc: denied { perfmon } for pid=7038 comm="syz.7.1811" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 457.310805][ T30] audit: type=1400 audit(1761492710.411:3896): avc: denied { prog_run } for pid=7038 comm="syz.7.1811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 457.318452][ T7082] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1822'. [ 457.339196][ T7082] netlink: 21 bytes leftover after parsing attributes in process `syz.6.1822'. [ 457.339244][ T30] audit: type=1400 audit(1761492710.411:3897): avc: denied { read write } for pid=7038 comm="syz.7.1811" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 457.348581][ T7082] netlink: 'syz.6.1822': attribute type 2 has an invalid length. [ 457.372039][ T30] audit: type=1400 audit(1761492710.411:3898): avc: denied { open } for pid=7038 comm="syz.7.1811" path="/dev/raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 457.380286][ T7082] netlink: 21 bytes leftover after parsing attributes in process `syz.6.1822'. [ 457.412859][ T30] audit: type=1400 audit(1761492710.411:3899): avc: denied { ioctl } for pid=7038 comm="syz.7.1811" path="/dev/raw-gadget" dev="devtmpfs" ino=254 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 457.507598][ T7085] loop6: detected capacity change from 0 to 2048 [ 457.541905][ T7085] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1823'. [ 457.628534][ T7089] loop6: detected capacity change from 0 to 4096 [ 457.640505][ T7091] loop4: detected capacity change from 0 to 128 [ 457.815113][ T7102] 9pnet: Insufficient options for proto=fd [ 457.823854][ T7102] overlayfs: overlapping lowerdir path [ 457.830317][ T7102] overlayfs: overlapping lowerdir path [ 457.880450][ T7106] device pim6reg1 entered promiscuous mode [ 458.276917][ T7112] syz.1.1832[7112] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 458.277004][ T7112] syz.1.1832[7112] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 459.314126][ T7131] loop4: detected capacity change from 0 to 40427 [ 460.041416][ T7143] loop6: detected capacity change from 0 to 512 [ 461.905920][ T7155] block device autoloading is deprecated and will be removed. [ 461.931973][ T30] kauditd_printk_skb: 196 callbacks suppressed [ 461.931992][ T30] audit: type=1400 audit(1761492715.388:4096): avc: denied { mount } for pid=7140 comm="syz.3.1841" name="/" dev="configfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 461.978841][ T30] audit: type=1400 audit(1761492715.440:4097): avc: denied { read write } for pid=7151 comm="syz.4.1843" name="vhost-vsock" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 462.006024][ T7158] loop4: detected capacity change from 0 to 256 [ 462.012761][ T30] audit: type=1400 audit(1761492715.440:4098): avc: denied { open } for pid=7151 comm="syz.4.1843" path="/dev/vhost-vsock" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 462.012871][ T7155] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 462.065388][ T30] audit: type=1400 audit(1761492715.440:4099): avc: denied { ioctl } for pid=7151 comm="syz.4.1843" path="/dev/vhost-vsock" dev="devtmpfs" ino=264 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 462.148353][ T30] audit: type=1400 audit(1761492715.524:4100): avc: denied { write } for pid=7160 comm="syz.3.1844" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 462.195389][ T30] audit: type=1400 audit(1761492715.524:4101): avc: denied { read } for pid=7160 comm="syz.3.1844" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 462.429270][ T30] audit: type=1400 audit(1761492715.902:4102): avc: denied { write } for pid=7151 comm="syz.4.1843" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 462.472062][ T30] audit: type=1400 audit(1761492715.913:4103): avc: denied { open } for pid=7151 comm="syz.4.1843" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 462.597184][ T30] audit: type=1404 audit(1761492716.018:4104): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 462.603177][ T7174] loop4: detected capacity change from 0 to 512 [ 462.649797][ T30] audit: type=1404 audit(1761492716.018:4105): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 463.013678][ T7172] loop7: detected capacity change from 0 to 40427 [ 463.054941][ T7172] F2FS-fs (loop7): fault_injection options not supported [ 463.073877][ T7172] F2FS-fs (loop7): invalid crc value [ 463.082485][ T7172] F2FS-fs (loop7): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 463.388537][ T7172] F2FS-fs (loop7): recover fsync data on readonly fs [ 463.395555][ T7172] F2FS-fs (loop7): Cannot turn on quotas: -2 on 2 [ 463.403869][ T7172] F2FS-fs (loop7): checkpoint=disable on readonly fs [ 463.639616][ T7192] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1852'. [ 463.664441][ T7192] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1852'. [ 464.165956][ T7211] loop6: detected capacity change from 0 to 512 [ 464.577259][ T7221] device veth3 entered promiscuous mode [ 464.627007][ T7222] loop6: detected capacity change from 0 to 512 [ 464.992802][ T7227] incfs: Can't find or create .index dir in ./file0 [ 465.007291][ T7227] incfs: mount failed -5 [ 465.166560][ T7243] loop7: detected capacity change from 0 to 256 [ 465.184130][ T7243] exFAT-fs (loop7): Invalid boot checksum (boot checksum : 0xffffff00, checksum : 0x1119ac00) [ 465.194511][ T7243] exFAT-fs (loop7): invalid boot region [ 465.200103][ T7243] exFAT-fs (loop7): failed to recognize exfat type [ 467.289455][ T7254] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 467.307332][ T7255] futex_wake_op: syz.1.1871 tries to shift op by 32; fix this program [ 467.316799][ T30] kauditd_printk_skb: 57 callbacks suppressed [ 467.316815][ T30] audit: type=1400 audit(1761492721.047:4163): avc: denied { map } for pid=7257 comm="syz.3.1872" path="socket:[41639]" dev="sockfs" ino=41639 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 467.376771][ T30] audit: type=1400 audit(1761492721.047:4164): avc: denied { read accept } for pid=7257 comm="syz.3.1872" path="socket:[41639]" dev="sockfs" ino=41639 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 467.471348][ T7272] fuse: Unknown parameter 'f' [ 467.473198][ T30] audit: type=1400 audit(1761492721.078:4165): avc: denied { module_request } for pid=7252 comm="syz.7.1870" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 467.500994][ T7271] overlayfs: failed to clone lowerpath [ 467.517715][ T7271] overlayfs: failed to clone lowerpath [ 467.527989][ T7274] loop7: detected capacity change from 0 to 1024 [ 467.534524][ T30] audit: type=1400 audit(1761492721.131:4166): avc: denied { name_bind } for pid=7267 comm="syz.1.1876" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 467.671265][ T30] audit: type=1400 audit(1761492721.204:4167): avc: denied { read write } for pid=7269 comm="syz.7.1875" name="fuse" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 467.718366][ T30] audit: type=1400 audit(1761492721.204:4168): avc: denied { open } for pid=7269 comm="syz.7.1875" path="/dev/fuse" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 467.798978][ T7274] EXT4-fs (loop7): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,delalloc,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none. [ 467.828559][ T7274] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 467.840132][ T30] audit: type=1400 audit(1761492721.204:4169): avc: denied { mounton } for pid=7269 comm="syz.7.1875" path="/30/file0" dev="tmpfs" ino=184 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 467.887437][ T30] audit: type=1400 audit(1761492721.215:4170): avc: denied { ioctl } for pid=7269 comm="syz.7.1875" path="socket:[42014]" dev="sockfs" ino=42014 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 467.976879][ T30] audit: type=1400 audit(1761492721.215:4171): avc: denied { write } for pid=7269 comm="syz.7.1875" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 467.996929][ T30] audit: type=1400 audit(1761492721.236:4172): avc: denied { mount } for pid=7266 comm="syz.3.1874" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 469.634995][ T7291] netlink: 95 bytes leftover after parsing attributes in process `syz.4.1868'. [ 469.731536][ T7295] loop4: detected capacity change from 0 to 2048 [ 469.772675][ T1764] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 469.923463][ T7298] binder: 7296:7298 ioctl c0306201 200000000040 returned -22 [ 470.011674][ T7315] netem: incorrect gi model size [ 470.033409][ T7319] UDC core: couldn't find an available UDC or it's busy: -16 [ 470.052504][ T7319] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 470.201409][ T1764] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 470.212360][ T1764] usb 8-1: New USB device found, idVendor=1294, idProduct=1320, bcdDevice= 0.00 [ 470.228838][ T1764] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.245580][ T1764] usb 8-1: config 0 descriptor?? [ 470.477639][ T1764] usbhid 8-1:0.0: can't add hid device: -71 [ 470.483816][ T1764] usbhid: probe of 8-1:0.0 failed with error -71 [ 470.500245][ T1764] usb 8-1: USB disconnect, device number 5 [ 471.766532][ T7347] loop7: detected capacity change from 0 to 256 [ 471.792367][ T7347] SELinux: security_context_str_to_sid(unconfined_u) failed for (dev ?, type ?) errno=-22 [ 471.802434][ T7347] exfat: Unknown parameter 'fsmagic' [ 471.933810][ T7352] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1899'. [ 472.201467][ T6873] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 472.339225][ T30] kauditd_printk_skb: 99 callbacks suppressed [ 472.339243][ T30] audit: type=1400 audit(1761492726.317:4272): avc: denied { map } for pid=7365 comm="syz.4.1904" path="socket:[42218]" dev="sockfs" ino=42218 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 472.405227][ T30] audit: type=1400 audit(1761492726.359:4273): avc: denied { read } for pid=7365 comm="syz.4.1904" path="socket:[42218]" dev="sockfs" ino=42218 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 472.447774][ T30] audit: type=1400 audit(1761492726.412:4274): avc: denied { setopt } for pid=7361 comm="syz.3.1903" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 472.506142][ T6873] usb 7-1: Using ep0 maxpacket: 16 [ 472.801578][ T6873] usb 7-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 472.814934][ T6873] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.832113][ T6873] usb 7-1: Product: syz [ 472.842503][ T6873] usb 7-1: Manufacturer: syz [ 472.852284][ T6873] usb 7-1: SerialNumber: syz [ 472.863328][ T6873] usb 7-1: config 0 descriptor?? [ 472.917088][ T6873] ftdi_sio 7-1:0.0: FTDI USB Serial Device converter detected [ 472.929513][ T6873] usb 7-1: Detected FT232H [ 473.004226][ T30] audit: type=1400 audit(1761492727.010:4275): avc: denied { read } for pid=7371 comm="syz.7.1906" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 473.067961][ T30] audit: type=1400 audit(1761492727.031:4276): avc: denied { open } for pid=7371 comm="syz.7.1906" path="/dev/kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 473.096833][ T30] audit: type=1400 audit(1761492727.031:4277): avc: denied { ioctl } for pid=7371 comm="syz.7.1906" path="/dev/kvm" dev="devtmpfs" ino=82 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 473.144443][ T6873] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 473.177032][ T30] audit: type=1400 audit(1761492727.199:4278): avc: denied { mount } for pid=7378 comm="syz.4.1908" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 473.277533][ T7380] loop4: detected capacity change from 0 to 1024 [ 473.415982][ T7352] loop6: detected capacity change from 0 to 1024 [ 473.495468][ T7352] loop6: detected capacity change from 0 to 512 [ 473.502087][ T1665] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 473.727560][ T6873] usb 7-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 473.763422][ T1665] usb 8-1: Using ep0 maxpacket: 16 [ 473.894815][ T1665] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 473.905917][ T1665] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 473.923600][ T1665] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 473.933262][ T1665] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.206372][ T1665] usb 8-1: config 0 descriptor?? [ 474.214719][ T6873] usb 7-1: USB disconnect, device number 10 [ 474.224830][ T30] audit: type=1400 audit(1761492728.291:4279): avc: denied { unmount } for pid=285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 474.232301][ T6873] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 474.264167][ T6873] ftdi_sio 7-1:0.0: device disconnected [ 474.335647][ T7400] netem: change failed [ 474.355125][ T7402] loop4: detected capacity change from 0 to 512 [ 474.529086][ T30] audit: type=1400 audit(1761492728.617:4280): avc: denied { write } for pid=7401 comm="syz.4.1914" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 474.549600][ T30] audit: type=1400 audit(1761492728.617:4281): avc: denied { nlmsg_write } for pid=7401 comm="syz.4.1914" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 474.585160][ T7402] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 474.614347][ T7402] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1914'. [ 474.689315][ T1665] HID 045e:07da: Invalid code 65791 type 1 [ 474.719033][ T1665] input: HID 045e:07da as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:045E:07DA.000C/input/input12 [ 474.751345][ T7413] device vlan1 entered promiscuous mode [ 474.760939][ T1665] microsoft 0003:045E:07DA.000C: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.7-1/input0 [ 474.784365][ T7413] device syz_tun entered promiscuous mode [ 474.846088][ T7422] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1919'. [ 475.678168][ T7426] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1920'. [ 475.692157][ T7426] device veth3 entered promiscuous mode [ 475.703547][ T7433] overlayfs: failed to clone upperpath [ 475.881088][ T7382] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1909'. [ 475.896343][ T7382] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7382 comm=syz.7.1909 [ 475.914496][ T7443] loop4: detected capacity change from 0 to 256 [ 475.944691][ T7432] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1909'. [ 475.963659][ T6873] usb 8-1: USB disconnect, device number 6 [ 476.077743][ T7443] loop4: detected capacity change from 0 to 256 [ 476.164437][ T7443] exfat: Unknown parameter '' [ 476.934368][ T7470] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1933'. [ 477.118773][ T7473] loop6: detected capacity change from 0 to 4096 [ 477.194858][ T7478] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1936'. [ 477.242184][ T7477] loop7: detected capacity change from 0 to 512 [ 477.463678][ T7477] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 477.497581][ T7477] EXT4-fs (loop7): 1 truncate cleaned up [ 477.503260][ T7477] EXT4-fs (loop7): mounted filesystem without journal. Opts: barrier=0x0000000000000101,errors=remount-ro,. Quota mode: none. [ 477.519233][ T30] kauditd_printk_skb: 35 callbacks suppressed [ 477.519250][ T30] audit: type=1400 audit(1761492731.756:4317): avc: denied { read write } for pid=7474 comm="syz.7.1936" name="file1" dev="loop7" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 477.607514][ T30] audit: type=1400 audit(1761492731.756:4318): avc: denied { open } for pid=7474 comm="syz.7.1936" path="/40/bus/file1" dev="loop7" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 477.758953][ T7486] tmpfs: Bad value for 'fscontext' [ 477.778419][ T7486] loop6: detected capacity change from 0 to 4096 [ 477.948359][ T7489] loop4: detected capacity change from 0 to 512 [ 479.056503][ T30] audit: type=1400 audit(1761492733.362:4319): avc: denied { connect } for pid=7503 comm="syz.7.1939" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 479.081342][ T7506] loop7: detected capacity change from 0 to 512 [ 479.093019][ T7490] device veth0_vlan left promiscuous mode [ 479.101778][ T7506] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 479.120312][ T7490] device veth0_vlan entered promiscuous mode [ 479.123814][ T7506] EXT4-fs (loop7): invalid journal inode [ 479.136548][ T7506] EXT4-fs (loop7): can't get journal size [ 479.149022][ T7506] EXT4-fs (loop7): 1 truncate cleaned up [ 479.155484][ T7506] EXT4-fs (loop7): mounted filesystem without journal. Opts: norecovery,max_batch_time=0x0000000000000003,,errors=continue. Quota mode: none. [ 479.170974][ T7490] device veth1_macvtap left promiscuous mode [ 479.179895][ T30] audit: type=1400 audit(1761492733.499:4320): avc: denied { ioctl } for pid=7503 comm="syz.7.1939" path="/41/file0/file1" dev="loop7" ino=15 ioctlcmd=0x6608 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 479.205825][ T7490] device veth1_macvtap entered promiscuous mode [ 479.222096][ T7506] EXT4-fs warning (device loop7): verify_group_input:147: Cannot add at group 6 (only 1 groups) [ 479.240577][ T2974] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 479.262623][ T2974] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 479.273166][ T2974] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 479.281589][ T2974] bridge0: port 1(bridge_slave_0) entered blocking state [ 479.288777][ T2974] bridge0: port 1(bridge_slave_0) entered forwarding state [ 479.296194][ T30] audit: type=1400 audit(1761492733.614:4321): avc: denied { setopt } for pid=7503 comm="syz.7.1939" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 479.304866][ T2974] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 479.315921][ T30] audit: type=1400 audit(1761492733.614:4322): avc: denied { bind } for pid=7503 comm="syz.7.1939" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 479.325191][ T2974] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 479.343884][ T30] audit: type=1400 audit(1761492733.614:4323): avc: denied { listen } for pid=7503 comm="syz.7.1939" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 479.371630][ T30] audit: type=1400 audit(1761492733.614:4324): avc: denied { connect } for pid=7503 comm="syz.7.1939" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 479.372869][ T7522] syz.4.1946[7522] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 479.391927][ T2974] bridge0: port 2(bridge_slave_1) entered blocking state [ 479.403565][ T7522] syz.4.1946[7522] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 479.410327][ T2974] bridge0: port 2(bridge_slave_1) entered forwarding state [ 479.429425][ T2974] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 479.438004][ T2974] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 479.446471][ T2974] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 479.454768][ T2974] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 479.463114][ T2974] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 479.473072][ T2974] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 479.481358][ T2974] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 479.482263][ T30] audit: type=1400 audit(1761492733.814:4325): avc: denied { ioctl } for pid=7527 comm="syz.7.1948" path="socket:[42685]" dev="sockfs" ino=42685 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 479.490282][ T2974] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 479.523484][ T2974] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 479.532155][ T2974] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 479.540762][ T2974] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 479.549534][ T2974] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 479.558068][ T2974] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 479.566750][ T2974] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 479.574970][ T2974] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 479.583386][ T2974] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 479.591582][ T30] audit: type=1326 audit(1761492733.929:4326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7531 comm="syz.7.1950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d184c4fc9 code=0x7ffc0000 [ 479.615325][ T2974] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 479.623628][ T2974] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 479.632553][ T2974] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 479.641275][ T2974] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 479.649662][ T2974] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 479.657731][ T2974] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 479.665474][ T2974] IPv6: ADDRCONF(NETDEV_CHANGE): ÿÿÿÿÿÿ: link becomes ready [ 479.673272][ T2974] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 479.681691][ T2974] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 479.690108][ T2974] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 479.698098][ T2974] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready [ 479.705690][ T2974] bridge1: port 1(veth3) entered blocking state [ 479.712157][ T2974] bridge1: port 1(veth3) entered forwarding state [ 479.719102][ T2974] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 479.738491][ T2974] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 479.746475][ T2974] IPv6: ADDRCONF(NETDEV_CHANGE): bridge1: link becomes ready [ 479.765677][ T7532] loop7: detected capacity change from 0 to 40427 [ 479.786104][ T7534] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1951'. [ 479.797991][ T7532] F2FS-fs (loop7): invalid crc value [ 479.839671][ T7532] F2FS-fs (loop7): Found nat_bits in checkpoint [ 479.846736][ T7543] UDC core: couldn't find an available UDC or it's busy: -16 [ 479.864171][ T7543] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 479.910130][ T7532] F2FS-fs (loop7): Cannot turn on quotas: -2 on 0 [ 479.919207][ T7532] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e4 [ 479.998292][ T7532] attempt to access beyond end of device [ 479.998292][ T7532] loop7: rw=2049, want=53256, limit=40427 [ 480.064732][ T7532] attempt to access beyond end of device [ 480.064732][ T7532] loop7: rw=0, want=53256, limit=40427 [ 480.100545][ T7545] loop6: detected capacity change from 0 to 40427 [ 480.120572][ T7554] loop4: detected capacity change from 0 to 256 [ 480.156437][ T7554] exfat: Deprecated parameter 'utf8' [ 480.161976][ T7554] exfat: Deprecated parameter 'namecase' [ 480.175818][ T7554] exfat: Deprecated parameter 'utf8' [ 480.183546][ T6380] attempt to access beyond end of device [ 480.183546][ T6380] loop7: rw=2049, want=45104, limit=40427 [ 480.215104][ T7554] /dev/loop4: Can't open blockdev [ 480.326847][ T7554] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 480.345240][ T7554] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 480.835352][ T7554] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 480.844260][ T7554] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 480.855863][ T7554] overlayfs: missing 'lowerdir' [ 481.511960][ T7558] loop4: detected capacity change from 0 to 256 [ 481.545739][ T7558] /dev/loop4: Can't open blockdev [ 481.754824][ T7582] fuse: Unknown parameter 'CN?ÔeÏÀe0x0000000000000006' [ 482.857421][ T30] kauditd_printk_skb: 74 callbacks suppressed [ 482.857439][ T30] audit: type=1400 audit(1761492737.352:4401): avc: denied { create } for pid=7595 comm="syz.4.1971" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 482.884722][ T307] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 482.902695][ T7597] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1969'. [ 482.915781][ T30] audit: type=1400 audit(1761492737.405:4402): avc: denied { ioctl } for pid=7595 comm="syz.4.1971" path="socket:[42793]" dev="sockfs" ino=42793 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 482.947466][ T30] audit: type=1400 audit(1761492737.405:4403): avc: denied { create } for pid=7595 comm="syz.4.1971" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 482.989137][ T7599] syz.1.1968[7599] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 482.989223][ T7599] syz.1.1968[7599] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 482.991196][ T7606] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1973'. [ 483.166310][ T7613] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 483.183464][ C0] Illegal XDP return value 16128, expect packet loss! [ 483.194442][ T7613] overlayfs: missing 'lowerdir' [ 483.227250][ T7615] loop4: detected capacity change from 0 to 512 [ 483.249951][ T307] usb 8-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 483.335661][ T307] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 483.348991][ T307] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 483.367520][ T307] usb 8-1: SerialNumber: syz [ 483.662557][ T30] audit: type=1400 audit(1761492738.203:4404): avc: denied { read } for pid=7620 comm="syz.4.1977" name="ppp" dev="devtmpfs" ino=153 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 483.736539][ T30] audit: type=1400 audit(1761492738.224:4405): avc: denied { open } for pid=7620 comm="syz.4.1977" path="/dev/ppp" dev="devtmpfs" ino=153 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 483.795456][ T30] audit: type=1400 audit(1761492738.308:4406): avc: denied { watch watch_reads } for pid=7617 comm="syz.6.1978" path="/162/blkio.bfq.time_recursive" dev="tmpfs" ino=945 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 483.828055][ T30] audit: type=1326 audit(1761492738.381:4407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7626 comm="syz.1.1981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4785792fc9 code=0x7ffc0000 [ 483.853201][ T30] audit: type=1326 audit(1761492738.402:4408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7626 comm="syz.1.1981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4785792fc9 code=0x7ffc0000 [ 483.878764][ T30] audit: type=1326 audit(1761492738.402:4409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7626 comm="syz.1.1981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4785792fc9 code=0x7ffc0000 [ 483.902369][ T30] audit: type=1326 audit(1761492738.402:4410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7626 comm="syz.1.1981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4785792fc9 code=0x7ffc0000 [ 484.021310][ T20] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 484.185693][ T7640] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1985'. [ 484.249442][ T7647] SELinux: security_context_str_to_sid(Eá…) failed for (dev ?, type ?) errno=-22 [ 484.259179][ T7647] SELinux: security_context_str_to_sid(Eá…) failed for (dev ramfs, type ramfs) errno=-22 [ 484.287992][ T20] usb 7-1: device descriptor read/64, error -71 [ 484.557747][ T7652] loop4: detected capacity change from 0 to 1024 [ 484.688048][ T20] usb 7-1: device descriptor read/64, error -71 [ 484.840509][ T307] cdc_ether: probe of 8-1:1.0 failed with error -71 [ 484.851640][ T307] usb 8-1: USB disconnect, device number 7 [ 484.955009][ T20] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 485.024268][ T7679] device bridge0 entered promiscuous mode [ 485.030302][ T7679] device macsec2 entered promiscuous mode [ 485.037113][ T7679] bridge0: port 3(macsec2) entered blocking state [ 485.044129][ T7679] bridge0: port 3(macsec2) entered disabled state [ 485.052266][ T7679] device bridge0 left promiscuous mode [ 485.082281][ T7681] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 485.216181][ T7677] loop4: detected capacity change from 0 to 40427 [ 485.222793][ T20] usb 7-1: device descriptor read/64, error -71 [ 485.481738][ T7705] overlayfs: overlapping lowerdir path [ 485.570565][ T7709] loop2: detected capacity change from 0 to 7 [ 485.603278][ T20] usb 7-1: device descriptor read/64, error -71 [ 485.717167][ T20] usb usb7-port1: attempt power cycle [ 485.794137][ T7729] loop7: detected capacity change from 0 to 128 [ 485.817302][ T7729] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 485.828065][ T7729] ext4 filesystem being mounted at /55/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 486.307203][ T20] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 486.488648][ T20] usb 7-1: device descriptor read/8, error -71 [ 487.427706][ T7754] incfs: Options parsing error. -22 [ 487.433028][ T7754] incfs: mount failed -22 [ 487.438708][ T20] usb 7-1: device descriptor read/8, error -71 [ 487.737244][ T30] kauditd_printk_skb: 199 callbacks suppressed [ 487.737261][ T30] audit: type=1400 audit(1761492742.486:4610): avc: denied { create } for pid=7761 comm="syz.3.2020" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 487.857997][ T7767] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2022'. [ 487.886967][ T7772] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2023'. [ 487.896648][ T30] audit: type=1400 audit(1761492742.602:4611): avc: denied { write } for pid=7766 comm="syz.1.2021" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 487.941858][ T7779] UDC core: couldn't find an available UDC or it's busy: -16 [ 487.960132][ T7779] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 488.023981][ T30] audit: type=1400 audit(1761492742.602:4612): avc: denied { read } for pid=7766 comm="syz.1.2021" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 488.065300][ T7780] syzkaller0: tun_chr_ioctl cmd 2147767506 [ 488.072514][ T30] audit: type=1400 audit(1761492742.602:4613): avc: denied { read } for pid=7766 comm="syz.1.2021" dev="nsfs" ino=4026532376 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 488.094439][ T30] audit: type=1400 audit(1761492742.602:4614): avc: denied { open } for pid=7766 comm="syz.1.2021" path="net:[4026532376]" dev="nsfs" ino=4026532376 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 488.132330][ T30] audit: type=1400 audit(1761492742.602:4615): avc: denied { module_request } for pid=7766 comm="syz.1.2021" kmod="net-pf-16-proto-16-family-NET_DM" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 488.273838][ T30] audit: type=1400 audit(1761492742.602:4616): avc: denied { create } for pid=7765 comm="syz.6.2022" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 488.325533][ T30] audit: type=1400 audit(1761492742.633:4617): avc: denied { ioctl } for pid=7765 comm="syz.6.2022" path="socket:[43322]" dev="sockfs" ino=43322 ioctlcmd=0x89f8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 488.395644][ T30] audit: type=1400 audit(1761492742.633:4618): avc: denied { ioctl } for pid=7765 comm="syz.6.2022" path="socket:[43325]" dev="sockfs" ino=43325 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 488.420713][ T30] audit: type=1400 audit(1761492742.675:4619): avc: denied { create } for pid=7770 comm="syz.4.2023" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 488.834017][ T7800] loop4: detected capacity change from 0 to 128 [ 489.164977][ T7820] loop6: detected capacity change from 0 to 512 [ 489.255964][ T7832] loop6: detected capacity change from 0 to 512 [ 489.326836][ T7838] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2033'. [ 489.659928][ T1665] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 489.701949][ T7879] syz.3.2035[7879] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 489.702012][ T7879] syz.3.2035[7879] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 489.741892][ T7881] x_tables: duplicate underflow at hook 3 [ 490.012362][ T1665] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 490.023538][ T1665] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 490.040667][ T1665] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 490.053659][ T1665] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 490.062810][ T1665] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 490.076978][ T1665] usb 7-1: config 0 descriptor?? [ 490.301457][ T7895] loop7: detected capacity change from 0 to 512 [ 490.322158][ T7895] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 490.338809][ T7895] EXT4-fs (loop7): 1 truncate cleaned up [ 490.344834][ T7895] EXT4-fs (loop7): mounted filesystem without journal. Opts: quota,,errors=continue. Quota mode: writeback. [ 490.412072][ T7899] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2044'. [ 490.423827][ T7899] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7899 comm=syz.7.2044 [ 490.436658][ T7899] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2044'. [ 490.559587][ T7902] loop7: detected capacity change from 0 to 40427 [ 490.569673][ T7902] F2FS-fs (loop7): Fix alignment : internally, start(4096) end(16896) block(12288) [ 490.583309][ T7902] F2FS-fs (loop7): invalid crc value [ 490.585445][ T1665] plantronics 0003:047F:FFFF.000D: report_id 0 is invalid [ 490.596565][ T1665] plantronics 0003:047F:FFFF.000D: item 0 0 1 8 parsing failed [ 490.600097][ T7902] F2FS-fs (loop7): Found nat_bits in checkpoint [ 490.604749][ T1665] plantronics 0003:047F:FFFF.000D: parse failed [ 490.617605][ T1665] plantronics: probe of 0003:047F:FFFF.000D failed with error -22 [ 490.642401][ T7902] F2FS-fs (loop7): recover fsync data on readonly fs [ 490.649274][ T7902] F2FS-fs (loop7): Cannot turn on quotas: -2 on 1 [ 490.655906][ T7902] F2FS-fs (loop7): Cannot turn on quotas: -2 on 2 [ 490.662675][ T7902] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 490.861229][ T7851] veth1_to_bridge: renamed from veth0_vlan [ 490.942509][ T7907] loop7: detected capacity change from 0 to 40427 [ 490.959636][ T1592] usb 7-1: USB disconnect, device number 15 [ 491.041798][ T7907] F2FS-fs (loop7): fault_injection options not supported [ 491.049469][ T7907] F2FS-fs (loop7): fault_type options not supported [ 491.058082][ T7907] F2FS-fs (loop7): invalid crc value [ 491.065016][ T7907] F2FS-fs (loop7): Found nat_bits in checkpoint [ 491.101165][ T7907] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 491.132345][ T7907] attempt to access beyond end of device [ 491.132345][ T7907] loop7: rw=2049, want=45640, limit=40427 [ 491.148685][ T7907] attempt to access beyond end of device [ 491.148685][ T7907] loop7: rw=2049, want=45640, limit=40427 [ 491.164373][ T7921] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2049'. [ 491.174052][ T6380] attempt to access beyond end of device [ 491.174052][ T6380] loop7: rw=2049, want=45648, limit=40427 [ 491.564679][ T7944] syz.6.2054[7944] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 491.564766][ T7944] syz.6.2054[7944] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 491.686427][ T7952] fuse: Unknown parameter 'fJD¨J OµÃÕ¥‡€ d' [ 491.692656][ T7953] fuse: Unknown parameter 'fJD¨J OµÃÕ¥‡€ d' [ 491.775643][ T7954] x_tables: unsorted underflow at hook 2 [ 492.082085][ T7958] loop7: detected capacity change from 0 to 128 [ 492.106478][ T7958] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 492.145398][ T7958] ext4 filesystem being mounted at /65/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 492.692679][ T30] kauditd_printk_skb: 78 callbacks suppressed [ 492.692696][ T30] audit: type=1400 audit(1761492747.683:4698): avc: denied { name_bind } for pid=7969 comm="syz.4.2063" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 492.755743][ T6801] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 493.450891][ T30] audit: type=1400 audit(1761492748.471:4699): avc: denied { mount } for pid=7973 comm="syz.7.2064" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 493.479692][ T6801] usb 7-1: Using ep0 maxpacket: 16 [ 493.546430][ T30] audit: type=1400 audit(1761492748.513:4700): avc: denied { setattr } for pid=7973 comm="syz.7.2064" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 493.596937][ T30] audit: type=1400 audit(1761492748.523:4701): avc: denied { unmount } for pid=6380 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 493.634428][ T30] audit: type=1400 audit(1761492748.681:4702): avc: denied { relabelfrom } for pid=7982 comm="syz.4.2068" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 493.659458][ T30] audit: type=1400 audit(1761492748.681:4703): avc: denied { relabelto } for pid=7982 comm="syz.4.2068" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 494.379702][ T30] audit: type=1400 audit(1761492749.458:4704): avc: denied { connect } for pid=7990 comm="syz.4.2069" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 494.433481][ T6801] usb 7-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid maxpacket 33620, setting to 1024 [ 494.445210][ T6801] usb 7-1: config 0 interface 0 has no altsetting 0 [ 494.452490][ T6801] usb 7-1: New USB device found, idVendor=056a, idProduct=00cc, bcdDevice= 0.00 [ 494.461981][ T6801] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.569800][ T30] audit: type=1400 audit(1761492749.657:4705): avc: denied { validate_trans } for pid=7994 comm="syz.1.2070" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 494.600890][ T30] audit: type=1400 audit(1761492749.689:4706): avc: denied { ioctl } for pid=7990 comm="syz.4.2069" path="socket:[43759]" dev="sockfs" ino=43759 ioctlcmd=0x48dd scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 494.608104][ T6801] usb 7-1: config 0 descriptor?? [ 494.631122][ T6802] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 494.647007][ T30] audit: type=1400 audit(1761492749.720:4707): avc: denied { create } for pid=7994 comm="syz.1.2070" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 494.678504][ T8001] overlayfs: failed to clone upperpath [ 494.685313][ T8001] overlayfs: failed to clone upperpath [ 494.759104][ T7825] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 494.769965][ T7825] bridge0: port 1(bridge_slave_0) entered blocking state [ 494.777120][ T7825] bridge0: port 1(bridge_slave_0) entered forwarding state [ 494.898351][ T6802] usb 8-1: device descriptor read/64, error -71 [ 495.089055][ T6801] hid (null): unknown global tag 0xc [ 495.096384][ T6801] wacom 0003:056A:00CC.000E: unknown global tag 0xc [ 495.107014][ T6801] wacom 0003:056A:00CC.000E: item 0 0 1 12 parsing failed [ 495.114718][ T6801] wacom 0003:056A:00CC.000E: parse failed [ 495.120564][ T6801] wacom: probe of 0003:056A:00CC.000E failed with error -22 [ 495.239065][ T8017] loop4: detected capacity change from 0 to 2048 [ 495.293538][ T1764] usb 7-1: USB disconnect, device number 16 [ 495.336872][ T6802] usb 8-1: device descriptor read/64, error -71 [ 495.717478][ T6802] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 495.849161][ T8032] loop6: detected capacity change from 0 to 1024 [ 496.003412][ T6802] usb 8-1: device descriptor read/64, error -71 [ 496.067364][ T8041] loop4: detected capacity change from 0 to 512 [ 496.091275][ T8039] device bridge0 entered promiscuous mode [ 496.124107][ T8039] bridge0: port 1(macsec1) entered blocking state [ 496.131932][ T8039] bridge0: port 1(macsec1) entered disabled state [ 496.156841][ T8039] device bridge0 left promiscuous mode [ 496.174085][ T8048] device veth0_vlan left promiscuous mode [ 496.180599][ T8048] device veth0_vlan entered promiscuous mode [ 496.210192][ T7869] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 496.218494][ T1591] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 496.244915][ T7869] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 496.254232][ T7869] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 496.262482][ T7869] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready [ 496.270856][ T7869] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 496.280831][ T6801] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 496.360637][ T8061] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2089'. [ 496.412963][ T6802] usb 8-1: device descriptor read/64, error -71 [ 496.531083][ T6802] usb usb8-port1: attempt power cycle [ 496.542272][ T8065] syz.7.2091[8065] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 496.542352][ T8065] syz.7.2091[8065] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 496.744529][ T8073] device wireguard0 entered promiscuous mode [ 496.882316][ T8081] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2096'. [ 497.274942][ T1591] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 497.820502][ T8096] device pim6reg1 entered promiscuous mode [ 497.843021][ T8096] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 497.870015][ T8094] loop7: detected capacity change from 0 to 40427 [ 497.991278][ T8094] F2FS-fs (loop7): invalid crc value [ 498.035609][ T8094] F2FS-fs (loop7): Found nat_bits in checkpoint [ 498.102964][ T30] kauditd_printk_skb: 88 callbacks suppressed [ 498.102983][ T30] audit: type=1400 audit(3908976401.365:4796): avc: denied { create } for pid=8104 comm="syz.3.2102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 498.137526][ T8094] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 498.183889][ T30] audit: type=1400 audit(3908976401.449:4797): avc: denied { execute } for pid=8111 comm="syz.1.2104" path="/409/cpuacct.usage_percpu" dev="tmpfs" ino=2315 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 498.588472][ T30] audit: type=1400 audit(3908976401.869:4798): avc: denied { read write } for pid=8107 comm="syz.6.2103" name="uhid" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 498.612326][ T30] audit: type=1400 audit(3908976401.880:4799): avc: denied { open } for pid=8107 comm="syz.6.2103" path="/dev/uhid" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 498.638699][ T30] audit: type=1400 audit(3908976401.922:4800): avc: denied { create } for pid=8116 comm="syz.1.2106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 498.693071][ T30] audit: type=1400 audit(3908976401.985:4801): avc: denied { write } for pid=8116 comm="syz.1.2106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 498.723383][ T8120] loop7: detected capacity change from 0 to 128 [ 498.745262][ T8120] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 498.756252][ T8120] ext4 filesystem being mounted at /72/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 498.790940][ T8120] EXT4-fs (loop7): re-mounted. Opts: (null). Quota mode: none. [ 498.795142][ T30] audit: type=1400 audit(3908976402.090:4802): avc: denied { remount } for pid=8119 comm="syz.7.2105" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 498.823351][ T30] audit: type=1400 audit(3908976402.121:4803): avc: denied { name_bind } for pid=8121 comm="syz.1.2107" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 499.055126][ T30] audit: type=1326 audit(3908976402.331:4804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8130 comm="syz.3.2110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2771c0fc9 code=0x7ffc0000 [ 499.090499][ T30] audit: type=1326 audit(3908976402.331:4805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8130 comm="syz.3.2110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc2771c0fc9 code=0x7ffc0000 [ 499.860664][ T8141] netlink: 'syz.4.2113': attribute type 15 has an invalid length. [ 499.876105][ T8137] lo: Caught tx_queue_len zero misconfig [ 499.901016][ T1764] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 499.919925][ T8137] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2112'. [ 500.069912][ T8150] 9pnet: Insufficient options for proto=fd [ 500.086177][ T8157] loop4: detected capacity change from 0 to 512 [ 500.109715][ T8157] SELinux: security_context_str_to_sid(user_u) failed for (dev ?, type ?) errno=-22 [ 500.141826][ T8170] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2122'. [ 500.171463][ T8178] x_tables: duplicate underflow at hook 2 [ 500.270899][ T1764] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 500.283355][ T1764] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 500.366254][ T1764] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 500.375521][ T1764] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 500.547436][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 502.547602][ T307] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 502.555641][ T1764] usb 8-1: SerialNumber: syz [ 502.575020][ T8195] tmpfs: Unknown parameter 'nr' [ 502.581118][ T1764] usb 8-1: can't set config #1, error -71 [ 502.590757][ T1764] usb 8-1: USB disconnect, device number 11 [ 502.608222][ T8199] loop7: detected capacity change from 0 to 128 [ 502.622117][ T8199] EXT4-fs (loop7): Test dummy encryption mode enabled [ 502.634541][ T8199] EXT4-fs (loop7): Test dummy encryption mode enabled [ 502.641777][ T8199] EXT4-fs (loop7): Ignoring removed nomblk_io_submit option [ 502.658373][ T8199] EXT4-fs (loop7): mounted filesystem without journal. Opts: test_dummy_encryption=v1,test_dummy_encryption=v1,nomblk_io_submit,commit=0x0000000000000000,,errors=continue. Quota mode: none. [ 502.677743][ T8199] ext4 filesystem being mounted at /74/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 502.929008][ T307] usb 7-1: Using ep0 maxpacket: 16 [ 502.965841][ T8208] overlayfs: failed to resolve './file0': -2 [ 502.973996][ T30] kauditd_printk_skb: 100 callbacks suppressed [ 502.974013][ T30] audit: type=1400 audit(3908976406.467:4906): avc: denied { create } for pid=8198 comm="syz.7.2130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 503.049740][ T30] audit: type=1400 audit(3908976406.467:4907): avc: denied { mounton } for pid=8198 comm="syz.7.2130" path="/74/mnt/bus" dev="loop7" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 503.077123][ T30] audit: type=1400 audit(3908976406.467:4908): avc: denied { setattr } for pid=8198 comm="syz.7.2130" name="work" dev="loop7" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 503.081132][ T307] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 503.099707][ T30] audit: type=1400 audit(3908976406.467:4909): avc: denied { remove_name } for pid=8198 comm="syz.7.2130" name="#31" dev="loop7" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 503.139741][ T307] usb 7-1: can't read configurations, error -71 [ 503.195641][ T30] audit: type=1400 audit(3908976406.467:4910): avc: denied { rename } for pid=8198 comm="syz.7.2130" name="#31" dev="loop7" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 503.217832][ T30] audit: type=1400 audit(3908976406.467:4911): avc: denied { unlink } for pid=8198 comm="syz.7.2130" name="#31" dev="loop7" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 503.240791][ T30] audit: type=1400 audit(3908976406.467:4912): avc: denied { unlink } for pid=8198 comm="syz.7.2130" name="#32" dev="loop7" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 503.267213][ T30] audit: type=1326 audit(3908976406.667:4913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8212 comm="syz.4.2132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f243711bfc9 code=0x7ffc0000 [ 503.307904][ T30] audit: type=1326 audit(3908976406.698:4914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8212 comm="syz.4.2132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f243711bfc9 code=0x7ffc0000 [ 503.332951][ T30] audit: type=1326 audit(3908976406.698:4915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8212 comm="syz.4.2132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f243711bfc9 code=0x7ffc0000 [ 503.546583][ T8216] device syz_tun entered promiscuous mode [ 503.555443][ T8216] device syz_tun left promiscuous mode [ 503.663922][ T8232] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8232 comm=syz.3.2138 [ 503.666786][ T8235] loop4: detected capacity change from 0 to 1024 [ 503.741332][ T8238] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2141'. [ 503.887009][ T8243] loop4: detected capacity change from 0 to 256 [ 504.891732][ T8243] FAT-fs (loop4): bogus number of FAT sectors [ 504.897870][ T8243] FAT-fs (loop4): Can't find a valid FAT filesystem [ 504.905574][ T8243] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2139'. [ 504.921662][ T8243] bridge0: port 1(bridge_slave_0) entered disabled state [ 504.931909][ T8243] device bridge_slave_0 left promiscuous mode [ 504.938132][ T8243] bridge0: port 1(bridge_slave_0) entered disabled state [ 505.039668][ T8251] netlink: 'syz.1.2142': attribute type 5 has an invalid length. [ 505.375727][ T8276] UDC core: couldn't find an available UDC or it's busy: -16 [ 505.397864][ T8276] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 505.444583][ T8265] loop6: detected capacity change from 0 to 40427 [ 505.920212][ T8263] loop7: detected capacity change from 0 to 40427 [ 506.074447][ T8305] binder: 8304:8305 ioctl c00c620f 0 returned -14 [ 506.414240][ T8263] F2FS-fs (loop7): Invalid SB checksum offset: 0 [ 506.426674][ T8263] F2FS-fs (loop7): Can't find valid F2FS filesystem in 2th superblock [ 506.449764][ T8263] F2FS-fs (loop7): invalid crc value [ 506.459491][ T8315] 9pnet: p9_errstr2errno: server reported unknown error [ 506.501662][ T8263] F2FS-fs (loop7): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 506.545253][ T8263] F2FS-fs (loop7): Try to recover 2th superblock, ret: 0 [ 506.553298][ T8263] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 506.662812][ T8324] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2161'. [ 506.672595][ T8324] UDC core: couldn't find an available UDC or it's busy: -16 [ 506.680211][ T8324] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 506.704024][ T6380] attempt to access beyond end of device [ 506.704024][ T6380] loop7: rw=2049, want=45112, limit=40427 [ 506.730443][ T8326] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2162'. [ 506.835442][ T8330] loop7: detected capacity change from 0 to 256 [ 508.486816][ T30] kauditd_printk_skb: 206 callbacks suppressed [ 508.486833][ T30] audit: type=1400 audit(3908976412.262:5122): avc: denied { read write } for pid=8339 comm="syz.7.2167" name="vhost-vsock" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 508.540689][ T8345] syz.7.2168[8345] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 508.540784][ T8345] syz.7.2168[8345] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 508.552617][ T30] audit: type=1400 audit(3908976412.294:5123): avc: denied { open } for pid=8339 comm="syz.7.2167" path="/dev/vhost-vsock" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 508.598599][ T8345] netlink: 1 bytes leftover after parsing attributes in process `syz.7.2168'. [ 508.756589][ T30] audit: type=1326 audit(3908976412.546:5124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8357 comm="syz.7.2172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d184c4fc9 code=0x7ffc0000 [ 508.780442][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 508.789368][ T30] audit: type=1326 audit(3908976412.546:5125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8357 comm="syz.7.2172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5d184c4fc9 code=0x7ffc0000 [ 508.813765][ T1764] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 508.824697][ T30] audit: type=1326 audit(3908976412.546:5126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8357 comm="syz.7.2172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d184c4fc9 code=0x7ffc0000 [ 508.905130][ T30] audit: type=1326 audit(3908976412.546:5127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8357 comm="syz.7.2172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5d184c4fc9 code=0x7ffc0000 [ 508.949002][ T30] audit: type=1326 audit(3908976412.546:5128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8357 comm="syz.7.2172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d184c4fc9 code=0x7ffc0000 [ 508.996787][ T30] audit: type=1326 audit(3908976412.546:5129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8357 comm="syz.7.2172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f5d184c3717 code=0x7ffc0000 [ 509.034634][ T30] audit: type=1326 audit(3908976412.546:5130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8357 comm="syz.7.2172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d184c4fc9 code=0x7ffc0000 [ 509.044179][ T1764] usb 7-1: Using ep0 maxpacket: 16 [ 509.058371][ T30] audit: type=1326 audit(3908976412.546:5131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8357 comm="syz.7.2172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f5d184c4fc9 code=0x7ffc0000 [ 509.249274][ T8369] loop7: detected capacity change from 0 to 128 [ 509.339209][ T1764] usb 7-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 509.366426][ T1764] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.376069][ T1764] usb 7-1: Product: syz [ 509.380432][ T1764] usb 7-1: Manufacturer: syz [ 509.385196][ T1764] usb 7-1: SerialNumber: syz [ 509.394798][ T1764] usb 7-1: config 0 descriptor?? [ 509.953978][ T1764] usb 7-1: can't set config #0, error -71 [ 509.960742][ T8376] loop4: detected capacity change from 0 to 512 [ 509.979376][ T1764] usb 7-1: USB disconnect, device number 19 [ 510.065794][ T8386] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2179'. [ 510.128923][ T8394] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2183'. [ 510.141070][ T8394] syz.3.2183[8394] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 510.141167][ T8394] syz.3.2183[8394] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 510.229181][ T8405] loop4: detected capacity change from 0 to 512 [ 510.997701][ T20] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 511.225599][ T20] usb 8-1: Using ep0 maxpacket: 16 [ 511.492014][ T20] usb 8-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 511.505494][ T20] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.522224][ T20] usb 8-1: Product: syz [ 511.530791][ T20] usb 8-1: Manufacturer: syz [ 512.066740][ T20] usb 8-1: SerialNumber: syz [ 512.079514][ T20] usb 8-1: config 0 descriptor?? [ 512.121763][ T20] ftdi_sio 8-1:0.0: FTDI USB Serial Device converter detected [ 512.140124][ T20] usb 8-1: Detected FT232H [ 512.330523][ T20] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 512.435189][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 512.573074][ T8386] loop7: detected capacity change from 0 to 1024 [ 512.645314][ T8386] EXT4-fs (loop7): Ignoring removed orlov option [ 512.740677][ T8386] EXT4-fs (loop7): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,nombcache,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue. Quota mode: none. [ 514.242522][ T8478] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2206'. [ 514.281461][ T30] kauditd_printk_skb: 123 callbacks suppressed [ 514.281479][ T30] audit: type=1400 audit(3908976418.351:5255): avc: denied { write } for pid=8474 comm="syz.1.2206" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 514.456424][ T30] audit: type=1326 audit(3908976418.540:5256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8448 comm="syz.3.2199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fc2771bfa7f code=0x7ffc0000 [ 514.480633][ T20] ftdi_sio 8-1:0.0: GPIO initialisation failed: -71 [ 514.496807][ T20] usb 8-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 514.511940][ T20] usb 8-1: USB disconnect, device number 12 [ 514.528707][ T20] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 514.550553][ T20] ftdi_sio 8-1:0.0: device disconnected [ 514.642166][ T8484] loop7: detected capacity change from 0 to 1024 [ 514.702567][ T8484] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 514.711539][ T8484] EXT4-fs (loop7): orphan cleanup on readonly fs [ 514.731010][ T8484] Quota error (device loop7): v2_read_file_info: Can't read info structure [ 514.740604][ T8484] EXT4-fs warning (device loop7): ext4_enable_quotas:6452: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 514.797000][ T8484] EXT4-fs (loop7): Cannot turn on quotas: error -5 [ 514.828525][ T8484] EXT4-fs (loop7): 1 truncate cleaned up [ 514.834229][ T8484] EXT4-fs (loop7): mounted filesystem without journal. Opts: nodelalloc,resgid=0x000000000000ee00,init_itable,,errors=continue. Quota mode: writeback. [ 514.950001][ T8484] EXT4-fs error (device loop7): ext4_search_dir:1549: inode #2: block 16: comm syz.7.2207: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 514.989431][ T8484] EXT4-fs error (device loop7): ext4_search_dir:1549: inode #2: block 16: comm syz.7.2207: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 515.002962][ T30] audit: type=1326 audit(3908976419.107:5257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8448 comm="syz.3.2199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fc2771c1057 code=0x7ffc0000 [ 515.072591][ T30] audit: type=1326 audit(3908976419.159:5258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8448 comm="syz.3.2199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc2771bf810 code=0x7ffc0000 [ 515.114870][ T30] audit: type=1326 audit(3908976419.159:5259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8448 comm="syz.3.2199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fc2771bfc2a code=0x7ffc0000 [ 515.426197][ T20] usb 8-1: new full-speed USB device number 13 using dummy_hcd [ 515.501642][ T30] audit: type=1326 audit(3908976419.621:5260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8506 comm="syz.3.2214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2771c0fc9 code=0x7ffc0000 [ 515.539708][ T30] audit: type=1326 audit(3908976419.621:5261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8506 comm="syz.3.2214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2771c0fc9 code=0x7ffc0000 [ 515.593834][ T30] audit: type=1326 audit(3908976419.621:5262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8506 comm="syz.3.2214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc2771c0fc9 code=0x7ffc0000 [ 515.617822][ T30] audit: type=1326 audit(3908976419.621:5263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8506 comm="syz.3.2214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2771c0fc9 code=0x7ffc0000 [ 515.788081][ T20] usb 8-1: config 1 has an invalid interface number: 105 but max is 0 [ 515.816897][ T20] usb 8-1: config 1 has no interface number 0 [ 515.826049][ T20] usb 8-1: config 1 interface 105 has no altsetting 0 [ 515.978720][ T20] usb 8-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 515.999058][ T20] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.007094][ T20] usb 8-1: Product: syz [ 516.021455][ T20] usb 8-1: Manufacturer: syz [ 516.026108][ T20] usb 8-1: SerialNumber: syz [ 517.274470][ T20] aqc111: probe of 8-1:1.105 failed with error -71 [ 517.294441][ T20] usb 8-1: USB disconnect, device number 13 [ 517.450456][ T8520] IPv6: syztnl0: Disabled Multicast RS [ 518.012242][ T8536] loop7: detected capacity change from 0 to 128 [ 518.048479][ T8536] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 518.060083][ T8536] ext4 filesystem being mounted at /89/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 518.093867][ T8536] fscrypt (loop7, inode 12): Direct key flag not allowed with different contents and filenames modes [ 518.521803][ T1665] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 518.553979][ T8550] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2226'. [ 519.594050][ T1665] usb 8-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 519.623546][ T1665] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.665191][ T8572] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2232'. [ 519.680920][ T1665] usb 8-1: Product: syz [ 519.685457][ T1665] usb 8-1: Manufacturer: syz [ 519.690080][ T1665] usb 8-1: SerialNumber: syz [ 519.847145][ T8576] overlayfs: './file0' not a directory [ 519.931847][ T6802] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 520.160481][ T6802] usb 7-1: Using ep0 maxpacket: 16 [ 520.426983][ T6802] usb 7-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 520.436155][ T6802] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.444254][ T6802] usb 7-1: Product: syz [ 520.448604][ T6802] usb 7-1: Manufacturer: syz [ 520.453218][ T6802] usb 7-1: SerialNumber: syz [ 520.459034][ T6802] usb 7-1: config 0 descriptor?? [ 520.494707][ T6802] ftdi_sio 7-1:0.0: FTDI USB Serial Device converter detected [ 520.502799][ T6802] usb 7-1: Detected FT232H [ 520.566665][ T30] kauditd_printk_skb: 75 callbacks suppressed [ 520.566683][ T30] audit: type=1326 audit(2000000000.965:5339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8582 comm="syz.3.2237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2771c0fc9 code=0x7ffc0000 [ 520.596866][ T30] audit: type=1326 audit(2000000000.965:5340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8582 comm="syz.3.2237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2771c0fc9 code=0x7ffc0000 [ 520.621044][ T30] audit: type=1326 audit(2000000000.997:5341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8582 comm="syz.3.2237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2771c0fc9 code=0x7ffc0000 [ 520.645186][ T30] audit: type=1326 audit(2000000000.997:5342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8582 comm="syz.3.2237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2771c0fc9 code=0x7ffc0000 [ 520.669217][ T30] audit: type=1326 audit(2000000001.028:5343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8582 comm="syz.3.2237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=448 compat=0 ip=0x7fc2771c0fc9 code=0x7ffc0000 [ 520.692967][ T30] audit: type=1326 audit(2000000001.028:5344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8582 comm="syz.3.2237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2771c0fc9 code=0x7ffc0000 [ 520.693812][ T6802] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 520.723465][ T30] audit: type=1326 audit(2000000001.028:5345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8582 comm="syz.3.2237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2771c0fc9 code=0x7ffc0000 [ 520.747087][ T30] audit: type=1326 audit(2000000001.039:5346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8582 comm="syz.3.2237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fc2771c0fc9 code=0x7ffc0000 [ 520.771275][ T30] audit: type=1326 audit(2000000001.039:5347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8582 comm="syz.3.2237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2771c0fc9 code=0x7ffc0000 [ 520.794812][ T30] audit: type=1326 audit(2000000001.039:5348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8582 comm="syz.3.2237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2771c0fc9 code=0x7ffc0000 [ 520.965212][ T8572] loop6: detected capacity change from 0 to 1024 [ 521.227139][ T6802] ftdi_sio 7-1:0.0: GPIO initialisation failed: -71 [ 521.235102][ T6802] usb 7-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 521.245762][ T6802] usb 7-1: USB disconnect, device number 20 [ 521.253047][ T6802] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 521.262963][ T6802] ftdi_sio 7-1:0.0: device disconnected [ 521.399273][ T8595] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 521.833661][ T8599] loop7: detected capacity change from 0 to 128 [ 521.880548][ T8599] EXT4-fs (loop7): Test dummy encryption mode enabled [ 521.887496][ T8599] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 576460752303423507)! [ 521.899103][ T8599] EXT4-fs (loop7): group descriptors corrupted! [ 522.556448][ T8617] loop7: detected capacity change from 0 to 40427 [ 522.590416][ T8617] F2FS-fs (loop7): fault_type options not supported [ 522.598505][ T8617] F2FS-fs (loop7): invalid crc value [ 522.608705][ T8617] F2FS-fs (loop7): Found nat_bits in checkpoint [ 522.639929][ T8617] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 522.810013][ T8632] 9pnet: Insufficient options for proto=fd [ 522.816439][ T8632] 9pnet: Insufficient options for proto=fd [ 522.825091][ T8639] loop4: detected capacity change from 0 to 512 [ 523.846797][ T1665] rtl8150 8-1:1.0: couldn't reset the device [ 523.865250][ T1665] rtl8150: probe of 8-1:1.0 failed with error -5 [ 524.032933][ T8673] loop6: detected capacity change from 0 to 512 [ 524.127034][ T1665] usb 8-1: USB disconnect, device number 14 [ 524.516150][ T8673] fuse: Bad value for 'fd' [ 524.521622][ T8673] futex_wake_op: syz.6.2261 tries to shift op by 32; fix this program [ 525.237572][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 525.967453][ T30] kauditd_printk_skb: 77 callbacks suppressed [ 525.967471][ T30] audit: type=1400 audit(2000000006.634:5426): avc: denied { bind } for pid=8701 comm="syz.3.2268" lport=5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 526.008956][ T30] audit: type=1400 audit(2000000006.676:5427): avc: denied { node_bind } for pid=8701 comm="syz.3.2268" saddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 526.032036][ T8702] xt_TPROXY: Can be used only with -p tcp or -p udp [ 526.042750][ T8706] bridge: RTM_NEWNEIGH with invalid ether address [ 526.049155][ T30] audit: type=1400 audit(2000000006.708:5428): avc: denied { connect } for pid=8701 comm="syz.3.2268" laddr=172.20.20.170 lport=5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 526.103245][ T8695] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2266'. [ 526.118448][ T8713] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2273'. [ 526.154671][ T8695] bridge0: port 2(bridge_slave_1) entered disabled state [ 526.162042][ T8695] bridge0: port 1(bridge_slave_0) entered disabled state [ 526.241290][ T30] audit: type=1400 audit(2000000006.928:5429): avc: denied { read write } for pid=8707 comm="syz.1.2271" name="ppp" dev="devtmpfs" ino=153 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 526.264876][ T30] audit: type=1400 audit(2000000006.928:5430): avc: denied { open } for pid=8707 comm="syz.1.2271" path="/dev/ppp" dev="devtmpfs" ino=153 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 526.289417][ T30] audit: type=1400 audit(2000000006.949:5431): avc: denied { ioctl } for pid=8707 comm="syz.1.2271" path="/dev/ppp" dev="devtmpfs" ino=153 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 526.340243][ T8718] loop6: detected capacity change from 0 to 40427 [ 527.128047][ T8732] netlink: 72 bytes leftover after parsing attributes in process `syz.7.2279'. [ 527.143741][ T30] audit: type=1326 audit(2000000007.873:5432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8734 comm="syz.3.2280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2771c0fc9 code=0x7ffc0000 [ 527.171452][ T8732] bridge: RTM_NEWNEIGH with invalid ether address [ 527.199711][ T30] audit: type=1326 audit(2000000007.873:5433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8734 comm="syz.3.2280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fc2771bfa7f code=0x7ffc0000 [ 527.234513][ T30] audit: type=1326 audit(2000000007.873:5434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8734 comm="syz.3.2280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2771c0fc9 code=0x7ffc0000 [ 527.314608][ T8746] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2282'. [ 527.356709][ T8742] binfmt_misc: register: failed to install interpreter file ./file0 [ 527.368781][ T8750] loop7: detected capacity change from 0 to 512 [ 527.378038][ T30] audit: type=1326 audit(2000000007.873:5435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8734 comm="syz.3.2280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2771c0fc9 code=0x7ffc0000 [ 527.498355][ T8750] EXT4-fs error (device loop7): ext4_orphan_get:1401: inode #15: comm syz.7.2285: casefold flag without casefold feature [ 527.521806][ T8750] EXT4-fs error (device loop7): ext4_orphan_get:1406: comm syz.7.2285: couldn't read orphan inode 15 (err -117) [ 527.539286][ T8750] EXT4-fs (loop7): mounted filesystem without journal. Opts: grpid,user_xattr,,errors=continue. Quota mode: writeback. [ 528.330407][ T8771] netlink: 'syz.7.2289': attribute type 27 has an invalid length. [ 528.370461][ T8771] bridge0: port 2(bridge_slave_1) entered disabled state [ 528.377899][ T8771] bridge0: port 1(bridge_slave_0) entered disabled state [ 528.407598][ T8764] binder: 8763:8764 ioctl c0306201 0 returned -14 [ 528.523551][ T8773] device veth0_vlan left promiscuous mode [ 528.530054][ T8773] device veth0_vlan entered promiscuous mode [ 528.537630][ T8773] device veth1_macvtap left promiscuous mode [ 528.545019][ T8773] device veth1_macvtap entered promiscuous mode [ 528.554541][ T8773] device dummy0 entered promiscuous mode [ 528.562006][ T7870] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 528.570303][ T7870] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 528.589710][ T7870] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 528.760019][ T7870] bridge0: port 1(bridge_slave_0) entered blocking state [ 528.767185][ T7870] bridge0: port 1(bridge_slave_0) entered forwarding state [ 528.806563][ T7870] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 528.832705][ T7870] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 528.850340][ T7870] bridge0: port 2(bridge_slave_1) entered blocking state [ 528.857470][ T7870] bridge0: port 2(bridge_slave_1) entered forwarding state [ 528.899900][ T7870] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 557.548715][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 619.741447][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 624.199384][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 624.206388][ C0] (detected by 0, t=10002 jiffies, g=43661, q=184) [ 624.213003][ C0] rcu: All QSes seen, last rcu_preempt kthread activity 10002 (4295001045-4294991043), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 624.226393][ C0] rcu: rcu_preempt kthread starved for 10002 jiffies! g43661 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 624.237612][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 624.247633][ C0] rcu: RCU grace-period kthread stack dump: [ 624.253550][ C0] task:rcu_preempt state:R running task stack:28720 pid: 14 ppid: 2 flags:0x00004000 [ 624.264363][ C0] Call Trace: [ 624.267691][ C0] [ 624.270650][ C0] __schedule+0xb6e/0x14c0 [ 624.275101][ C0] ? release_firmware_map_entry+0x190/0x190 [ 624.281020][ C0] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 624.286852][ C0] ? __mod_timer+0x7ae/0xb30 [ 624.291467][ C0] schedule+0x11e/0x1e0 [ 624.295752][ C0] schedule_timeout+0x12c/0x2e0 [ 624.300730][ C0] ? console_conditional_schedule+0x30/0x30 [ 624.306668][ C0] ? update_process_times+0x200/0x200 [ 624.312092][ C0] ? prepare_to_swait_event+0x308/0x320 [ 624.317663][ C0] rcu_gp_fqs_loop+0x293/0xf60 [ 624.322487][ C0] ? debug_smp_processor_id+0x17/0x20 [ 624.327879][ C0] ? __note_gp_changes+0x4e2/0x9e0 [ 624.333119][ C0] ? rcu_gp_init+0xc00/0xc00 [ 624.337751][ C0] ? _raw_spin_unlock_irq+0x4e/0x70 [ 624.342979][ C0] ? rcu_gp_init+0x9a7/0xc00 [ 624.347593][ C0] rcu_gp_kthread+0x98/0x330 [ 624.352205][ C0] ? wake_nocb_gp+0x1d0/0x1d0 [ 624.356978][ C0] ? __kasan_check_read+0x11/0x20 [ 624.362022][ C0] ? __kthread_parkme+0xac/0x200 [ 624.366982][ C0] ? preempt_count_add+0x90/0x1b0 [ 624.372058][ C0] kthread+0x411/0x500 [ 624.376145][ C0] ? wake_nocb_gp+0x1d0/0x1d0 [ 624.380864][ C0] ? kthread_blkcg+0xd0/0xd0 [ 624.385484][ C0] ret_from_fork+0x1f/0x30 [ 624.389936][ C0] [ 624.392965][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 624.399298][ C0] Sending NMI from CPU 0 to CPUs 1: [ 624.404520][ C1] NMI backtrace for cpu 1 [ 624.404532][ C1] CPU: 1 PID: 8778 Comm: syz.1.2291 Tainted: G W syzkaller #0 [ 624.404551][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 624.404561][ C1] RIP: 0010:kasan_check_range+0xc/0x290 [ 624.404584][ C1] Code: c3 fc 02 31 c0 5d c3 0f 0b b8 ea ff ff ff c3 0f 0b b8 ea ff ff ff c3 00 00 cc cc 00 00 cc b0 01 48 85 f6 0f 84 a9 01 00 00 55 <48> 89 e5 41 57 41 56 53 49 89 f8 49 01 f0 0f 82 58 02 00 00 49 89 [ 624.404600][ C1] RSP: 0018:ffffc900012d7b68 EFLAGS: 00000002 [ 624.404615][ C1] RAX: 0000000000000001 RBX: 0000000000000020 RCX: ffffffff8140db73 [ 624.404628][ C1] RDX: 0000000000000000 RSI: 0000000000000020 RDI: ffff88810b5ff5e0 [ 624.404639][ C1] RBP: ffffc900012d7ba0 R08: ffff88811a1893c0 R09: 0000000000000002 [ 624.404652][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000 [ 624.404664][ C1] R13: ffffffff8140db73 R14: ffff88810b5ff5e0 R15: ffffc900012d7de0 [ 624.404678][ C1] FS: 00005555693a8500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 624.404693][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 624.404706][ C1] CR2: ffffffffd88f0000 CR3: 000000010ffa2000 CR4: 00000000003506a0 [ 624.404723][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 624.404733][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 624.404744][ C1] Call Trace: [ 624.404749][ C1] [ 624.404755][ C1] ? memcpy+0x2d/0x70 [ 624.404774][ C1] get_signal+0x1333/0x1480 [ 624.404797][ C1] arch_do_signal_or_restart+0xc1/0x10f0 [ 624.404819][ C1] ? load_gs_index+0xb0/0xb0 [ 624.404835][ C1] ? get_sigframe_size+0x10/0x10 [ 624.404855][ C1] ? sysvec_apic_timer_interrupt+0x64/0xc0 [ 624.404879][ C1] exit_to_user_mode_loop+0xa7/0xe0 [ 624.404897][ C1] exit_to_user_mode_prepare+0x87/0xd0 [ 624.404913][ C1] syscall_exit_to_user_mode+0x1a/0x30 [ 624.404930][ C1] do_syscall_64+0x58/0xa0 [ 624.404947][ C1] ? clear_bhb_loop+0x50/0xa0 [ 624.404962][ C1] ? clear_bhb_loop+0x50/0xa0 [ 624.404977][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 624.404998][ C1] RIP: 0033:0x7f4785653980 [ 624.405019][ C1] Code: 48 c1 e8 12 83 e0 01 88 15 72 5d ec 00 88 05 6f 5d ec 00 c3 50 48 8d 35 19 26 1c 00 48 8d 3d 1f 26 1c 00 31 c0 e8 20 f7 ff ff <53> 89 fb 48 83 ec 10 64 8b 04 25 94 ff ff ff 85 c0 74 2a 89 fe 31 [ 624.405033][ C1] RSP: 002b:00007ffd0de6d5b8 EFLAGS: 00000246 [ 624.405047][ C1] RAX: 0000000000000000 RBX: 00007f47859ea308 RCX: 00007f478574a4b7 [ 624.405059][ C1] RDX: 00007ffd0de6d5c0 RSI: 00007ffd0de6d6f0 RDI: 0000000000000007 [ 624.405071][ C1] RBP: 0000000000000003 R08: 00007f47859e9fa0 R09: 00007ffd0de6da17 [ 624.405082][ C1] R10: 0000000000000008 R11: 0000000000000246 R12: 00007f47859ea27c [ 624.405094][ C1] R13: 00007f47859ea270 R14: 0000000000001608 R15: 0000000000000003 [ 624.405110][ C1] [ 634.363387][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 746.537060][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!