last executing test programs: 5m3.456608575s ago: executing program 0 (id=624): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{r0}, 0x0, 0x0}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000d00000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r2}, 0x10) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) 5m3.420544817s ago: executing program 0 (id=625): socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="160000000000000004000000050000", @ANYBLOB], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000640)=ANY=[@ANYRESOCT=r5, @ANYRES32=r3, @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x48}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) io_setup(0x0, &(0x7f0000000400)) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x6) sched_setscheduler(r7, 0x2, &(0x7f0000000000)=0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r6}, 0x10) statfs(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)=""/194) lchown(0x0, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r8, &(0x7f0000000240)='cpuset.mems\x00', 0x2, 0x0) 5m1.422645861s ago: executing program 0 (id=629): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x25, 0x5586, &(0x7f00000079c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) io_setup(0x6, &(0x7f00000000c0)=0x0) io_pgetevents(r2, 0x12a000000000000, 0x0, &(0x7f0000000140), &(0x7f00000001c0)={0x0, 0x3938700}, 0x0) keyctl$search(0xa, r0, &(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz', 0x2}, r1) r3 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000021000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000380)='sched_switch\x00', r6}, 0x18) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000004c0)='./file0\x00', 0x0, &(0x7f0000000700)=ANY=[@ANYRES32], 0x0, 0x1e1, &(0x7f0000000bc0)="$eJzs3bFu00AYB/AvgTYJLN1YQLLEwlQBT1CEioSIhATKABNIhaVFSHQJLO1j8G6sPADqlAUdKk5iYndwI2zT8Pst/ex/z3enOJcsvry5/eHw4OPx+++3vsZw2Iv+XuzFrBc70Y+F0wAANskspfiRcl2PBQBoR43P/58tDwkAaNjLV6+fPRqP919k2TDi7HQ6mU7yv3n+5Ol4/372207R6mw6nVxb5g+y8neH83wrbszzh3n7bDXfjnt38/w8e/x8XMoHcdDs1AEAAAAAAAAAAAAAAAAAAAAAoDN3Ilu4cH+f3d1yPprn+dEf+wOV9u/p9ZaHKcX8IJ20MSkAAAAAAAAAAAAAAAAAAAC4Yo4/fzl8e3T07lNRDCJi9cxlisVT/2s2rxbf/tJ1Li760dSVr1ixHRH1W90cLe+gf2Hw5SJrv9PFfb8SrfkuqPla9OddXqqLWUqp1j8Xa8Rgdcm43vCSBAAAAAAAAAAAAAAAAAAA/63iod9qNuxiQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQgeL3/9coTiKiEm1Vziw7G3U6VQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADbYrwAAAP//WjEoTQ==") ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'syztnl2\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x1, 0x1, 0x9, 0x7, {{0x1b, 0x4, 0x0, 0x8, 0x6c, 0x67, 0x0, 0x8, 0x4, 0x0, @broadcast, @broadcast, {[@lsrr={0x83, 0x1b, 0x66, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @multicast1, @local]}, @timestamp_addr={0x44, 0x34, 0x86, 0x1, 0x3, [{@loopback, 0x2}, {@broadcast, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x81}, {@local, 0x491}, {@multicast2, 0x2}, {@dev={0xac, 0x14, 0x14, 0x11}, 0x7f}]}, @ssrr={0x89, 0x7, 0xc, [@private=0xa010101]}]}}}}}) r7 = socket$inet6(0xa, 0x2, 0x3a) r8 = dup(r7) bind$unix(r8, &(0x7f0000000300)=@abs={0x0, 0x2}, 0x6e) wait4(r3, &(0x7f0000000280), 0x1, &(0x7f00000003c0)) syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_dev$tty20(0xc, 0x4, 0x1) 4m58.676576874s ago: executing program 0 (id=640): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000a40), 0x1, 0x550f, &(0x7f000000cf00)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) signalfd(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x1010008, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x1, 0x369, &(0x7f0000000a80)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x8000000000200002) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) r3 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x4, @tid=r3}, 0x0) 4m55.394524857s ago: executing program 0 (id=661): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) getgid() 4m53.648285043s ago: executing program 0 (id=669): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) r1 = gettid() timer_create(0x9, &(0x7f0000000180)={0x0, 0x1e, 0x4, @tid=r1}, &(0x7f00000000c0)=0x0) timer_settime(r2, 0x1, &(0x7f0000000080)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) readv(r3, &(0x7f0000003cc0)=[{&(0x7f0000001bc0)=""/4096, 0x1000}], 0x1) signalfd4(r3, &(0x7f0000000040)={[0x7fffffffffffffff]}, 0x8, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) 4m53.444984511s ago: executing program 32 (id=669): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) r1 = gettid() timer_create(0x9, &(0x7f0000000180)={0x0, 0x1e, 0x4, @tid=r1}, &(0x7f00000000c0)=0x0) timer_settime(r2, 0x1, &(0x7f0000000080)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) readv(r3, &(0x7f0000003cc0)=[{&(0x7f0000001bc0)=""/4096, 0x1000}], 0x1) signalfd4(r3, &(0x7f0000000040)={[0x7fffffffffffffff]}, 0x8, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) 13.591726711s ago: executing program 5 (id=1882): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) quotactl$Q_GETINFO(0xffffffff80000500, 0x0, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) getitimer(0x0, &(0x7f0000000000)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) openat2(0xffffffffffffffff, &(0x7f0000000500)='./file0/file0\x00', 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x80) 12.562642339s ago: executing program 5 (id=1887): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000001200)={0x60000010}) r2 = epoll_create1(0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000400)='.\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)={0xa000000d}) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000300)={0x10000000}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000600)) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x83, &(0x7f00000005c0)=ANY=[@ANYBLOB], &(0x7f0000000300)={0x1, 0x2, [0xb74, 0xf93, 0xfe3, 0x733]}) getpid() syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000040)='./file2\x00', 0x220c084, &(0x7f0000000880)=ANY=[], 0x9, 0x224, &(0x7f0000000380)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x81040a, 0x0, 0x1, 0x0, &(0x7f00000007c0)) unlink(&(0x7f0000000080)='./file0/file0\x00') r4 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000340)={'gre0\x00', &(0x7f0000000800)={'syztnl1\x00', 0x0, 0x8, 0x0, 0x6, 0xc, {{0x13, 0x4, 0x1, 0x0, 0x4c, 0x67, 0x0, 0x1, 0x29, 0x0, @broadcast, @local, {[@ssrr={0x89, 0x3, 0x90}, @timestamp={0x44, 0xc, 0x73, 0x0, 0x9, [0xe, 0x5]}, @noop, @rr={0x7, 0xb, 0x9f, [@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_addr={0x44, 0x1c, 0xb8, 0x1, 0x6, [{@remote, 0x2}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}]}]}}}}}) setsockopt$MRT6_DEL_MIF(r4, 0x29, 0xcb, &(0x7f0000000680)={0x1, 0x2, 0x0, r5, 0x80}, 0xc) rename(&(0x7f0000000100)='./bus\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000a07cc900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000003000080950000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000200), 0x3}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) 10.990895898s ago: executing program 5 (id=1895): pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$FUSE_INIT(r0, &(0x7f0000000340)={0x50, 0x0, 0x0, {0x7, 0x28, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x50) vmsplice(r0, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x500, &(0x7f0000000580)={&(0x7f00000005c0)=@newlink={0x4c, 0x10, 0x403, 0x70b528, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0xa1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x4c}, 0x1, 0xba01, 0x0, 0x4004}, 0x810) 10.835091274s ago: executing program 5 (id=1897): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) quotactl$Q_GETINFO(0xffffffff80000500, 0x0, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) getitimer(0x0, &(0x7f0000000000)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) openat2(0xffffffffffffffff, &(0x7f0000000500)='./file0/file0\x00', 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, 0x0, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x80) 9.928038748s ago: executing program 5 (id=1902): r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x143642, 0x1b2) signalfd(r0, &(0x7f0000000000)={[0x9f2]}, 0x8) ftruncate(r1, 0x5) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000080000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000003c60000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x0, @multicast1}, 0xa, 0x0, 0xfffd}}, 0x26) 9.927557698s ago: executing program 3 (id=1903): pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) fcntl$setpipe(r0, 0x407, 0x0) write$FUSE_INIT(r0, &(0x7f0000000340)={0x50, 0x0, 0x0, {0x7, 0x28, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x50) vmsplice(r0, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) fcntl$setpipe(r0, 0x407, 0x2000000) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bf"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x500, &(0x7f0000000580)={&(0x7f00000005c0)=@newlink={0x4c, 0x10, 0x403, 0x70b528, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0xa1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x4c}, 0x1, 0xba01, 0x0, 0x4004}, 0x810) 9.558167542s ago: executing program 3 (id=1905): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) 9.542790492s ago: executing program 3 (id=1906): socket$key(0xf, 0x3, 0x2) socket$netlink(0x10, 0x3, 0x0) r0 = creat(&(0x7f0000000280)='./file0\x00', 0x66) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000074"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(r0, 0x0, 0x4044030) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_getevents(r6, 0x4, 0x4, &(0x7f00000019c0)=[{}, {}, {}, {}], 0x0) io_submit(r6, 0x1, &(0x7f0000000300)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r5, 0x0}]) io_destroy(r6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) 8.754264592s ago: executing program 1 (id=1908): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{r0}, 0x0, 0x0}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000d00000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r2}, 0x10) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) 8.722945603s ago: executing program 1 (id=1909): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) close(0x3) 8.607935897s ago: executing program 3 (id=1910): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000c00)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getpid() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000008000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet6(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r4}, 0x10) sendto$inet6(r3, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 8.220273962s ago: executing program 2 (id=1914): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x16, 0x0, 0x4, 0xff}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xff48, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r1}, 0x10) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) close(r2) 8.179058753s ago: executing program 2 (id=1915): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, 0x0, &(0x7f0000000080)=r4}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r5, &(0x7f0000000080), 0x0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) r7 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r8, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) ioctl$ASHMEM_SET_SIZE(r7, 0x40087703, 0x7ffffffa) ioctl$ASHMEM_SET_NAME(r7, 0x40087708, &(0x7f00000007c0)='\x00\x00\x03\x06\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 7.813817077s ago: executing program 1 (id=1917): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r0) bpf$PROG_LOAD(0x5, 0x0, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0xc) r7 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005840)={0x0, 0xfffffffffffffd60, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548}}}]}, 0x78}}, 0x0) 7.773176759s ago: executing program 4 (id=1918): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, 0x0, &(0x7f0000000080)=r4}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r5, &(0x7f0000000080), 0x0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) r7 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r8, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) ioctl$ASHMEM_SET_SIZE(r7, 0x40087703, 0x7ffffffa) ioctl$ASHMEM_SET_NAME(r7, 0x40087708, &(0x7f00000007c0)='\x00\x00\x03\x06\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 7.069636725s ago: executing program 2 (id=1919): fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0xc0041, 0x0) r1 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000300)) ioctl$TCSBRKP(r0, 0x5425, 0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000400), 0xff, 0x23f, &(0x7f0000000540)="$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") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000002b40)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000100000000000010020"], 0x24, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x10) listxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)=""/187, 0xbb) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0x7, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000380)={0xa, 0x14e24, 0x0, @empty}, 0x1c) recvmmsg(r5, &(0x7f0000000000)=[{{0x0, 0x22, 0x0}, 0x80000000}], 0x1c284f836fac35b, 0x0, 0x0) 6.646391061s ago: executing program 1 (id=1920): socket$key(0xf, 0x3, 0x2) socket$netlink(0x10, 0x3, 0x0) r0 = creat(&(0x7f0000000280)='./file0\x00', 0x66) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000074"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(r0, 0x0, 0x4044030) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_getevents(r6, 0x4, 0x4, &(0x7f00000019c0)=[{}, {}, {}, {}], 0x0) io_submit(r6, 0x1, &(0x7f0000000300)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r5, 0x0}]) io_destroy(r6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) 3.261111578s ago: executing program 2 (id=1921): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff85000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000440)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r0}, 0x6c) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x39}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x100000001, 0x0, 0x4}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x2000000, 0x6c}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x0, 0x0, 0x0, 0x3}}, 0xe8) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) r6 = dup3(r5, r4, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000bc0), 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r4, 0x10000000000) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)}) 3.242708578s ago: executing program 4 (id=1922): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001700)=ANY=[@ANYBLOB="160000000000000061b1000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, 0x0, &(0x7f0000000040)}, 0x20) 3.242120049s ago: executing program 4 (id=1923): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r1}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) 3.175246421s ago: executing program 1 (id=1924): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) mincore(&(0x7f0000bfd000/0x400000)=nil, 0x400000, &(0x7f0000000140)=""/145) 3.146574142s ago: executing program 4 (id=1925): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x16, 0x0, 0x4, 0xff}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xff48, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r1}, 0x10) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) close(r2) 3.106288404s ago: executing program 1 (id=1926): ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0185879, &(0x7f0000000140)={0x9, 0x100000000000d6, 0x2, 0x6, 0x0, 0x7, 0x2401}) r0 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000240)='ro\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x4, 0x7ff, 0x8e, 0x2, 0xffffffffffffffff, 0xa, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x1, 0xd}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000000380)={[{@debug}, {@delalloc}, {@journal_ioprio}, {@test_dummy_encryption}, {@nodiscard}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@acl}, {@init_itable}]}, 0x1, 0xbb4, &(0x7f00000017c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002ac0)={0x1a, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2000}, 0x80) 3.105586794s ago: executing program 4 (id=1927): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) close(0x3) 2.511737176s ago: executing program 3 (id=1928): syz_mount_image$exfat(&(0x7f00000005c0), &(0x7f0000000240)='./file1\x00', 0x0, &(0x7f0000000140)=ANY=[], 0x3, 0x151b, &(0x7f0000001b40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffd) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x275a, 0x0) ftruncate(r3, 0xc17d) 2.063650823s ago: executing program 2 (id=1929): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)="08e0ac8fb1d99df61d7b518d0a62071e7ec69f658d5a52d7eb7ea31db43f8cf570f335a80860ac4cc240dc149d8468493db8aad089f590d62e0bcb9d1dcee636ee311ee51839b7201745baef82209b2ab741dc5ea481ae9dcebe39b1101a42a8c82de46107541c240ad0d9ee4a9340cffd72aaea692a60993637c81d23a0d0ebbae66f1eb2771df2482c043d8715ae788b56cc91eaa4d6bbdec82d8f91eb822d0b5f3ebd86", 0xa5}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f0000002b40)='-', 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce90bfdbcfb8a86a74f6799f98c36e23e210f053830ac8e978a0785884001a7099c4b9016f1a65a57390caf78c272cbf9711f94505dd525af1ff7d013438df5b844226f41b81e58eb73366", 0x4b}, {&(0x7f0000000540)="f2e659a0b00d26c2ee15", 0xa}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000001600)="f2964dd16e01d56b414499264923beda58d7da0313c1ccafe53965750f25bdaa6b56a87307ec23d48b6f35ce49a813a2bc3cb23fdf42826bdc16788ff466919594de5bf8a1fa5d825947271ade4a95efeb170c", 0x53}, {&(0x7f0000001340)="b8", 0x1}, {&(0x7f0000000500)="01", 0x1}, {&(0x7f0000000280)="87", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000140)}, {&(0x7f0000000340)="e4", 0x1}], 0x2}}], 0x4, 0x4000000) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) 2.063202033s ago: executing program 4 (id=1930): r0 = socket$inet6(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000030000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x9, 0x8, 0x8000, 0x1, 0x0, 0xffffffffffffffff, 0xfffffffe}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r3, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb598}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r2}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='neigh_update\x00', r6}, 0x18) sendto$inet6(r0, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 2.030744464s ago: executing program 2 (id=1931): r0 = syz_open_dev$loop(&(0x7f0000000080), 0x80, 0x900) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x21) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000001540)='./file0\x00', 0x2000005c, &(0x7f0000000500)=ANY=[], 0x3, 0x1547, &(0x7f0000001580)="$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") chdir(0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0x7, 0x0) r6 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r6, &(0x7f0000000140)={0xa, 0xfffd, 0x0, @mcast2, 0x9}, 0x1c) sendmsg(r6, 0x0, 0x44004) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) 2.017178994s ago: executing program 5 (id=1932): r0 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r2, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) bpf$PROG_LOAD(0x5, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0xc) r8 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r8, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0xfffffffffffffd60, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548}}}]}, 0x78}}, 0x0) 0s ago: executing program 3 (id=1933): fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0xc0041, 0x0) r1 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000300)) ioctl$TCSBRKP(r0, 0x5425, 0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000400), 0xff, 0x23f, &(0x7f0000000540)="$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") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000002b40)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000100000000000010020"], 0x24, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x10) listxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)=""/187, 0xbb) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0x7, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000380)={0xa, 0x14e24, 0x0, @empty}, 0x1c) recvmmsg(r5, &(0x7f0000000000)=[{{0x0, 0x22, 0x0}, 0x80000000}], 0x1c284f836fac35b, 0x0, 0x0) kernel console output (not intermixed with test programs): (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 133.816720][ T2085] EXT4-fs (loop4): mount failed [ 133.953087][ T2114] syz.1.487[2114] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 133.953178][ T2114] syz.1.487[2114] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 134.506306][ T2113] netlink: 96 bytes leftover after parsing attributes in process `syz.0.492'. [ 136.024810][ T2138] netlink: 8 bytes leftover after parsing attributes in process `syz.0.499'. [ 136.966079][ T28] audit: type=1400 audit(1764047745.915:481): avc: denied { write } for pid=2153 comm="syz.0.505" name="event2" dev="devtmpfs" ino=275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 137.043967][ T2158] loop4: detected capacity change from 0 to 512 [ 137.142912][ T28] audit: type=1400 audit(1764047745.915:482): avc: denied { open } for pid=2153 comm="syz.0.505" path="/dev/input/event2" dev="devtmpfs" ino=275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 137.415438][ T2162] fuse: Bad value for 'fd' [ 137.422578][ T1343] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 137.496434][ T2158] Quota error (device loop4): v2_read_file_info: Free block number 1 out of range (1, 6). [ 137.544375][ T2158] EXT4-fs warning (device loop4): ext4_enable_quotas:7055: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 137.613293][ T2158] EXT4-fs (loop4): mount failed [ 137.687964][ T1343] usb 1-1: Using ep0 maxpacket: 16 [ 137.694526][ T1343] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 137.709399][ T1343] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 137.721481][ T1343] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 137.816816][ T1343] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.825820][ T1343] usb 1-1: Product: syz [ 137.830094][ T1343] usb 1-1: Manufacturer: syz [ 137.834755][ T1343] usb 1-1: SerialNumber: syz [ 137.927833][ T2175] loop4: detected capacity change from 0 to 256 [ 137.949502][ T2175] FAT-fs (loop4): Directory bread(block 64) failed [ 137.956316][ T2175] FAT-fs (loop4): Directory bread(block 65) failed [ 137.963002][ T2175] FAT-fs (loop4): Directory bread(block 66) failed [ 137.970151][ T2175] FAT-fs (loop4): Directory bread(block 67) failed [ 138.000309][ T2175] FAT-fs (loop4): Directory bread(block 68) failed [ 138.007302][ T2175] FAT-fs (loop4): Directory bread(block 69) failed [ 138.014300][ T2175] FAT-fs (loop4): Directory bread(block 70) failed [ 138.126158][ T28] audit: type=1326 audit(1764047747.085:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2153 comm="syz.0.505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2c5d8f749 code=0x7ffc0000 [ 138.159534][ T2175] FAT-fs (loop4): Directory bread(block 71) failed [ 138.180915][ T28] audit: type=1326 audit(1764047747.125:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2153 comm="syz.0.505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=94 compat=0 ip=0x7fc2c5d8f749 code=0x7ffc0000 [ 138.184128][ T2175] FAT-fs (loop4): Directory bread(block 72) failed [ 138.435357][ T28] audit: type=1326 audit(1764047747.125:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2153 comm="syz.0.505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2c5d8f749 code=0x7ffc0000 [ 138.893253][ T28] audit: type=1326 audit(1764047747.125:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2153 comm="syz.0.505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fc2c5d8f749 code=0x7ffc0000 [ 138.923334][ T2175] FAT-fs (loop4): Directory bread(block 73) failed [ 138.963242][ T2185] netlink: 8 bytes leftover after parsing attributes in process `syz.1.515'. [ 138.986736][ T28] audit: type=1326 audit(1764047747.955:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2153 comm="syz.0.505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2c5d8f749 code=0x7ffc0000 [ 139.126939][ T28] audit: type=1326 audit(1764047747.955:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2153 comm="syz.0.505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2c5d8f749 code=0x7ffc0000 [ 139.159912][ T1343] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 139.175447][ T1343] usb 1-1: 5:0: failed to get current value for ch 1 (-22) [ 139.237603][ T1343] usb 1-1: 5:0: cannot get min/max values for control 4 (id 5) [ 139.254634][ T1343] usb 1-1: USB disconnect, device number 8 [ 139.899956][ T2209] 9pnet_fd: Insufficient options for proto=fd [ 140.112497][ T2216] fuse: Bad value for 'fd' [ 140.581178][ T2232] loop2: detected capacity change from 0 to 512 [ 140.698682][ T2225] loop4: detected capacity change from 0 to 40427 [ 140.709107][ T2225] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 140.719696][ T2225] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 140.732219][ T2225] F2FS-fs (loop4): invalid crc value [ 140.767775][ T2225] F2FS-fs (loop4): Found nat_bits in checkpoint [ 140.833738][ T2225] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 140.846453][ T2225] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 141.109784][ T2246] loop2: detected capacity change from 0 to 8192 [ 141.133486][ T2246] netlink: 160 bytes leftover after parsing attributes in process `syz.2.536'. [ 143.436131][ T431] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 143.736025][ T431] usb 3-1: config 0 has an invalid interface number: 127 but max is 1 [ 143.744375][ T431] usb 3-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 225 [ 143.757865][ T431] usb 3-1: config 0 has no interface number 1 [ 143.764076][ T431] usb 3-1: config 0 interface 127 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 143.777388][ T431] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 29 [ 143.822363][ T431] usb 3-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 143.834186][ T431] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.848109][ T431] usb 3-1: Product: syz [ 143.852575][ T431] usb 3-1: Manufacturer: syz [ 143.857397][ T2272] loop0: detected capacity change from 0 to 512 [ 143.858084][ T431] usb 3-1: SerialNumber: syz [ 143.869962][ T431] usb 3-1: config 0 descriptor?? [ 143.881858][ T431] usb-storage 3-1:0.127: USB Mass Storage device detected [ 143.890109][ T431] usb-storage 3-1:0.127: Quirks match for vid 1908 pid 1315: 20000 [ 143.977185][ T2275] fuse: Bad value for 'fd' [ 144.209492][ T431] usb-storage 3-1:0.0: USB Mass Storage device detected [ 144.219794][ T2252] loop2: detected capacity change from 0 to 512 [ 144.226894][ T2252] EXT4-fs: Ignoring removed oldalloc option [ 144.233063][ T431] usb-storage 3-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 144.241544][ T2252] EXT4-fs (loop2): invalid first ino: 0 [ 144.573197][ T2286] loop4: detected capacity change from 0 to 128 [ 145.676612][ T28] audit: type=1400 audit(1764047753.455:489): avc: denied { create } for pid=2278 comm="syz.4.547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 145.759370][ T2295] loop0: detected capacity change from 0 to 256 [ 145.804945][ T28] audit: type=1400 audit(1764047753.955:490): avc: denied { ioctl } for pid=2278 comm="syz.4.547" path="socket:[22747]" dev="sockfs" ino=22747 ioctlcmd=0x52c8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 145.819400][ T2295] FAT-fs (loop0): Directory bread(block 64) failed [ 145.856472][ T2295] FAT-fs (loop0): Directory bread(block 65) failed [ 145.873236][ T2295] FAT-fs (loop0): Directory bread(block 66) failed [ 145.902467][ T2295] FAT-fs (loop0): Directory bread(block 67) failed [ 145.914996][ T2295] FAT-fs (loop0): Directory bread(block 68) failed [ 145.934916][ T2295] FAT-fs (loop0): Directory bread(block 69) failed [ 145.941522][ T2295] FAT-fs (loop0): Directory bread(block 70) failed [ 145.984900][ T2295] FAT-fs (loop0): Directory bread(block 71) failed [ 145.994025][ T2295] FAT-fs (loop0): Directory bread(block 72) failed [ 146.013066][ T2295] FAT-fs (loop0): Directory bread(block 73) failed [ 146.191878][ T2289] loop4: detected capacity change from 0 to 40427 [ 146.229115][ T2289] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 146.250163][ T2289] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 146.296918][ T2289] F2FS-fs (loop4): invalid crc value [ 146.323619][ T409] usb 3-1: USB disconnect, device number 3 [ 146.345876][ T2289] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 147.045422][ T2289] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 147.052603][ T2289] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 147.102250][ T286] syz-executor: attempt to access beyond end of device [ 147.102250][ T286] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 148.306314][ T2323] loop4: detected capacity change from 0 to 512 [ 148.342646][ T2326] loop2: detected capacity change from 0 to 256 [ 148.353322][ T2326] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 148.367274][ T2326] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 148.451397][ T2328] fuse: Bad value for 'fd' [ 148.475110][ T970] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 148.498671][ T2326] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xd3779459, utbl_chksum : 0xe619d30d) [ 148.684927][ T970] usb 1-1: Using ep0 maxpacket: 32 [ 148.691336][ T970] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 148.712585][ T970] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 148.725270][ T970] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 148.735083][ T970] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 148.743504][ T970] usb 1-1: Product: syz [ 148.748008][ T970] usb 1-1: Manufacturer: syz [ 148.754363][ T970] hub 1-1:4.0: USB hub found [ 148.955895][ T970] hub 1-1:4.0: config failed, can't read hub descriptor (err -22) [ 148.995320][ T970] usb 1-1: USB disconnect, device number 9 [ 150.063436][ T2355] incfs: Backing dir is not set, filesystem can't be mounted. [ 150.071580][ T2355] incfs: mount failed -2 [ 150.116872][ T28] audit: type=1326 audit(1764047759.085:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2359 comm="syz.3.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d1c38f749 code=0x7ffc0000 [ 150.153199][ T28] audit: type=1326 audit(1764047759.105:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2359 comm="syz.3.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9d1c38f749 code=0x7ffc0000 [ 150.506771][ T28] audit: type=1326 audit(1764047759.105:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2359 comm="syz.3.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d1c38f749 code=0x7ffc0000 [ 150.571376][ T28] audit: type=1326 audit(1764047759.105:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2359 comm="syz.3.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9d1c38f749 code=0x7ffc0000 [ 150.597157][ T28] audit: type=1326 audit(1764047759.105:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2359 comm="syz.3.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d1c38f749 code=0x7ffc0000 [ 150.638109][ T28] audit: type=1326 audit(1764047759.105:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2359 comm="syz.3.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=5 compat=0 ip=0x7f9d1c38f749 code=0x7ffc0000 [ 150.827475][ T28] audit: type=1326 audit(1764047759.105:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2359 comm="syz.3.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d1c38f749 code=0x7ffc0000 [ 151.256354][ T2381] loop2: detected capacity change from 0 to 256 [ 151.283178][ T2381] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 151.316012][ T39] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 151.641465][ T28] audit: type=1400 audit(1764047760.605:498): avc: denied { read append } for pid=2366 comm="syz.2.573" name="event2" dev="devtmpfs" ino=275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 151.671593][ T39] usb 5-1: config 0 has an invalid interface number: 127 but max is 1 [ 151.684408][ T39] usb 5-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 225 [ 151.710070][ T39] usb 5-1: config 0 has no interface number 1 [ 151.722743][ T39] usb 5-1: config 0 interface 127 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 151.775359][ T39] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 29 [ 151.806080][ T39] usb 5-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 151.826281][ T39] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.843006][ T39] usb 5-1: Product: syz [ 151.852534][ T39] usb 5-1: Manufacturer: syz [ 151.861856][ T39] usb 5-1: SerialNumber: syz [ 151.876821][ T39] usb 5-1: config 0 descriptor?? [ 151.889787][ T39] usb-storage 5-1:0.127: USB Mass Storage device detected [ 151.965343][ T39] usb-storage 5-1:0.127: Quirks match for vid 1908 pid 1315: 20000 [ 152.057993][ T39] usb-storage 5-1:0.0: USB Mass Storage device detected [ 152.066793][ T39] usb-storage 5-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 152.092138][ T2371] loop4: detected capacity change from 0 to 512 [ 152.196840][ T2394] netlink: 96 bytes leftover after parsing attributes in process `syz.1.580'. [ 152.381420][ T2371] EXT4-fs: Ignoring removed oldalloc option [ 152.445555][ T2371] EXT4-fs (loop4): invalid first ino: 0 [ 154.497178][ T2417] option changes via remount are deprecated (pid=2409 comm=syz.0.584) [ 154.505502][ T28] audit: type=1400 audit(1764047763.465:499): avc: denied { remount } for pid=2409 comm="syz.0.584" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 155.145936][ T39] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 155.451874][ T432] usb 5-1: USB disconnect, device number 7 [ 155.544914][ T39] usb 3-1: Using ep0 maxpacket: 32 [ 155.551357][ T39] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 155.576485][ T39] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 155.597395][ T39] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 155.616429][ T39] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 155.635751][ T39] usb 3-1: Product: syz [ 155.644414][ T39] usb 3-1: Manufacturer: syz [ 155.661629][ T39] hub 3-1:4.0: USB hub found [ 155.736086][ T2429] loop0: detected capacity change from 0 to 40427 [ 155.762247][ T2429] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 155.780054][ T2429] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 155.801783][ T2429] F2FS-fs (loop0): invalid crc value [ 155.812057][ T2429] F2FS-fs (loop0): Found nat_bits in checkpoint [ 155.844611][ T2429] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 155.851775][ T2429] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 155.860989][ T39] hub 3-1:4.0: config failed, can't read hub descriptor (err -22) [ 155.943056][ T39] usb 3-1: USB disconnect, device number 4 [ 158.005700][ T2464] loop4: detected capacity change from 0 to 40427 [ 158.021012][ T2464] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 158.029675][ T2464] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 158.039211][ T2464] F2FS-fs (loop4): invalid crc value [ 158.049728][ T2478] tmpfs: Unknown parameter 'nolazytimeun' [ 158.071138][ T2464] F2FS-fs (loop4): Found nat_bits in checkpoint [ 158.080701][ T2482] loop0: detected capacity change from 0 to 512 [ 158.109472][ T2482] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 158.119025][ T2482] ext4 filesystem being mounted at /120/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 158.201877][ T2464] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 158.209211][ T2464] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 161.243803][ T28] audit: type=1400 audit(1764047767.245:500): avc: denied { bind } for pid=2481 comm="syz.0.606" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 161.274450][ T284] EXT4-fs (loop0): unmounting filesystem. [ 161.616269][ T28] audit: type=1400 audit(1764047767.245:501): avc: denied { node_bind } for pid=2481 comm="syz.0.606" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 162.344999][ T409] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 162.544997][ T409] usb 1-1: Using ep0 maxpacket: 32 [ 162.551492][ T409] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.583038][ T409] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.608662][ T409] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 163.232241][ T409] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 163.243012][ T409] usb 1-1: Product: syz [ 163.247429][ T409] usb 1-1: Manufacturer: syz [ 163.256552][ T409] hub 1-1:4.0: USB hub found [ 163.848669][ T2525] netlink: 8 bytes leftover after parsing attributes in process `syz.1.617'. [ 163.861406][ T2526] loop4: detected capacity change from 0 to 256 [ 163.892167][ T2526] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 163.946935][ T2526] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 163.978307][ T2526] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xd3779459, utbl_chksum : 0xe619d30d) [ 164.009955][ T409] hub 1-1:4.0: config failed, can't read hub descriptor (err -22) [ 164.045250][ T409] usb 1-1: USB disconnect, device number 10 [ 165.204555][ T28] audit: type=1400 audit(1764047774.165:502): avc: denied { create } for pid=2519 comm="syz.2.616" name="#13" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 165.240658][ T28] audit: type=1400 audit(1764047774.165:503): avc: denied { link } for pid=2519 comm="syz.2.616" name="#13" dev="tmpfs" ino=754 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 165.286424][ T28] audit: type=1400 audit(1764047774.165:504): avc: denied { rename } for pid=2519 comm="syz.2.616" name="#14" dev="tmpfs" ino=754 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 168.850935][ T2565] loop0: detected capacity change from 0 to 40427 [ 168.865594][ T431] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 168.883300][ T2565] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 168.892302][ T2565] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 168.927344][ T2565] F2FS-fs (loop0): invalid crc value [ 168.934210][ T2565] F2FS-fs (loop0): Found nat_bits in checkpoint [ 169.010531][ T2565] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 169.020006][ T2565] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 169.054903][ T431] usb 3-1: Using ep0 maxpacket: 32 [ 169.061916][ T431] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 169.088312][ T431] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 169.113407][ T431] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 169.133582][ T431] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 169.161711][ T431] usb 3-1: Product: syz [ 169.183413][ T431] usb 3-1: Manufacturer: syz [ 169.200723][ T431] hub 3-1:4.0: USB hub found [ 169.795656][ T431] hub 3-1:4.0: config failed, can't read hub descriptor (err -22) [ 169.913127][ T431] usb 3-1: USB disconnect, device number 5 [ 171.169241][ T2626] netlink: 8 bytes leftover after parsing attributes in process `syz.3.647'. [ 171.385551][ T2643] tmpfs: Unknown parameter 'nolazytimeun' [ 171.412829][ T2617] loop0: detected capacity change from 0 to 40427 [ 171.436442][ T2617] F2FS-fs (loop0): invalid crc value [ 171.515800][ T2617] F2FS-fs (loop0): Found nat_bits in checkpoint [ 171.696437][ T2617] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 172.531071][ T28] audit: type=1400 audit(1764047781.145:505): avc: denied { write } for pid=2616 comm="syz.0.640" name="file1" dev="loop0" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 172.584927][ T28] audit: type=1400 audit(1764047781.145:506): avc: denied { add_name } for pid=2616 comm="syz.0.640" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 173.358392][ T28] audit: type=1400 audit(1764047781.205:507): avc: denied { mounton } for pid=2616 comm="syz.0.640" path="/128/file0/file1/file0" dev="loop0" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 173.394196][ T284] syz-executor: attempt to access beyond end of device [ 173.394196][ T284] loop0: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 173.830574][ T2669] netlink: 8 bytes leftover after parsing attributes in process `syz.3.662'. [ 173.875090][ T284] syz-executor: attempt to access beyond end of device [ 173.875090][ T284] loop0: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 173.941899][ T28] audit: type=1400 audit(1764047781.245:508): avc: denied { setattr } for pid=2616 comm="syz.0.640" name="work" dev="loop0" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 173.964514][ T28] audit: type=1400 audit(1764047781.265:509): avc: denied { remove_name } for pid=2616 comm="syz.0.640" name="#15" dev="loop0" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 173.988796][ T28] audit: type=1400 audit(1764047781.265:510): avc: denied { rename } for pid=2616 comm="syz.0.640" name="#15" dev="loop0" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 174.010817][ T28] audit: type=1400 audit(1764047781.285:511): avc: denied { unlink } for pid=2616 comm="syz.0.640" name="#15" dev="loop0" ino=24 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 174.053217][ T28] audit: type=1400 audit(1764047781.295:512): avc: denied { unlink } for pid=2616 comm="syz.0.640" name="#16" dev="loop0" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 174.217199][ T28] audit: type=1400 audit(1764047781.495:513): avc: denied { rmdir } for pid=2616 comm="syz.0.640" name="file0" dev="overlay" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 174.428355][ T28] audit: type=1400 audit(1764047781.495:514): avc: denied { create } for pid=2616 comm="syz.0.640" name="#17" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 174.540063][ T43] kworker/u4:2: attempt to access beyond end of device [ 174.540063][ T43] loop0: rw=2049, sector=40960, nr_sectors = 32 limit=40427 [ 175.240413][ T2692] tmpfs: Unknown parameter 'nolazytimeun' [ 175.395882][ T43] device bridge_slave_1 left promiscuous mode [ 175.402120][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.427069][ T43] device bridge_slave_0 left promiscuous mode [ 175.455679][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.481024][ T43] device veth1_macvtap left promiscuous mode [ 175.499452][ T43] device veth0_vlan left promiscuous mode [ 175.620424][ T2700] netlink: 8 bytes leftover after parsing attributes in process `syz.1.674'. [ 176.017896][ T2717] loop4: detected capacity change from 0 to 512 [ 176.024779][ T2717] EXT4-fs: Ignoring removed oldalloc option [ 176.042960][ T2717] EXT4-fs: quotafile must be on filesystem root [ 176.044004][ T2705] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.058239][ T2705] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.066851][ T2705] device bridge_slave_0 entered promiscuous mode [ 176.075548][ T2705] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.082954][ T2705] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.094884][ T2705] device bridge_slave_1 entered promiscuous mode [ 176.371084][ T2705] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.378241][ T2705] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.385584][ T2705] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.392630][ T2705] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.435161][ T6] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 176.453638][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 176.469325][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.477091][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.495837][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 176.567129][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.574226][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.582363][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 176.897209][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.904335][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.946680][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 176.995689][ T6] usb 5-1: Using ep0 maxpacket: 16 [ 177.018967][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 177.027353][ T6] usb 5-1: config 0 interface 0 has no altsetting 0 [ 177.038083][ T6] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 177.047024][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 177.047455][ T6] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.065990][ T2738] tmpfs: Unknown parameter 'nolazytimeun' [ 177.068202][ T6] usb 5-1: config 0 descriptor?? [ 177.072040][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 177.092025][ T2705] device veth0_vlan entered promiscuous mode [ 177.099180][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 177.108112][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 177.116738][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 177.124450][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 177.140687][ T2705] device veth1_macvtap entered promiscuous mode [ 177.148131][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 177.156989][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 177.166111][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 177.178275][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 177.186994][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 177.197742][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 177.206276][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 177.632587][ T2749] netlink: 8 bytes leftover after parsing attributes in process `syz.2.686'. [ 177.654134][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 177.654168][ T28] audit: type=1400 audit(1764047786.615:520): avc: denied { mounton } for pid=2705 comm="syz-executor" path="/root/syzkaller.UsPO9G/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 177.689694][ T6] usbhid 5-1:0.0: can't add hid device: -71 [ 177.695816][ T6] usbhid: probe of 5-1:0.0 failed with error -71 [ 177.711158][ T6] usb 5-1: USB disconnect, device number 8 [ 178.686322][ T2771] tmpfs: Unknown parameter 'nolazytimeun' [ 179.179303][ T2765] loop5: detected capacity change from 0 to 40427 [ 179.194429][ T2765] F2FS-fs (loop5): Invalid SB checksum offset: 0 [ 179.214942][ T2765] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 179.245509][ T2765] F2FS-fs (loop5): invalid crc value [ 179.300408][ T2765] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 179.334881][ T2765] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0 [ 179.342358][ T2765] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 179.727388][ T2705] syz-executor: attempt to access beyond end of device [ 179.727388][ T2705] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 180.589352][ T2796] netlink: 4 bytes leftover after parsing attributes in process `syz.4.700'. [ 180.620324][ T2799] netlink: 20 bytes leftover after parsing attributes in process `syz.1.701'. [ 180.868855][ T2805] netlink: 12 bytes leftover after parsing attributes in process `syz.4.700'. [ 181.256553][ T28] audit: type=1400 audit(1764047789.815:521): avc: denied { name_bind } for pid=2795 comm="syz.4.700" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 181.313232][ T2806] netlink: 'syz.1.701': attribute type 13 has an invalid length. [ 181.322431][ T28] audit: type=1400 audit(1764047790.275:522): avc: denied { setopt } for pid=2798 comm="syz.1.701" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 181.442948][ T2806] gretap0: refused to change device tx_queue_len [ 181.455636][ T2806] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 181.501788][ T28] audit: type=1400 audit(1764047790.465:523): avc: denied { wake_alarm } for pid=2812 comm="syz.1.704" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 181.503672][ T2811] netlink: 8 bytes leftover after parsing attributes in process `syz.5.698'. [ 181.712742][ T2815] loop4: detected capacity change from 0 to 40427 [ 181.732837][ T2815] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 181.743889][ T2815] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 181.793490][ T2815] F2FS-fs (loop4): invalid crc value [ 181.854696][ T2815] F2FS-fs (loop4): Found nat_bits in checkpoint [ 181.865054][ T799] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 182.156245][ T799] usb 3-1: config 0 has an invalid interface number: 127 but max is 1 [ 182.281644][ T799] usb 3-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 225 [ 182.656981][ T799] usb 3-1: config 0 has no interface number 1 [ 182.666308][ T799] usb 3-1: config 0 interface 127 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 182.686672][ T799] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 29 [ 182.886103][ T2827] loop5: detected capacity change from 0 to 40427 [ 182.893457][ T2827] F2FS-fs (loop5): fault_injection options not supported [ 183.211995][ T2827] F2FS-fs (loop5): invalid crc value [ 183.223576][ T799] usb 3-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 183.233246][ T799] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.242524][ T2815] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 183.257024][ T799] usb 3-1: Product: syz [ 183.262382][ T2815] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 183.275686][ T2827] F2FS-fs (loop5): Found nat_bits in checkpoint [ 183.282137][ T799] usb 3-1: Manufacturer: syz [ 183.307524][ T799] usb 3-1: SerialNumber: syz [ 183.344455][ T799] usb 3-1: config 0 descriptor?? [ 183.429608][ T799] usb-storage 3-1:0.127: USB Mass Storage device detected [ 183.449039][ T799] usb-storage 3-1:0.127: Quirks match for vid 1908 pid 1315: 20000 [ 183.449235][ T2827] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 184.199734][ T799] usb-storage 3-1:0.0: USB Mass Storage device detected [ 184.228295][ T2858] netlink: 20 bytes leftover after parsing attributes in process `syz.3.715'. [ 184.365609][ T2827] syz.5.709: attempt to access beyond end of device [ 184.365609][ T2827] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 184.410929][ T2864] netlink: 'syz.3.715': attribute type 13 has an invalid length. [ 184.422534][ T2864] gretap0: refused to change device tx_queue_len [ 184.430185][ T2864] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 184.981602][ T799] usb-storage 3-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 185.012204][ T2705] syz-executor: attempt to access beyond end of device [ 185.012204][ T2705] loop5: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 185.129042][ T2873] loop4: detected capacity change from 0 to 512 [ 185.224184][ T2875] netlink: 8 bytes leftover after parsing attributes in process `syz.5.719'. [ 186.590886][ T2667] usb 3-1: USB disconnect, device number 6 [ 187.108079][ T2912] netlink: 8 bytes leftover after parsing attributes in process `syz.5.733'. [ 188.025222][ T2736] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 188.224875][ T2736] usb 5-1: Using ep0 maxpacket: 16 [ 188.231220][ T2736] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 188.274903][ T2736] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 188.929130][ T2736] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 188.950047][ T2736] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.958340][ T2736] usb 5-1: Product: syz [ 188.962790][ T2736] usb 5-1: Manufacturer: syz [ 188.969673][ T2736] usb 5-1: SerialNumber: syz [ 189.227347][ T2946] netlink: 8 bytes leftover after parsing attributes in process `syz.3.744'. [ 189.896962][ T2736] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 190.659619][ T2736] usb 5-1: 5:0: failed to get current value for ch 1 (-22) [ 190.675252][ T2736] usb 5-1: 5:0: cannot get min/max values for control 4 (id 5) [ 190.694065][ T2736] usb 5-1: USB disconnect, device number 9 [ 190.708876][ T2504] udevd[2504]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 190.821912][ T2970] syz.2.747[2970] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 190.821997][ T2970] syz.2.747[2970] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 191.817765][ T2984] netlink: 8 bytes leftover after parsing attributes in process `syz.1.756'. [ 192.776149][ T28] audit: type=1400 audit(1764047801.745:524): avc: denied { ioctl } for pid=2997 comm="syz.4.761" path="/dev/input/event2" dev="devtmpfs" ino=275 ioctlcmd=0xf501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 192.834831][ T3002] loop4: detected capacity change from 0 to 256 [ 192.889609][ T3002] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 192.944977][ T3002] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 193.354196][ T3002] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xd3779459, utbl_chksum : 0xe619d30d) [ 193.652937][ T3015] SELinux: Context @ is not valid (left unmapped). [ 193.666642][ T28] audit: type=1326 audit(1764047802.615:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3014 comm="syz.5.766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86ef98f749 code=0x7ffc0000 [ 193.690292][ T28] audit: type=1326 audit(1764047802.615:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3014 comm="syz.5.766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f86ef98f749 code=0x7ffc0000 [ 193.714380][ T28] audit: type=1326 audit(1764047802.615:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3014 comm="syz.5.766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86ef98f749 code=0x7ffc0000 [ 193.752208][ T28] audit: type=1326 audit(1764047802.615:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3014 comm="syz.5.766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f86ef98f749 code=0x7ffc0000 [ 193.823054][ T3024] netlink: 4 bytes leftover after parsing attributes in process `syz.2.770'. [ 193.840021][ T28] audit: type=1326 audit(1764047802.615:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3014 comm="syz.5.766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86ef98f749 code=0x7ffc0000 [ 193.846051][ T3024] netlink: 12 bytes leftover after parsing attributes in process `syz.2.770'. [ 193.872541][ T28] audit: type=1326 audit(1764047802.615:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3014 comm="syz.5.766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f86ef98f749 code=0x7ffc0000 [ 193.904931][ T28] audit: type=1326 audit(1764047802.615:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3014 comm="syz.5.766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86ef98f749 code=0x7ffc0000 [ 193.998076][ T3032] loop4: detected capacity change from 0 to 512 [ 194.004862][ T28] audit: type=1326 audit(1764047802.615:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3014 comm="syz.5.766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f86ef98f749 code=0x7ffc0000 [ 194.085026][ T28] audit: type=1326 audit(1764047802.615:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3014 comm="syz.5.766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86ef98f749 code=0x7ffc0000 [ 195.633091][ T3065] netlink: 'syz.1.781': attribute type 16 has an invalid length. [ 195.697474][ T3065] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.781'. [ 196.285525][ T3082] netlink: 8 bytes leftover after parsing attributes in process `syz.3.790'. [ 196.478188][ T335] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 197.340111][ T3101] overlayfs: failed to clone upperpath [ 197.494303][ T335] usb 3-1: Using ep0 maxpacket: 32 [ 197.500884][ T335] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 197.524858][ T335] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 197.564449][ T335] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 197.665113][ T335] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 197.688954][ T335] usb 3-1: Product: syz [ 197.693178][ T335] usb 3-1: Manufacturer: syz [ 198.333940][ T3116] netlink: 160 bytes leftover after parsing attributes in process `syz.1.801'. [ 198.618112][ T335] hub 3-1:4.0: USB hub found [ 198.641391][ T335] hub 3-1:4.0: config failed, can't read hub descriptor (err -22) [ 198.686296][ T3099] loop4: detected capacity change from 0 to 40427 [ 198.699451][ T3099] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 198.707319][ T3099] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 198.725348][ T335] usb 3-1: USB disconnect, device number 7 [ 198.740727][ T3099] F2FS-fs (loop4): invalid crc value [ 198.759765][ T3099] F2FS-fs (loop4): Found nat_bits in checkpoint [ 198.803060][ T3099] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 198.810383][ T3099] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 198.998164][ T3125] netlink: 'syz.1.803': attribute type 16 has an invalid length. [ 199.006018][ T3125] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.803'. [ 199.058296][ T3131] netlink: 20 bytes leftover after parsing attributes in process `syz.1.805'. [ 199.120411][ T3132] netlink: 'syz.1.805': attribute type 13 has an invalid length. [ 199.128902][ T3132] gretap0: refused to change device tx_queue_len [ 199.135757][ T3132] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 200.898174][ T3162] netlink: 160 bytes leftover after parsing attributes in process `syz.5.813'. [ 202.272669][ T2667] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 204.367544][ T2667] usb 5-1: Using ep0 maxpacket: 32 [ 205.435172][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 205.435187][ T28] audit: type=1400 audit(1764047814.405:552): avc: denied { mount } for pid=3190 comm="syz.3.822" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 205.775436][ T2667] usb 5-1: device descriptor read/all, error -71 [ 207.080511][ T3235] overlayfs: failed to clone upperpath [ 207.701451][ T28] audit: type=1326 audit(1764047816.665:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3225 comm="syz.5.832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86ef98f749 code=0x7fc00000 [ 207.761500][ T28] audit: type=1326 audit(1764047816.695:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3225 comm="syz.5.832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f86ef98f749 code=0x7fc00000 [ 207.785353][ T28] audit: type=1326 audit(1764047816.695:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3225 comm="syz.5.832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86ef98f749 code=0x7fc00000 [ 207.809314][ T28] audit: type=1326 audit(1764047816.695:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3225 comm="syz.5.832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86ef98f749 code=0x7fc00000 [ 207.843962][ T28] audit: type=1326 audit(1764047816.695:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3225 comm="syz.5.832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86ef98f749 code=0x7fc00000 [ 207.880713][ T28] audit: type=1326 audit(1764047816.695:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3225 comm="syz.5.832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86ef98f749 code=0x7fc00000 [ 207.923603][ T28] audit: type=1326 audit(1764047816.695:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3225 comm="syz.5.832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86ef98f749 code=0x7fc00000 [ 207.955322][ T28] audit: type=1326 audit(1764047816.695:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3225 comm="syz.5.832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86ef98f749 code=0x7fc00000 [ 207.991930][ T28] audit: type=1326 audit(1764047816.695:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3225 comm="syz.5.832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86ef98f749 code=0x7fc00000 [ 208.951983][ T3274] netlink: 8 bytes leftover after parsing attributes in process `syz.1.848'. [ 209.001922][ T3279] netlink: 4 bytes leftover after parsing attributes in process `syz.1.850'. [ 209.135053][ T315] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 209.191180][ T3285] netlink: 12 bytes leftover after parsing attributes in process `syz.1.850'. [ 209.365545][ T315] usb 3-1: Using ep0 maxpacket: 32 [ 209.373512][ T315] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 209.418034][ T315] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 209.440508][ T315] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 209.459001][ T315] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 209.482266][ T315] usb 3-1: Product: syz [ 209.486857][ T315] usb 3-1: Manufacturer: syz [ 209.503726][ T315] hub 3-1:4.0: USB hub found [ 209.597630][ T3294] loop4: detected capacity change from 0 to 256 [ 209.781953][ T315] hub 3-1:4.0: config failed, can't read hub descriptor (err -22) [ 210.005585][ T315] usb 3-1: USB disconnect, device number 8 [ 210.779073][ T3313] netlink: 8 bytes leftover after parsing attributes in process `syz.5.860'. [ 212.482385][ T3344] loop4: detected capacity change from 0 to 1024 [ 212.489247][ T3344] EXT4-fs: Ignoring removed orlov option [ 212.637613][ T3344] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 213.342000][ T3352] netlink: 8 bytes leftover after parsing attributes in process `syz.1.871'. [ 213.378988][ T28] kauditd_printk_skb: 80 callbacks suppressed [ 213.379004][ T28] audit: type=1326 audit(1764047822.345:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3355 comm="syz.1.873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb24eb8f749 code=0x7ffc0000 [ 213.514913][ T28] audit: type=1326 audit(1764047822.375:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3355 comm="syz.1.873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb24eb8f749 code=0x7ffc0000 [ 213.607696][ T28] audit: type=1326 audit(1764047822.375:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3355 comm="syz.1.873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb24eb8f749 code=0x7ffc0000 [ 213.638044][ T28] audit: type=1326 audit(1764047822.375:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3355 comm="syz.1.873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb24eb8f749 code=0x7ffc0000 [ 213.639608][ T286] EXT4-fs (loop4): unmounting filesystem. [ 213.663335][ T28] audit: type=1326 audit(1764047822.375:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3355 comm="syz.1.873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb24eb8f749 code=0x7ffc0000 [ 213.691378][ T28] audit: type=1326 audit(1764047822.375:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3355 comm="syz.1.873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb24eb8f749 code=0x7ffc0000 [ 213.777497][ T3364] overlayfs: failed to clone upperpath [ 213.996667][ T3181] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 214.010747][ T28] audit: type=1326 audit(1764047822.375:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3355 comm="syz.1.873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb24eb8f749 code=0x7ffc0000 [ 214.125195][ T28] audit: type=1326 audit(1764047822.375:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3355 comm="syz.1.873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb24eb8f749 code=0x7ffc0000 [ 214.171614][ T28] audit: type=1326 audit(1764047822.375:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3355 comm="syz.1.873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb24eb8f749 code=0x7ffc0000 [ 214.265163][ T28] audit: type=1326 audit(1764047822.375:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3355 comm="syz.1.873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb24eb8f749 code=0x7ffc0000 [ 214.386987][ T3372] netlink: 4 bytes leftover after parsing attributes in process `syz.1.880'. [ 214.396816][ T3181] usb 3-1: config 0 has an invalid interface number: 127 but max is 1 [ 214.409124][ T3181] usb 3-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 225 [ 214.435014][ T3181] usb 3-1: config 0 has no interface number 1 [ 214.448421][ T3181] usb 3-1: config 0 interface 127 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 214.491847][ T3181] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 29 [ 214.532594][ T3181] usb 3-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 214.730104][ T3380] netlink: 12 bytes leftover after parsing attributes in process `syz.1.880'. [ 215.003444][ T3181] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.011542][ T3181] usb 3-1: Product: syz [ 215.015752][ T3181] usb 3-1: Manufacturer: syz [ 215.022061][ T3181] usb 3-1: SerialNumber: syz [ 215.031474][ T3181] usb 3-1: config 0 descriptor?? [ 215.045981][ T3181] usb-storage 3-1:0.127: USB Mass Storage device detected [ 215.067035][ T3181] usb-storage 3-1:0.127: Quirks match for vid 1908 pid 1315: 20000 [ 215.116816][ T3181] usb-storage 3-1:0.0: USB Mass Storage device detected [ 215.131410][ T3181] usb-storage 3-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 215.657017][ T3358] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.665605][ T3358] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.676985][ T3181] usb 3-1: USB disconnect, device number 9 [ 215.843040][ T3394] loop4: detected capacity change from 0 to 40427 [ 215.850208][ T3394] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 215.858259][ T3394] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 215.874300][ T3394] F2FS-fs (loop4): invalid crc value [ 215.929330][ T3394] F2FS-fs (loop4): Found nat_bits in checkpoint [ 215.982123][ T3394] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 215.989548][ T3394] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 219.266275][ T3444] tmpfs: Unknown parameter 'nolazytimeun' [ 220.348817][ T28] kauditd_printk_skb: 223 callbacks suppressed [ 220.348904][ T28] audit: type=1400 audit(1764047829.105:875): avc: denied { mount } for pid=3449 comm="syz.4.900" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 220.501521][ T28] audit: type=1400 audit(1764047829.205:876): avc: denied { mounton } for pid=3449 comm="syz.4.900" path="/165/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 220.532465][ T28] audit: type=1400 audit(1764047829.445:877): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 220.626305][ T3460] loop4: detected capacity change from 0 to 256 [ 221.125114][ T432] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 221.326943][ T28] audit: type=1326 audit(1764047830.295:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3456 comm="syz.4.902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f50f8f749 code=0x7fc00000 [ 221.351464][ T432] usb 3-1: config 0 has an invalid interface number: 127 but max is 1 [ 221.362999][ T432] usb 3-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 225 [ 221.386968][ T432] usb 3-1: config 0 has no interface number 1 [ 221.387901][ T28] audit: type=1326 audit(1764047830.295:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3456 comm="syz.4.902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1f50f8f749 code=0x7fc00000 [ 221.400373][ T432] usb 3-1: config 0 interface 127 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 221.453156][ T432] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 29 [ 221.454700][ T28] audit: type=1326 audit(1764047830.295:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3456 comm="syz.4.902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f50f8f749 code=0x7fc00000 [ 221.479852][ T432] usb 3-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 221.517218][ T432] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.518067][ T28] audit: type=1326 audit(1764047830.295:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3456 comm="syz.4.902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f50f8f749 code=0x7fc00000 [ 221.533692][ T432] usb 3-1: Product: syz [ 221.570026][ T432] usb 3-1: Manufacturer: syz [ 221.574861][ T28] audit: type=1326 audit(1764047830.295:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3456 comm="syz.4.902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f50f8f749 code=0x7fc00000 [ 221.586720][ T432] usb 3-1: SerialNumber: syz [ 221.622069][ T28] audit: type=1326 audit(1764047830.295:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3456 comm="syz.4.902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f50f8f749 code=0x7fc00000 [ 221.655662][ T432] usb 3-1: config 0 descriptor?? [ 221.661895][ T432] usb-storage 3-1:0.127: USB Mass Storage device detected [ 221.662683][ T28] audit: type=1326 audit(1764047830.295:884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3456 comm="syz.4.902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f50f8f749 code=0x7fc00000 [ 222.077224][ T432] usb-storage 3-1:0.127: Quirks match for vid 1908 pid 1315: 20000 [ 222.193220][ T3486] netlink: 96 bytes leftover after parsing attributes in process `syz.4.909'. [ 222.302689][ T432] usb-storage 3-1:0.0: USB Mass Storage device detected [ 222.410336][ T432] usb-storage 3-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 224.821572][ T2217] usb 3-1: USB disconnect, device number 10 [ 225.672160][ T28] kauditd_printk_skb: 60 callbacks suppressed [ 225.672177][ T28] audit: type=1326 audit(1764047834.635:945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3521 comm="syz.3.919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d1c38f749 code=0x7fc00000 [ 225.717610][ T28] audit: type=1326 audit(1764047834.635:946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3521 comm="syz.3.919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9d1c38f749 code=0x7fc00000 [ 225.746411][ T28] audit: type=1326 audit(1764047834.635:947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3521 comm="syz.3.919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d1c38f749 code=0x7fc00000 [ 225.782103][ T28] audit: type=1326 audit(1764047834.635:948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3521 comm="syz.3.919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d1c38f749 code=0x7fc00000 [ 225.805688][ T28] audit: type=1326 audit(1764047834.635:949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3521 comm="syz.3.919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d1c38f749 code=0x7fc00000 [ 225.829874][ T28] audit: type=1326 audit(1764047834.635:950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3521 comm="syz.3.919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d1c38f749 code=0x7fc00000 [ 225.889119][ T28] audit: type=1326 audit(1764047834.635:951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3521 comm="syz.3.919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d1c38f749 code=0x7fc00000 [ 225.973643][ T28] audit: type=1326 audit(1764047834.635:952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3521 comm="syz.3.919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d1c38f749 code=0x7fc00000 [ 226.036194][ T3551] loop4: detected capacity change from 0 to 256 [ 226.161624][ T28] audit: type=1326 audit(1764047834.635:953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3521 comm="syz.3.919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d1c38f749 code=0x7fc00000 [ 226.274490][ T28] audit: type=1326 audit(1764047834.635:954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3521 comm="syz.3.919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d1c38f749 code=0x7fc00000 [ 226.325756][ T3551] FAT-fs (loop4): Directory bread(block 64) failed [ 226.332494][ T3551] FAT-fs (loop4): Directory bread(block 65) failed [ 226.339217][ T3551] FAT-fs (loop4): Directory bread(block 66) failed [ 226.345865][ T3551] FAT-fs (loop4): Directory bread(block 67) failed [ 226.352500][ T3551] FAT-fs (loop4): Directory bread(block 68) failed [ 226.359666][ T3551] FAT-fs (loop4): Directory bread(block 69) failed [ 226.366351][ T3551] FAT-fs (loop4): Directory bread(block 70) failed [ 226.374869][ T3551] FAT-fs (loop4): Directory bread(block 71) failed [ 226.381572][ T3551] FAT-fs (loop4): Directory bread(block 72) failed [ 226.388612][ T3551] FAT-fs (loop4): Directory bread(block 73) failed [ 228.034924][ T3591] netlink: 4 bytes leftover after parsing attributes in process `syz.2.941'. [ 228.574911][ T3595] netlink: 12 bytes leftover after parsing attributes in process `syz.2.941'. [ 229.923123][ T3610] loop4: detected capacity change from 0 to 256 [ 229.964881][ T3610] FAT-fs (loop4): Directory bread(block 64) failed [ 229.971626][ T3610] FAT-fs (loop4): Directory bread(block 65) failed [ 229.978315][ T3610] FAT-fs (loop4): Directory bread(block 66) failed [ 229.985090][ T3610] FAT-fs (loop4): Directory bread(block 67) failed [ 229.999898][ T3610] FAT-fs (loop4): Directory bread(block 68) failed [ 230.007985][ T3610] FAT-fs (loop4): Directory bread(block 69) failed [ 230.014997][ T3610] FAT-fs (loop4): Directory bread(block 70) failed [ 230.021670][ T3610] FAT-fs (loop4): Directory bread(block 71) failed [ 230.028749][ T3610] FAT-fs (loop4): Directory bread(block 72) failed [ 230.035698][ T3610] FAT-fs (loop4): Directory bread(block 73) failed [ 230.072144][ T3622] netlink: 4 bytes leftover after parsing attributes in process `syz.5.952'. [ 230.925620][ T3630] tmpfs: Unknown parameter 'nolazytimeun' [ 230.994254][ T3640] loop4: detected capacity change from 0 to 256 [ 231.336902][ T3649] incfs: Can't find or create .incomplete dir in ./bus [ 231.346336][ T3649] incfs: mount failed -28 [ 232.025429][ T28] kauditd_printk_skb: 81 callbacks suppressed [ 232.025523][ T28] audit: type=1400 audit(1764047840.295:1036): avc: denied { mounton } for pid=3639 comm="syz.4.960" path="/179/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/bus" dev="loop4" ino=1048648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 232.380274][ T3662] netlink: 20 bytes leftover after parsing attributes in process `syz.5.964'. [ 232.622311][ T3665] netlink: 12 bytes leftover after parsing attributes in process `syz.5.964'. [ 233.101848][ T3672] overlayfs: failed to clone upperpath [ 235.868836][ T3710] netlink: 20 bytes leftover after parsing attributes in process `syz.2.977'. [ 235.939819][ T28] audit: type=1400 audit(1764047844.905:1037): avc: denied { write } for pid=3708 comm="syz.2.977" name="unix" dev="proc" ino=4026532670 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 235.978124][ T3712] netlink: 12 bytes leftover after parsing attributes in process `syz.2.977'. [ 238.090447][ T3753] netlink: 4 bytes leftover after parsing attributes in process `syz.3.992'. [ 239.745919][ T3757] netlink: 12 bytes leftover after parsing attributes in process `syz.3.992'. [ 240.011219][ T3761] netlink: 20 bytes leftover after parsing attributes in process `syz.3.993'. [ 240.118545][ T3761] netlink: 12 bytes leftover after parsing attributes in process `syz.3.993'. [ 240.152788][ T3740] loop4: detected capacity change from 0 to 40427 [ 240.176409][ T3740] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 240.201238][ T3740] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 240.236997][ T3740] F2FS-fs (loop4): invalid crc value [ 240.284690][ T3740] F2FS-fs (loop4): Found nat_bits in checkpoint [ 240.436460][ T3740] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 240.443555][ T3740] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 245.460322][ T3815] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1007'. [ 246.139182][ T3825] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1010'. [ 246.287774][ T3828] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1010'. [ 246.773114][ T3836] overlayfs: failed to clone upperpath [ 247.012759][ T3840] loop4: detected capacity change from 0 to 512 [ 247.027302][ T3840] EXT4-fs: Ignoring removed mblk_io_submit option [ 247.033977][ T3840] EXT4-fs: Ignoring removed mblk_io_submit option [ 247.041435][ T3840] EXT4-fs (loop4): Test dummy encryption mode enabled [ 247.048782][ T3840] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 247.060926][ T3840] EXT4-fs (loop4): 1 truncate cleaned up [ 247.066883][ T3840] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 247.098606][ T3840] fscrypt: AES-256-XTS using blk-crypto-fallback [ 247.303828][ T3855] syz.5.1017[3855] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 247.304247][ T3855] syz.5.1017[3855] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 249.287701][ T296] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 249.307921][ T3877] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1026'. [ 249.317426][ T3873] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1024'. [ 249.774846][ T296] usb 5-1: Using ep0 maxpacket: 32 [ 249.784396][ T296] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 249.795931][ T296] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 249.806889][ T296] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 249.816215][ T296] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.861927][ T296] usb 5-1: config 0 descriptor?? [ 250.018075][ T296] usbhid 5-1:0.0: can't add hid device: -71 [ 250.018912][ T286] EXT4-fs (loop4): unmounting filesystem. [ 250.024356][ T296] usbhid: probe of 5-1:0.0 failed with error -71 [ 250.051126][ T296] usb 5-1: USB disconnect, device number 12 [ 252.035677][ T3908] syz.3.1033[3908] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 252.035753][ T3908] syz.3.1033[3908] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 252.209928][ T3906] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1034'. [ 253.365902][ T3916] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1034'. [ 253.557833][ T3759] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 253.747675][ T3934] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1038'. [ 253.946689][ T3759] usb 5-1: config 0 has an invalid interface number: 127 but max is 1 [ 253.959658][ T3759] usb 5-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 225 [ 254.000934][ T3759] usb 5-1: config 0 has no interface number 1 [ 254.022232][ T3759] usb 5-1: config 0 interface 127 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 254.067986][ T3759] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 29 [ 254.119756][ T3759] usb 5-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 254.152143][ T3759] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.160266][ T3759] usb 5-1: Product: syz [ 254.164695][ T3759] usb 5-1: Manufacturer: syz [ 254.169422][ T3759] usb 5-1: SerialNumber: syz [ 254.175353][ T3759] usb 5-1: config 0 descriptor?? [ 254.181359][ T3759] usb-storage 5-1:0.127: USB Mass Storage device detected [ 254.189469][ T3759] usb-storage 5-1:0.127: Quirks match for vid 1908 pid 1315: 20000 [ 254.246753][ T3759] usb-storage 5-1:0.0: USB Mass Storage device detected [ 254.255334][ T3759] usb-storage 5-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 254.387719][ T3911] loop4: detected capacity change from 0 to 512 [ 254.395455][ T3911] EXT4-fs: Ignoring removed oldalloc option [ 254.402150][ T3911] EXT4-fs (loop4): invalid first ino: 0 [ 254.695865][ T3955] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 254.745210][ T3955] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.260541][ T3958] syz.1.1047[3958] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 255.261678][ T3958] syz.1.1047[3958] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 255.584944][ T315] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 255.817488][ T315] usb 3-1: config 0 has an invalid interface number: 127 but max is 1 [ 255.840385][ T315] usb 3-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 225 [ 257.516395][ T315] usb 3-1: config 0 has no interface number 1 [ 257.546599][ T315] usb 3-1: config 0 interface 127 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 257.647566][ T799] usb 5-1: USB disconnect, device number 13 [ 257.666472][ T315] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 29 [ 257.826402][ T315] usb 3-1: string descriptor 0 read error: -71 [ 257.946037][ T315] usb 3-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 258.035827][ T315] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.063808][ T315] usb 3-1: config 0 descriptor?? [ 258.079628][ T315] usb 3-1: can't set config #0, error -71 [ 258.090587][ T315] usb 3-1: USB disconnect, device number 11 [ 258.425010][ T799] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 258.451240][ T3989] 9pnet_fd: Insufficient options for proto=fd [ 259.971219][ T4004] syz.2.1061[4004] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 259.971445][ T4004] syz.2.1061[4004] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 266.335846][ T799] usb 5-1: Using ep0 maxpacket: 32 [ 266.371212][ T799] usb 5-1: device descriptor read/all, error -71 [ 268.885195][ T4028] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1069'. [ 269.119941][ T799] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 270.025119][ T4042] loop4: detected capacity change from 0 to 128 [ 270.052625][ T4042] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 270.062196][ T4042] ext4 filesystem being mounted at /195/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 270.113424][ T28] audit: type=1400 audit(1764047879.065:1038): avc: denied { setattr } for pid=4035 comm="syz.4.1072" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 271.125173][ T4054] syz.2.1075[4054] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 271.125265][ T4054] syz.2.1075[4054] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 273.048931][ T286] EXT4-fs (loop4): unmounting filesystem. [ 274.092163][ T4075] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1082'. [ 275.332860][ T4109] syz.3.1089[4109] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 275.334935][ T4109] syz.3.1089[4109] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 276.371759][ T4115] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1095'. [ 277.015851][ T4121] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1095'. [ 277.145233][ T4118] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1096'. [ 278.240064][ T4149] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1107'. [ 278.249413][ T2736] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 278.485867][ T2736] usb 5-1: config 0 has an invalid interface number: 127 but max is 1 [ 278.498946][ T2736] usb 5-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 225 [ 278.515060][ T2736] usb 5-1: config 0 has no interface number 1 [ 278.545215][ T2736] usb 5-1: config 0 interface 127 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 278.546131][ T4151] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1107'. [ 278.567896][ T2736] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 29 [ 278.590898][ T2736] usb 5-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 278.602271][ T2736] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.611148][ T2736] usb 5-1: Product: syz [ 278.616203][ T2736] usb 5-1: Manufacturer: syz [ 278.621114][ T2736] usb 5-1: SerialNumber: syz [ 278.668864][ T2736] usb 5-1: config 0 descriptor?? [ 278.718914][ T2736] usb-storage 5-1:0.127: USB Mass Storage device detected [ 278.792566][ T2736] usb-storage 5-1:0.127: Quirks match for vid 1908 pid 1315: 20000 [ 278.909864][ T4135] loop4: detected capacity change from 0 to 512 [ 278.949634][ T2736] usb-storage 5-1:0.0: USB Mass Storage device detected [ 278.964988][ T2736] usb-storage 5-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 278.971943][ T4135] EXT4-fs: Ignoring removed oldalloc option [ 279.046510][ T4162] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1108'. [ 279.201816][ T4135] EXT4-fs (loop4): invalid first ino: 0 [ 281.593167][ T2736] usb 5-1: USB disconnect, device number 16 [ 281.947345][ T28] audit: type=1400 audit(1764047890.915:1039): avc: denied { mounton } for pid=4204 comm="syz.3.1124" path="/236/file0" dev="tmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 282.227778][ T4214] overlayfs: failed to clone upperpath [ 282.608142][ T4202] loop4: detected capacity change from 0 to 40427 [ 282.616722][ T4202] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 282.624690][ T4202] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 282.633855][ T4202] F2FS-fs (loop4): invalid crc value [ 282.641110][ T4202] F2FS-fs (loop4): Found nat_bits in checkpoint [ 282.684901][ T4202] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 282.692049][ T4202] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 282.841815][ T4230] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1130'. [ 283.526996][ T4239] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1130'. [ 284.814325][ T4268] tmpfs: Unknown parameter 'nolazytimeun' [ 285.991004][ T4302] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1152'. [ 286.113412][ T4303] tmpfs: Unknown parameter 'nolazytimeun' [ 286.325518][ T28] audit: type=1326 audit(1764047895.295:1040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4308 comm="syz.2.1159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca5e58f749 code=0x7ffc0000 [ 286.349278][ T28] audit: type=1326 audit(1764047895.305:1041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4308 comm="syz.2.1159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fca5e58f749 code=0x7ffc0000 [ 287.289433][ T28] audit: type=1326 audit(1764047895.305:1042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4308 comm="syz.2.1159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca5e58f749 code=0x7ffc0000 [ 287.402502][ T28] audit: type=1326 audit(1764047895.305:1043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4308 comm="syz.2.1159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca5e58f749 code=0x7ffc0000 [ 287.437847][ T28] audit: type=1326 audit(1764047895.305:1044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4308 comm="syz.2.1159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fca5e58f749 code=0x7ffc0000 [ 287.485316][ T28] audit: type=1326 audit(1764047895.305:1045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4308 comm="syz.2.1159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca5e58f749 code=0x7ffc0000 [ 287.513204][ T28] audit: type=1326 audit(1764047895.305:1046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4308 comm="syz.2.1159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca5e58f749 code=0x7ffc0000 [ 287.545783][ T28] audit: type=1326 audit(1764047895.305:1047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4308 comm="syz.2.1159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fca5e58f749 code=0x7ffc0000 [ 287.570565][ T28] audit: type=1326 audit(1764047895.305:1048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4308 comm="syz.2.1159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca5e58f749 code=0x7ffc0000 [ 287.594540][ T28] audit: type=1326 audit(1764047895.305:1049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4308 comm="syz.2.1159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca5e58f749 code=0x7ffc0000 [ 287.701474][ T4328] overlayfs: failed to clone lowerpath [ 287.795594][ T28] audit: type=1326 audit(1764047895.305:1050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4308 comm="syz.2.1159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fca5e58f749 code=0x7ffc0000 [ 287.899614][ T28] audit: type=1326 audit(1764047895.305:1051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4308 comm="syz.2.1159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca5e58f749 code=0x7ffc0000 [ 288.422697][ T4342] 9pnet: Could not find request transport: fd0x0000000000000005 [ 288.472518][ T4347] bridge0: port 3(vlan2) entered blocking state [ 288.479023][ T4347] bridge0: port 3(vlan2) entered disabled state [ 289.508864][ T4356] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1173'. [ 291.359620][ T4373] overlayfs: failed to clone lowerpath [ 291.448524][ T4382] 9pnet: Could not find request transport: fd0x0000000000000005 [ 293.455456][ T4414] syz.3.1190[4414] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 293.455531][ T4414] syz.3.1190[4414] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 293.807680][ T4418] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1192'. [ 294.313258][ T4436] overlayfs: failed to clone lowerpath [ 294.566811][ T4438] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1192'. [ 297.219820][ T4480] syz.2.1209[4480] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 297.220338][ T4480] syz.2.1209[4480] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 298.057463][ T4484] 9pnet_fd: Insufficient options for proto=fd [ 298.638036][ T4498] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1219'. [ 298.662434][ T4503] syz.2.1220[4503] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 298.662510][ T4503] syz.2.1220[4503] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 299.062311][ T4519] 9pnet_fd: Insufficient options for proto=fd [ 299.710970][ T4532] syz.3.1229[4532] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 299.711503][ T4532] syz.3.1229[4532] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 300.379899][ T4534] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1230'. [ 304.273958][ T4556] 9pnet_fd: Insufficient options for proto=fd [ 304.375010][ T4569] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1243'. [ 305.653878][ T4578] syz.4.1244[4578] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 305.654353][ T4578] syz.4.1244[4578] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 306.931592][ T4595] syz.2.1251[4595] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 306.944077][ T4597] 9pnet_fd: Insufficient options for proto=fd [ 306.963156][ T4595] syz.2.1251[4595] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 307.528641][ T28] kauditd_printk_skb: 26 callbacks suppressed [ 307.528657][ T28] audit: type=1326 audit(1764047916.495:1078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4614 comm="syz.3.1258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d1c38f749 code=0x7ffc0000 [ 307.570022][ T296] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 307.577864][ T28] audit: type=1326 audit(1764047916.495:1079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4614 comm="syz.3.1258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d1c38f749 code=0x7ffc0000 [ 307.601950][ T28] audit: type=1326 audit(1764047916.495:1080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4614 comm="syz.3.1258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9d1c38f749 code=0x7ffc0000 [ 307.625927][ T28] audit: type=1326 audit(1764047916.495:1081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4614 comm="syz.3.1258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d1c38f749 code=0x7ffc0000 [ 307.649703][ T28] audit: type=1326 audit(1764047916.495:1082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4614 comm="syz.3.1258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d1c38f749 code=0x7ffc0000 [ 307.673222][ T28] audit: type=1326 audit(1764047916.495:1083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4614 comm="syz.3.1258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f9d1c38f749 code=0x7ffc0000 [ 307.696500][ T28] audit: type=1326 audit(1764047916.495:1084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4614 comm="syz.3.1258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d1c38f749 code=0x7ffc0000 [ 307.781154][ T4621] syz.3.1259[4621] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 307.781230][ T4621] syz.3.1259[4621] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 307.968117][ T4623] overlayfs: failed to clone lowerpath [ 308.226256][ T28] audit: type=1326 audit(1764047916.495:1085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4614 comm="syz.3.1258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d1c38f749 code=0x7ffc0000 [ 308.296119][ T28] audit: type=1326 audit(1764047916.495:1086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4614 comm="syz.3.1258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=323 compat=0 ip=0x7f9d1c38f749 code=0x7ffc0000 [ 308.376611][ T296] usb 3-1: config 0 has an invalid interface number: 127 but max is 1 [ 308.403745][ T296] usb 3-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 225 [ 308.416325][ T296] usb 3-1: config 0 has no interface number 1 [ 308.422564][ T28] audit: type=1326 audit(1764047916.495:1087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4614 comm="syz.3.1258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d1c38f749 code=0x7ffc0000 [ 308.454935][ T296] usb 3-1: config 0 interface 127 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 308.673743][ T296] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 29 [ 308.718442][ T296] usb 3-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 308.846183][ T4635] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1265'. [ 308.855890][ T4635] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1265'. [ 308.877739][ T296] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.886468][ T296] usb 3-1: Product: syz [ 308.890746][ T296] usb 3-1: Manufacturer: syz [ 309.185120][ T296] usb 3-1: SerialNumber: syz [ 309.197130][ T296] usb 3-1: config 0 descriptor?? [ 309.214763][ T296] usb-storage 3-1:0.127: USB Mass Storage device detected [ 309.239344][ T296] usb-storage 3-1:0.127: Quirks match for vid 1908 pid 1315: 20000 [ 309.309278][ T296] usb-storage 3-1:0.0: USB Mass Storage device detected [ 309.334795][ T296] usb-storage 3-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 311.209910][ T3978] usb 3-1: USB disconnect, device number 12 [ 311.421233][ T4690] bridge0: port 3(vlan2) entered blocking state [ 311.437595][ T4690] bridge0: port 3(vlan2) entered disabled state [ 311.496361][ T4691] syz.3.1277[4691] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 311.496855][ T4691] syz.3.1277[4691] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 312.994583][ T4712] overlayfs: failed to clone lowerpath [ 316.158268][ T4779] overlayfs: failed to clone lowerpath [ 316.724307][ T4787] netlink: 160 bytes leftover after parsing attributes in process `syz.4.1308'. [ 317.623666][ T4795] overlayfs: failed to clone upperpath [ 317.955719][ T4800] bridge0: port 3(vlan2) entered blocking state [ 317.976631][ T4800] bridge0: port 3(vlan2) entered disabled state [ 317.988354][ T4803] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1313'. [ 318.310520][ T4814] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1313'. [ 319.456660][ T4820] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1319'. [ 319.465817][ T4820] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1319'. [ 320.774992][ T4834] netlink: 160 bytes leftover after parsing attributes in process `syz.2.1322'. [ 321.058478][ T4843] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 321.199108][ T348] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 321.497747][ T348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 321.506291][ T348] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 321.520077][ T348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 321.535813][ T348] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 321.553519][ T348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 321.635444][ T348] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 321.644428][ T348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 321.652881][ T348] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready [ 321.660930][ T348] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 321.797143][ T4851] overlayfs: failed to clone upperpath [ 322.287212][ T4856] bridge0: port 3(vlan2) entered blocking state [ 322.300209][ T4856] bridge0: port 3(vlan2) entered disabled state [ 322.356215][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 322.356232][ T28] audit: type=1326 audit(1764047931.326:1107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4858 comm="syz.5.1331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86ef98f749 code=0x7ffc0000 [ 322.781362][ T28] audit: type=1326 audit(1764047931.326:1108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4858 comm="syz.5.1331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86ef98f749 code=0x7ffc0000 [ 322.809336][ T28] audit: type=1326 audit(1764047931.596:1109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4858 comm="syz.5.1331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f86ef98f749 code=0x7ffc0000 [ 322.833842][ T28] audit: type=1326 audit(1764047931.606:1110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4858 comm="syz.5.1331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86ef98f749 code=0x7ffc0000 [ 322.857829][ T4864] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1332'. [ 322.867135][ T4864] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1332'. [ 322.879403][ T28] audit: type=1326 audit(1764047931.606:1111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4858 comm="syz.5.1331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86ef98f749 code=0x7ffc0000 [ 322.939350][ T28] audit: type=1326 audit(1764047931.606:1112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4858 comm="syz.5.1331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f86ef98f749 code=0x7ffc0000 [ 322.984677][ T28] audit: type=1326 audit(1764047931.606:1113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4858 comm="syz.5.1331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86ef98f749 code=0x7ffc0000 [ 323.008633][ T28] audit: type=1326 audit(1764047931.606:1114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4858 comm="syz.5.1331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=323 compat=0 ip=0x7f86ef98f749 code=0x7ffc0000 [ 323.047497][ T28] audit: type=1326 audit(1764047931.606:1115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4858 comm="syz.5.1331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86ef98f749 code=0x7ffc0000 [ 323.083980][ T28] audit: type=1326 audit(1764047931.616:1116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4858 comm="syz.5.1331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86ef98f749 code=0x7ffc0000 [ 323.215897][ T4875] overlayfs: failed to clone lowerpath [ 324.426695][ T4897] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1345'. [ 324.501350][ T4897] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1345'. [ 327.043530][ T4380] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 327.423432][ T4380] usb 3-1: Using ep0 maxpacket: 16 [ 327.429831][ T4380] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 327.441175][ T4380] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 327.472247][ T4380] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 327.486579][ T4380] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.494711][ T4380] usb 3-1: Product: syz [ 327.498959][ T4380] usb 3-1: Manufacturer: syz [ 327.504129][ T4380] usb 3-1: SerialNumber: syz [ 327.831786][ T4380] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 328.474577][ T4380] usb 3-1: 5:0: failed to get current value for ch 1 (-22) [ 328.539903][ T4380] usb 3-1: 5:0: cannot get min/max values for control 4 (id 5) [ 328.552984][ T4380] usb 3-1: USB disconnect, device number 13 [ 328.783881][ T4554] udevd[4554]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 328.917791][ T4960] syz.3.1365[4960] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 328.917873][ T4960] syz.3.1365[4960] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 332.680706][ T4994] bridge0: port 3(vlan2) entered blocking state [ 332.752625][ T4994] bridge0: port 3(vlan2) entered disabled state [ 333.371873][ T5005] overlayfs: failed to clone upperpath [ 333.909163][ T5015] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1382'. [ 336.870851][ T5049] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1392'. [ 337.733733][ T5056] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1396'. [ 338.876145][ T5069] overlayfs: failed to clone upperpath [ 339.429106][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 339.429122][ T28] audit: type=1326 audit(1764047948.397:1126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5085 comm="syz.2.1407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca5e58f749 code=0x7ffc0000 [ 339.591887][ T28] audit: type=1326 audit(1764047948.417:1127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5085 comm="syz.2.1407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca5e58f749 code=0x7ffc0000 [ 339.940924][ T28] audit: type=1326 audit(1764047948.887:1128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5085 comm="syz.2.1407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fca5e58f749 code=0x7ffc0000 [ 339.993042][ T28] audit: type=1326 audit(1764047948.887:1129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5085 comm="syz.2.1407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca5e58f749 code=0x7ffc0000 [ 340.117206][ T28] audit: type=1326 audit(1764047948.887:1130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5085 comm="syz.2.1407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca5e58f749 code=0x7ffc0000 [ 340.290044][ T28] audit: type=1326 audit(1764047948.887:1131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5085 comm="syz.2.1407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fca5e58f749 code=0x7ffc0000 [ 341.251575][ T28] audit: type=1326 audit(1764047948.897:1132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5085 comm="syz.2.1407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca5e58f749 code=0x7ffc0000 [ 341.304552][ T5104] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1412'. [ 341.385445][ T28] audit: type=1326 audit(1764047948.907:1133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5085 comm="syz.2.1407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=323 compat=0 ip=0x7fca5e58f749 code=0x7ffc0000 [ 341.417364][ T28] audit: type=1326 audit(1764047948.907:1134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5085 comm="syz.2.1407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca5e58f749 code=0x7ffc0000 [ 342.029657][ T28] audit: type=1326 audit(1764047948.907:1135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5085 comm="syz.2.1407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca5e58f749 code=0x7ffc0000 [ 342.282016][ T5104] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1412'. [ 342.322677][ T5113] bridge0: port 3(vlan2) entered blocking state [ 342.332096][ T5113] bridge0: port 3(vlan2) entered disabled state [ 345.028923][ T5145] netlink: 160 bytes leftover after parsing attributes in process `syz.5.1424'. [ 346.969542][ T5159] bridge0: port 3(vlan2) entered blocking state [ 346.989432][ T5159] bridge0: port 3(vlan2) entered disabled state [ 347.354159][ T5167] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1432'. [ 347.482226][ T5169] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1427'. [ 347.601996][ T5171] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1432'. [ 348.528964][ T5185] netlink: 160 bytes leftover after parsing attributes in process `syz.1.1437'. [ 349.503187][ T5191] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1439'. [ 349.798677][ T5202] bridge0: port 3(vlan2) entered blocking state [ 349.805476][ T5202] bridge0: port 3(vlan2) entered disabled state [ 351.395362][ T5213] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1443'. [ 351.876845][ T5224] syz.2.1447[5224] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 351.877394][ T5224] syz.2.1447[5224] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 352.920794][ T5237] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1454'. [ 353.508386][ T5250] overlayfs: failed to clone lowerpath [ 354.353874][ T5254] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1459'. [ 354.559225][ T5261] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1459'. [ 355.399522][ T5270] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1463'. [ 355.838900][ T5272] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.846219][ T5272] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.282375][ T5280] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1467'. [ 356.538038][ T5284] overlayfs: failed to clone lowerpath [ 358.068706][ T5295] overlayfs: failed to clone lowerpath [ 358.782002][ T5303] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1473'. [ 359.374826][ T5313] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1473'. [ 359.688087][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 359.688101][ T28] audit: type=1326 audit(1764047968.658:1151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5332 comm="syz.1.1485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb24eb8f749 code=0x7ffc0000 [ 360.199327][ T5330] overlayfs: failed to clone lowerpath [ 360.220805][ T28] audit: type=1326 audit(1764047969.188:1152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5332 comm="syz.1.1485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb24eb8f749 code=0x7ffc0000 [ 360.305702][ T28] audit: type=1326 audit(1764047969.238:1153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5332 comm="syz.1.1485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb24eb8f749 code=0x7ffc0000 [ 360.495792][ T28] audit: type=1326 audit(1764047969.238:1154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5332 comm="syz.1.1485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb24eb8f749 code=0x7ffc0000 [ 360.523450][ T28] audit: type=1326 audit(1764047969.248:1155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5332 comm="syz.1.1485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb24eb8f749 code=0x7ffc0000 [ 360.548444][ T28] audit: type=1326 audit(1764047969.258:1156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5332 comm="syz.1.1485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=323 compat=0 ip=0x7fb24eb8f749 code=0x7ffc0000 [ 360.592779][ T28] audit: type=1326 audit(1764047969.258:1157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5332 comm="syz.1.1485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb24eb8f749 code=0x7ffc0000 [ 360.639104][ T28] audit: type=1326 audit(1764047969.268:1158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5332 comm="syz.1.1485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb24eb8f749 code=0x7ffc0000 [ 360.674072][ T28] audit: type=1326 audit(1764047969.268:1159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5332 comm="syz.1.1485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb24eb8f749 code=0x7ffc0000 [ 360.700181][ T28] audit: type=1326 audit(1764047969.278:1160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5332 comm="syz.1.1485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb24eb8f749 code=0x7ffc0000 [ 362.128496][ T5372] overlayfs: failed to clone upperpath [ 363.409975][ T5375] overlayfs: failed to clone lowerpath [ 363.637402][ T5382] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1501'. [ 363.818623][ T5395] tipc: Started in network mode [ 363.823644][ T5395] tipc: Node identity ac14140f, cluster identity 4711 [ 363.830510][ T5395] tipc: New replicast peer: 255.255.255.255 [ 363.836793][ T5395] tipc: Enabled bearer , priority 10 [ 364.527617][ T5406] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1501'. [ 365.197580][ T4380] tipc: Node number set to 2886997007 [ 365.319980][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 365.319995][ T28] audit: type=1400 audit(1764047974.288:1168): avc: denied { read } for pid=5411 comm="syz.5.1508" name="file0" dev="tmpfs" ino=936 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 365.417619][ T5420] overlayfs: failed to clone lowerpath [ 365.525286][ T28] audit: type=1400 audit(1764047974.288:1169): avc: denied { open } for pid=5411 comm="syz.5.1508" path="/173/file0" dev="tmpfs" ino=936 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 365.670738][ T28] audit: type=1400 audit(1764047974.638:1170): avc: denied { bind } for pid=5426 comm="syz.4.1513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 365.843195][ T5431] overlayfs: failed to clone upperpath [ 366.134020][ T5445] overlayfs: failed to clone upperpath [ 366.454853][ T5451] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1523'. [ 366.592787][ T5453] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 366.612808][ T5453] device veth0_vlan left promiscuous mode [ 366.618949][ T5453] device veth0_vlan entered promiscuous mode [ 366.693274][ T5453] device veth1_macvtap left promiscuous mode [ 366.713712][ T5453] device veth1_macvtap entered promiscuous mode [ 366.779238][ T348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 366.788338][ T348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 366.802485][ T348] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 366.902344][ T348] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.909439][ T348] bridge0: port 1(bridge_slave_0) entered forwarding state [ 379.718171][ T348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 379.733843][ T348] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 379.749423][ T348] bridge0: port 2(bridge_slave_1) entered blocking state [ 379.756551][ T348] bridge0: port 2(bridge_slave_1) entered forwarding state [ 379.765669][ T348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 379.833882][ T348] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 379.842415][ T348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 379.850819][ T348] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 379.859028][ T348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 379.867393][ T348] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 379.875672][ T348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 379.884120][ T348] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 379.893094][ T348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 379.902856][ T348] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 379.914873][ T348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 379.925915][ T348] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 379.936942][ T348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 379.975847][ T348] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 379.987145][ T348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 379.998597][ T348] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 380.012128][ T348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 380.022346][ T348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 380.057311][ T348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 380.098325][ T348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 380.106906][ T348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 380.115247][ T348] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 380.123108][ T348] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 380.131298][ T348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 380.139708][ T348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 380.148322][ T348] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 380.156505][ T348] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready [ 380.164351][ T348] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 380.172471][ T348] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 380.180487][ T5457] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1523'. [ 380.304302][ T28] audit: type=1400 audit(1764047989.279:1171): avc: denied { create } for pid=5477 comm="syz.5.1533" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 380.833352][ T5486] overlayfs: failed to clone lowerpath [ 381.230205][ T28] audit: type=1326 audit(1764047990.109:1172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5496 comm="syz.4.1538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f50f8f749 code=0x7ffc0000 [ 381.420525][ T28] audit: type=1326 audit(1764047990.109:1173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5496 comm="syz.4.1538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f50f8f749 code=0x7ffc0000 [ 381.444595][ T28] audit: type=1326 audit(1764047990.109:1174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5496 comm="syz.4.1538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f1f50f8f749 code=0x7ffc0000 [ 381.494778][ T28] audit: type=1326 audit(1764047990.109:1175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5496 comm="syz.4.1538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f50f8f749 code=0x7ffc0000 [ 381.548125][ T28] audit: type=1326 audit(1764047990.109:1176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5496 comm="syz.4.1538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f50f8f749 code=0x7ffc0000 [ 381.617138][ T28] audit: type=1400 audit(1764047990.589:1177): avc: denied { unlink } for pid=2705 comm="syz-executor" name="bus" dev="tmpfs" ino=964 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 383.383100][ T5527] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1550'. [ 384.941698][ T5535] overlayfs: failed to clone lowerpath [ 385.398732][ T5544] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1553'. [ 386.065773][ T5559] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1560'. [ 387.011887][ T5562] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1560'. [ 387.733001][ T5568] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1562'. [ 390.240032][ T5588] overlayfs: failed to clone upperpath [ 395.985665][ T5612] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1576'. [ 396.050600][ T28] audit: type=1400 audit(1764048005.010:1178): avc: denied { ioctl } for pid=5621 comm="syz.4.1581" path="socket:[30105]" dev="sockfs" ino=30105 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 398.428436][ T5654] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1590'. [ 399.362056][ T5671] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1593'. [ 401.235538][ T28] audit: type=1400 audit(1764048010.200:1179): avc: denied { connect } for pid=5697 comm="syz.4.1606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 401.263173][ T5701] overlayfs: failed to clone lowerpath [ 401.577979][ T5707] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1608'. [ 402.834807][ T5728] syz.4.1615[5728] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 402.834893][ T5728] syz.4.1615[5728] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 405.265404][ T5745] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1621'. [ 406.053835][ T5748] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1622'. [ 406.224273][ T5757] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1623'. [ 407.896593][ T28] audit: type=1326 audit(1764048016.861:1180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5761 comm="syz.2.1626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca5e58f749 code=0x7fc00000 [ 407.978860][ T28] audit: type=1326 audit(1764048016.861:1181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5761 comm="syz.2.1626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fca5e58f749 code=0x7fc00000 [ 408.002792][ T28] audit: type=1326 audit(1764048016.861:1182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5761 comm="syz.2.1626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca5e58f749 code=0x7fc00000 [ 408.028176][ T28] audit: type=1326 audit(1764048016.861:1183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5761 comm="syz.2.1626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca5e58f749 code=0x7fc00000 [ 408.077668][ T28] audit: type=1326 audit(1764048016.861:1184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5761 comm="syz.2.1626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca5e58f749 code=0x7fc00000 [ 408.116712][ T28] audit: type=1326 audit(1764048016.861:1185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5761 comm="syz.2.1626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca5e58f749 code=0x7fc00000 [ 408.173651][ T28] audit: type=1326 audit(1764048016.861:1186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5761 comm="syz.2.1626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca5e58f749 code=0x7fc00000 [ 408.197747][ T28] audit: type=1326 audit(1764048016.861:1187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5761 comm="syz.2.1626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca5e58f749 code=0x7fc00000 [ 408.221989][ T28] audit: type=1326 audit(1764048016.861:1188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5761 comm="syz.2.1626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca5e58f749 code=0x7fc00000 [ 408.499137][ T28] audit: type=1326 audit(1764048016.861:1189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5761 comm="syz.2.1626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca5e58f749 code=0x7fc00000 [ 409.318147][ T5807] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1639'. [ 411.733147][ T5837] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5837 comm=syz.1.1649 [ 411.748120][ T5837] netlink: 'syz.1.1649': attribute type 13 has an invalid length. [ 411.767833][ T5837] gretap0: refused to change device tx_queue_len [ 411.775151][ T5837] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 412.558813][ T5843] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1652'. [ 412.588607][ T5845] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1653'. [ 413.188578][ T5848] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1653'. [ 413.358913][ T5858] bridge0: port 3(vlan2) entered blocking state [ 413.365414][ T5858] bridge0: port 3(vlan2) entered disabled state [ 414.165240][ T5872] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1660'. [ 415.557586][ T5889] syz.1.1665[5889] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 415.557670][ T5889] syz.1.1665[5889] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 417.255607][ T5895] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1666'. [ 417.276305][ T5901] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1669'. [ 417.521268][ T5914] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1669'. [ 417.591441][ T5912] overlayfs: failed to clone lowerpath [ 420.831212][ T5959] fuse: Bad value for 'fd' [ 421.532969][ T5975] netlink: 'syz.5.1691': attribute type 3 has an invalid length. [ 421.638399][ T5975] netlink: 'syz.5.1691': attribute type 3 has an invalid length. [ 421.960081][ T5991] overlayfs: failed to clone lowerpath [ 423.546470][ T6030] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1705'. [ 424.410720][ T28] kauditd_printk_skb: 45 callbacks suppressed [ 424.410736][ T28] audit: type=1326 audit(1764048033.382:1235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6024 comm="syz.2.1711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca5e58f749 code=0x7fc00000 [ 424.445432][ T28] audit: type=1326 audit(1764048033.412:1236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6024 comm="syz.2.1711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fca5e58f749 code=0x7fc00000 [ 424.469341][ T28] audit: type=1326 audit(1764048033.412:1237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6024 comm="syz.2.1711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca5e58f749 code=0x7fc00000 [ 424.498494][ T28] audit: type=1326 audit(1764048033.412:1238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6024 comm="syz.2.1711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca5e58f749 code=0x7fc00000 [ 424.524094][ T28] audit: type=1326 audit(1764048033.412:1239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6024 comm="syz.2.1711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca5e58f749 code=0x7fc00000 [ 424.548246][ T28] audit: type=1326 audit(1764048033.412:1240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6024 comm="syz.2.1711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca5e58f749 code=0x7fc00000 [ 424.572276][ T28] audit: type=1326 audit(1764048033.412:1241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6024 comm="syz.2.1711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca5e58f749 code=0x7fc00000 [ 424.596393][ T28] audit: type=1326 audit(1764048033.412:1242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6024 comm="syz.2.1711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca5e58f749 code=0x7fc00000 [ 424.620221][ T28] audit: type=1326 audit(1764048033.412:1243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6024 comm="syz.2.1711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca5e58f749 code=0x7fc00000 [ 424.644033][ T28] audit: type=1326 audit(1764048033.412:1244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6024 comm="syz.2.1711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca5e58f749 code=0x7fc00000 [ 427.026919][ T6092] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1733'. [ 427.471518][ T6099] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1735'. [ 427.517905][ T6097] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1732'. [ 427.960962][ T6105] xt_bpf: check failed: parse error [ 428.317374][ T6106] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1724'. [ 428.513776][ T6117] overlayfs: failed to clone lowerpath [ 430.514406][ T6147] incfs: mount failed -22 [ 430.527548][ T28] kauditd_printk_skb: 57 callbacks suppressed [ 430.527569][ T28] audit: type=1400 audit(1764048039.482:1302): avc: denied { mounton } for pid=6146 comm="syz.5.1752" path="/bus" dev="proc" ino=4026531855 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 430.564299][ T6151] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1754'. [ 430.610699][ T6155] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1756'. [ 430.988906][ T6159] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1756'. [ 435.689167][ T6235] 9pnet_fd: Insufficient options for proto=fd [ 436.393841][ T6246] syz.1.1781[6246] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 436.395170][ T6246] syz.1.1781[6246] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 437.019422][ T6251] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1784'. [ 438.793995][ T6269] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1789'. [ 439.880445][ T6294] bridge0: port 3(vlan2) entered blocking state [ 439.887623][ T6294] bridge0: port 3(vlan2) entered disabled state [ 440.417803][ T6304] syz.4.1798[6304] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 440.417887][ T6304] syz.4.1798[6304] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 441.313339][ T6307] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1799'. [ 442.176735][ T6333] bridge0: port 3(vlan2) entered blocking state [ 442.204154][ T6333] bridge0: port 3(vlan2) entered disabled state [ 442.917289][ T28] audit: type=1326 audit(1764048051.883:1303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6348 comm="syz.2.1811" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fca5e58f749 code=0x0 [ 442.954360][ T6354] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1813'. [ 444.227758][ T6369] bridge0: port 3(vlan2) entered blocking state [ 444.246801][ T6369] bridge0: port 3(vlan2) entered disabled state [ 444.881612][ T6382] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1818'. [ 445.065450][ T6386] overlayfs: failed to clone lowerpath [ 445.372477][ T6391] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1823'. [ 448.061271][ T6430] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1838'. [ 448.248328][ T6437] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1838'. [ 448.594733][ T6442] overlayfs: failed to clone lowerpath [ 448.822871][ T6444] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1840'. [ 449.949277][ T28] audit: type=1400 audit(1764048058.923:1304): avc: denied { bind } for pid=6470 comm="syz.3.1850" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 451.099526][ T6490] overlayfs: failed to clone upperpath [ 451.411287][ T6495] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1856'. [ 451.990154][ T6506] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1857'. [ 452.580204][ T6521] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1865'. [ 452.986750][ T6531] bridge0: port 3(vlan2) entered blocking state [ 452.993216][ T6531] bridge0: port 3(vlan2) entered disabled state [ 453.048917][ T6537] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1871'. [ 453.833927][ T28] audit: type=1326 audit(1764048062.803:1305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6514 comm="syz.1.1863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb24eb8f749 code=0x7fc00000 [ 453.859196][ T28] audit: type=1326 audit(1764048062.803:1306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6514 comm="syz.1.1863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb24eb8f749 code=0x7fc00000 [ 453.860368][ T6543] xt_bpf: check failed: parse error [ 453.988938][ T28] audit: type=1326 audit(1764048062.803:1307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6514 comm="syz.1.1863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb24eb8f749 code=0x7fc00000 [ 454.016203][ T28] audit: type=1326 audit(1764048062.803:1308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6514 comm="syz.1.1863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb24eb8f749 code=0x7fc00000 [ 454.222938][ T28] audit: type=1326 audit(1764048062.803:1309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6514 comm="syz.1.1863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb24eb8f749 code=0x7fc00000 [ 454.287162][ T28] audit: type=1326 audit(1764048062.803:1310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6514 comm="syz.1.1863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb24eb8f749 code=0x7fc00000 [ 454.336179][ T28] audit: type=1326 audit(1764048062.803:1311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6514 comm="syz.1.1863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb24eb8f749 code=0x7fc00000 [ 454.384558][ T28] audit: type=1326 audit(1764048062.803:1312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6514 comm="syz.1.1863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb24eb8f749 code=0x7fc00000 [ 454.411274][ T28] audit: type=1326 audit(1764048062.803:1313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6514 comm="syz.1.1863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb24eb8f749 code=0x7fc00000 [ 454.635801][ T6558] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1874'. [ 454.835545][ T6566] bridge0: port 3(vlan2) entered blocking state [ 454.842001][ T6566] bridge0: port 3(vlan2) entered disabled state [ 455.218756][ T6573] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1884'. [ 456.208838][ T6582] xt_bpf: check failed: parse error [ 456.262318][ T6590] syz.1.1891[6590] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 456.262410][ T6590] syz.1.1891[6590] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 456.284799][ T6593] bridge0: port 3(vlan2) entered blocking state [ 456.310570][ T6593] bridge0: port 3(vlan2) entered disabled state [ 456.320388][ T6595] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1892'. [ 457.041228][ T28] kauditd_printk_skb: 58 callbacks suppressed [ 457.041257][ T28] audit: type=1326 audit(1764048066.013:1372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6583 comm="syz.5.1887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86ef98f749 code=0x7fc00000 [ 457.289691][ T28] audit: type=1326 audit(1764048066.043:1373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6583 comm="syz.5.1887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f86ef98f749 code=0x7fc00000 [ 457.384057][ T28] audit: type=1326 audit(1764048066.043:1374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6583 comm="syz.5.1887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86ef98f749 code=0x7fc00000 [ 457.454160][ T28] audit: type=1326 audit(1764048066.053:1375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6583 comm="syz.5.1887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86ef98f749 code=0x7fc00000 [ 457.478427][ T28] audit: type=1326 audit(1764048066.053:1376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6583 comm="syz.5.1887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86ef98f749 code=0x7fc00000 [ 457.501971][ T28] audit: type=1326 audit(1764048066.053:1377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6583 comm="syz.5.1887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86ef98f749 code=0x7fc00000 [ 457.525791][ T28] audit: type=1326 audit(1764048066.053:1378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6583 comm="syz.5.1887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86ef98f749 code=0x7fc00000 [ 457.559737][ T6606] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1893'. [ 457.576291][ T28] audit: type=1326 audit(1764048066.053:1379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6583 comm="syz.5.1887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86ef98f749 code=0x7fc00000 [ 457.646325][ T28] audit: type=1326 audit(1764048066.053:1380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6583 comm="syz.5.1887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86ef98f749 code=0x7fc00000 [ 457.699631][ T6608] overlayfs: failed to clone lowerpath [ 457.716010][ T28] audit: type=1326 audit(1764048066.053:1381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6583 comm="syz.5.1887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86ef98f749 code=0x7fc00000 [ 457.818546][ T6610] bridge0: port 3(vlan2) entered blocking state [ 457.826057][ T6610] bridge0: port 3(vlan2) entered disabled state [ 458.816518][ T6628] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1899'. [ 458.933181][ T6631] bridge0: port 3(vlan2) entered blocking state [ 458.955948][ T6631] bridge0: port 3(vlan2) entered disabled state [ 460.700718][ T6673] bridge0: port 3(vlan2) entered blocking state [ 460.724631][ T6673] bridge0: port 3(vlan2) entered disabled state [ 460.813012][ T6675] overlayfs: failed to clone lowerpath [ 460.819722][ T6674] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1910'. [ 460.987860][ T6677] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1917'. [ 466.717234][ T6716] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1930'. [ 466.776598][ T6722] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1932'. [ 715.601532][ C0] BUG: workqueue lockup - pool cpus=0 node=0 flags=0x0 nice=0 stuck for 246s! [ 715.610679][ C0] BUG: workqueue lockup - pool cpus=1 node=0 flags=0x0 nice=0 stuck for 248s! [ 715.619630][ C0] BUG: workqueue lockup - pool cpus=1 node=0 flags=0x0 nice=-20 stuck for 243s! [ 715.628718][ C0] Showing busy workqueues and worker pools: [ 715.634725][ C0] workqueue events: flags=0x0 [ 715.639425][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=14/256 refcnt=15 [ 715.639472][ C0] in-flight: 24:update_stats_workfn [ 715.639523][ C0] pending: free_work, bpf_prog_free_deferred, rht_deferred_worker, rht_deferred_worker, rht_deferred_worker, rht_deferred_worker, rht_deferred_worker, rht_deferred_worker, rht_deferred_worker, rht_deferred_worker, rht_deferred_worker, rht_deferred_worker, rht_deferred_worker [ 715.639759][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=15/256 refcnt=16 [ 715.639799][ C0] pending: vmstat_shepherd, kfree_rcu_monitor, psi_avgs_work, rht_deferred_worker, rht_deferred_worker, rht_deferred_worker, rht_deferred_worker, rht_deferred_worker, rht_deferred_worker, rht_deferred_worker, rht_deferred_worker, rht_deferred_worker, rht_deferred_worker, rht_deferred_worker, rht_deferred_worker [ 715.640067][ C0] workqueue events_long: flags=0x0 [ 715.722485][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=25/256 refcnt=26 [ 715.722538][ C0] pending: br_fdb_cleanup, br_multicast_gc_work, br_multicast_gc_work, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_multicast_gc_work, br_fdb_cleanup, br_multicast_gc_work, br_multicast_gc_work, br_multicast_gc_work, br_multicast_gc_work, br_multicast_gc_work, br_multicast_gc_work, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_multicast_gc_work, br_multicast_gc_work, br_multicast_gc_work [ 715.723071][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=29/256 refcnt=30 [ 715.723112][ C0] pending: br_fdb_cleanup, br_fdb_cleanup, br_multicast_gc_work, br_multicast_gc_work, br_multicast_gc_work, br_fdb_cleanup, br_multicast_gc_work, br_multicast_gc_work, br_fdb_cleanup, br_multicast_gc_work, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_multicast_gc_work, br_multicast_gc_work, br_fdb_cleanup, br_multicast_gc_work, br_fdb_cleanup, br_fdb_cleanup, br_multicast_gc_work, br_fdb_cleanup, br_fdb_cleanup, br_multicast_gc_work, br_multicast_gc_work, br_fdb_cleanup, br_multicast_gc_work, br_fdb_cleanup [ 715.723687][ C0] workqueue events_unbound: flags=0x2 [ 715.839435][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/512 refcnt=4 [ 715.839481][ C0] pending: toggle_allocation_gate, flush_memcg_stats_dwork [ 715.839537][ C0] workqueue events_power_efficient: flags=0x80 [ 715.860475][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=8/256 refcnt=9 [ 715.860525][ C0] pending: wg_ratelimiter_gc_entries, neigh_managed_work, neigh_managed_work, neigh_periodic_work, neigh_periodic_work, gc_worker, reg_check_chans_work, check_lifetime [ 715.860746][ C0] workqueue rcu_gp: flags=0x8 [ 715.890312][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 715.890364][ C0] pending: process_srcu [ 715.890402][ C0] workqueue mm_percpu_wq: flags=0x8 [ 715.907788][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 715.907834][ C0] pending: vmstat_update [ 715.907872][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 715.907912][ C0] pending: vmstat_update [ 715.907952][ C0] workqueue writeback: flags=0x4a [ 715.937474][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 715.937517][ C0] pending: wb_workfn [ 715.937546][ C0] workqueue kblockd: flags=0x18 [ 715.953882][ C0] pwq 3: cpus=1 node=0 flags=0x0 nice=-20 active=1/256 refcnt=2 [ 715.953931][ C0] pending: blk_mq_timeout_work [ 715.953973][ C0] workqueue dm_bufio_cache: flags=0x8 [ 715.972290][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 715.972340][ C0] pending: work_fn [ 715.972385][ C0] workqueue ipv6_addrconf: flags=0x40008 [ 715.989753][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/1 refcnt=4 [ 715.989805][ C0] pending: addrconf_verify_work [ 715.989838][ C0] inactive: addrconf_verify_work, addrconf_verify_work [ 715.989882][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/1 refcnt=4 [ 715.989922][ C0] pending: addrconf_verify_work [ 715.989950][ C0] inactive: addrconf_verify_work, addrconf_verify_work [ 715.989995][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 716.035134][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=2/256 refcnt=3 [ 716.035188][ C0] pending: wg_packet_encrypt_worker, wg_packet_tx_worker [ 716.035256][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 716.055596][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 716.055649][ C0] pending: wg_packet_encrypt_worker [ 716.055686][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 716.055728][ C0] pending: wg_packet_encrypt_worker [ 716.055762][ C0] workqueue wg-kex-wg0: flags=0x6 [ 716.087179][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 716.087224][ C0] pending: wg_packet_handshake_send_worker [ 716.087256][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 716.105954][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=2/256 refcnt=3 [ 716.106000][ C0] pending: wg_packet_encrypt_worker, wg_packet_tx_worker [ 716.106057][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 716.126381][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 716.126431][ C0] pending: wg_packet_encrypt_worker [ 716.126468][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 716.126510][ C0] pending: wg_packet_encrypt_worker [ 716.126543][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 716.158325][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=2/256 refcnt=3 [ 716.158374][ C0] pending: wg_packet_decrypt_worker, wg_packet_encrypt_worker [ 716.158432][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 716.158472][ C0] pending: wg_packet_encrypt_worker [ 716.158505][ C0] workqueue wg-kex-wg0: flags=0x6 [ 716.192197][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 716.192240][ C0] pending: wg_packet_handshake_send_worker [ 716.192271][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 716.210923][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=2/256 refcnt=3 [ 716.210969][ C0] pending: wg_packet_encrypt_worker, wg_packet_tx_worker [ 716.211026][ C0] workqueue wg-kex-wg1: flags=0x6 [ 716.231084][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 716.231125][ C0] pending: wg_packet_handshake_send_worker [ 716.231155][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 716.249826][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 716.249876][ C0] pending: wg_packet_encrypt_worker [ 716.249913][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 716.268491][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=2/256 refcnt=3 [ 716.268538][ C0] pending: wg_packet_decrypt_worker, wg_packet_encrypt_worker [ 716.268591][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 716.268633][ C0] pending: wg_packet_encrypt_worker [ 716.268666][ C0] workqueue wg-kex-wg2: flags=0x6 [ 716.302351][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 716.302394][ C0] pending: wg_packet_handshake_send_worker [ 716.302427][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 716.321092][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 716.321152][ C0] pending: wg_packet_encrypt_worker [ 716.321192][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 716.339741][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=2/256 refcnt=3 [ 716.339793][ C0] pending: wg_packet_encrypt_worker, wg_packet_tx_worker [ 716.339860][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 716.339902][ C0] pending: wg_packet_encrypt_worker [ 716.339935][ C0] workqueue wg-kex-wg1: flags=0x6 [ 716.373204][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 716.373250][ C0] pending: wg_packet_handshake_send_worker [ 716.373283][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 716.391951][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 716.392000][ C0] pending: wg_packet_encrypt_worker [ 716.392040][ C0] workqueue wg-kex-wg2: flags=0x6 [ 716.410260][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 716.410302][ C0] pending: wg_packet_handshake_send_worker [ 716.410333][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 716.429001][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 716.429052][ C0] pending: wg_packet_encrypt_worker [ 716.429093][ C0] workqueue wg-kex-wg0: flags=0x6 [ 716.447326][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 716.447369][ C0] pending: wg_packet_handshake_send_worker [ 716.447400][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 716.466090][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=2/256 refcnt=3 [ 716.466136][ C0] pending: wg_packet_encrypt_worker, wg_packet_tx_worker [ 716.466190][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 716.466230][ C0] pending: wg_packet_encrypt_worker [ 716.466265][ C0] workqueue wg-kex-wg1: flags=0x6 [ 716.499580][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 716.499628][ C0] pending: wg_packet_handshake_send_worker [ 716.499665][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 716.518384][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 716.518440][ C0] pending: wg_packet_decrypt_worker [ 716.518486][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 716.518533][ C0] pending: wg_packet_encrypt_worker [ 716.518569][ C0] workqueue wg-kex-wg2: flags=0x6 [ 716.550022][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 716.550070][ C0] pending: wg_packet_handshake_send_worker [ 716.550107][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 716.568866][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 716.568919][ C0] pending: wg_packet_encrypt_worker [ 716.568961][ C0] pool 2: cpus=1 node=0 flags=0x0 nice=0 hung=249s workers=8 idle: 419 3978 970 335 315 3759 2217