last executing test programs: 21m38.038156256s ago: executing program 4 (id=6295): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) close(0xffffffffffffffff) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0}, 0x18) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000e00851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000480000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 21m37.173695015s ago: executing program 4 (id=6300): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) (async, rerun: 64) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) (rerun: 64) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) (async) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000001c0)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000580)=[@acquire, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000006c0)={@ptr={0x70742a85, 0x0, 0x0}, @flat=@weak_handle={0x77682a85, 0x0, 0x1}, @flat=@handle}, &(0x7f00000002c0)={0x0, 0x28, 0x40}}}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000640)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (async) r4 = dup(0xffffffffffffffff) (async) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000008c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000400)={{0x1, 0x0, 0x0, 0x3, 0x2}}) (async) ioctl$SNDRV_TIMER_IOCTL_START(r5, 0x54a0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='mm_page_alloc\x00', r6}, 0x10) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) (async, rerun: 32) ioctl$KVM_RUN(r9, 0xae80, 0x0) (async, rerun: 32) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f0000000540)={0x2, 0x3}) 21m37.044565647s ago: executing program 4 (id=6301): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000ac0)='./bus\x00', 0x1, &(0x7f0000020000)=ANY=[@ANYRESHEX, @ANYRES64], 0x1, 0x5511, &(0x7f0000015b80)="$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") syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3a10f46, &(0x7f0000000640)={[{@errors_continue}, {@noinit_itable}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@data_err_abort}, {@mblk_io_submit}, {@acl}, {@resuid}, {@i_version}, {@noauto_da_alloc}, {@nombcache}]}, 0xff, 0x451, &(0x7f00000021c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40}, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/locks\x00', 0x0, 0x0) sendmsg$can_bcm(r0, &(0x7f00000004c0)={&(0x7f0000000280), 0x10, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="060000000800000001000000", @ANYRES64=0x0, @ANYRES64=0xea60, @ANYRES64=0x0, @ANYBLOB="0300002001000000000000a0060300005f3414a79b68d521c98a079110ccd4730f38051eb111c1f4acb39dc800aa0cf503ee"], 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x811) syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x60000, 0x0, 0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000680000/0x4000)=nil, 0x4000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0600000004000000ff0f00000700000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRESOCT=r1], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000a40)='./file0\x00', 0x0, &(0x7f0000000b00)={[{@grpid}, {@grpquota}], [{@permit_directio}, {@subj_role={'subj_role', 0x3d, 'i_version'}}, {@pcr={'pcr', 0x3d, 0x34}}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0x8004587d, &(0x7f0000000080)) ptrace(0x4207, r2) mremap(&(0x7f00009e3000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f000071b000/0x1000)=nil) quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000180)) tkill(0x0, 0x0) syz_clone(0x8020000, &(0x7f0000000b80)="d83d4d69cf57073d3a647c2073af3372c39480f1c517092e58da7ad78c94e43b1d8118d3876a97bc5e755f8b8d611980f4f4f2c2002448635819536539acded4d010a40b5962b5171f746cbb16a549e64350c406c1f693de25db921b1f31066a4a960192a6cf1511c540579f4f1bff3d38adbcdce914f9efcd0e", 0x7a, &(0x7f00000003c0), &(0x7f0000000a80), &(0x7f0000000c40)="91dfc13dc3173d3f1c482bd5b0f191c1ee89f69b27f4874828be1ff5ac2fe544de1268b6b169f5495e659122f62fb3715a0dfb96fe0c76a99f1c61ade65eeebbd5206ef876f3b65c2848473b96000baf239cda814fc1ec8c8329bbeacb4d6e709032cdb5e109b5976e44c88f06b2470241f3cb0caabd146ad884830b50336ea6b99dff40a5de5a1fb9e7cd3c22a2231071a98cc949bbe5b67d6060b09fe7a71626168818dc55fe04281f2db82836fe7143e10300ea360e7346adf43090d258203461cba11f5186808dca9cb318c6dfe802220531d7a8763116c56594c1aeb8c3daaefccd") 21m36.219116373s ago: executing program 4 (id=6305): openat$tun(0xffffff9c, 0x0, 0x10401, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000400000000000000000000850000005000000085000000d000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) openat$cgroup_root(0xffffff9c, &(0x7f0000000300)='./cgroup/syz1\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x101800, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001439) 21m36.043192709s ago: executing program 4 (id=6307): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES64=0x0, @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000400000000000000000000850000005000000085000000d000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) openat$cgroup_root(0xffffff9c, &(0x7f0000000300)='./cgroup/syz1\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000240)='sched_switch\x00', r3}, 0x10) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x101800, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x20001439) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f00000000c0)=0x2050a0c) close(r4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00', r2}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x6) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'rose0\x00', 0x2}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000040)={'wlan1\x00', 0x400}) 21m35.864898375s ago: executing program 4 (id=6308): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r0, 0x0, 0x275a, 0x0) mkdirat$cgroup(r0, &(0x7f00000000c0)='syz1\x00', 0x1ff) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) write$cgroup_pid(r2, &(0x7f00000001c0), 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000200)=0x1, 0x12) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000500000008040000cd00000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000ecc000"/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x20, 0x0) 17.96334052s ago: executing program 0 (id=10016): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000000000008000000f7e7aa3", @ANYRES32, @ANYBLOB='\x00'/14, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x10, 0x803, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x800084}, 0xfffffffffffffea9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x20001400) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000200018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0600000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000140)='mm_page_alloc\x00', r8}, 0x10) ioctl$TUNSETOFFLOAD(r6, 0x40047451, 0x2000000c) 17.056248444s ago: executing program 0 (id=10018): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) open(&(0x7f0000000180)='./bus\x00', 0x14967e, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000040)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) pipe(&(0x7f0000000000)) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0) write$tcp_mem(r5, &(0x7f0000000280)={0x11, 0x2d, 0x0, 0x3a, 0xfffffffffffffffe, 0x2c}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES16=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) r7 = syz_open_dev$usbmon(&(0x7f0000000000), 0x4e, 0x52100) ioctl$MON_IOCT_RING_SIZE(r7, 0x9204, 0x9241f) syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000080)=ANY=[@ANYBLOB="12aa0a0002000010d17f68c5f1fb812505a1a44000ee05f5a2cedf04a8010100004ba8b1200016020200e4042406000005240000000d240f010000000000000000000905810340000000000905820200000000000905"], 0x0) 13.997036115s ago: executing program 0 (id=10019): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYRES32], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000011c0)={&(0x7f0000000140)='kfree\x00', r1}, 0x10) ioctl$AUTOFS_IOC_PROTOVER(0xffffffffffffffff, 0x80049363, &(0x7f00000000c0)) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, 0x0, 0x4004000) r2 = eventfd(0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) read$eventfd(r2, 0x0, 0x0) ptrace(0x10, 0x1) syz_usb_connect(0x1, 0x24, &(0x7f0000003cc0)=ANY=[@ANYBLOB="121500003d55"], 0x0) 8.924449351s ago: executing program 1 (id=10027): socket$nl_audit(0x10, 0x3, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) syz_open_dev$tty20(0xc, 0x4, 0x0) connect$unix(r1, &(0x7f0000000800)=@abs={0x0, 0x0, 0x4e24}, 0x6e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') sendfile(0xffffffffffffffff, r4, 0x0, 0x100800001) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000880)=@bpf_lsm={0x9, 0x6, &(0x7f0000000700)=ANY=[@ANYBLOB="18040000000000000000000000000000180000000000000000000000000000009c040000000000009500000000000000e3b27e0902ecf7b254102a0566d216df439f4f0c089f104531786322a34bd14d6983952e364f"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 7.814544712s ago: executing program 1 (id=10029): sched_setscheduler(0x0, 0x2, 0x0) r0 = syz_usb_connect$hid(0x5, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) mkdir(0x0, 0x1c0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70200001400f400b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1a, 0x3, &(0x7f0000000400)=@framed, &(0x7f0000000340)='syzkaller\x00', 0x1, 0xc5, &(0x7f0000000180)=""/197, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r6 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x4, 0x3, 0x90, 0x50, 0x6, @loopback, @rand_addr=' \x01\x00', 0x0, 0x8000, 0x8, 0x2}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x10) 7.754227328s ago: executing program 3 (id=10030): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000004000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000"], 0xfc}}, 0x0) 6.800608906s ago: executing program 3 (id=10032): socket$nl_audit(0x10, 0x3, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) syz_open_dev$tty20(0xc, 0x4, 0x0) connect$unix(r1, &(0x7f0000000800)=@abs={0x0, 0x0, 0x4e24}, 0x6e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') sendfile(0xffffffffffffffff, r4, 0x0, 0x100800001) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000880)=@bpf_lsm={0x9, 0x6, &(0x7f0000000700)=ANY=[@ANYBLOB="18040000000000000000000000000000180000000000000000000000000000009c040000000000009500000000000000e3b27e0902ecf7b254102a0566d216df439f4f0c089f104531786322a34bd14d6983952e364f"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 6.193523551s ago: executing program 2 (id=10031): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) syz_open_dev$tty20(0xc, 0x4, 0x0) connect$unix(r1, &(0x7f0000000800)=@abs={0x0, 0x0, 0x4e24}, 0x6e) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000002e00)={&(0x7f0000000380)={0x50, 0x0, 0xfffffffffffffffe, {0x7, 0x28, 0x2, 0x100003, 0xfff9, 0x7, 0x0, 0x7c3}}, 0x0, &(0x7f0000000280)={0x18, 0x0, 0x10001, {0x8}}, &(0x7f00000001c0)={0x18, 0x0, 0x20000000101}, &(0x7f00000004c0)={0x18, 0x0, 0x4, {0xca}}, &(0x7f0000000180)={0x28, 0x0, 0x7a2, {{0x20000000000001, 0x1, 0x95e67d3e1d13d7ec, r0}}}, 0x0, 0x0, 0x0, &(0x7f00000007c0)={0x20, 0x0, 0x200}, &(0x7f0000000900)={0x78, 0xfffffffffffffffe, 0x8000000000000001, {0xb97a, 0x2464da7d, 0x0, {0x2, 0x0, 0x16, 0x6, 0xa, 0xe470, 0x40009, 0xe93e, 0x1, 0x2000, 0x80, 0x0, 0x0, 0x80000001, 0x5}}}, &(0x7f0000002ac0)={0x90, 0x0, 0x7, {0x4, 0x0, 0x3ff, 0x75a189e9, 0x9, 0x5, {0x4, 0x2, 0xe9e9, 0x80000001, 0x3ff, 0x7, 0x9, 0x3, 0x7f, 0x1000, 0x8d7, 0x0, 0x0, 0x7fffffff, 0x7}}}, 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="b800000000000000ffffffff0000000006000000000000000100000000000000ffffffffffffff7f00000000000000000d000000040000000400000000000000090000000000000024f7ffffffffffff00000000000000000000000000000000001000000000000006000000030000009202000000", @ANYRES16, @ANYBLOB="87f1dbebea6ce4c1eaa78ce2274c7ab95bb248c799348831cf1d8af2f5147d1e644e3b684fe9d1041ff215d5d4804739bd9963064a9875d191a4c74fe2ce1ccc4daeb7fabe4d093213fd10a5d6a1b9564e4e3c4c6a5e8bd78adf61cca05b0883c6461f7dbfee3dc7f89018d7e0a13979c6f0929870e7e8cbea7b76250d22abde838ecca94fd1baada7fa45282f9349a62d5d46abc30ecb61bd87eb50f357d4130008e65124ddfd333acad2d51574bb7242d8c309fe3d47e3a05c108888ceeafbef75641de29f81d165163d1d429af17ab56a1adf82360da98a13e6d32f", @ANYRESDEC=r1], &(0x7f0000002d00)={0xa0, 0x0, 0xa, {{0x4, 0x1, 0x1, 0x8000, 0x5, 0x9, {0x3, 0xa30, 0x5, 0x5147000000000000, 0x54f, 0x3, 0x4, 0x10001, 0xffff, 0xc000, 0x3ce3, 0x0, 0x0, 0x2e018006, 0xc0000000}}, {0x0, 0xd}}}, &(0x7f0000002dc0)={0x20, 0x0, 0x9, {0x80, 0x0, 0x9, 0x9}}}) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') r5 = open(&(0x7f0000000200)='./bus\x00', 0x161b42, 0x108) sendfile(r5, r4, 0x0, 0x100800001) 5.690439038s ago: executing program 3 (id=10033): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x40000, 0x0, 0x0, 0x0, &(0x7f0000000000)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, 0x0, &(0x7f00000002c0)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r4}, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, 0x0, 0x15) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000340), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[], [], 0x6b}}) chdir(&(0x7f0000000080)='./file0\x00') mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 5.299501693s ago: executing program 2 (id=10034): getresuid(&(0x7f00000000c0)=0x0, &(0x7f0000000100), &(0x7f0000000140)) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000180)={[], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfshat}, {@euid_gt={'euid>', r0}}, {@subj_type={'subj_type', 0x3d, '\x00'}}, {@obj_type={'obj_type', 0x3d, '#'}}, {@measure}]}, 0x1, 0x4e2, &(0x7f0000000b80)="$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") bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000002c0)={0x0, 0x0}, 0x8) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140)=r1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1b, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000009500000000000000"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r1, r2, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200)=r1, 0x4) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000009c0)={'sit0\x00', &(0x7f0000000880)={'ip_vti0\x00', 0x0, 0x7800, 0x80, 0x8582, 0x8, {{0x39, 0x4, 0x0, 0x10, 0xe4, 0x64, 0x0, 0xff, 0x29, 0x0, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@noop, @timestamp_addr={0x44, 0x2c, 0x20, 0x1, 0x0, [{@multicast1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@remote, 0x4}, {@empty, 0x3}, {@broadcast, 0x7}]}, @timestamp_addr={0x44, 0x3c, 0x26, 0x1, 0x9, [{@local, 0x2}, {@dev={0xac, 0x14, 0x14, 0x39}, 0xbe}, {@dev={0xac, 0x14, 0x14, 0x44}, 0x9}, {@empty, 0x7a85}, {@rand_addr=0x64010102, 0x401}, {@multicast2, 0x9}, {@multicast1, 0x7}]}, @rr={0x7, 0x7, 0xf8, [@local]}, @noop, @generic={0x82, 0x3, '-'}, @rr={0x7, 0x1b, 0x4f, [@local, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @local]}, @timestamp_prespec={0x44, 0x2c, 0x3b, 0x3, 0x2, [{@dev={0xac, 0x14, 0x14, 0x21}, 0x1f5}, {@dev={0xac, 0x14, 0x14, 0x19}, 0x9}, {@loopback, 0x5}, {@multicast1, 0xfff}, {@rand_addr=0x64010102, 0x4}]}, @rr={0x7, 0x13, 0x99, [@rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, @loopback]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000a40)={'gre0\x00', &(0x7f0000000a00)={'gre0\x00', 0x0, 0x80, 0x80, 0x20, 0x9, {{0x7, 0x4, 0x2, 0x2, 0x1c, 0x66, 0x0, 0x5, 0x4, 0x0, @loopback, @multicast2, {[@generic={0x7, 0x5, "150160"}]}}}}}) r7 = socket(0x10, 0x803, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) getsockname$packet(r9, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@getchain={0x24, 0x66, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r10}}, 0x24}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000b00)={'gretap0\x00', &(0x7f0000000a80)={'ip_vti0\x00', 0x0, 0x8, 0x8, 0x0, 0x4, {{0x16, 0x4, 0x1, 0x0, 0x58, 0x65, 0x0, 0xf, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}, @empty, {[@ra={0x94, 0x4}, @ra={0x94, 0x4, 0x1}, @noop, @timestamp={0x44, 0x14, 0x7d, 0x0, 0x7, [0x1dc, 0x4, 0x4, 0x0]}, @lsrr={0x83, 0xb, 0x94, [@multicast1, @empty]}, @lsrr={0x83, 0x1b, 0xdc, [@local, @dev={0xac, 0x14, 0x14, 0xb}, @multicast1, @local, @local, @loopback]}]}}}}}) sendmsg$ETHTOOL_MSG_WOL_GET(r3, &(0x7f0000001180)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000b40)={&(0x7f0000001080)={0xe8, 0x0, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x44000}, 0x4) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000b04000/0x2000)=nil, 0x2000}}) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @remote}, 0x1c) r12 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r12, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x308800, 0x800}, 0x20) sendmsg$xdp(r12, &(0x7f0000000540)={&(0x7f0000000240)={0x2c, 0x1, 0x0, 0x3d}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000280)="e533f573c581fdeddf9aad42a430d9c8c4ca705cd255656b3b6f01bfb5f9fbd117", 0x21}, {&(0x7f0000000300)='j', 0x1}, {&(0x7f0000000400)="c0e563a1262eca99a0198c48b4b9c5d5092ba49ee3ea0e6e2179fbb333270e6dd1d145002af4450feb8cdb475a4820c9a8c17b376623df7665472e5c5c034e6fe3b9932dd37a4c998fe1fd14db2b5e0a25f29ca4581c8ce265b758e28d5eb86d1b275010ac9b8d1a49f0f074f97d3680ee218f97fb54252a4199a4da165b0ec1d77ad1d6c4579f", 0x87}, {&(0x7f0000000680)="22fe31cefe99af0d45d1cdec1e9cbbd06723fa6c40c8e876c17bf7c1dde9176786ec4a5db61334d1a6ed2fbb1425b7381cd1752b1d6d6964c52e34582b61d3452cf456dc5117dc55b3f3115f6c0b2315de75e47573a4d81b35352d50712e51ad3d8d42c26ef532a6c8e096c5e93ef6da28c11bd2aef0b2fbcb64c37914fbb88de7599fbeaa2c71ee45a282be729b9f2ed5961847f691b22c32965484985efd0808b014186c51f45652df3a2e30bedb3e4837863707634d3a9e5b54251174733724b2a26b6601f7a736fee5365385aa70d3b6c555bd", 0xd5}], 0x4, 0x0, 0x0, 0x10}, 0x24008010) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events.local\x00', 0x275a, 0x0) unshare(0x20000400) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) ftruncate(r13, 0xde34) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x11, r13, 0x0) write$P9_RGETLOCK(r4, &(0x7f0000000280)=ANY=[], 0xe6da) 5.101505761s ago: executing program 2 (id=10035): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000540)={0x0}, 0x1, 0x0, 0x0, 0x48040}, 0x24) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xb, 0x5, 0x5, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r4, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000340), 0x0, &(0x7f0000000080)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002ac0)={0x1a, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="18001f070000000000000000000000009500"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x20c9, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 4.767232343s ago: executing program 1 (id=10036): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_mount_image$ext4(&(0x7f0000000ac0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x3810744, &(0x7f0000000700)={[{@noauto_da_alloc}, {@user_xattr}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10000}}, {@jqfmt_vfsv0}, {@delalloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x400000}}, {@noauto_da_alloc}, {@test_dummy_encryption}]}, 0x1, 0x451, &(0x7f0000000d00)="$eJzs281vVFUbAPDn3pkCL/DSivgBglbR2PjR0oLKwo1GExeamOgCl7UtBBmooTUR0mg1BpeGxL1xaeJf4MqVUVcmbnVvSIg2JqAbx9yZe9vOdKb0Y8pU5vdLBs6Ze+ae8+Tcc+fMOb0B9KzB7J8kYm9E/BIR/fVsY4HB+n83F+Ym/lqYm0iiWn3j96RW7sbC3ERRtPjcnjwzlEaknyR5JY1mLl0+N16pTF3M8yOz598dmbl0+emz58fPTJ2ZujB28uSJ46PPPTv2TEfizNp049AH04cPvvLW1dcmTl19+4evs/bee6R+fHkcnTKYBf5Htab52GOdrqzL/qkuxZmUu90a1qoUEVl39dXGf3+UYqnz+uPlj7vaOGBLZffsne0Pz1eBO1gS3W4B0B3FF332+7d43aapx7Zw/YX6D6As7pv5q36kHGlepm8L6x+MiFPzf3+RvaJpHaLaYt0AAGCzvs3mP0+tnP/V9kaWlUvyvaGBiLgrIvZHxN0RcSAi7snL3hcR96+z/uatoZXzz/TaBkNbk2z+93y+t9U4/ytmfzFQynP/r8Xfl5w+W5k6FhH7ImIo+nZm+dFWJy9O8dLPn7Wrf/n8L3tl9Rdzwfwk18pNC3ST47PjnZqUXv8o4lC5VfzJ4k5A1vcHI+LQ+k69r0icfeKrw+0K3Tr+VXRgn6n6ZcTj9f6fj6b4C8nq+5Mju6IydWykuCpW+vGnK6+3q39T8XdA1v+7G6//phL9fybL92tn1l/HlV8/bfubsrzB639H8mZtz3pH/t7747OzF0cjdiSv1vIN748tfbbIF+Wz+IeOth7/+/PPZPE/EBHZRXwkIh6MiIfyvns4Ih6JiKOrxP/9i4++0+7Yduj/yZb3v8Xrf6Cx/9efKJ377pt29a/t/neilhrK36nd/26hfXN25SU2ejUDAADAf08aEXsjSYcX02k6PFz/e/kDsTutTM/MPnl6+r0Lk/VnBAaiLy1WuvqXrYeOJvP5Gev5sXytuDh+PF83/rz0v1p+eGK6Mtnl2KHX7Wkz/jO/lbrdOmDLeV4Lelfz+E+71A7g9vP9D73L+IfeZfxD72o1/j9sytsLgDuT73/oXcY/9C7jH3qX8Q89aTPP9W9VorzK0/sS2yUR6bZohkSLRLkDo7vLNyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAO+TcAAP//uZjx6g==") sched_setscheduler(0x0, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300002095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0500000001000000400000004000000041000000", @ANYRES32, @ANYBLOB="000000070007000000000000000000000010ed00", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r1}, 0x38) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000b80)={r1, &(0x7f00000014c0), &(0x7f0000000b40)=""/31}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f00000001c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={0x0, r5}, 0x18) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180)=0xffffffffffffffff, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406a051400000000000001090224000100000000090400000a03000000092102000001220500090581030000000000"], 0x0) 4.690116449s ago: executing program 3 (id=10037): bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xffc, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f, 0xfffffffd, 0x100a181}}, 0x50) syz_fuse_handle_req(r4, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r4, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x933b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x105800, 0x0) read$FUSE(r6, &(0x7f00000123c0)={0x2020}, 0x2020) r7 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r7, 0x0) syz_fuse_handle_req(r4, &(0x7f00000103c0)="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", 0x2000, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000645581fea9d0056d1976134876406e07cd89ed", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000010000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r9}, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000240), 0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) 4.24896063s ago: executing program 2 (id=10038): r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) unshare(0x20000400) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb4, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000018c0)=@newlink={0x30, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_VFINFO_LIST={0x8, 0x16, 0x0, 0x1, [{0x4}]}, @IFLA_MTU={0x8}]}, 0x30}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) dup(r3) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x9}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x68000000, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET_DEF(r4, 0x4b72, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)="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"}) r5 = syz_usb_connect$cdc_ecm(0x2, 0x4d, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000020000402505a1a440000000010109023b00010100000009040000060206000005240600000000090582020802000000090503024000"/77], 0x0) syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r5, &(0x7f0000000bc0)={0x14, 0x0, &(0x7f0000000b80)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_read(r5, 0x3, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socket$packet(0x11, 0x0, 0x300) socket(0x10, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='affs\x00', 0x8090, 0x0) 3.783577033s ago: executing program 3 (id=10040): sched_setscheduler(0x0, 0x2, 0x0) r0 = syz_usb_connect$hid(0x5, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) mkdir(0x0, 0x1c0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70200001400f400b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1a, 0x3, &(0x7f0000000400)=@framed, &(0x7f0000000340)='syzkaller\x00', 0x1, 0xc5, &(0x7f0000000180)=""/197, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x4, 0x3, 0x90, 0x50, 0x6, @loopback, @rand_addr=' \x01\x00', 0x0, 0x8000, 0x8, 0x2}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x10) 3.057796249s ago: executing program 0 (id=10039): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1400000042000b06"], 0x14}}, 0x0) recvmmsg(r0, &(0x7f0000009b40)=[{{0x0, 0x0, &(0x7f0000005600)=[{&(0x7f0000004080)=""/243, 0xf3}, {&(0x7f0000004240)=""/4096, 0x1000}, {&(0x7f0000005240)=""/186, 0xba}, {&(0x7f0000000340)=""/205, 0xcd}, {&(0x7f0000005400)=""/188, 0xbc}, {&(0x7f0000005540)=""/133, 0x85}], 0x6}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000080)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000008c0)='sys_enter\x00', r4}, 0x10) getpgid(0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, 0x0, 0x38}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000002c0)={r6}, 0x69) 2.996958095s ago: executing program 0 (id=10041): sched_setscheduler(0x0, 0x2, 0x0) r0 = syz_usb_connect$hid(0x5, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) mkdir(0x0, 0x1c0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70200001400f400b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1a, 0x3, &(0x7f0000000400)=@framed, &(0x7f0000000340)='syzkaller\x00', 0x1, 0xc5, &(0x7f0000000180)=""/197, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r6 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x4, 0x3, 0x90, 0x50, 0x6, @loopback, @rand_addr=' \x01\x00', 0x0, 0x8000, 0x8, 0x2}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x10) 1.73884736s ago: executing program 1 (id=10042): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) syz_open_dev$tty20(0xc, 0x4, 0x0) connect$unix(r1, &(0x7f0000000800)=@abs={0x0, 0x0, 0x4e24}, 0x6e) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000002e00)={&(0x7f0000000380)={0x50, 0x0, 0xfffffffffffffffe, {0x7, 0x28, 0x2, 0x100003, 0xfff9, 0x7, 0x0, 0x7c3}}, 0x0, &(0x7f0000000280)={0x18, 0x0, 0x10001, {0x8}}, &(0x7f00000001c0)={0x18, 0x0, 0x20000000101}, &(0x7f00000004c0)={0x18, 0x0, 0x4, {0xca}}, &(0x7f0000000180)={0x28, 0x0, 0x7a2, {{0x20000000000001, 0x1, 0x95e67d3e1d13d7ec, r0}}}, 0x0, 0x0, 0x0, &(0x7f00000007c0)={0x20, 0x0, 0x200}, &(0x7f0000000900)={0x78, 0xfffffffffffffffe, 0x8000000000000001, {0xb97a, 0x2464da7d, 0x0, {0x2, 0x0, 0x16, 0x6, 0xa, 0xe470, 0x40009, 0xe93e, 0x1, 0x2000, 0x80, 0x0, 0x0, 0x80000001, 0x5}}}, &(0x7f0000002ac0)={0x90, 0x0, 0x7, {0x4, 0x0, 0x3ff, 0x75a189e9, 0x9, 0x5, {0x4, 0x2, 0xe9e9, 0x80000001, 0x3ff, 0x7, 0x9, 0x3, 0x7f, 0x1000, 0x8d7, 0x0, 0x0, 0x7fffffff, 0x7}}}, 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="b800000000000000ffffffff0000000006000000000000000100000000000000ffffffffffffff7f00000000000000000d000000040000000400000000000000090000000000000024f7ffffffffffff00000000000000000000000000000000001000000000000006000000030000009202000000", @ANYRES16, @ANYBLOB="87f1dbebea6ce4c1eaa78ce2274c7ab95bb248c799348831cf1d8af2f5147d1e644e3b684fe9d1041ff215d5d4804739bd9963064a9875d191a4c74fe2ce1ccc4daeb7fabe4d093213fd10a5d6a1b9564e4e3c4c6a5e8bd78adf61cca05b0883c6461f7dbfee3dc7f89018d7e0a13979c6f0929870e7e8cbea7b76250d22abde838ecca94fd1baada7fa45282f9349a62d5d46abc30ecb61bd87eb50f357d4130008e65124ddfd333acad2d51574bb7242d8c309fe3d47e3a05c108888ceeafbef75641de29f81d165163d1d429af17ab56a1adf82360da98a13e6d32f", @ANYRESDEC=r1], &(0x7f0000002d00)={0xa0, 0x0, 0xa, {{0x4, 0x1, 0x1, 0x8000, 0x5, 0x9, {0x3, 0xa30, 0x5, 0x5147000000000000, 0x54f, 0x3, 0x4, 0x10001, 0xffff, 0xc000, 0x3ce3, 0x0, 0x0, 0x2e018006, 0xc0000000}}, {0x0, 0xd}}}, &(0x7f0000002dc0)={0x20, 0x0, 0x9, {0x80, 0x0, 0x9, 0x9}}}) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') r5 = open(&(0x7f0000000200)='./bus\x00', 0x161b42, 0x108) sendfile(r5, r4, 0x0, 0x100800001) 1.258385755s ago: executing program 2 (id=10043): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000200000fffff000000000004001800000000000001000004001800000000000001000000000000000000"], 0xffffffffffffffff, 0x3e, 0xb1, 0x2, 0x0, 0x0, @void, @value}, 0x20) 1.204957739s ago: executing program 2 (id=10044): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x5d, &(0x7f0000001800)=ANY=[@ANYBLOB="1201000093007a402104070051b80102030109024b00010000000009040000000202ff00052406000105240000000d240f010000000005240600000524"], 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x2, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, &(0x7f0000000240)=[0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x2f, &(0x7f0000000300)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000340), &(0x7f00000003c0), 0x8, 0xa2, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async, rerun: 64) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000005c0)={{{@in6=@ipv4={""/10, ""/2, @dev}, @in6=@private1}}, {{@in=@local}, 0x0, @in=@remote}}, &(0x7f00000006c0)=0xe8) (async, rerun: 64) syz_usb_connect(0x0, 0x2d, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000c4178c40ba0d001034e90102030109021b0002000000000904a900000800bf000904000000bdfc8a00e591e701f717ba21a5811332248eb7fb5499a785f712454d2518c6dc0a062b84594440cd207d790f73486a9aa5573e0cc1068e82d600a2121dafbe8ed0399eb87f855535e4305c0ed0e4c46fe1b6d354e1ecf36834eeaf0f3e6b1960acd57bec48d1500162a672c5996e37561400000096160674401810aadf7d9ae782309ce9d0ad29cc3de1c3055b7a8cf3d638b4"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6c000000100003042cbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000003c00128009000100766c616e000000002c00028006000100000000001c0003800c00010000010000800000000c00010000000000ffffff7f0400048008000a00", @ANYRES32=r5, @ANYBLOB="08000500", @ANYRES32=r5], 0x6c}, 0x1, 0xba01}, 0x0) 874.85587ms ago: executing program 1 (id=10045): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) setxattr$security_ima(0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x700, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e00000010000000000000080ff000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 561.718038ms ago: executing program 3 (id=10046): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x40000, 0x0, 0x0, 0x0, &(0x7f0000000000)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, 0x0, &(0x7f00000002c0)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r4}, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, 0x0, 0x15) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000340), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[], [], 0x6b}}) chdir(&(0x7f0000000080)='./file0\x00') mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 1.14091ms ago: executing program 1 (id=10047): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, 0x0, 0x38}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = gettid() futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x17, 0xe98, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getrlimit(0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x64000600) 0s ago: executing program 0 (id=10048): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYRES32], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000011c0)={&(0x7f0000000140)='kfree\x00', r1}, 0x10) ioctl$AUTOFS_IOC_PROTOVER(0xffffffffffffffff, 0x80049363, &(0x7f00000000c0)) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, 0x0, 0x4004000) r2 = eventfd(0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) read$eventfd(r2, 0x0, 0x0) ptrace(0x10, 0x1) syz_usb_connect(0x1, 0x24, &(0x7f0000003cc0)=ANY=[@ANYBLOB="121500003d55"], 0x0) kernel console output (not intermixed with test programs): .444017][ T1895] usb usb1-port1: attempt power cycle [ 3878.463981][T11065] usb 3-1: Using ep0 maxpacket: 8 [ 3878.584021][T11065] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 3878.602058][T11065] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 3878.612146][T11065] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3878.643155][T11065] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3878.652909][T11065] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3878.683960][T11065] usb 3-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 3878.702950][T11065] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3878.713661][T11065] usb 3-1: config 0 descriptor?? [ 3878.853963][ T1895] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 3879.034029][ T1895] usb 1-1: device descriptor read/8, error -71 [ 3879.195287][T11065] hid-steam 0003:28DE:1102.01DC: unknown main item tag 0x0 [ 3879.202608][T11065] hid-steam 0003:28DE:1102.01DC: : USB HID v0.00 Device [HID 28de:1102] on usb-dummy_hcd.2-1/input0 [ 3879.234871][T11065] hid-steam 0003:28DE:1102.01DD: unknown main item tag 0x0 [ 3879.254177][T11065] hid-steam 0003:28DE:1102.01DD: hidraw0: USB HID v0.00 Device [HID 28de:1102] on usb-dummy_hcd.2-1/input0 [ 3879.304400][ T1895] usb 1-1: device descriptor read/8, error -71 [ 3879.343988][T11065] hid-steam 0003:28DE:1102.01DC: Steam Controller 'XXXXXXXXXX' connected [ 3879.363287][T11065] input: Steam Controller as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:28DE:1102.01DC/input/input66 [ 3879.380900][ T28] audit: type=1400 audit(4575.836:2098): avc: denied { read } for pid=88 comm="acpid" name="event3" dev="devtmpfs" ino=8548 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 3879.414352][ T28] audit: type=1400 audit(4575.836:2099): avc: denied { open } for pid=88 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=8548 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 3879.441924][T11065] usb 3-1: USB disconnect, device number 24 [ 3879.452136][T11065] hid-steam 0003:28DE:1102.01DC: Steam Controller 'XXXXXXXXXX' disconnected [ 3879.473148][ T28] audit: type=1400 audit(4575.836:2100): avc: denied { ioctl } for pid=88 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=8548 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 3879.584001][ T1895] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 3879.763994][ T1895] usb 1-1: device descriptor read/8, error -71 [ 3880.034017][ T1895] usb 1-1: device descriptor read/8, error -71 [ 3880.154007][ T1895] usb usb1-port1: unable to enumerate USB device [ 3880.177884][ T9800] loop2: detected capacity change from 0 to 40427 [ 3880.194661][ T9800] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 3880.205146][ T9800] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 3880.254730][ T9800] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 3880.315735][ T9800] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 3880.324763][ T9800] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 3880.457659][ T9805] overlayfs: missing 'lowerdir' [ 3880.788406][ T9303] syz-executor: attempt to access beyond end of device [ 3880.788406][ T9303] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 3880.936984][ T9808] loop2: detected capacity change from 0 to 512 [ 3880.957065][ T9808] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 3881.111882][ T28] audit: type=1400 audit(4577.566:2101): avc: denied { mount } for pid=9807 comm="syz.2.9885" name="/" dev="configfs" ino=6109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 3881.136015][ T9808] loop2: detected capacity change from 0 to 128 [ 3881.148881][ T28] audit: type=1400 audit(4577.596:2102): avc: denied { read } for pid=9807 comm="syz.2.9885" name="/" dev="configfs" ino=6109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 3881.170460][ T28] audit: type=1400 audit(4577.596:2103): avc: denied { open } for pid=9807 comm="syz.2.9885" path="/37/file0" dev="configfs" ino=6109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 3881.267637][ T28] audit: type=1400 audit(4577.726:2104): avc: denied { unmount } for pid=9303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 3881.330624][ T28] audit: type=1400 audit(4577.726:2105): avc: denied { unmount } for pid=9303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 3882.477121][ T9820] bridge0: port 1(bridge_slave_0) entered blocking state [ 3882.490567][ T9820] bridge0: port 1(bridge_slave_0) entered disabled state [ 3882.497892][ T9820] device bridge_slave_0 entered promiscuous mode [ 3882.504790][ T9820] bridge0: port 2(bridge_slave_1) entered blocking state [ 3882.511796][ T9820] bridge0: port 2(bridge_slave_1) entered disabled state [ 3882.519213][ T9820] device bridge_slave_1 entered promiscuous mode [ 3882.676567][ T9820] bridge0: port 2(bridge_slave_1) entered blocking state [ 3882.683445][ T9820] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3882.690560][ T9820] bridge0: port 1(bridge_slave_0) entered blocking state [ 3882.697328][ T9820] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3882.777942][T11203] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3882.794619][T11203] bridge0: port 1(bridge_slave_0) entered disabled state [ 3882.814831][T11203] bridge0: port 2(bridge_slave_1) entered disabled state [ 3882.851454][ T4200] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3882.864144][ T4200] bridge0: port 1(bridge_slave_0) entered blocking state [ 3882.871002][ T4200] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3882.887462][ T4200] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3882.896322][ T4200] bridge0: port 2(bridge_slave_1) entered blocking state [ 3882.903192][ T4200] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3882.910666][ T4200] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3882.918496][ T4200] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3882.937857][T11203] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3882.977428][ T9820] device veth0_vlan entered promiscuous mode [ 3882.996442][T11203] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3883.228572][T11203] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3883.235965][T11203] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3883.243797][T18217] device bridge_slave_1 left promiscuous mode [ 3883.251874][T18217] bridge0: port 2(bridge_slave_1) entered disabled state [ 3883.272279][T18217] device bridge_slave_0 left promiscuous mode [ 3883.284035][T18217] bridge0: port 1(bridge_slave_0) entered disabled state [ 3883.295077][T18217] device veth1_macvtap left promiscuous mode [ 3883.300921][T18217] device veth0_vlan left promiscuous mode [ 3883.473575][ T1895] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 3883.484692][ T1895] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3883.502095][ T9820] device veth1_macvtap entered promiscuous mode [ 3883.521753][ T1895] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 3883.532369][ T1895] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 3883.548773][ T1895] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3883.580375][T11065] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 3883.598623][T11065] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3884.357888][ T9832] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=9832 comm=syz.1.9887 [ 3884.496922][ T9841] loop1: detected capacity change from 0 to 512 [ 3884.529224][ T9841] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 3884.546772][ T28] audit: type=1400 audit(4581.006:2106): avc: denied { read } for pid=9840 comm="syz.1.9893" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 3884.571219][ T9841] fuse: Unknown parameter '‡d`‹äÁ*òw§ý®¬)?Øïج~#FÅm" \ö/J~‰>äÉû:‚¡&wßkRNI·º|<ú€­¡\æ÷̪£ô€öÐaá–á?ŽÎˆþŒ(ŒÁ¨Jâ›w¡Dú £0x0000000000000006' [ 3884.586761][ T28] audit: type=1400 audit(4581.026:2107): avc: denied { open } for pid=9840 comm="syz.1.9893" path="/1/file0/file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 3884.630895][ T9820] EXT4-fs (loop1): unmounting filesystem. [ 3884.637192][ T28] audit: type=1400 audit(4581.026:2108): avc: denied { mounton } for pid=9840 comm="syz.1.9893" path="/1/file0/file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 3884.659823][ T28] audit: type=1400 audit(4581.086:2109): avc: denied { lock } for pid=9840 comm="syz.1.9893" path="/1/file0/file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 3884.725436][ T9847] loop1: detected capacity change from 0 to 128 [ 3884.746149][ T28] audit: type=1400 audit(4581.206:2110): avc: denied { mount } for pid=9846 comm="syz.1.9894" name="/" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 3884.851381][ T28] audit: type=1400 audit(4581.236:2111): avc: denied { create } for pid=9846 comm="syz.1.9894" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 3884.870580][ T28] audit: type=1400 audit(4581.236:2112): avc: denied { connect } for pid=9846 comm="syz.1.9894" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 3885.071842][ T28] audit: type=1400 audit(4581.236:2113): avc: denied { ioctl } for pid=9846 comm="syz.1.9894" path="socket:[226309]" dev="sockfs" ino=226309 ioctlcmd=0x7436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 3885.127502][ T28] audit: type=1400 audit(4581.336:2114): avc: denied { unmount } for pid=9820 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 3885.632623][ T9858] device ip6tnl0 entered promiscuous mode [ 3885.640649][ T9858] bridge0: port 3(vlan2) entered blocking state [ 3885.647232][ T9858] bridge0: port 3(vlan2) entered disabled state [ 3885.695232][ T9857] device ip6tnl0 left promiscuous mode [ 3885.712971][ T28] audit: type=1400 audit(4582.166:2115): avc: denied { read } for pid=9859 comm="syz.2.9898" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 3885.736076][ T9860] binder: 9859:9860 ioctl 4018620d 0 returned -22 [ 3885.747849][ T9860] loop2: detected capacity change from 0 to 1024 [ 3885.758126][ T9860] EXT4-fs: Ignoring removed orlov option [ 3885.763656][ T9860] EXT4-fs: Ignoring removed nomblk_io_submit option [ 3885.775473][ T9860] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 3886.274321][ T9731] EXT4-fs (loop0): unmounting filesystem. [ 3886.665032][ T9303] EXT4-fs (loop2): unmounting filesystem. [ 3886.722485][ T9869] bridge0: port 1(bridge_slave_0) entered blocking state [ 3886.741426][ T9869] bridge0: port 1(bridge_slave_0) entered disabled state [ 3886.749433][ T9869] device bridge_slave_0 entered promiscuous mode [ 3886.762077][ T9869] bridge0: port 2(bridge_slave_1) entered blocking state [ 3886.772081][ T9869] bridge0: port 2(bridge_slave_1) entered disabled state [ 3886.780086][ T9869] device bridge_slave_1 entered promiscuous mode [ 3886.887314][ T9869] bridge0: port 2(bridge_slave_1) entered blocking state [ 3886.894204][ T9869] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3886.901283][ T9869] bridge0: port 1(bridge_slave_0) entered blocking state [ 3886.908093][ T9869] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3886.971261][T11065] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3886.979102][T11065] bridge0: port 1(bridge_slave_0) entered disabled state [ 3886.986498][T11065] bridge0: port 2(bridge_slave_1) entered disabled state [ 3887.005593][T22582] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3887.013670][T22582] bridge0: port 1(bridge_slave_0) entered blocking state [ 3887.020547][T22582] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3887.028022][T22582] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3887.036302][T22582] bridge0: port 2(bridge_slave_1) entered blocking state [ 3887.043159][T22582] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3887.060693][T22582] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3887.069009][T22582] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3887.087094][ T4200] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3887.097874][ T9869] device veth0_vlan entered promiscuous mode [ 3887.104331][ T4200] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3887.116273][ T4200] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3887.123713][ T4200] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3887.133504][T18217] device bridge_slave_1 left promiscuous mode [ 3887.140209][T18217] bridge0: port 2(bridge_slave_1) entered disabled state [ 3887.147931][T18217] device bridge_slave_0 left promiscuous mode [ 3887.154159][T18217] bridge0: port 1(bridge_slave_0) entered disabled state [ 3887.162079][T18217] device veth1_macvtap left promiscuous mode [ 3887.168379][T18217] device veth0_vlan left promiscuous mode [ 3887.267588][T22582] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3887.277034][ T9869] device veth1_macvtap entered promiscuous mode [ 3887.289199][T22582] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3887.307842][T22582] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3887.535076][ T9882] loop0: detected capacity change from 0 to 40427 [ 3887.542480][ T9882] F2FS-fs (loop0): invalid crc value [ 3887.648166][ T9882] F2FS-fs (loop0): Found nat_bits in checkpoint [ 3887.693977][ T9882] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 3887.990801][ T9890] bridge0: port 1(bridge_slave_0) entered blocking state [ 3887.997740][ T9890] bridge0: port 1(bridge_slave_0) entered disabled state [ 3887.997870][ T9882] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=9882 comm=syz.0.9902 [ 3888.014372][ T9890] device bridge_slave_0 entered promiscuous mode [ 3888.026335][ T9890] bridge0: port 2(bridge_slave_1) entered blocking state [ 3888.033253][ T9890] bridge0: port 2(bridge_slave_1) entered disabled state [ 3888.040627][ T9890] device bridge_slave_1 entered promiscuous mode [ 3888.072554][ T9869] syz-executor: attempt to access beyond end of device [ 3888.072554][ T9869] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 3888.182671][ T9890] bridge0: port 2(bridge_slave_1) entered blocking state [ 3888.189561][ T9890] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3888.196666][ T9890] bridge0: port 1(bridge_slave_0) entered blocking state [ 3888.203415][ T9890] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3888.586071][ T4200] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3888.595698][ T4200] bridge0: port 1(bridge_slave_0) entered disabled state [ 3888.602864][ T4200] bridge0: port 2(bridge_slave_1) entered disabled state [ 3888.621169][T11203] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3888.638552][T11203] bridge0: port 1(bridge_slave_0) entered blocking state [ 3888.645444][T11203] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3888.664945][T11203] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3888.673044][T11203] bridge0: port 2(bridge_slave_1) entered blocking state [ 3888.679901][T11203] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3888.707687][T11203] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3888.715585][T11203] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3888.736926][ T4200] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 3888.745460][ T4200] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3888.753659][ T4200] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 3888.761705][ T4200] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3888.775313][ T9890] device veth0_vlan entered promiscuous mode [ 3888.783730][ T4200] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3888.800297][ T4200] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3888.832670][ T9890] device veth1_macvtap entered promiscuous mode [ 3888.841194][T11203] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 3888.850348][T11203] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3888.858672][T11203] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 3888.891735][ T4200] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 3888.903212][ T4200] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3888.919983][ T4200] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 3888.935200][ T4200] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3888.952463][ T6329] device bridge_slave_1 left promiscuous mode [ 3888.958661][ T6329] bridge0: port 2(bridge_slave_1) entered disabled state [ 3888.973343][ T6329] device bridge_slave_0 left promiscuous mode [ 3888.979572][ T6329] bridge0: port 1(bridge_slave_0) entered disabled state [ 3888.995757][ T6329] device veth1_macvtap left promiscuous mode [ 3889.018960][ T6329] device veth0_vlan left promiscuous mode [ 3890.014396][ T6329] device bridge_slave_1 left promiscuous mode [ 3890.020311][ T6329] bridge0: port 2(bridge_slave_1) entered disabled state [ 3890.028009][ T6329] device bridge_slave_0 left promiscuous mode [ 3890.034036][ T6329] bridge0: port 1(bridge_slave_0) entered disabled state [ 3890.041456][ T6329] device veth1_macvtap left promiscuous mode [ 3890.047421][ T6329] device veth0_vlan left promiscuous mode [ 3890.815499][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 3890.815514][ T28] audit: type=1400 audit(4587.276:2122): avc: denied { create } for pid=9911 comm="syz.1.9908" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 3890.848756][ T28] audit: type=1326 audit(4587.306:2123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9911 comm="syz.1.9908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f3db7dff9 code=0x7ffc0000 [ 3890.871895][ T28] audit: type=1326 audit(4587.306:2124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9911 comm="syz.1.9908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f3db7dff9 code=0x7ffc0000 [ 3890.895071][ T28] audit: type=1326 audit(4587.306:2125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9911 comm="syz.1.9908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=292 compat=0 ip=0x7f6f3db7dff9 code=0x7ffc0000 [ 3890.934597][ T9913] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=33 sclass=netlink_tcpdiag_socket pid=9913 comm=syz.1.9908 [ 3890.946250][ T28] audit: type=1326 audit(4587.306:2126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9911 comm="syz.1.9908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f3db7dff9 code=0x7ffc0000 [ 3890.997199][ T28] audit: type=1326 audit(4587.306:2127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9911 comm="syz.1.9908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f3db7dff9 code=0x7ffc0000 [ 3891.051254][ T28] audit: type=1326 audit(4587.306:2128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9911 comm="syz.1.9908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f6f3db7dff9 code=0x7ffc0000 [ 3891.103974][ T28] audit: type=1326 audit(4587.306:2129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9911 comm="syz.1.9908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f3db7dff9 code=0x7ffc0000 [ 3891.129935][ T28] audit: type=1326 audit(4587.306:2130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9911 comm="syz.1.9908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f3db7dff9 code=0x7ffc0000 [ 3891.178810][ T9919] bridge0: port 1(bridge_slave_0) entered blocking state [ 3891.188650][ T9928] binder: 9927:9928 ioctl 4018620d 0 returned -22 [ 3891.203537][ T9919] bridge0: port 1(bridge_slave_0) entered disabled state [ 3891.206642][ T6263] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 3891.217935][ T28] audit: type=1326 audit(4587.306:2131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9911 comm="syz.1.9908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f3db7dff9 code=0x7ffc0000 [ 3891.234376][ T9919] device bridge_slave_0 entered promiscuous mode [ 3891.248860][ T9919] bridge0: port 2(bridge_slave_1) entered blocking state [ 3891.251212][ T9914] loop3: detected capacity change from 0 to 40427 [ 3891.256268][ T9919] bridge0: port 2(bridge_slave_1) entered disabled state [ 3891.266230][ T9914] F2FS-fs (loop3): invalid crc value [ 3891.274893][ T9919] device bridge_slave_1 entered promiscuous mode [ 3891.276057][ T9914] F2FS-fs (loop3): Found nat_bits in checkpoint [ 3891.431080][ T9914] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 3891.569669][ T9919] bridge0: port 2(bridge_slave_1) entered blocking state [ 3891.576658][ T9919] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3891.583717][ T9919] bridge0: port 1(bridge_slave_0) entered blocking state [ 3891.590537][ T9919] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3891.608732][ T1895] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3891.615877][ T6263] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3891.626957][ T6263] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3891.636643][ T1895] bridge0: port 1(bridge_slave_0) entered disabled state [ 3891.643820][ T1895] bridge0: port 2(bridge_slave_1) entered disabled state [ 3891.651593][ T6263] usb 3-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 3891.660652][ T6263] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3891.671163][T22582] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3891.672053][ T6263] usb 3-1: config 0 descriptor?? [ 3891.679284][ T9936] loop3: detected capacity change from 40427 to 0 [ 3891.690211][T22582] bridge0: port 1(bridge_slave_0) entered blocking state [ 3891.697078][T22582] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3891.715211][T11203] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3891.723217][T11203] bridge0: port 2(bridge_slave_1) entered blocking state [ 3891.730087][T11203] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3891.737583][T11203] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3891.745472][T11203] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3891.760860][ T4200] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3891.772696][T11203] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 3891.780455][T11203] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3891.788716][ T9919] device veth0_vlan entered promiscuous mode [ 3891.796499][ T4200] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3891.803788][ T4200] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3891.817309][ T9919] device veth1_macvtap entered promiscuous mode [ 3891.827543][T11203] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 3891.836433][ T9938] fuse: Bad value for 'fd' [ 3891.836589][T11203] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3891.849305][T11203] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 3891.873297][ T4200] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 3891.883505][ T4200] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3891.896844][ T4200] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 3891.908769][ T4200] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3892.396855][ T9944] loop2: detected capacity change from 0 to 16 [ 3892.406514][ T9944] erofs: Unknown parameter 'ÿÿÿÿÿÿœôS2òç/¾b*üDObê hÄ*w³Rþ [ 3892.406514][ T9944] ýß±ÌùÀùè™êšçÃZ+ ' [ 3894.264177][ T6263] usbhid 3-1:0.0: can't add hid device: -71 [ 3894.270199][ T6263] usbhid: probe of 3-1:0.0 failed with error -71 [ 3894.288906][ T6263] usb 3-1: USB disconnect, device number 25 [ 3894.373963][ T4200] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 3894.432293][ T9964] loop2: detected capacity change from 0 to 40427 [ 3894.443450][ T9964] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [ 3894.450699][ T9964] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 3894.463225][ T9964] F2FS-fs (loop2): invalid crc value [ 3894.469462][ T9964] F2FS-fs (loop2): Found nat_bits in checkpoint [ 3894.504546][ T9964] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 3894.511448][ T9964] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 3894.525542][ T9964] syz.2.9919: attempt to access beyond end of device [ 3894.525542][ T9964] loop2: rw=2049, sector=53248, nr_sectors = 8 limit=40427 [ 3894.539369][ T9964] syz.2.9919: attempt to access beyond end of device [ 3894.539369][ T9964] loop2: rw=2049, sector=53272, nr_sectors = 8 limit=40427 [ 3894.553493][ T9964] syz.2.9919: attempt to access beyond end of device [ 3894.553493][ T9964] loop2: rw=2049, sector=53312, nr_sectors = 16 limit=40427 [ 3894.567710][ T9964] syz.2.9919: attempt to access beyond end of device [ 3894.567710][ T9964] loop2: rw=2049, sector=53336, nr_sectors = 16 limit=40427 [ 3894.582036][ T9964] syz.2.9919: attempt to access beyond end of device [ 3894.582036][ T9964] loop2: rw=2049, sector=53368, nr_sectors = 16 limit=40427 [ 3894.598259][ T9964] syz.2.9919: attempt to access beyond end of device [ 3894.598259][ T9964] loop2: rw=2049, sector=53416, nr_sectors = 32 limit=40427 [ 3894.612274][ T9964] syz.2.9919: attempt to access beyond end of device [ 3894.612274][ T9964] loop2: rw=2049, sector=53464, nr_sectors = 16 limit=40427 [ 3894.626267][ T9964] syz.2.9919: attempt to access beyond end of device [ 3894.626267][ T9964] loop2: rw=2049, sector=53488, nr_sectors = 8 limit=40427 [ 3894.640219][ T9964] syz.2.9919: attempt to access beyond end of device [ 3894.640219][ T9964] loop2: rw=2049, sector=53520, nr_sectors = 16 limit=40427 [ 3894.658663][ T9303] syz-executor: attempt to access beyond end of device [ 3894.658663][ T9303] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 3894.744149][ T4200] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3894.758180][ T4200] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 3894.774106][ T9973] loop2: detected capacity change from 0 to 512 [ 3894.780640][ T4200] usb 2-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.10 [ 3894.790229][ T4200] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3894.799141][ T4200] usb 2-1: config 0 descriptor?? [ 3894.806295][ T9973] EXT4-fs error (device loop2): ext4_do_update_inode:5212: inode #3: comm syz.2.9920: corrupted inode contents [ 3894.818182][ T9973] EXT4-fs error (device loop2): ext4_dirty_inode:6074: inode #3: comm syz.2.9920: mark_inode_dirty error [ 3894.829944][ T9973] EXT4-fs error (device loop2): ext4_do_update_inode:5212: inode #3: comm syz.2.9920: corrupted inode contents [ 3894.841816][ T9973] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #3: comm syz.2.9920: mark_inode_dirty error [ 3894.854251][ T9973] EXT4-fs error (device loop2): ext4_acquire_dquot:6764: comm syz.2.9920: Failed to acquire dquot type 0 [ 3894.865772][ T9973] EXT4-fs error (device loop2): ext4_do_update_inode:5212: inode #16: comm syz.2.9920: corrupted inode contents [ 3894.877776][ T9973] EXT4-fs error (device loop2): ext4_dirty_inode:6074: inode #16: comm syz.2.9920: mark_inode_dirty error [ 3894.889232][ T9973] EXT4-fs error (device loop2): ext4_do_update_inode:5212: inode #16: comm syz.2.9920: corrupted inode contents [ 3894.901161][ T9973] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #16: comm syz.2.9920: mark_inode_dirty error [ 3894.912506][ T9973] EXT4-fs error (device loop2): ext4_do_update_inode:5212: inode #16: comm syz.2.9920: corrupted inode contents [ 3894.924631][ T9973] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 3894.933119][ T9973] EXT4-fs error (device loop2): ext4_do_update_inode:5212: inode #16: comm syz.2.9920: corrupted inode contents [ 3894.945096][ T9973] EXT4-fs error (device loop2): ext4_truncate:4302: inode #16: comm syz.2.9920: mark_inode_dirty error [ 3894.956251][ T9973] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 3894.965429][ T9973] EXT4-fs (loop2): 1 truncate cleaned up [ 3894.970929][ T9973] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 3895.473955][ T6] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 3895.713941][ T6] usb 3-1: Using ep0 maxpacket: 8 [ 3895.836952][ T6] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3895.847574][ T6] usb 3-1: config 0 interface 0 has no altsetting 0 [ 3895.944063][ T6] usb 3-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 3895.953330][ T6] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 3895.961528][ T6] usb 3-1: SerialNumber: syz [ 3895.969663][ T6] usb 3-1: config 0 descriptor?? [ 3896.107764][ T9985] loop0: detected capacity change from 0 to 40427 [ 3896.117670][ T9985] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 3896.130191][ T9985] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 3896.140447][ T9985] F2FS-fs (loop0): Found nat_bits in checkpoint [ 3896.178987][ T9985] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 3896.185927][ T9985] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 3896.263719][ T28] kauditd_printk_skb: 51 callbacks suppressed [ 3896.263737][ T28] audit: type=1400 audit(4592.716:2181): avc: denied { map } for pid=9984 comm="syz.0.9922" path="/9/bus/bus/freezer.self_freezing" dev="overlay" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 3896.355719][ T28] audit: type=1400 audit(4592.816:2182): avc: denied { ioctl } for pid=9984 comm="syz.0.9922" path="/9/bus/bus/freezer.self_freezing" dev="overlay" ino=17 ioctlcmd=0x9436 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 3896.393493][ T9869] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 3896.393515][ T9869] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 3896.401204][ T9869] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 3896.408761][ T9869] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 3896.416324][ T9869] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 3896.423681][ T9869] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 3896.431642][ T9869] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 3896.445854][ T28] audit: type=1400 audit(4592.896:2183): avc: denied { remove_name } for pid=9869 comm="syz-executor" name="file0" dev="loop0" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 3896.631021][ T9994] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 3896.640886][ T9994] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 3896.655916][ T9994] EXT4-fs error (device loop2): ext4_acquire_dquot:6764: comm syz.2.9920: Failed to acquire dquot type 1 [ 3896.674007][ T28] audit: type=1400 audit(4592.896:2184): avc: denied { rmdir } for pid=9869 comm="syz-executor" name="file0" dev="loop0" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 3896.674090][ T9993] EXT4-fs error (device loop2): ext4_find_dest_de:2112: inode #12: block 13: comm syz.2.9920: bad entry in directory: inode out of bounds - offset=24, inode=33554445, rec_len=16, size=4096 fake=0 [ 3896.695553][ T28] audit: type=1400 audit(4593.066:2185): avc: denied { write } for pid=9972 comm="syz.2.9920" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 3896.740771][ T9993] incfs: Can't find or create .index dir in ./file0 [ 3896.747301][ T9993] incfs: mount failed -117 [ 3897.067002][ T9997] loop0: detected capacity change from 0 to 40427 [ 3897.078224][ T9997] F2FS-fs (loop0): invalid crc value [ 3897.087602][ T9997] F2FS-fs (loop0): Found nat_bits in checkpoint [ 3897.122652][T22582] usb 2-1: USB disconnect, device number 40 [ 3897.210209][ T9997] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 3897.583997][ T9997] loop0: detected capacity change from 40427 to 0 [ 3897.800333][T11065] usb 3-1: USB disconnect, device number 26 [ 3897.807217][ T9303] EXT4-fs (loop2): unmounting filesystem. [ 3897.814645][T13537] Quota error (device loop2): do_check_range: Getting block 3925999616 out of range 1-5 [ 3897.836492][T13537] EXT4-fs error (device loop2): ext4_release_dquot:6787: comm kworker/u4:0: Failed to release dquot type 0 [ 3897.855083][T13537] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 3897.873930][T13537] EXT4-fs error (device loop2): ext4_release_dquot:6787: comm kworker/u4:0: Failed to release dquot type 1 [ 3898.017789][T10011] loop1: detected capacity change from 0 to 512 [ 3898.074732][T10011] EXT4-fs error (device loop1): ext4_do_update_inode:5212: inode #3: comm syz.1.9927: corrupted inode contents [ 3898.086840][T10011] EXT4-fs error (device loop1): ext4_dirty_inode:6074: inode #3: comm syz.1.9927: mark_inode_dirty error [ 3898.099332][ T28] audit: type=1400 audit(4594.556:2186): avc: denied { read } for pid=10008 comm="syz.2.9926" name="usbmon1" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 3898.140267][T10011] EXT4-fs error (device loop1): ext4_do_update_inode:5212: inode #3: comm syz.1.9927: corrupted inode contents [ 3898.162210][T10011] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #3: comm syz.1.9927: mark_inode_dirty error [ 3898.204351][T10011] EXT4-fs error (device loop1): ext4_acquire_dquot:6764: comm syz.1.9927: Failed to acquire dquot type 0 [ 3898.233172][T10011] EXT4-fs error (device loop1): ext4_do_update_inode:5212: inode #16: comm syz.1.9927: corrupted inode contents [ 3898.263402][T10011] EXT4-fs error (device loop1): ext4_dirty_inode:6074: inode #16: comm syz.1.9927: mark_inode_dirty error [ 3898.304134][T10011] EXT4-fs error (device loop1): ext4_do_update_inode:5212: inode #16: comm syz.1.9927: corrupted inode contents [ 3898.334103][T10011] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #16: comm syz.1.9927: mark_inode_dirty error [ 3898.364135][T10011] EXT4-fs error (device loop1): ext4_do_update_inode:5212: inode #16: comm syz.1.9927: corrupted inode contents [ 3898.394283][T10011] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 3898.413938][T10011] EXT4-fs error (device loop1): ext4_do_update_inode:5212: inode #16: comm syz.1.9927: corrupted inode contents [ 3898.434148][T10011] EXT4-fs error (device loop1): ext4_truncate:4302: inode #16: comm syz.1.9927: mark_inode_dirty error [ 3898.464164][T10011] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 3898.484212][T10011] EXT4-fs (loop1): 1 truncate cleaned up [ 3898.489676][T10011] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 3898.612355][T10018] loop2: detected capacity change from 0 to 40427 [ 3898.633639][T10018] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 3898.641502][T10018] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 3898.661140][T10018] F2FS-fs (loop2): invalid crc value [ 3898.703913][T10018] F2FS-fs (loop2): Found nat_bits in checkpoint [ 3898.793938][T11065] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 3898.801601][T10018] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 3898.810959][T10018] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 3899.040852][T11065] usb 2-1: Using ep0 maxpacket: 8 [ 3899.164124][T11065] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3899.237615][T11065] usb 2-1: config 0 interface 0 has no altsetting 0 [ 3899.346028][T11065] usb 2-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 3899.364036][T11065] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 3899.382200][T11065] usb 2-1: SerialNumber: syz [ 3899.405268][T11065] usb 2-1: config 0 descriptor?? [ 3899.858245][T10033] EXT4-fs error (device loop1): ext4_find_dest_de:2112: inode #12: block 13: comm syz.1.9927: bad entry in directory: inode out of bounds - offset=24, inode=33554445, rec_len=16, size=4096 fake=0 [ 3899.877897][T10033] incfs: Can't find or create .index dir in ./file0 [ 3899.884400][T10033] incfs: mount failed -117 [ 3899.936168][T22582] usb 2-1: USB disconnect, device number 41 [ 3899.937497][ T9820] EXT4-fs (loop1): unmounting filesystem. [ 3899.954116][T13537] EXT4-fs error (device loop1): ext4_release_dquot:6787: comm kworker/u4:0: Failed to release dquot type 0 [ 3899.976594][T13537] EXT4-fs error (device loop1): ext4_release_dquot:6787: comm kworker/u4:0: Failed to release dquot type 1 [ 3900.191946][T10038] FAULT_INJECTION: forcing a failure. [ 3900.191946][T10038] name failslab, interval 1, probability 0, space 0, times 0 [ 3900.204470][T10038] CPU: 1 PID: 10038 Comm: syz.1.9930 Not tainted 6.1.99-syzkaller-00108-gd4dab27b9d1c #0 [ 3900.214009][T10038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 3900.223905][T10038] Call Trace: [ 3900.227027][T10038] [ 3900.229802][T10038] dump_stack_lvl+0x151/0x1b7 [ 3900.234320][T10038] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 3900.239612][T10038] dump_stack+0x15/0x1c [ 3900.243601][T10038] should_fail_ex+0x3d0/0x520 [ 3900.248119][T10038] ? dst_alloc+0x164/0x1e0 [ 3900.252367][T10038] __should_failslab+0xaf/0xf0 [ 3900.256970][T10038] should_failslab+0x9/0x20 [ 3900.261307][T10038] kmem_cache_alloc+0x3b/0x2c0 [ 3900.265911][T10038] dst_alloc+0x164/0x1e0 [ 3900.269993][T10038] ip_route_output_key_hash_rcu+0x14ad/0x2040 [ 3900.275908][T10038] ip_route_output_flow+0x16b/0x340 [ 3900.280929][T10038] ? ipv4_sk_update_pmtu+0x1e60/0x1e60 [ 3900.286222][T10038] ? security_sk_classify_flow+0x69/0x90 [ 3900.291688][T10038] tcp_v4_connect+0x72e/0x1c20 [ 3900.296294][T10038] ? tcp_twsk_unique+0xa90/0xa90 [ 3900.301067][T10038] ? __kasan_check_write+0x14/0x20 [ 3900.306009][T10038] ? _raw_spin_lock_bh+0xa4/0x1b0 [ 3900.310870][T10038] __inet_stream_connect+0x254/0xe50 [ 3900.315991][T10038] ? __local_bh_enable_ip+0x58/0x80 [ 3900.321022][T10038] ? lock_sock_nested+0x261/0x300 [ 3900.325894][T10038] ? inet_dgram_connect+0x410/0x410 [ 3900.330921][T10038] ? _copy_from_user+0x86/0xc0 [ 3900.335516][T10038] ? _copy_from_user+0x90/0xc0 [ 3900.340121][T10038] inet_stream_connect+0x63/0xa0 [ 3900.344901][T10038] ? __inet_stream_connect+0xe50/0xe50 [ 3900.350185][T10038] __sys_connect+0x2c9/0x300 [ 3900.354613][T10038] ? __sys_connect_file+0x170/0x170 [ 3900.359650][T10038] ? fpregs_restore_userregs+0x130/0x290 [ 3900.365118][T10038] __x64_sys_connect+0x7a/0x90 [ 3900.369715][T10038] x64_sys_call+0x14e/0x9a0 [ 3900.374052][T10038] do_syscall_64+0x3b/0xb0 [ 3900.378306][T10038] ? clear_bhb_loop+0x55/0xb0 [ 3900.382821][T10038] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3900.388547][T10038] RIP: 0033:0x7f6f3db7dff9 [ 3900.392802][T10038] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3900.412245][T10038] RSP: 002b:00007f6f3ea0c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 3900.420491][T10038] RAX: ffffffffffffffda RBX: 00007f6f3dd36130 RCX: 00007f6f3db7dff9 [ 3900.428301][T10038] RDX: 000000000000002a RSI: 0000000020000180 RDI: 0000000000000008 [ 3900.436113][T10038] RBP: 00007f6f3ea0c090 R08: 0000000000000000 R09: 0000000000000000 [ 3900.443924][T10038] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3900.451735][T10038] R13: 0000000000000000 R14: 00007f6f3dd36130 R15: 00007fffe8d90a88 [ 3900.459554][T10038] [ 3900.820464][T10043] loop2: detected capacity change from 0 to 40427 [ 3900.831040][T10043] F2FS-fs (loop2): invalid crc value [ 3900.888029][T10047] loop1: detected capacity change from 0 to 16 [ 3900.894369][T10047] erofs: Unknown parameter '' [ 3900.903492][T10043] F2FS-fs (loop2): Found nat_bits in checkpoint [ 3900.934254][T12949] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 3900.994242][T10043] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 3901.297276][T10050] loop1: detected capacity change from 0 to 40427 [ 3901.314838][T10050] F2FS-fs (loop1): invalid crc value [ 3901.367344][T10050] F2FS-fs (loop1): Found nat_bits in checkpoint [ 3901.474068][T10050] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 3901.504686][ T9303] bio_check_eod: 5 callbacks suppressed [ 3901.504705][ T9303] syz-executor: attempt to access beyond end of device [ 3901.504705][ T9303] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 3901.644444][T10050] loop1: detected capacity change from 40427 to 0 [ 3902.309961][T10065] bridge0: port 1(bridge_slave_0) entered blocking state [ 3902.333282][T10065] bridge0: port 1(bridge_slave_0) entered disabled state [ 3902.355051][T10065] device bridge_slave_0 entered promiscuous mode [ 3902.386140][T10065] bridge0: port 2(bridge_slave_1) entered blocking state [ 3902.407398][T10065] bridge0: port 2(bridge_slave_1) entered disabled state [ 3902.429139][T10065] device bridge_slave_1 entered promiscuous mode [ 3902.617921][T10065] bridge0: port 2(bridge_slave_1) entered blocking state [ 3902.624802][T10065] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3902.631897][T10065] bridge0: port 1(bridge_slave_0) entered blocking state [ 3902.638703][T10065] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3902.703747][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3902.711517][ T6] bridge0: port 1(bridge_slave_0) entered disabled state [ 3902.719986][ T6] bridge0: port 2(bridge_slave_1) entered disabled state [ 3902.744313][T11203] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3902.752299][T11203] bridge0: port 1(bridge_slave_0) entered blocking state [ 3902.759157][T11203] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3902.794050][T11203] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3902.802068][T11203] bridge0: port 2(bridge_slave_1) entered blocking state [ 3902.808927][T11203] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3902.816624][T22582] usb 3-1: new low-speed USB device number 27 using dummy_hcd [ 3902.857004][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3902.874378][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3902.882202][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3902.911935][T10065] device veth0_vlan entered promiscuous mode [ 3902.934378][T11203] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3902.942237][T11203] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3902.949910][T11203] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3902.965593][T18217] device bridge_slave_1 left promiscuous mode [ 3902.974080][T18217] bridge0: port 2(bridge_slave_1) entered disabled state [ 3903.002252][T18217] device bridge_slave_0 left promiscuous mode [ 3903.034976][T18217] bridge0: port 1(bridge_slave_0) entered disabled state [ 3903.044651][T18217] device veth1_macvtap left promiscuous mode [ 3903.050494][T18217] device veth0_vlan left promiscuous mode [ 3903.073939][T22582] usb 3-1: Invalid ep0 maxpacket: 32 [ 3903.224023][T22582] usb 3-1: new low-speed USB device number 28 using dummy_hcd [ 3903.231929][T11203] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3903.245500][T10065] device veth1_macvtap entered promiscuous mode [ 3903.265927][T11065] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 3903.274383][T11065] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3903.312557][T11065] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 3903.330845][T11065] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3903.474214][T22582] usb 3-1: Invalid ep0 maxpacket: 32 [ 3903.479411][T22582] usb usb3-port1: attempt power cycle [ 3903.904076][T22582] usb 3-1: new low-speed USB device number 29 using dummy_hcd [ 3903.994069][T22582] usb 3-1: Invalid ep0 maxpacket: 32 [ 3904.153982][T22582] usb 3-1: new low-speed USB device number 30 using dummy_hcd [ 3904.244011][T22582] usb 3-1: Invalid ep0 maxpacket: 32 [ 3904.250896][T22582] usb usb3-port1: unable to enumerate USB device [ 3904.256751][T10078] syz.3.9939[10078] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3904.257086][T10078] syz.3.9939[10078] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3904.289043][T10078] netlink: 100 bytes leftover after parsing attributes in process `syz.3.9939'. [ 3904.603945][T11065] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 3904.843932][T11065] usb 4-1: Using ep0 maxpacket: 8 [ 3904.963967][T11065] usb 4-1: config 150 has an invalid interface number: 221 but max is 0 [ 3904.982278][T11065] usb 4-1: config 150 has an invalid interface descriptor of length 2, skipping [ 3904.992379][T11065] usb 4-1: config 150 has no interface number 0 [ 3905.012552][T11065] usb 4-1: config 150 interface 221 altsetting 7 has an invalid endpoint with address 0x80, skipping [ 3905.033387][T11065] usb 4-1: config 150 interface 221 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3905.053935][T11065] usb 4-1: config 150 interface 221 has no altsetting 0 [ 3905.224229][T11065] usb 4-1: New USB device found, idVendor=2100, idProduct=9e5f, bcdDevice=86.cb [ 3905.243238][T11065] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3905.253319][T11065] usb 4-1: Product: syz [ 3905.257326][T11065] usb 4-1: Manufacturer: syz [ 3905.261721][T11065] usb 4-1: SerialNumber: syz [ 3905.526605][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 3905.526621][ T28] audit: type=1400 audit(4601.986:2190): avc: denied { ioctl } for pid=10077 comm="syz.3.9939" path="socket:[228385]" dev="sockfs" ino=228385 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 3905.577172][T10082] loop2: detected capacity change from 0 to 512 [ 3905.597348][ T28] audit: type=1400 audit(4601.986:2191): avc: denied { ioctl } for pid=10077 comm="syz.3.9939" path="socket:[228387]" dev="sockfs" ino=228387 ioctlcmd=0x9426 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 3905.648636][T10082] EXT4-fs (loop2): 1 orphan inode deleted [ 3905.654271][T10082] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 3905.680204][ T9303] EXT4-fs (loop2): unmounting filesystem. [ 3905.913088][T10090] FAULT_INJECTION: forcing a failure. [ 3905.913088][T10090] name failslab, interval 1, probability 0, space 0, times 0 [ 3905.948252][T10090] CPU: 0 PID: 10090 Comm: syz.2.9941 Not tainted 6.1.99-syzkaller-00108-gd4dab27b9d1c #0 [ 3905.957893][T10090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 3905.967792][T10090] Call Trace: [ 3905.970911][T10090] [ 3905.973692][T10090] dump_stack_lvl+0x151/0x1b7 [ 3905.978204][T10090] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 3905.983498][T10090] ? kasan_set_track+0x60/0x70 [ 3905.988097][T10090] ? kasan_set_track+0x4b/0x70 [ 3905.992697][T10090] ? kasan_save_alloc_info+0x1f/0x30 [ 3905.997821][T10090] ? slab_post_alloc_hook+0x53/0x2c0 [ 3906.002942][T10090] ? kmem_cache_alloc+0x175/0x2c0 [ 3906.007799][T10090] ? dst_alloc+0x164/0x1e0 [ 3906.012053][T10090] ? ip_route_output_key_hash_rcu+0x14ad/0x2040 [ 3906.018132][T10090] dump_stack+0x15/0x1c [ 3906.022124][T10090] should_fail_ex+0x3d0/0x520 [ 3906.026637][T10090] ? ref_tracker_alloc+0x138/0x450 [ 3906.031581][T10090] __should_failslab+0xaf/0xf0 [ 3906.036182][T10090] should_failslab+0x9/0x20 [ 3906.040523][T10090] __kmem_cache_alloc_node+0x3d/0x250 [ 3906.045730][T10090] ? ref_tracker_alloc+0x138/0x450 [ 3906.050683][T10090] kmalloc_trace+0x2a/0xa0 [ 3906.054936][T10090] ref_tracker_alloc+0x138/0x450 [ 3906.059705][T10090] ? ref_tracker_dir_print+0x160/0x160 [ 3906.065002][T10090] ? slab_post_alloc_hook+0x72/0x2c0 [ 3906.070116][T10090] ? dst_alloc+0x164/0x1e0 [ 3906.074372][T10090] dst_init+0xe1/0x400 [ 3906.078277][T10090] dst_alloc+0x18a/0x1e0 [ 3906.082356][T10090] ip_route_output_key_hash_rcu+0x14ad/0x2040 [ 3906.088263][T10090] ip_route_output_flow+0x16b/0x340 [ 3906.093291][T10090] ? ipv4_sk_update_pmtu+0x1e60/0x1e60 [ 3906.098589][T10090] udp_sendmsg+0x17dd/0x2af0 [ 3906.103017][T10090] ? ip_skb_dst_mtu+0x630/0x630 [ 3906.107701][T10090] ? udp_cmsg_send+0x3a0/0x3a0 [ 3906.112302][T10090] ? selinux_socket_sendmsg+0x243/0x340 [ 3906.117686][T10090] ? kernel_text_address+0xa9/0xe0 [ 3906.122630][T10090] ? inet_send_prepare+0x5e/0x4a0 [ 3906.127491][T10090] inet_sendmsg+0xa1/0xc0 [ 3906.131655][T10090] ? inet_send_prepare+0x4a0/0x4a0 [ 3906.136604][T10090] ____sys_sendmsg+0x5d3/0x9a0 [ 3906.141204][T10090] ? __sys_sendmsg_sock+0x40/0x40 [ 3906.146065][T10090] __sys_sendmmsg+0x3b9/0x6f0 [ 3906.150575][T10090] ? kasan_set_track+0x4b/0x70 [ 3906.155179][T10090] ? __ia32_sys_sendmsg+0x90/0x90 [ 3906.160036][T10090] ? __kasan_check_write+0x14/0x20 [ 3906.164989][T10090] ? __kasan_check_write+0x14/0x20 [ 3906.169929][T10090] ? proc_fail_nth_write+0x20b/0x290 [ 3906.175055][T10090] ? selinux_file_permission+0x2bb/0x560 [ 3906.180521][T10090] ? proc_fail_nth_read+0x210/0x210 [ 3906.185551][T10090] ? fsnotify_perm+0x6a/0x5b0 [ 3906.190068][T10090] ? vfs_write+0x952/0xed0 [ 3906.194320][T10090] ? __kasan_slab_free+0x11/0x20 [ 3906.199097][T10090] ? __kasan_check_write+0x14/0x20 [ 3906.204038][T10090] ? mutex_unlock+0xb2/0x260 [ 3906.208473][T10090] ? __ia32_sys_read+0x90/0x90 [ 3906.213067][T10090] ? debug_smp_processor_id+0x17/0x20 [ 3906.218273][T10090] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 3906.224176][T10090] __x64_sys_sendmmsg+0xa0/0xb0 [ 3906.228863][T10090] x64_sys_call+0x81d/0x9a0 [ 3906.233201][T10090] do_syscall_64+0x3b/0xb0 [ 3906.237454][T10090] ? clear_bhb_loop+0x55/0xb0 [ 3906.241968][T10090] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3906.247697][T10090] RIP: 0033:0x7f402a77dff9 [ 3906.251949][T10090] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3906.271392][T10090] RSP: 002b:00007f402b603038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 3906.279639][T10090] RAX: ffffffffffffffda RBX: 00007f402a936130 RCX: 00007f402a77dff9 [ 3906.287448][T10090] RDX: 000000000800001d RSI: 0000000020007fc0 RDI: 0000000000000007 [ 3906.295259][T10090] RBP: 00007f402b603090 R08: 0000000000000000 R09: 0000000000000000 [ 3906.303072][T10090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3906.310885][T10090] R13: 0000000000000000 R14: 00007f402a936130 R15: 00007ffea3b6acc8 [ 3906.318701][T10090] [ 3907.505280][T11065] ftdi_sio 4-1:150.221: FTDI USB Serial Device converter detected [ 3907.523524][T11065] ftdi_sio ttyUSB0: unknown device type: 0x86cb [ 3907.548911][T11065] usb 4-1: USB disconnect, device number 37 [ 3907.561902][T11065] ftdi_sio 4-1:150.221: device disconnected [ 3907.577706][T10097] sch_tbf: burst 0 is lower than device veth0_to_team mtu (1514) ! [ 3907.595035][ T28] audit: type=1400 audit(4604.056:2192): avc: denied { execute } for pid=10096 comm="syz.3.9943" path="/2/cpuacct.usage_sys" dev="tmpfs" ino=28 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 3907.641668][ T28] audit: type=1400 audit(4604.096:2193): avc: denied { map } for pid=10099 comm="syz.3.9944" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=228431 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 3907.665527][ T28] audit: type=1400 audit(4604.096:2194): avc: denied { read write } for pid=10099 comm="syz.3.9944" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=228431 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 3907.856986][T10109] loop3: detected capacity change from 0 to 512 [ 3907.920251][T10109] EXT4-fs error (device loop3): ext4_do_update_inode:5212: inode #3: comm syz.3.9947: corrupted inode contents [ 3907.946207][T10109] EXT4-fs error (device loop3): ext4_dirty_inode:6074: inode #3: comm syz.3.9947: mark_inode_dirty error [ 3907.974361][T10109] EXT4-fs error (device loop3): ext4_do_update_inode:5212: inode #3: comm syz.3.9947: corrupted inode contents [ 3907.993772][T10109] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #3: comm syz.3.9947: mark_inode_dirty error [ 3908.025003][T10109] Quota error (device loop3): write_blk: dquota write failed [ 3908.032254][T10109] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 3908.050104][T10116] bridge0: port 1(bridge_slave_0) entered disabled state [ 3908.109354][T10109] EXT4-fs error (device loop3): ext4_acquire_dquot:6764: comm syz.3.9947: Failed to acquire dquot type 0 [ 3908.110925][ T28] audit: type=1400 audit(4604.566:2195): avc: denied { bind } for pid=10114 comm="syz.2.9948" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 3908.140891][T10118] loop2: detected capacity change from 0 to 16 [ 3908.149665][T10118] erofs: (device loop2): mounted with root inode @ nid 36. [ 3908.164573][T10118] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 3908.174311][T10118] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -35 in[64, 4032] out[1851] [ 3908.188797][T10118] erofs: (device loop2): z_erofs_read_folio: failed to read, err [-117] [ 3908.231966][T10118] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 3908.241195][T10118] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -35 in[64, 4032] out[1851] [ 3908.255777][T10118] erofs: (device loop2): z_erofs_read_folio: failed to read, err [-117] [ 3908.346300][ T28] audit: type=1400 audit(4604.566:2196): avc: denied { write } for pid=10114 comm="syz.2.9948" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 3908.366409][T10120] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 3908.375653][T10120] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -35 in[64, 4032] out[1851] [ 3908.390352][T10120] erofs: (device loop2): z_erofs_read_folio: failed to read, err [-117] [ 3908.479369][T10109] EXT4-fs error (device loop3): ext4_do_update_inode:5212: inode #16: comm syz.3.9947: corrupted inode contents [ 3908.503294][T10109] EXT4-fs error (device loop3): ext4_dirty_inode:6074: inode #16: comm syz.3.9947: mark_inode_dirty error [ 3908.522501][T10109] EXT4-fs error (device loop3): ext4_do_update_inode:5212: inode #16: comm syz.3.9947: corrupted inode contents [ 3908.534758][T10112] bridge0: port 1(bridge_slave_0) entered blocking state [ 3908.551714][T10112] bridge0: port 1(bridge_slave_0) entered disabled state [ 3908.559453][T10109] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #16: comm syz.3.9947: mark_inode_dirty error [ 3908.570707][T10112] device bridge_slave_0 entered promiscuous mode [ 3908.578874][T10109] EXT4-fs error (device loop3): ext4_do_update_inode:5212: inode #16: comm syz.3.9947: corrupted inode contents [ 3908.590721][T10112] bridge0: port 2(bridge_slave_1) entered blocking state [ 3908.597694][T10112] bridge0: port 2(bridge_slave_1) entered disabled state [ 3908.597692][T10109] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 3908.613134][T10109] EXT4-fs error (device loop3): ext4_do_update_inode:5212: inode #16: comm syz.3.9947: corrupted inode contents [ 3908.613546][T10112] device bridge_slave_1 entered promiscuous mode [ 3908.634582][T10109] EXT4-fs error (device loop3): ext4_truncate:4302: inode #16: comm syz.3.9947: mark_inode_dirty error [ 3908.646182][T10109] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 3908.655275][T10109] EXT4-fs (loop3): 1 truncate cleaned up [ 3908.660745][T10109] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 3908.818589][T10112] bridge0: port 2(bridge_slave_1) entered blocking state [ 3908.825470][T10112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3908.832552][T10112] bridge0: port 1(bridge_slave_0) entered blocking state [ 3908.839364][T10112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3908.928543][T22582] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3908.944860][T22582] bridge0: port 1(bridge_slave_0) entered disabled state [ 3908.961762][T22582] bridge0: port 2(bridge_slave_1) entered disabled state [ 3908.993980][ T6] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 3909.006458][ T7702] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3909.014715][ T7702] bridge0: port 1(bridge_slave_0) entered blocking state [ 3909.021552][ T7702] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3909.044295][ T7702] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3909.052278][ T7702] bridge0: port 2(bridge_slave_1) entered blocking state [ 3909.059129][ T7702] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3909.211376][ T7702] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3909.219294][ T7702] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3909.254567][T11065] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 3909.265748][T11065] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3909.285824][ T6329] device bridge_slave_1 left promiscuous mode [ 3909.292903][ T6329] bridge0: port 2(bridge_slave_1) entered disabled state [ 3909.314333][ T6329] device bridge_slave_0 left promiscuous mode [ 3909.320281][ T6329] bridge0: port 1(bridge_slave_0) entered disabled state [ 3909.333973][ T6] usb 4-1: Using ep0 maxpacket: 8 [ 3909.346290][ T6329] device veth1_macvtap left promiscuous mode [ 3909.358307][ T6329] device veth0_vlan left promiscuous mode [ 3909.464004][ T6] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3909.484030][ T6] usb 4-1: config 0 interface 0 has no altsetting 0 [ 3909.492332][T25676] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 3909.502179][T25676] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3909.519480][T10112] device veth0_vlan entered promiscuous mode [ 3909.527574][T25676] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3909.546434][T25676] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3909.568087][T10112] device veth1_macvtap entered promiscuous mode [ 3909.581540][T11065] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 3909.590183][T11065] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3909.593998][ T6] usb 4-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 3909.598539][T11065] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 3909.617543][ T6] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 3909.631073][T25676] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 3909.641277][T25676] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3909.643922][ T6] usb 4-1: SerialNumber: syz [ 3909.657274][ T6] usb 4-1: config 0 descriptor?? [ 3909.658794][T25676] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 3909.681492][T25676] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3909.836285][ T28] audit: type=1400 audit(4606.296:2197): avc: denied { write } for pid=10128 comm="syz.0.9945" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 3909.996878][T10132] loop2: detected capacity change from 0 to 512 [ 3910.257952][T10137] EXT4-fs error (device loop3): ext4_acquire_dquot:6764: comm syz.3.9947: Failed to acquire dquot type 1 [ 3910.258232][T10136] EXT4-fs error (device loop3): ext4_find_dest_de:2112: inode #12: block 13: comm syz.3.9947: bad entry in directory: inode out of bounds - offset=24, inode=33554445, rec_len=16, size=4096 fake=0 [ 3910.269224][T10132] EXT4-fs (loop2): Test dummy encryption mode enabled [ 3910.298511][T10136] incfs: Can't find or create .index dir in ./file0 [ 3910.305013][T10136] incfs: mount failed -117 [ 3910.815526][T10132] EXT4-fs error (device loop2): __ext4_iget:5046: inode #11: block 1: comm syz.2.9951: invalid block [ 3910.899006][T10132] EXT4-fs error (device loop2): ext4_orphan_get:1401: comm syz.2.9951: couldn't read orphan inode 11 (err -117) [ 3910.924978][T10132] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 3911.111433][T10147] FAULT_INJECTION: forcing a failure. [ 3911.111433][T10147] name failslab, interval 1, probability 0, space 0, times 0 [ 3911.123937][T10147] CPU: 1 PID: 10147 Comm: syz.2.9951 Not tainted 6.1.99-syzkaller-00108-gd4dab27b9d1c #0 [ 3911.133495][T10147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 3911.143387][T10147] Call Trace: [ 3911.146510][T10147] [ 3911.149289][T10147] dump_stack_lvl+0x151/0x1b7 [ 3911.153802][T10147] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 3911.159097][T10147] dump_stack+0x15/0x1c [ 3911.163087][T10147] should_fail_ex+0x3d0/0x520 [ 3911.167602][T10147] ? dst_alloc+0x164/0x1e0 [ 3911.171854][T10147] __should_failslab+0xaf/0xf0 [ 3911.176453][T10147] should_failslab+0x9/0x20 [ 3911.180793][T10147] kmem_cache_alloc+0x3b/0x2c0 [ 3911.185393][T10147] dst_alloc+0x164/0x1e0 [ 3911.189477][T10147] ip_route_output_key_hash_rcu+0x14ad/0x2040 [ 3911.195380][T10147] ip_route_output_flow+0x16b/0x340 [ 3911.200410][T10147] ? ipv4_sk_update_pmtu+0x1e60/0x1e60 [ 3911.205708][T10147] tcp_v4_connect+0x72e/0x1c20 [ 3911.210311][T10147] ? tcp_twsk_unique+0xa90/0xa90 [ 3911.215079][T10147] ? __kasan_check_read+0x11/0x20 [ 3911.219939][T10147] ? preempt_schedule_irq+0xe7/0x140 [ 3911.225061][T10147] __inet_stream_connect+0x254/0xe50 [ 3911.230184][T10147] ? raw_irqentry_exit_cond_resched+0x2a/0x30 [ 3911.236082][T10147] ? irqentry_exit+0x30/0x40 [ 3911.240508][T10147] ? sysvec_reschedule_ipi+0x80/0x160 [ 3911.245711][T10147] ? inet_dgram_connect+0x410/0x410 [ 3911.250754][T10147] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 3911.256219][T10147] inet_stream_connect+0x63/0xa0 [ 3911.260987][T10147] ? __inet_stream_connect+0xe50/0xe50 [ 3911.266284][T10147] __sys_connect+0x2c9/0x300 [ 3911.270709][T10147] ? __sys_connect_file+0x170/0x170 [ 3911.275744][T10147] ? fpregs_restore_userregs+0x130/0x290 [ 3911.281211][T10147] __x64_sys_connect+0x7a/0x90 [ 3911.285816][T10147] x64_sys_call+0x14e/0x9a0 [ 3911.290149][T10147] do_syscall_64+0x3b/0xb0 [ 3911.294402][T10147] ? clear_bhb_loop+0x55/0xb0 [ 3911.298918][T10147] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3911.304644][T10147] RIP: 0033:0x7f402a77dff9 [ 3911.308898][T10147] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3911.328339][T10147] RSP: 002b:00007f402b603038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 3911.336584][T10147] RAX: ffffffffffffffda RBX: 00007f402a936130 RCX: 00007f402a77dff9 [ 3911.344395][T10147] RDX: 000000000000002a RSI: 0000000020000180 RDI: 000000000000000d [ 3911.352207][T10147] RBP: 00007f402b603090 R08: 0000000000000000 R09: 0000000000000000 [ 3911.360019][T10147] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3911.367829][T10147] R13: 0000000000000000 R14: 00007f402a936130 R15: 00007ffea3b6acc8 [ 3911.375646][T10147] [ 3911.441112][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 3911.441128][ T28] audit: type=1400 audit(4607.896:2198): avc: denied { create } for pid=10143 comm="syz.0.9952" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 3911.467154][ T28] audit: type=1400 audit(4607.896:2199): avc: denied { read } for pid=10143 comm="syz.0.9952" name="file0" dev="tmpfs" ino=29 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 3911.488805][ T28] audit: type=1400 audit(4607.896:2200): avc: denied { open } for pid=10143 comm="syz.0.9952" path="/2/file0/file0" dev="tmpfs" ino=29 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 3911.539693][ T9303] EXT4-fs (loop2): unmounting filesystem. [ 3911.941606][T25676] usb 4-1: USB disconnect, device number 38 [ 3911.948619][T10065] EXT4-fs (loop3): unmounting filesystem. [ 3911.958840][ T6887] Quota error (device loop3): do_check_range: Getting block 3925999616 out of range 1-5 [ 3911.974643][ T6887] EXT4-fs error (device loop3): ext4_release_dquot:6787: comm kworker/u4:2: Failed to release dquot type 0 [ 3912.000936][ T6887] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 3912.016797][ T6887] EXT4-fs error (device loop3): ext4_release_dquot:6787: comm kworker/u4:2: Failed to release dquot type 1 [ 3912.049339][ T28] audit: type=1400 audit(4608.506:2201): avc: denied { unlink } for pid=10112 comm="syz-executor" name="file0" dev="tmpfs" ino=29 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 3912.086235][T10158] loop0: detected capacity change from 0 to 1024 [ 3912.123561][T10158] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 3912.338285][T10156] loop3: detected capacity change from 0 to 40427 [ 3912.360669][T10156] F2FS-fs (loop3): invalid crc value [ 3912.367467][T10156] F2FS-fs (loop3): Found nat_bits in checkpoint [ 3912.405881][T10156] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 3912.584232][T10166] loop3: detected capacity change from 40427 to 0 [ 3912.633670][T10170] bridge0: port 1(bridge_slave_0) entered blocking state [ 3912.645819][T10170] bridge0: port 1(bridge_slave_0) entered disabled state [ 3912.660294][T10170] device bridge_slave_0 entered promiscuous mode [ 3912.674214][T10170] bridge0: port 2(bridge_slave_1) entered blocking state [ 3912.690937][T10170] bridge0: port 2(bridge_slave_1) entered disabled state [ 3912.717589][T10170] device bridge_slave_1 entered promiscuous mode [ 3912.794086][T10169] loop2: detected capacity change from 0 to 40427 [ 3912.811660][T10169] F2FS-fs (loop2): invalid crc value [ 3912.836094][T10169] F2FS-fs (loop2): Found nat_bits in checkpoint [ 3912.889292][T10170] bridge0: port 2(bridge_slave_1) entered blocking state [ 3912.896251][T10170] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3912.903365][T10170] bridge0: port 1(bridge_slave_0) entered blocking state [ 3912.910152][T10170] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3912.913949][T10169] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 3912.992875][T10112] EXT4-fs (loop0): unmounting filesystem. [ 3913.034031][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3913.060487][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3913.075391][ T28] audit: type=1400 audit(4609.536:2202): avc: denied { setopt } for pid=10178 comm="syz.0.9958" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 3913.096720][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 3913.114232][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3913.134872][T11065] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3913.142676][T11065] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3913.152383][T10169] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=10169 comm=syz.2.9957 [ 3913.180358][T10170] device veth0_vlan entered promiscuous mode [ 3913.203224][T25676] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3913.215810][T25676] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3913.239806][T25676] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3913.257897][T25676] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3913.270257][ T9303] syz-executor: attempt to access beyond end of device [ 3913.270257][ T9303] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 3913.290750][T10170] device veth1_macvtap entered promiscuous mode [ 3913.325072][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3913.355296][T11203] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3913.363624][T11203] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3913.464878][ T6887] device bridge_slave_1 left promiscuous mode [ 3913.470830][ T6887] bridge0: port 2(bridge_slave_1) entered disabled state [ 3913.484847][ T6887] device bridge_slave_0 left promiscuous mode [ 3913.495248][ T6887] bridge0: port 1(bridge_slave_0) entered disabled state [ 3913.512238][ T6887] device veth1_macvtap left promiscuous mode [ 3913.521418][ T6887] device veth0_vlan left promiscuous mode [ 3914.565594][ T28] audit: type=1400 audit(4611.026:2203): avc: denied { read write } for pid=10199 comm="syz.1.9963" name="uhid" dev="devtmpfs" ino=175 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 3914.596767][ T1804] hid-generic 0000:0000:0000.01DE: unknown main item tag 0x0 [ 3914.611047][ T28] audit: type=1400 audit(4611.046:2204): avc: denied { open } for pid=10199 comm="syz.1.9963" path="/dev/uhid" dev="devtmpfs" ino=175 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 3914.624455][ T1804] hid-generic 0000:0000:0000.01DE: unknown main item tag 0x0 [ 3914.643955][T22582] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 3914.653952][ T1804] hid-generic 0000:0000:0000.01DE: unknown main item tag 0x0 [ 3914.661147][ T1804] hid-generic 0000:0000:0000.01DE: unknown main item tag 0x0 [ 3914.676977][ T1804] hid-generic 0000:0000:0000.01DE: unknown main item tag 0x0 [ 3914.684359][ T1804] hid-generic 0000:0000:0000.01DE: unknown main item tag 0x0 [ 3914.691550][ T1804] hid-generic 0000:0000:0000.01DE: unknown main item tag 0x0 [ 3914.698813][ T1804] hid-generic 0000:0000:0000.01DE: unknown main item tag 0x0 [ 3914.706101][ T1804] hid-generic 0000:0000:0000.01DE: unknown main item tag 0x0 [ 3914.713289][ T1804] hid-generic 0000:0000:0000.01DE: unknown main item tag 0x0 [ 3914.720542][ T1804] hid-generic 0000:0000:0000.01DE: unknown main item tag 0x0 [ 3914.727810][ T1804] hid-generic 0000:0000:0000.01DE: unknown main item tag 0x0 [ 3914.734948][ T1804] hid-generic 0000:0000:0000.01DE: unknown main item tag 0x0 [ 3914.742106][ T1804] hid-generic 0000:0000:0000.01DE: unknown main item tag 0x0 [ 3914.749338][ T1804] hid-generic 0000:0000:0000.01DE: unknown main item tag 0x0 [ 3914.756556][ T1804] hid-generic 0000:0000:0000.01DE: unknown main item tag 0x0 [ 3914.763712][ T1804] hid-generic 0000:0000:0000.01DE: unknown main item tag 0x0 [ 3914.770980][ T1804] hid-generic 0000:0000:0000.01DE: unknown main item tag 0x0 [ 3914.778161][ T1804] hid-generic 0000:0000:0000.01DE: unknown main item tag 0x0 [ 3914.785351][ T1804] hid-generic 0000:0000:0000.01DE: unknown main item tag 0x0 [ 3914.792536][ T1804] hid-generic 0000:0000:0000.01DE: unknown main item tag 0x0 [ 3914.799921][ T1804] hid-generic 0000:0000:0000.01DE: unknown main item tag 0x0 [ 3914.807243][ T1804] hid-generic 0000:0000:0000.01DE: unknown main item tag 0x0 [ 3914.814565][ T1804] hid-generic 0000:0000:0000.01DE: unknown main item tag 0x0 [ 3914.821750][ T1804] hid-generic 0000:0000:0000.01DE: unknown main item tag 0x0 [ 3914.829153][ T1804] hid-generic 0000:0000:0000.01DE: unknown main item tag 0x0 [ 3914.836494][ T1804] hid-generic 0000:0000:0000.01DE: unknown main item tag 0x0 [ 3914.843683][ T1804] hid-generic 0000:0000:0000.01DE: unknown main item tag 0x0 [ 3914.851117][ T1804] hid-generic 0000:0000:0000.01DE: unknown main item tag 0x0 [ 3914.858464][ T1804] hid-generic 0000:0000:0000.01DE: unknown main item tag 0x0 [ 3914.865813][ T1804] hid-generic 0000:0000:0000.01DE: unknown main item tag 0x0 [ 3914.872999][ T1804] hid-generic 0000:0000:0000.01DE: unknown main item tag 0x0 [ 3914.883152][ T1804] hid-generic 0000:0000:0000.01DE: hidraw0: HID v0.00 Device [syz0] on syz0 [ 3915.023972][T11065] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 3915.034055][T22582] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3915.044119][T22582] usb 3-1: New USB device found, idVendor=59cc, idProduct=980d, bcdDevice=b4.8e [ 3915.052962][T22582] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3915.061784][T22582] usb 3-1: config 0 descriptor?? [ 3915.114401][T22582] usb-storage 3-1:0.0: USB Mass Storage device detected [ 3915.293950][T11065] usb 2-1: device descriptor read/64, error -71 [ 3915.314950][T25676] usb 3-1: USB disconnect, device number 31 [ 3915.683952][T11065] usb 2-1: device descriptor read/64, error -71 [ 3915.835897][T10205] loop2: detected capacity change from 0 to 256 [ 3915.847424][T10205] FAT-fs (loop2): Unrecognized mount option "uni_xlate0" or missing value [ 3915.907499][T10205] loop2: detected capacity change from 0 to 512 [ 3915.919744][T10205] EXT4-fs: Ignoring removed orlov option [ 3915.925605][T10205] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 3915.937662][T10205] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=6040e09c, mo2=0002] [ 3915.945451][T10205] System zones: 1-12 [ 3915.949869][T10205] EXT4-fs error (device loop2): ext4_orphan_get:1396: inode #15: comm syz.2.9964: casefold flag without casefold feature [ 3915.953987][T11065] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 3915.970076][T10205] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: inode #12: comm syz.2.9964: missing EA_INODE flag [ 3915.981577][T10205] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.9964: error while reading EA inode 12 err=-117 [ 3915.993831][T10205] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: inode #12: comm syz.2.9964: missing EA_INODE flag [ 3916.005803][T10205] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.9964: error while reading EA inode 12 err=-117 [ 3916.018148][T10205] EXT4-fs (loop2): 1 orphan inode deleted [ 3916.023690][T10205] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 3916.243952][T11065] usb 2-1: device descriptor read/64, error -71 [ 3916.274603][ T28] audit: type=1400 audit(4612.726:2205): avc: denied { block_suspend } for pid=10204 comm="syz.2.9964" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 3916.633950][T11065] usb 2-1: device descriptor read/64, error -71 [ 3916.754001][T11065] usb usb2-port1: attempt power cycle [ 3916.846785][ T9303] EXT4-fs (loop2): unmounting filesystem. [ 3916.871884][T10216] loop2: detected capacity change from 0 to 1024 [ 3916.895372][T10216] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 3916.911771][ T28] audit: type=1400 audit(4613.366:2206): avc: denied { remount } for pid=10215 comm="syz.2.9966" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 3916.932759][ T9303] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 32: comm syz-executor: path /71/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 3916.954491][ T9303] EXT4-fs error (device loop2): ext4_empty_dir:3099: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 3916.956953][ T28] audit: type=1400 audit(4613.416:2207): avc: denied { rmdir } for pid=9303 comm="syz-executor" name="lost+found" dev="loop2" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 3916.984323][ T9303] EXT4-fs warning (device loop2): ext4_empty_dir:3101: inode #11: comm syz-executor: directory missing '.' [ 3917.036931][ T9303] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 32: comm syz-executor: path /71/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 3917.070661][ T9303] EXT4-fs error (device loop2): ext4_empty_dir:3099: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 3917.095109][T10221] loop0: detected capacity change from 0 to 1024 [ 3917.116635][ T9303] EXT4-fs warning (device loop2): ext4_empty_dir:3101: inode #11: comm syz-executor: directory missing '.' [ 3917.128405][ T9303] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 32: comm syz-executor: path /71/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 3917.150644][ T9303] EXT4-fs error (device loop2): ext4_empty_dir:3099: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 3917.169715][T11065] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 3917.178208][T10221] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 3917.199808][ T9303] EXT4-fs warning (device loop2): ext4_empty_dir:3101: inode #11: comm syz-executor: directory missing '.' [ 3917.213618][ T9303] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 32: comm syz-executor: path /71/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 3917.296323][ T9303] EXT4-fs error (device loop2): ext4_empty_dir:3099: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 3917.315896][ T9303] EXT4-fs warning (device loop2): ext4_empty_dir:3101: inode #11: comm syz-executor: directory missing '.' [ 3917.327622][ T9303] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 32: comm syz-executor: path /71/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 3917.349119][ T9303] EXT4-fs error (device loop2): ext4_empty_dir:3099: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 3917.369624][ T9303] EXT4-fs warning (device loop2): ext4_empty_dir:3101: inode #11: comm syz-executor: directory missing '.' [ 3917.381571][ T9303] EXT4-fs warning (device loop2): ext4_empty_dir:3101: inode #11: comm syz-executor: directory missing '.' [ 3917.393660][ T9303] EXT4-fs warning (device loop2): ext4_empty_dir:3101: inode #11: comm syz-executor: directory missing '.' [ 3917.405111][T11065] usb 2-1: device descriptor read/8, error -71 [ 3917.411661][ T9303] EXT4-fs warning (device loop2): ext4_empty_dir:3101: inode #11: comm syz-executor: directory missing '.' [ 3917.423606][ T9303] EXT4-fs warning (device loop2): ext4_empty_dir:3101: inode #11: comm syz-executor: directory missing '.' [ 3917.435538][ T9303] EXT4-fs warning (device loop2): ext4_empty_dir:3101: inode #11: comm syz-executor: directory missing '.' [ 3917.517407][ T9303] EXT4-fs (loop2): unmounting filesystem. [ 3917.613943][T11065] usb 2-1: device descriptor read/8, error -71 [ 3917.683289][T10229] FAULT_INJECTION: forcing a failure. [ 3917.683289][T10229] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3917.696387][T10229] CPU: 0 PID: 10229 Comm: syz.1.9972 Not tainted 6.1.99-syzkaller-00108-gd4dab27b9d1c #0 [ 3917.706004][T10229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 3917.715902][T10229] Call Trace: [ 3917.719019][T10229] [ 3917.721886][T10229] dump_stack_lvl+0x151/0x1b7 [ 3917.726398][T10229] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 3917.731692][T10229] ? restore_sigcontext+0x633/0x700 [ 3917.736728][T10229] dump_stack+0x15/0x1c [ 3917.740718][T10229] should_fail_ex+0x3d0/0x520 [ 3917.745233][T10229] should_fail+0xb/0x10 [ 3917.749222][T10229] should_fail_usercopy+0x1a/0x20 [ 3917.754086][T10229] _copy_from_user+0x1e/0xc0 [ 3917.758513][T10229] restore_altstack+0x95/0x150 [ 3917.763109][T10229] ? __ia32_sys_sigaltstack+0x260/0x260 [ 3917.768495][T10229] __do_sys_rt_sigreturn+0x160/0x1e0 [ 3917.773614][T10229] ? x32_copy_siginfo_to_user+0x270/0x270 [ 3917.779167][T10229] ? debug_smp_processor_id+0x17/0x20 [ 3917.784376][T10229] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 3917.790277][T10229] ? exit_to_user_mode_prepare+0x39/0xa0 [ 3917.795745][T10229] x64_sys_call+0x91/0x9a0 [ 3917.799998][T10229] do_syscall_64+0x3b/0xb0 [ 3917.804249][T10229] ? clear_bhb_loop+0x55/0xb0 [ 3917.808764][T10229] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3917.814491][T10229] RIP: 0033:0x7f720d57dff7 [ 3917.818745][T10229] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 3917.838190][T10229] RSP: 002b:00007f720e351038 EFLAGS: 00000246 [ 3917.844092][T10229] RAX: 0000000000000013 RBX: 00007f720d735f80 RCX: 00007f720d57dff9 [ 3917.851901][T10229] RDX: 0000000000000001 RSI: 0000000020002980 RDI: 0000000000000003 [ 3917.859712][T10229] RBP: 00007f720e351090 R08: 0000000000000000 R09: 0000000000000000 [ 3917.867522][T10229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3917.875335][T10229] R13: 0000000000000000 R14: 00007f720d735f80 R15: 00007ffd9061b3a8 [ 3917.883152][T10229] [ 3917.910561][T10230] bridge0: port 1(bridge_slave_0) entered blocking state [ 3917.927607][T10230] bridge0: port 1(bridge_slave_0) entered disabled state [ 3917.936121][T10112] EXT4-fs (loop0): unmounting filesystem. [ 3917.964793][T10230] device bridge_slave_0 entered promiscuous mode [ 3917.976569][T10230] bridge0: port 2(bridge_slave_1) entered blocking state [ 3917.992679][T10230] bridge0: port 2(bridge_slave_1) entered disabled state [ 3918.010180][T10230] device bridge_slave_1 entered promiscuous mode [ 3918.227091][T10240] syz.1.9973[10240] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3918.227392][T10240] syz.1.9973[10240] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3918.350926][T10230] bridge0: port 2(bridge_slave_1) entered blocking state [ 3918.368995][T10230] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3918.376115][T10230] bridge0: port 1(bridge_slave_0) entered blocking state [ 3918.382864][T10230] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3918.411052][ T1804] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3918.418753][ T1804] bridge0: port 1(bridge_slave_0) entered disabled state [ 3918.427462][ T1804] bridge0: port 2(bridge_slave_1) entered disabled state [ 3918.446803][T25676] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3918.454886][T25676] bridge0: port 1(bridge_slave_0) entered blocking state [ 3918.461746][T25676] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3918.469310][T25676] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3918.477403][T25676] bridge0: port 2(bridge_slave_1) entered blocking state [ 3918.484278][T25676] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3918.504198][ T1804] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3918.512084][ T1804] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3918.524191][T22582] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 3918.532335][T22582] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3918.541812][ T6887] device bridge_slave_1 left promiscuous mode [ 3918.547994][ T6887] bridge0: port 2(bridge_slave_1) entered disabled state [ 3918.555381][ T6887] bridge0: port 1(bridge_slave_0) entered disabled state [ 3918.563389][ T6887] device veth1_macvtap left promiscuous mode [ 3918.569541][ T6887] device veth0_vlan left promiscuous mode [ 3918.675462][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 3918.683426][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3918.692113][T10230] device veth0_vlan entered promiscuous mode [ 3918.699080][T22582] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3918.706713][T22582] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3918.720322][T10230] device veth1_macvtap entered promiscuous mode [ 3918.728692][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 3918.740923][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3918.749207][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 3918.763794][T22582] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 3918.772385][T22582] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3918.780716][T22582] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 3918.789208][T22582] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3918.802294][T10245] loop1: detected capacity change from 0 to 128 [ 3918.849797][T10247] loop2: detected capacity change from 0 to 128 [ 3918.860112][T10245] I/O error, dev loop1, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 3918.870709][T10245] EXT4-fs (loop1): unable to read superblock [ 3918.977085][T10247] syz.2.9970: attempt to access beyond end of device [ 3918.977085][T10247] loop2: rw=0, sector=121, nr_sectors = 119 limit=128 [ 3919.081521][T10257] FAULT_INJECTION: forcing a failure. [ 3919.081521][T10257] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3919.099987][T21620] kworker/u4:8: attempt to access beyond end of device [ 3919.099987][T21620] loop2: rw=1, sector=241, nr_sectors = 800 limit=128 [ 3919.118962][T10257] CPU: 0 PID: 10257 Comm: syz.1.9978 Not tainted 6.1.99-syzkaller-00108-gd4dab27b9d1c #0 [ 3919.128602][T10257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 3919.138499][T10257] Call Trace: [ 3919.141614][T10257] [ 3919.144396][T10257] dump_stack_lvl+0x151/0x1b7 [ 3919.148905][T10257] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 3919.154202][T10257] ? __kmem_cache_free+0x218/0x3b0 [ 3919.159148][T10257] ? bpf_prog_test_run_xdp+0xa80/0x1130 [ 3919.164533][T10257] dump_stack+0x15/0x1c [ 3919.168522][T10257] should_fail_ex+0x3d0/0x520 [ 3919.173034][T10257] should_fail+0xb/0x10 [ 3919.177026][T10257] should_fail_usercopy+0x1a/0x20 [ 3919.181886][T10257] _copy_to_user+0x1e/0x90 [ 3919.186143][T10257] simple_read_from_buffer+0xc7/0x150 [ 3919.191347][T10257] proc_fail_nth_read+0x1a3/0x210 [ 3919.196208][T10257] ? proc_fault_inject_write+0x390/0x390 [ 3919.201680][T10257] ? fsnotify_perm+0x269/0x5b0 [ 3919.206276][T10257] ? security_file_permission+0x86/0xb0 [ 3919.211659][T10257] ? proc_fault_inject_write+0x390/0x390 [ 3919.217128][T10257] vfs_read+0x26c/0xae0 [ 3919.221118][T10257] ? __kasan_check_write+0x14/0x20 [ 3919.226066][T10257] ? kernel_read+0x1f0/0x1f0 [ 3919.230491][T10257] ? mutex_lock+0xb1/0x1e0 [ 3919.234746][T10257] ? bit_wait_io_timeout+0x120/0x120 [ 3919.239867][T10257] ? __fdget_pos+0x2e2/0x390 [ 3919.244292][T10257] ? ksys_read+0x77/0x2c0 [ 3919.248464][T10257] ksys_read+0x199/0x2c0 [ 3919.252637][T10257] ? vfs_write+0xed0/0xed0 [ 3919.256878][T10257] ? debug_smp_processor_id+0x17/0x20 [ 3919.262085][T10257] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 3919.267987][T10257] __x64_sys_read+0x7b/0x90 [ 3919.272327][T10257] x64_sys_call+0x28/0x9a0 [ 3919.276580][T10257] do_syscall_64+0x3b/0xb0 [ 3919.280829][T10257] ? clear_bhb_loop+0x55/0xb0 [ 3919.285345][T10257] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3919.291074][T10257] RIP: 0033:0x7f720d57ca3c [ 3919.295331][T10257] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 3919.314770][T10257] RSP: 002b:00007f720e351030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 3919.323012][T10257] RAX: ffffffffffffffda RBX: 00007f720d735f80 RCX: 00007f720d57ca3c [ 3919.330823][T10257] RDX: 000000000000000f RSI: 00007f720e3510a0 RDI: 0000000000000008 [ 3919.338635][T10257] RBP: 00007f720e351090 R08: 0000000000000000 R09: 0000000000000000 [ 3919.346448][T10257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3919.354260][T10257] R13: 0000000000000000 R14: 00007f720d735f80 R15: 00007ffd9061b3a8 [ 3919.362074][T10257] [ 3919.609911][T10260] loop2: detected capacity change from 0 to 40427 [ 3919.633309][T10260] F2FS-fs (loop2): invalid crc value [ 3919.643399][T10267] loop1: detected capacity change from 0 to 1024 [ 3919.674952][T10260] F2FS-fs (loop2): Found nat_bits in checkpoint [ 3919.701701][T10267] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 3919.731939][T10267] FAULT_INJECTION: forcing a failure. [ 3919.731939][T10267] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3919.763227][T10267] CPU: 0 PID: 10267 Comm: syz.1.9981 Not tainted 6.1.99-syzkaller-00108-gd4dab27b9d1c #0 [ 3919.772861][T10267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 3919.782759][T10267] Call Trace: [ 3919.785884][T10267] [ 3919.788659][T10267] dump_stack_lvl+0x151/0x1b7 [ 3919.793173][T10267] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 3919.798469][T10267] ? getname_flags+0xba/0x520 [ 3919.802981][T10267] dump_stack+0x15/0x1c [ 3919.806970][T10267] should_fail_ex+0x3d0/0x520 [ 3919.811488][T10267] should_fail+0xb/0x10 [ 3919.815476][T10267] should_fail_usercopy+0x1a/0x20 [ 3919.820339][T10267] strncpy_from_user+0x24/0x2b0 [ 3919.825023][T10267] ? vfs_write+0x952/0xed0 [ 3919.829278][T10267] ? getname_flags+0xba/0x520 [ 3919.833792][T10267] getname_flags+0xf2/0x520 [ 3919.838133][T10267] getname+0x19/0x20 [ 3919.841861][T10267] do_sys_openat2+0xe0/0x870 [ 3919.846292][T10267] ? bit_wait_io_timeout+0x120/0x120 [ 3919.851410][T10267] ? __mutex_lock_slowpath+0x10/0x10 [ 3919.856530][T10267] ? do_sys_open+0x220/0x220 [ 3919.860957][T10267] ? fput+0x15b/0x1b0 [ 3919.864780][T10267] ? ksys_write+0x260/0x2c0 [ 3919.869116][T10267] ? __this_cpu_preempt_check+0x13/0x20 [ 3919.874500][T10267] __x64_sys_openat+0x243/0x290 [ 3919.879183][T10267] ? __ia32_sys_open+0x270/0x270 [ 3919.883956][T10267] ? debug_smp_processor_id+0x17/0x20 [ 3919.889165][T10267] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 3919.895186][T10267] ? exit_to_user_mode_prepare+0x39/0xa0 [ 3919.900645][T10267] x64_sys_call+0x6bf/0x9a0 [ 3919.904982][T10267] do_syscall_64+0x3b/0xb0 [ 3919.909234][T10267] ? clear_bhb_loop+0x55/0xb0 [ 3919.913748][T10267] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3919.919474][T10267] RIP: 0033:0x7f720d57dff9 [ 3919.923731][T10267] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3919.943275][T10267] RSP: 002b:00007f720e351038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 3919.951518][T10267] RAX: ffffffffffffffda RBX: 00007f720d735f80 RCX: 00007f720d57dff9 [ 3919.959328][T10267] RDX: 00000000000026e1 RSI: 0000000020000380 RDI: ffffffffffffff9c [ 3919.967140][T10267] RBP: 00007f720e351090 R08: 0000000000000000 R09: 0000000000000000 [ 3919.974951][T10267] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3919.982763][T10267] R13: 0000000000000000 R14: 00007f720d735f80 R15: 00007ffd9061b3a8 [ 3919.990585][T10267] [ 3919.999644][T10260] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 3920.020212][T10170] EXT4-fs (loop1): unmounting filesystem. [ 3920.148162][T10260] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=10260 comm=syz.2.9979 [ 3920.207350][T10230] syz-executor: attempt to access beyond end of device [ 3920.207350][T10230] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 3921.179598][ T28] audit: type=1400 audit(4617.636:2208): avc: denied { create } for pid=10294 comm="syz.2.9987" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 3922.611879][ T28] audit: type=1400 audit(4619.066:2209): avc: denied { bind } for pid=10306 comm="syz.2.9990" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 3922.631619][ T28] audit: type=1400 audit(4619.066:2210): avc: denied { node_bind } for pid=10306 comm="syz.2.9990" saddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 3922.840927][T10310] loop1: detected capacity change from 0 to 512 [ 3922.856413][T10310] EXT4-fs (loop1): 1 orphan inode deleted [ 3922.861975][T10310] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 3923.078398][ T28] audit: type=1400 audit(4619.516:2211): avc: denied { write } for pid=10309 comm="syz.1.9991" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 3923.131184][ T28] audit: type=1400 audit(4619.526:2212): avc: denied { setattr } for pid=10309 comm="syz.1.9991" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 3923.466672][T10319] bridge0: port 1(bridge_slave_0) entered blocking state [ 3923.473580][T10319] bridge0: port 1(bridge_slave_0) entered disabled state [ 3923.482783][T10319] device bridge_slave_0 entered promiscuous mode [ 3923.492271][T10319] bridge0: port 2(bridge_slave_1) entered blocking state [ 3923.499398][T10319] bridge0: port 2(bridge_slave_1) entered disabled state [ 3923.508456][T10319] device bridge_slave_1 entered promiscuous mode [ 3923.709251][T10170] EXT4-fs (loop1): unmounting filesystem. [ 3923.769518][T10319] bridge0: port 2(bridge_slave_1) entered blocking state [ 3923.776391][T10319] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3923.783484][T10319] bridge0: port 1(bridge_slave_0) entered blocking state [ 3923.790288][T10319] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3923.821423][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3923.829905][ T6] bridge0: port 1(bridge_slave_0) entered disabled state [ 3923.837799][ T6] bridge0: port 2(bridge_slave_1) entered disabled state [ 3923.854625][T22582] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3923.862763][T22582] bridge0: port 1(bridge_slave_0) entered blocking state [ 3923.869622][T22582] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3923.876973][T22582] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3923.885007][T22582] bridge0: port 2(bridge_slave_1) entered blocking state [ 3923.891850][T22582] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3923.904519][T11203] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3923.920029][T11203] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3923.934503][T10319] device veth0_vlan entered promiscuous mode [ 3923.941426][T22582] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3923.949995][T22582] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3923.959055][T22582] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3923.966421][T22582] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3923.981794][T22582] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3923.990179][T10319] device veth1_macvtap entered promiscuous mode [ 3923.993945][ T6263] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 3924.003704][T22582] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3924.011943][T22582] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3924.150329][T10328] FAULT_INJECTION: forcing a failure. [ 3924.150329][T10328] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3924.164411][ T6887] device bridge_slave_1 left promiscuous mode [ 3924.170354][ T6887] bridge0: port 2(bridge_slave_1) entered disabled state [ 3924.177805][T10328] CPU: 0 PID: 10328 Comm: syz.3.9993 Not tainted 6.1.99-syzkaller-00108-gd4dab27b9d1c #0 [ 3924.187434][T10328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 3924.197326][T10328] Call Trace: [ 3924.200445][T10328] [ 3924.203225][T10328] dump_stack_lvl+0x151/0x1b7 [ 3924.207736][T10328] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 3924.213033][T10328] ? signal_setup_done+0x448/0x5f0 [ 3924.217979][T10328] dump_stack+0x15/0x1c [ 3924.221971][T10328] should_fail_ex+0x3d0/0x520 [ 3924.226485][T10328] should_fail+0xb/0x10 [ 3924.230476][T10328] should_fail_usercopy+0x1a/0x20 [ 3924.235336][T10328] _copy_from_user+0x1e/0xc0 [ 3924.239776][T10328] restore_sigcontext+0xce/0x700 [ 3924.244538][T10328] ? fpu__clear_user_states+0x171/0x200 [ 3924.249921][T10328] ? __do_compat_sys_x32_rt_sigreturn+0x1e0/0x1e0 [ 3924.256179][T10328] ? _raw_spin_lock_irq+0xa5/0x1b0 [ 3924.261123][T10328] __do_sys_rt_sigreturn+0x153/0x1e0 [ 3924.266239][T10328] ? x32_copy_siginfo_to_user+0x270/0x270 [ 3924.271789][T10328] ? debug_smp_processor_id+0x17/0x20 [ 3924.276998][T10328] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 3924.282900][T10328] ? exit_to_user_mode_prepare+0x39/0xa0 [ 3924.288369][T10328] x64_sys_call+0x91/0x9a0 [ 3924.292621][T10328] do_syscall_64+0x3b/0xb0 [ 3924.296874][T10328] ? clear_bhb_loop+0x55/0xb0 [ 3924.301386][T10328] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3924.307116][T10328] RIP: 0033:0x7fc2f2719959 [ 3924.311368][T10328] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25 [ 3924.330812][T10328] RSP: 002b:00007fc2f3515a80 EFLAGS: 00000202 ORIG_RAX: 000000000000000f [ 3924.339054][T10328] RAX: ffffffffffffffda RBX: 00007fc2f2935f80 RCX: 00007fc2f2719959 [ 3924.346866][T10328] RDX: 00007fc2f3515a80 RSI: 00007fc2f3515bb0 RDI: 0000000000000021 [ 3924.354678][T10328] RBP: 00007fc2f3516090 R08: 0000000000000000 R09: 0000000000000000 [ 3924.362489][T10328] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 3924.370299][T10328] R13: 0000000000000000 R14: 00007fc2f2935f80 R15: 00007ffc0f670508 [ 3924.378117][T10328] [ 3924.384262][ T6887] device bridge_slave_0 left promiscuous mode [ 3924.390202][ T6887] bridge0: port 1(bridge_slave_0) entered disabled state [ 3924.398453][ T6887] device veth1_macvtap left promiscuous mode [ 3924.407368][ T6887] device veth0_vlan left promiscuous mode [ 3924.553942][T25676] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 3924.564194][ T6263] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3924.606199][ T6263] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 3924.745282][ T6263] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 3924.782961][ T6263] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3924.791757][ T6263] usb 2-1: config 0 descriptor?? [ 3924.803955][T25676] usb 4-1: Using ep0 maxpacket: 8 [ 3924.923973][T25676] usb 4-1: config 0 has an invalid descriptor of length 209, skipping remainder of the config [ 3924.934233][T25676] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 3924.947077][T25676] usb 4-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 3924.955938][T25676] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3924.974155][T25676] usb 4-1: config 0 descriptor?? [ 3925.014435][T25676] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 3925.235876][T10328] loop3: detected capacity change from 0 to 2048 [ 3925.274561][ T6263] plantronics 0003:047F:FFFF.01DF: unknown main item tag 0x0 [ 3925.281782][ T6263] plantronics 0003:047F:FFFF.01DF: unknown main item tag 0x0 [ 3925.289677][ T6263] plantronics 0003:047F:FFFF.01DF: No inputs registered, leaving [ 3925.297812][T11203] usb 4-1: USB disconnect, device number 39 [ 3925.299985][ T6263] plantronics 0003:047F:FFFF.01DF: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 3925.632934][T22582] usb 2-1: USB disconnect, device number 46 [ 3926.018227][ T28] audit: type=1400 audit(4622.476:2213): avc: denied { write } for pid=10341 comm="syz.3.9997" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 3926.018254][T10343] netlink: 108 bytes leftover after parsing attributes in process `syz.3.9997'. [ 3926.347723][T10350] tipc: Started in network mode [ 3926.352557][T10350] tipc: Node identity 60000000000000000000000000000001, cluster identity 4711 [ 3926.361370][T10350] tipc: Enabling of bearer rejected, failed to enable media [ 3926.483242][T10351] 9pnet_fd: Insufficient options for proto=fd [ 3926.877244][T10354] loop3: detected capacity change from 0 to 40427 [ 3926.884703][T10354] F2FS-fs (loop3): invalid crc value [ 3926.891346][T10354] F2FS-fs (loop3): Found nat_bits in checkpoint [ 3926.915699][T10354] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 3926.962881][T10354] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=10354 comm=syz.3.10000 [ 3926.993398][T10319] syz-executor: attempt to access beyond end of device [ 3926.993398][T10319] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 3927.087897][ T28] audit: type=1400 audit(4623.546:2214): avc: denied { getopt } for pid=10361 comm="syz.2.10003" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 3927.429791][T10366] loop3: detected capacity change from 0 to 40427 [ 3927.437515][T10366] F2FS-fs (loop3): invalid crc value [ 3927.448748][T10366] F2FS-fs (loop3): Found nat_bits in checkpoint [ 3927.484401][T10366] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 3927.618317][T10374] syz.3.10001: attempt to access beyond end of device [ 3927.618317][T10374] loop3: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 3927.624201][T10366] loop3: detected capacity change from 40427 to 0 [ 3928.244684][ T28] audit: type=1400 audit(4624.706:2215): avc: denied { write } for pid=10380 comm="syz.2.10006" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 3928.269181][ T28] audit: type=1400 audit(4624.726:2216): avc: denied { read } for pid=10380 comm="syz.2.10006" name="msr" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 3928.297605][ T28] audit: type=1400 audit(4624.726:2217): avc: denied { open } for pid=10380 comm="syz.2.10006" path="/dev/cpu/0/msr" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 3928.531140][T10384] loop2: detected capacity change from 0 to 1024 [ 3928.537988][T10384] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 3928.552545][T10384] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 3928.562825][T10384] JBD2: no valid journal superblock found [ 3928.568448][T10384] EXT4-fs (loop2): error loading journal [ 3929.292700][T10389] loop1: detected capacity change from 0 to 512 [ 3929.306793][T10389] EXT4-fs error (device loop1): ext4_orphan_get:1422: comm syz.1.10008: bad orphan inode 17 [ 3929.316960][T10389] ext4_test_bit(bit=16, block=4) = 1 [ 3929.322057][T10389] is_bad_inode(inode)=0 [ 3929.326357][T10389] NEXT_ORPHAN(inode)=0 [ 3929.330318][T10389] max_ino=32 [ 3929.333361][T10389] i_nlink=1 [ 3929.336619][T10389] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 3929.351017][T10389] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.10008: bg 0: block 7: invalid block bitmap [ 3930.528164][T10398] bridge0: port 1(bridge_slave_0) entered blocking state [ 3930.535175][T10398] bridge0: port 1(bridge_slave_0) entered disabled state [ 3930.550842][T10398] device bridge_slave_0 entered promiscuous mode [ 3930.568830][T10398] bridge0: port 2(bridge_slave_1) entered blocking state [ 3930.583313][T10398] bridge0: port 2(bridge_slave_1) entered disabled state [ 3930.595310][T10403] 9pnet_fd: Insufficient options for proto=fd [ 3930.604459][T10398] device bridge_slave_1 entered promiscuous mode [ 3930.712348][T10398] bridge0: port 2(bridge_slave_1) entered blocking state [ 3930.719235][T10398] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3930.726336][T10398] bridge0: port 1(bridge_slave_0) entered blocking state [ 3930.733106][T10398] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3930.789814][T11203] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3930.797859][T11203] bridge0: port 1(bridge_slave_0) entered disabled state [ 3930.805338][T11203] bridge0: port 2(bridge_slave_1) entered disabled state [ 3930.826736][T22582] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3930.834811][T22582] bridge0: port 1(bridge_slave_0) entered blocking state [ 3930.841757][T22582] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3930.849870][T22582] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3930.857950][T22582] bridge0: port 2(bridge_slave_1) entered blocking state [ 3930.864811][T22582] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3930.872269][T22582] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3930.880144][T22582] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3930.897463][T11203] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3930.910012][T10398] device veth0_vlan entered promiscuous mode [ 3930.917777][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3930.925857][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3930.933542][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3930.949851][T10398] device veth1_macvtap entered promiscuous mode [ 3930.957996][T11203] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3930.974497][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3930.982715][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3931.019609][T10405] loop0: detected capacity change from 0 to 1024 [ 3931.054737][T10405] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 3931.066675][ T28] audit: type=1400 audit(4627.526:2218): avc: denied { remount } for pid=10404 comm="syz.0.10010" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 3931.086442][T10398] EXT4-fs (loop0): unmounting filesystem. [ 3931.086930][ T1584] device bridge_slave_1 left promiscuous mode [ 3931.104077][ T1584] bridge0: port 2(bridge_slave_1) entered disabled state [ 3931.125498][ T1584] device bridge_slave_0 left promiscuous mode [ 3931.147012][ T1584] bridge0: port 1(bridge_slave_0) entered disabled state [ 3931.164907][ T1584] device veth1_macvtap left promiscuous mode [ 3931.174121][ T1584] device veth0_vlan left promiscuous mode [ 3931.442080][T10409] loop0: detected capacity change from 0 to 40427 [ 3931.458091][T10409] F2FS-fs (loop0): invalid crc value [ 3931.465503][T10409] F2FS-fs (loop0): Found nat_bits in checkpoint [ 3931.503771][T10409] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 3931.643184][T10409] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=10409 comm=syz.0.10012 [ 3931.712912][T10398] syz-executor: attempt to access beyond end of device [ 3931.712912][T10398] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 3932.330245][T10426] loop2: detected capacity change from 0 to 40427 [ 3932.350363][T10426] F2FS-fs (loop2): invalid crc value [ 3932.357044][T10426] F2FS-fs (loop2): Found nat_bits in checkpoint [ 3932.396220][T10426] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 3932.513978][T10426] loop2: detected capacity change from 40427 to 0 [ 3933.614747][ T28] audit: type=1400 audit(4630.076:2219): avc: denied { ioctl } for pid=10437 comm="syz.0.10018" path="/dev/loop-control" dev="devtmpfs" ino=113 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 3933.923933][ T1804] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 3934.213927][ T1804] usb 1-1: device descriptor read/64, error -71 [ 3934.613939][ T1804] usb 1-1: device descriptor read/64, error -71 [ 3934.903935][ T1804] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 3935.183920][ T1804] usb 1-1: device descriptor read/64, error -71 [ 3935.603920][ T1804] usb 1-1: device descriptor read/64, error -71 [ 3935.723981][ T1804] usb usb1-port1: attempt power cycle [ 3936.143914][ T1804] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 3936.313974][ T1804] usb 1-1: device descriptor read/8, error -71 [ 3936.593989][ T1804] usb 1-1: device descriptor read/8, error -71 [ 3938.996193][T10447] bridge0: port 1(bridge_slave_0) entered blocking state [ 3939.003052][T10447] bridge0: port 1(bridge_slave_0) entered disabled state [ 3939.024668][T10447] device bridge_slave_0 entered promiscuous mode [ 3939.044267][T10447] bridge0: port 2(bridge_slave_1) entered blocking state [ 3939.051121][T10447] bridge0: port 2(bridge_slave_1) entered disabled state [ 3939.072812][T10447] device bridge_slave_1 entered promiscuous mode [ 3939.217910][T10447] bridge0: port 2(bridge_slave_1) entered blocking state [ 3939.224791][T10447] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3939.231882][T10447] bridge0: port 1(bridge_slave_0) entered blocking state [ 3939.238693][T10447] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3939.304649][ T6263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3939.312245][ T6263] bridge0: port 1(bridge_slave_0) entered disabled state [ 3939.320348][ T6263] bridge0: port 2(bridge_slave_1) entered disabled state [ 3939.344902][ T6263] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3939.352895][ T6263] bridge0: port 1(bridge_slave_0) entered blocking state [ 3939.359757][ T6263] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3939.367540][ T6263] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3939.375594][ T6263] bridge0: port 2(bridge_slave_1) entered blocking state [ 3939.382425][ T6263] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3939.390465][ T6263] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3939.398317][ T6263] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3939.417035][T24738] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3939.425438][T24738] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3939.433221][T24738] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3939.440902][T24738] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3939.449901][T10447] device veth0_vlan entered promiscuous mode [ 3939.466344][T10447] device veth1_macvtap entered promiscuous mode [ 3939.474401][T24738] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3939.485896][T24738] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3939.501511][ T1804] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3939.545686][T10170] EXT4-fs (loop1): unmounting filesystem. [ 3939.594755][ T1584] device bridge_slave_1 left promiscuous mode [ 3939.600831][ T1584] bridge0: port 2(bridge_slave_1) entered disabled state [ 3939.624340][ T1584] device bridge_slave_0 left promiscuous mode [ 3939.630298][ T1584] bridge0: port 1(bridge_slave_0) entered disabled state [ 3939.674779][ T1584] device veth1_macvtap left promiscuous mode [ 3939.680638][ T1584] device veth0_vlan left promiscuous mode [ 3939.912921][T10460] bridge0: port 1(bridge_slave_0) entered blocking state [ 3939.919867][T10460] bridge0: port 1(bridge_slave_0) entered disabled state [ 3939.927317][T10460] device bridge_slave_0 entered promiscuous mode [ 3939.935033][T10460] bridge0: port 2(bridge_slave_1) entered blocking state [ 3939.941878][T10460] bridge0: port 2(bridge_slave_1) entered disabled state [ 3939.949627][T10460] device bridge_slave_1 entered promiscuous mode [ 3940.054276][T10465] 9pnet_fd: Insufficient options for proto=fd [ 3940.164706][ T1804] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 3940.171990][ T1804] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3940.215587][ T1804] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 3940.223755][ T1804] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3940.234114][ T1804] bridge0: port 1(bridge_slave_0) entered blocking state [ 3940.240950][ T1804] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3940.248351][ T1804] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 3940.256557][ T1804] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3940.264809][ T1804] bridge0: port 2(bridge_slave_1) entered blocking state [ 3940.271643][ T1804] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3940.279057][ T1804] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3940.294183][ T1804] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3940.313008][T10460] device veth0_vlan entered promiscuous mode [ 3940.319401][ T1804] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3940.334462][ T1804] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3940.342260][ T1804] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3940.349761][ T1804] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3940.364172][ T1804] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 3940.379836][T10460] device veth1_macvtap entered promiscuous mode [ 3940.386859][ T1804] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3940.414371][ T6263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3940.422899][ T6263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3940.467421][T10468] loop1: detected capacity change from 0 to 1024 [ 3940.514491][T10468] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 3940.546813][T10460] EXT4-fs (loop1): unmounting filesystem. [ 3941.050398][ T1584] device bridge_slave_1 left promiscuous mode [ 3941.064053][ T1584] bridge0: port 2(bridge_slave_1) entered disabled state [ 3941.075595][ T1584] device bridge_slave_0 left promiscuous mode [ 3941.081533][ T1584] bridge0: port 1(bridge_slave_0) entered disabled state [ 3941.104109][ T1584] device veth1_macvtap left promiscuous mode [ 3941.119314][T10473] loop1: detected capacity change from 0 to 40427 [ 3941.125887][ T1584] device veth0_vlan left promiscuous mode [ 3941.150266][T10473] F2FS-fs (loop1): invalid crc value [ 3941.204854][T10473] F2FS-fs (loop1): Found nat_bits in checkpoint [ 3941.387417][T10473] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 3941.643960][T10473] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=10473 comm=syz.1.10023 [ 3941.735240][T10460] syz-executor: attempt to access beyond end of device [ 3941.735240][T10460] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 3943.905216][T10510] bridge0: port 1(bridge_slave_0) entered blocking state [ 3943.912177][T10510] bridge0: port 1(bridge_slave_0) entered disabled state [ 3943.922352][T10510] device bridge_slave_0 entered promiscuous mode [ 3943.932514][T10510] bridge0: port 2(bridge_slave_1) entered blocking state [ 3943.940124][T10510] bridge0: port 2(bridge_slave_1) entered disabled state [ 3943.949797][T10510] device bridge_slave_1 entered promiscuous mode [ 3944.000171][ T1584] tipc: Left network mode [ 3944.175199][T10510] bridge0: port 2(bridge_slave_1) entered blocking state [ 3944.182066][T10510] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3944.189171][T10510] bridge0: port 1(bridge_slave_0) entered blocking state [ 3944.196045][T10510] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3944.225250][T11203] bridge0: port 1(bridge_slave_0) entered disabled state [ 3944.234347][T11203] bridge0: port 2(bridge_slave_1) entered disabled state [ 3944.249529][T11203] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 3944.256862][T11203] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3944.276229][T24738] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3944.284704][T24738] bridge0: port 1(bridge_slave_0) entered blocking state [ 3944.291555][T24738] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3944.299034][T24738] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3944.307063][T24738] bridge0: port 2(bridge_slave_1) entered blocking state [ 3944.313923][T24738] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3944.330467][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3944.348596][T11203] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3944.361685][T11203] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3944.371631][T10510] device veth0_vlan entered promiscuous mode [ 3944.378473][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3944.393425][T11203] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3944.400770][T11203] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3944.410556][T10510] device veth1_macvtap entered promiscuous mode [ 3944.417723][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3944.430257][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3944.452749][T11203] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3944.610726][ T1584] device bridge_slave_1 left promiscuous mode [ 3944.618441][ T1584] bridge0: port 2(bridge_slave_1) entered disabled state [ 3944.629048][ T1584] device bridge_slave_0 left promiscuous mode [ 3944.635042][ T1584] bridge0: port 1(bridge_slave_0) entered disabled state [ 3944.952519][ T1584] device veth1_macvtap left promiscuous mode [ 3945.045153][ T1584] device veth0_vlan left promiscuous mode [ 3945.390268][T10526] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10034'. [ 3945.413422][ T28] audit: type=1400 audit(4641.866:2220): avc: denied { create } for pid=10525 comm="syz.2.10034" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 3945.440567][ T28] audit: type=1400 audit(4641.886:2221): avc: denied { setopt } for pid=10525 comm="syz.2.10034" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 3945.472450][ T28] audit: type=1400 audit(4641.926:2222): avc: denied { write } for pid=10525 comm="syz.2.10034" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 3945.904910][T10533] loop1: detected capacity change from 0 to 512 [ 3945.930406][T10533] EXT4-fs (loop1): Test dummy encryption mode enabled [ 3945.946201][T10533] EXT4-fs error (device loop1): __ext4_iget:5046: inode #11: block 1: comm syz.1.10036: invalid block [ 3945.957176][T10533] EXT4-fs error (device loop1): ext4_orphan_get:1401: comm syz.1.10036: couldn't read orphan inode 11 (err -117) [ 3945.969334][T10533] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 3946.284005][ T28] audit: type=1400 audit(4642.716:2223): avc: denied { mounton } for pid=10536 comm="syz.3.10037" path="/9/file0" dev="tmpfs" ino=68 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 3946.453936][ T6263] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 3946.693937][T25676] usb 3-1: new full-speed USB device number 32 using dummy_hcd [ 3946.813956][ T6263] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3946.824796][ T6263] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3946.834515][ T6263] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 10 [ 3946.847335][ T6263] usb 2-1: New USB device found, idVendor=056a, idProduct=0014, bcdDevice= 0.00 [ 3946.856265][ T28] audit: type=1400 audit(4643.306:2224): avc: denied { unmount } for pid=10447 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 3946.879771][ T6263] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3946.947440][ T6263] usb 2-1: config 0 descriptor?? [ 3946.982161][T10551] bridge0: port 1(bridge_slave_0) entered blocking state [ 3946.989320][T10551] bridge0: port 1(bridge_slave_0) entered disabled state [ 3946.998855][T10551] device bridge_slave_0 entered promiscuous mode [ 3947.009235][T10551] bridge0: port 2(bridge_slave_1) entered blocking state [ 3947.017340][T10551] bridge0: port 2(bridge_slave_1) entered disabled state [ 3947.027327][T10551] device bridge_slave_1 entered promiscuous mode [ 3947.164084][T25676] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3947.174405][T25676] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 3947.323964][T25676] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3947.332894][T25676] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 3947.340893][T25676] usb 3-1: SerialNumber: syz [ 3947.361649][T10551] bridge0: port 2(bridge_slave_1) entered blocking state [ 3947.368517][T10551] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3947.375713][T10551] bridge0: port 1(bridge_slave_0) entered blocking state [ 3947.382475][T10551] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3947.401906][T11065] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3947.409275][T25676] usb 3-1: bad CDC descriptors [ 3947.418773][T11065] bridge0: port 1(bridge_slave_0) entered disabled state [ 3947.426123][T11065] bridge0: port 2(bridge_slave_1) entered disabled state [ 3947.444815][T11065] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3947.452706][T11065] bridge0: port 1(bridge_slave_0) entered blocking state [ 3947.459481][T11065] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3947.467073][T11065] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3947.475198][T11065] bridge0: port 2(bridge_slave_1) entered blocking state [ 3947.482015][T11065] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3947.489232][T11065] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3947.496961][T11065] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3947.511525][T10551] device veth0_vlan entered promiscuous mode [ 3947.517796][T11065] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3947.525970][T11065] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3947.533632][T11065] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3947.540883][T11065] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3947.554268][ T1804] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3947.563001][T10551] device veth1_macvtap entered promiscuous mode [ 3947.572207][ T1804] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3947.582140][ T7702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3948.004537][ T1584] device bridge_slave_1 left promiscuous mode [ 3948.010470][ T1584] bridge0: port 2(bridge_slave_1) entered disabled state [ 3948.017756][ T1584] device bridge_slave_0 left promiscuous mode [ 3948.023684][ T1584] bridge0: port 1(bridge_slave_0) entered disabled state [ 3948.031789][ T1584] device veth1_macvtap left promiscuous mode [ 3948.037780][ T1584] device veth0_vlan left promiscuous mode [ 3948.920358][T10460] EXT4-fs (loop1): unmounting filesystem. [ 3949.024036][ T6263] usbhid 2-1:0.0: can't add hid device: -71 [ 3949.030130][ T6263] usbhid: probe of 2-1:0.0 failed with error -71 [ 3949.041009][ T6263] usb 2-1: USB disconnect, device number 47 [ 3949.380416][T22582] usb 3-1: USB disconnect, device number 32 [ 3949.794013][T22582] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 3950.363951][T22582] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3950.553963][T22582] usb 3-1: New USB device found, idVendor=0421, idProduct=0007, bcdDevice=b8.51 [ 3950.562889][T22582] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3950.570695][T22582] usb 3-1: Product: syz [ 3950.574675][T22582] usb 3-1: Manufacturer: syz [ 3950.579078][T22582] usb 3-1: SerialNumber: syz [ 3950.586155][T22582] usb 3-1: config 0 descriptor?? [ 3950.624549][T22582] usb 3-1: bad CDC descriptors [ 3950.830459][T10589] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3950.844516][T10589] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3950.895833][T10571] bridge0: port 3(vlan2) entered blocking state [ 3950.911486][T10571] bridge0: port 3(vlan2) entered disabled state SYZFAIL: repeatedly failed to execute the program proc=4 req=6333 state=1 status=9 (errno 11: Resource temporarily unavailable) [ 3950.985340][ T1804] usb 3-1: USB disconnect, device number 33 [ 3951.020247][ T28] audit: type=1400 audit(4647.476:2225): avc: denied { write } for pid=1099 comm="syz-executor" path="pipe:[15496]" dev="pipefs" ino=15496 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 3951.604442][ T6887] device bridge_slave_1 left promiscuous mode [ 3951.610360][ T6887] bridge0: port 2(bridge_slave_1) entered disabled state [ 3951.617695][ T6887] device bridge_slave_0 left promiscuous mode [ 3951.623679][ T6887] bridge0: port 1(bridge_slave_0) entered disabled state [ 3951.631310][ T6887] device veth1_macvtap left promiscuous mode [ 3951.637156][ T6887] device veth0_vlan left promiscuous mode [ 3952.394918][ T6887] device bridge_slave_1 left promiscuous mode [ 3952.400836][ T6887] bridge0: port 2(bridge_slave_1) entered disabled state [ 3952.408108][ T6887] device bridge_slave_0 left promiscuous mode [ 3952.414091][ T6887] bridge0: port 1(bridge_slave_0) entered disabled state [ 3952.421416][ T6887] device bridge_slave_1 left promiscuous mode [ 3952.427529][ T6887] bridge0: port 2(bridge_slave_1) entered disabled state [ 3952.434793][ T6887] device bridge_slave_0 left promiscuous mode [ 3952.440686][ T6887] bridge0: port 1(bridge_slave_0) entered disabled state [ 3952.448261][ T6887] device bridge_slave_1 left promiscuous mode [ 3952.454293][ T6887] bridge0: port 2(bridge_slave_1) entered disabled state [ 3952.461457][ T6887] device bridge_slave_0 left promiscuous mode [ 3952.467543][ T6887] bridge0: port 1(bridge_slave_0) entered disabled state [ 3952.475119][ T6887] device bridge_slave_1 left promiscuous mode [ 3952.481012][ T6887] bridge0: port 2(bridge_slave_1) entered disabled state [ 3952.488249][ T6887] device bridge_slave_0 left promiscuous mode [ 3952.494212][ T6887] bridge0: port 1(bridge_slave_0) entered disabled state [ 3952.501962][ T6887] device veth1_macvtap left promiscuous mode [ 3952.507883][ T6887] device veth0_vlan left promiscuous mode [ 3952.513562][ T6887] device veth1_macvtap left promiscuous mode [ 3952.519401][ T6887] device veth0_vlan left promiscuous mode [ 3952.525401][ T6887] device veth1_macvtap left promiscuous mode [ 3952.531198][ T6887] device veth0_vlan left promiscuous mode [ 3952.537073][ T6887] device veth1_macvtap left promiscuous mode [ 3952.542892][ T6887] device veth0_vlan left promiscuous mode