last executing test programs: 48.420975556s ago: executing program 0 (id=1285): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffff7}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) setreuid(0x0, 0x0) 48.416983196s ago: executing program 0 (id=1287): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001"], 0x13c}, 0x1, 0x0, 0x0, 0x40}, 0x0) 48.385828579s ago: executing program 0 (id=1288): r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback={0xff00}}, 0x1c) 48.321136076s ago: executing program 0 (id=1289): r0 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000cc0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = syz_pidfd_open(r0, 0x0) setns(r4, 0x8020000) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x141042, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x8000, &(0x7f0000001dc0)={0xf, 0x0, 0x100000}, 0x20) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace(0x4208, r5) ioprio_set$pid(0x2, r5, 0x4004) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) symlink(&(0x7f0000000080)='.\x00', 0x0) 47.255199572s ago: executing program 0 (id=1312): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'bridge0\x00'}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000280)="d1"}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000180), 0x1, 0x553, &(0x7f0000001080)="$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") mount$incfs(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x80, 0x140) r1 = openat$incfs(r0, &(0x7f0000000000)='.pending_reads\x00', 0x800, 0x80) connect$unix(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0xc058671e, &(0x7f00000000c0)) 44.420060636s ago: executing program 0 (id=1323): r0 = syz_open_dev$evdev(0x0, 0x2, 0x862b01) write$char_usb(r0, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x7fff, 0x0, 0x1}}, 0x40) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/231, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000f}, 0x94) 44.359154782s ago: executing program 32 (id=1323): r0 = syz_open_dev$evdev(0x0, 0x2, 0x862b01) write$char_usb(r0, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x7fff, 0x0, 0x1}}, 0x40) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/231, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000f}, 0x94) 6.969281074s ago: executing program 4 (id=1970): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sysfs(0xffffffffffffff9c, 0x0, 0x149882, 0x60) r1 = socket(0x22, 0x2, 0x3) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, 0x0, 0x0) 6.365347274s ago: executing program 4 (id=1972): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0x11}, {0xffe6, 0xb}, {0xb, 0xc}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xdb, 0x2, 0x7, 0x41, 0x7dd, 0x1}, {0xb2, 0x1, 0x2, 0x1000, 0x3, 0x6}, 0xcf0, 0x5, 0xd65}}, @TCA_TBF_RATE64={0xc, 0x4, 0xafdc78dbe0554eb6}, @TCA_TBF_PRATE64={0xc, 0x5, 0xee7f8a24a6399ccf}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4000000) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x8, 0x44, 0x1ff, 0x10, 0x6, 0x7}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) 6.10587733s ago: executing program 4 (id=1979): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x400c84, &(0x7f0000000340), 0x1, 0x786, &(0x7f0000001900)="$eJzs3c9rHGUfAPDvbJKmTfu+yQsvaL0YEDRQmpgaWwWFigcRLBT0bLtstqFmky3ZTWlCQIsIXgQVD4JeevLgj3rz6o+r/hcexFI1LVY8SGQ2s+2m2U03abIbzecDk32emdl8n+/Or2d3hpkA9qzh9E8u4nBEvJtEDGbjk4joq5V6I06uzndreamQDkmsrLz8a1Kb5+byUiEa3pM6mFUejIhv34o4klsft7KwOJ0vlYpzWX2sOnNhrLKwePT8TH6qOFWcPT4+MXHsxJMnjm9frr//sHjo2nsvPPbFyT/ffODqO98lcTIOZdMa89iyZ9dWh2M4+0z60o9wjefvO9juknS7AWxJumn2rG7lcTgGo6dWAgD+zV6PiBUAYI9JHP8BYI+p/w5wc3mpUB+6+4tEZ11/LiL2r+ZfP7+5OqU3O2e3v3YedOBmsubMSBIRQ9sQfzgiPv7q1c/SIbbrPCRAG964HBFnh4bX7/+TddcsbNbjG0zbl70O3zU+je8MNHTG12n/56lm/b/c7f5PNOn/9DfZdrei2fa/ZsSBbQiygeufRDzTcG3brYb8M0M9We0/tT5fX3LufKmY7tv+GxEj0def1sc3iDFy468braY19v9+e/+1T9P46eudOXI/9/avfc9kvpq/n5wbXb8c8VBvs/yT28s/adH/Pd1mjBeffvujVtPS/NN868P6/CO7OmlnrFyJeLTp8r9zRVuy4fWJY7XVYay+UjTx5Y8fDrSK37j80yGNX/8u0Anp8h/YOP+hpPF6zcrmY3x/ZfCbVtPunX/z9X9f8kqtXO9HXMpXq3PjEfuSl9aPP3bnvZfyD2el1fnT/Eceab79b7T+p98Jz7aZf++1Xz7fev47K81/clPLf/OFq7eme1rFb2/5T9RKI9mYdvZ/7Tbwfj47AAAAAAAAAAAAAAAAAAAAAAAAAGhXLiIORZIbvV3O5UZHV5/h/f8YyJXKleqRc+X52cmoPSt7KPpy9VtdDjbcD3U8ux9+vX7srvoTEfG/iPig/0BSv4/iZJdzBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC6gy2e/5/6qb/brQMAdsz+bjcAAOg4x38A2Hsc/wFg72nv+N+z4+0AADrH938A2Hsc/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANhhp0+dSoeVP5aXCml98uLC/HT54tHJYmV6dGa+MFooz10YnSqXp0rF0UJ55l7/r1QuX5iI2flLY9VipTpWWVg8M1Oen62eOT+TnyqeKfZ1JCsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2JzKwuJ0vlQqzilsobCyO5rR/UJPtjrtlvZ0tJDsjmZsc6HLOyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAf4i/AwAA//+3ACFj") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfff5}], 0x1, 0xe7b, 0x0, 0x2) 6.029328618s ago: executing program 1 (id=1980): creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$packet(0x11, 0x3, 0x300) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x18a) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r1, @ANYRES64=r0], 0x0) 5.887918371s ago: executing program 4 (id=1984): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$cgroup2(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000004c0), 0x800010, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='./file0\x00') 5.796193361s ago: executing program 4 (id=1986): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xb, 0xb}, {0xa, 0xb}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x9}, @TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4010865}, 0x4008000) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r6, 0x0, 0x0, 0x40, &(0x7f00000001c0)={0x11, 0x88a8, r5, 0x1, 0xd9, 0x6, @random="98c8ca7122df"}, 0x14) 5.687849711s ago: executing program 4 (id=1987): ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r1, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x5, &(0x7f0000000140)=0x6, 0x4) recvmmsg(r1, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0) 5.637633066s ago: executing program 33 (id=1987): ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r1, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x5, &(0x7f0000000140)=0x6, 0x4) recvmmsg(r1, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0) 5.191073111s ago: executing program 3 (id=1995): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, 0x0, {0x0, 0xd}, {0xb, 0xb}, {0xa, 0xb}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x9}, @TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4010865}, 0x4008000) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r3, 0x0, 0x0, 0x40, &(0x7f00000001c0)={0x11, 0x88a8, 0x0, 0x1, 0xd9, 0x6, @random="98c8ca7122df"}, 0x14) 4.680472482s ago: executing program 3 (id=1997): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xb, 0xb}, {0xa, 0xb}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x9}, @TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4010865}, 0x4008000) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r6, 0x0, 0x0, 0x40, &(0x7f00000001c0)={0x11, 0x88a8, r5, 0x1, 0xd9, 0x6, @random="98c8ca7122df"}, 0x14) 4.433316127s ago: executing program 3 (id=1998): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x0, 0x56}, 0x28) 4.306986059s ago: executing program 3 (id=1999): syz_usb_connect(0x2, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000079db8540da0b77010b7d000000010902120001000000000904"], 0x0) write$binfmt_format(0xffffffffffffffff, 0x0, 0x0) 4.306625289s ago: executing program 5 (id=2000): socket$inet(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x30, r4, 0x1, 0x0, 0x100000, {{}, {}, {0x14, 0x19, {0x2, 0x1, 0x0, 0x2000000}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4008000}, 0x1004) 4.30479255s ago: executing program 1 (id=2001): mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x6}, 0x66) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x48) 3.668899373s ago: executing program 6 (id=1988): r0 = creat(&(0x7f0000000200)='./file0\x00', 0x100) eventfd2(0x89a, 0x80801) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r2 = dup(r1) close(0x3) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) recvmsg$unix(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000dc0), 0x6df8}}, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x200400, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 3.283008492s ago: executing program 5 (id=2003): syz_mount_image$ext4(&(0x7f0000000640)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x200000, &(0x7f0000000300)={[{@dioread_lock}, {@jqfmt_vfsv1}, {@nouid32}, {@grpquota}]}, 0xfc, 0x580, &(0x7f0000000f80)="$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") openat2(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', &(0x7f0000000280)={0x591002, 0x1, 0xc}, 0x18) 3.247456845s ago: executing program 1 (id=2005): r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000100)='asymmetric\x00', &(0x7f0000000340)=@secondary) 3.213022959s ago: executing program 1 (id=2007): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xb, 0xb}, {0xa, 0xb}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x9}, @TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4010865}, 0x4008000) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r7, 0x0, 0x0, 0x40, &(0x7f00000001c0)={0x11, 0x88a8, r6, 0x1, 0xd9, 0x6, @random="98c8ca7122df"}, 0x14) 3.156842374s ago: executing program 1 (id=2011): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r5}, 0x18) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x30, r4, 0x1, 0x0, 0x100000, {{}, {}, {0x14, 0x19, {0x2, 0x1, 0x0, 0x2000000}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4008000}, 0x1004) 3.146231875s ago: executing program 5 (id=2012): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r4}, 0x18) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) getsockname$packet(r6, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x3c}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000240)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x2, 0xfffffffc, {0x6, 0x0, 0x8100, 0x0, {0x2, 0x10}, {0xd}, {0xe, 0x10}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x5, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) 1.958919364s ago: executing program 1 (id=2013): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000380)='./file0\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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", @ANYRESDEC=0x0, @ANYRESOCT=0x0], 0x25, 0x55a8, &(0x7f00000014c0)="$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") creat(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$P9_RVERSION(r0, 0x0, 0x13) open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) 1.940044806s ago: executing program 2 (id=2014): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000480)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x1fff, 0x6, @mcast2, 0x4}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='batadv0\x00', 0x10) write(r0, &(0x7f0000000140)="8265000000000000", 0x5eb) 1.933063956s ago: executing program 6 (id=2015): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='kmem_cache_free\x00', r1, 0x0, 0x100000000}, 0x18) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x41}, 0x3}}, 0x10) 1.857068204s ago: executing program 2 (id=2016): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) capset(&(0x7f0000000000)={0x20080522}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) 1.856766114s ago: executing program 6 (id=2017): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c0000000104010400000000000000000300000406000640"], 0x1c}, 0x1, 0x0, 0x0, 0x4040000}, 0x40) 1.855785254s ago: executing program 5 (id=2018): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getdents(r3, &(0x7f0000000340)=""/217, 0xd9) syz_fuse_handle_req(r0, &(0x7f00000063c0)="99529ca7d265e2dba44891e35e7d5dab7921b730436ecd4e999a25bcf86a25f8f029c0dd50373e90b7cf7779b12ecd4423c5b13cfac186975cd723976f3c747612913029d42517c189364bc59d8ebad53ed1b86f8f66c99b1f9b5b40d78cef1f14f81815d53bdca7fef40607358db69eb8c0b1f6b0942ab4b1ee7ca8deb4eddef06381a3d1c52d6147fc5109c7c607591497a6b2477f60cc881d3219c96bffb34aadec3fa97250713cce17cd536721bf9c40a019531ed0bbad139e26a3d4d39b68ab1bf37cb1a4bd197a8789cb1940cd86d9e56713bc36c7cffd07a311f5bc2e91f16d152eb480645e85ec9b3bf09c7fa140dced0afd55d7b99e90a96e7748e2d0dc09672ac199ce529e631efe1783769819c182ca106f6184bcbb387ed246c43562d74c36ac3a7ec2f0e11f70bad0007c03bb9c0d2dacc2148cce4a4aea327c7319016ad146b52bfae0357f9e892e9bec61a13c93551cfa3d4f4bfa7585c93bb0bef01a9114f3dc54179cf9a57fe88f5cff3403e33c9d09e3e9c2e10f1f16894e1b59e3cad47c1f202cf7b756f2851fc96d09459c9a8d34c19e6a3525cd5001aac5181f57286d0e1e88ce5092c7c76b6abdaebf2c499aa47587b48eb12a2b72548c190b0324ebedb81a63333b6edb25550f859c5ccc404a944ff7f61af8800888192fbd4c8e0e417d1d181b4b335a6f52e0a7dae18397e81e3f747cab7be902ed903bdd6a622f178f9b4244718ee1206237257374d2fd1466ab6135ef7ef4a114ae170eafe9cd78cf9ffc36974cbc4b8003072bed78765a0b9f1240f24dec6a9e46db9bb498d40f727c0cbf8f4a6a49539bd0805caf65d80130d7fb60a69dc7ed890874a17530c042cf33a977d331435d68ef33885f638c777ad49564ca77d8b81ddd853a21cd55d95b627310dd633a4f005853a5506cd8f744c367f3cb6998b0fa97de6bb35b166b0c6408c4e0a38ed26235a88520c38ca97ac8a6dc81e6dc6483d383fa09f198997b8eea1c68c9e3320683c9a02dd89ddc34c241e7294ccc88d6b35762892e8746e558bfbc2251949f2ecb763dad5b975eaf36e2864be6a41d3e20514d32f5d4b6350dc7e3cc3a85428ea98efb3b1edc2a2ec1e618452949cc7e2ba1251990168fee342d4f304b7a7af9162bcbe6b09c75d7420d2c547b4e3cee1836df6eddd5dff73a4e308fcd8eaa7a33e6980a6f8ead03257a37d72d3b265d02fa42f57db877654ed513e31c35e1af0bd28511d6b57cfe07b27cbe9767a534b426dfc3dd257d5899444f34cbf4dc74b9eab2e7e3e1e1a8a6ac5e4359d653506b299a5b7c67b92dc462f1216655f952362a3387ad9966b606d98e8d1b544dc27dc6bc78fd18a446736e25c51143db9886b6c09812d5825b5d9e0932f218ff8bea4d9e1c4df9c9d4eb19336d48163a921c4ff1f0beef26b01b7e8c0d23fb59b84e229eaabb791f2cffc9aa4db75162cbfe4c9ae8d76a5b6bc4bff20e3f8f125b9aadb3e728d7f78d61fd55f46b7f59511b876e6563256686e44f25cf38d393a9b762bada272eba8df28e4086c4cd2fe3c9fab97756fb145373e6ca1991bb1ee6589e49c821ff29f047970819f88f724bd077cd3f0ae463d99b3e53078431e3f9bebabc5289a65479359efe3909186aac60a29f561de8c590988c913c9e693ab8106e8287f6565eee6735f7c88cad7124d1c8d9ff347e97912824088ee954de01c6d8a06447f06899607eadbfd078bc3df506252005749378dbd7399c9eca60b81dc0d88dedec31e5cf6e7b6d6d411958df8f9e0bf4443e8d3bdfe49d05f811d17088024d0629fc8ab8e05e309bf55e8e60d342623765f4e8d2dc4a90291cd4354ff9568c8170e6ea56e028bcf2719595253adb8c84050bb9ce4927a1c1f4560da87d109ceda90bbe45a1717763d8025f1ff40f157185ddf17079da272ae10c4f34162caf4b0d31221a57b3059fd449c87554d968a54b2eebd760dc3263c40d9eedf5905d5699d29706ea6e9e81ff2bf92489a06deffe7e978661f37a88450783e23f107c2bfce000dfc91c5fca49e46d9ea978f215a45984699f0d2503b30a741e13be56b7abe3e5663c0825c3cb04ead44ce97719c4ee6f4cdd3c452775ad7163d5c9034583cc2dbc2b0c04917a3e1aa3d0a8bb6fcf94d7922eb1d543c09185827aeb1b72ae7103ef2c014af2ff4b47fca40fb0e66ddf0264476d7a84e9b8dc551d4c407bdbac6757f7a25bd404b45bec1091696203cc438860131ad5f2fd80e3c45629864dd9f7d302b66fb8fb86735c9a6dcf8b135a273dd2ae9473bc905081be9fcb8f91b1ddba1ac692798dac0b9ccffe0319a779f5e10c65f294b22fe475283b023f9cd890e92c5447b1bc1528255c5af383bc1fb6e72cb9a67215a9e25cde63c89baa8c7125c7e8b748b728d07d9cb66778404f54e6a9e3ae1ae82f3d0ce77199f23f94a01b71b805b476fedbebeb52c83a1b857f23ba438c56a6c4c2a5909f721e6e3d240e4a16455e92220d13022ce7ec0b1365ba4e67aa6ecb324f8826579e12cebdfc0d8af63e83b5e5624d5b791f99093f9a27f7baea9fd10111209c0857a04f07408111063ef34026aee27a3d51b40e53883f9094402534bdd21cc49d7f5593e99cb204cd805bee4add0f82cf4b6dc5da14d6b79fbc68c9ccf7fb5fe774f8879e13079b024a8ad24bf123c420d630837a84ba05abf0ae4dc3fc04f25c7f74ff91d0d609c958642a48551e51b5c0074a56a7da10ce153b08cabea636f8489d8e7b655758a41d7f7474c9d76bf4d54d789bfceaffef139854065de6a94b0275a9626aab99ae838364b1a491e55017e4212b6b01f7a41bc9c215ecd17c49a8610db28c699259c58b81a0e84c45fd8e719c05c48501c49e8a6515044d247f58e4cd0bf22fd6ae31f45339d1f801196d426c52269b1aaffaf18e2a03760bb231cb7cefa6d72f1d7eb6a3bbd65d0914221b8fbf531dbd562eb4a1b28983ac7d83d4813b10b34c9525ba644f61a2c4800d4fe96a7bca63da1041ed73cc57fb9d42f9dfc8ca41d80292bbb311c89b0a0fcee1d88a025a7416863342aea00e6f049cb2ddebd17c5c617ff562a8af0c965cbe8341431a30ea239e4a62aa2b19757a3b0de04229a9907f8610c27b26591405845bf8b5b83706ed18d910c4f68777378366ff565617b19168a04560a32ce5ad64aaef9f4377118c4335b24826cdcde78fb4bdb11498553f56d8dfeb3a482c70cc6580c399b92339cbdb3464fcc7b00e9839fd0d2b8b6db90c56b33593a0048bf7983421f29b1285c81a239045b96a9b0cacd70d6d9853206471f06915efc8d3ec4c50fb13601abc73247a656066fd7b329159b3ce9e3302b4c0d6aec58cb0946a8ee8e7f55f1af604f1edb4d887fa6292dc0ce57705c1a25dc62650c127d11a364b397aefc2fcc3a164bdc53165a461b01de9180c1461b309c75af0911b4cc1b8aa05652b62119c87b4b235c573aa15b1516cddf61efd6a7f8c953fbaaee9c0e800e8f519e1494de850ddb976864088fe0cf90bbc54395078ea2501e8baa84d6807e184105bc2a140b663416496886422643bbf764d406af06e7d086678828defda0b648b25666b7b5ea29e927141740d5be0e61bf25d40b8404ffd3c67bb855b11d4faf82b7b8051615c101c3deb0601a0fa9ecd8b4a95082ccbc8222b0982802dd8430e653d6eea2786dc3a91397135faffdc65a5bae048f5c463b1a6648becce961d39d063d28d1ad6dafcea0b0878379adb16cc0d4cea572abeacd9a168a4fe2e338092b5bc93ecf02ac6ccda03e5b23adf511fdf7a79442093233b79c67d3fdd3c36c96a8f67aa79e4743d99cf963ae6161877f73656eb0314d889f4b8649bbce8a759f90eac6c006197b54b2bbac7c9b237f1e3dc099c62a65481960e6ad697fc66316ac084ba99c60f58bf44ff45f3b2006cbc4196a25f124dfaf247e863a855ef6070deb45219a922dcf2be9bd01c340e1ca5ed7c3ddac9f7a677c5d00610991d21e0751ac8044585b39f3fec5b672a11a9bce32196c2003d01ea50b0f0403e16df188ecbbb74f295f01398363ddfecdb63a49347c912c125670205d7b6be999688df85bb7d5ac12b62b4fdc4eadcc2a9a7897028404f697b007603a0ad588c772952d6670ee870771774ad157c0b9cccd4b2192d835606198ea0c65036ae4e406cdc539ff3aa81fa20b7ab58d6f3abdb69cc1f503d593f7025d2035e7f21db76336efc2843a0dc9bd2eb8794718134ee68fc57d4d2bcc18969d08177f442b87433b48540c661940cf9e2462c53efa310c7e47487deab2ae15b1978ef05aa1e14110943f649d82486f710a39854409e74edcaf06b4a92d3580b9cdabf83c6351657698d3d5af7514f382e75d1c912cded577258603fc9ed002e010747cddf7885d34afc9a84d82696c6660cb5ecafb68b564908fc49c4db6a187d037241a26b1141cf20f2e968a53366db0f60b79cd98cf3c897c50b7b9728e6e7100f99e4d5ed2428dbd285516ca6660777a39b4b2617c1be5b0232d60b9c8099f5daedbf190109439c40b46090985200d6c0501313f3fa4d244864575c275faca47aeff32c7b3e3c59392618562a7c2d4b3af85a37a8847f595352024cb63d3a9085c2a502c6a3248f43c5fc828e636cb634b2d393d853ae2dc9605985cf85c060860a90256c7b574c1e01c320687a2bb0b2d51cc2950c485f2ffa5db0ad7aaf753f543de7f86efb775c6bac2989a33757a28836fd27f9347229a0004bd2e546994c69c678fe5717f613f905d945c072004c3a80e0e54215e19ff9972521890d4e705e429f16fc35fe5a15f2e6b75cd719d38f76b087b62e4b5dcdb35f4baa2bab167150bafb6c69e260ca51004bc826d46b77c3f67eaa08497294868e6d91b7b867e4da62052f4f891677256cfbaf19cf32bad99a7da69d8a66537686f89a58d78c7eeaa99cd38009a1a32582bedc5c718e57b19cd405ae659a89909356a07fcef89384d160fa5ae6683cc379642aea4f0c915f72d679bd521399cb16112f2abdede3001400b4a64d2173e153a68631183679b56b8f389ba889784133453a7e892fd3b092f5040870a3cfd6f982990143e7c0882b4ff4c5d049192d36925a25ae4be441aa30dc7e74398b340c45b52c73ed3b0cd640e3cc9fd4be24e7355f386106f65895f1ee850b2a781d1d1d322ca5a3b0fdb78ce1eda048ece94af25437969c99c58c08f1446ca5541e03987a20fd75283e3e116dc4c9222ab7522e4ccf6da14aef49cac9a6a2cd4aba1c54d49e6da4179a66b84e384cd3da53908579b28c11d525ebdc4dc69074cef8a9ecd3aab98f2858769d656b46141c3a4e69a5ed6c0a732c9ec1fce080eaebf537fa5e17236a44ba9c931f555d193e475ffafd20c53ccbab607c1a15fd06742a64691205eb0d00f7f40e4dd8efb279cf09b2522aac0729a631aacb92d5cfa2ce6bb07385b981890b5916755d5cc3a51c8c36bd2987068cc24fcf73840895469bbb9aff1059601f771afedf0a48d5921103920515b27d7e607951982feba197df8c61600feb3622b9eea13a4db4068728cb98cca76cfae197f6258758490bf41673ee29acd91fd296ec863c646e0ca6a0f0e9de146c663ba13d962964d7c32804fd12a14c1ca7212ad48bdfab469c6570dca562220ecbe7b6b163ed4c9361c5c10bed5c92861b8786ada20a99245d282e4454187ec02adfe354e30647cb10661c85168f7958e3ce69ab48c9455214707a63c9b1167f0845a6bfcce2a96cd53eab430f13cd527f1666290719a47c517cfa22fec2e9916af8aa93c78e567993d7fb8ee60fc4b903b8c67a3658302c5e5f35250c30427e4c055b6c54705bc599861f80b7200d361965ff98c88cc698a2615cadeac4bdfd3d613377cea52d2bbcb7e6b78ac31d4b2c33eaf0b2ed40b963e3cb25c7dfea3ebfe7b4aff2aaaaf184dc80ab649a108e2c830ce7eaea58a263392aa9cd13d7f7bd607dc7c804b19dfa41b3e5a5155201a87311e22062c93896e70f3a5c4b03521300b61cc311ebd5beb9838d0ed207c6bfc99e4392508e95804b10b36024f32e1fe1138e9ee7773f797b2bc6be7416f4e9691ef4c2a8d06af6c8b84bd1e6fd1ba3d3183475ef6c139ccf8dcf37671fbb96a2ab5e0e042f7c4728cf30bcc1a0de28a5024276ceaa194b4926e7f6a97b78bac36e47f832d56a96cd266434d37bcf2c2f57877717d91b1854972f832354acc207a2ee8caace7504e0e6197dd7e64a01c4c67bb2de8acc0cccc6c6bff0b0cbfe345542c5a795dfa48cc0990ab5702574d36494bc44c20f5b324f7c984d986cc8cb40cb2550076d96a069b6688d22171beed2dc5b6ff3ede8fff4c4a9de6d3817357a7ca7d24d87300b4545ebbac8cf7f09ec637a4f4d6bd07673709b6c363a75ccef585610c5f15de7851b5ab53e02a757bfc3caeb9a9a8996beffdc0cfd1201b6cd99cb035584e51a6c15a5d2e17d2f8aa6b41e26809392fac6caed1e02a53dcea8a413203608780dab33315a76eba24d540e4c5b9790420834bc8d4e47bc65ae52a54c0ff308427a8d7aff746aa6589d17514e40fee5d0b3533cf4ad2c5f9d96db9f50bd69ed8c92b860e199a35cf268c66ed13516a3b4b024f62d4b2a656067eece95575bdb4907efc488a9821bc3a9c81dd11b2128b7a01aa7a9ce6e73de3b4e9beced70206f91575baddbcbe5722337953c8016a0f4b62120d776c43b7d1a879b692107954f45acdf8967dcaa994aad4922d4fe093e16c2d0090906f5036af99e50bb09b04e9c9b3b5085abf621297ce203010249cede92e9b66b446b86b43eaaae228dfdd3b4408c12b404bb727f7e969e7da04fc59900112bf8d38af0416dc616e75f167aa1352215f07115a6f4eb6bb5fff6f5c2fc9ab906392036b44090e65fdaf017dc53bc94e0807d679d793df18cc44e6c846d414cef1569530f7692daf91eaaf4ae89fe2522f2c9cf33b6ca508ebcd006bc1a61f0c800553aff9dc7d57200b25ecb83e1e0b8cd29520b63aa649d3f71a62570eee56e03223ddf31f0c04fa686b7f6dd054e7a259d9ba335c2c5b2c508897506c0db7f01878dec1411c33f0af61b81dbcf9ff8bdc0c50044963a79f3ee1462150c6bd03a32dbdfef8d72f0b8b3a395ffb0cc85792e7bc867feb5e312cb64e29e193388e9f173c162f4a1320a6f99ea3795fb77d982605959909a1aa11076fcc779ea6b80ec1bf0edfc2569ec04d15a0bdeebccf3c75393dca5e81663532f8ced12d08e4c2ae6e2954d427c7bf053dc4718f56f453bc88d74045bd2f9747aae9b5298a0de927f1d6b1308f4e1483487f083e71ed09298deb52bb10079b13def7453eb432498069edb5ade70c5c54913684d934a3febf78753ac13300a91f467ff3f6e2f00898f015d08f7739047b321b3eaee5ad8aa7adbf7833f014d8c576a491af9fca6843b327ed513821cb3951b2e67a275225d7af6b382e2f955adaacba5d1fdea2223202dee132b91d5cf381b51da94145255f584a70c5e8d11e06a44afa6599bf3ed0cb61703eba254333af53afac60e54cf6397f9f7302249ab644f0b576c713b15007be1f4f9bb213660bca8a70251472b86669d361ef968f542e81ddbe8f4d2e9cabe8d7bf6a31f14a2cc272963553a424c105e7750437ec5bf316e30ce60b4b0c27ccc1eb27e60f6472fef27654da49905ff9c01b28695310ecd8701aedff25a83da4b7c41995f902bdf249769dcb53a3efa894710dd66ba8745ae2253cc6b75a038183a0bee21226d48239320efad6727093e4f94bbc2fdcc216200d903c32bb9f16dd17d5dac423ae0696f3decc576b8f1fdce63d0532370af7d1e2fa2ca5c5d17bd88f5e3abb4792dac8689ca13752f83d753b06b037bf5a80a3748983790352775685b0414c9d74849fd217e388f904278ddb6b0abdda941b61579c796e2bb77a9bc363b18642c401faa502a31011544111b6eedaa369976c814773d83220a75f31026d6ad0b8b4298ea6062234db232bc435e096e84f740e55bb14d46ae04af0500aa5bb218aff6c76aa8a8e3140a1b0d6638538fd7f30fa8d992e53abf8af2fbc16b9e8a668c1aac72cea1a746ee5f7f3392a4ec8f1d19f2f426b6069b1cd347cbc38bceba96ce5da49198083403143c740c04639cd1089abb34fe812d85921c47437604f684bca44a1eaa965c0a6e1c1fd1f70ee932af3455b36184cc15934cdb3f28959d37d8fc10696f8ec1e4b0c3d1b9ff74a01b796d1bb68954a3768c8bcec741b3b69da892f8922142b16b2cabb469a9906b34216243fac80374c10e178c5fd36440f8d7a8588a9c2510d86ffa8cb68ce8c330d2111c94724e522f04573dad43bce252eb505d29ca9379a6b281519d38b7174f3ae8f185544f3003c936a7e6b23ca97a313aac6a061caa45fda73522f3061767bb4e33dbe4bde390eb0f07225a8aef939cb6ab2ada10c02527281abad394cd4ea9f59467a08b72047cdb75d7b2b98e5b4542554a60f953ac7a4b980f42518eec05ff2c044549cab0cf33eef36dfbabcbc0300009d898862d2194cfcdd9a713c30bbe52291105193656ea5eb830873ac956469d31689cc3c69edb5cb9a6e31ce3e6fb50ddd4e52ef9fdeacfc0db21e1e83e0d8d0a64f17cacb4dc208a893e7fd8ffa86cfc554dfba3d9fd281115eccb4b9d909f2fbf3fbb66bedd7b5db3f6d4f076f5d8fb54f8832896f8ef6f624162f1dd589be7a8e87dd5065708a8b0bfb18a5c2299f5605ac8a11c1add55b2018e6099380a70bee3e0727ca6ec58928fe6eb3147b47401e8d822eebade713b58335787669e5e0de5d328a1067df4cd9124665bb02ee8adfd1b3618374ef167df1f0fe79456f78aee3da4c1bf397e4637b0cf41a0f4a2910efd02b17bf5f3c15b0084b36fa7d4e85a53e5be366b428244eeba7499c3e54397227928e2ff6e583f332d6f7e8cf4d058f379b58a7d03a4bfa454bb4b6d543804b8970e6a9fe8886179eb418a8ce9e509e8433571f7d32378f2e983fa418c8c91760ec9fb20968e7fc23b7c4ac71693b2576ac0f8ce2020ff1e7a7ff24301b48b544fb29a1ca4f2502daded865e488a16dd33ec67b2eee3025cdc5ef90f253c4b5e0a61d51e495b675c5a1d55b4ba3812c5f44cd08487e61d36b0c2dc32d27333a5ee8a0906bfbcd388bd9389d1509912c0471c7b706a5aff880569a3fb11ac5f14d780deb4c1b1afe30fb6b8daf87b27a4ceb869d587a97f2f5af8d819aa47bbf207db68a6ecbbefb1e109ed0bfbbf3b54fba9e79de8fad9c3bcd3e74b8b92ccea3ff5c558c6cd72d78a711fc39df603bd4aa1439dd302258edd2204e52d7f435c6f552b612fbc321bea971195cd4d8bb033e2a779e239164d7eea6d8fd233b0b9b776246564cfcf44b31a83031a2413bf98a398c9f93da243cef9ce73d81bade8ad551fb0ffa75bc874c11d23ac9d7752f22a0f54c3870f3314a83e64332db810da1ebb288e10c4eb9be9ec037317b8f813e68160a887da3f5c0389510a0734b69ef275e19973b169d340610cf2112e9964cc0566b9b690c3feb36c8526491d3a563f0bead2abbcf0665e048aa3f929351b2f89876580633a403250ae3b5244c8c0e996bf888938dfc8920348d88e272e6eadc7c0387ca1dae228bd620ce3975d43b58758d9412d304a227245587065f58c4573ba2557f1d8333ba007709b1239d682f03405b22135757178fb701bbde81d2f8faaa7666c025d8a8bb426dc4b8e61aed79b3b3d3a9b01ee9142772d869677ede166e7a8be8ab84cdd6946b1478ce77ba307213971cfb24c86c344310f279e38d22254bf4caf83c02e715cb0550e615dc9f8dd2400fa749e3527493c15fb454c158e4c0603ae6e962b7890058ec7c10f0618ee274a15bca6ca9fe5bc5f9e7797c0950299912be9c58463c07d667d4bffe8aa590ae43db08512b40f3d265026bef2facdd508984e5f6d2ac7ef573397f14ed2e2ccdcbe5796e60ae64d173814906d1da5a5bfe8a2a4c5d6bb0b3315b878b4877d0c045f6e6cfa0dfc1ea4de7abe26f2b2d8c93299ed1d83f1b7853c756bfa346cd53b008fec169883983fe0f2405777dd85e17b2e4e8b23432c0dc4c386d67b6597184d0b4b95877362304638484cc0951400f66ee8391dd44417c58b3d46a8345a8049fcd70f7b5f4a6f912e2b18760947c74ef2b732b342878d7e7cc99902de87db36469555fbbfe76189f108d6ab31f4727fe4e22d075afaf6cc726ab17a5e1b4ab6c8f29a459da3c4266b5ad8ff55906a190f8b19a3bb92a50df49647c03d5d6106ec07e9300038d059a75b54ac31683ef8e5eee946e1c84d016ee1e7800a92c0a3823b62e0417fe86b191951f65abc0c38c1e0e8f1121a04b62a8a720790560f922804b1b7e7eaa497e1bede6e3d0dcf0312dbf221561958fa1e85a8f99e6fc82f919e78c17d1beda16cfef25fb5d00f7c32df9a51eac76000c988ffdf011564aa0e319764b16a5a7c728a470ff70772fb76c9ada26a0ac073fcbfa12501c2454b19e02d928e3939a40bfff76c002533b3849cdf8016728445131e5f1e292b7d3dc06bb3a3cfff6fabae0b7341694a8938c1d2497cd70b76c337c9a312e96c8f736d7625a535e1906eba53d199221ca60202a65be0f7e530aca10e61fa39c7601d65954e5ed4cab94345c6b89c7f8a0de5c61a7945e1564731b6715331d13263b2961a163382f7c4934d847033860e402f3aadb4f3e6cf47a97a2031401da4d2c8de8c80cdad71b97b4deb2075a02282f958ac6772354e67f097ca693778224b80892490015e7d697fb9107f75cea708178ffec93fb1d44e8493bad1d42c918e661219ea819e0200759037a5a585c0fe074fd407536fe58013f42612c41bfc66e16870d7a9c00ee93a3122b253fecbf5de3837641f4a1376af0f053463413c26c29f9a346318565276856b963da30ba6ab8c4c8ef6cfddc432328586d9d9829895835759bcde0851ae0c838a3927ea63fe5ba793fae94da61cab00fc05f3a265a2da1221bb2b66775ed7ba856b41011652d4984991e56249360ddfc997245ac1547a1c16382d42df383a8d1c852643b24895c422712e79c436fdfffece4ed1c50922d4f25296aaf6b204522086d188bee254f8303b60537ead1195ac5dd301286f0042dd68aa05a70e4beb779aa0b61a316f736b72c9ab7ed860a0908a078f4b8a53f2df0abf993f689de4b02b9138ca5047fb0bfc9ba3b92bff033e36fc9553260b008cef3d147c62d1d3944fd1eaff79bc5a922ec2190907bfda1b51c2c7fb867db1f8e13a37b5e3ae0165e93350b958a239ec1f2b78561cff854b975307b5b5dd23b040602a5a36bd79947ee04c7d0e5e30f9c4c79f7b4e6eada98bfc6c357cdf8939213423f1b21ba26cfc2b2756ea3eb992372db0ab8a7c37d8ae96bf3ed6be873c1891550ef741812032e1ae938326c399ee43a3061602dda006f1b6b620bebb6a5752bee77e8acf9921ebf4d4c8af7eb5e937c65697c0664c594e31a62377a25605051996c474ca322ce8e0e6ef8a7988be", 0x2000, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000008ec0)=ANY=[@ANYBLOB="b800000000000000f9620290c688b5e766049708ffffffffffffff0500000000000000060000000000000001000100000000000700000099e90000010000000000000008000000000000002d00000000000000040000000000000003000000000000000200000000000000fbffffff03000000ff0000000000000000", @ANYRES32=r2, @ANYRES32=0x0, @ANYBLOB="020000000008000000000000030000000000000007000000000000001000"], 0x0, 0x0, 0x0}) 1.769183193s ago: executing program 6 (id=2019): r0 = getpid() syz_pidfd_open(r0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000240)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) ioctl$USBDEVFS_CONTROL(r4, 0xc0105500, &(0x7f0000000000)={0x80, 0x6, 0x301, 0x0, 0xe0, 0x101, 0x0}) 179.482992ms ago: executing program 6 (id=2020): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001040)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756a85d88a8", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r5, 0x1, 0xd8, 0x6, @multicast}, 0x14) 173.639312ms ago: executing program 5 (id=2021): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, r3, 0x25, 0x0, @val=@kprobe_multi=@syms={0x1, 0x0, 0x0, 0x0, 0x8000000000000001}}, 0x30) syz_emit_ethernet(0x42, &(0x7f00000004c0)=ANY=[], 0x0) 146.107125ms ago: executing program 3 (id=2022): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xb, 0xb}, {0xa, 0xb}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x9}, @TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4010865}, 0x4008000) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r7, 0x0, 0x0, 0x40, &(0x7f00000001c0)={0x11, 0x88a8, r6, 0x1, 0xd9, 0x6, @random="98c8ca7122df"}, 0x14) 98.075189ms ago: executing program 2 (id=2023): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000800)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000380), 0x12) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x3804402, &(0x7f0000000380)={[{@mblk_io_submit}, {@quota}, {@resuid}, {@oldalloc}, {@discard}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@nolazytime}, {@nodioread_nolock}, {@nomblk_io_submit}, {@nodelalloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x400}}]}, 0x1, 0x55f, &(0x7f0000000c80)="$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") 97.801129ms ago: executing program 5 (id=2024): syz_usb_connect(0x0, 0x24, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c636865636b0000656c617865642c7379735f696d6d757461626c652c756e695f786c6174653d312c756e695f786c6174653d302c73686f72746e616d653d6d697865642c757466383d302c6e6f6e756d7461696c3d302c73686f72746e616d653d77696e39352c73686f72746e616d653d6c6f7765722c73686f72746e616d653d77696e6e742c756e695f786c6174653d312c74696df2ce155739edf8763d3078303030303030303030303030303166622c757466383d312c756e695f786c6174653d302c73686f72746e616d653d77696e39352c00"], 0x6, 0x2a6, &(0x7f0000000440)="$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") ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 97.29619ms ago: executing program 2 (id=2025): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@newqdisc={0x5c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x1ff}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xe, 0x8, 0xfffa, 0x7f, 0x2, 0xdaf, 0x7fffffff}}, {0x4}}]}]}, 0x5c}}, 0x0) 45.135255ms ago: executing program 2 (id=2026): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x88e, &(0x7f0000000480)={[{@errors_remount}, {@mblk_io_submit}, {@inlinecrypt}, {@test_dummy_encryption_v1}, {@barrier}, {@nolazytime}, {@usrquota}]}, 0x3, 0x445, &(0x7f0000000800)="$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") chdir(&(0x7f0000000000)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000040)=""/49, 0x31) getdents64(r0, 0xfffffffffffffffe, 0x29) 44.831895ms ago: executing program 3 (id=2027): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000f2303920422c021240850102030109022400010000100009040c0202c17f0c00090502020002020000090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000c80)={0x34, &(0x7f0000000480)={0x40, 0xb, 0x1, "e4"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000001300)={0x44, &(0x7f0000001100)={0x40, 0x13, 0x4, "551d4c3f"}, 0x0, 0x0, &(0x7f0000000c40)={0x20, 0x80, 0x1c, {0xfb73, 0x8, 0x4, 0x40, 0x10, 0xaa, 0x7, 0x9, 0xff, 0x10, 0x7, 0x9}}, 0x0, &(0x7f0000001240)={0x20, 0x83, 0x2}, 0x0, 0x0}) 32.775256ms ago: executing program 6 (id=2028): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd28, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x2, 0x2, 0x3, 0x100000a, 0x8}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x0) 0s ago: executing program 2 (id=2029): r0 = socket(0x10, 0x3, 0x0) setsockopt$MRT6_ASSERT(r0, 0x29, 0xcf, &(0x7f0000000080)=0x1, 0x4) socket$inet(0x2, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002c00)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300), 0x4) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000004e80)=@setlink={0x50, 0x13, 0x1, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2006, 0x300}, [@IFLA_IFNAME={0x14, 0x3, 'bridge0\x00'}, @IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @multicast2}}]}]}]}, 0x50}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$EVIOCSFF(r2, 0x40304580, &(0x7f0000000b40)={0x56, 0x0, 0x4007, {0x0, 0x1}, {0x46, 0x400}, @rumble={0xdd, 0x5}}) write$char_usb(r2, &(0x7f0000000040)="e2", 0x2250) kernel console output (not intermixed with test programs): m 0 to 4096 [ 335.594679][ T2886] EXT4-fs (loop4): Journaled quota options ignored when QUOTA feature is enabled [ 335.608084][ T384] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 335.649109][ T2886] EXT4-fs (loop4): dax option not supported [ 335.954073][ T384] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 338.775313][ T1000] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 346.286461][ T1000] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 346.327144][ T30] audit: type=1400 audit(1760978861.523:185): avc: denied { write } for pid=2938 comm="syz.3.679" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 346.399817][ T30] audit: type=1400 audit(1760978861.563:186): avc: denied { nlmsg_write } for pid=2938 comm="syz.3.679" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 346.967404][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 346.975137][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 350.782194][ T1000] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 350.792860][ T1206] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 352.270986][ T26] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 352.330526][ T2968] loop2: detected capacity change from 0 to 4096 [ 352.418708][ T2968] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 353.110832][ T2968] EXT4-fs (loop2): dax option not supported [ 362.281465][ T30] audit: type=1107 audit(1760978876.343:187): pid=3007 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 363.450613][ T3033] loop0: detected capacity change from 0 to 4096 [ 365.231001][ T3033] EXT4-fs (loop0): Journaled quota options ignored when QUOTA feature is enabled [ 365.247344][ T30] audit: type=1107 audit(1760978878.833:188): pid=3028 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 365.266190][ T3033] EXT4-fs (loop0): dax option not supported [ 368.505536][ T384] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 368.658185][ T3057] loop4: detected capacity change from 0 to 4096 [ 369.308849][ T3057] EXT4-fs (loop4): Journaled quota options ignored when QUOTA feature is enabled [ 369.327496][ T3057] EXT4-fs (loop4): dax option not supported [ 370.999102][ T384] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 377.069003][ T384] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 378.047271][ T30] audit: type=1107 audit(1760978893.243:189): pid=3110 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 378.062920][ T456] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 378.082032][ T456] hid-generic 0000:0000:0000.0019: hidraw0: HID v0.00 Device [syz1] on syz0 [ 378.517785][ T415] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 378.614235][ T3120] fido_id[3120]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 379.265212][ T2831] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 379.330919][ T415] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 381.165351][ T2831] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 382.307815][ T30] audit: type=1107 audit(1760978897.163:190): pid=3135 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 382.346428][ T30] audit: type=1107 audit(1760978897.163:191): pid=3136 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 385.536130][ T56] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 389.148317][ T56] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 395.290753][ T2831] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 397.491498][ T30] audit: type=1107 audit(1760978910.743:192): pid=3203 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 401.120002][ T56] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 401.132674][ T384] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 404.852655][ T384] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 407.386513][ T30] audit: type=1107 audit(1760978920.323:193): pid=3244 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 407.489899][ T384] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 407.769375][ T384] hid-generic 0000:0000:0000.001A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 408.136732][ T3261] fido_id[3261]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 412.311156][ T56] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 412.338194][ T384] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 416.123786][ T2831] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 416.518559][ T56] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 425.997857][ T384] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 426.226557][ T56] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 426.607449][ T384] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 426.905394][ T2831] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 426.914159][ T56] hid-generic 0000:0000:0000.001B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 427.022338][ T3361] fido_id[3361]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 427.443512][ T395] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 428.425028][ T2831] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 429.049629][ T395] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 431.414594][ T30] audit: type=1107 audit(1760978946.533:194): pid=3408 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 431.439768][ T415] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 431.562775][ T415] hid-generic 0000:0000:0000.001C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 432.438695][ T415] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 432.449797][ T1000] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 432.463860][ T415] hid-generic 0000:0000:0000.001D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 434.648481][ T1000] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 434.752115][ T456] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 434.765979][ T3434] fido_id[3434]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 434.838638][ T416] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 440.592311][ T30] audit: type=1107 audit(1760978955.133:195): pid=3461 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 444.247349][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 445.061397][ T456] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 445.267012][ T1000] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 445.276720][ T1000] hid-generic 0000:0000:0000.001E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 445.350614][ T30] audit: type=1107 audit(1760978960.463:196): pid=3477 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 447.884173][ T395] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 447.955683][ T3503] netlink: 44 bytes leftover after parsing attributes in process `syz.2.820'. [ 455.443504][ T3537] loop4: detected capacity change from 0 to 4096 [ 455.461302][ T3537] EXT4-fs (loop4): Journaled quota options ignored when QUOTA feature is enabled [ 456.517599][ T2831] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 456.518711][ T3537] EXT4-fs (loop4): dax option not supported [ 457.036308][ T1000] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 457.046438][ T1000] hid-generic 0000:0000:0000.001F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 457.062341][ T30] audit: type=1107 audit(1760978971.953:197): pid=3549 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 457.288366][ T1000] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 460.591479][ T3567] loop4: detected capacity change from 0 to 512 [ 464.727353][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 465.232490][ T3597] netlink: 12 bytes leftover after parsing attributes in process `syz.1.841'. [ 466.161575][ T30] audit: type=1107 audit(1760978980.573:198): pid=3592 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 470.799057][ T30] audit: type=1107 audit(1760978981.643:199): pid=3601 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 471.244331][ T3616] netlink: 28 bytes leftover after parsing attributes in process `syz.1.847'. [ 475.587882][ T3649] netlink: 8 bytes leftover after parsing attributes in process `syz.1.858'. [ 475.812586][ T2831] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 475.827596][ T30] audit: type=1107 audit(1760978990.973:200): pid=3644 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 476.081570][ T2831] hid-generic 0000:0000:0000.0020: hidraw0: HID v0.00 Device [syz1] on syz0 [ 476.664231][ T3657] fido_id[3657]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 480.505656][ T56] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 480.622968][ T30] audit: type=1107 audit(1760978994.813:201): pid=3678 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 482.542811][ T30] audit: type=1107 audit(1760978996.813:202): pid=3690 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 482.559843][ T56] hid-generic 0000:0000:0000.0021: hidraw0: HID v0.00 Device [syz1] on syz0 [ 483.168219][ T3695] netlink: 12 bytes leftover after parsing attributes in process `syz.2.863'. [ 483.561188][ T3702] netlink: 12 bytes leftover after parsing attributes in process `syz.1.869'. [ 483.613536][ T3704] fido_id[3704]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 483.649604][ T3708] loop4: detected capacity change from 0 to 4096 [ 485.879976][ T3708] EXT4-fs (loop4): Journaled quota options ignored when QUOTA feature is enabled [ 485.903526][ T3708] EXT4-fs (loop4): dax option not supported [ 486.240418][ T3721] loop4: detected capacity change from 0 to 512 [ 489.141814][ T3731] loop4: detected capacity change from 0 to 4096 [ 489.249635][ T3731] EXT4-fs (loop4): Journaled quota options ignored when QUOTA feature is enabled [ 489.587353][ T39] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 489.598781][ T3731] EXT4-fs (loop4): dax option not supported [ 489.867417][ T56] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 489.894145][ T39] hid-generic 0000:0000:0000.0022: hidraw0: HID v0.00 Device [syz1] on syz0 [ 490.035187][ T3740] loop4: detected capacity change from 0 to 512 [ 491.321547][ T39] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 491.336650][ T3750] netlink: 8 bytes leftover after parsing attributes in process `syz.4.883'. [ 492.168566][ T3738] fido_id[3738]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 492.332464][ T3759] netlink: 'syz.0.886': attribute type 1 has an invalid length. [ 492.351044][ T3759] netlink: 8 bytes leftover after parsing attributes in process `syz.0.886'. [ 492.498951][ T39] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 492.817483][ T39] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 496.156229][ T30] audit: type=1107 audit(1760979011.323:203): pid=3773 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 496.907748][ T1000] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 496.921840][ T1000] hid-generic 0000:0000:0000.0023: hidraw0: HID v0.00 Device [syz1] on syz0 [ 497.053404][ T3784] netlink: 'syz.4.889': attribute type 27 has an invalid length. [ 499.930273][ T3781] fido_id[3781]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 500.061048][ T3801] netlink: 'syz.4.895': attribute type 1 has an invalid length. [ 500.069831][ T3801] netlink: 8 bytes leftover after parsing attributes in process `syz.4.895'. [ 500.202672][ T3802] netlink: 28 bytes leftover after parsing attributes in process `syz.0.894'. [ 504.014525][ T3819] loop3: detected capacity change from 0 to 4096 [ 504.299243][ T3819] EXT4-fs (loop3): Journaled quota options ignored when QUOTA feature is enabled [ 504.439108][ T3819] EXT4-fs (loop3): dax option not supported [ 505.417690][ T3834] loop3: detected capacity change from 0 to 512 [ 508.671813][ T30] audit: type=1107 audit(1760979022.963:204): pid=3845 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 513.013284][ T3886] netlink: 'syz.1.917': attribute type 1 has an invalid length. [ 513.021340][ T3886] netlink: 8 bytes leftover after parsing attributes in process `syz.1.917'. [ 527.243635][ T3949] netlink: 28 bytes leftover after parsing attributes in process `syz.3.930'. [ 529.727570][ T1206] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 531.297052][ T1206] hid-generic 0000:0000:0000.0024: hidraw0: HID v0.00 Device [syz1] on syz0 [ 535.543394][ T3988] fido_id[3988]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 537.732456][ T3993] netlink: 28 bytes leftover after parsing attributes in process `syz.4.942'. [ 543.522718][ T30] audit: type=1107 audit(1760979053.893:205): pid=4000 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 543.526647][ T1000] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 543.966406][ T4018] netlink: 28 bytes leftover after parsing attributes in process `syz.2.948'. [ 544.748891][ T1000] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 546.515269][ T30] audit: type=1107 audit(1760979060.543:206): pid=4033 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 547.737416][ T30] audit: type=1107 audit(1760979062.923:207): pid=4050 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 552.164134][ T415] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 553.768286][ T39] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 555.020282][ T30] audit: type=1107 audit(1760979069.283:208): pid=4091 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 555.035130][ T415] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 555.063968][ T415] hid-generic 0000:0000:0000.0025: hidraw0: HID v0.00 Device [syz1] on syz0 [ 556.937655][ T4111] fido_id[4111]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 569.364170][ T26] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 570.407565][ T1206] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 577.367313][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 587.607298][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 596.736894][ T26] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 596.855693][ T4333] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1027'. [ 598.950185][ T1206] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 602.967286][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 603.310474][ T4371] loop2: detected capacity change from 0 to 4096 [ 603.338679][ T4371] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 603.355294][ T4371] EXT4-fs (loop2): dax option not supported [ 607.143891][ T4389] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1042'. [ 607.856325][ T1566] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 607.891010][ T1566] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 608.087292][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 609.304256][ T456] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 611.927306][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 620.247282][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 620.260571][ T26] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 620.401845][ T4463] loop2: detected capacity change from 0 to 4096 [ 620.418797][ T4463] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 620.455327][ T4463] EXT4-fs (loop2): dax option not supported [ 620.631389][ T1206] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 621.049197][ T4476] loop2: detected capacity change from 0 to 512 [ 621.821784][ T1206] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 621.857610][ T1206] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 624.405037][ T30] audit: type=1107 audit(1760979138.883:209): pid=4490 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 624.714991][ T4502] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=27731 sclass=netlink_audit_socket pid=4502 comm=syz.2.1067 [ 624.981931][ T759] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 625.025187][ T759] hid-generic 0000:0000:0000.0026: hidraw0: HID v0.00 Device [syz1] on syz0 [ 636.247273][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 651.861063][ T456] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 655.373892][ T395] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 661.339511][ T384] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 661.374313][ T384] hid-generic 0000:0000:0000.0027: hidraw0: HID v0.00 Device [syz1] on syz0 [ 668.253764][ T4657] fido_id[4657]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 669.527731][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 670.011289][ T30] audit: type=1400 audit(1760979185.213:210): avc: denied { create } for pid=4671 comm="syz.1.1109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 670.043910][ T30] audit: type=1400 audit(1760979185.243:211): avc: denied { write } for pid=4674 comm="syz.4.1110" laddr=172.20.20.10 lport=250 faddr=172.20.20.187 fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 670.157985][ T30] audit: type=1400 audit(1760979185.333:212): avc: denied { ioctl } for pid=4677 comm="syz.2.1113" path="socket:[27510]" dev="sockfs" ino=27510 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 670.196173][ T30] audit: type=1400 audit(1760979185.393:213): avc: denied { ioctl } for pid=4686 comm="syz.1.1115" path="socket:[27735]" dev="sockfs" ino=27735 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 670.307723][ T4694] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1119'. [ 670.343727][ T4694] tipc: Invalid UDP bearer configuration [ 670.343759][ T4694] tipc: Enabling of bearer rejected, failed to enable media [ 670.391324][ T30] audit: type=1400 audit(1760979185.593:214): avc: denied { read write } for pid=4701 comm="syz.2.1122" name="vhost-vsock" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 670.451366][ T4703] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96 [ 670.465062][ T4716] x_tables: unsorted entry at hook 1 [ 670.510688][ T30] audit: type=1400 audit(1760979185.593:215): avc: denied { write } for pid=4704 comm="syz.4.1124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 670.579417][ T30] audit: type=1400 audit(1760979185.623:216): avc: denied { open } for pid=4701 comm="syz.2.1122" path="/dev/vhost-vsock" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 670.656606][ T30] audit: type=1400 audit(1760979185.633:217): avc: denied { watch } for pid=4701 comm="syz.2.1122" path="/229/file0" dev="tmpfs" ino=1237 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 670.716384][ T30] audit: type=1400 audit(1760979185.653:218): avc: denied { ioctl } for pid=4701 comm="syz.2.1122" path="socket:[27776]" dev="sockfs" ino=27776 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 670.753400][ T30] audit: type=1400 audit(1760979185.653:219): avc: denied { write } for pid=4701 comm="syz.2.1122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 670.816305][ T4743] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1139'. [ 670.951768][ T4757] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 671.399938][ T4763] kvm [4762]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x0 [ 671.428346][ T4763] kvm [4762]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x0 [ 671.471086][ T4763] kvm [4762]: vcpu0, guest rIP: 0x18e ignored wrmsr: 0x11e data 0x0 [ 671.684232][ T4785] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1156'. [ 671.778415][ T4793] tipc: Started in network mode [ 671.783502][ T4793] tipc: Node identity _id00000, cluster identity 4711 [ 671.790721][ T4793] tipc: Enabling of bearer rejected, failed to enable media [ 671.849200][ T4795] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 671.869407][ T4795] pit: kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 671.878595][ T4795] pit: kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 671.887030][ T4795] pit: kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 671.895965][ T4795] pit: kvm: requested 85485 ns i8254 timer period limited to 200000 ns [ 671.916689][ T4795] pit: kvm: requested 93028 ns i8254 timer period limited to 200000 ns [ 671.938533][ T4795] pit: kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 671.947810][ T4795] pit: kvm: requested 10057 ns i8254 timer period limited to 200000 ns [ 671.956972][ T4795] pit: kvm: requested 155047 ns i8254 timer period limited to 200000 ns [ 671.973084][ T4795] pit: kvm: requested 160914 ns i8254 timer period limited to 200000 ns [ 672.058262][ T4805] xt_hashlimit: size too large, truncated to 1048576 [ 672.444861][ T4832] syz.3.1176 (4832) used greatest stack depth: 20800 bytes left [ 672.487257][ T6] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 672.551286][ T4844] tipc: Started in network mode [ 672.556418][ T4844] tipc: Node identity 76a865cd41bc, cluster identity 4711 [ 672.564188][ T4844] tipc: Enabled bearer , priority 0 [ 672.572745][ T4844] device syzkaller0 entered promiscuous mode [ 672.582674][ T4844] sch_tbf: burst 12 is lower than device syzkaller0 mtu (1514) ! [ 672.592409][ T4844] tipc: Resetting bearer [ 672.600046][ T4843] tipc: Resetting bearer [ 672.606836][ T4843] tipc: Disabling bearer [ 672.657214][ T4649] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 672.777220][ T336] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 672.847396][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 672.859826][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 672.870497][ T6] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 672.883446][ T6] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 672.892646][ T6] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 672.903197][ T6] usb 2-1: config 0 descriptor?? [ 672.977388][ T384] usb 4-1: new low-speed USB device number 2 using dummy_hcd [ 673.027304][ T4649] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 673.037672][ T4649] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 673.048818][ T4649] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 673.062391][ T4649] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 673.071753][ T4649] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 673.118629][ T4649] usb 1-1: invalid MIDI out EP 0 [ 673.123898][ T4649] snd-usb-audio: probe of 1-1:27.0 failed with error -22 [ 673.147313][ T336] usb 5-1: config 0 has no interfaces? [ 673.327334][ T336] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 673.336429][ T336] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 673.344640][ T336] usb 5-1: Product: syz [ 673.349040][ T384] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 673.357275][ T336] usb 5-1: Manufacturer: syz [ 673.361998][ T336] usb 5-1: SerialNumber: syz [ 673.367959][ T384] usb 4-1: config 0 has no interface number 0 [ 673.368506][ T6] plantronics 0003:047F:FFFF.0028: unknown main item tag 0xd [ 673.374077][ T384] usb 4-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 673.374106][ T384] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 673.384067][ T4825] xt_hashlimit: size too large, truncated to 1048576 [ 673.393634][ T336] usb 5-1: config 0 descriptor?? [ 673.404117][ T6] plantronics 0003:047F:FFFF.0028: No inputs registered, leaving [ 673.422978][ T384] usb 4-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 673.431623][ T6] plantronics 0003:047F:FFFF.0028: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 673.433842][ T384] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 673.462844][ T384] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 673.473017][ T384] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 673.482700][ T384] usb 4-1: config 0 descriptor?? [ 673.507302][ T4850] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 673.514728][ T4850] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 673.661941][ T384] usb 5-1: USB disconnect, device number 2 [ 673.731810][ T4649] usb 4-1: USB disconnect, device number 2 [ 674.447200][ T4649] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 674.478821][ T4879] mmap: syz.3.1196 (4879) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 674.687258][ T4649] usb 5-1: Using ep0 maxpacket: 16 [ 674.807293][ T4649] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 674.815749][ T4649] usb 5-1: config 0 has no interface number 0 [ 674.821901][ T4649] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 674.832960][ T4649] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 674.847254][ T395] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 674.967338][ T4649] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 674.977088][ T4649] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 674.985410][ T4649] usb 5-1: Product: syz [ 674.989759][ T4649] usb 5-1: SerialNumber: syz [ 674.995698][ T4649] usb 5-1: config 0 descriptor?? [ 675.227242][ T395] usb 4-1: config 0 has no interfaces? [ 675.257017][ T4884] device syzkaller0 entered promiscuous mode [ 675.281106][ T1566] usb 1-1: USB disconnect, device number 2 [ 675.281639][ T4649] usb 5-1: USB disconnect, device number 3 [ 675.397834][ T395] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 675.410445][ T4904] loop2: detected capacity change from 0 to 1024 [ 675.412365][ T395] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 675.425539][ T395] usb 4-1: Product: syz [ 675.430038][ T395] usb 4-1: Manufacturer: syz [ 675.434758][ T395] usb 4-1: SerialNumber: syz [ 675.440351][ T395] usb 4-1: config 0 descriptor?? [ 675.451452][ T4908] loop0: detected capacity change from 0 to 512 [ 675.462317][ T4908] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 675.476266][ T4904] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 675.487827][ T30] kauditd_printk_skb: 51 callbacks suppressed [ 675.487841][ T30] audit: type=1400 audit(1760979190.693:271): avc: denied { mount } for pid=4903 comm="syz.2.1208" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 675.521253][ T4908] EXT4-fs error (device loop0): ext4_do_update_inode:5235: inode #16: comm syz.0.1210: corrupted inode contents [ 675.521795][ T30] audit: type=1400 audit(1760979190.723:272): avc: denied { ioctl } for pid=4903 comm="syz.2.1208" path="/dev/vhost-vsock" dev="devtmpfs" ino=264 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 675.562430][ T4908] EXT4-fs (loop0): Remounting filesystem read-only [ 675.569278][ T4908] EXT4-fs error (device loop0): ext4_dirty_inode:6071: inode #16: comm syz.0.1210: mark_inode_dirty error [ 675.570015][ T30] audit: type=1400 audit(1760979190.733:273): avc: denied { map } for pid=4903 comm="syz.2.1208" path="/244/bus/hugetlb.2MB.usage_in_bytes" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 675.605986][ T6] usb 2-1: reset high-speed USB device number 2 using dummy_hcd [ 675.614381][ T4908] EXT4-fs (loop0): Remounting filesystem read-only [ 675.620279][ T30] audit: type=1400 audit(1760979190.733:274): avc: denied { write } for pid=4903 comm="syz.2.1208" path="/244/bus/hugetlb.2MB.usage_in_bytes" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 675.637351][ T4908] EXT4-fs error (device loop0): ext4_do_update_inode:5235: inode #16: comm syz.0.1210: corrupted inode contents [ 675.657301][ T6] usb 2-1: device reset changed ep0 maxpacket size! [ 675.664907][ T4908] EXT4-fs (loop0): Remounting filesystem read-only [ 675.671723][ T384] usb 2-1: USB disconnect, device number 2 [ 675.674365][ T30] audit: type=1400 audit(1760979190.873:275): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 675.678557][ T4908] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #16: comm syz.0.1210: mark_inode_dirty error [ 675.712594][ T4908] EXT4-fs (loop0): Remounting filesystem read-only [ 675.721918][ T4908] EXT4-fs error (device loop0): ext4_do_update_inode:5235: inode #16: comm syz.0.1210: corrupted inode contents [ 675.729559][ T30] audit: type=1400 audit(1760979190.933:276): avc: denied { setopt } for pid=4878 comm="syz.3.1196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 675.735046][ T4649] usb 4-1: USB disconnect, device number 3 [ 675.757424][ T4908] EXT4-fs (loop0): Remounting filesystem read-only [ 675.767008][ T4908] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 675.787963][ T4908] EXT4-fs (loop0): Remounting filesystem read-only [ 675.794684][ T4908] EXT4-fs error (device loop0): ext4_do_update_inode:5235: inode #16: comm syz.0.1210: corrupted inode contents [ 675.814367][ T4919] loop2: detected capacity change from 0 to 1024 [ 675.822335][ T4908] EXT4-fs (loop0): Remounting filesystem read-only [ 675.830054][ T4908] EXT4-fs error (device loop0): ext4_truncate:4304: inode #16: comm syz.0.1210: mark_inode_dirty error [ 675.842243][ T4908] EXT4-fs (loop0): Remounting filesystem read-only [ 675.848923][ T4908] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 675.858403][ T4908] EXT4-fs (loop0): Remounting filesystem read-only [ 675.865320][ T4908] EXT4-fs (loop0): 1 truncate cleaned up [ 675.871197][ T4908] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,data_err=ignore,. Quota mode: writeback. [ 675.883989][ T384] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 675.884471][ T4908] ext4 filesystem being mounted at /252/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 675.908809][ T30] audit: type=1400 audit(1760979191.113:277): avc: denied { create } for pid=4907 comm="syz.0.1210" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 675.911789][ T4908] EXT4-fs error (device loop0): ext4_get_first_dir_block:3617: inode #12: block 13: comm syz.0.1210: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=2, rec_len=1, size=4096 fake=0 [ 675.937301][ T30] audit: type=1400 audit(1760979191.113:278): avc: denied { write } for pid=4907 comm="syz.0.1210" name="bus" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 675.950303][ T4908] EXT4-fs (loop0): Remounting filesystem read-only [ 675.978899][ T30] audit: type=1400 audit(1760979191.113:279): avc: denied { remove_name } for pid=4907 comm="syz.0.1210" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 676.003407][ T30] audit: type=1400 audit(1760979191.113:280): avc: denied { rename } for pid=4907 comm="syz.0.1210" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 676.027375][ T4908] EXT4-fs error (device loop0): ext4_get_first_dir_block:3619: inode #12: comm syz.0.1210: directory missing '..' [ 676.060692][ T4919] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 676.067545][ T4908] EXT4-fs (loop0): Remounting filesystem read-only [ 676.147233][ T384] usb 2-1: Using ep0 maxpacket: 16 [ 676.149836][ T4928] loop4: detected capacity change from 0 to 128 [ 676.230459][ T4932] loop0: detected capacity change from 0 to 1024 [ 676.244981][ T4932] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 676.265701][ T4932] EXT4-fs (loop0): orphan cleanup on readonly fs [ 676.272469][ T384] usb 2-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 676.284570][ T4932] EXT4-fs error (device loop0): ext4_free_blocks:6218: comm syz.0.1217: Freeing blocks not in datazone - block = 0, count = 4096 [ 676.285436][ T384] usb 2-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 676.307935][ T384] usb 2-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 676.322027][ T384] usb 2-1: config 1 interface 0 has no altsetting 0 [ 676.328885][ T4932] EXT4-fs (loop0): 1 orphan inode deleted [ 676.336014][ T4932] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 678.243337][ T4960] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1222'. [ 678.244266][ T4958] syz.4.1229 (4958) used greatest stack depth: 19296 bytes left [ 678.270770][ T384] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 678.280304][ T384] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 678.289517][ T384] usb 2-1: Product: syz [ 678.293807][ T384] usb 2-1: Manufacturer: syz [ 678.300028][ T4960] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4960 comm=syz.0.1222 [ 678.357346][ T384] usb 2-1: can't set config #1, error -71 [ 678.373813][ T384] usb 2-1: USB disconnect, device number 3 [ 679.067016][ T5000] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 679.147943][ T5013] loop4: detected capacity change from 0 to 256 [ 679.192394][ T5022] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1258'. [ 679.209146][ T5013] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 679.230463][ T5013] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 679.241980][ T5013] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000ff98, chksum : 0x65b64522, utbl_chksum : 0xe619d30d) [ 679.300326][ T5030] kernel read not supported for file /policy (pid: 5030 comm: syz.3.1261) [ 679.329219][ T5033] loop3: detected capacity change from 0 to 256 [ 679.360446][ T5039] loop7: detected capacity change from 0 to 7 [ 679.386185][ T5033] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d) [ 679.423996][ T5044] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 679.621468][ T5066] loop4: detected capacity change from 0 to 512 [ 679.639520][ T5066] EXT4-fs (loop4): Test dummy encryption mode enabled [ 679.654224][ T5066] EXT4-fs (loop4): Test dummy encryption mode enabled [ 679.679237][ T5060] SELinux: ebitmap start bit (24) is not a multiple of the map unit size (64) [ 679.693288][ T5066] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable=0x0000000000000000,minixdf,jqfmt=vfsv1,prjquota,inode_readahead_blks=0x0000000000000100,barrier=0x000000000000000b,errors=remount-ro,auto_da_alloc,test_dummy_encryption,min_batch_time=0x0000. Quota mode: writeback. [ 679.696004][ T5060] SELinux: failed to load policy [ 679.755356][ T5066] EXT4-fs error (device loop4): ext4_add_entry:2486: inode #2: comm syz.4.1277: Directory hole found for htree leaf block 0 [ 679.771233][ T5066] EXT4-fs (loop4): Remounting filesystem read-only [ 679.785980][ T5082] loop1: detected capacity change from 0 to 512 [ 679.821749][ T5088] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1287'. [ 679.831218][ T5082] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.1284: inode #1: comm syz.1.1284: iget: illegal inode # [ 679.849642][ T5082] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.1284: error while reading EA inode 1 err=-117 [ 679.866132][ T5082] EXT4-fs (loop1): 1 orphan inode deleted [ 679.874222][ T5082] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 679.876904][ T5093] loop4: detected capacity change from 0 to 512 [ 679.923545][ T5093] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #15: comm syz.4.1286: iget: bad i_size value: 38620345925642 [ 679.975921][ T5104] loop1: detected capacity change from 0 to 256 [ 679.985421][ T5104] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xbc8dc3cd, utbl_chksum : 0xe619d30d) [ 679.999759][ T5106] loop0: detected capacity change from 0 to 128 [ 680.032943][ T5093] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.1286: couldn't read orphan inode 15 (err -117) [ 680.124040][ T5093] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 680.149431][ T5106] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 680.152574][ T5117] loop1: detected capacity change from 0 to 1024 [ 680.160797][ T5106] ext4 filesystem being mounted at /268/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 680.239602][ T5122] loop4: detected capacity change from 0 to 512 [ 680.262254][ T5122] FAT-fs (loop4): Directory bread(block 199916) failed [ 680.266071][ T5117] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 680.276744][ T5122] FAT-fs (loop4): Directory bread(block 199917) failed [ 680.286295][ T5128] loop3: detected capacity change from 0 to 128 [ 680.299845][ T5122] FAT-fs (loop4): Directory bread(block 199918) failed [ 680.306898][ T5122] FAT-fs (loop4): Directory bread(block 199919) failed [ 680.314145][ T5122] FAT-fs (loop4): Directory bread(block 199920) failed [ 680.321257][ T5122] FAT-fs (loop4): Directory bread(block 199921) failed [ 680.328468][ T5122] FAT-fs (loop4): Directory bread(block 199922) failed [ 680.335381][ T5122] FAT-fs (loop4): Directory bread(block 199923) failed [ 680.357860][ T5122] FAT-fs (loop4): FAT read failed (blocknr 128) [ 680.535285][ T30] kauditd_printk_skb: 90 callbacks suppressed [ 680.535302][ T30] audit: type=1400 audit(1760979195.733:371): avc: denied { create } for pid=5140 comm="syz.4.1307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 680.572312][ T30] audit: type=1400 audit(1760979195.773:372): avc: denied { connect } for pid=5140 comm="syz.4.1307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 680.603384][ T30] audit: type=1400 audit(1760979195.803:373): avc: denied { ioctl } for pid=5144 comm="syz.3.1309" path="socket:[28662]" dev="sockfs" ino=28662 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 680.914466][ T5149] loop4: detected capacity change from 0 to 512 [ 681.009245][ T283] EXT4-fs error (device loop0): ext4_readdir:223: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 681.107142][ T5149] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 681.135260][ T30] audit: type=1400 audit(1760979195.803:374): avc: denied { write } for pid=5144 comm="syz.3.1309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 681.362584][ T283] EXT4-fs error (device loop0): ext4_readdir:223: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 681.472834][ T5149] EXT4-fs (loop4): mounted filesystem without journal. Opts: quota,barrier=0x0000000000001000,grpjquota=,norecovery,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 681.579595][ T30] audit: type=1400 audit(1760979195.933:375): avc: denied { module_request } for pid=5144 comm="syz.3.1309" kmod="ip6t_" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 681.651384][ T5159] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 681.669396][ T283] EXT4-fs error (device loop0): ext4_empty_dir:3166: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 681.720189][ T5149] ext4 filesystem being mounted at /253/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 681.853051][ T283] EXT4-fs error (device loop0): ext4_readdir:223: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 682.068022][ T30] audit: type=1400 audit(1760979197.273:376): avc: denied { shutdown } for pid=5160 comm="syz.1.1314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 682.138313][ T283] EXT4-fs error (device loop0): ext4_readdir:223: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 682.242465][ T30] audit: type=1400 audit(1760979197.313:377): avc: denied { setattr } for pid=5148 comm="syz.4.1310" path="/253/file1/file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 682.359960][ T283] EXT4-fs error (device loop0): ext4_empty_dir:3166: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 682.497809][ T283] EXT4-fs error (device loop0): ext4_readdir:223: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 682.605236][ T283] EXT4-fs error (device loop0): ext4_readdir:223: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 682.694468][ T283] EXT4-fs error (device loop0): ext4_empty_dir:3166: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 682.805318][ T283] EXT4-fs error (device loop0): ext4_readdir:223: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 683.616840][ T30] audit: type=1400 audit(1760979198.813:378): avc: denied { watch } for pid=5174 comm="syz.3.1320" path="/258/file0" dev="tmpfs" ino=1385 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 683.694299][ T5180] loop3: detected capacity change from 0 to 1024 [ 683.704681][ T5180] EXT4-fs (loop3): Ignoring removed nobh option [ 683.716810][ T5181] loop4: detected capacity change from 0 to 512 [ 683.735677][ T579] tipc: Left network mode [ 683.749724][ T5180] EXT4-fs (loop3): Ignoring removed bh option [ 683.756844][ T5180] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 683.771221][ T5181] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.1316: inode #1: comm syz.4.1316: iget: illegal inode # [ 683.784903][ T5181] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.1316: error while reading EA inode 1 err=-117 [ 683.799119][ T30] audit: type=1326 audit(1760979199.003:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5176 comm="syz.1.1321" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9aabf68fc9 code=0x0 [ 683.815421][ T5181] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2825: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 683.835248][ T5181] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.1316: inode #1: comm syz.4.1316: iget: illegal inode # [ 683.849909][ T5180] EXT4-fs (loop3): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000003,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,dioread_nolock,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 683.873177][ T5181] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.1316: error while reading EA inode 1 err=-117 [ 683.889328][ T30] audit: type=1400 audit(1760979199.073:380): avc: denied { execmem } for pid=5186 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 683.911985][ T5181] EXT4-fs (loop4): 1 orphan inode deleted [ 683.918297][ T5181] EXT4-fs (loop4): mounted filesystem without journal. Opts: minixdf,stripe=0x0000000000000003,norecovery,noinit_itable,max_batch_time=0x0000000000000006,minixdf,usrjquota=,debug_want_extra_isize=0x000000000000005c,errors=continue,dioread_lock,noblock_validity,noquota,,errors=continue. Quota mode: none. [ 684.034329][ T5198] loop4: detected capacity change from 0 to 1024 [ 684.090558][ T5198] EXT4-fs (loop4): mounted filesystem without journal. Opts: barrier,nodioread_nolock,lazytime,barrier,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none. [ 684.117437][ T5198] ext4 filesystem being mounted at /255/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 684.129040][ T5187] bridge0: port 1(bridge_slave_0) entered blocking state [ 684.142429][ T5187] bridge0: port 1(bridge_slave_0) entered disabled state [ 684.167488][ T5187] device bridge_slave_0 entered promiscuous mode [ 684.184057][ T5187] bridge0: port 2(bridge_slave_1) entered blocking state [ 684.191622][ T5187] bridge0: port 2(bridge_slave_1) entered disabled state [ 684.201766][ T5187] device bridge_slave_1 entered promiscuous mode [ 684.258672][ T5213] 9pnet: Insufficient options for proto=fd [ 684.321730][ T5219] capability: warning: `syz.3.1337' uses deprecated v2 capabilities in a way that may be insecure [ 684.423298][ T5187] bridge0: port 2(bridge_slave_1) entered blocking state [ 684.430525][ T5187] bridge0: port 2(bridge_slave_1) entered forwarding state [ 684.437863][ T5187] bridge0: port 1(bridge_slave_0) entered blocking state [ 684.444963][ T5187] bridge0: port 1(bridge_slave_0) entered forwarding state [ 685.320255][ T4650] bridge0: port 1(bridge_slave_0) entered disabled state [ 685.447533][ T4650] bridge0: port 2(bridge_slave_1) entered disabled state [ 685.460611][ T5238] loop3: detected capacity change from 0 to 256 [ 685.487517][ T5238] FAT-fs (loop3): Unrecognized mount option "check" or missing value [ 685.545554][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 685.557527][ T5244] loop1: detected capacity change from 0 to 1024 [ 685.566460][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 685.574116][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 685.583311][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 685.591993][ T332] bridge0: port 1(bridge_slave_0) entered blocking state [ 685.599187][ T332] bridge0: port 1(bridge_slave_0) entered forwarding state [ 685.607250][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 685.625506][ T5238] kvm: emulating exchange as write [ 685.638279][ T5246] loop4: detected capacity change from 0 to 1024 [ 685.646631][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 685.723676][ T332] bridge0: port 2(bridge_slave_1) entered blocking state [ 685.730875][ T332] bridge0: port 2(bridge_slave_1) entered forwarding state [ 685.738548][ T5246] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 685.746957][ T5244] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 685.757327][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 685.766393][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 685.775723][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 685.783996][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 685.819777][ T5246] EXT4-fs (loop4): mounted filesystem without journal. Opts: user_xattr,nojournal_checksum,resuid=0x0000000000000000,user_xattr,grpquota,lazytime,abort,grpquota,nomblk_io_submit,journal_dev=0x0000000000004e3e,inode_readahead_blks=0x0000000000040000,,errors=continue. Quota mode: writeback. [ 685.834433][ T5187] device veth0_vlan entered promiscuous mode [ 685.862776][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 685.880135][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 685.891122][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 685.899589][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 685.907915][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 685.921631][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 685.957199][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 685.969261][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 685.978817][ T5187] device veth1_macvtap entered promiscuous mode [ 686.001514][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 686.001530][ T30] audit: type=1400 audit(1760979201.203:397): avc: denied { read write } for pid=5261 comm="syz.4.1348" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 686.032611][ T30] audit: type=1400 audit(1760979201.213:398): avc: denied { open } for pid=5261 comm="syz.4.1348" path="/dev/raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 686.056558][ T579] device veth1_macvtap left promiscuous mode [ 686.063844][ T579] device veth0_vlan left promiscuous mode [ 686.064105][ T30] audit: type=1400 audit(1760979201.213:399): avc: denied { ioctl } for pid=5261 comm="syz.4.1348" path="/dev/raw-gadget" dev="devtmpfs" ino=254 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 686.095658][ T5264] loop1: detected capacity change from 0 to 16 [ 686.117948][ T5264] erofs: (device loop1): mounted with root inode @ nid 36. [ 686.156910][ T30] audit: type=1400 audit(1760979201.353:400): avc: denied { create } for pid=5265 comm="syz.1.1350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 686.192080][ T30] audit: type=1400 audit(1760979201.353:401): avc: denied { write } for pid=5265 comm="syz.1.1350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 686.213896][ T30] audit: type=1400 audit(1760979201.383:402): avc: denied { setopt } for pid=5267 comm="syz.1.1351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 686.229169][ T5270] loop1: detected capacity change from 0 to 1024 [ 686.242833][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 686.250719][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 686.259153][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 686.268034][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 686.276707][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 686.285218][ T336] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 686.285526][ T5270] EXT4-fs error (device loop1): ext4_ext_check_inode:501: inode #11: comm syz.1.1352: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 686.322176][ T5270] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.1352: couldn't read orphan inode 11 (err -117) [ 686.337869][ T30] audit: type=1400 audit(1760979201.543:403): avc: denied { mounton } for pid=5187 comm="syz-executor" path="/root/syzkaller.G3O22a/syz-tmp" dev="sda1" ino=2047 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 686.373602][ T5270] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 686.385621][ T30] audit: type=1400 audit(1760979201.563:404): avc: denied { mount } for pid=5187 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 686.412807][ T30] audit: type=1400 audit(1760979201.563:405): avc: denied { mount } for pid=5187 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 686.443118][ T30] audit: type=1400 audit(1760979201.563:406): avc: denied { mounton } for pid=5187 comm="syz-executor" path="/root/syzkaller.G3O22a/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 686.561630][ T5284] loop5: detected capacity change from 0 to 2048 [ 686.687331][ T336] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 686.700363][ T336] usb 5-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 686.732156][ T5284] EXT4-fs (loop5): mounted filesystem without journal. Opts: init_itable,acl,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 686.767266][ T5293] loop3: detected capacity change from 0 to 256 [ 686.773036][ T336] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 686.783446][ T336] usb 5-1: config 0 descriptor?? [ 686.837633][ T5293] FAT-fs (loop3): Unrecognized mount option "check" or missing value [ 687.303127][ T5309] 9pnet: Insufficient options for proto=fd [ 687.357244][ T5315] loop1: detected capacity change from 0 to 512 [ 687.380169][ T5315] EXT4-fs (loop1): Ignoring removed bh option [ 687.394712][ T5315] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 687.415921][ T5315] EXT4-fs (loop1): 1 truncate cleaned up [ 687.447785][ T5315] EXT4-fs (loop1): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,bh,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 687.509281][ T5170] usb 5-1: USB disconnect, device number 4 [ 688.143480][ T5357] loop4: detected capacity change from 0 to 16 [ 688.167394][ T5170] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 688.250216][ T5357] erofs: (device loop4): mounted with root inode @ nid 36. [ 688.370966][ T5367] loop4: detected capacity change from 0 to 512 [ 688.387849][ T5367] SELinux: security_context_str_to_sid(unconfined_u) failed for (dev ?, type ?) errno=-22 [ 688.407487][ T5367] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 688.422279][ T5367] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 688.432270][ T5367] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 688.442247][ T5367] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 688.452706][ T5367] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 688.460969][ T5367] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=e040e02d, mo2=0000] [ 688.468979][ T5367] EXT4-fs (loop4): failed to initialize system zone (-117) [ 688.476322][ T5367] EXT4-fs (loop4): mount failed [ 688.505500][ T5375] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1390'. [ 688.697271][ T5170] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 688.710271][ T5170] usb 4-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 688.710929][ T5389] loop1: detected capacity change from 0 to 1024 [ 688.719400][ T5170] usb 4-1: Product: syz [ 688.729562][ T5170] usb 4-1: Manufacturer: syz [ 688.734292][ T5170] usb 4-1: SerialNumber: syz [ 688.742605][ T5170] usb 4-1: config 0 descriptor?? [ 688.758695][ T5389] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 688.766211][ T5389] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 688.779670][ T5389] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 688.788339][ T5389] System zones: 0-1, 3-36 [ 688.794702][ T5389] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 688.795806][ T5392] loop5: detected capacity change from 0 to 512 [ 688.825497][ T5392] EXT4-fs (loop5): error: could not find journal device path: error -2 [ 689.085392][ T5410] 9pnet: Insufficient options for proto=fd [ 689.257286][ T5170] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 689.306050][ T5435] 9pnet: Insufficient options for proto=fd [ 689.547336][ T336] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 689.697230][ T5170] usb 2-1: Using ep0 maxpacket: 8 [ 689.819791][ T5170] usb 2-1: config 0 has an invalid interface number: 52 but max is 0 [ 689.828288][ T5170] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 689.839005][ T5170] usb 2-1: config 0 has no interface number 0 [ 689.845182][ T5170] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 689.856673][ T5170] usb 2-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 689.870143][ T5170] usb 2-1: config 0 interface 52 has no altsetting 0 [ 689.877335][ T5445] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1421'. [ 689.938002][ T336] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 689.948298][ T336] usb 5-1: New USB device found, idVendor=056a, idProduct=0005, bcdDevice= 0.00 [ 689.957366][ T5170] usb 2-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 689.957401][ T5170] usb 2-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 689.957421][ T5170] usb 2-1: Manufacturer: syz [ 689.967312][ T5170] usb 2-1: config 0 descriptor?? [ 689.975158][ T336] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 689.993502][ T336] usb 5-1: config 0 descriptor?? [ 690.027904][ T5170] hub 2-1:0.52: bad descriptor, ignoring hub [ 690.034873][ T5170] hub: probe of 2-1:0.52 failed with error -5 [ 690.317212][ T336] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 690.677309][ T336] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 690.687862][ T336] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 690.699179][ T336] usb 6-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 690.712635][ T336] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 690.721838][ T336] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 690.771671][ T336] usb 6-1: invalid MIDI out EP 0 [ 690.777892][ T336] snd-usb-audio: probe of 6-1:27.0 failed with error -22 [ 690.914781][ T5170] usb 4-1: USB disconnect, device number 4 [ 691.049935][ T5450] xt_hashlimit: size too large, truncated to 1048576 [ 691.052930][ T5461] loop3: detected capacity change from 0 to 512 [ 691.119926][ T5461] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 691.132609][ T5461] ext4 filesystem being mounted at /272/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 691.348501][ T5466] loop3: detected capacity change from 0 to 512 [ 691.377615][ T5466] EXT4-fs (loop3): Mount option "dioread_lock" incompatible with ext3 [ 691.503120][ T5466] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1427'. [ 691.567617][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 691.567659][ T30] audit: type=1400 audit(1760979206.763:422): avc: denied { read } for pid=5467 comm="syz.3.1428" path="socket:[31355]" dev="sockfs" ino=31355 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 692.194266][ T30] audit: type=1400 audit(1760979207.393:423): avc: denied { create } for pid=5479 comm="syz.2.1434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 692.214438][ T395] usb 2-1: reset high-speed USB device number 4 using dummy_hcd [ 692.257431][ T395] usb 2-1: device reset changed ep0 maxpacket size! [ 692.267057][ T395] usb 2-1: USB disconnect, device number 4 [ 692.290671][ T39] usb 5-1: USB disconnect, device number 5 [ 692.310389][ T30] audit: type=1400 audit(1760979207.513:424): avc: denied { read } for pid=5482 comm="syz.4.1435" laddr=::1 lport=255 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 692.509775][ T30] audit: type=1400 audit(1760979207.673:425): avc: denied { create } for pid=5479 comm="syz.2.1434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 693.132442][ T30] audit: type=1400 audit(1760979207.673:426): avc: denied { bind } for pid=5479 comm="syz.2.1434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 693.171671][ T30] audit: type=1400 audit(1760979207.673:427): avc: denied { node_bind } for pid=5479 comm="syz.2.1434" saddr=255.255.255.255 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 693.258179][ T5170] usb 6-1: USB disconnect, device number 2 [ 693.279529][ T5494] loop5: detected capacity change from 0 to 512 [ 693.298781][ T30] audit: type=1326 audit(1760979208.503:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5499 comm="syz.2.1442" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f99ba7eafc9 code=0x0 [ 693.401623][ T5494] EXT4-fs error (device loop5): ext4_orphan_get:1401: inode #15: comm syz.5.1440: casefold flag without casefold feature [ 693.414580][ T5494] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.1440: couldn't read orphan inode 15 (err -117) [ 693.427627][ T5494] EXT4-fs (loop5): mounted filesystem without journal. Opts: acl,,errors=continue. Quota mode: writeback. [ 693.448992][ T395] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 693.458632][ T5494] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 693.516842][ T5506] loop5: detected capacity change from 0 to 512 [ 693.547317][ T39] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 693.557424][ T456] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 693.569012][ T5506] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,nogrpid,bsdgroups,,errors=continue. Quota mode: writeback. [ 693.584510][ T5506] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 693.797231][ T39] usb 4-1: Using ep0 maxpacket: 16 [ 693.857381][ T395] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 693.865907][ T395] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 693.875195][ T395] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 693.885744][ T395] usb 2-1: config 220 has no interface number 2 [ 693.892064][ T395] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 693.905670][ T395] usb 2-1: config 220 interface 0 has no altsetting 0 [ 693.912699][ T395] usb 2-1: config 220 interface 76 has no altsetting 0 [ 693.919819][ T395] usb 2-1: config 220 interface 1 has no altsetting 0 [ 693.927354][ T39] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 693.937411][ T456] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 693.938541][ T39] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 693.948430][ T456] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 693.961862][ T39] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 693.977252][ T5170] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 693.979628][ T39] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 693.996010][ T39] usb 4-1: config 0 descriptor?? [ 694.047439][ T456] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 694.056733][ T456] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 694.064894][ T456] usb 5-1: SerialNumber: syz [ 694.087396][ T395] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 694.096887][ T395] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 694.105421][ T395] usb 2-1: Product: syz [ 694.110480][ T395] usb 2-1: Manufacturer: syz [ 694.115110][ T395] usb 2-1: SerialNumber: syz [ 694.252912][ T5525] xt_hashlimit: size too large, truncated to 1048576 [ 694.337262][ T5170] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 694.348368][ T456] usb 5-1: 0:2 : does not exist [ 694.353492][ T456] usb 5-1: unit 5: unexpected type 0x09 [ 694.360865][ T5170] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 694.379564][ T456] usb 5-1: USB disconnect, device number 6 [ 694.457326][ T5170] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 694.466661][ T5170] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 694.475022][ T5170] usb 6-1: SerialNumber: syz [ 694.480161][ T395] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 694.486873][ T395] usb 2-1: No valid video chain found. [ 694.493299][ T395] usb 2-1: selecting invalid altsetting 0 [ 694.578624][ T395] usb 2-1: USB disconnect, device number 5 [ 694.587845][ T4638] udevd[4638]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 694.777923][ T5170] usb 6-1: 0:2 : does not exist [ 694.784392][ T5170] usb 6-1: USB disconnect, device number 3 [ 694.864630][ T30] audit: type=1400 audit(1760979210.063:429): avc: denied { ioctl } for pid=5532 comm="syz.4.1453" path="socket:[31540]" dev="sockfs" ino=31540 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 694.907325][ T39] usbhid 4-1:0.0: can't add hid device: -71 [ 694.913475][ T39] usbhid: probe of 4-1:0.0 failed with error -71 [ 694.921604][ T39] usb 4-1: USB disconnect, device number 5 [ 694.974453][ T30] audit: type=1400 audit(1760979210.173:430): avc: denied { map } for pid=5540 comm="syz.4.1456" path="/dev/ashmem" dev="devtmpfs" ino=265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 694.998083][ T4638] udevd[4638]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 695.341868][ T30] audit: type=1400 audit(1760979210.543:431): avc: denied { write } for pid=5549 comm="syz.3.1460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 695.374295][ T5553] 9pnet: Insufficient options for proto=fd [ 695.393619][ T5555] loop3: detected capacity change from 0 to 128 [ 695.431926][ T5555] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,barrier=0x0000000000000de2,,errors=continue. Quota mode: none. [ 695.448366][ T5555] ext4 filesystem being mounted at /279/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 695.532290][ T5563] loop4: detected capacity change from 0 to 16 [ 695.578200][ T5572] loop3: detected capacity change from 0 to 512 [ 695.588121][ T5563] erofs: (device loop4): mounted with root inode @ nid 36. [ 695.606540][ T5572] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e01c, mo2=0002] [ 695.615087][ T5572] System zones: 1-12 [ 695.619850][ T5572] EXT4-fs (loop3): orphan cleanup on readonly fs [ 695.626396][ T5572] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.1469: invalid indirect mapped block 8 (level 2) [ 695.640512][ T5572] EXT4-fs (loop3): 1 truncate cleaned up [ 695.646312][ T5572] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 696.019621][ T5597] loop3: detected capacity change from 0 to 128 [ 696.052250][ T5597] EXT4-fs (loop3): mounted filesystem without journal. Opts: usrquota,nodelalloc,,errors=continue. Quota mode: writeback. [ 696.066386][ T5597] ext4 filesystem being mounted at /289/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 696.158529][ T5602] loop5: detected capacity change from 0 to 256 [ 696.191333][ T5602] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 696.202189][ T5602] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 696.212722][ T5602] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 696.272931][ T5608] loop3: detected capacity change from 0 to 1024 [ 696.298376][ T5608] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 696.314679][ T5608] EXT4-fs (loop3): filesystem is read-only [ 696.324587][ T5608] EXT4-fs (loop3): Unsupported encryption level 6 [ 696.361841][ T5614] loop5: detected capacity change from 0 to 256 [ 696.411608][ T5614] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 696.657244][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 696.657284][ T30] audit: type=1400 audit(1760979211.853:451): avc: denied { name_bind } for pid=5617 comm="syz.5.1489" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 696.775754][ T5630] loop1: detected capacity change from 0 to 512 [ 696.806575][ T5630] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.1492: invalid indirect mapped block 256 (level 2) [ 696.820829][ T5630] EXT4-fs (loop1): 2 truncates cleaned up [ 696.826975][ T5630] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,auto_da_alloc,lazytime,auto_da_alloc,,errors=continue. Quota mode: writeback. [ 696.861463][ T579] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm kworker/u4:7: bg 0: block 5: invalid block bitmap [ 696.874975][ T579] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 696.888057][ T579] EXT4-fs (loop1): This should not happen!! Data will be lost [ 696.888057][ T579] [ 696.898034][ T579] EXT4-fs (loop1): Total free blocks count 0 [ 696.904322][ T579] EXT4-fs (loop1): Free/Dirty block details [ 696.910623][ T579] EXT4-fs (loop1): free_blocks=0 [ 696.915768][ T579] EXT4-fs (loop1): dirty_blocks=32 [ 696.921574][ T579] EXT4-fs (loop1): Block reservation details [ 696.927961][ T579] EXT4-fs (loop1): i_reserved_data_blocks=32 [ 697.131913][ T30] audit: type=1400 audit(1760979212.333:452): avc: denied { mount } for pid=5633 comm="syz.1.1493" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 697.371130][ T5650] loop5: detected capacity change from 0 to 1024 [ 697.414527][ T5650] EXT4-fs (loop5): Ignoring removed nobh option [ 697.421359][ T5650] EXT4-fs (loop5): Ignoring removed bh option [ 697.428578][ T5650] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 697.459045][ T5650] EXT4-fs (loop5): mounted filesystem without journal. Opts: delalloc,nombcache,barrier,dioread_lock,stripe=0x0000000000000008,resgid=0x0000000000000000,data_err=ignore,jqfmt=vfsv0,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: none. [ 697.817229][ T336] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 697.869902][ T5710] loop1: detected capacity change from 0 to 1024 [ 697.903949][ T30] audit: type=1400 audit(1760979213.103:453): avc: denied { write } for pid=5717 comm="syz.2.1531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 697.950298][ T5710] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 698.177293][ T336] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 698.196984][ T336] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 698.236441][ T336] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 698.266625][ T336] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 698.295211][ T336] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 698.358156][ T336] usb 4-1: invalid MIDI out EP 0 [ 698.363710][ T336] snd-usb-audio: probe of 4-1:27.0 failed with error -22 [ 698.617299][ T5170] usb 5-1: new low-speed USB device number 7 using dummy_hcd [ 698.947208][ T336] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 698.977364][ T5170] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 698.986496][ T5170] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 698.995496][ T5170] usb 5-1: config 0 descriptor?? [ 699.052091][ T5797] loop5: detected capacity change from 0 to 1024 [ 699.089154][ T5797] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 699.137541][ T30] audit: type=1400 audit(1760979214.343:454): avc: denied { write } for pid=5800 comm="syz.5.1567" name="anycast6" dev="proc" ino=4026533001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 699.182968][ T5805] 9pnet: Insufficient options for proto=fd [ 699.227336][ T336] usb 2-1: Using ep0 maxpacket: 32 [ 699.289729][ T5820] 9pnet: Insufficient options for proto=fd [ 699.347337][ T336] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 699.357649][ T336] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 699.366548][ T336] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 699.537307][ T336] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 699.546464][ T336] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 699.554524][ T336] usb 2-1: Product: syz [ 699.558786][ T336] usb 2-1: Manufacturer: syz [ 699.563661][ T336] usb 2-1: SerialNumber: syz [ 699.608254][ T336] cdc_ncm 2-1:1.0: skipping garbage [ 699.613811][ T336] cdc_ncm 2-1:1.0: invalid descriptor buffer length [ 699.620672][ T336] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 699.627937][ T336] cdc_ncm 2-1:1.0: bind() failure [ 699.707291][ T5170] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 699.717654][ T5170] asix: probe of 5-1:0.0 failed with error -71 [ 699.724654][ T5170] usb 5-1: USB disconnect, device number 7 [ 700.191565][ T5835] 9pnet: Insufficient options for proto=fd [ 700.437615][ T395] usb 4-1: USB disconnect, device number 6 [ 700.458797][ T5844] loop3: detected capacity change from 0 to 1024 [ 700.510645][ T5844] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 700.522172][ T5844] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a800e11d, mo2=0002] [ 700.530559][ T5844] System zones: 0-1, 4-36, 102-102 [ 700.536186][ T5844] EXT4-fs (loop3): mounted filesystem without journal. Opts: nombcache,debug,norecovery,grpid,norecovery,,errors=continue. Quota mode: writeback. [ 700.907260][ T395] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 701.147211][ T395] usb 4-1: Using ep0 maxpacket: 32 [ 701.167212][ T384] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 701.267283][ T395] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 701.288160][ T395] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 701.298712][ T395] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 701.308504][ T395] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 701.323451][ T395] usb 4-1: config 0 descriptor?? [ 701.368045][ T395] hub 4-1:0.0: USB hub found [ 701.527407][ T384] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 4 [ 701.538701][ T384] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 701.577307][ T395] hub 4-1:0.0: 1 port detected [ 701.597373][ T5170] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 701.644338][ T39] usb 2-1: USB disconnect, device number 6 [ 701.707597][ T384] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 701.717054][ T384] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 701.725752][ T384] usb 6-1: Product: syz [ 701.732005][ T384] usb 6-1: Manufacturer: syz [ 701.736782][ T384] usb 6-1: SerialNumber: syz [ 701.797320][ T395] hub 4-1:0.0: hub_hub_status failed (err = -71) [ 701.803860][ T395] hub 4-1:0.0: config failed, can't get hub status (err -71) [ 701.917318][ T395] usbhid 4-1:0.0: can't add hid device: -71 [ 701.923367][ T395] usbhid: probe of 4-1:0.0 failed with error -71 [ 701.957704][ T395] usb 4-1: USB disconnect, device number 7 [ 701.977519][ T5170] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 701.988196][ T5170] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 701.999246][ T5170] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 702.012417][ T5170] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 702.021483][ T5170] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 702.077425][ T384] usb 6-1: 2:1: invalid format type 0x1001 is detected, processed as PCM [ 702.085953][ T384] usb 6-1: 2:1 : unsupported sample bitwidth 0 in 255 bytes [ 702.109013][ T5170] usb 5-1: invalid MIDI out EP 0 [ 702.115243][ T5170] snd-usb-audio: probe of 5-1:27.0 failed with error -22 [ 702.127027][ T384] usb 6-1: USB disconnect, device number 4 [ 702.393672][ T30] audit: type=1400 audit(1760979217.593:455): avc: denied { create } for pid=5890 comm="syz.3.1604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 702.469849][ T5895] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1606'. [ 702.482075][ T30] audit: type=1400 audit(1760979217.683:456): avc: denied { bind } for pid=5894 comm="syz.3.1606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 702.529340][ T30] audit: type=1400 audit(1760979217.733:457): avc: denied { mount } for pid=5896 comm="syz.3.1607" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 702.562822][ T5904] device syzkaller0 entered promiscuous mode [ 702.623214][ T30] audit: type=1400 audit(1760979217.823:458): avc: denied { read } for pid=5910 comm="syz.1.1613" name="rtc0" dev="devtmpfs" ino=259 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 702.660176][ T30] audit: type=1400 audit(1760979217.853:459): avc: denied { open } for pid=5910 comm="syz.1.1613" path="/dev/rtc0" dev="devtmpfs" ino=259 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 702.714015][ T30] audit: type=1400 audit(1760979217.913:460): avc: denied { read write } for pid=5918 comm="syz.3.1616" name="event2" dev="devtmpfs" ino=270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 702.762367][ T30] audit: type=1400 audit(1760979217.913:461): avc: denied { open } for pid=5918 comm="syz.3.1616" path="/dev/input/event2" dev="devtmpfs" ino=270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 702.821179][ T30] audit: type=1400 audit(1760979217.913:462): avc: denied { create } for pid=5918 comm="syz.3.1616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 702.861257][ T30] audit: type=1400 audit(1760979217.913:463): avc: denied { setopt } for pid=5918 comm="syz.3.1616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 702.882886][ T5920] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1613'. [ 702.910453][ T30] audit: type=1400 audit(1760979217.913:464): avc: denied { write } for pid=5918 comm="syz.3.1616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 703.122333][ T5940] device syzkaller0 entered promiscuous mode [ 703.437224][ T336] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 703.499185][ T5946] device syzkaller0 entered promiscuous mode [ 703.544319][ T5948] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1629'. [ 703.677258][ T336] usb 6-1: Using ep0 maxpacket: 16 [ 703.797260][ T336] usb 6-1: config 0 has an invalid interface number: 41 but max is 0 [ 703.805404][ T336] usb 6-1: config 0 has no interface number 0 [ 703.813943][ T336] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 703.824536][ T336] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 703.835002][ T336] usb 6-1: config 0 interface 41 has no altsetting 0 [ 703.837302][ T395] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 703.997658][ T336] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 704.007214][ T336] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 704.015470][ T336] usb 6-1: Product: syz [ 704.019680][ T336] usb 6-1: Manufacturer: syz [ 704.024404][ T336] usb 6-1: SerialNumber: syz [ 704.029687][ T336] usb 6-1: config 0 descriptor?? [ 704.047355][ T5944] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 704.054593][ T5944] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 704.107209][ T395] usb 2-1: Using ep0 maxpacket: 8 [ 704.177211][ T4649] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 704.235590][ T5170] usb 5-1: USB disconnect, device number 8 [ 704.268480][ T5944] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 704.275603][ T5944] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 704.407248][ T395] usb 2-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 704.416595][ T395] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 704.425076][ T395] usb 2-1: Product: syz [ 704.429333][ T395] usb 2-1: Manufacturer: syz [ 704.434139][ T395] usb 2-1: SerialNumber: syz [ 704.439704][ T395] usb 2-1: config 0 descriptor?? [ 704.547306][ T4649] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 704.557738][ T4649] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 704.566792][ T4649] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 704.575571][ T4649] usb 4-1: config 0 descriptor?? [ 704.677001][ T5996] netlink: 'syz.2.1651': attribute type 13 has an invalid length. [ 704.684941][ T5996] netlink: 'syz.2.1651': attribute type 17 has an invalid length. [ 704.728243][ T336] Error reading MAC address [ 704.747239][ T5944] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 704.747377][ T5170] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 704.754799][ T5944] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 704.772406][ T5998] netlink: 204 bytes leftover after parsing attributes in process `syz.4.1652'. [ 704.857288][ T395] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 705.017286][ T336] sr9700 6-1:0.41 (unnamed net_device) (uninitialized): Error reading MAC address [ 705.038067][ T336] usb 6-1: USB disconnect, device number 5 [ 705.257283][ T5170] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 705.311714][ T6015] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1658'. [ 705.527845][ T319] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 705.539614][ T319] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 705.559508][ T4650] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 705.585946][ T6039] tipc: Started in network mode [ 705.597225][ T6039] tipc: Node identity 86b338b602a8, cluster identity 4711 [ 705.604635][ T6039] tipc: Enabled bearer , priority 0 [ 705.614853][ T6039] tipc: Resetting bearer [ 705.627258][ T5170] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 705.627270][ T6038] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 705.627290][ T6038] tipc: Resetting bearer [ 705.657087][ T5170] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 705.668639][ T5170] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 705.682273][ T5170] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 705.692185][ T5170] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 705.738202][ T5170] usb 5-1: invalid MIDI out EP 0 [ 705.743775][ T5170] snd-usb-audio: probe of 5-1:27.0 failed with error -22 [ 705.775574][ T4649] usb 2-1: USB disconnect, device number 7 [ 705.906309][ T456] usb 4-1: USB disconnect, device number 8 [ 705.998562][ T6062] device syzkaller0 entered promiscuous mode [ 706.247345][ T456] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 706.322439][ T6081] 9pnet: Insufficient options for proto=fd [ 706.417212][ T4649] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 706.467204][ T336] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 706.567561][ T4650] tipc: Resetting bearer [ 706.625175][ T6098] input: syz1 as /devices/virtual/input/input4 [ 706.657254][ T4649] usb 2-1: Using ep0 maxpacket: 16 [ 706.691473][ T6100] loop5: detected capacity change from 0 to 1024 [ 706.707598][ T39] tipc: Node number set to 2216376502 [ 706.739127][ T6100] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 706.787388][ T4649] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 706.957353][ T4649] usb 2-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=9a.1d [ 706.966885][ T4649] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 706.975132][ T4649] usb 2-1: Product: syz [ 706.979403][ T4649] usb 2-1: Manufacturer: syz [ 706.984007][ T4649] usb 2-1: SerialNumber: syz [ 706.988701][ T336] usb 4-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 706.998143][ T336] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 707.006521][ T4649] usb 2-1: config 0 descriptor?? [ 707.011602][ T336] usb 4-1: Product: syz [ 707.015813][ T336] usb 4-1: Manufacturer: syz [ 707.020450][ T336] usb 4-1: SerialNumber: syz [ 707.025717][ T336] usb 4-1: config 0 descriptor?? [ 707.047860][ T4649] cdc_acm 2-1:0.0: Zero length descriptor references [ 707.054595][ T4649] cdc_acm: probe of 2-1:0.0 failed with error -22 [ 707.067265][ T456] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 707.249263][ T336] usb 2-1: USB disconnect, device number 8 [ 707.307260][ T456] usb 6-1: Using ep0 maxpacket: 8 [ 707.587272][ T456] usb 6-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 707.596948][ T456] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 707.605393][ T456] usb 6-1: Product: syz [ 707.609651][ T456] usb 6-1: Manufacturer: syz [ 707.614536][ T456] usb 6-1: SerialNumber: syz [ 707.626869][ T5170] usb 4-1: USB disconnect, device number 9 [ 707.634226][ T456] usb 6-1: config 0 descriptor?? [ 707.910188][ T456] usb 5-1: USB disconnect, device number 9 [ 707.913266][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 707.913284][ T30] audit: type=1400 audit(1760979223.113:479): avc: denied { setopt } for pid=6124 comm="syz.4.1704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 707.944485][ T30] audit: type=1400 audit(1760979223.113:480): avc: denied { bind } for pid=6124 comm="syz.4.1704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 707.963603][ T6127] loop4: detected capacity change from 0 to 1024 [ 708.027230][ T4649] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 708.047231][ T5170] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 708.058843][ T6127] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 708.287222][ T5170] usb 4-1: Using ep0 maxpacket: 32 [ 708.387375][ T336] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 708.407524][ T5170] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 708.415927][ T5170] usb 4-1: config 0 has no interface number 0 [ 708.422544][ T5170] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 708.557298][ T4649] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 708.566708][ T4649] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 708.574779][ T4649] usb 2-1: Product: syz [ 708.578996][ T4649] usb 2-1: Manufacturer: syz [ 708.583618][ T4649] usb 2-1: SerialNumber: syz [ 708.597339][ T5170] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 708.606645][ T5170] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 708.615098][ T5170] usb 4-1: Product: syz [ 708.619446][ T5170] usb 4-1: Manufacturer: syz [ 708.624209][ T5170] usb 4-1: SerialNumber: syz [ 708.629735][ T5170] usb 4-1: config 0 descriptor?? [ 708.757296][ T336] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 708.767639][ T336] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 708.847308][ T336] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 708.856670][ T336] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 708.864846][ T336] usb 5-1: SerialNumber: syz [ 709.032716][ T30] audit: type=1400 audit(1760979224.233:481): avc: denied { create } for pid=6141 comm="syz.2.1709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 709.052751][ T30] audit: type=1400 audit(1760979224.233:482): avc: denied { setopt } for pid=6141 comm="syz.2.1709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 709.096196][ T6150] 9pnet: Insufficient options for proto=fd [ 709.158045][ T336] usb 5-1: 0:2 : does not exist [ 709.170516][ T336] usb 5-1: USB disconnect, device number 10 [ 709.447331][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 709.575909][ T6158] UDC core: couldn't find an available UDC or it's busy: -16 [ 709.583473][ T6158] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 709.814452][ T456] usb 6-1: USB disconnect, device number 6 [ 709.902794][ T5170] usb 2-1: USB disconnect, device number 9 [ 709.930129][ T30] audit: type=1400 audit(1760979225.133:483): avc: denied { create } for pid=6169 comm="syz.1.1718" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 709.967999][ T319] usb 4-1: USB disconnect, device number 10 [ 710.019628][ T6182] device syzkaller0 entered promiscuous mode [ 710.027720][ T395] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 710.072920][ T6186] device syzkaller0 entered promiscuous mode [ 710.074797][ T6187] loop3: detected capacity change from 0 to 512 [ 710.088573][ T6187] EXT4-fs (loop3): Ignoring removed bh option [ 710.095425][ T6187] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 710.105245][ T6187] EXT4-fs (loop3): 1 truncate cleaned up [ 710.111179][ T6187] EXT4-fs (loop3): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,bh,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 710.227407][ T456] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 710.252169][ T6195] device syzkaller0 entered promiscuous mode [ 710.308127][ T30] audit: type=1400 audit(1760979225.513:484): avc: denied { ioctl } for pid=6197 comm="syz.3.1727" path="socket:[33672]" dev="sockfs" ino=33672 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 710.338154][ T30] audit: type=1400 audit(1760979225.513:485): avc: denied { write } for pid=6197 comm="syz.3.1727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 710.397270][ T395] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 710.408298][ T395] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 710.419564][ T395] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 710.433133][ T395] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 710.442551][ T395] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 710.488093][ T395] usb 5-1: invalid MIDI out EP 0 [ 710.493488][ T395] snd-usb-audio: probe of 5-1:27.0 failed with error -22 [ 710.597354][ T456] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 710.608499][ T456] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 710.697255][ T456] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 710.699781][ T6161] xt_hashlimit: size too large, truncated to 1048576 [ 710.712545][ T456] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 710.724127][ T456] usb 6-1: SerialNumber: syz [ 711.007879][ T456] usb 6-1: 0:2 : does not exist [ 711.014483][ T456] usb 6-1: USB disconnect, device number 7 [ 711.224510][ T4639] udevd[4639]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 711.240495][ T30] audit: type=1400 audit(1760979226.433:486): avc: denied { checkpoint_restore } for pid=6230 comm="syz.3.1742" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 711.274647][ T6235] device syzkaller0 entered promiscuous mode [ 711.597216][ T456] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 711.837223][ T456] usb 4-1: Using ep0 maxpacket: 16 [ 711.907235][ T395] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 711.957290][ T456] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 711.968806][ T456] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 711.978595][ T456] usb 4-1: config 0 interface 0 has no altsetting 0 [ 711.985395][ T456] usb 4-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 711.994696][ T456] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 712.003544][ T456] usb 4-1: config 0 descriptor?? [ 712.127545][ T6249] tipc: Enabling of bearer rejected, failed to enable media [ 712.147371][ T395] usb 2-1: Using ep0 maxpacket: 32 [ 712.154878][ T6251] device vlan0 entered promiscuous mode [ 712.307309][ T395] usb 2-1: unable to get BOS descriptor or descriptor too short [ 712.387256][ T395] usb 2-1: config 3 has an invalid interface number: 98 but max is 0 [ 712.399273][ T395] usb 2-1: config 3 has no interface number 0 [ 712.405993][ T395] usb 2-1: config 3 interface 98 altsetting 10 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 712.417810][ T395] usb 2-1: config 3 interface 98 has no altsetting 0 [ 712.420030][ T6261] tipc: Resetting bearer [ 712.430710][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 712.440346][ T6260] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 712.448341][ T6260] tipc: Resetting bearer [ 712.466654][ T6263] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 712.474847][ T6263] tipc: Resetting bearer [ 712.481434][ T456] hid (null): invalid report_size 21303 [ 712.487281][ T456] hid (null): unknown global tag 0xc [ 712.492823][ T6262] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 712.501120][ T6262] tipc: Resetting bearer [ 712.502313][ T456] hid-generic 0003:060B:500A.002A: unexpected long global item [ 712.514803][ T456] hid-generic: probe of 0003:060B:500A.002A failed with error -22 [ 712.541886][ T6267] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 712.550222][ T6267] tipc: Resetting bearer [ 712.559150][ T6266] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 712.567032][ T6266] tipc: Resetting bearer [ 712.577261][ T395] usb 2-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=b9.a8 [ 712.589380][ T395] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 712.597488][ T395] usb 2-1: Product: syz [ 712.601837][ T395] usb 2-1: Manufacturer: syz [ 712.606549][ T395] usb 2-1: SerialNumber: syz [ 712.649802][ T456] usb 5-1: USB disconnect, device number 11 [ 712.663602][ T6271] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1762'. [ 712.672657][ T6271] tipc: Started in network mode [ 712.677875][ T6271] tipc: Node identity 7, cluster identity 4711 [ 712.685078][ T6271] tipc: Node number set to 7 [ 712.687602][ T4649] usb 4-1: USB disconnect, device number 11 [ 712.720282][ T6277] UHID_CREATE from different security context by process 1050 (syz.4.1764), this is not allowed. [ 712.720672][ T30] audit: type=1400 audit(1760979227.923:487): avc: denied { read write } for pid=6275 comm="syz.4.1764" name="uhid" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 712.756737][ T30] audit: type=1400 audit(1760979227.923:488): avc: denied { open } for pid=6275 comm="syz.4.1764" path="/dev/uhid" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 712.824382][ T6287] fuse: Bad value for 'fd' [ 712.843407][ T6289] device syzkaller0 entered promiscuous mode [ 712.857511][ T336] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 712.913866][ T6293] device syzkaller0 entered promiscuous mode [ 712.921442][ T395] usb 2-1: USB disconnect, device number 10 [ 713.097191][ T336] usb 6-1: Using ep0 maxpacket: 8 [ 713.127564][ T332] tipc: Resetting bearer [ 713.217240][ T336] usb 6-1: config index 0 descriptor too short (expected 5924, got 36) [ 713.225884][ T336] usb 6-1: config 250 has an invalid interface number: 228 but max is -1 [ 713.245874][ T336] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 713.263150][ T336] usb 6-1: config 250 has no interface number 0 [ 713.269535][ T336] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 713.297197][ T336] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 713.327756][ T336] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 713.347067][ T6304] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1775'. [ 713.348640][ T336] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 713.397200][ T336] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 713.422387][ T336] usb 6-1: config 250 interface 228 has no altsetting 0 [ 713.547427][ T336] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 713.556645][ T336] usb 6-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 713.565151][ T336] usb 6-1: Product: syz [ 713.571851][ T336] usb 6-1: SerialNumber: syz [ 713.577225][ T4649] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 713.601336][ T6328] fuse: Bad value for 'fd' [ 713.618226][ T336] hub 6-1:250.228: bad descriptor, ignoring hub [ 713.624644][ T336] hub: probe of 6-1:250.228 failed with error -5 [ 713.717321][ T384] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 713.818524][ T30] audit: type=1400 audit(1760979229.023:489): avc: denied { create } for pid=6268 comm="syz.5.1761" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 713.839143][ T336] usblp 6-1:250.228: usblp0: USB Bidirectional printer dev 8 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 713.851062][ T395] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 713.957355][ T4649] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 713.968409][ T4649] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 713.979990][ T4649] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 713.992942][ T4649] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 714.002326][ T4649] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 714.047750][ T336] usb 6-1: reset high-speed USB device number 8 using dummy_hcd [ 714.056325][ T4649] usb 5-1: invalid MIDI out EP 0 [ 714.061757][ T4649] snd-usb-audio: probe of 5-1:27.0 failed with error -22 [ 714.077306][ T384] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 714.088032][ T384] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBE, skipping [ 714.098736][ T384] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 714.237249][ T395] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 714.252485][ T395] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBE, skipping [ 714.263467][ T395] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 714.277366][ T384] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 714.283312][ T6296] xt_hashlimit: size too large, truncated to 1048576 [ 714.286650][ T384] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 714.307656][ T384] usb 4-1: Product: syz [ 714.311920][ T384] usb 4-1: Manufacturer: syz [ 714.316610][ T384] usb 4-1: SerialNumber: syz [ 714.322041][ T384] usb 4-1: config 0 descriptor?? [ 714.367934][ T384] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 714.427296][ T395] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 714.436569][ T395] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 714.444725][ T395] usb 2-1: Product: syz [ 714.448961][ T395] usb 2-1: Manufacturer: syz [ 714.453584][ T395] usb 2-1: SerialNumber: syz [ 714.459243][ T395] usb 2-1: config 0 descriptor?? [ 714.498061][ T395] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 714.569790][ T395] usb 4-1: USB disconnect, device number 12 [ 714.888102][ T30] audit: type=1400 audit(1760979230.093:490): avc: denied { read write } for pid=6268 comm="syz.5.1761" name="lp0" dev="devtmpfs" ino=1357 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 714.912531][ T30] audit: type=1400 audit(1760979230.093:491): avc: denied { open } for pid=6268 comm="syz.5.1761" path="/dev/usb/lp0" dev="devtmpfs" ino=1357 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 715.027440][ T336] usb 6-1: USB disconnect, device number 8 [ 715.034387][ T336] usblp0: removed [ 715.093605][ T30] audit: type=1400 audit(1760979230.293:492): avc: denied { read } for pid=6358 comm="syz.3.1798" name="usbmon0" dev="devtmpfs" ino=155 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 715.117283][ T30] audit: type=1400 audit(1760979230.303:493): avc: denied { open } for pid=6358 comm="syz.3.1798" path="/dev/usbmon0" dev="devtmpfs" ino=155 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 715.152533][ T6361] capability: warning: `syz.3.1799' uses 32-bit capabilities (legacy support in use) [ 715.175964][ T6361] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6361 comm=syz.3.1799 [ 715.202317][ T30] audit: type=1400 audit(1760979230.403:494): avc: denied { nlmsg_read } for pid=6362 comm="syz.3.1800" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 715.253462][ T6367] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1802'. [ 715.262598][ T6367] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1802'. [ 715.304479][ T6371] loop3: detected capacity change from 0 to 1024 [ 715.329344][ T6371] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 715.452961][ T6378] loop3: detected capacity change from 0 to 256 [ 715.464009][ T6378] FAT-fs (loop3): Unrecognized mount option "check" or missing value [ 715.485005][ T6387] netlink: 'syz.2.1810': attribute type 12 has an invalid length. [ 715.544340][ T6393] tipc: Resetting bearer [ 715.562888][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 715.575551][ T6392] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 715.593914][ T6392] tipc: Resetting bearer [ 715.634010][ T6398] loop5: detected capacity change from 0 to 1024 [ 715.653187][ T30] audit: type=1400 audit(1760979230.853:495): avc: denied { connect } for pid=6401 comm="syz.3.1817" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 715.656288][ T6402] tmpfs: Unknown parameter 'usrquota' [ 715.719554][ T6398] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 715.770330][ T30] audit: type=1400 audit(1760979230.973:496): avc: denied { mounton } for pid=6415 comm="syz.3.1822" path="/proc/1140/task" dev="proc" ino=35296 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 715.794191][ T30] audit: type=1400 audit(1760979230.993:497): avc: denied { sys_admin } for pid=6415 comm="syz.3.1822" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 715.818686][ T6416] VFS: Mount too revealing [ 716.036535][ T395] usb 5-1: USB disconnect, device number 12 [ 716.088600][ T6425] loop4: detected capacity change from 0 to 256 [ 716.107101][ T6425] FAT-fs (loop4): Unrecognized mount option "check" or missing value [ 716.433818][ T6440] tmpfs: Unknown parameter 'usrquota' [ 716.458893][ T6445] loop3: detected capacity change from 0 to 1024 [ 716.479132][ T6445] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 716.550819][ T6451] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1835'. [ 716.567596][ T10] tipc: Resetting bearer [ 716.582368][ T395] usb 2-1: USB disconnect, device number 11 [ 716.604617][ T6453] loop3: detected capacity change from 0 to 256 [ 716.613593][ T6453] FAT-fs (loop3): Unrecognized mount option "check" or missing value [ 716.639791][ T6458] device syzkaller0 entered promiscuous mode [ 716.668455][ T30] audit: type=1400 audit(1760979231.873:498): avc: denied { append } for pid=6461 comm="syz.5.1840" name="rtc0" dev="devtmpfs" ino=259 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 716.757655][ T6472] loop3: detected capacity change from 0 to 1024 [ 716.834020][ T6490] device syzkaller0 entered promiscuous mode [ 716.834956][ T6487] loop4: detected capacity change from 0 to 256 [ 716.849187][ T6472] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 716.900483][ T6494] device syzkaller0 entered promiscuous mode [ 716.913491][ T6487] FAT-fs (loop4): Unrecognized mount option "check" or missing value [ 717.047590][ T5170] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 717.095226][ T6522] loop3: detected capacity change from 0 to 1024 [ 717.111556][ T6528] device syzkaller0 entered promiscuous mode [ 717.150612][ T6522] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 717.437290][ T5170] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 717.461985][ T5170] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 717.499963][ T5170] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 717.527232][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 717.536917][ T5170] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 717.560899][ T5170] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 717.707310][ T5170] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 717.722249][ T5170] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 717.750622][ T5170] usb 6-1: Product: syz [ 717.754867][ T5170] usb 6-1: Manufacturer: syz [ 717.794626][ T6591] fuse: Bad value for 'fd' [ 717.807853][ T5170] cdc_wdm 6-1:1.0: skipping garbage [ 717.822038][ T5170] cdc_wdm 6-1:1.0: skipping garbage [ 717.839458][ T5170] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 717.905555][ T6597] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1898'. [ 718.010224][ T5170] usb 6-1: USB disconnect, device number 9 [ 718.302121][ T6637] tmpfs: Unknown parameter 'usrquota' [ 718.412338][ T6651] device syzkaller0 entered promiscuous mode [ 718.471052][ T6658] 9pnet_virtio: no channels available for device syz [ 718.821885][ T6682] 9pnet: Insufficient options for proto=fd [ 719.075756][ T6696] loop5: detected capacity change from 0 to 512 [ 719.160984][ T6696] EXT4-fs (loop5): Ignoring removed bh option [ 719.177324][ T6696] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 719.202363][ T6696] EXT4-fs (loop5): 1 truncate cleaned up [ 719.217230][ T6696] EXT4-fs (loop5): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,bh,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 719.396496][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 719.396512][ T30] audit: type=1400 audit(1760979234.593:513): avc: denied { create } for pid=6705 comm="syz.1.1939" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 719.423740][ T30] audit: type=1400 audit(1760979234.603:514): avc: denied { write } for pid=6705 comm="syz.1.1939" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 719.443680][ T30] audit: type=1400 audit(1760979234.603:515): avc: denied { read } for pid=6705 comm="syz.1.1939" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 719.478323][ T30] audit: type=1400 audit(1760979234.683:516): avc: denied { listen } for pid=6707 comm="syz.3.1941" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 719.501911][ T30] audit: type=1400 audit(1760979234.683:517): avc: denied { accept } for pid=6707 comm="syz.3.1941" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 719.501968][ T6712] process 'syz.2.1943' launched '/dev/fd/3' with NULL argv: empty string added [ 719.552183][ T6714] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1940'. [ 719.561387][ T30] audit: type=1400 audit(1760979234.753:518): avc: denied { execute_no_trans } for pid=6711 comm="syz.2.1943" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=1780 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 719.859214][ T6722] loop5: detected capacity change from 0 to 1024 [ 719.940672][ T6722] EXT4-fs (loop5): Ignoring removed mblk_io_submit option [ 719.948203][ T6722] EXT4-fs (loop5): Ignoring removed oldalloc option [ 719.955275][ T6722] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option [ 720.034655][ T6722] EXT4-fs (loop5): mounted filesystem without journal. Opts: mblk_io_submit,quota,resuid=0x0000000000000000,oldalloc,discard,max_dir_size_kb=0x00000000000007b1,nolazytime,nodioread_nolock,nomblk_io_submit,nodelalloc,inode_readahead_blks=0x0000000000000400,,errors=continue. Quota mode: writeback. [ 720.521650][ T30] audit: type=1400 audit(1760979235.723:519): avc: denied { connect } for pid=6741 comm="syz.1.1953" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 720.680360][ T30] audit: type=1400 audit(1760979235.743:520): avc: denied { write } for pid=6741 comm="syz.1.1953" laddr=fe80::a lport=3 faddr=fe80::bb scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 720.751981][ T6755] binder: 6754:6755 ioctl c0306201 200000000040 returned -22 [ 720.931971][ T30] audit: type=1400 audit(1760979236.133:521): avc: denied { mount } for pid=6771 comm="syz.2.1965" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 721.324437][ T30] audit: type=1400 audit(1760979236.523:522): avc: denied { read } for pid=6784 comm="syz.4.1970" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 721.958100][ T6791] loop1: detected capacity change from 0 to 256 [ 721.977651][ T6792] device syzkaller0 entered promiscuous mode [ 722.089130][ T6798] loop3: detected capacity change from 0 to 1024 [ 722.174013][ T6804] loop4: detected capacity change from 0 to 2048 [ 722.181038][ T6798] EXT4-fs (loop3): Ignoring removed bh option [ 722.194820][ T6798] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c80ce018, mo2=0000] [ 722.230671][ T6798] EXT4-fs error (device loop3): ext4_map_blocks:630: inode #3: block 2: comm syz.3.1975: lblock 2 mapped to illegal pblock 2 (length 1) [ 722.245414][ T6798] EXT4-fs error (device loop3): ext4_map_blocks:630: inode #3: block 48: comm syz.3.1975: lblock 0 mapped to illegal pblock 48 (length 1) [ 722.260622][ T6798] EXT4-fs error (device loop3): ext4_acquire_dquot:6200: comm syz.3.1975: Failed to acquire dquot type 0 [ 722.260896][ T6804] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 722.283069][ T6798] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5867: Corrupt filesystem [ 722.321658][ T6798] EXT4-fs error (device loop3): ext4_evict_inode:283: inode #11: comm syz.3.1975: mark_inode_dirty error [ 722.351447][ T6798] EXT4-fs warning (device loop3): ext4_evict_inode:286: couldn't mark inode dirty (err -117) [ 722.363875][ T6798] EXT4-fs (loop3): 1 orphan inode deleted [ 722.369770][ T6798] EXT4-fs (loop3): mounted filesystem without journal. Opts: usrquota,noblock_validity,bh,max_batch_time=0x00000000000008c9,debug,inlinecrypt,,errors=continue. Quota mode: writeback. [ 722.388496][ T332] EXT4-fs error (device loop3): ext4_map_blocks:630: inode #3: block 1: comm kworker/u4:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 722.403984][ T332] EXT4-fs error (device loop3): ext4_release_dquot:6236: comm kworker/u4:3: Failed to release dquot type 0 [ 722.433903][ T6798] EXT4-fs error (device loop3): __ext4_get_inode_loc:4352: comm syz.3.1975: Invalid inode table block 1 in block_group 0 [ 722.457754][ T6798] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5867: Corrupt filesystem [ 722.467537][ T5170] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 722.486222][ T6798] EXT4-fs error (device loop3): ext4_quota_off:6506: inode #3: comm syz.3.1975: mark_inode_dirty error [ 722.533923][ T332] tipc: Left network mode [ 722.659351][ T6825] loop3: detected capacity change from 0 to 128 [ 722.735953][ T6826] bridge0: port 1(bridge_slave_0) entered blocking state [ 722.743408][ T6826] bridge0: port 1(bridge_slave_0) entered disabled state [ 722.750626][ T6825] FAT-fs (loop3): bogus sectors per cluster 0 [ 722.751401][ T6826] device bridge_slave_0 entered promiscuous mode [ 722.756828][ T6825] FAT-fs (loop3): Can't find a valid FAT filesystem [ 722.771468][ T6826] bridge0: port 2(bridge_slave_1) entered blocking state [ 722.779359][ T6826] bridge0: port 2(bridge_slave_1) entered disabled state [ 722.787529][ T6826] device bridge_slave_1 entered promiscuous mode [ 722.857270][ T5170] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 722.900433][ T5170] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 723.017287][ T5170] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 723.026965][ T5170] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 723.047822][ T5170] usb 2-1: SerialNumber: syz [ 723.072226][ T6826] bridge0: port 2(bridge_slave_1) entered blocking state [ 723.079519][ T6826] bridge0: port 2(bridge_slave_1) entered forwarding state [ 723.086880][ T6826] bridge0: port 1(bridge_slave_0) entered blocking state [ 723.093989][ T6826] bridge0: port 1(bridge_slave_0) entered forwarding state [ 723.105137][ T3583] bridge0: port 1(bridge_slave_0) entered disabled state [ 723.113116][ T3583] bridge0: port 2(bridge_slave_1) entered disabled state [ 723.123413][ T6843] device syzkaller0 entered promiscuous mode [ 723.139594][ T332] device bridge_slave_1 left promiscuous mode [ 723.146318][ T332] bridge0: port 2(bridge_slave_1) entered disabled state [ 723.155661][ T332] device bridge_slave_0 left promiscuous mode [ 723.161984][ T332] bridge0: port 1(bridge_slave_0) entered disabled state [ 723.170720][ T332] device veth1_macvtap left promiscuous mode [ 723.177982][ T332] device veth0_vlan left promiscuous mode [ 723.318492][ T3583] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 723.329045][ T3583] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 723.347652][ T3583] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 723.356730][ T3583] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 723.366690][ T3583] bridge0: port 1(bridge_slave_0) entered blocking state [ 723.374033][ T3583] bridge0: port 1(bridge_slave_0) entered forwarding state [ 723.382603][ T5170] usb 2-1: 0:2 : does not exist [ 723.388514][ T3583] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 723.408153][ T5170] usb 2-1: USB disconnect, device number 12 [ 723.422267][ T3583] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 723.448803][ T3583] bridge0: port 2(bridge_slave_1) entered blocking state [ 723.456077][ T3583] bridge0: port 2(bridge_slave_1) entered forwarding state [ 723.464041][ T3583] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 723.473044][ T3583] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 723.514345][ T6826] device veth0_vlan entered promiscuous mode [ 723.530877][ T3583] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 723.567807][ T3583] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 723.584455][ T3583] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 723.595400][ T3583] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 723.605352][ T3583] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 723.615310][ T3583] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 723.625937][ T3583] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 723.636740][ T3583] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 723.676911][ T6851] device syzkaller0 entered promiscuous mode [ 723.712209][ T3583] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 723.722389][ T3583] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 723.738480][ T6826] device veth1_macvtap entered promiscuous mode [ 723.772800][ T3583] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 723.782944][ T3583] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 723.826148][ T3583] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 723.874415][ T3583] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 723.913601][ T3583] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 724.711100][ T2831] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 724.742734][ T6870] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 724.957800][ T6873] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2004'. [ 724.972108][ T6875] loop5: detected capacity change from 0 to 1024 [ 725.047234][ T6875] EXT4-fs (loop5): mounted filesystem without journal. Opts: dioread_lock,jqfmt=vfsv1,nouid32,grpquota,,errors=continue. Quota mode: writeback. [ 725.232102][ T2831] usb 4-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 725.377704][ T6899] netlink: 'syz.5.2012': attribute type 16 has an invalid length. [ 725.385830][ T6899] netlink: 'syz.5.2012': attribute type 17 has an invalid length. [ 725.831344][ T6899] bridge0: port 2(bridge_slave_1) entered disabled state [ 725.839044][ T6899] bridge0: port 1(bridge_slave_0) entered disabled state [ 726.244595][ T6899] tipc: Resetting bearer [ 726.359153][ T2831] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 726.375628][ T2831] usb 4-1: config 0 descriptor?? [ 727.952770][ T30] kauditd_printk_skb: 39 callbacks suppressed [ 727.953433][ T30] audit: type=1400 audit(1760979242.243:559): avc: denied { write } for pid=6912 comm="syz.6.2019" name="001" dev="devtmpfs" ino=184 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 728.063235][ T5170] usb 4-1: USB disconnect, device number 13 [ 728.094065][ T6922] device syzkaller0 entered promiscuous mode [ 728.096922][ T6901] loop1: detected capacity change from 0 to 40427 [ 728.152233][ T6901] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 728.169488][ T6901] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 728.173359][ T6929] loop5: detected capacity change from 0 to 256 [ 728.204192][ T6937] ================================================================== [ 728.212403][ T6937] BUG: KASAN: slab-out-of-bounds in tc_setup_flow_action+0x870/0x3240 [ 728.213197][ T6901] F2FS-fs (loop1): invalid crc value [ 728.220827][ T6937] Read of size 8 at addr ffff88810c6b70c0 by task syz.6.2028/6937 [ 728.220853][ T6937] [ 728.220872][ T6937] CPU: 1 PID: 6937 Comm: syz.6.2028 Not tainted syzkaller #0 [ 728.220893][ T6937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 728.220982][ T6937] Call Trace: [ 728.239000][ T6901] F2FS-fs (loop1): Found nat_bits in checkpoint [ 728.244028][ T6937] [ 728.244041][ T6937] __dump_stack+0x21/0x30 [ 728.244073][ T6937] dump_stack_lvl+0xee/0x150 [ 728.275626][ T6937] ? show_regs_print_info+0x20/0x20 [ 728.280866][ T6937] ? load_image+0x3a0/0x3a0 [ 728.285494][ T6937] print_address_description+0x7f/0x2c0 [ 728.291309][ T6937] ? tc_setup_flow_action+0x870/0x3240 [ 728.296815][ T6937] kasan_report+0xf1/0x140 [ 728.297719][ T6901] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 728.301341][ T6937] ? tc_setup_flow_action+0x870/0x3240 [ 728.301374][ T6937] __asan_report_load8_noabort+0x14/0x20 [ 728.309335][ T6901] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 728.314760][ T6937] tc_setup_flow_action+0x870/0x3240 [ 728.314803][ T6937] mall_replace_hw_filter+0x293/0x820 [ 728.339139][ T6937] ? pcpu_block_update_hint_alloc+0x8c1/0xc50 [ 728.345340][ T6937] ? mall_set_parms+0x520/0x520 [ 728.350583][ T6937] ? tcf_exts_destroy+0xb0/0xb0 [ 728.356256][ T6937] ? mall_set_parms+0x1e8/0x520 [ 728.362000][ T6937] mall_change+0x526/0x740 [ 728.366612][ T6937] ? __kasan_check_write+0x14/0x20 [ 728.371967][ T6937] ? mall_get+0xa0/0xa0 [ 728.376499][ T6937] ? tcf_chain_tp_insert_unique+0xac1/0xc10 [ 728.382802][ T6937] tc_new_tfilter+0x12a2/0x1870 [ 728.388860][ T6937] ? tcf_gate_entry_destructor+0x20/0x20 [ 728.394568][ T6937] ? security_capable+0x87/0xb0 [ 728.399528][ T6937] ? ns_capable+0x8c/0xf0 [ 728.403866][ T6937] ? netlink_net_capable+0x125/0x160 [ 728.409257][ T6937] ? tcf_gate_entry_destructor+0x20/0x20 [ 728.414904][ T6937] rtnetlink_rcv_msg+0x81b/0xb90 [ 728.419871][ T6937] ? rtnetlink_bind+0x80/0x80 [ 728.424575][ T6937] ? memcpy+0x56/0x70 [ 728.428777][ T6937] ? avc_has_perm_noaudit+0x2f4/0x460 [ 728.434309][ T6937] ? arch_stack_walk+0xee/0x140 [ 728.439325][ T6937] ? avc_denied+0x1b0/0x1b0 [ 728.444569][ T6937] ? stack_trace_save+0x98/0xe0 [ 728.449468][ T6937] ? avc_has_perm+0x158/0x240 [ 728.454502][ T6937] ? avc_has_perm_noaudit+0x460/0x460 [ 728.460851][ T6937] ? x64_sys_call+0x4b/0x9a0 [ 728.465595][ T6937] ? selinux_nlmsg_lookup+0x416/0x4c0 [ 728.471286][ T6937] netlink_rcv_skb+0x1e0/0x430 [ 728.476310][ T6937] ? rtnetlink_bind+0x80/0x80 [ 728.481152][ T6937] ? netlink_ack+0xb60/0xb60 [ 728.485983][ T6937] ? __netlink_lookup+0x387/0x3b0 [ 728.491223][ T6937] rtnetlink_rcv+0x1c/0x20 [ 728.496014][ T6937] netlink_unicast+0x876/0xa40 [ 728.501437][ T6937] netlink_sendmsg+0x86a/0xb70 [ 728.506672][ T6937] ? netlink_getsockopt+0x530/0x530 [ 728.512044][ T6937] ? security_socket_sendmsg+0x82/0xa0 [ 728.517931][ T6937] ? netlink_getsockopt+0x530/0x530 [ 728.523314][ T6937] ____sys_sendmsg+0x5a2/0x8c0 [ 728.528280][ T6937] ? __sys_sendmsg_sock+0x40/0x40 [ 728.533428][ T6937] ? import_iovec+0x7c/0xb0 [ 728.537937][ T6937] ___sys_sendmsg+0x1f0/0x260 [ 728.542636][ T6937] ? __sys_sendmsg+0x250/0x250 [ 728.547848][ T6937] ? sock_show_fdinfo+0xa0/0xa0 [ 728.552724][ T6937] ? __fdget+0x1a1/0x230 [ 728.556983][ T6937] __x64_sys_sendmsg+0x1e2/0x2a0 [ 728.561927][ T6937] ? ___sys_sendmsg+0x260/0x260 [ 728.566907][ T6937] ? __kasan_check_write+0x14/0x20 [ 728.572028][ T6937] ? switch_fpu_return+0x15d/0x2c0 [ 728.577185][ T6937] x64_sys_call+0x4b/0x9a0 [ 728.581604][ T6937] do_syscall_64+0x4c/0xa0 [ 728.586118][ T6937] ? clear_bhb_loop+0x50/0xa0 [ 728.590805][ T6937] ? clear_bhb_loop+0x50/0xa0 [ 728.595488][ T6937] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 728.601505][ T6937] RIP: 0033:0x7f726df99fc9 [ 728.606116][ T6937] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 728.625730][ T6937] RSP: 002b:00007f726ca02038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 728.634166][ T6937] RAX: ffffffffffffffda RBX: 00007f726e1f0fa0 RCX: 00007f726df99fc9 [ 728.642292][ T6937] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000004 [ 728.650494][ T6937] RBP: 00007f726e01cf91 R08: 0000000000000000 R09: 0000000000000000 [ 728.658557][ T6937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 728.666640][ T6937] R13: 00007f726e1f1038 R14: 00007f726e1f0fa0 R15: 00007fff62e1bec8 [ 728.674904][ T6937] [ 728.677923][ T6937] [ 728.680262][ T6937] Allocated by task 6937: [ 728.684687][ T6937] __kasan_kmalloc+0xda/0x110 [ 728.689384][ T6937] __kmalloc+0x13d/0x2c0 [ 728.693642][ T6937] tcf_idr_create+0x5f/0x790 [ 728.698239][ T6937] tcf_idr_create_from_flags+0x61/0x70 [ 728.703952][ T6937] tcf_gact_init+0x346/0x580 [ 728.708571][ T6937] tcf_action_init_1+0x3f7/0x6a0 [ 728.713536][ T6937] tcf_action_init+0x1e9/0x710 [ 728.718309][ T6937] tcf_exts_validate+0x217/0x520 [ 728.723628][ T6937] mall_set_parms+0x48/0x520 [ 728.728349][ T6937] mall_change+0x45a/0x740 [ 728.732868][ T6937] tc_new_tfilter+0x12a2/0x1870 [ 728.738055][ T6937] rtnetlink_rcv_msg+0x81b/0xb90 [ 728.743364][ T6937] netlink_rcv_skb+0x1e0/0x430 [ 728.748240][ T6937] rtnetlink_rcv+0x1c/0x20 [ 728.752817][ T6937] netlink_unicast+0x876/0xa40 [ 728.757616][ T6937] netlink_sendmsg+0x86a/0xb70 [ 728.762402][ T6937] ____sys_sendmsg+0x5a2/0x8c0 [ 728.767376][ T6937] ___sys_sendmsg+0x1f0/0x260 [ 728.772065][ T6937] __x64_sys_sendmsg+0x1e2/0x2a0 [ 728.777020][ T6937] x64_sys_call+0x4b/0x9a0 [ 728.781441][ T6937] do_syscall_64+0x4c/0xa0 [ 728.785911][ T6937] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 728.791837][ T6937] [ 728.794193][ T6937] Last potentially related work creation: [ 728.800176][ T6937] kasan_save_stack+0x3a/0x60 [ 728.804866][ T6937] __kasan_record_aux_stack+0xd2/0x100 [ 728.810517][ T6937] kasan_record_aux_stack_noalloc+0xb/0x10 [ 728.816332][ T6937] kvfree_call_rcu+0xae/0x7e0 [ 728.821013][ T6937] ip_ma_put+0xf7/0x140 [ 728.825271][ T6937] __ip_mc_dec_group+0x44e/0x520 [ 728.830298][ T6937] ip_mc_down+0x1b0/0x240 [ 728.834651][ T6937] inetdev_event+0x2c7/0x10a0 [ 728.839331][ T6937] raw_notifier_call_chain+0x90/0x100 [ 728.844804][ T6937] dev_close_many+0x32d/0x4d0 [ 728.849594][ T6937] unregister_netdevice_many+0x44c/0x1990 [ 728.855317][ T6937] unregister_netdevice_queue+0x31c/0x360 [ 728.861064][ T6937] __tun_detach+0xca6/0x1450 [ 728.865748][ T6937] tun_chr_close+0x92/0x140 [ 728.870343][ T6937] __fput+0x20b/0x8b0 [ 728.874499][ T6937] ____fput+0x15/0x20 [ 728.878483][ T6937] task_work_run+0x127/0x190 [ 728.883079][ T6937] exit_to_user_mode_loop+0xd0/0xe0 [ 728.888281][ T6937] exit_to_user_mode_prepare+0x87/0xd0 [ 728.893756][ T6937] syscall_exit_to_user_mode+0x1a/0x30 [ 728.899238][ T6937] do_syscall_64+0x58/0xa0 [ 728.903859][ T6937] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 728.909865][ T6937] [ 728.912222][ T6937] The buggy address belongs to the object at ffff88810c6b7000 [ 728.912222][ T6937] which belongs to the cache kmalloc-192 of size 192 [ 728.926388][ T6937] The buggy address is located 0 bytes to the right of [ 728.926388][ T6937] 192-byte region [ffff88810c6b7000, ffff88810c6b70c0) [ 728.940050][ T6937] The buggy address belongs to the page: [ 728.945707][ T6937] page:ffffea000431adc0 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10c6b7 [ 728.956539][ T6937] flags: 0x4000000000000200(slab|zone=1) [ 728.962210][ T6937] raw: 4000000000000200 dead000000000100 dead000000000122 ffff888100042c00 [ 728.970818][ T6937] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 728.979580][ T6937] page dumped because: kasan: bad access detected [ 728.986169][ T6937] page_owner tracks the page as allocated [ 728.991907][ T6937] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY), pid 1, ts 4884967321, free_ts 0 [ 729.006782][ T6937] post_alloc_hook+0x192/0x1b0 [ 729.011650][ T6937] prep_new_page+0x1c/0x110 [ 729.016245][ T6937] get_page_from_freelist+0x2cc5/0x2d50 [ 729.021814][ T6937] __alloc_pages+0x18f/0x440 [ 729.026452][ T6937] new_slab+0xa1/0x4d0 [ 729.030711][ T6937] ___slab_alloc+0x381/0x810 [ 729.035301][ T6937] __slab_alloc+0x49/0x90 [ 729.039742][ T6937] __kmalloc+0x16a/0x2c0 [ 729.044022][ T6937] security_get_permissions+0xa6/0x330 [ 729.049659][ T6937] sel_make_policy_nodes+0xd37/0x12f0 [ 729.055058][ T6937] sel_write_load+0x3c2/0x5e0 [ 729.059742][ T6937] vfs_write+0x3ee/0xf70 [ 729.063984][ T6937] ksys_write+0x140/0x240 [ 729.068402][ T6937] __x64_sys_write+0x7b/0x90 [ 729.073003][ T6937] x64_sys_call+0x8ef/0x9a0 [ 729.077596][ T6937] do_syscall_64+0x4c/0xa0 [ 729.082030][ T6937] page_owner free stack trace missing [ 729.087500][ T6937] [ 729.089868][ T6937] Memory state around the buggy address: [ 729.095601][ T6937] ffff88810c6b6f80: 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc [ 729.103755][ T6937] ffff88810c6b7000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 729.111824][ T6937] >ffff88810c6b7080: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 729.120069][ T6937] ^ [ 729.126491][ T6937] ffff88810c6b7100: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 729.134573][ T6937] ffff88810c6b7180: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 729.142915][ T6937] ================================================================== [ 729.151098][ T6937] Disabling lock debugging due to kernel taint [ 729.164413][ T30] audit: type=1400 audit(1760979244.363:560): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 729.198211][ T6929] FAT-fs (loop5): Unrecognized mount option "check" or missing value [ 729.214259][ T30] audit: type=1400 audit(1760979244.413:561): avc: denied { search } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 729.246348][ T30] audit: type=1400 audit(1760979244.413:562): avc: denied { write } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 729.270913][ T30] audit: type=1400 audit(1760979244.413:563): avc: denied { add_name } for pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 729.307336][ T30] audit: type=1400 audit(1760979244.413:564): avc: denied { create } for pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 729.328496][ T30] audit: type=1400 audit(1760979244.413:565): avc: denied { append open } for pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 729.352340][ T30] audit: type=1400 audit(1760979244.413:566): avc: denied { getattr } for pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 729.397215][ T5170] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 729.637214][ T5170] usb 4-1: Using ep0 maxpacket: 32 [ 729.757273][ T5170] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 729.765433][ T5170] usb 4-1: config 0 has no interface number 0 [ 729.771595][ T5170] usb 4-1: config 0 interface 12 has no altsetting 0 [ 729.937290][ T5170] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 729.946511][ T5170] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 729.954910][ T5170] usb 4-1: Product: syz [ 729.959150][ T5170] usb 4-1: Manufacturer: syz [ 729.963762][ T5170] usb 4-1: SerialNumber: syz [ 729.969640][ T5170] usb 4-1: config 0 descriptor?? [ 731.236598][ T684] usb 4-1: USB disconnect, device number 14 [ 734.167533][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 736.087398][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured!