last executing test programs: 47.908953906s ago: executing program 32 (id=159): chdir(&(0x7f0000000480)='./cgroup\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mkdir(&(0x7f0000000000)='./control\x00', 0x0) r0 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000100)='./control\x00', 0x0) unlinkat(r0, &(0x7f0000000140)='./control\x00', 0x200) rmdir(&(0x7f0000000040)='./control\x00') 40.034796425s ago: executing program 33 (id=283): syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = socket$inet(0x2, 0x801, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) sendto$inet(r0, &(0x7f0000000480)="ccd089f9ff864fc5ed7a5981342865cdd4895469b189619e1622c41011a94119422f7eeb05003d6ebf394b04048195d49822aa263b56fb4b7a465e2b176095e44bfc91d995a4a99282ab37a5443bc1d3e9036496458a724051b5adb093052a91d6eb61dc931cce225d00c1cca5c2749b4e1d4bdc713bb434e33ddf7723834a012474c1c90ffc911a311a3cc5adbcffa7b58ab5e2b82421dc3628997045a44ce56be10bff41240000000000", 0xfffffffffffffffb, 0x4004, 0x0, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r0, 0x0, r1, 0x0, 0x7ffff000, 0x0) 38.660094696s ago: executing program 34 (id=325): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ccc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb190df08747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb81035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22263e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485e4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6b3f0000f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784753f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2205eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e44312c24c2ce8e642bb73c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a748cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d9f95e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8656b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad24c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc5908", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x7fffffffffffffff, {0x40000000000000, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8000, 0xfffffffd, 0x0, r2}}}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x130, 0x0, 0xfff, {0x0, 0x0, 0x0, '\x00', {0x400, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, '\x00', 0x4, 0x0, 0x0, 0x2, {}, {}, {}, {}, 0x0, 0x20000000}}}}) utimes(&(0x7f0000000000)='./file0\x00', 0x0) 32.203212882s ago: executing program 6 (id=431): r0 = io_uring_setup(0x76a3, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x80}) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r2 = dup(r1) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000dc0), 0x6df8}}, 0x0) lstat(0x0, 0x0) close(r0) 32.099223269s ago: executing program 6 (id=432): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x20044e, &(0x7f00000001c0)={[{@minixdf}, {@jqfmt_vfsv0}, {@inlinecrypt}, {@noblock_validity}, {@usrjquota}]}, 0x1, 0x454, &(0x7f0000000400)="$eJzs3M9vFFUcAPDvTH8gArYi/uCHWkVj44+WAioHD2o08YCJiR702LSFIIUaWhMhRMAYPBlj4t149F/wpBdjPJl41bshIYYL4GnM7M7Q3WV3oWWX0e7nkwy8N/OG97775u2+mbdLAANrIv8jidgaEX9ExFg921xgov7XtStn565fOTuXRJa9+3dSK3f1ytm5smh53pYiM5lGpJ8nsbtNvcunzxyfXVxcOFXkp1dOfDS9fPrMC8dOzB5dOLpwcv+hQwcPzLz80v4XexJn3qaruz5d2rPzrQ++fvvwl03xt8TRIxPdDj6dZT2urlrbGtLJcIUNYU2GIiLvrpHa+B+LoVjtvLF487NKGwf0VZZl2ZbOh89nwAaWRHPekIdBUX7Q5/e/5dY6CXi1f9OPyl1+rX4DlMd9rdhqB7IsO1eUGWm5v+2liYh4//w/3+Zb9Oc5BABAkx/z+c/z7eZ/aTzUUO6+Ym1oPCLuj4jtEfFAROyIiAcjamUfjohH1lh/6yLJzfOf9NK6ArtN+fzvlWJtq2n+F2lZZHyoyG2rxT+SHDm2uLCveE0mY2RTnp/pUsdPb/z+VadjjfO/fMvrL+eCRTsuDW9qPmd+dmX2TmJudPlCxK7hdvEnN1YCkojYGRG71lnHsWe/39Pp2K3j76IH60zZdxHP1Pv/fLTEX0q6r09O3xOLC/umy6viZr/+dvGdTvXfUfw9kPf/vW2v/xvxjyeN67XLa6/j4p9fdLynWe/1P5q8V0uPFvs+mV1ZOTUTMZocrje6cf/+1XPLfFk+j39yb/vxvz1WX4ndEZFfxI9GxGMR8XjR9ici4smI2Nsl/l9ef+rD9cffX3n882vq/9XEaLTuaZ8YOv7zD02Vjt8U//Xu/X+wlpos9tzO+9/ttGt9VzMAAAD8/6QRsTWSdOpGOk2npurfl98RkS4uLa88d2Tp45Pz9d8IjMdIWj7pGmt4HjpT3NbX8xciov7VgvL4geK58TdDm2v5qbmlxfmqg4cBt6XD+M/9NVR164C+G47YVHUbgGr4vSYMLuMfBpfxD4OrzfjfXEU7gLuv3ef/uQraAdx9LePfsh8MEPf/MLg6jv+N/D//ADU+/2EgLW+OW/9Ivmui/JfWefqGTcTIf6IZd57IkradG2nVDZPoZ6La9yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBe+TcAAP//yinjzA==") sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x14, 0x2, 0x1, 0x101, 0x0, 0x0, {0x7, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x8041}, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r1, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x200000001494) 31.971137688s ago: executing program 6 (id=433): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_NESTED_STATE(r3, 0xc080aebe, &(0x7f000000a100)={{0x0, 0x0, 0x80}}) 31.785019512s ago: executing program 6 (id=436): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x9901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/../file0\x00', 0x0) 31.756156044s ago: executing program 6 (id=437): r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) write(r1, &(0x7f0000000000)="fa", 0xfffffdef) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f000000b000/0x3000)=nil, 0x3000, 0x3) 31.690457099s ago: executing program 6 (id=438): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x2a, &(0x7f0000000100)=r2, 0x4) recvmsg(r0, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f00000000c0)=""/57, 0x39}], 0x1}, 0x100) sendmsg$unix(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)="2f03", 0x2}], 0x1}, 0x20004011) recvmsg$unix(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10002) sendmsg$inet(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)='l', 0x1}], 0x1}, 0x2404c140) 31.634776073s ago: executing program 35 (id=438): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x2a, &(0x7f0000000100)=r2, 0x4) recvmsg(r0, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f00000000c0)=""/57, 0x39}], 0x1}, 0x100) sendmsg$unix(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)="2f03", 0x2}], 0x1}, 0x20004011) recvmsg$unix(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10002) sendmsg$inet(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)='l', 0x1}], 0x1}, 0x2404c140) 27.767791807s ago: executing program 7 (id=578): creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f00000001c0)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x0, 0x0, 0x401, 0x100, 0x400008, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000061c0)="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", 0x2000, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={0x78, 0x0, 0x0, {0x7, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 27.583953721s ago: executing program 7 (id=582): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES32=r3, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x40890}, 0x0) sendmsg$nl_route(r1, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2400000018000904000000ffff0000000a000000000000060000000008001e00010000"], 0x24}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x6c, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x38, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_LINK={0x8, 0x1, r3}]}}}]}, 0x6c}}, 0x0) 27.548703253s ago: executing program 7 (id=583): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='qdisc_dequeue\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e) 27.515377876s ago: executing program 7 (id=584): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000002c0)='2', 0x1, 0x2) mount(&(0x7f00000004c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x14113e, 0x0) write$binfmt_script(r1, &(0x7f0000000280), 0x208e24b) fallocate(r0, 0x0, 0xbc87, 0x8000c62) 27.167162442s ago: executing program 7 (id=590): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1}, 0x6e) setresuid(0x0, 0x0, 0xee00) listen(r0, 0x800) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6}]}) chdir(0x0) close_range(r1, 0xffffffffffffffff, 0x0) 27.006313844s ago: executing program 7 (id=592): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x29, 0x0, 0x5000) 26.92293359s ago: executing program 36 (id=592): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x29, 0x0, 0x5000) 18.175084753s ago: executing program 1 (id=768): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x4, 0xf1, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 18.08878415s ago: executing program 1 (id=770): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2000081, &(0x7f0000000080)=ANY=[@ANYRES8=0x0, @ANYRES8, @ANYRES8, @ANYRES64=0x0], 0x0, 0x249, &(0x7f00000006c0)="$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") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x218, 0x130, 0x130, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {@empty, {[0xff]}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x1fe]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 17.80397184s ago: executing program 1 (id=778): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000040)="89e7eed9b4b4", 0x6}, {&(0x7f0000000100)="c2c10b270d610400000000", 0xb}], 0x2) 17.640183463s ago: executing program 8 (id=782): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000023000000850000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) r2 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1ba173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a30600ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0x20}, 0x48, 0xffffffffffffffff) r3 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc1}, &(0x7f0000000480)={0x0, "6035ae1e0fe721441705322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6a7ef54e6763fd7264c39ea00c508ba6062696138"}, 0x48, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x4, r3, r2, 0x0, 0x0) keyctl$KEYCTL_MOVE(0x4, r1, r1, 0x0, 0x0) 17.582982407s ago: executing program 1 (id=783): syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000580)='./file0\x00', 0x0, &(0x7f0000001900)=ANY=[], 0xfd, 0x222, &(0x7f00000016c0)="$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") chdir(&(0x7f0000004340)='./file0\x00') creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)=ANY=[], 0xfd14) mknod(&(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) 17.582523497s ago: executing program 8 (id=784): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000004c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = dup3(r1, r0, 0x80000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) dup3(r1, r0, 0x80000) setpriority(0x2, 0x0, 0x8) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x1800, &(0x7f00000005c0)="e2"}) 17.522329491s ago: executing program 8 (id=786): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001a0000000c00018008000100", @ANYRES32=r2], 0x20}}, 0x0) 17.389025471s ago: executing program 8 (id=797): syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000580)='./file0\x00', 0x0, &(0x7f0000001900)=ANY=[], 0xfd, 0x222, &(0x7f00000016c0)="$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") chdir(&(0x7f0000004340)='./file0\x00') creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)=ANY=[], 0xfd14) mknod(&(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) 17.386579401s ago: executing program 1 (id=798): close(0xffffffffffffffff) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x6) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) close(0x3) 17.295433548s ago: executing program 1 (id=789): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x13, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000140)='kfree\x00', r3}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000180), &(0x7f00000002c0)=r2}, 0x20) 17.248013851s ago: executing program 37 (id=789): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x13, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000140)='kfree\x00', r3}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000180), &(0x7f00000002c0)=r2}, 0x20) 17.244766542s ago: executing program 8 (id=792): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 17.202017765s ago: executing program 8 (id=793): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xb, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r2}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x1d, &(0x7f00000001c0), 0x4) 17.103819122s ago: executing program 38 (id=793): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xb, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r2}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x1d, &(0x7f00000001c0), 0x4) 16.975134282s ago: executing program 2 (id=799): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000240)={0x1d, r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000280)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) write$binfmt_script(r0, &(0x7f0000000280)={'#! ', '', [], 0xa, "3065b0319da52da2af"}, 0xd) 16.867976539s ago: executing program 2 (id=802): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r2}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)) 16.820226323s ago: executing program 2 (id=804): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000080)=0x80000001, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000e00)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}], 0x1, 0x240080a0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000001140)=0x2, 0x4) sendmmsg$inet(r0, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="3cdf9a0df115c376edfe5a129e71cc04a100846663b0fa4576b19cbb131cc17fb88f775547cd8571ace7c507ed037f2183abffd89ab8b4ca62ca863357b6b48d305c30d5b69887d2472f508896925e0660adb38902b29f791d95c838042f98b9", 0x60}, {&(0x7f0000000180)="eea99986e4f7ccb042247fe67856fc8e253ecb6f4fa3016ef0e762ac2738fb7f6a4346ac99b50fb421267a17645365b35e566b3354639752c01185e7f41e3d5c2672ea3c4624e84cabd527c74c9da01a2e0f5b964a2ad0f5fb9b740dd54086652a1ca05c64aa67ba434e688ef70287442299c908", 0x74}], 0x2}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000340)="49e045d1377f5f3ca1c84a498c94", 0xe}, {&(0x7f0000000380)="f3d064919ec3e096b13d306ef7b6c4ca11bfb2191bfe0e715fbe8337c71b05ba4a5015a3f3f3fe7b3464b5f0a76b4fc0594d7234cc6cae2bb3f49e0e671b3bb10d59e4c31a52ee84f26d336d696a43f49c626fc25ffd24cbd689046473665225ecab", 0x62}, {&(0x7f0000000440)="6d7ddccc0f4bde59f95c2f2f8e9f63bfd3bf597c226526ed889b6b4921b44e21a9e15c477b2fd46764ed28b5ec13f817dcf9926ae2d4ca4f3b90307305c94c2013cb0470c4c074b1e64dfae11d4a1f481e544b515582563e1bf7eff481deb32e35b59ba9320af0386c875d370ee2ac22283c2a5df00312c4708382afc65bb9367bd247df", 0x84}, {&(0x7f0000000500)="82ecd52e29fc43073eadc02b964dae38fd1a4dda4e8845559de2", 0x1a}, {&(0x7f0000000540)="2918e647a78743e1ab60dbe7e59065085e24f575e5b944ec946ab1f1b5b6c23cc289096b1ed2ba487aac4679a98b854e7b9405783efdaec6b9fa25bdce1f4ea4d08967466b4ad46acca659b2c3eb7568ea3ae4b08dea296cf35efde79dc9941a798b72545ac8ff4d25a62349c8b42975811fff007f74749382f452c1163ef2ade0bab7e7ff0e835f685f107593941da36c647c803d8cb574538d2d27263890dd94b3c9c6eab09e06b38b2e773cb328691a2c7bb7004fdbf2e4a58e41e2e75dbe63266050c0f906d5d9f24dc50072560a96ad1f02c3ecb022f9e9e249daea6a49940728d3b84a11", 0xe7}, {&(0x7f0000000640)="6576f33482e91c81", 0x8}, {&(0x7f0000000880)="3fde694efb6b43c17bf92103d75945c4668991b5a8b6b181db8705a39503a922e50e087b2df249cdc1924ef996bc941b10d8ad0fe3b9cebbd95618ae0bfffde89500f4df8b949435b2b1eadf771b73bbbb7df9872cb63cc5658772f49545175e5ab784c5130d46", 0x67}, {&(0x7f00000006c0)="5d5e0d1d45bc6a12144312041aca0360e3b269367b1ce7921eb6ab68f2e1c8eb352d6710e18688e3f497f17a85fa70d1b5ee5c1dd2c8cd3da4cf5e441c925a9db29858329a7458fce81f0c7afcf50f29539eb1528e5915134f63c899164844e88e2b71c76a4f3fcdc105b6c0bf7041f1e74cee", 0x73}, {&(0x7f0000000240)="b01bdc44d479626417868bd6d9cee7c3312817e415ec2b4cf10e19e2f8263018109c498ba0544c50a2ca9391d79cb6bb9b0450ca516679597197b47c4dca1c6e2844bdea6d9c5c0b49fc09333a7fc62839", 0x51}, {&(0x7f0000000780)="9bf4187f3847f98574142f7e6a924765", 0x10}], 0xa}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000ac0)="14e9eb2b4328892813f7a65cbad23a6a1484efeba29d36f200bf436d544c1d5f566464e8be16d1e0287842f7a547aa903342772221fcb36e448a980dcc9b46bdc8adad97ab335f8eb53a5931acdc2dd54674028b2a57b06db577355be0646070d18ec93f1ad96ffc497fec11e3cabecceb22504b118f62beea15b30d5f39e466652b2e60d66b39ed8f5c", 0x8a}, {&(0x7f0000000940)="faced4a3c55a0baee904aa452aadf862fbb1665f60bf5ef26c53d0fe2fb3b84cebdca71c7161135d8dfca94143a2cd93642230ea0568fe0687bc2b748fdebee6c271b4358c1cf71be8829dde3d4ed97f70c5ba8a5cd1ed9e", 0x58}, {&(0x7f00000009c0)="fd8af5e10c88a4544d81f9175dc1f0cddcd9501d8e0157b3fa05e888c2015ee5087ba1f4e9453adb7113f76f8aab87999da78bc4ff2637b6eb5110a460f52a631926f7d44be900e725411402ee71a20057642c6a61c07425483391521405a242af2671f5cc30c2a70d88a7b36d8425ad54b5adb03b43894dd70a61b3ad234193b78f629fa4746b89448ad8da47aee1d5733cb46ffa004b1af613612fb5608bcd01ab90f8d1c6c2761b0de2dfe2b1f23e9125603e543d08d64fd1b7a3d96f7b53a476ac2055c109f5d38b8267cd88a358ebc833", 0xd3}], 0x3}}], 0x3, 0x24048844) recvmsg(r0, &(0x7f0000001000)={0x0, 0x0, 0x0}, 0x2000) 16.71958919s ago: executing program 2 (id=805): syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000580)='./file0\x00', 0x0, &(0x7f0000001900)=ANY=[], 0xfd, 0x222, &(0x7f00000016c0)="$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") chdir(&(0x7f0000004340)='./file0\x00') creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)=ANY=[], 0xfd14) mknod(&(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) 16.633973307s ago: executing program 2 (id=806): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='mm_page_alloc\x00', r1}, 0x10) madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xe) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) 16.311684s ago: executing program 2 (id=808): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0700000000000000000005000000180001801400020073797a5f74756e0000000000000000000800038004000380080005"], 0x3c}}, 0x0) 16.281262143s ago: executing program 39 (id=808): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0700000000000000000005000000180001801400020073797a5f74756e0000000000000000000800038004000380080005"], 0x3c}}, 0x0) 2.834927622s ago: executing program 4 (id=1139): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) timer_create(0x0, 0x0, &(0x7f0000000000)) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000500)='hrtimer_start\x00', r1}, 0x10) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) 2.759927458s ago: executing program 4 (id=1141): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f0000000340)='tlb_flush\x00', r1}, 0x18) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r2 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x100000000) 2.729342379s ago: executing program 4 (id=1143): r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x10000000}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESDEC=r2]) 2.519460385s ago: executing program 5 (id=1153): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)="b25b365c0254a7c6fc7ea6155a71b613b02d1645aab67271075189c3540c4dd19ebfb3c4acf87f2eeb258e62cc6ae96db360d874500cb86b4185ee533bf708", 0x3f}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f00000028c0)='\v', 0x1}, {&(0x7f0000000400)="8a", 0x1}, {&(0x7f0000002b40)='-', 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce90bfdbcfb8a86a74f6799f98c36e23e210f053830ac8e978a0785884001a7099c4b9016f1a65a57390caf78c272cbf9711f94505dd525af1ff7d013438df5b844226f41b81e58eb73366", 0x4b}, {&(0x7f0000000540)="f2e659a0b00d26c2ee15", 0xa}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000001600)="f2964dd16e01d56b414499264923beda58d7da0313c1ccafe53965750f25bdaa6b56a87307ec23d48b6f35ce49a813a2bc3cb23fdf42826bdc16788ff466919594de5bf8a1fa5d825947271ade4a95efeb170c", 0x53}, {&(0x7f0000001340)="b8", 0x1}, {&(0x7f0000000500)="01", 0x1}, {&(0x7f0000000280)="87", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000140)='N', 0x1}, {&(0x7f0000000340)="e4", 0xfffffec2}], 0x2}}], 0x4, 0x4000000) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) 2.439492281s ago: executing program 5 (id=1156): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x3, &(0x7f0000000580)=@framed={{0x18, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x1, 0x7fe2, 0x1, 0x12, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000740), 0x80000002, r0}, 0x38) 2.293770552s ago: executing program 5 (id=1160): syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000280), 0x1, 0x3dd, &(0x7f00000008c0)="$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") write$cgroup_int(0xffffffffffffffff, &(0x7f0000000380), 0x101bf) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000f8ffffff850000000400000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x12, 0x8, 0x4, 0x7cb4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x300, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 2.115423915s ago: executing program 5 (id=1161): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000080)=0x9, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) socket$packet(0x11, 0x2, 0x300) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 2.0386848s ago: executing program 5 (id=1164): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x5, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = socket$inet6(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r2}, 0x10) sendto$inet6(r1, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 2.006267483s ago: executing program 5 (id=1165): r0 = syz_usb_connect$cdc_ncm(0x0, 0x8f, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109027d0002010080000904000001020d0000052406000105240000000d240f0103000000fd0000000406241aff072908241c0101090000142413099f33760bf14377323063f9c8a04d113905241510000905810300020800040904010000020d00000904010102020d0000090582020002e1ad00090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x20, 0x80, 0x1c, {0x40, 0x70, 0xab8, 0xfffc, 0x4, 0x8000, 0x3ff, 0x98, 0x200, 0x6, 0x44, 0x4}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000a40)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000009c0)={0x20, 0x87, 0x2, 0x2}, 0x0}) 1.865525833s ago: executing program 4 (id=1166): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f0000000040), &(0x7f0000000080)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e01f3440cee51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cad32b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337602d3e5a815232f5e16c1b30c3a6abc85018e5ff2c91018afc9ffc2cc788bee1b47683db012469398685211dfbbae3e2ed0a50e7393bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d300006aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7af22e30d46a9d26d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977fb536a9caab37d9ac4cfc1c7b400000000000007ffc826b956ba859ac8e3c177b91bd7d5e41ff83ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d000069a16203a967c1bbe09315c29877a308bcc87dc3addb08142bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8240000e3428d2129369ee1b85af9ffffff0d0df414b315f651c8412392191fa83ee830548f11be359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92000000000f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb74d4ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905de328c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a978ee56c83a3466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342e0eaf6f330e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea95ec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf81700cd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be3827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f969369de47422604e2fc5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293b6c833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b612272d40f522d8c98c879aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbe71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd46dbd61627a2e0a74b5e6aefb7eee403502734137ff47a57f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a125e3af1130d66a7b66837ae7e7123dde7404a067ad0a6a2d6bec9411b61cad4121be3c72ff3a04713042253d438e7becf8120de3895b8ce974958bde39cb8da3427a2e9e2de936431e67fed5ab5684db07de39083d8948cc4c8a2608100000000000000000000aecb8b0b7941088f971ce17427eec32a012295cc0cdd32955176b6ad5a4bb953e58ccfa9428f452cfb5a48a9fda26db3985c8be3c2f99827da074825b01c4a3a71fb59d5798100000000000000c76b05a45d2dd8c20d971e2f3e4369168f5cb83d6ff3a18733fec726034fbfa95624135bee374414b2c8c61f52357a520efd6a10aff244bc8a62ed367981fb4d5d77f7bc093958ff46527499957da4934cd4b370cf76f72dd05fa80cdfb68c836fd81be7a58532e041a87f9222f157610a4bcdc05b2a55308c8e7568b90f7a338557e816a16972aea79dff5becefa6f9c5ce6c58fb38da9e7532dc53cfdc2e789b76f7d32aca1bfea2aa62621b78dded30fc07171866bf3d552900000000a32dda61eeda1750e157c2d569b9d08f583c0ee28daec2e8bb85f3c8e91c4448096ee953def18dc73e55cb30f9cd069d8780b00eaba382f0c3ae391c30a5f1b0f36dd0c2193b791995d2890327a10d7abac76d1202f72e97f0105184d7aaaab8d3e29c9a8d263f076b55cf53c5bb9c0662a3d19a6722d7f83ae4331d3256f90af0857788b380ccc3b266c418e66d1d756d5df6423dd0cea67bc235d3776d22270fc19301ead09f156893e9"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r3}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c) 1.839344245s ago: executing program 4 (id=1168): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000380)=0xffffffff) ioctl$PPPIOCSACTIVE(r1, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) readv(r1, &(0x7f0000001880)=[{&(0x7f00000000c0)=""/40, 0x28}, {&(0x7f00000002c0)=""/89, 0x59}, {&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/127, 0x7f}, {&(0x7f00000004c0)=""/125, 0x7d}, {&(0x7f0000000100)=""/51, 0x33}, {&(0x7f0000000540)=""/81, 0x51}, {&(0x7f0000001780)=""/199, 0xc7}, {&(0x7f00000005c0)=""/125, 0x7d}], 0x9) 1.062509672s ago: executing program 3 (id=1186): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008bd6000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) pwritev2(r0, 0x0, 0x0, 0x5412, 0x0, 0x0) 1.002184767s ago: executing program 3 (id=1188): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x1c) 1.000958567s ago: executing program 3 (id=1198): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) timer_create(0x0, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000500)='hrtimer_start\x00', r0}, 0x10) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) 972.094689ms ago: executing program 3 (id=1191): open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x802) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x8, 0x8b}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$dupfd(r2, 0x0, r0) 955.68657ms ago: executing program 3 (id=1192): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000100)='io_uring_register\x00', r1}, 0x10) r2 = io_uring_setup(0x1d7f, &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0xd, 0x0, 0x0) 916.763193ms ago: executing program 3 (id=1193): socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000080000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000020001801000020646c2100000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000002080)={{r0}, &(0x7f0000002000), &(0x7f0000002040)='%ps \x00'}, 0x20) syz_usb_connect(0x0, 0x17f, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000b2c6d9400a1a0201b17a0102030109026d0101000000000904"], 0x0) 916.227123ms ago: executing program 4 (id=1194): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="1f769a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000600)={0x2c, &(0x7f00000003c0)={0x20, 0x31, 0x2, "48ba"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) 792.914972ms ago: executing program 0 (id=1195): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r0}, 0x18) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000000)) 777.788603ms ago: executing program 0 (id=1196): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000000)='map_files\x00') getdents(r2, &(0x7f0000000040)=""/44, 0x2c) getdents64(r2, 0x0, 0x0) 759.303354ms ago: executing program 0 (id=1197): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x48e80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000580)={0x2, 0x0, @ioapic={0x8000004, 0x2, 0x0, 0xeffffdff, 0x0, [{0x0, 0x7}, {0x19, 0x5, 0xfe, '\x00', 0x1}, {0xfc, 0x4}, {0x93, 0x0, 0x7f, '\x00', 0x2}, {0x8, 0x7c, 0xf, '\x00', 0x7}, {0x0, 0x0, 0x0, '\x00', 0xfc}, {0x3, 0x10, 0xd}, {0x0, 0x2, 0x0, '\x00', 0xcc}, {0x0, 0x0, 0x3, '\x00', 0x7f}, {0xf, 0x5, 0xfe, '\x00', 0x2}, {0x3, 0x10, 0x4, '\x00', 0x9d}, {0x3, 0x50}, {0x0, 0x3, 0x4, '\x00', 0x7}, {0x1}, {0x2, 0xf, 0x4}, {}, {0x40, 0x0, 0x4, '\x00', 0x1}, {0x0, 0x0, 0x0, '\x00', 0xfd}, {0x0, 0x6, 0x7}, {0x80, 0x0, 0x0, '\x00', 0x40}, {0x0, 0x5, 0xff}, {0x0, 0x0, 0x0, '\x00', 0xfe}, {0x1, 0x6, 0xc, '\x00', 0x1}, {0xfc, 0x83, 0xe, '\x00', 0xfc}]}}) 597.040416ms ago: executing program 0 (id=1199): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001940)={0x20, r4, 0x1, 0x0, 0x0, {0x16}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x20}}, 0x0) 596.424396ms ago: executing program 0 (id=1200): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r2}, 0x10) lseek(r0, 0x0, 0x1) 583.625957ms ago: executing program 0 (id=1201): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001200192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800034004000000", 0x58}], 0x1) bind$bt_l2cap(r1, &(0x7f0000000300)={0x1f, 0x0, @fixed, 0x3}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, 0x14) syz_usb_connect(0x1, 0x3f, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000d0918108ac051582588f0000000109022d00010000000009040000030b0800e209058da203002a000009050505"], 0x0) 230.650323ms ago: executing program 9 (id=1202): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000540)='inet_sock_set_state\x00', r2}, 0x10) listen(r1, 0x3) 167.605198ms ago: executing program 9 (id=1203): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002140)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x800) 162.321398ms ago: executing program 9 (id=1204): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000fd41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) 144.04474ms ago: executing program 9 (id=1205): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fd7000/0x18000)=nil, &(0x7f0000005700)=[@text32={0x20, 0x0}], 0x1, 0xc, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21.998039ms ago: executing program 9 (id=1206): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r2}, 0x18) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) 0s ago: executing program 9 (id=1207): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a00000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000106a0529000000000000010902"], 0x0) r1 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) write$hidraw(r1, 0x0, 0x0) close(r0) kernel console output (not intermixed with test programs): s (loop1): Found nat_bits in checkpoint [ 23.319281][ T375] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.326383][ T375] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.352282][ T353] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 23.359421][ T353] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 23.395092][ T375] device bridge_slave_1 left promiscuous mode [ 23.413171][ T375] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.422912][ T375] device bridge_slave_0 left promiscuous mode [ 23.429525][ T375] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.754113][ T408] syz.1.37[408] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 23.754224][ T408] syz.1.37[408] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 23.795956][ T295] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz1 [ 24.049560][ T431] capability: warning: `syz.1.47' uses deprecated v2 capabilities in a way that may be insecure [ 24.378270][ T464] serio: Serial port tty21 [ 24.558337][ T462] loop2: detected capacity change from 0 to 40427 [ 24.586282][ T462] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 24.601694][ T462] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 24.644598][ T462] F2FS-fs (loop2): Found nat_bits in checkpoint [ 24.718092][ T462] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 24.726064][ T462] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 24.770184][ T28] kauditd_printk_skb: 94 callbacks suppressed [ 24.770211][ T28] audit: type=1400 audit(1739452746.356:170): avc: denied { read write } for pid=461 comm="syz.2.63" path="/6/bus/bus" dev="loop2" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 24.791218][ T462] syz.2.63: attempt to access beyond end of device [ 24.791218][ T462] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 24.816466][ T462] syz.2.63: attempt to access beyond end of device [ 24.816466][ T462] loop2: rw=2049, sector=45104, nr_sectors = 16 limit=40427 [ 24.867140][ T292] syz-executor: attempt to access beyond end of device [ 24.867140][ T292] loop2: rw=2051, sector=45096, nr_sectors = 24 limit=40427 [ 24.890443][ T292] F2FS-fs (loop2): Issue discard(5637, 5637, 3) failed, ret: -5 [ 24.981892][ T489] netlink: 8 bytes leftover after parsing attributes in process `syz.2.69'. [ 24.998284][ T489] netlink: 4 bytes leftover after parsing attributes in process `syz.2.69'. [ 25.051781][ T496] loop3: detected capacity change from 0 to 256 [ 25.064640][ T497] device ip6tnl1 entered promiscuous mode [ 25.072100][ T496] ======================================================= [ 25.072100][ T496] WARNING: The mand mount option has been deprecated and [ 25.072100][ T496] and is ignored by this kernel. Remove the mand [ 25.072100][ T496] option from the mount to silence this warning. [ 25.072100][ T496] ======================================================= [ 25.108756][ T28] audit: type=1400 audit(1739452746.696:171): avc: denied { watch } for pid=498 comm="syz.4.76" path="/22" dev="tmpfs" ino=133 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 25.135242][ T496] FAT-fs (loop3): Directory bread(block 64) failed [ 25.142174][ T496] FAT-fs (loop3): Directory bread(block 65) failed [ 25.148986][ T496] FAT-fs (loop3): Directory bread(block 66) failed [ 25.155721][ T496] FAT-fs (loop3): Directory bread(block 67) failed [ 25.168147][ T496] FAT-fs (loop3): Directory bread(block 68) failed [ 25.175118][ T496] FAT-fs (loop3): Directory bread(block 69) failed [ 25.194853][ T28] audit: type=1400 audit(1739452746.776:172): avc: denied { write } for pid=502 comm="syz.1.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 25.195818][ T496] FAT-fs (loop3): Directory bread(block 70) failed [ 25.261879][ T496] FAT-fs (loop3): Directory bread(block 71) failed [ 25.268387][ T496] FAT-fs (loop3): Directory bread(block 72) failed [ 25.271554][ T28] audit: type=1400 audit(1739452746.856:173): avc: denied { create } for pid=509 comm="syz.4.81" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 25.294916][ T496] FAT-fs (loop3): Directory bread(block 73) failed [ 25.328233][ T28] audit: type=1400 audit(1739452746.896:174): avc: denied { relabelfrom } for pid=509 comm="syz.4.81" name="NETLINK" dev="sockfs" ino=16158 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 25.368604][ T518] loop0: detected capacity change from 0 to 128 [ 25.378355][ T28] audit: type=1400 audit(1739452746.896:175): avc: denied { relabelto } for pid=509 comm="syz.4.81" name="NETLINK" dev="sockfs" ino=16158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=netlink_netfilter_socket permissive=1 [ 25.407393][ T28] audit: type=1400 audit(1739452746.896:176): avc: denied { mount } for pid=495 comm="syz.3.74" name="/" dev="loop3" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 25.458540][ T28] audit: type=1400 audit(1739452747.026:177): avc: denied { unmount } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 25.485644][ T524] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=524 comm=syz.0.87 [ 25.510569][ T28] audit: type=1400 audit(1739452747.096:178): avc: denied { create } for pid=522 comm="syz.0.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 25.538546][ T28] audit: type=1400 audit(1739452747.116:179): avc: denied { connect } for pid=522 comm="syz.0.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 25.661268][ T517] loop2: detected capacity change from 0 to 40427 [ 25.668194][ T517] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 25.676093][ T517] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 25.684426][ T295] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 25.712582][ T541] Driver unsupported XDP return value 0 on prog (id 58) dev N/A, expect packet loss! [ 25.742611][ T517] F2FS-fs (loop2): Found nat_bits in checkpoint [ 25.757448][ T547] hub 6-0:1.0: USB hub found [ 25.769697][ T547] hub 6-0:1.0: 1 port detected [ 25.842186][ T517] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 25.849191][ T517] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 25.880551][ T295] usb 5-1: config index 0 descriptor too short (expected 24929, got 18) [ 25.900865][ T295] usb 5-1: config 97 has too many interfaces: 97, using maximum allowed: 32 [ 25.901412][ T517] xt_hashlimit: size too large, truncated to 1048576 [ 25.919822][ T295] usb 5-1: config 97 has an invalid descriptor of length 97, skipping remainder of the config [ 25.938197][ T295] usb 5-1: config 97 has 0 interfaces, different from the descriptor's value: 97 [ 25.947904][ T295] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 25.957297][ T295] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.105161][ T583] netlink: 96 bytes leftover after parsing attributes in process `syz.0.113'. [ 26.269622][ T591] loop0: detected capacity change from 0 to 256 [ 26.321631][ T591] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 26.336561][ T575] loop3: detected capacity change from 0 to 40427 [ 26.361770][ T575] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 26.369473][ T575] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 26.376786][ T295] usb 5-1: string descriptor 0 read error: -71 [ 26.389863][ T295] usb 5-1: USB disconnect, device number 2 [ 26.399669][ T575] F2FS-fs (loop3): invalid crc value [ 26.438065][ T575] F2FS-fs (loop3): Found nat_bits in checkpoint [ 26.519796][ T575] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 26.529463][ T575] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 26.557005][ T603] netlink: 'syz.1.120': attribute type 8 has an invalid length. [ 26.693221][ T10] kworker/u4:1: attempt to access beyond end of device [ 26.693221][ T10] loop3: rw=1, sector=45096, nr_sectors = 16 limit=40427 [ 26.730689][ T620] loop1: detected capacity change from 0 to 2048 [ 26.799800][ T620] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 26.844084][ T626] netlink: 8 bytes leftover after parsing attributes in process `syz.0.128'. [ 26.936353][ T290] EXT4-fs (loop1): unmounting filesystem. [ 26.972100][ T642] syz.1.133[642] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 26.972179][ T642] syz.1.133[642] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 27.396821][ T666] loop0: detected capacity change from 0 to 256 [ 27.431549][ T313] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 27.443395][ T666] incfs: iterate_incfs_dir / -22 [ 27.456236][ T668] rtc_cmos 00:00: Alarms can be up to one day in the future [ 27.468344][ T666] incfs: iterate_incfs_dir / -22 [ 27.483734][ T667] rtc_cmos 00:00: Alarms can be up to one day in the future [ 27.483779][ T666] loop0: detected capacity change from 0 to 512 [ 27.491963][ T311] rtc_cmos 00:00: Alarms can be up to one day in the future [ 27.509873][ T311] rtc_cmos 00:00: Alarms can be up to one day in the future [ 27.517407][ T311] rtc_cmos 00:00: Alarms can be up to one day in the future [ 27.525719][ T311] rtc_cmos 00:00: Alarms can be up to one day in the future [ 27.533166][ T311] rtc rtc0: __rtc_set_alarm: err=-22 [ 27.539625][ T666] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 27.577738][ T675] loop1: detected capacity change from 0 to 1024 [ 27.590670][ T666] EXT4-fs error (device loop0): ext4_do_update_inode:5226: inode #3: comm syz.0.145: corrupted inode contents [ 27.602803][ T666] EXT4-fs error (device loop0): ext4_dirty_inode:6091: inode #3: comm syz.0.145: mark_inode_dirty error [ 27.630742][ T666] EXT4-fs error (device loop0): ext4_do_update_inode:5226: inode #3: comm syz.0.145: corrupted inode contents [ 27.644098][ T666] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #3: comm syz.0.145: mark_inode_dirty error [ 27.655960][ T666] EXT4-fs error (device loop0): ext4_acquire_dquot:6781: comm syz.0.145: Failed to acquire dquot type 0 [ 27.667972][ T666] EXT4-fs error (device loop0): ext4_do_update_inode:5226: inode #16: comm syz.0.145: corrupted inode contents [ 27.681607][ T675] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 27.705344][ T666] EXT4-fs error (device loop0): ext4_dirty_inode:6091: inode #16: comm syz.0.145: mark_inode_dirty error [ 27.740742][ T666] EXT4-fs error (device loop0): ext4_do_update_inode:5226: inode #16: comm syz.0.145: corrupted inode contents [ 27.755377][ T10] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 27.791116][ T10] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 27.823320][ T666] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #16: comm syz.0.145: mark_inode_dirty error [ 27.852250][ T10] EXT4-fs (loop1): This should not happen!! Data will be lost [ 27.852250][ T10] [ 27.873067][ T10] EXT4-fs (loop1): Total free blocks count 0 [ 27.879093][ T666] EXT4-fs error (device loop0): ext4_do_update_inode:5226: inode #16: comm syz.0.145: corrupted inode contents [ 27.895256][ T10] EXT4-fs (loop1): Free/Dirty block details [ 27.906029][ T311] kernel write not supported for file bpf-prog (pid: 311 comm: kworker/0:2) [ 27.915098][ T10] EXT4-fs (loop1): free_blocks=68451041280 [ 27.920987][ T666] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 27.929704][ T10] EXT4-fs (loop1): dirty_blocks=2848 [ 27.934850][ T666] EXT4-fs error (device loop0): ext4_do_update_inode:5226: inode #16: comm syz.0.145: corrupted inode contents [ 27.954537][ T10] EXT4-fs (loop1): Block reservation details [ 27.961294][ T10] EXT4-fs (loop1): i_reserved_data_blocks=178 [ 27.967596][ T666] EXT4-fs error (device loop0): ext4_truncate:4313: inode #16: comm syz.0.145: mark_inode_dirty error [ 28.008826][ T666] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 28.020164][ T10] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 780 with error 28 [ 28.042933][ T666] EXT4-fs (loop0): 1 truncate cleaned up [ 28.048422][ T666] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 28.062326][ T666] ext4 filesystem being mounted at /42/file0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 28.101828][ T608] EXT4-fs (loop0): unmounting filesystem. [ 28.378373][ T716] device gretap0 entered promiscuous mode [ 28.402138][ T716] device vlan2 entered promiscuous mode [ 28.667121][ T720] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.696827][ T720] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.722939][ T720] device bridge_slave_0 entered promiscuous mode [ 28.767850][ T720] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.785694][ T720] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.793636][ T720] device bridge_slave_1 entered promiscuous mode [ 28.813011][ T8] device bridge_slave_1 left promiscuous mode [ 28.818964][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.832050][ T8] device bridge_slave_0 left promiscuous mode [ 28.843867][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.858587][ T8] device veth1_macvtap left promiscuous mode [ 28.877474][ T8] device veth0_vlan left promiscuous mode [ 29.047324][ T753] device wireguard0 entered promiscuous mode [ 29.182470][ T773] netlink: 76 bytes leftover after parsing attributes in process `syz.1.189'. [ 29.293430][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 29.303055][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 29.322261][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 29.337938][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 29.354802][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.361857][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.384271][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 29.401306][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 29.419067][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.426006][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.447291][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 29.490280][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 29.499256][ T781] loop2: detected capacity change from 0 to 40427 [ 29.500632][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 29.523693][ T781] F2FS-fs (loop2): fault_injection options not supported [ 29.529476][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 29.538456][ T781] F2FS-fs (loop2): Image doesn't support compression [ 29.548660][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 29.556438][ T781] F2FS-fs (loop2): Image doesn't support compression [ 29.564058][ T781] F2FS-fs (loop2): invalid crc value [ 29.576955][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 29.588581][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 29.610154][ T781] F2FS-fs (loop2): Found nat_bits in checkpoint [ 29.624982][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 29.633127][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 29.660689][ T720] device veth0_vlan entered promiscuous mode [ 29.667174][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 29.675949][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 29.699032][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 29.716985][ T720] device veth1_macvtap entered promiscuous mode [ 29.740355][ T781] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 29.771408][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 29.779559][ T28] kauditd_printk_skb: 127 callbacks suppressed [ 29.779574][ T28] audit: type=1400 audit(1739452751.356:305): avc: denied { ioctl } for pid=778 comm="syz.2.193" path="/19/bus/file0" dev="loop2" ino=10 ioctlcmd=0xf508 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 29.810540][ T292] syz-executor: attempt to access beyond end of device [ 29.810540][ T292] loop2: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 29.824915][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 29.829370][ T28] audit: type=1400 audit(1739452751.376:306): avc: denied { ioctl } for pid=797 comm="syz.1.198" path="socket:[17755]" dev="sockfs" ino=17755 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 29.874584][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 29.885286][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 29.917184][ T798] skbuff: bad partial csum: csum=65506/2 headroom=144 headlen=65526 [ 29.995646][ T804] overlayfs: missing 'lowerdir' [ 30.082735][ T28] audit: type=1400 audit(1739452751.666:307): avc: denied { bpf } for pid=809 comm="syz.5.203" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 30.106905][ T810] netem: change failed [ 30.129410][ T28] audit: type=1400 audit(1739452751.666:308): avc: denied { read write } for pid=290 comm="syz-executor" name="loop1" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 30.211161][ T28] audit: type=1400 audit(1739452751.666:309): avc: denied { open } for pid=290 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 30.233617][ T821] syz.2.199[821] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 30.235100][ T821] syz.2.199[821] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 30.249219][ T28] audit: type=1400 audit(1739452751.666:310): avc: denied { ioctl } for pid=290 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=115 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 30.318230][ T28] audit: type=1400 audit(1739452751.686:311): avc: denied { map_create } for pid=811 comm="syz.1.205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 30.348981][ T28] audit: type=1400 audit(1739452751.686:312): avc: denied { map_read map_write } for pid=811 comm="syz.1.205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 30.369848][ T28] audit: type=1400 audit(1739452751.686:313): avc: denied { prog_load } for pid=811 comm="syz.1.205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 30.397167][ T28] audit: type=1400 audit(1739452751.686:314): avc: denied { perfmon } for pid=811 comm="syz.1.205" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 30.429666][ T837] bridge0: port 3(syz_tun) entered blocking state [ 30.449790][ T834] user requested TSC rate below hardware speed [ 30.453320][ T837] bridge0: port 3(syz_tun) entered disabled state [ 30.470639][ T837] device syz_tun entered promiscuous mode [ 30.476327][ T837] bridge0: port 3(syz_tun) entered blocking state [ 30.482638][ T837] bridge0: port 3(syz_tun) entered forwarding state [ 30.546590][ T841] loop5: detected capacity change from 0 to 2048 [ 30.577662][ T841] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 30.609699][ T841] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 30.630755][ T841] EXT4-fs (loop5): Remounting filesystem read-only [ 30.660433][ T720] EXT4-fs (loop5): unmounting filesystem. [ 30.719401][ T311] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 30.760574][ T872] netlink: 32 bytes leftover after parsing attributes in process `syz.2.228'. [ 30.769476][ T872] netem: unknown loss type 13 [ 30.774106][ T872] netem: change failed [ 30.802613][ T868] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2607800741 (5215601482 ns) > initial count (3464344590 ns). Using initial count to start timer. [ 30.869698][ T295] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 30.920485][ T311] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 30.934487][ T311] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 30.960001][ T311] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 30.977648][ T311] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.985777][ T311] usb 2-1: Product: syz [ 30.989825][ T311] usb 2-1: Manufacturer: syz [ 30.994186][ T311] usb 2-1: SerialNumber: syz [ 31.050557][ T295] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 31.061661][ T295] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 31.073025][ T295] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 31.086149][ T295] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 31.095265][ T295] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.104469][ T295] usb 5-1: config 0 descriptor?? [ 31.110526][ T854] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 31.217449][ T311] usb 2-1: 0:2 : does not exist [ 31.224982][ T311] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 31.257894][ T311] usb 2-1: USB disconnect, device number 2 [ 31.522696][ T295] plantronics 0003:047F:FFFF.0002: unknown main item tag 0xd [ 31.532026][ T295] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 31.542448][ T295] plantronics 0003:047F:FFFF.0002: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 31.795796][ T329] usb 5-1: USB disconnect, device number 3 [ 33.039299][ C1] sched: RT throttling activated [ 33.039300][ C0] sched: RT throttling activated [ 35.125970][ T920] netlink: 'syz.2.247': attribute type 280 has an invalid length. [ 35.141053][ T28] kauditd_printk_skb: 49 callbacks suppressed [ 35.141070][ T28] audit: type=1400 audit(1739452756.726:364): avc: denied { execmem } for pid=917 comm="syz.5.248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 35.173442][ T28] audit: type=1400 audit(1739452756.756:365): avc: denied { write } for pid=924 comm="syz.3.249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 35.246526][ T28] audit: type=1400 audit(1739452756.796:366): avc: denied { create } for pid=928 comm="syz.3.251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 35.281130][ T938] Zero length message leads to an empty skb [ 35.291318][ T28] audit: type=1400 audit(1739452756.806:367): avc: denied { bind } for pid=928 comm="syz.3.251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 35.310229][ T28] audit: type=1400 audit(1739452756.806:368): avc: denied { setopt } for pid=928 comm="syz.3.251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 35.338851][ T28] audit: type=1400 audit(1739452756.806:369): avc: denied { write } for pid=928 comm="syz.3.251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 35.372781][ T948] loop1: detected capacity change from 0 to 256 [ 35.377453][ T28] audit: type=1400 audit(1739452756.856:370): avc: denied { ioctl } for pid=935 comm="syz.2.256" path="socket:[18229]" dev="sockfs" ino=18229 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 35.387225][ T948] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 35.412657][ T28] audit: type=1400 audit(1739452756.856:371): avc: denied { bind } for pid=935 comm="syz.2.256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 35.471845][ T956] loop2: detected capacity change from 0 to 256 [ 35.480126][ T28] audit: type=1400 audit(1739452756.856:372): avc: denied { create } for pid=936 comm="syz.1.255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 35.508108][ T956] FAT-fs (loop2): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 35.548111][ T28] audit: type=1400 audit(1739452756.856:373): avc: denied { connect } for pid=936 comm="syz.1.255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 35.575843][ T958] loop3: detected capacity change from 0 to 8192 [ 35.631950][ T313] I/O error, dev loop3, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 35.769531][ T983] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 35.879547][ T991] loop4: detected capacity change from 0 to 128 [ 35.900499][ T991] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 35.955744][ T293] FAT-fs (loop4): error, invalid access to FAT (entry 0x0affffff) [ 35.968037][ T982] loop1: detected capacity change from 0 to 40427 [ 35.973778][ T293] FAT-fs (loop4): Filesystem has been set read-only [ 35.989413][ T6] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 35.991223][ T982] F2FS-fs (loop1): Small segment_count (9 < 1 * 24) [ 36.003625][ T982] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 36.018576][ T982] F2FS-fs (loop1): Found nat_bits in checkpoint [ 36.035468][ T996] device veth1_macvtap left promiscuous mode [ 36.042091][ T996] device macsec0 entered promiscuous mode [ 36.078406][ T982] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 36.088014][ T982] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 36.180475][ T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 36.204315][ T290] syz-executor: attempt to access beyond end of device [ 36.204315][ T290] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 36.228284][ T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 36.258564][ T6] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 36.289345][ T6] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 36.318510][ T6] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.319409][ T1010] syz.3.291 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 36.337275][ T6] usb 3-1: config 0 descriptor?? [ 36.447951][ T1020] syz.1.288[1020] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 36.448055][ T1020] syz.1.288[1020] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 36.460641][ T1011] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.501038][ T1011] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.508555][ T1011] device bridge_slave_0 entered promiscuous mode [ 36.518597][ T1011] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.525599][ T1011] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.533084][ T1011] device bridge_slave_1 entered promiscuous mode [ 36.693343][ T43] device veth1_macvtap left promiscuous mode [ 36.718479][ T43] device veth0_vlan left promiscuous mode [ 36.765365][ T6] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 36.785991][ T6] plantronics 0003:047F:FFFF.0003: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 36.880519][ T1048] netlink: 20 bytes leftover after parsing attributes in process `syz.5.305'. [ 36.900058][ T1011] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.906923][ T1011] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.914093][ T1011] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.921021][ T1011] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.972234][ T6] usb 3-1: USB disconnect, device number 2 [ 36.985268][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 36.997550][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 37.017479][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 37.031404][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 37.039948][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 37.066535][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 37.077291][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 37.089917][ T1011] device veth0_vlan entered promiscuous mode [ 37.097514][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 37.119156][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 37.130544][ T1070] netlink: 28 bytes leftover after parsing attributes in process `syz.3.314'. [ 37.134314][ T1011] device veth1_macvtap entered promiscuous mode [ 37.154543][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 37.163360][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 37.170927][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 37.179094][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 37.187646][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 37.213044][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 37.234045][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 37.246155][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 37.260015][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 37.473801][ T1096] can0: slcan on pts0. [ 37.569649][ T1095] can0 (unregistered): slcan off pts0. [ 37.870018][ T1105] loop2: detected capacity change from 0 to 40427 [ 37.877427][ T1105] F2FS-fs (loop2): fault_injection options not supported [ 37.884850][ T1105] F2FS-fs (loop2): heap/no_heap options were deprecated [ 37.891847][ T1105] F2FS-fs (loop2): Image doesn't support compression [ 37.898476][ T1105] F2FS-fs (loop2): fault_type options not supported [ 37.907339][ T1105] F2FS-fs (loop2): invalid crc value [ 37.930983][ T1120] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.942057][ T1120] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.943002][ T1105] F2FS-fs (loop2): Found nat_bits in checkpoint [ 37.949641][ T1120] device bridge_slave_0 entered promiscuous mode [ 37.966328][ T1120] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.973671][ T1120] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.981213][ T1120] device bridge_slave_1 entered promiscuous mode [ 38.064096][ T43] device bridge_slave_1 left promiscuous mode [ 38.074367][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.086817][ T1105] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 38.086917][ T43] device bridge_slave_0 left promiscuous mode [ 38.116020][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.130564][ T43] device veth0_vlan left promiscuous mode [ 38.284162][ T292] syz-executor: attempt to access beyond end of device [ 38.284162][ T292] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 38.476942][ T1149] loop5: detected capacity change from 0 to 256 [ 38.532254][ T1149] FAT-fs (loop5): bogus number of FAT sectors [ 38.548095][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 38.558646][ T1149] FAT-fs (loop5): Can't find a valid FAT filesystem [ 38.561453][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 38.615751][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 38.637742][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 38.663900][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.670813][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.699767][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 38.718822][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 38.733044][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 38.749798][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.756805][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.794464][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 38.822533][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 38.858252][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 38.902359][ T1120] device veth0_vlan entered promiscuous mode [ 38.908701][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 38.922520][ T1167] loop6: detected capacity change from 0 to 2048 [ 38.929655][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 38.937070][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 38.953406][ T1120] device veth1_macvtap entered promiscuous mode [ 38.972126][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 38.983280][ T1167] Alternate GPT is invalid, using primary GPT. [ 38.995678][ T1167] loop6: p2 p3 p7 [ 39.001317][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 39.070863][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 39.439958][ T6] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 39.460344][ T295] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 39.516484][ T1225] loop2: detected capacity change from 0 to 256 [ 39.523335][ T1225] FAT-fs (loop2): bogus number of FAT sectors [ 39.532927][ T1225] FAT-fs (loop2): Can't find a valid FAT filesystem [ 39.620476][ T6] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 39.633848][ T6] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 39.635091][ T24] hid-generic 0000:0003:0000.0004: unknown main item tag 0x0 [ 39.651863][ T6] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 39.652069][ T295] usb 7-1: Using ep0 maxpacket: 16 [ 39.664919][ T6] usb 6-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 39.678542][ T6] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.679452][ T24] hid-generic 0000:0003:0000.0004: unknown main item tag 0x0 [ 39.695031][ T6] usb 6-1: config 0 descriptor?? [ 39.695198][ T295] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 39.708852][ T24] hid-generic 0000:0003:0000.0004: hidraw0: HID v0.00 Device [syz0] on syz1 [ 39.718302][ T295] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 39.733471][ T295] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 39.750674][ T295] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 39.769351][ T295] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.777223][ T295] usb 7-1: Product: syz [ 39.781621][ T295] usb 7-1: Manufacturer: syz [ 39.787328][ T295] usb 7-1: SerialNumber: syz [ 40.107504][ T6] acrux 0003:1A34:0802.0005: item fetching failed at offset 2/5 [ 40.116714][ T6] acrux 0003:1A34:0802.0005: parse failed [ 40.128893][ T6] acrux: probe of 0003:1A34:0802.0005 failed with error -22 [ 40.200998][ T295] usb 7-1: 0:2 : does not exist [ 40.314031][ T311] usb 6-1: USB disconnect, device number 2 [ 42.097015][ T295] usb 7-1: 1:0: failed to get current value for ch 0 (-22) [ 42.117886][ T295] usb 7-1: USB disconnect, device number 2 [ 42.340365][ T313] udevd[313]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 42.473066][ T28] kauditd_printk_skb: 80 callbacks suppressed [ 42.473084][ T28] audit: type=1400 audit(1739453020.059:454): avc: denied { create } for pid=1294 comm="syz.5.404" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 42.507576][ T1299] loop7: detected capacity change from 0 to 512 [ 42.515026][ T1295] I/O error, dev loop11, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 42.524936][ T1299] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 42.528194][ T28] audit: type=1400 audit(1739453020.099:455): avc: denied { mounton } for pid=1294 comm="syz.5.404" path="/43/file0" dev="tmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 42.534712][ T1295] FAT-fs (loop11): unable to read boot sector [ 42.563262][ T1299] EXT4-fs (loop7): 1 truncate cleaned up [ 42.568828][ T1299] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 42.597044][ T1120] EXT4-fs (loop7): unmounting filesystem. [ 42.624435][ T28] audit: type=1400 audit(1739453020.209:456): avc: denied { unlink } for pid=720 comm="syz-executor" name="file0" dev="tmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 42.739348][ T295] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 42.806511][ T28] audit: type=1400 audit(1739453020.389:457): avc: denied { write } for pid=1325 comm="syz.6.418" name="uinput" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 42.821156][ T1327] input: syz0 as /devices/virtual/input/input6 [ 42.835725][ T28] audit: type=1400 audit(1739453020.409:458): avc: denied { ioctl } for pid=1325 comm="syz.6.418" path="/dev/uinput" dev="devtmpfs" ino=258 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 42.865969][ T28] audit: type=1400 audit(1739453020.419:459): avc: denied { read } for pid=87 comm="acpid" name="event3" dev="devtmpfs" ino=589 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 42.889022][ T28] audit: type=1400 audit(1739453020.419:460): avc: denied { open } for pid=87 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=589 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 42.912778][ T28] audit: type=1400 audit(1739453020.419:461): avc: denied { ioctl } for pid=87 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=589 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 42.960663][ T295] usb 3-1: config 0 has no interfaces? [ 42.966183][ T295] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 42.975577][ T295] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.994200][ T295] usb 3-1: config 0 descriptor?? [ 43.067061][ T28] audit: type=1326 audit(1739453020.649:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1333 comm="syz.6.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f867fd8cde9 code=0x7fc00000 [ 43.232963][ T311] usb 3-1: USB disconnect, device number 3 [ 43.594339][ T1347] loop1: detected capacity change from 0 to 256 [ 43.600820][ T1347] exfat: Deprecated parameter 'namecase' [ 43.609100][ T1347] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x2eabf3fa, utbl_chksum : 0xe619d30d) [ 43.731227][ T1349] loop5: detected capacity change from 0 to 2048 [ 43.737832][ T1349] ext2: Unknown parameter 'fsmagic' [ 43.788680][ T28] audit: type=1326 audit(1739453021.369:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1333 comm="syz.6.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f867fd83da7 code=0x7fc00000 [ 43.892835][ T295] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 44.087099][ T1367] loop6: detected capacity change from 0 to 512 [ 44.090720][ T295] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 44.105898][ T1367] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 44.109828][ T295] usb 2-1: config 1 has no interface number 0 [ 44.122076][ T295] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 44.133236][ T295] usb 2-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 44.134242][ T1367] EXT4-fs (loop6): 1 truncate cleaned up [ 44.142212][ T295] usb 2-1: config 1 interface 1 altsetting 1 has an invalid endpoint with address 0x92, skipping [ 44.158527][ T295] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 37010, setting to 1024 [ 44.167353][ T1367] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 44.183637][ T295] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 44.196787][ T1011] EXT4-fs (loop6): unmounting filesystem. [ 44.210906][ T295] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 44.220256][ T295] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.229917][ T295] usb 2-1: Product: syz [ 44.233965][ T295] usb 2-1: Manufacturer: syz [ 44.238354][ T295] usb 2-1: SerialNumber: syz [ 44.249374][ T311] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 44.334948][ T1375] netlink: 8 bytes leftover after parsing attributes in process `syz.5.434'. [ 44.343622][ T1375] netlink: 4 bytes leftover after parsing attributes in process `syz.5.434'. [ 44.429471][ T311] usb 3-1: Using ep0 maxpacket: 16 [ 44.435686][ T311] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 44.444288][ T311] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 44.454587][ T1347] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 44.462047][ T311] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 44.480123][ T311] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 44.489001][ T311] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.496870][ T311] usb 3-1: Product: syz [ 44.500845][ T311] usb 3-1: Manufacturer: syz [ 44.505366][ T311] usb 3-1: SerialNumber: syz [ 44.664501][ T1382] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.671603][ T1382] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.679064][ T1382] device bridge_slave_0 entered promiscuous mode [ 44.688617][ T1382] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.695561][ T1382] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.702956][ T1382] device bridge_slave_1 entered promiscuous mode [ 44.781151][ T1382] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.788047][ T1382] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.795152][ T1382] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.802013][ T1382] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.834337][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 44.842936][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.850329][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.862453][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 44.870778][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.877731][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.887318][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 44.895685][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.902566][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.917197][ T311] usb 3-1: 0:2 : does not exist [ 44.922997][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 44.932954][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 44.951308][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 44.960939][ T1071] device bridge_slave_1 left promiscuous mode [ 44.967335][ T1071] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.974973][ T1071] device bridge_slave_0 left promiscuous mode [ 44.981168][ T1071] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.989564][ T1071] device veth1_macvtap left promiscuous mode [ 44.995552][ T1071] device veth0_vlan left promiscuous mode [ 45.029456][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 45.057090][ T1347] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 45.070719][ T295] cdc_ncm 2-1:1.1: bind() failure [ 45.116014][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 45.124184][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 45.131811][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 45.140927][ T1382] device veth0_vlan entered promiscuous mode [ 45.153254][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 45.174771][ T1382] device veth1_macvtap entered promiscuous mode [ 45.194690][ T198] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 45.214015][ T198] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 45.286221][ T751] usb 2-1: USB disconnect, device number 3 [ 45.393945][ T1417] syz.7.453[1417] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 45.394041][ T1417] syz.7.453[1417] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 45.731953][ T311] usb 3-1: 1:0: failed to get current value for ch 0 (-22) [ 45.775335][ T311] usb 3-1: USB disconnect, device number 4 [ 45.828240][ T1461] netlink: 8 bytes leftover after parsing attributes in process `syz.1.472'. [ 45.893302][ T1472] netem: incorrect gi model size [ 45.951626][ T1478] netlink: 'syz.7.479': attribute type 4 has an invalid length. [ 45.961693][ T1478] netlink: 3657 bytes leftover after parsing attributes in process `syz.7.479'. [ 45.976077][ T1480] sch_fq: defrate 0 ignored. [ 46.135334][ T1509] loop1: detected capacity change from 0 to 128 [ 46.243187][ T1526] loop7: detected capacity change from 0 to 128 [ 46.266214][ T1529] loop5: detected capacity change from 0 to 256 [ 46.293811][ T1529] FAT-fs (loop5): Directory bread(block 64) failed [ 46.305413][ T1529] FAT-fs (loop5): Directory bread(block 65) failed [ 46.331094][ T1529] FAT-fs (loop5): Directory bread(block 66) failed [ 46.341648][ T1529] FAT-fs (loop5): Directory bread(block 67) failed [ 46.344377][ T1526] FAT-fs (loop7): bogus number of FAT sectors [ 46.348038][ T1529] FAT-fs (loop5): Directory bread(block 68) failed [ 46.357018][ T1526] FAT-fs (loop7): Can't find a valid FAT filesystem [ 46.378427][ T1529] FAT-fs (loop5): Directory bread(block 69) failed [ 46.393193][ T1529] FAT-fs (loop5): Directory bread(block 70) failed [ 46.404193][ T1529] FAT-fs (loop5): Directory bread(block 71) failed [ 46.434595][ T1529] FAT-fs (loop5): Directory bread(block 72) failed [ 46.454266][ T1529] FAT-fs (loop5): Directory bread(block 73) failed [ 46.462651][ T1549] loop1: detected capacity change from 0 to 512 [ 46.537697][ T8] kworker/u4:0: attempt to access beyond end of device [ 46.537697][ T8] loop5: rw=1, sector=1224, nr_sectors = 128 limit=256 [ 46.549937][ T1549] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 46.556861][ T1558] loop8: detected capacity change from 0 to 128 [ 46.576689][ T1549] ext4 filesystem being mounted at /115/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.614900][ T290] EXT4-fs (loop1): unmounting filesystem. [ 46.723667][ T1577] xt_bpf: check failed: parse error [ 46.747723][ T1583] loop1: detected capacity change from 0 to 1024 [ 46.754836][ T1583] EXT4-fs: Ignoring removed oldalloc option [ 46.760965][ T1583] EXT4-fs: Ignoring removed bh option [ 46.766812][ T1583] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 46.799675][ T1583] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 46.842959][ T1583] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3841: comm syz.1.526: Allocating blocks 481-513 which overlap fs metadata [ 46.859132][ T1583] SELinux: Context : is not valid (left unmapped). [ 46.866263][ T1583] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3841: comm syz.1.526: Allocating blocks 481-513 which overlap fs metadata [ 46.890391][ T290] EXT4-fs (loop1): unmounting filesystem. [ 46.891492][ T1389] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 47.044783][ T1612] loop1: detected capacity change from 0 to 512 [ 47.050609][ T1616] loop8: detected capacity change from 0 to 128 [ 47.061590][ T1616] FAT-fs (loop8): bogus number of FAT sectors [ 47.067624][ T1616] FAT-fs (loop8): Can't find a valid FAT filesystem [ 47.067944][ T1612] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 47.089449][ T1389] usb 6-1: Using ep0 maxpacket: 8 [ 47.101598][ T1389] usb 6-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 47.111174][ T1389] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.117315][ T1612] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 47.126772][ T1389] usb 6-1: Product: syz [ 47.133450][ T1389] usb 6-1: Manufacturer: syz [ 47.137969][ T1389] usb 6-1: SerialNumber: syz [ 47.140160][ T1612] ext4 filesystem being mounted at /121/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.143168][ T1389] usb 6-1: config 0 descriptor?? [ 47.174081][ T1612] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 47.201121][ T290] EXT4-fs (loop1): unmounting filesystem. [ 47.374274][ T1389] usb 6-1: USB disconnect, device number 3 [ 47.610360][ T1655] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 47.653718][ T1660] loop2: detected capacity change from 0 to 1024 [ 47.679893][ T1660] EXT4-fs: Ignoring removed oldalloc option [ 47.687893][ T1660] EXT4-fs: Ignoring removed bh option [ 47.702690][ T1660] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 47.734754][ T1660] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 47.764929][ T1660] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3841: comm syz.2.556: Allocating blocks 481-513 which overlap fs metadata [ 47.780660][ T1671] loop1: detected capacity change from 0 to 2048 [ 47.815094][ T1660] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3841: comm syz.2.556: Allocating blocks 481-513 which overlap fs metadata [ 47.855500][ T1671] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 47.864618][ T1665] loop7: detected capacity change from 0 to 40427 [ 47.871872][ T1665] F2FS-fs (loop7): fault_injection options not supported [ 47.889142][ T1665] F2FS-fs (loop7): invalid crc value [ 47.895718][ T290] EXT4-fs (loop1): unmounting filesystem. [ 47.911737][ T292] EXT4-fs (loop2): unmounting filesystem. [ 47.919130][ T1665] F2FS-fs (loop7): Found nat_bits in checkpoint [ 48.026860][ T28] kauditd_printk_skb: 50 callbacks suppressed [ 48.026878][ T28] audit: type=1400 audit(1739453025.609:514): avc: denied { bind } for pid=1694 comm="syz.8.568" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 48.061115][ T28] audit: type=1400 audit(1739453025.609:515): avc: denied { node_bind } for pid=1694 comm="syz.8.568" saddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 48.091485][ T1665] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 48.118288][ T28] audit: type=1400 audit(1739453025.699:516): avc: denied { mount } for pid=1699 comm="syz.8.570" name="/" dev="configfs" ino=14422 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 48.186689][ T28] audit: type=1400 audit(1739453025.699:517): avc: denied { search } for pid=1699 comm="syz.8.570" name="/" dev="configfs" ino=14422 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 48.211029][ T28] audit: type=1400 audit(1739453025.699:518): avc: denied { read } for pid=1699 comm="syz.8.570" name="/" dev="configfs" ino=14422 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 48.235721][ T28] audit: type=1400 audit(1739453025.699:519): avc: denied { open } for pid=1699 comm="syz.8.570" path="/" dev="configfs" ino=14422 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 48.307640][ T28] audit: type=1400 audit(1739453025.889:520): avc: denied { setopt } for pid=1710 comm="syz.5.575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 48.336433][ T28] audit: type=1400 audit(1739453025.889:521): avc: denied { shutdown } for pid=1710 comm="syz.5.575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 48.673704][ T1737] loop7: detected capacity change from 0 to 1024 [ 48.706024][ T1737] EXT4-fs: Ignoring removed nobh option [ 48.719429][ T1737] EXT4-fs: Ignoring removed bh option [ 48.729842][ T1737] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 48.780506][ T1737] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 48.800342][ T28] audit: type=1400 audit(1739453026.379:522): avc: denied { mounton } for pid=1736 comm="syz.7.584" path="/36/file1/bus" dev="loop7" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 48.884653][ T1744] netlink: 12 bytes leftover after parsing attributes in process `syz.8.586'. [ 48.966774][ T28] audit: type=1400 audit(1739453026.549:523): avc: denied { read } for pid=1749 comm="syz.2.588" name="usbmon7" dev="devtmpfs" ino=176 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 48.998925][ T1120] EXT4-fs error (device loop7): ext4_map_blocks:634: inode #2: block 16: comm syz-executor: lblock 0 mapped to illegal pblock 16 (length 1) [ 49.005686][ T1752] loop8: detected capacity change from 0 to 512 [ 49.026373][ T1120] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5887: Corrupt filesystem [ 49.036049][ T1752] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 49.049459][ T1120] EXT4-fs error (device loop7): ext4_dirty_inode:6091: inode #2: comm syz-executor: mark_inode_dirty error [ 49.071827][ T1120] EXT4-fs (loop7): unmounting filesystem. [ 49.073088][ T1752] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 49.086332][ T1752] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.104278][ T1752] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 49.134577][ T1382] EXT4-fs (loop8): unmounting filesystem. [ 49.570702][ T1766] loop5: detected capacity change from 0 to 40427 [ 49.577842][ T1768] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.586939][ T1768] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.604822][ T1773] xt_bpf: check failed: parse error [ 49.607911][ T1768] device bridge_slave_0 entered promiscuous mode [ 49.617955][ T1766] F2FS-fs (loop5): fault_injection options not supported [ 49.627942][ T331] device bridge_slave_1 left promiscuous mode [ 49.636578][ T331] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.644194][ T1766] F2FS-fs (loop5): invalid crc value [ 49.652157][ T331] device bridge_slave_0 left promiscuous mode [ 49.659266][ T1766] F2FS-fs (loop5): Found nat_bits in checkpoint [ 49.669595][ T331] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.686203][ T331] device veth1_macvtap left promiscuous mode [ 49.693873][ T331] device veth0_vlan left promiscuous mode [ 49.720756][ T1779] SELinux: policydb version 0 does not match my version range 15-33 [ 49.728689][ T1779] SELinux: failed to load policy [ 49.759165][ T1766] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 49.806720][ T1784] input: syz1 as /devices/virtual/input/input7 [ 49.833564][ T1766] syz.5.596: attempt to access beyond end of device [ 49.833564][ T1766] loop5: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 49.857282][ T1766] syz.5.596: attempt to access beyond end of device [ 49.857282][ T1766] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 49.879907][ T1788] loop2: detected capacity change from 0 to 512 [ 49.896478][ T1788] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 49.899664][ T720] syz-executor: attempt to access beyond end of device [ 49.899664][ T720] loop5: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 49.923457][ T1768] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.940031][ T1768] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.948247][ T1788] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 49.965437][ T1768] device bridge_slave_1 entered promiscuous mode [ 50.000665][ T1788] ext4 filesystem being mounted at /94/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.042634][ T1788] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 50.099357][ T751] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 50.109161][ T292] EXT4-fs (loop2): unmounting filesystem. [ 50.223778][ T1071] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 50.232496][ T1071] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.246523][ T1071] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.258471][ T1071] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.266971][ T1071] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.273962][ T1071] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.288328][ T1071] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 50.300720][ T751] usb 2-1: Using ep0 maxpacket: 16 [ 50.307471][ T751] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 50.317731][ T1813] SELinux: Context system_u:object_r:hald_sonypic_exec_t:s0 is not valid (left unmapped). [ 50.322611][ T1071] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.335576][ T751] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 50.345908][ T1071] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.352171][ T751] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 50.357406][ T1071] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.369582][ T1071] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.380618][ T751] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 50.391682][ T751] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.392014][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 50.399935][ T751] usb 2-1: Product: syz [ 50.408298][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.411406][ T751] usb 2-1: Manufacturer: syz [ 50.420489][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 50.423517][ T751] usb 2-1: SerialNumber: syz [ 50.432052][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 50.446934][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 50.455441][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 50.467669][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 50.476132][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 50.484809][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 50.492495][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 50.500786][ T1768] device veth0_vlan entered promiscuous mode [ 50.516295][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 50.526289][ T1768] device veth1_macvtap entered promiscuous mode [ 50.537469][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 50.546654][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 50.557409][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 50.565801][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 50.845669][ T751] usb 2-1: 0:2 : does not exist [ 50.879439][ T39] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 51.059394][ T39] usb 10-1: Using ep0 maxpacket: 32 [ 51.065746][ T39] usb 10-1: config 0 has an invalid interface number: 129 but max is 0 [ 51.073926][ T39] usb 10-1: config 0 has no interface number 0 [ 51.079891][ T39] usb 10-1: config 0 interface 129 has no altsetting 0 [ 51.088218][ T39] usb 10-1: New USB device found, idVendor=12d1, idProduct=1423, bcdDevice= 0.00 [ 51.097212][ T39] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.105119][ T39] usb 10-1: Product: syz [ 51.109142][ T39] usb 10-1: Manufacturer: syz [ 51.114243][ T39] usb 10-1: SerialNumber: syz [ 51.119903][ T39] usb 10-1: config 0 descriptor?? [ 51.125773][ T39] usb-storage 10-1:0.129: USB Mass Storage device detected [ 51.333379][ T39] usb 10-1: USB disconnect, device number 2 [ 51.559388][ T311] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 51.653397][ T751] usb 2-1: 1:0: failed to get current value for ch 0 (-22) [ 51.666773][ T751] usb 2-1: USB disconnect, device number 4 [ 51.759669][ T311] usb 3-1: Using ep0 maxpacket: 16 [ 51.767588][ T311] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 51.780281][ T311] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.788568][ T311] usb 3-1: Product: syz [ 51.796048][ T311] usb 3-1: Manufacturer: syz [ 51.800216][ T1844] input: syz1 as /devices/virtual/input/input8 [ 51.804436][ T311] usb 3-1: SerialNumber: syz [ 51.818049][ T311] r8152-cfgselector 3-1: config 0 descriptor?? [ 51.916026][ T1855] serio: Serial port ptm0 [ 52.006487][ T1864] loop5: detected capacity change from 0 to 8192 [ 52.028827][ T1864] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 2074) [ 52.037714][ T1864] FAT-fs (loop5): Filesystem has been set read-only [ 52.160601][ T295] usb 10-1: new full-speed USB device number 3 using dummy_hcd [ 52.227421][ T311] r8152-cfgselector 3-1: Unknown version 0x0000 [ 52.239204][ T311] r8152-cfgselector 3-1: bad CDC descriptors [ 52.246537][ T311] r8152-cfgselector 3-1: Unknown version 0x0000 [ 52.253788][ T311] r8152-cfgselector 3-1: USB disconnect, device number 5 [ 52.350526][ T295] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 52.361424][ T295] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 52.370702][ T295] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 52.378617][ T295] usb 10-1: SerialNumber: syz [ 52.384945][ T295] usb-storage 10-1:1.0: USB Mass Storage device detected [ 52.393429][ T295] usb-storage 10-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 52.469571][ T39] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 52.470273][ T751] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 52.569379][ T329] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 52.603029][ T295] usb 10-1: USB disconnect, device number 3 [ 52.650656][ T39] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 52.661601][ T39] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 52.670607][ T751] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 52.671178][ T39] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 52.681607][ T751] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 52.693751][ T39] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 52.703665][ T751] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 52.711515][ T39] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.720533][ T751] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 52.728873][ T39] usb 2-1: config 0 descriptor?? [ 52.736674][ T751] usb 9-1: SerialNumber: syz [ 52.771488][ T329] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 52.782602][ T329] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 52.793901][ T329] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 52.806671][ T329] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 52.815804][ T329] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.824784][ T329] usb 6-1: config 0 descriptor?? [ 52.830017][ T1895] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 52.959615][ T751] usb 9-1: 0:2 : does not exist [ 52.966608][ T751] usb 9-1: 5:0: failed to get current value for ch 0 (-22) [ 52.982579][ T751] usb 9-1: USB disconnect, device number 2 [ 53.150677][ T39] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 53.160383][ T39] plantronics 0003:047F:FFFF.0006: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 53.199762][ T888] udevd[888]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 53.248662][ T329] plantronics 0003:047F:FFFF.0007: unknown main item tag 0xd [ 53.257519][ T329] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 53.268003][ T329] plantronics 0003:047F:FFFF.0007: hiddev97,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 53.283220][ T1922] netlink: 20 bytes leftover after parsing attributes in process `syz.9.656'. [ 53.294992][ T1922] device vlan2 entered promiscuous mode [ 53.440990][ T329] usb 2-1: USB disconnect, device number 5 [ 53.453780][ T39] usb 6-1: USB disconnect, device number 4 [ 53.496227][ T1932] futex_wake_op: syz.8.660 tries to shift op by -1; fix this program [ 53.592405][ T1946] netlink: 20 bytes leftover after parsing attributes in process `syz.8.668'. [ 53.602856][ T1946] device vlan2 entered promiscuous mode [ 53.663849][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 53.663868][ T28] audit: type=1400 audit(1739453031.249:536): avc: denied { create } for pid=1950 comm="syz.8.669" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 53.694841][ T28] audit: type=1400 audit(1739453031.279:537): avc: denied { write } for pid=1950 comm="syz.8.669" path="socket:[24303]" dev="sockfs" ino=24303 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 53.719672][ T28] audit: type=1400 audit(1739453031.279:538): avc: denied { nlmsg_read } for pid=1950 comm="syz.8.669" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 53.773836][ T28] audit: type=1400 audit(1739453031.359:539): avc: denied { map } for pid=1956 comm="syz.8.673" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=175 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 53.797980][ T28] audit: type=1400 audit(1739453031.359:540): avc: denied { execute } for pid=1956 comm="syz.8.673" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=175 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 53.907963][ T28] audit: type=1326 audit(1739453031.489:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1970 comm="syz.9.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f258358cde9 code=0x7ffc0000 [ 53.931411][ T28] audit: type=1326 audit(1739453031.489:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1970 comm="syz.9.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f258358cde9 code=0x7ffc0000 [ 53.955112][ T28] audit: type=1326 audit(1739453031.509:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1970 comm="syz.9.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f258358cde9 code=0x7ffc0000 [ 53.992288][ T28] audit: type=1326 audit(1739453031.509:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1970 comm="syz.9.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f258358cde9 code=0x7ffc0000 [ 54.015966][ T28] audit: type=1326 audit(1739453031.509:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1970 comm="syz.9.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f258358cde9 code=0x7ffc0000 [ 54.361074][ T1999] loop2: detected capacity change from 0 to 40427 [ 54.391412][ T1999] F2FS-fs (loop2): fault_type options not supported [ 54.398698][ T1999] F2FS-fs (loop2): invalid crc value [ 54.416440][ T1999] F2FS-fs (loop2): Found nat_bits in checkpoint [ 54.441711][ T2021] netlink: 204 bytes leftover after parsing attributes in process `syz.8.698'. [ 54.540536][ T1999] F2FS-fs (loop2): Start checkpoint disabled! [ 54.551789][ T2012] loop5: detected capacity change from 0 to 40427 [ 54.558089][ T1999] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 54.566674][ T39] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 54.575316][ T2012] F2FS-fs (loop5): fault_injection options not supported [ 54.582619][ T2012] F2FS-fs (loop5): heap/no_heap options were deprecated [ 54.601014][ T1999] syz.2.691: attempt to access beyond end of device [ 54.601014][ T1999] loop2: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 54.615151][ T2012] F2FS-fs (loop5): Image doesn't support compression [ 54.623706][ T2012] F2FS-fs (loop5): fault_type options not supported [ 54.637446][ T2012] F2FS-fs (loop5): invalid crc value [ 54.644682][ T1999] syz.2.691: attempt to access beyond end of device [ 54.644682][ T1999] loop2: rw=2049, sector=45096, nr_sectors = 120 limit=40427 [ 54.658652][ T1999] syz.2.691: attempt to access beyond end of device [ 54.658652][ T1999] loop2: rw=2049, sector=77824, nr_sectors = 8 limit=40427 [ 54.673240][ T1999] syz.2.691: attempt to access beyond end of device [ 54.673240][ T1999] loop2: rw=2049, sector=77832, nr_sectors = 128 limit=40427 [ 54.688527][ T2012] F2FS-fs (loop5): Found nat_bits in checkpoint [ 54.754271][ T331] kworker/u4:4: attempt to access beyond end of device [ 54.754271][ T331] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 54.773676][ T39] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 54.798907][ T39] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 54.812287][ T2012] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 54.814110][ T39] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 54.833539][ T39] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 54.842583][ T39] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.851923][ T39] usb 2-1: config 0 descriptor?? [ 54.858237][ T2016] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 54.937964][ T720] syz-executor: attempt to access beyond end of device [ 54.937964][ T720] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 55.293426][ T39] plantronics 0003:047F:FFFF.0008: unknown main item tag 0xd [ 55.302497][ T39] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving [ 55.311747][ T39] plantronics 0003:047F:FFFF.0008: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 55.349379][ T311] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 55.508051][ T19] usb 2-1: USB disconnect, device number 6 [ 55.539435][ T311] usb 3-1: Using ep0 maxpacket: 16 [ 55.546047][ T311] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 55.566297][ T311] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 17, changing to 8 [ 55.571708][ T2064] loop8: detected capacity change from 0 to 40427 [ 55.587420][ T311] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 55.609516][ T311] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 55.609761][ T2064] F2FS-fs (loop8): fault_injection options not supported [ 55.632991][ T311] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2c24, bcdDevice= 0.00 [ 55.642171][ T311] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.669848][ T2064] F2FS-fs (loop8): invalid crc value [ 55.672109][ T311] usb 3-1: config 0 descriptor?? [ 55.700841][ T2064] F2FS-fs (loop8): Found nat_bits in checkpoint [ 55.723886][ T2073] kvm: emulating exchange as write [ 55.773073][ T2064] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 55.824172][ T2064] syz.8.715: attempt to access beyond end of device [ 55.824172][ T2064] loop8: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 55.840170][ T2064] syz.8.715: attempt to access beyond end of device [ 55.840170][ T2064] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 55.874161][ T1382] syz-executor: attempt to access beyond end of device [ 55.874161][ T1382] loop8: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 56.094484][ T311] pyra 0003:1E7D:2C24.0009: unknown main item tag 0x0 [ 56.108785][ T311] pyra 0003:1E7D:2C24.0009: unknown main item tag 0x0 [ 56.123263][ T311] pyra 0003:1E7D:2C24.0009: unknown main item tag 0x0 [ 56.130413][ T311] pyra 0003:1E7D:2C24.0009: unknown main item tag 0x0 [ 56.137539][ T311] pyra 0003:1E7D:2C24.0009: unknown main item tag 0x0 [ 56.145740][ T311] pyra 0003:1E7D:2C24.0009: hidraw0: USB HID v0.00 Device [HID 1e7d:2c24] on usb-dummy_hcd.2-1/input0 [ 56.266211][ T2088] loop8: detected capacity change from 0 to 40427 [ 56.295176][ T2088] F2FS-fs (loop8): fault_injection options not supported [ 56.310616][ T295] usb 3-1: USB disconnect, device number 6 [ 56.317377][ T2088] F2FS-fs (loop8): heap/no_heap options were deprecated [ 56.327473][ T2088] F2FS-fs (loop8): Image doesn't support compression [ 56.343048][ T2088] F2FS-fs (loop8): fault_type options not supported [ 56.350384][ T2088] F2FS-fs (loop8): invalid crc value [ 56.376326][ T2088] F2FS-fs (loop8): Found nat_bits in checkpoint [ 56.456096][ T2088] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 56.505224][ T1382] syz-executor: attempt to access beyond end of device [ 56.505224][ T1382] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 56.622766][ T2130] loop5: detected capacity change from 0 to 40427 [ 56.629919][ T2130] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 56.644733][ T2130] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 56.654555][ T2130] F2FS-fs (loop5): invalid crc value [ 56.661342][ T2130] F2FS-fs (loop5): Found nat_bits in checkpoint [ 56.693007][ T2139] device pim6reg1 entered promiscuous mode [ 56.708608][ T2130] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 56.709384][ T6] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 56.715893][ T2130] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 56.778072][ T2144] loop8: detected capacity change from 0 to 256 [ 56.792709][ T2144] FAT-fs (loop8): bogus number of FAT sectors [ 56.798818][ T2144] FAT-fs (loop8): Can't find a valid FAT filesystem [ 56.909346][ T6] usb 2-1: Using ep0 maxpacket: 8 [ 56.915377][ T6] usb 2-1: config index 0 descriptor too short (expected 5924, got 36) [ 56.933317][ T6] usb 2-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 56.944917][ T6] usb 2-1: config 250 has no interfaces? [ 56.956919][ T6] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 56.983402][ T6] usb 2-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 56.992732][ T6] usb 2-1: Product: syz [ 56.996947][ T6] usb 2-1: SerialNumber: syz [ 57.225288][ T295] usb 2-1: USB disconnect, device number 7 [ 57.349382][ T329] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 57.350408][ T2176] loop9: detected capacity change from 0 to 128 [ 57.369021][ T2176] FAT-fs (loop9): error, clusters badly computed (2 != 1) [ 57.376137][ T2176] FAT-fs (loop9): Filesystem has been set read-only [ 57.531059][ T329] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 57.541897][ T329] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 57.551637][ T329] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 57.564451][ T329] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 57.573301][ T329] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.581950][ T329] usb 3-1: config 0 descriptor?? [ 57.793207][ T2183] loop1: detected capacity change from 0 to 256 [ 57.873704][ T2185] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.880729][ T2185] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.888230][ T2185] device bridge_slave_0 entered promiscuous mode [ 57.895810][ T2185] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.903069][ T2185] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.910860][ T2185] device bridge_slave_1 entered promiscuous mode [ 57.965918][ T331] device bridge_slave_1 left promiscuous mode [ 57.971973][ T331] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.981327][ T331] device bridge_slave_0 left promiscuous mode [ 57.987346][ T331] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.999950][ T329] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving [ 58.022470][ T329] plantronics 0003:047F:FFFF.000A: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 58.038235][ T331] device veth1_macvtap left promiscuous mode [ 58.073639][ T331] device veth0_vlan left promiscuous mode [ 58.091801][ T2203] loop1: detected capacity change from 0 to 256 [ 58.109521][ T2203] FAT-fs (loop1): bogus number of FAT sectors [ 58.119485][ T2203] FAT-fs (loop1): Can't find a valid FAT filesystem [ 58.277568][ T19] usb 3-1: USB disconnect, device number 7 [ 58.405520][ T1071] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.413666][ T1071] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.421314][ T1071] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.433701][ T1071] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.442152][ T1071] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.449017][ T1071] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.456572][ T1071] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.465125][ T1071] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.473473][ T1071] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.480355][ T1071] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.487597][ T1071] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.521127][ T1071] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.537366][ T1071] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.558986][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.575993][ T1071] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.584417][ T1071] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.601132][ T1071] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.608797][ T2232] binder: 2231:2232 ioctl c0306201 0 returned -14 [ 58.610618][ T2234] loop1: detected capacity change from 0 to 128 [ 58.619246][ T2185] device veth0_vlan entered promiscuous mode [ 58.656184][ T2234] FAT-fs (loop1): error, clusters badly computed (2 != 1) [ 58.661518][ T2237] syz.8.786[2237] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 58.663210][ T2237] syz.8.786[2237] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 58.674901][ T1071] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.679449][ T2234] FAT-fs (loop1): Filesystem has been set read-only [ 58.702478][ T2185] device veth1_macvtap entered promiscuous mode [ 58.714677][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.740843][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.782457][ T2242] loop8: detected capacity change from 0 to 128 [ 58.840041][ T2242] FAT-fs (loop8): error, clusters badly computed (2 != 1) [ 58.847002][ T2242] FAT-fs (loop8): Filesystem has been set read-only [ 58.850949][ T2248] loop9: detected capacity change from 0 to 256 [ 58.870506][ T2248] FAT-fs (loop9): bogus number of FAT sectors [ 58.876875][ T2248] FAT-fs (loop9): Can't find a valid FAT filesystem [ 59.266550][ T2257] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.300037][ T2257] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.307410][ T2257] device bridge_slave_0 entered promiscuous mode [ 59.315066][ T2257] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.322068][ T2257] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.337250][ T2257] device bridge_slave_1 entered promiscuous mode [ 59.358493][ T2253] loop5: detected capacity change from 0 to 40427 [ 59.428254][ T2275] loop2: detected capacity change from 0 to 128 [ 59.433802][ T2253] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 59.468165][ T2253] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 59.481753][ T2275] FAT-fs (loop2): error, clusters badly computed (2 != 1) [ 59.488724][ T2275] FAT-fs (loop2): Filesystem has been set read-only [ 59.495685][ T2253] F2FS-fs (loop5): invalid crc value [ 59.549150][ T2253] F2FS-fs (loop5): Found nat_bits in checkpoint [ 59.631862][ T2253] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 59.638786][ T2253] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 59.672445][ T1838] bridge0: port 3(syz_tun) entered disabled state [ 59.700694][ T1838] device syz_tun left promiscuous mode [ 59.706000][ T1838] bridge0: port 3(syz_tun) entered disabled state [ 59.768948][ T28] kauditd_printk_skb: 31 callbacks suppressed [ 59.768966][ T28] audit: type=1400 audit(1739453037.349:577): avc: denied { read } for pid=2282 comm="syz.9.807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 59.842468][ T2267] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.859652][ T2267] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.867072][ T2267] device bridge_slave_0 entered promiscuous mode [ 59.890981][ T198] device bridge_slave_1 left promiscuous mode [ 59.896986][ T198] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.924796][ T198] device bridge_slave_0 left promiscuous mode [ 59.936880][ T198] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.970400][ T198] device veth1_macvtap left promiscuous mode [ 59.976276][ T198] device veth0_vlan left promiscuous mode [ 60.116538][ T2267] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.123714][ T2267] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.131012][ T2267] device bridge_slave_1 entered promiscuous mode [ 60.210362][ T2289] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.217231][ T2289] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.224906][ T2289] device bridge_slave_0 entered promiscuous mode [ 60.240302][ T2289] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.247278][ T2289] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.254609][ T2289] device bridge_slave_1 entered promiscuous mode [ 60.334819][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.342595][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.362082][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.370838][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.378970][ T331] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.385933][ T331] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.393237][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.401948][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.410025][ T331] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.416856][ T331] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.424130][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.442193][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.450225][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.457974][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.466219][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.517245][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.525625][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.537904][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.545685][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.560768][ T2257] device veth0_vlan entered promiscuous mode [ 60.570008][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.577290][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.587893][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.602985][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.610358][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.617577][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.625805][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.633988][ T331] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.640873][ T331] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.648398][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.665338][ T2257] device veth1_macvtap entered promiscuous mode [ 60.675075][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.684450][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.692830][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.701114][ T331] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.707955][ T331] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.715471][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.723690][ T331] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.730741][ T331] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.737925][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.746034][ T331] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.752993][ T331] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.760192][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.781711][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.790140][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.798162][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.806515][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.814835][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.823364][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.831323][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.849235][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.885525][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.907769][ T2289] device veth0_vlan entered promiscuous mode [ 60.920900][ T1071] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.937157][ T2303] loop0: detected capacity change from 0 to 256 [ 60.947892][ T1071] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.958835][ T2303] FAT-fs (loop0): bogus number of FAT sectors [ 60.961559][ T1071] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.972159][ T2303] FAT-fs (loop0): Can't find a valid FAT filesystem [ 60.982163][ T1071] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.994692][ T2267] device veth0_vlan entered promiscuous mode [ 61.004723][ T1071] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.021263][ T2306] loop9: detected capacity change from 0 to 256 [ 61.031569][ T1071] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.040572][ T1071] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.052234][ T1071] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.065928][ T2289] device veth1_macvtap entered promiscuous mode [ 61.075804][ T198] device bridge_slave_1 left promiscuous mode [ 61.082160][ T198] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.090356][ T198] device bridge_slave_0 left promiscuous mode [ 61.097023][ T198] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.106239][ T198] device veth1_macvtap left promiscuous mode [ 61.112309][ T198] device veth0_vlan left promiscuous mode [ 61.208428][ T2309] loop9: detected capacity change from 0 to 2048 [ 61.245047][ T28] audit: type=1400 audit(1739453038.829:578): avc: denied { write } for pid=2310 comm="syz.0.815" name="/" dev="configfs" ino=14422 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 61.252545][ T2309] Alternate GPT is invalid, using primary GPT. [ 61.267345][ T28] audit: type=1400 audit(1739453038.829:579): avc: denied { add_name } for pid=2310 comm="syz.0.815" name="cpuacct.usage_sys" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 61.274955][ T2309] loop9: p2 p3 p7 [ 61.295501][ T28] audit: type=1400 audit(1739453038.829:580): avc: denied { create } for pid=2310 comm="syz.0.815" name="cpuacct.usage_sys" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=file permissive=1 [ 61.322082][ T1071] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.332305][ T2267] device veth1_macvtap entered promiscuous mode [ 61.360620][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.372249][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.382619][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.395964][ T28] audit: type=1400 audit(1739453038.969:581): avc: denied { map } for pid=2308 comm="syz.9.814" path="/8/bus" dev="devtmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 61.397097][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.432069][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.441799][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.466790][ T28] audit: type=1400 audit(1739453039.049:582): avc: denied { unmount } for pid=2185 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 61.468015][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.492782][ T313] udevd[313]: inotify_add_watch(7, /dev/loop9p2, 10) failed: No such file or directory [ 61.496975][ T888] udevd[888]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 61.505603][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.516451][ T340] udevd[340]: inotify_add_watch(7, /dev/loop9p7, 10) failed: No such file or directory [ 61.534540][ T28] audit: type=1400 audit(1739453039.119:583): avc: denied { create } for pid=2319 comm="syz.9.820" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 61.556390][ T2318] netlink: 36 bytes leftover after parsing attributes in process `syz.0.817'. [ 61.565863][ T28] audit: type=1400 audit(1739453039.129:584): avc: denied { write } for pid=2319 comm="syz.9.820" path="socket:[27508]" dev="sockfs" ino=27508 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 61.645954][ T2324] input: syz0 as /devices/virtual/input/input12 [ 61.994632][ T2326] loop4: detected capacity change from 0 to 40427 [ 62.013115][ T2326] F2FS-fs (loop4): fault_injection options not supported [ 62.051902][ T2326] F2FS-fs (loop4): invalid crc value [ 62.077711][ T2359] syz.3.836 (2359) used greatest stack depth: 20176 bytes left [ 62.090664][ T2326] F2FS-fs (loop4): Found nat_bits in checkpoint [ 62.099857][ T28] audit: type=1400 audit(1739453039.689:585): avc: denied { create } for pid=2364 comm="syz.0.837" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 62.209390][ T2326] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 62.315490][ T2326] bio_check_eod: 2 callbacks suppressed [ 62.315514][ T2326] syz.4.794: attempt to access beyond end of device [ 62.315514][ T2326] loop4: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 62.350954][ T2326] syz.4.794: attempt to access beyond end of device [ 62.350954][ T2326] loop4: rw=2049, sector=45096, nr_sectors = 120 limit=40427 [ 62.402655][ T2267] syz-executor: attempt to access beyond end of device [ 62.402655][ T2267] loop4: rw=2049, sector=45216, nr_sectors = 8 limit=40427 [ 63.367679][ T2418] netlink: 'syz.3.858': attribute type 2 has an invalid length. [ 63.375315][ T2418] netlink: 36 bytes leftover after parsing attributes in process `syz.3.858'. [ 63.420831][ T2420] capability: warning: `syz.0.859' uses 32-bit capabilities (legacy support in use) [ 63.472332][ T2424] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 64.188986][ T28] audit: type=1400 audit(1739453041.769:586): avc: denied { map } for pid=2458 comm="syz.4.876" path="socket:[27798]" dev="sockfs" ino=27798 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 64.212108][ T6] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 64.399544][ T6] usb 10-1: Using ep0 maxpacket: 32 [ 64.405856][ T6] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 64.417372][ T6] usb 10-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00 [ 64.429820][ T6] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.443214][ T6] usb 10-1: config 0 descriptor?? [ 64.539340][ T1896] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 64.732649][ T1896] usb 5-1: Using ep0 maxpacket: 16 [ 64.739361][ T1896] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 64.749982][ T1896] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 17, changing to 8 [ 64.760907][ T1896] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 64.770512][ T1896] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 64.783252][ T1896] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2c24, bcdDevice= 0.00 [ 64.792337][ T1896] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.804322][ T1896] usb 5-1: config 0 descriptor?? [ 64.856298][ T6] microsoft 0003:045E:009D.000B: hidraw0: USB HID v0.03 Device [HID 045e:009d] on usb-dummy_hcd.9-1/input0 [ 64.868957][ T6] microsoft 0003:045E:009D.000B: no inputs found [ 64.875395][ T6] microsoft 0003:045E:009D.000B: could not initialize ff, continuing anyway [ 64.900376][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 64.900395][ T28] audit: type=1400 audit(1739453042.489:588): avc: denied { relabelfrom } for pid=2482 comm="syz.0.886" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 64.925966][ T28] audit: type=1400 audit(1739453042.489:589): avc: denied { relabelto } for pid=2482 comm="syz.0.886" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 65.063417][ T19] usb 10-1: USB disconnect, device number 4 [ 65.212602][ T1896] pyra 0003:1E7D:2C24.000C: unknown main item tag 0x0 [ 65.219241][ T1896] pyra 0003:1E7D:2C24.000C: unknown main item tag 0x0 [ 65.226132][ T1896] pyra 0003:1E7D:2C24.000C: unknown main item tag 0x0 [ 65.233128][ T1896] pyra 0003:1E7D:2C24.000C: unknown main item tag 0x0 [ 65.239952][ T1896] pyra 0003:1E7D:2C24.000C: unknown main item tag 0x0 [ 65.247530][ T1896] pyra 0003:1E7D:2C24.000C: hidraw0: USB HID v0.00 Device [HID 1e7d:2c24] on usb-dummy_hcd.4-1/input0 [ 65.331588][ T28] audit: type=1400 audit(1739453042.919:590): avc: denied { nlmsg_write } for pid=2516 comm="syz.3.900" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 65.416096][ T311] usb 5-1: USB disconnect, device number 4 [ 65.647742][ T2560] netlink: 'syz.9.919': attribute type 15 has an invalid length. [ 65.700738][ T2564] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 65.960580][ T28] audit: type=1400 audit(1739453043.549:591): avc: denied { read } for pid=2592 comm="syz.0.944" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 66.248593][ T2626] netlink: 16 bytes leftover after parsing attributes in process `syz.5.948'. [ 66.294733][ T198] Bluetooth: hci0: Frame reassembly failed (-84) [ 66.570250][ T2651] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 66.589640][ T2656] input: syz0 as /devices/virtual/input/input13 [ 66.616223][ T2656] input: failed to attach handler leds to device input13, error: -6 [ 67.423714][ T2696] device ip6tnl1 entered promiscuous mode [ 67.505182][ T2703] netlink: 'syz.5.981': attribute type 4 has an invalid length. [ 67.529179][ T2705] netlink: 12 bytes leftover after parsing attributes in process `syz.0.980'. [ 67.552132][ T2703] netlink: 'syz.5.981': attribute type 4 has an invalid length. [ 67.639487][ T28] audit: type=1400 audit(1739453045.229:592): avc: denied { mounton } for pid=2712 comm="syz.0.985" path="/62/file0" dev="configfs" ino=14422 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 67.739537][ T28] audit: type=1400 audit(1739453045.329:593): avc: denied { unmount } for pid=2257 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 68.070958][ T2737] netlink: 'syz.9.995': attribute type 4 has an invalid length. [ 68.092832][ T2737] netlink: 'syz.9.995': attribute type 4 has an invalid length. [ 68.177414][ T2744] loop4: detected capacity change from 0 to 8192 [ 68.293008][ T2747] loop9: detected capacity change from 0 to 8192 [ 68.309332][ T2728] Bluetooth: hci0: command 0x1003 tx timeout [ 68.315199][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 68.342787][ T2751] loop4: detected capacity change from 0 to 256 [ 68.392931][ T2755] loop9: detected capacity change from 0 to 1024 [ 68.447979][ T2755] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 68.456685][ T2755] ext4 filesystem being mounted at /54/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.457868][ T2762] 9p: Unknown access argument c: -22 [ 68.488082][ T28] audit: type=1400 audit(1739453046.069:594): avc: denied { write } for pid=2754 comm="syz.9.1003" name="file1" dev="loop9" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 68.548833][ T2755] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 68.579734][ T2755] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 21 with max blocks 44 with error 28 [ 68.594795][ T2755] EXT4-fs (loop9): This should not happen!! Data will be lost [ 68.594795][ T2755] [ 68.610200][ T2755] EXT4-fs (loop9): Total free blocks count 0 [ 68.616058][ T2755] EXT4-fs (loop9): Free/Dirty block details [ 68.622137][ T2755] EXT4-fs (loop9): free_blocks=4293918720 [ 68.627735][ T2755] EXT4-fs (loop9): dirty_blocks=64 [ 68.633637][ T2755] EXT4-fs (loop9): Block reservation details [ 68.647101][ T2755] EXT4-fs (loop9): i_reserved_data_blocks=4 [ 68.654424][ T2771] sch_tbf: peakrate 64 is lower than or equals to rate 9416279242649327955 ! [ 68.672171][ T2775] loop3: detected capacity change from 0 to 512 [ 68.704673][ T2185] EXT4-fs (loop9): unmounting filesystem. [ 68.722035][ T2779] xt_bpf: check failed: parse error [ 68.742889][ T2775] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 68.784592][ T2775] ext4 filesystem being mounted at /30/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.791097][ T2783] loop4: detected capacity change from 0 to 8192 [ 68.852256][ T2793] xt_hashlimit: size too large, truncated to 1048576 [ 68.866766][ T2289] EXT4-fs (loop3): unmounting filesystem. [ 69.046192][ T28] audit: type=1400 audit(1739453046.629:595): avc: denied { connect } for pid=2811 comm="syz.9.1026" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 69.118872][ T2816] loop9: detected capacity change from 0 to 512 [ 69.180139][ T2816] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 69.190450][ T2816] ext4 filesystem being mounted at /60/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.227020][ T2818] loop3: detected capacity change from 0 to 8192 [ 69.230195][ T2185] EXT4-fs (loop9): unmounting filesystem. [ 69.310635][ T2825] netlink: 'syz.3.1032': attribute type 4 has an invalid length. [ 69.326365][ T2825] netlink: 'syz.3.1032': attribute type 4 has an invalid length. [ 69.427429][ T28] audit: type=1400 audit(1739453047.009:596): avc: denied { setattr } for pid=2841 comm="syz.3.1039" name="/" dev="configfs" ino=14422 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 69.494107][ T2848] loop5: detected capacity change from 0 to 512 [ 69.511640][ T2848] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 69.520536][ T2848] ext4 filesystem being mounted at /164/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.590918][ T720] EXT4-fs (loop5): unmounting filesystem. [ 69.695097][ T2862] syz.5.1047[2862] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 69.695179][ T2862] syz.5.1047[2862] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 69.711879][ T2862] loop5: detected capacity change from 0 to 1024 [ 69.736667][ T2862] EXT4-fs: Ignoring removed nomblk_io_submit option [ 69.750850][ T2862] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c119, mo2=0002] [ 69.759068][ T2862] System zones: 0-1, 3-12 [ 69.766793][ T2862] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 69.789228][ T28] audit: type=1400 audit(1739453047.369:597): avc: denied { setattr } for pid=2861 comm="syz.5.1047" name="cgroup.events" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 69.813233][ T720] EXT4-fs (loop5): unmounting filesystem. [ 69.924557][ T28] audit: type=1400 audit(1739453047.509:598): avc: denied { mounton } for pid=2875 comm="syz.4.1052" path=2F32392FE91F7189591E9233614B dev="tmpfs" ino=169 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 69.925051][ T1896] kernel write not supported for file bpf-prog (pid: 1896 comm: kworker/1:5) [ 69.999490][ T1341] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 70.072663][ T2891] input: syz1 as /devices/virtual/input/input14 [ 70.239367][ T1896] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 70.256819][ T2909] overlayfs: invalid origin (0000) [ 70.429341][ T1896] usb 5-1: Using ep0 maxpacket: 16 [ 70.435441][ T1896] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 70.459351][ T1896] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 70.479166][ T1896] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 70.499479][ T1896] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.516679][ T1896] usb 5-1: config 0 descriptor?? [ 70.639342][ T311] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 70.746909][ T2938] loop3: detected capacity change from 0 to 40427 [ 70.770065][ T2938] F2FS-fs (loop3): invalid crc value [ 70.784945][ T2938] F2FS-fs (loop3): Found nat_bits in checkpoint [ 70.838893][ T2938] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 70.846322][ T311] usb 10-1: Using ep0 maxpacket: 16 [ 70.859237][ T311] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 70.879350][ T311] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 70.899248][ T311] usb 10-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 70.908408][ T311] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.917464][ T311] usb 10-1: config 0 descriptor?? [ 70.931761][ T28] audit: type=1400 audit(1739453048.519:599): avc: denied { setattr } for pid=2937 comm="syz.3.1078" path="/44/file1" dev="loop3" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 70.956096][ T2938] syz.3.1078: attempt to access beyond end of device [ 70.956096][ T2938] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 70.972762][ T28] audit: type=1400 audit(1739453048.549:600): avc: denied { rename } for pid=2937 comm="syz.3.1078" name="file0" dev="loop3" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 71.026159][ T28] audit: type=1400 audit(1739453048.549:601): avc: denied { unlink } for pid=2937 comm="syz.3.1078" name="bus" dev="loop3" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 71.057422][ T1896] lua 0003:1E7D:2C2E.000D: unknown main item tag 0x0 [ 71.066241][ T1896] lua 0003:1E7D:2C2E.000D: unknown main item tag 0x0 [ 71.081810][ T1896] lua 0003:1E7D:2C2E.000D: item fetching failed at offset 2/5 [ 71.096988][ T1896] lua 0003:1E7D:2C2E.000D: parse failed [ 71.108061][ T1896] lua: probe of 0003:1E7D:2C2E.000D failed with error -22 [ 71.261622][ T19] usb 5-1: USB disconnect, device number 5 [ 71.299998][ T2962] loop3: detected capacity change from 0 to 512 [ 71.330423][ T2962] EXT4-fs warning (device loop3): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 71.354663][ T2962] EXT4-fs warning (device loop3): dx_probe:881: Enable large directory feature to access it [ 71.366435][ T311] appleir 0003:05AC:8241.000E: unknown main item tag 0x0 [ 71.383396][ T311] appleir 0003:05AC:8241.000E: unknown main item tag 0x0 [ 71.400594][ T2962] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.1086: Corrupt directory, running e2fsck is recommended [ 71.419448][ T311] appleir 0003:05AC:8241.000E: unknown main item tag 0x0 [ 71.429777][ T311] appleir 0003:05AC:8241.000E: unknown main item tag 0x0 [ 71.444793][ T2962] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 71.463081][ T311] appleir 0003:05AC:8241.000E: unknown main item tag 0x0 [ 71.474661][ T311] appleir 0003:05AC:8241.000E: No inputs registered, leaving [ 71.483360][ T2962] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2186: inode #15: comm syz.3.1086: corrupted in-inode xattr [ 71.512760][ T311] appleir 0003:05AC:8241.000E: hiddev96,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.9-1/input0 [ 71.532718][ T2962] EXT4-fs (loop3): Remounting filesystem read-only [ 71.540199][ T2962] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.1086: couldn't read orphan inode 15 (err -117) [ 71.556446][ T2970] netem: incorrect gi model size [ 71.562092][ T2970] netem: change failed [ 71.571888][ T2962] EXT4-fs (loop3): Remounting filesystem read-only [ 71.581348][ T2962] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 71.607830][ T2962] EXT4-fs warning (device loop3): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 71.619256][ T2962] EXT4-fs warning (device loop3): dx_probe:881: Enable large directory feature to access it [ 71.629823][ T2962] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.1086: Corrupt directory, running e2fsck is recommended [ 71.642978][ T2962] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 3: comm syz.3.1086: path /46/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 71.663856][ T19] usb 10-1: USB disconnect, device number 5 [ 71.674149][ T2962] EXT4-fs (loop3): Remounting filesystem read-only [ 71.680990][ T2962] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 8: comm syz.3.1086: path /46/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=33261, rec_len=1050, size=1024 fake=0 [ 71.700592][ T2962] EXT4-fs (loop3): Remounting filesystem read-only [ 71.717016][ T2289] EXT4-fs (loop3): unmounting filesystem. [ 71.869249][ T28] audit: type=1400 audit(1739453049.449:602): avc: denied { write } for pid=2992 comm="syz.3.1100" path="socket:[31157]" dev="sockfs" ino=31157 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 72.099568][ T1896] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 72.159048][ T3019] loop3: detected capacity change from 0 to 512 [ 72.166567][ T3019] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 72.196508][ T3019] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 72.209408][ T3019] ext4 filesystem being mounted at /56/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.256941][ T2289] EXT4-fs (loop3): unmounting filesystem. [ 72.312614][ T1896] usb 1-1: config index 0 descriptor too short (expected 31, got 27) [ 72.329424][ T1896] usb 1-1: config 1 interface 0 has no altsetting 0 [ 72.347242][ T1896] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= b.72 [ 72.367513][ T1896] usb 1-1: New USB device strings: Mfr=28, Product=37, SerialNumber=3 [ 72.379383][ T1896] usb 1-1: Product: syz [ 72.383390][ T1896] usb 1-1: Manufacturer: syz [ 72.398057][ T1896] usb 1-1: SerialNumber: syz [ 72.419357][ T295] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 72.540573][ T3035] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1118'. [ 72.600538][ T295] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 72.639567][ T28] audit: type=1400 audit(1739453050.229:603): avc: denied { read } for pid=3043 comm="syz.4.1122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 72.664206][ T295] usb 6-1: New USB device found, idVendor=1a0a, idProduct=0102, bcdDevice=7a.b1 [ 72.673735][ T295] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.681831][ T295] usb 6-1: Product: syz [ 72.685917][ T295] usb 6-1: Manufacturer: syz [ 72.690319][ T295] usb 6-1: SerialNumber: syz [ 72.700403][ T295] usb 6-1: config 0 descriptor?? [ 72.708316][ T295] usb_ehset_test: probe of 6-1:0.0 failed with error -32 [ 72.726326][ T3047] loop3: detected capacity change from 0 to 512 [ 72.757585][ T3047] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 72.766554][ T3047] ext4 filesystem being mounted at /58/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.772968][ T3051] loop4: detected capacity change from 0 to 1024 [ 72.809897][ T888] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 72.820283][ T1896] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 72.841903][ T1896] usb 1-1: USB disconnect, device number 2 [ 72.850365][ T1896] usblp0: removed [ 72.887638][ T2289] EXT4-fs (loop3): unmounting filesystem. [ 72.905354][ T28] audit: type=1400 audit(1739453050.489:604): avc: denied { ioctl } for pid=3063 comm="syz.3.1128" path="/dev/ppp" dev="devtmpfs" ino=154 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 72.934345][ T295] usb 6-1: USB disconnect, device number 5 [ 73.172803][ T3081] loop4: detected capacity change from 0 to 512 [ 73.201007][ T3081] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 73.209899][ T3081] ext4 filesystem being mounted at /45/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 73.241500][ T2267] EXT4-fs (loop4): unmounting filesystem. [ 73.271487][ T3087] loop4: detected capacity change from 0 to 512 [ 73.281758][ T3087] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 73.290741][ T3087] ext4 filesystem being mounted at /47/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 73.330699][ T2267] EXT4-fs (loop4): unmounting filesystem. [ 73.380173][ T3093] netlink: 'syz.9.1140': attribute type 4 has an invalid length. [ 73.387860][ T3093] netlink: 3657 bytes leftover after parsing attributes in process `syz.9.1140'. [ 73.401875][ T28] audit: type=1400 audit(1739453050.989:605): avc: denied { map } for pid=3094 comm="syz.4.1141" path="socket:[31806]" dev="sockfs" ino=31806 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 73.426568][ T28] audit: type=1400 audit(1739453050.989:606): avc: denied { read } for pid=3094 comm="syz.4.1141" path="socket:[31806]" dev="sockfs" ino=31806 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 73.732088][ T3131] loop9: detected capacity change from 0 to 512 [ 73.744547][ T3131] EXT4-fs warning (device loop9): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 73.756107][ T3131] EXT4-fs warning (device loop9): dx_probe:881: Enable large directory feature to access it [ 73.766240][ T3131] EXT4-fs warning (device loop9): dx_probe:966: inode #2: comm syz.9.1157: Corrupt directory, running e2fsck is recommended [ 73.779944][ T3131] EXT4-fs (loop9): Cannot turn on journaled quota: type 1: error -117 [ 73.788072][ T3131] EXT4-fs error (device loop9): ext4_xattr_ibody_find:2186: inode #15: comm syz.9.1157: corrupted in-inode xattr [ 73.800781][ T3131] EXT4-fs (loop9): Remounting filesystem read-only [ 73.807143][ T3131] EXT4-fs error (device loop9): ext4_orphan_get:1405: comm syz.9.1157: couldn't read orphan inode 15 (err -117) [ 73.849594][ T3131] EXT4-fs (loop9): Remounting filesystem read-only [ 73.860610][ T3131] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 73.875579][ T3131] EXT4-fs warning (device loop9): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 73.887099][ T3131] EXT4-fs warning (device loop9): dx_probe:881: Enable large directory feature to access it [ 73.892531][ T3140] loop5: detected capacity change from 0 to 512 [ 73.897461][ T3131] EXT4-fs warning (device loop9): dx_probe:966: inode #2: comm syz.9.1157: Corrupt directory, running e2fsck is recommended [ 73.916012][ T3131] EXT4-fs error (device loop9): ext4_readdir:260: inode #2: block 3: comm syz.9.1157: path /82/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 73.936345][ T3131] EXT4-fs (loop9): Remounting filesystem read-only [ 73.943067][ T3131] EXT4-fs error (device loop9): ext4_readdir:260: inode #2: block 8: comm syz.9.1157: path /82/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=33261, rec_len=1050, size=1024 fake=0 [ 73.944991][ T3140] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 73.962968][ T3131] EXT4-fs (loop9): Remounting filesystem read-only [ 73.970942][ T295] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 73.994780][ T2185] EXT4-fs (loop9): unmounting filesystem. [ 74.020386][ T720] EXT4-fs (loop5): unmounting filesystem. [ 74.075418][ T3144] netlink: 1323 bytes leftover after parsing attributes in process `syz.9.1162'. [ 74.135118][ T3152] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1164'. [ 74.139343][ T3149] loop9: detected capacity change from 0 to 512 [ 74.170769][ T295] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 74.171646][ T3149] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 74.183202][ T295] usb 1-1: New USB device found, idVendor=1a0a, idProduct=0102, bcdDevice=7a.b1 [ 74.189919][ T3149] ext4 filesystem being mounted at /84/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.198950][ T295] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.217006][ T295] usb 1-1: Product: syz [ 74.221091][ T295] usb 1-1: Manufacturer: syz [ 74.225590][ T295] usb 1-1: SerialNumber: syz [ 74.228607][ T3149] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 74.235480][ T295] usb 1-1: config 0 descriptor?? [ 74.244149][ T295] usb_ehset_test: probe of 1-1:0.0 failed with error -32 [ 74.303913][ T2185] EXT4-fs (loop9): unmounting filesystem. [ 74.429360][ T19] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 74.457265][ T28] audit: type=1326 audit(1739453052.039:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3164 comm="syz.9.1169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ea0f8cde9 code=0x7ffc0000 [ 74.463856][ T751] usb 1-1: USB disconnect, device number 3 [ 74.621815][ T19] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 74.631373][ T19] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.639211][ T19] usb 6-1: Product: syz [ 74.643223][ T19] usb 6-1: Manufacturer: syz [ 74.647619][ T19] usb 6-1: SerialNumber: syz [ 74.812026][ T3181] loop9: detected capacity change from 0 to 1024 [ 74.822109][ T3181] EXT4-fs: Ignoring removed oldalloc option [ 74.830939][ T3183] loop3: detected capacity change from 0 to 256 [ 74.833483][ T3181] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 74.842254][ T3183] FAT-fs (loop3): bogus number of FAT sectors [ 74.852761][ T3183] FAT-fs (loop3): Can't find a valid FAT filesystem [ 74.917627][ T2185] EXT4-fs (loop9): unmounting filesystem. [ 74.944356][ T3187] netem: change failed [ 75.110525][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 75.110541][ T28] audit: type=1326 audit(1739453052.699:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3200 comm="syz.9.1185" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7ea0f8cde9 code=0x0 [ 75.216381][ T3220] syz.3.1192[3220] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 75.216438][ T3220] syz.3.1192[3220] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 75.519427][ T329] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 75.538105][ T295] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 75.668369][ T19] cdc_ncm 6-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 75.720562][ T295] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 75.730656][ T329] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 75.739555][ T329] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.748781][ T329] usb 5-1: config 0 descriptor?? [ 75.754185][ T295] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0102, bcdDevice=7a.b1 [ 75.763709][ T295] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.771601][ T295] usb 4-1: Product: syz [ 75.775565][ T295] usb 4-1: Manufacturer: syz [ 75.779992][ T295] usb 4-1: SerialNumber: syz [ 75.785454][ T295] usb 4-1: config 0 descriptor?? [ 75.791504][ T295] usb_ehset_test: probe of 4-1:0.0 failed with error -32 [ 75.879379][ T751] usb 1-1: new low-speed USB device number 4 using dummy_hcd [ 75.995309][ T295] usb 4-1: USB disconnect, device number 2 [ 76.072807][ T19] cdc_ncm 6-1:1.0 eth1: register 'cdc_ncm' at usb-dummy_hcd.5-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 76.083613][ T751] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 76.095276][ T19] usb 6-1: USB disconnect, device number 6 [ 76.101141][ T751] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D is Bulk; changing to Interrupt [ 76.111533][ T19] cdc_ncm 6-1:1.0 eth1: unregister 'cdc_ncm' usb-dummy_hcd.5-1, CDC NCM (NO ZLP) [ 76.120582][ T28] audit: type=1400 audit(1739453053.699:617): avc: denied { search } for pid=140 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 76.143676][ T751] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 4 [ 76.169347][ T751] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 76.177200][ T28] audit: type=1400 audit(1739453053.699:618): avc: denied { read } for pid=140 comm="dhcpcd" name="n16" dev="tmpfs" ino=6468 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 76.192415][ T751] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 76.205901][ T28] audit: type=1400 audit(1739453053.699:619): avc: denied { open } for pid=140 comm="dhcpcd" path="/run/udev/data/n16" dev="tmpfs" ino=6468 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 76.226128][ T751] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.236465][ T28] audit: type=1400 audit(1739453053.699:620): avc: denied { getattr } for pid=140 comm="dhcpcd" path="/run/udev/data/n16" dev="tmpfs" ino=6468 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 76.253673][ T751] usb 1-1: config 0 descriptor?? [ 76.276134][ T6] ================================================================== [ 76.284037][ T6] BUG: KASAN: use-after-free in __list_del_entry_valid+0xa6/0x130 [ 76.284657][ T28] audit: type=1400 audit(1739453053.829:621): avc: denied { read } for pid=3257 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=419 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 76.291669][ T6] Read of size 8 at addr ffff88811d352cf0 by task kworker/0:0/6 [ 76.291687][ T6] [ 76.291704][ T6] CPU: 0 PID: 6 Comm: kworker/0:0 Not tainted 6.1.124-syzkaller-00006-gc93dcf3b5358 #0 [ 76.291726][ T6] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 76.291740][ T6] Workqueue: rcu_gp srcu_invoke_callbacks [ 76.315243][ T28] audit: type=1400 audit(1739453053.829:622): avc: denied { open } for pid=3257 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=419 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 76.321999][ T6] Call Trace: [ 76.322009][ T6] [ 76.322017][ T6] dump_stack_lvl+0x151/0x1b7 [ 76.322052][ T6] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 76.324479][ T28] audit: type=1400 audit(1739453053.829:623): avc: denied { getattr } for pid=3257 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=419 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 76.333718][ T6] ? _printk+0xd1/0x111 [ 76.333745][ T6] ? __virt_addr_valid+0x242/0x2f0 [ 76.333775][ T6] print_report+0x158/0x4e0 [ 76.333804][ T6] ? __virt_addr_valid+0x242/0x2f0 [ 76.397543][ T28] audit: type=1400 audit(1739453053.979:624): avc: denied { write } for pid=3256 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=418 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 76.414684][ T6] ? kasan_complete_mode_report_info+0x90/0x1b0 [ 76.414717][ T6] ? __list_del_entry_valid+0xa6/0x130 [ 76.414745][ T6] kasan_report+0x13c/0x170 [ 76.418942][ T28] audit: type=1400 audit(1739453053.979:625): avc: denied { add_name } for pid=3256 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 76.423722][ T6] ? __list_del_entry_valid+0xa6/0x130 [ 76.423755][ T6] __asan_report_load8_noabort+0x14/0x20 [ 76.423777][ T6] __list_del_entry_valid+0xa6/0x130 [ 76.509677][ T6] process_one_work+0x4d7/0xcb0 [ 76.514366][ T6] worker_thread+0xa60/0x1260 [ 76.518885][ T6] kthread+0x26d/0x300 [ 76.522893][ T6] ? worker_clr_flags+0x1a0/0x1a0 [ 76.527895][ T6] ? kthread_blkcg+0xd0/0xd0 [ 76.532349][ T6] ret_from_fork+0x1f/0x30 [ 76.536738][ T6] [ 76.539579][ T6] [ 76.541744][ T6] Allocated by task 19: [ 76.545854][ T6] kasan_set_track+0x4b/0x70 [ 76.550268][ T6] kasan_save_alloc_info+0x1f/0x30 [ 76.555209][ T6] __kasan_kmalloc+0x9c/0xb0 [ 76.559634][ T6] __kmalloc_node+0xb4/0x1e0 [ 76.564056][ T6] kvmalloc_node+0x221/0x640 [ 76.568495][ T6] alloc_netdev_mqs+0x8c/0xf90 [ 76.573088][ T6] alloc_etherdev_mqs+0x36/0x40 [ 76.577805][ T6] usbnet_probe+0x213/0x28a0 [ 76.582198][ T6] usb_probe_interface+0x5b6/0xa90 [ 76.587148][ T6] really_probe+0x2b8/0x920 [ 76.591488][ T6] __driver_probe_device+0x1a0/0x310 [ 76.596610][ T6] driver_probe_device+0x54/0x3d0 [ 76.601465][ T6] __device_attach_driver+0x2e3/0x490 [ 76.606674][ T6] bus_for_each_drv+0x183/0x200 [ 76.611359][ T6] __device_attach+0x312/0x510 [ 76.615959][ T6] device_initial_probe+0x1a/0x20 [ 76.620825][ T6] bus_probe_device+0xbe/0x1e0 [ 76.625420][ T6] device_add+0xb60/0xf10 [ 76.629594][ T6] usb_set_configuration+0x190f/0x1e80 [ 76.634881][ T6] usb_generic_driver_probe+0x8b/0x150 [ 76.640288][ T6] usb_probe_device+0x144/0x260 [ 76.644952][ T6] really_probe+0x2b8/0x920 [ 76.649288][ T6] __driver_probe_device+0x1a0/0x310 [ 76.654416][ T6] driver_probe_device+0x54/0x3d0 [ 76.659445][ T6] __device_attach_driver+0x2e3/0x490 [ 76.664728][ T6] bus_for_each_drv+0x183/0x200 [ 76.669344][ T6] __device_attach+0x312/0x510 [ 76.673940][ T6] device_initial_probe+0x1a/0x20 [ 76.678801][ T6] bus_probe_device+0xbe/0x1e0 [ 76.683490][ T6] device_add+0xb60/0xf10 [ 76.687654][ T6] usb_new_device+0xf2f/0x1820 [ 76.692250][ T6] hub_event+0x2db1/0x4830 [ 76.696519][ T6] process_one_work+0x73d/0xcb0 [ 76.701193][ T6] worker_thread+0xa60/0x1260 [ 76.705706][ T6] kthread+0x26d/0x300 [ 76.709612][ T6] ret_from_fork+0x1f/0x30 [ 76.713866][ T6] [ 76.716040][ T6] Freed by task 19: [ 76.719688][ T6] kasan_set_track+0x4b/0x70 [ 76.724107][ T6] kasan_save_free_info+0x2b/0x40 [ 76.728966][ T6] ____kasan_slab_free+0x131/0x180 [ 76.733915][ T6] __kasan_slab_free+0x11/0x20 [ 76.738522][ T6] __kmem_cache_free+0x21d/0x410 [ 76.743285][ T6] kfree+0x7a/0xf0 [ 76.746848][ T6] kvfree+0x35/0x40 [ 76.750491][ T6] netdev_freemem+0x3f/0x60 [ 76.754838][ T6] netdev_release+0x7f/0xb0 [ 76.759169][ T6] device_release+0x95/0x1c0 [ 76.763596][ T6] kobject_put+0x178/0x260 [ 76.767849][ T6] put_device+0x1f/0x30 [ 76.771841][ T6] free_netdev+0x393/0x480 [ 76.776093][ T6] usbnet_disconnect+0x25f/0x3b0 [ 76.780899][ T6] usb_unbind_interface+0x1fa/0x8c0 [ 76.785912][ T6] device_release_driver_internal+0x53e/0x870 [ 76.791804][ T6] device_release_driver+0x19/0x20 [ 76.796753][ T6] bus_remove_device+0x2fa/0x360 [ 76.801526][ T6] device_del+0x663/0xe90 [ 76.805694][ T6] usb_disable_device+0x380/0x720 [ 76.810552][ T6] usb_disconnect+0x32a/0x890 [ 76.815066][ T6] hub_event+0x1ed8/0x4830 [ 76.819317][ T6] process_one_work+0x73d/0xcb0 [ 76.824002][ T6] worker_thread+0xd71/0x1260 [ 76.828516][ T6] kthread+0x26d/0x300 [ 76.832422][ T6] ret_from_fork+0x1f/0x30 [ 76.836694][ T6] [ 76.838847][ T6] Last potentially related work creation: [ 76.844403][ T6] kasan_save_stack+0x3b/0x60 [ 76.848929][ T6] __kasan_record_aux_stack+0xb4/0xc0 [ 76.854120][ T6] kasan_record_aux_stack_noalloc+0xb/0x10 [ 76.859762][ T6] insert_work+0x56/0x310 [ 76.863931][ T6] __queue_work+0x9b6/0xd70 [ 76.868269][ T6] queue_work_on+0x105/0x170 [ 76.872698][ T6] usbnet_link_change+0x182/0x1a0 [ 76.877566][ T6] usbnet_probe+0x1e1e/0x28a0 [ 76.882071][ T6] usb_probe_interface+0x5b6/0xa90 [ 76.887018][ T6] really_probe+0x2b8/0x920 [ 76.891356][ T6] __driver_probe_device+0x1a0/0x310 [ 76.896483][ T6] driver_probe_device+0x54/0x3d0 [ 76.901339][ T6] __device_attach_driver+0x2e3/0x490 [ 76.906660][ T6] bus_for_each_drv+0x183/0x200 [ 76.911346][ T6] __device_attach+0x312/0x510 [ 76.915944][ T6] device_initial_probe+0x1a/0x20 [ 76.920804][ T6] bus_probe_device+0xbe/0x1e0 [ 76.925406][ T6] device_add+0xb60/0xf10 [ 76.929572][ T6] usb_set_configuration+0x190f/0x1e80 [ 76.934865][ T6] usb_generic_driver_probe+0x8b/0x150 [ 76.940169][ T6] usb_probe_device+0x144/0x260 [ 76.944849][ T6] really_probe+0x2b8/0x920 [ 76.949186][ T6] __driver_probe_device+0x1a0/0x310 [ 76.954308][ T6] driver_probe_device+0x54/0x3d0 [ 76.959166][ T6] __device_attach_driver+0x2e3/0x490 [ 76.964397][ T6] bus_for_each_drv+0x183/0x200 [ 76.969069][ T6] __device_attach+0x312/0x510 [ 76.973664][ T6] device_initial_probe+0x1a/0x20 [ 76.978612][ T6] bus_probe_device+0xbe/0x1e0 [ 76.983296][ T6] device_add+0xb60/0xf10 [ 76.987461][ T6] usb_new_device+0xf2f/0x1820 [ 76.992068][ T6] hub_event+0x2db1/0x4830 [ 76.996319][ T6] process_one_work+0x73d/0xcb0 [ 77.001001][ T6] worker_thread+0xa60/0x1260 [ 77.005514][ T6] kthread+0x26d/0x300 [ 77.009509][ T6] ret_from_fork+0x1f/0x30 [ 77.013770][ T6] [ 77.015929][ T6] The buggy address belongs to the object at ffff88811d352000 [ 77.015929][ T6] which belongs to the cache kmalloc-4k of size 4096 [ 77.029817][ T6] The buggy address is located 3312 bytes inside of [ 77.029817][ T6] 4096-byte region [ffff88811d352000, ffff88811d353000) [ 77.043105][ T6] [ 77.045264][ T6] The buggy address belongs to the physical page: [ 77.051535][ T6] page:ffffea000474d400 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11d350 [ 77.061694][ T6] head:ffffea000474d400 order:3 compound_mapcount:0 compound_pincount:0 [ 77.069849][ T6] flags: 0x4000000000010200(slab|head|zone=1) [ 77.075762][ T6] raw: 4000000000010200 0000000000000000 dead000000000001 ffff888100043380 [ 77.084179][ T6] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000 [ 77.092591][ T6] page dumped because: kasan: bad access detected [ 77.098863][ T6] page_owner tracks the page as allocated [ 77.104396][ T6] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 1382, tgid 1382 (syz-executor), ts 44625097376, free_ts 44466871502 [ 77.126966][ T6] post_alloc_hook+0x213/0x220 [ 77.131558][ T6] prep_new_page+0x1b/0x110 [ 77.135901][ T6] get_page_from_freelist+0x2f41/0x2fc0 [ 77.141292][ T6] __alloc_pages+0x234/0x610 [ 77.145714][ T6] alloc_slab_page+0x6c/0xf0 [ 77.150133][ T6] new_slab+0x90/0x3e0 [ 77.154039][ T6] ___slab_alloc+0x6f9/0xb80 [ 77.158466][ T6] __slab_alloc+0x5d/0xa0 [ 77.162634][ T6] __kmem_cache_alloc_node+0x207/0x2a0 [ 77.167930][ T6] kmalloc_trace+0x2a/0xa0 [ 77.172178][ T6] kobject_uevent_env+0x262/0x720 [ 77.177040][ T6] kobject_uevent+0x1f/0x30 [ 77.181379][ T6] netdev_queue_update_kobjects+0x235/0x4a0 [ 77.187108][ T6] netdev_register_kobject+0x270/0x320 [ 77.192402][ T6] register_netdevice+0xe43/0x1490 [ 77.197348][ T6] register_netdev+0x3c/0x50 [ 77.201788][ T6] page last free stack trace: [ 77.206293][ T6] free_unref_page_prepare+0x9f1/0xa00 [ 77.211584][ T6] free_unref_page+0xb2/0x5c0 [ 77.216096][ T6] __free_pages+0x61/0xf0 [ 77.220270][ T6] __free_slab+0xce/0x1a0 [ 77.224428][ T6] __unfreeze_partials+0x165/0x1a0 [ 77.229376][ T6] put_cpu_partial+0xa9/0x100 [ 77.233898][ T6] __slab_free+0x1c8/0x280 [ 77.238143][ T6] ___cache_free+0xc6/0xd0 [ 77.242404][ T6] qlist_free_all+0xc5/0x140 [ 77.246831][ T6] kasan_quarantine_reduce+0x15a/0x180 [ 77.252128][ T6] __kasan_slab_alloc+0x24/0x80 [ 77.256806][ T6] slab_post_alloc_hook+0x53/0x2c0 [ 77.261753][ T6] kmem_cache_alloc_node+0x188/0x330 [ 77.266871][ T6] __alloc_skb+0xcc/0x2d0 [ 77.271037][ T6] tcp_stream_alloc_skb+0x46/0x340 [ 77.275993][ T6] tcp_sendmsg_locked+0xda6/0x4000 [ 77.280932][ T6] [ 77.283101][ T6] Memory state around the buggy address: [ 77.288575][ T6] ffff88811d352b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 77.296474][ T6] ffff88811d352c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 77.304395][ T6] >ffff88811d352c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 77.312272][ T6] ^ [ 77.319822][ T6] ffff88811d352d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 77.327730][ T6] ffff88811d352d80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 77.335618][ T6] ================================================================== [ 77.343513][ T6] Disabling lock debugging due to kernel taint [ 77.353150][ T3241] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 77.382876][ T311] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 77.391389][ T311] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 77.574037][ T751] usb 1-1: string descriptor 0 read error: -71 [ 77.585184][ T751] usb 1-1: USB disconnect, device number 4 [ 77.669353][ T311] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 77.859355][ T311] usb 10-1: Using ep0 maxpacket: 16 [ 77.865691][ T311] usb 10-1: config 0 has no interfaces? [ 77.871208][ T311] usb 10-1: New USB device found, idVendor=056a, idProduct=0029, bcdDevice= 0.00 [ 77.880174][ T311] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.888837][ T311] usb 10-1: config 0 descriptor?? [ 77.974341][ T329] usb 5-1: Cannot set autoneg [ 77.978939][ T329] MOSCHIP usb-ethernet driver: probe of 5-1:0.0 failed with error -71 [ 77.987686][ T329] usb 5-1: USB disconnect, device number 6 [ 78.096098][ T3255] hid-generic 0000:0000:0000.000F: pid 3255 passed too short report [ 78.105641][ T311] usb 10-1: USB disconnect, device number 6