last executing test programs: 53.132257832s ago: executing program 1 (id=136): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x7, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r1, 0x25, 0x0, @void}, 0x10) ioctl(0xffffffffffffffff, 0xfffffffc, 0x0) syz_emit_ethernet(0xd83, &(0x7f0000000780)={@multicast, @broadcast, @void, {@mpls_mc={0x8848, {[], @ipv6=@icmpv6={0x0, 0x6, "72bbba", 0xd4d, 0x3a, 0xff, @rand_addr=' \x01\x00', @loopback, {[@dstopts={0x0, 0x18, '\x00', [@jumbo={0xc2, 0x4, 0x800}, @generic={0x7, 0xb9, "9e3e20d52e296af5fbe11071638f6de5df31a160a2bfa739bfb63e88eec271841577e896c066b05b41b63490d4899c7374ae400af8cdc9eb718827f1c48083c5baf4ce80f06858384fc356e833beefcb18ef2e8517bcba0ff7f59085080ab856aeb13a87798cc022b19a22bab32992e396ba250ac6e922009eafc158e770f902c27d366bec7bd106422932bb99db5355cfcd0d9b3ef519c82450a99faa9c55f76752b1ac7d8dab2d236431bb9cd7de0f1e2b8b51551b13d079"}]}, @dstopts={0x32, 0x8, '\x00', [@hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}, @ra={0x5, 0x2, 0x2}, @pad1, @calipso={0x7, 0x20, {0x1, 0x6, 0x1, 0x8, [0xff, 0x400, 0xa7]}}, @enc_lim={0x4, 0x1, 0x2}, @ra={0x5, 0x2, 0x6}]}, @hopopts={0x29, 0x1, '\x00', [@ra={0x5, 0x2, 0x7}, @ra={0x5, 0x2, 0x80}, @enc_lim={0x4, 0x1, 0x7}]}, @hopopts={0x32, 0x17a, '\x00', [@generic={0x8e, 0x36, "ab7df4b111c748c05cf0ab496f24760731c3fe7cd0af876ab328c576a357e5fd41a5819409223593d21ebf8850ce3e12fa07b221f5ed"}, @generic={0x7, 0xb7b, "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"}, @calipso={0x7, 0x8, {0x3, 0x0, 0x5}}, @hao={0xc9, 0x10, @mcast1}]}, @dstopts={0x87, 0x0, '\x00', [@ra={0x5, 0x2, 0xdca}]}], @echo_request={0x80, 0x0, 0x0, 0x0, 0x9, "26a361be7bc00fd1c13f44a78b345d3141c56e50d8f89c7ce1ae5e8459"}}}}}}}, 0x0) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) 53.120646962s ago: executing program 1 (id=137): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x3, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000010007000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @cgroup_sock_addr=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0xcf50, 0x0, 0xffff, 0x9dff, 0x15}) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0xfffffff9, 0x0, 0xd, "0062007d82000000000000002240f7ffffff00"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000200)=0x17) 52.232099042s ago: executing program 1 (id=139): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, 0x0, 0x4000001) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[@ANYBLOB='+cpu\x00'], 0x5) 52.208426593s ago: executing program 1 (id=140): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f00000069c0)=ANY=[@ANYBLOB="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"], 0x1, 0x5531, &(0x7f0000000b00)="$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") open(&(0x7f0000000040)='./file1\x00', 0x1cd142, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x8ca883, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x48400, 0x100) fadvise64(r0, 0x100, 0x7fffffffffffffff, 0x4) 51.775205298s ago: executing program 1 (id=145): socket$nl_route(0x10, 0x3, 0x0) r0 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x6, @empty, 0xfbb3}, 0x1c) syz_usb_connect$midi(0x5, 0x31, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000403e13150840000102030109021f00010109100409040000010103000b090505"], 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, 0x0, 0x0) r3 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000000400)={0x100000001, {{0xa, 0x0, 0x6, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f00000000c0)={0x21, {{0xa, 0x4e23, 0x5, @mcast2, 0x6}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000640)=ANY=[@ANYBLOB="01000000000000000a004e2200000010ff"], 0x190) write$binfmt_script(r2, &(0x7f00000000c0), 0x28) r4 = socket$key(0xf, 0x3, 0x2) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='net/vlan/vlan0\x00') sendfile(r5, r5, 0x0, 0x66fc) sendmsg$nl_generic(r5, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000380)={0x6c, 0x1c, 0x800, 0x70bd2b, 0x25dfdbff, {0x8}, [@typed={0x8, 0xf4, 0x0, 0x0, @fd=r4}, @nested={0x4, 0x54}, @generic="c20fc84fa11aebf2fc0f26dcb9b42516b6c89448cd501e697b0bb13e4a82a1633eddaf14e5ca478f8590409f0dbe7d7b9f41aa1056a9dc6505c71a724c523d324ec91f", @nested={0x8, 0xb9, 0x0, 0x1, [@nested={0x4, 0x3c}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000801}, 0x20000041) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB="020300000e00000000000000fdffffff05000600000000000a0000000000000000000000000000000000000000000001000000000000000002000100000000000000000b0200006005000500000000000a"], 0x70}, 0x1, 0x7}, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x249, &(0x7f0000000800)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) pipe2(0xfffffffffffffffc, 0x4800) ioctl$EXT4_IOC_GROUP_ADD(r6, 0x40286608, &(0x7f0000000040)={0x7, 0x5, 0xf, 0x6, 0x1, 0x9}) sendmsg$nl_route(r1, 0x0, 0x4040000) 51.560100955s ago: executing program 1 (id=149): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000400), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000700)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x800000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r1) close(r1) chdir(&(0x7f0000000140)='./file0/../file0\x00') capset(0x0, 0x0) 51.559954895s ago: executing program 32 (id=149): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000400), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000700)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x800000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r1) close(r1) chdir(&(0x7f0000000140)='./file0/../file0\x00') capset(0x0, 0x0) 50.308126408s ago: executing program 4 (id=159): r0 = socket(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0x0, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b928, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x5, 0x7, 0x5, 0x1, 0x0, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 50.286867429s ago: executing program 4 (id=160): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r1 = socket$inet6(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x48, 0x14, 0x509, 0x70bd27, 0x25dfdbfc, {0x2, 0x1f, 0x0, 0xff, r3}, [@IFA_BROADCAST={0x8, 0x4, @rand_addr=0x64010104}, @IFA_FLAGS={0x8, 0x8, 0x100}, @IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_ADDRESS={0x8, 0x1, @private=0xa010102}, @IFA_RT_PRIORITY={0x8, 0x9, 0x3}, @IFA_RT_PRIORITY={0x8, 0x9, 0x107}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000"], 0x18}}, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 50.2321705s ago: executing program 4 (id=162): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x28002, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d01, 0xec000000, 0x3}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000240)={0xe0003, 0x0, {[0x8, 0x8, 0x4, 0x8, 0x0, 0x4, 0x4]}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 50.185665262s ago: executing program 4 (id=163): syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000680)='./file0\x00', 0x2148c5, &(0x7f0000000440)={[{@utf8no}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'iso8859-15'}}, {@utf8}, {@uni_xlateno}, {@numtail}, {@utf8}, {@uni_xlate}, {@shortname_mixed}, {@fat=@usefree}, {@utf8no}, {@shortname_mixed}, {@rodir}, {@utf8}]}, 0x0, 0x2c4, &(0x7f0000000a40)="$eJzs3UFr02AYwPFn7dZ2HVt7GIKC+KAXvYStfoIiG4gFZVvFeRAyl2ppbEZTKxVxu3n1E/gBht48Kah32cWbd/Gyi+BlB7WyNLFdF7FVttTt/4ORd++bp3nT9015Etpk+8bTe5WSa5TMusRSKjGRDdkRye6WfCP+MuaVE9JtQy5MfP14enH55pV8oTC3oDqfX7qYU9WpM28ePHp+9l194vrLqddJ2cre2v6S+7R1Yuvk9o+l4NUdEVNXHKdurtiWrpbdiqF6zbZM19Jy1bVqde1qL9nO2lpTzerqZHqtZrmumtWmVqym1h2t15pq3jHLVTUMQyfTvd0/8uIDRxS/J0TyB9IZRGE8rLJWy5vx0Mbi5mF0CgAADJeo8v+7ZVfLrladPfn9/vw/JgPk/yJh+T9+q7i5sGCS/x9xu/l/2j9+9yL/BwAAAAAAAAAAAAAAAAAAAADgf7Ajkmm1WpmdVstbBn9JEUmJSPB/1P3EwQjGnfE/nhaXR8T/4V5KxH7SKDaK7WW7PV+SsthiycyYyDdvPvja5fnLhbkZ9WTlrb3ux683inFJBvGBbHj8bDteu+PXZUzS3dvPSUamw+NzIfGNYkLOn2sl/S1bYkhGPtwWR2xZ9eZ1J/7xrOqlq4We+HFvPQAAAAAAjgJDf9l3/u61GxrcNqSnvV3ZuT4gmc71gbmw6wM959ejcmo0uv0GAAAAAOA4cZsPK6ZtW7U/FVKdmvf9Rw1VIXj+wcDh8ZCm4Bsx0e1Oqt+VR0XEr3k1LGPRTyH2D29vfIBRHts/nxMisqdm+vDn/ItnAxye/RU+3+9/0kb1iQQAAADgoARJ/7F5SCYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEOo35uHBev/zb3HujYXj2YvAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgOHwMwAA//8VhA3+") r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333406, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x11080, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005c48, 0x0) read$FUSE(r0, &(0x7f0000004c40)={0x2020}, 0x2020) 50.015654568s ago: executing program 4 (id=168): r0 = socket$inet_tcp(0x2, 0x1, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020}, 0x2020) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='illinois', 0x8) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000001c0)=0xa1, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f00000000c0), 0xffffffffffffffef, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 49.863925324s ago: executing program 4 (id=170): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 49.841337734s ago: executing program 33 (id=170): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 32.375464502s ago: executing program 2 (id=306): socket$nl_route(0x10, 0x3, 0x0) r0 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x6, @empty, 0xfbb3}, 0x1c) syz_usb_connect$midi(0x5, 0x31, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000403e13150840000102030109021f00010109100409040000010103000b090505"], 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, 0x0, 0x0) r3 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000000400)={0x100000001, {{0xa, 0x0, 0x6, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f00000000c0)={0x21, {{0xa, 0x4e23, 0x5, @mcast2, 0x6}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000640)=ANY=[@ANYBLOB="01000000000000000a004e2200000010ff"], 0x190) write$binfmt_script(r2, &(0x7f00000000c0), 0x28) r4 = socket$key(0xf, 0x3, 0x2) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='net/vlan/vlan0\x00') sendfile(r5, r5, 0x0, 0x66fc) sendmsg$nl_generic(r5, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000380)={0x68, 0x1c, 0x800, 0x70bd2b, 0x25dfdbff, {0x8}, [@typed={0x8, 0xf4, 0x0, 0x0, @fd=r4}, @generic="c20fc84fa11aebf2fc0f26dcb9b42516b6c89448cd501e697b0bb13e4a82a1633eddaf14e5ca478f8590409f0dbe7d7b9f41aa1056a9dc6505c71a724c523d324ec91f", @nested={0x8, 0xb9, 0x0, 0x1, [@nested={0x4, 0x3c}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000801}, 0x20000041) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB], 0x70}, 0x1, 0x7}, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x249, &(0x7f0000000800)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) pipe2(0xfffffffffffffffc, 0x4800) ioctl$EXT4_IOC_GROUP_ADD(r6, 0x40286608, &(0x7f0000000040)={0x7, 0x5, 0xf, 0x6, 0x1, 0x9}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipv4_newroute={0x2c, 0x18, 0xaba64f4add525e83, 0x0, 0x0, {0x2, 0x0, 0x10, 0x4, 0x2, 0x0, 0xfe, 0x2, 0x700}, [@RTA_OIF={0x8}, @RTA_PREFSRC={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x28}}]}, 0x2c}, 0x1, 0xffffff7f, 0x0, 0x8000}, 0x4040000) 30.656055661s ago: executing program 2 (id=308): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000c"], 0x50) close(0x3) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe15, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8, 0xffffffffffffff4b, 0x0}}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffffc}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1}, 0x0, 0x0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r1, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r2, r0}, 0xc) 30.648867341s ago: executing program 2 (id=309): r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x1) fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000180)=""/42, 0x2a) getdents64(r2, 0xfffffffffffffffe, 0x29) 30.574913094s ago: executing program 2 (id=310): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2, 0x5505, &(0x7f0000002480)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x201008, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000001180)='./bus\x00') unlinkat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x200) 30.365432461s ago: executing program 2 (id=314): r0 = socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x22000406, &(0x7f0000000500)={[{@noinit_itable}, {@noblock_validity}, {@dioread_lock}, {@init_itable}, {@auto_da_alloc}, {@grpjquota, 0x2e}, {@nouid32}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@jqfmt_vfsv1}, {@grpid}], [], 0x2c}, 0x1, 0x4bf, &(0x7f0000000c00)="$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") ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="09000000060000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r2}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f00000005c0)=ANY=[], 0x0) 30.10801788s ago: executing program 2 (id=317): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0100000001000000", @ANYRES32=0x1, @ANYBLOB="ff0f"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r0, 0xffffffffffffffff}, &(0x7f0000000600), &(0x7f00000001c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xb, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffff}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x30, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r3, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000780)=ANY=[], 0x0) 30.107899849s ago: executing program 34 (id=317): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0100000001000000", @ANYRES32=0x1, @ANYBLOB="ff0f"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r0, 0xffffffffffffffff}, &(0x7f0000000600), &(0x7f00000001c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xb, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffff}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x30, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r3, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000780)=ANY=[], 0x0) 5.469445053s ago: executing program 6 (id=624): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x14, 0x0, 0x1}, 0x14}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x28}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0x11, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.732101708s ago: executing program 6 (id=625): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r1 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') r2 = openat$binfmt(0xffffffffffffff9c, r1, 0x41, 0x1ff) fcntl$setlease(r2, 0x400, 0x1) r3 = syz_create_resource$binfmt(&(0x7f0000000440)='./file0\x00') execveat$binfmt(0xffffffffffffff9c, r3, 0x0, 0x0, 0x0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 4.237961895s ago: executing program 3 (id=631): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) ioctl$TIOCL_SETSEL(r3, 0x541c, 0x0) 3.837444469s ago: executing program 6 (id=634): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000001200)=ANY=[@ANYBLOB="020000000400000005000000430100001410"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x2000300, 0xe, 0x0, &(0x7f0000000600)="63e4ed8e46080000003389f7f986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 3.752090712s ago: executing program 6 (id=635): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000180)={[{@noacl}, {@noacl}]}, 0x1, 0x572, &(0x7f0000000540)="$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") r0 = open(&(0x7f0000000140)='./file1\x00', 0x141042, 0x4a) fallocate(r0, 0x8, 0x1000000, 0x10000) r1 = syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOVER(r1, 0x80049363, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000300)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$nl_route_sched_retired(r3, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000380)=@delqdisc={0x24, 0x25, 0x200, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xe, 0x9559234f11a2daa3}, {0xfff1}, {0x6, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000084}, 0x0) fsetxattr$system_posix_acl(r2, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f00000001c0)={{}, {0x1, 0x6}, [], {0x4, 0x5}, [], {0x10, 0x3}, {0x20, 0x7}}, 0x24, 0x1) 3.376726715s ago: executing program 6 (id=636): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fd9000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0xa, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x200000, &(0x7f0000000440)={[{@block_validity}, {@max_batch_time={'max_batch_time', 0x3d, 0x8}}, {@data_err_ignore}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@usrquota}, {@noauto_da_alloc}, {@nouid32}]}, 0x3, 0x569, &(0x7f0000000940)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFxGkCCIWxD/Au8fiP+BfIWihSAl68BKZzWy7TXa7yXZrUufzgWnfm5nkO2/fvJfvzOyyARTWWPZPKeLliPg6iTjYtm048o1ja/utPLg2nS1JrK5+8mcSSb6utX+S/78/r7wUEb98EXG8tDFufWl5rlKtpgt5fbwxf3m8vrR84uJ8ZTadTS9NTk2demtq8t133h5YW18/9/d3H9/94NSXR1e+/eneodtJnIkD+bb2djyFG+2VsRjLX5OROLNux4kBBNtJkl47dDgH2H5D+TgfiWwOOBhD+agH/v+uR8QqUFCJ8Q8F1coDWtf2A7oOfm7cf3/tAqi9/V81b4IMr90biT3Na6N9K8ljV0bZ9e7oAOJnMX7+487tbIke9yGuDyAeQMuNmxFxcnh44/yf5PNf/05u4q7f+hhF+/sD2+lulv+80Sn/Kz3Mf6JD/rO/w9jtR+/xX7o3gDBdZfnfex3z34dT1+hQXnuhmfONJBcuVtOTEfFiRByLkd1Zvd/nOe35X7Zk8Vu5YH4c94Z3P/4zM5VGpc9wG9y/GfHKo/w3iQ3z/55mrru+/7PX49wmYxxJ77zabVvv9rcbfAa8+mPEax37/9ETreTJzyfHm+fDeOus2OivW0d+7RZ/a+0fvKz/9z25/aNJ+/Pa+tZj/LDnn7Tbtn7P/13Jp83yrnzd1UqjsTARsSv5aOP6yUc/26q39s/af+zok+e/Tuf/3oj4bJPtv3W4exq0E/p/Zkv9v/XCbx9+/n23+Jvr/zebpWP5ms3Mf5s9wKd57QAAAAAAAGCnKUXEgUhK5YflUqlcXnt/x+HYV6rW6o3jF2qLl2ai+VnZ0RgptZ50H2x7P8RE/n7YVn1yXX0qIg5FxDdDe5v18nStOrPdjQcAAAAAAAAAAAAAAAAAAIAdYn+Xz/9nfh/a7qMDnjlf+Q3F1XP8D+KbnoAdyd9/KC7jH4rL+IfiMv6huIx/KC7jH4rL+IfiMv4BAAAAAAAAAAAAAAAAAAAAAAAAAABgoM6dPZstqysPrk1n9ZkrS4tztSsnZtL6XHl+cbo8XVu4XJ6t1WaraXm6Nt/r91VrtcsTk7F4dbyR1hvj9aXl8/O1xUuN8xfnK7Pp+XTkP2kVAAAAAAAAAAAAAAAAAAAAPF/qS8tzlWo1XVDoWjgdO+Iw+i4kvXr5dH4y9BViePsbqPAMCts8MQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAm38DAAD//wC8MHI=") r3 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r3, 0x9000) fallocate(r3, 0x0, 0x0, 0x8800000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.363116356s ago: executing program 3 (id=637): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6000, 0x1) sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) close(0x3) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000200)=""/85, 0xaa) 3.152051313s ago: executing program 3 (id=639): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) 3.103478045s ago: executing program 6 (id=641): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f00000000c0)=0x2, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0xe0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) ioctl$INCFS_IOC_CREATE_FILE(r2, 0xc058671e, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x40000) close(0x3) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x300700b, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) mount$overlay(0x0, 0x0, 0x0, 0x40000, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') stat(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x140) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x2, 0x0, 0x3, 0x0, {0xa, 0x4e23, 0x2, @remote, 0x80}}}, 0x32) syz_usb_connect(0x5, 0x466, &(0x7f0000000680)=ANY=[@ANYBLOB="120101028ddfb240490b4f06fdd4010203010902540402fa0680"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) 3.048213396s ago: executing program 35 (id=641): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f00000000c0)=0x2, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0xe0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) ioctl$INCFS_IOC_CREATE_FILE(r2, 0xc058671e, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x40000) close(0x3) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x300700b, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) mount$overlay(0x0, 0x0, 0x0, 0x40000, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') stat(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x140) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x2, 0x0, 0x3, 0x0, {0xa, 0x4e23, 0x2, @remote, 0x80}}}, 0x32) syz_usb_connect(0x5, 0x466, &(0x7f0000000680)=ANY=[@ANYBLOB="120101028ddfb240490b4f06fdd4010203010902540402fa0680"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) 2.440746257s ago: executing program 8 (id=643): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) mkdir(&(0x7f0000000280)='./file0\x00', 0x324) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x4) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000000)=0xdddd0000) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000080)={0x4, 0xbde, 0x0, &(0x7f0000000180)="a1984ec3aec3fc2e025f90eda6dbc903939aac644fd36f1e65174cae030c42cbacc392851a695f247112e91f059460a2c031929dc0515ac7cd20775ff9da9c2b6cb48968dcd6d8d982c492932c572f084d3af58650d207eec0794b3e47c5678c36b99eed61e1dbac68ce8a79aa21a51202018bdc4a51489844f785887083841d65c129992bbe5a51c71b95a9847d2bdede66c6e3184c386faf938fd6db888e73a5c0dcc69c3de7458e68ed33226a8d1c8e17", 0x0, 0xb2}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x7, 0x8, 0xc5, 0x0, 0x6, 0x9, 0x4, 0x6, 0x1, 0x1, 0x0, 0x1, 0x0, 0x9, 0x6, 0x7, 0x9, 0x4, 0xfe, '\x00', 0x4, 0x4}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.209122755s ago: executing program 3 (id=648): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000640), 0x1, 0x5c7, &(0x7f0000001080)="$eJzs3W+IHGcdB/Df7N2l+XM1abRqa2xOQ20g9PZyuYREfGGJf2pNakXxRSiEI7fdC9m7PXMb6G0FW3xTFETwjQhCxb6wIhrIm0qp7YsW3ygo9Q+VGgMqiFC0UhBBXJnZ3eu2mSS1d7ejmc8H5u6ZZ+b2efaW787szjMzAZTWRPojiRiPiAsRsb07+/oVJrq/2gfOz6dTEp3OZ/6aZOvNHTg/31+1/3fb0h+jEZsjYufRJPaMXd7u8kr7zGyjUTvbm6+2FpaqyyvtO08vzNZr9driwcMzR6YPzRyeWb/nOvWzrTf/6fZ7Lz3+3D/+9a3fHPpB2t/x3rLB57FeJmKi9z8Zi5sG6keTiHvWu7GCjHRf6rh9oC4ZLbBDvGmdzs7vp6/f2yNiT5b/7TES3Rfvxafu//v2+NXdRfcR2DidvvzFr3SA61Yl2wdOKpMR0S1XKpOT3X34d8TWSqO53Nr3QPPc4lx3X3lHjFUeON2oTfU+K+yIsSSd35+VX5uffsP8gYhsH/jRkS3Z/OSpZmNu2G92QGY84uKFz5/atO0N+f/zSDf/wPUrzf8vn3/ymbT86kjRvQGGKc3/915d+GQM5n9LsX0ChiM3/0ApyD+Ul/xDeck/lJf8Q3nJP5SX/EN5yT+Ul/xDefXzf9/x43Hf8eOddu/898Vm/fSZ+aUj01OTC+dOTZ5qnl2arDeb9eyMnYVrP26j2VzaPx3nHqy2asut6vJK++RC89xi62R2Xv/JWs6lAIACnLi0+Z6bdj/7YhIRD39wSzalNvWWyypc3zqdJIo+Bxkoho/+UF4u1Qbl5TM+kFxj+eYrLWisf1+A4agU3QGgMHfc4vgflJXv/6G8fP8P5WUfH/D9P5SP7/+hvMavcP+vGwfu3TUVEW+LiJ+OjN3Qv9cX8P9rPOLixe98rrp6H24FBQWF1ULR71DARnst9EX3BCjK3IHz8/1pWG0+XR9WS0Cel+/qDgJKc9/uTd0lo6vHBsY2aJzQS49GTMSPfvfY3vmRdIre+9AGNAXkePiRiHh33vY/yY4N7Oitt7O7WvaecHNEvDMi3rXGtr/x6TT/z9cG6+QfhufN5v+WiLgtIm6NiPdExK6IeO8a2/7FhTT/v37dXcflH8rhC88V3QNgPf035xN84skN7AjwP+2EMQZQWt99qOgeAEV56odF9wAoyldfKLoHUG7P3hURU3nH/yrZ8f6+sd51AW/oXQtgS0RsjYhtvXMIb+ydI7h94JjhtZz8VMRE3PbjwTrH/2B4+uP/2peN/6usjv8biYjda2jj6Q+NfyWvfnZXmv/HH+qP/0untP3+WEBgY738SMStuflPVsf8JpHmNOJ9b7GNiS9eeiKv/oV708cd+7n8QzE63474QOTnvy8tVVsLS9Xllfad2X2867XFg4dnjkwfmjk8U80uEVLtXygkx7G/vbIvr/6l6TT/3zwo/1CMdPu/9Qr5H9z/f/8a2jj69S+fyKsf/0Oa/13PXD3/lb9sSj6bzffvS/DgbKt1dn/EpuTY5fXTa+goXOf6GelnKM3/3j35n/939v4m3f4fjYiPDFwE9N8R8dGI+FhEfDwi7r5Km1+7o34pr/73T6T5f+yM7T8UI83/3DW2/+nvf66hjX17f/KlvPoP707zP/nbPx67fzSd5B8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABg/S2vtM/MNhq1s2+9UImIq65T9HMEAAAAAACAsvhPAAAA//8Q4TFe") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYRESOCT=r0, @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a) mount(&(0x7f0000000240)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) 2.115229388s ago: executing program 0 (id=649): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r0, 0x0, r3, 0x0, 0xf, 0x8) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r2, r5, 0x4e, 0x0) write$binfmt_script(r5, &(0x7f0000000800)={'#! ', './file0'}, 0xb) tee(r4, r3, 0x9, 0x8) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) 1.966702634s ago: executing program 8 (id=651): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 1.532765088s ago: executing program 0 (id=654): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x80000000000000, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2, 0x5524, &(0x7f00000108c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x5c399000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) symlinkat(&(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') 1.252718528s ago: executing program 7 (id=656): ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000080)={0x4, 0x1a2, 0x0, 0x0}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f0000000100)={[{0x7ff, 0x93, 0x9, 0xc0, 0xc0, 0xf, 0x21, 0xa0, 0x6, 0xa, 0x0, 0x7, 0x6}, {0x5, 0x2, 0xf9, 0x8, 0xdd, 0xff, 0xd, 0x3, 0x5, 0x9, 0x7, 0xa, 0x4}, {0x3, 0xa, 0x6, 0x7, 0xf8, 0xf8, 0x8, 0xff, 0xa, 0x82, 0xc, 0xa7, 0x6}], 0xffbffffa}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000140)={0x110001, 0x0, {[0x4, 0x2, 0x6, 0x9a47, 0x7, 0x80000000, 0x80, 0xe02]}}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)=@x86={0x5, 0x5, 0x17, 0x0, 0x6, 0xfe, 0x3, 0xc, 0x1, 0x8, 0x6, 0x1, 0x0, 0x7f, 0x5, 0x4, 0x72, 0x7, 0xfa, '\x00', 0x3, 0x2}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, 0x0) 1.252349578s ago: executing program 7 (id=657): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendto$packet(r1, 0x0, 0x0, 0x4, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000001680)=0x1, 0x4) shutdown(r0, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) bind$inet6(r0, &(0x7f0000000340)={0xa, 0x4e20, 0xfff, @empty, 0x1}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000140)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x4, @empty, 0xfffffffe}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x55c, 0x20080058) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x1, @empty, 0x6}, 0x1c) 1.065154854s ago: executing program 3 (id=658): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000469000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x2e, 0x0, 0x0) 1.051666005s ago: executing program 5 (id=659): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000100)=@newtclass={0x24, 0x28, 0x2, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x9, 0x5}, {0x7, 0xb}, {0xb, 0xc}}}, 0x24}}, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x1a00040, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1, 0x355, &(0x7f0000000500)="$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") r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) sync_file_range(0xffffffffffffffff, 0x889, 0x8, 0x2) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x2, 0x2000}, 0x4) socket$inet6(0xa, 0x3, 0x6) 937.887199ms ago: executing program 8 (id=660): r0 = inotify_init() r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f00005cf000/0x400000)=nil) close_range(r0, 0xffffffffffffffff, 0x0) 608.08276ms ago: executing program 0 (id=661): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) capset(0x0, 0x0) fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000000), 0x1000000, &(0x7f0000000380)={{}, 0x2c, {'rootmode', 0x3d, 0x6000}}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000009b40)="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", 0x2000, &(0x7f0000007a80)={&(0x7f0000006400)={0x50, 0x0, 0x1ff, {0x7, 0x29, 0x1, 0x24ff871999e0dde7, 0xdcf, 0x4005, 0xb, 0x800, 0x0, 0x0, 0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x50) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r1, &(0x7f0000000040), 0x0}, 0x20) 498.154794ms ago: executing program 8 (id=662): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f00000000c0)=0x2, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0xe0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) ioctl$INCFS_IOC_CREATE_FILE(r2, 0xc058671e, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x40000) close(0x3) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x300700b, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) mount$overlay(0x0, 0x0, 0x0, 0x40000, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') stat(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x140) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x2, 0x0, 0x3, 0x0, {0xa, 0x4e23, 0x2, @remote, 0x80}}}, 0x32) syz_usb_connect(0x5, 0x466, &(0x7f0000000680)=ANY=[@ANYBLOB="120101028ddfb240490b4f06fdd4010203010902540402fa0680070904"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) 493.107684ms ago: executing program 3 (id=663): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000)={0xffffffff, 0x6}, 0x8) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e1f, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) close(r1) 439.963956ms ago: executing program 36 (id=663): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000)={0xffffffff, 0x6}, 0x8) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e1f, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) close(r1) 437.613155ms ago: executing program 5 (id=665): openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x123081, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)={0x2, 0x0, [{0x400000b0, 0x0, 0x5}, {0x400000b1, 0x0, 0x3}]}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) ioctl$KVM_GET_MSR_FEATURE_INDEX_LIST(r3, 0xc004ae0a, &(0x7f0000000140)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000340)={[0xc45, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10004, 0x100, 0x4002004c2, 0x7ff, 0x7, 0x0, 0x400, 0x80, 0x89, 0x0, 0x8, 0x8d], 0xffffffff, 0x240046}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 375.891278ms ago: executing program 0 (id=666): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000200)={{0x2, 0x4, 0xb, 0xd, 0x8, 0x9, 0x6, 0x1, 0x0, 0x7, 0x5, 0xeb}, {0xdddd0000, 0x8000000, 0xa, 0xe, 0x5, 0x7, 0x4, 0x14, 0x3, 0x5, 0x0, 0x2}, {0xf000, 0x8000000, 0xb, 0x8, 0x4, 0x9, 0x81, 0x3, 0x10, 0xfe, 0x1, 0x70}, {0x5000, 0x10000, 0x0, 0xfe, 0x6, 0xaa, 0x1, 0x0, 0x0, 0x4, 0x84, 0xe}, {0xf000, 0x3000, 0xc, 0xff, 0x1, 0xb, 0x6, 0x7, 0x4, 0x6, 0x8, 0x7}, {0xd000, 0x3000, 0x9, 0xb9, 0x9, 0x5, 0x4, 0x4, 0x64, 0x1, 0x27, 0x1}, {0x8000000, 0x0, 0x0, 0x1, 0xc, 0x40, 0x4, 0x64, 0xe4, 0x1, 0x14, 0xe}, {0xffff1000, 0xdddcc004, 0xa, 0x21, 0x5, 0x8, 0x8, 0xc7, 0x7, 0x8, 0x43, 0x3}, {0xd000, 0x5}, {0x1, 0x7}, 0x40000000, 0x0, 0x6000, 0x40738, 0xb, 0xa801, 0xeeee0c00, [0x3, 0x5, 0x4, 0xc]}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000100)={0x0, &(0x7f0000000280)=[@code={0xa, 0x5a, {"0f380a669766ba6100b000ee2309c0da00008c000000ba000000000f30c4827941fac4e1f96e42e46505e7ee1921b9500b00000f328fe9209b7ce100c403790cdeb8010000000f01d9"}}], 0x5a}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000000c0)={0x3}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000340)={[{0x1, 0xc, 0x6, 0x3, 0x6, 0x2, 0x42, 0x9, 0x1, 0x4, 0x0, 0x3, 0x3}, {0x1, 0x7, 0x7, 0x0, 0x8, 0x7, 0x49, 0xff, 0x2, 0x1, 0x9, 0xf, 0x20000000006}, {0x2, 0x5, 0x5, 0x84, 0x8, 0x7, 0xfd, 0x40, 0x5, 0x3, 0x4, 0x3, 0x80000000000}], 0xf87}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 375.483518ms ago: executing program 7 (id=667): sendmsg$unix(0xffffffffffffffff, 0x0, 0xc800) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, 0x0, 0x8000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000}, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xc4, 0x1b, 0x1, 0xfffffffe, 0x400000, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0xfffffffffffffffb}, {0x10000000, 0x0, 0x200000000000000}}, [@mark={0xc, 0x15, {0x35075a, 0xc0}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x40100}, 0x2c000010) 375.275618ms ago: executing program 7 (id=668): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002", 0x8a) r2 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000001c0), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=@base={0xf, 0x4, 0x4, 0x16, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="05"], 0x10) sendmsg$key(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 364.928608ms ago: executing program 5 (id=669): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x700, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0xa0, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x74, 0x4, 0x0, 0x1, [{0x70, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x60, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xc, 0x1, 'physdev\x00'}, @NFTA_MATCH_INFO={0x46, 0x3, "7e6b92c43235dc7e977221f83c3f179e65022fc067b787cd67b6d9983b1bddafbdf6a37da5ed332cd2ee94b31d2ec330ce34cc676c0783a4bcc1e966554b0470581f"}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x20, 0x0, 0x0, {0xa}}}, 0xc8}, 0x1, 0x0, 0x0, 0x4008011}, 0x4000800) accept4$tipc(0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000000c0)=0x10, 0x80000) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="02010009130000002cbd7000ff9bdf2503000900800000001cdc0dca1d9f68846960e56de42944af05000600001000000a004e2400000008ff010000000000000000000000000001000000000000000002000100000000000000f50c0100000005000500002000000a004e24000000090000000000000000000000000000000006000000000000000200130003"], 0x98}, 0x1, 0x7}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x3, 0x8}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd26, 0x6000000, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {}, {0x7, 0xe}}, [@TCA_RATE={0x6, 0x5, {0x3, 0x7f}}, @filter_kind_options=@f_bpf={{0x8}, {0x50, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x6, 0x4, 0x7, 0xbaf, {0x7, 0x0, 0x8, 0x1, 0x2, 0x1a}, {0x7, 0x0, 0x62, 0x5, 0x7f}, 0xffffff4f, 0x1, 0x7}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x4}, 0x4000800) 348.751108ms ago: executing program 0 (id=670): bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x2, 0x4, 0x1}, 0x48) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x1e9100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x54, 0x0, 0x0) ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0xd, 0x99, 0x0, 0x0, 0x10000, 0x2, '\x00', 0xc94}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 338.912489ms ago: executing program 7 (id=671): pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) syz_emit_ethernet(0x0, 0x0, 0x0) write$P9_RGETLOCK(r0, &(0x7f0000000640)=ANY=[], 0x200002e6) fcntl$setpipe(r0, 0x407, 0x7000000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0xf2de1000) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) setrlimit(0x9, &(0x7f0000000080)={0x8606, 0xffff}) io_setup(0x7ff, &(0x7f0000000000)) 290.100481ms ago: executing program 5 (id=672): socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071127f000000000095"], 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) socket$packet(0x11, 0x3, 0x300) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x50) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 120.102176ms ago: executing program 5 (id=673): openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x52140, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000140)={0x0, &(0x7f0000000ac0)=[@nested_vmlaunch={0x12f, 0x18, 0x1}, @nested_vmresume={0x130, 0x18, 0x2}, @enable_nested={0x12c, 0x18}, @nested_vmresume={0x130, 0x18}, @nested_load_code={0x12e, 0x62, {0x0, "44d15900410f38c821f3400f350f20d835200000000f22d8c40229906c7200f0400fb13936f2262ef448b812750000000000000f23d00f21f835100000070f23f8490fc75e00f345dbdb"}}, @out_dx={0x6a, 0x28, {0x2a1d, 0x5, 0x7}}, @nested_create_vm={0x12d, 0x18}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x0, @control_area=0x10, 0x7fffffffffffffff, 0x7, 0x2}}, @out_dx={0x6a, 0x28, {0x5c3c, 0x1}}, @nested_vmlaunch={0x12f, 0x18, 0x3}, @nested_load_code={0x12e, 0x54, {0x2, "f30f098fe9809bda66b87e000f00d8450f0967440f06c441065a7ca005c44109f4fc672e672e0fc72a66ba420066b8924e66efc402e1f7afa4910000"}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x3, @ro_nat=0x640a, 0x181c, 0x6, 0x29}}, @set_irq_handler={0xc8, 0x20, {0x11, 0x2}}, @enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18, 0x3}, @uexit={0x0, 0x18, 0x7fffffffffffffff}, @nested_vmlaunch={0x12f, 0x18, 0x3}, @wrmsr={0x65, 0x20, {0xb47, 0x7f}}, @rdmsr={0x66, 0x18, {0x27e}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x3, @save_area=0x44d, 0x0, 0x6, 0x2ac}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @guest64=0x2811, 0x2, 0x8, 0x100000001}}], 0x32e}) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f00000000c0)={0x1, 0x3e7, 0x2, 0xffffffffffffffff, 0x3}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x250, 0x0, 0x800000000002000}]}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f0000000f40)=[@wrmsr={0x65, 0x20, {0x400000f2, 0x7}}], 0x20}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xc0081, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x6, 0x8000000000, 0x8000000000000001, 0x1, 0xb, 0x4002004c5, 0x1000, 0x1, 0x1, 0x5, 0xe, 0x0, 0x6, 0x0, 0x49], 0x200000, 0x1c6256}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 93.916457ms ago: executing program 7 (id=674): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x14, 0x2, 0x2, 0x5, 0x0, 0x0, {0xa, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x4008004) 89.780968ms ago: executing program 0 (id=675): r0 = inotify_init() r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000180)=@file={0x1}, 0x6e) listen(r1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(r2, &(0x7f0000000000)=@file={0x1}, 0x6e) connect$unix(r2, &(0x7f0000000080)=@file={0x1}, 0x6e) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f00000002c0)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 5 (id=676): shutdown(0xffffffffffffffff, 0x1) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}, 0x1, 0x0, 0x0, 0x4004040}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x4e21, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0xb}}}, 0xb8}}, 0x0) kernel console output (not intermixed with test programs): inue [ 39.493480][ T24] audit: type=1400 audit(1774705294.450:21408): avc: denied { remove_name } for pid=607 comm="syz.0.93" name="file0" dev="loop0" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 39.494617][ T608] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.93: bg 0: block 465: padding at end of block bitmap is not set [ 39.530504][ T608] EXT4-fs (loop0): Delayed block allocation failed for inode 13 at logical offset 3 with max blocks 9 with error 28 [ 39.542985][ T608] EXT4-fs (loop0): This should not happen!! Data will be lost [ 39.542985][ T608] [ 39.553352][ T608] EXT4-fs (loop0): Total free blocks count 0 [ 39.559485][ T608] EXT4-fs (loop0): Free/Dirty block details [ 39.565734][ T608] EXT4-fs (loop0): free_blocks=0 [ 39.570852][ T608] EXT4-fs (loop0): dirty_blocks=9 [ 39.576093][ T608] EXT4-fs (loop0): Block reservation details [ 39.582165][ T608] EXT4-fs (loop0): i_reserved_data_blocks=9 [ 39.641869][ T583] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 39.652325][ T583] ext4 filesystem being mounted at /25/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 39.761368][ T296] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 39.773931][ T296] usb 4-1: USB disconnect, device number 5 [ 40.431923][ T647] exFAT-fs (loop1): failed to load upcase table (idx : 0x00000c00, chksum : 0x54b6a122, utbl_chksum : 0xe619d30d) [ 40.456903][ T650] EXT4-fs (loop4): Ignoring removed orlov option [ 40.509388][ T650] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 40.543396][ T650] EXT4-fs (loop4): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,dioread_nolock,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue [ 40.798411][ T362] Bluetooth: hci0: Frame reassembly failed (-84) [ 40.805105][ T362] Bluetooth: hci0: Frame reassembly failed (-84) [ 40.811589][ T15] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 41.589102][ T676] EXT4-fs (loop4): Ignoring removed bh option [ 41.623268][ T676] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 41.641944][ T676] EXT4-fs (loop4): 1 truncate cleaned up [ 41.648012][ T676] EXT4-fs (loop4): mounted filesystem without journal. Opts: bh,,errors=continue [ 41.776080][ T676] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.107: bg 0: block 465: padding at end of block bitmap is not set [ 41.790590][ T676] EXT4-fs (loop4): Delayed block allocation failed for inode 13 at logical offset 3 with max blocks 9 with error 28 [ 41.803036][ T676] EXT4-fs (loop4): This should not happen!! Data will be lost [ 41.803036][ T676] [ 41.813168][ T676] EXT4-fs (loop4): Total free blocks count 0 [ 41.819141][ T676] EXT4-fs (loop4): Free/Dirty block details [ 41.825282][ T676] EXT4-fs (loop4): free_blocks=0 [ 41.830404][ T676] EXT4-fs (loop4): dirty_blocks=9 [ 41.835967][ T676] EXT4-fs (loop4): Block reservation details [ 41.842095][ T676] EXT4-fs (loop4): i_reserved_data_blocks=9 [ 41.953209][ T682] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 41.972507][ T682] EXT4-fs error (device loop1): ext4_get_max_inline_size:115: inode #15: comm syz.1.108: can't get inode location 15 [ 41.996338][ T275] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 42.006193][ T275] EXT4-fs error (device loop1): ext4_dirty_inode:6162: inode #15: comm syz-executor: mark_inode_dirty error [ 42.050982][ T15] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 42.061320][ T15] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 42.231023][ T15] usb 4-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice= 0.40 [ 42.240245][ T15] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.248481][ T15] usb 4-1: Product: syz [ 42.252846][ T15] usb 4-1: Manufacturer: syz [ 42.257631][ T15] usb 4-1: SerialNumber: syz [ 42.263498][ T687] EXT4-fs error (device loop1): ext4_quota_enable:6446: inode #4: comm syz.1.109: iget: bogus i_mode (11) [ 42.275062][ T687] EXT4-fs error (device loop1): ext4_quota_enable:6449: comm syz.1.109: Bad quota inode: 4, type: 1 [ 42.286782][ T687] EXT4-fs warning (device loop1): ext4_enable_quotas:6490: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 42.301897][ T687] EXT4-fs (loop1): mount failed [ 42.548653][ T693] EXT4-fs (loop4): invalid first ino: 8 [ 42.602060][ T659] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 42.611213][ T659] ext4 filesystem being mounted at /28/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 42.669624][ T659] EXT4-fs warning (device loop3): verify_group_input:147: Cannot add at group 7 (only 1 groups) [ 42.741438][ T15] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 42.750754][ T15] usb 4-1: USB disconnect, device number 6 [ 42.851085][ T295] Bluetooth: hci0: command 0x1003 tx timeout [ 42.857262][ T561] Bluetooth: hci0: sending frame failed (-49) [ 42.880987][ T387] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 43.121037][ T387] usb 2-1: Using ep0 maxpacket: 32 [ 43.241047][ T387] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 43.249183][ T387] usb 2-1: config 0 has no interface number 0 [ 43.365554][ T711] EXT4-fs (loop3): Ignoring removed orlov option [ 43.375249][ T711] EXT4-fs (loop3): mounted filesystem without journal. Opts: orlov,min_batch_time=0x0000000000000004,,errors=continue [ 43.421001][ T387] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 43.436268][ T387] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.444547][ T387] usb 2-1: Product: syz [ 43.448699][ T387] usb 2-1: Manufacturer: syz [ 43.453375][ T387] usb 2-1: SerialNumber: syz [ 43.464265][ T387] usb 2-1: config 0 descriptor?? [ 43.724760][ T387] smsc95xx v2.0.0 [ 43.913960][ T717] F2FS-fs (loop4): Invalid segment/section count (31, 24 x 1) [ 43.921527][ T717] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 43.930324][ T717] F2FS-fs (loop4): invalid crc value [ 43.937162][ T717] F2FS-fs (loop4): Found nat_bits in checkpoint [ 43.959001][ T717] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 43.966184][ T717] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 44.202827][ T282] F2FS-fs (loop4): f2fs_remove_inode_page: inconsistent i_blocks, ino:7, iblocks:1407713280 [ 44.337273][ T728] kvm: MWAIT instruction emulated as NOP! [ 44.671061][ T387] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000034: -71 [ 44.681874][ T387] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 44.692232][ T735] F2FS-fs (loop4): invalid crc value [ 44.698838][ T735] F2FS-fs (loop4): Found nat_bits in checkpoint [ 44.710959][ T25] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 44.711107][ T387] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 44.729928][ T387] smsc95xx: probe of 2-1:0.67 failed with error -71 [ 44.740331][ T387] usb 2-1: USB disconnect, device number 7 [ 44.748880][ T735] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 44.931162][ T588] Bluetooth: hci0: command 0x1001 tx timeout [ 44.937228][ T561] Bluetooth: hci0: sending frame failed (-49) [ 45.071070][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 45.082095][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 45.091843][ T25] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 45.101134][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.109564][ T25] usb 4-1: config 0 descriptor?? [ 45.151475][ T25] hub 4-1:0.0: USB hub found [ 45.180972][ T20] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 45.358495][ T759] device syzkaller0 entered promiscuous mode [ 45.367433][ T759] overlayfs: missing 'lowerdir' [ 45.372381][ T25] hub 4-1:0.0: 1 port detected [ 45.483825][ T764] device syzkaller0 entered promiscuous mode [ 45.493009][ T764] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 45.541065][ T20] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 45.551235][ T20] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 45.641014][ T387] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 45.721064][ T20] usb 5-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice= 0.40 [ 45.730590][ T20] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.738632][ T20] usb 5-1: Product: syz [ 45.742845][ T20] usb 5-1: Manufacturer: syz [ 45.747410][ T20] usb 5-1: SerialNumber: syz [ 45.771046][ T295] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 45.801961][ T25] usb 4-1: USB disconnect, device number 7 [ 46.041040][ T387] usb 2-1: unable to get BOS descriptor or descriptor too short [ 46.054552][ T742] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 46.063694][ T742] ext4 filesystem being mounted at /16/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 46.097344][ T742] EXT4-fs warning (device loop4): verify_group_input:147: Cannot add at group 7 (only 1 groups) [ 46.131171][ T387] usb 2-1: config 250 has an invalid interface number: 28 but max is 1 [ 46.139418][ T387] usb 2-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 46.149912][ T387] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 2 [ 46.158976][ T387] usb 2-1: config 250 has no interface number 0 [ 46.165234][ T387] usb 2-1: config 250 interface 28 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 23 [ 46.181220][ T20] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 46.189347][ T20] usb 5-1: USB disconnect, device number 2 [ 46.221034][ T295] usb 3-1: unable to get BOS descriptor or descriptor too short [ 46.305827][ T295] usb 3-1: config 250 has an invalid interface number: 28 but max is 1 [ 46.314222][ T24] kauditd_printk_skb: 10 callbacks suppressed [ 46.314231][ T24] audit: type=1400 audit(1774705301.260:21419): avc: denied { create } for pid=767 comm="syz.3.132" name="#13" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 46.341148][ T295] usb 3-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 46.341363][ T24] audit: type=1400 audit(1774705301.260:21420): avc: denied { link } for pid=767 comm="syz.3.132" name="#13" dev="tmpfs" ino=226 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 46.351661][ T387] usb 2-1: New USB device found, idVendor=0b49, idProduct=064f, bcdDevice=d4.fd [ 46.382036][ T24] audit: type=1400 audit(1774705301.260:21421): avc: denied { rename } for pid=767 comm="syz.3.132" name="#14" dev="tmpfs" ino=226 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 46.383958][ T295] usb 3-1: config 250 has 1 interface, different from the descriptor's value: 2 [ 46.414090][ T387] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.422114][ T295] usb 3-1: config 250 has no interface number 0 [ 46.428378][ T295] usb 3-1: config 250 interface 28 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 23 [ 46.441819][ T387] usb 2-1: Product: syz [ 46.446065][ T387] usb 2-1: Manufacturer: syz [ 46.450663][ T387] usb 2-1: SerialNumber: syz [ 46.492988][ T774] device syzkaller0 entered promiscuous mode [ 46.502409][ T774] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 46.516718][ T774] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 46.531063][ T774] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 46.611065][ T295] usb 3-1: New USB device found, idVendor=0b49, idProduct=064f, bcdDevice=d4.fd [ 46.620168][ T295] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.628329][ T295] usb 3-1: Product: syz [ 46.632710][ T295] usb 3-1: Manufacturer: syz [ 46.637446][ T295] usb 3-1: SerialNumber: syz [ 46.685927][ T24] audit: type=1400 audit(1774705301.640:21422): avc: denied { mounton } for pid=775 comm="syz.4.135" path="/17/file0" dev="tmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 46.733302][ T387] usb 2-1: USB disconnect, device number 8 [ 46.810958][ T15] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 46.923486][ T295] usb 3-1: USB disconnect, device number 3 [ 47.010992][ T387] Bluetooth: hci0: command 0x1009 tx timeout [ 47.211018][ T15] usb 4-1: unable to get BOS descriptor or descriptor too short [ 47.291015][ T15] usb 4-1: config 250 has an invalid interface number: 28 but max is 1 [ 47.299388][ T15] usb 4-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 47.310097][ T15] usb 4-1: config 250 has 1 interface, different from the descriptor's value: 2 [ 47.319283][ T15] usb 4-1: config 250 has no interface number 0 [ 47.325905][ T15] usb 4-1: config 250 interface 28 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 23 [ 47.491018][ T15] usb 4-1: New USB device found, idVendor=0b49, idProduct=064f, bcdDevice=d4.fd [ 47.498330][ T785] TCP: tcp_parse_options: Illegal window scaling value 64 > 14 received [ 47.500110][ T15] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.516651][ T15] usb 4-1: Product: syz [ 47.520818][ T15] usb 4-1: Manufacturer: syz [ 47.525505][ T15] usb 4-1: SerialNumber: syz [ 47.804383][ T15] usb 4-1: USB disconnect, device number 8 [ 48.286983][ T789] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 48.294371][ T789] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 48.304699][ T789] F2FS-fs (loop1): invalid crc value [ 48.312732][ T789] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 48.343333][ T789] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 48.350429][ T789] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 48.389332][ T801] handle_bad_sector: 7 callbacks suppressed [ 48.389344][ T801] attempt to access beyond end of device [ 48.389344][ T801] loop3: rw=2049, want=250, limit=128 [ 48.416493][ T24] audit: type=1400 audit(1774705303.370:21423): avc: denied { mounton } for pid=788 comm="syz.1.140" path="/39/file1/bus" dev="loop1" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 48.440185][ T799] attempt to access beyond end of device [ 48.440185][ T799] loop3: rw=524288, want=250, limit=128 [ 48.451082][ T24] audit: type=1400 audit(1774705303.370:21424): avc: denied { setattr } for pid=788 comm="syz.1.140" name="work" dev="loop1" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 48.453856][ T799] attempt to access beyond end of device [ 48.453856][ T799] loop3: rw=0, want=146, limit=128 [ 48.483753][ T799] attempt to access beyond end of device [ 48.483753][ T799] loop3: rw=0, want=146, limit=128 [ 48.490989][ T24] audit: type=1400 audit(1774705303.370:21425): avc: denied { rename } for pid=788 comm="syz.1.140" name="#1d" dev="loop1" ino=27 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 48.494856][ T799] attempt to access beyond end of device [ 48.494856][ T799] loop3: rw=0, want=146, limit=128 [ 48.530984][ T24] audit: type=1400 audit(1774705303.370:21426): avc: denied { unlink } for pid=788 comm="syz.1.140" name="#1d" dev="loop1" ino=29 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 48.531207][ T799] attempt to access beyond end of device [ 48.531207][ T799] loop3: rw=0, want=146, limit=128 [ 48.554115][ T275] attempt to access beyond end of device [ 48.554115][ T275] loop1: rw=524288, want=45072, limit=40427 [ 48.567845][ T799] attempt to access beyond end of device [ 48.567845][ T799] loop3: rw=0, want=210, limit=128 [ 48.575577][ T24] audit: type=1400 audit(1774705303.400:21427): avc: denied { unlink } for pid=788 comm="syz.1.140" name="#1e" dev="loop1" ino=27 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 48.607107][ T799] attempt to access beyond end of device [ 48.607107][ T799] loop3: rw=0, want=210, limit=128 [ 48.608359][ T275] attempt to access beyond end of device [ 48.608359][ T275] loop1: rw=0, want=45072, limit=40427 [ 48.849965][ T24] audit: type=1400 audit(1774705303.800:21428): avc: denied { mounton } for pid=816 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 48.932662][ T816] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.939707][ T816] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.947604][ T816] device bridge_slave_0 entered promiscuous mode [ 48.954752][ T816] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.962226][ T816] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.969774][ T816] device bridge_slave_1 entered promiscuous mode [ 49.025026][ T816] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.032099][ T816] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.039369][ T816] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.046437][ T816] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.064360][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.072019][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.079261][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.088107][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.096384][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.103648][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.113423][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.121776][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.128795][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.140103][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 49.149361][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 49.163610][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 49.174626][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 49.182896][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 49.190289][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 49.199624][ T816] device veth0_vlan entered promiscuous mode [ 49.209256][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 49.218286][ T816] device veth1_macvtap entered promiscuous mode [ 49.228079][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 49.239197][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 49.291011][ T387] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 49.816330][ T841] xt_hashlimit: size too large, truncated to 1048576 [ 49.825371][ T387] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 49.837501][ T387] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 50.001045][ T387] usb 3-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice= 0.40 [ 50.010182][ T387] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.018447][ T387] usb 3-1: Product: syz [ 50.023046][ T387] usb 3-1: Manufacturer: syz [ 50.027684][ T387] usb 3-1: SerialNumber: syz [ 50.114250][ T849] netlink: 27 bytes leftover after parsing attributes in process `syz.4.160'. [ 50.271851][ T858] FAT-fs (loop4): Invalid FSINFO signature: 0x41000006, 0x61417272 (sector = 1) [ 50.369351][ T830] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 50.384272][ T830] ext4 filesystem being mounted at /25/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 50.453555][ T830] EXT4-fs warning (device loop2): verify_group_input:147: Cannot add at group 7 (only 1 groups) [ 50.531760][ T387] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 50.545889][ T387] usb 3-1: USB disconnect, device number 4 [ 50.640235][ T873] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.647493][ T873] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.655320][ T873] device bridge_slave_0 entered promiscuous mode [ 50.664952][ T873] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.672401][ T873] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.680079][ T873] device bridge_slave_1 entered promiscuous mode [ 50.797562][ T873] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.804632][ T873] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.811888][ T873] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.818915][ T873] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.850109][ T878] EXT4-fs (loop5): Ignoring removed orlov option [ 50.857441][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.865877][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.874481][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.882125][ T878] EXT4-fs (loop5): mounted filesystem without journal. Opts: block_validity,bsddf,data_err=ignore,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,usrquota,noauto_da_alloc,norecovery,,errors=continue [ 50.918423][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 50.927108][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.935997][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 50.944961][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 50.957101][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 50.965603][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 50.985896][ T873] device veth0_vlan entered promiscuous mode [ 50.993504][ T885] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 51.002306][ T885] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 51.033914][ T873] device veth1_macvtap entered promiscuous mode [ 51.042106][ T885] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 51.121321][ T362] Bluetooth: hci1: Frame reassembly failed (-84) [ 51.157773][ T885] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 51.166903][ T885] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 51.177152][ T885] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 51.187373][ T885] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 51.211733][ T885] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 51.219947][ T885] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 51.228536][ T885] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 51.236757][ T885] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 51.246643][ T894] device syzkaller0 entered promiscuous mode [ 51.266310][ T894] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 51.280635][ T894] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 51.294995][ T894] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 51.310406][ T9] device bridge_slave_1 left promiscuous mode [ 51.316946][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.324582][ T9] device bridge_slave_0 left promiscuous mode [ 51.330714][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.338643][ T9] device veth1_macvtap left promiscuous mode [ 51.344734][ T9] device veth0_vlan left promiscuous mode [ 51.875275][ T905] netlink: 12 bytes leftover after parsing attributes in process `syz.0.179'. [ 51.890267][ T24] kauditd_printk_skb: 2 callbacks suppressed [ 51.890277][ T24] audit: type=1400 audit(1774705306.840:21431): avc: denied { write } for pid=904 comm="syz.0.179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 51.972683][ T911] EXT4-fs (loop5): dax option not supported [ 51.976166][ T914] device syzkaller0 entered promiscuous mode [ 51.989817][ T24] audit: type=1400 audit(1774705306.940:21432): avc: denied { ioctl } for pid=910 comm="syz.5.181" path="socket:[18867]" dev="sockfs" ino=18867 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 52.019094][ T914] overlayfs: missing 'workdir' [ 52.077701][ T916] loop5: p1 < > p4 [ 52.082197][ T916] loop5: p4 size 722688 extends beyond EOD, truncated [ 52.162772][ T703] blk_update_request: I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 52.165165][ T321] blk_update_request: I/O error, dev loop5, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 52.178335][ T703] blk_update_request: I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 52.187363][ T816] __loop_clr_fd: partition scan of loop5 failed (rc=-16) [ 52.196960][ T703] Buffer I/O error on dev loop5p1, logical block 0, async page read [ 52.204778][ T321] blk_update_request: I/O error, dev loop5, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 52.225513][ T703] blk_update_request: I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 52.241062][ T703] Buffer I/O error on dev loop5p1, logical block 0, async page read [ 52.243999][ T321] Buffer I/O error on dev loop5p4, logical block 1, async page read [ 52.249279][ T703] blk_update_request: I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 52.268670][ T703] Buffer I/O error on dev loop5p1, logical block 0, async page read [ 52.276938][ T703] blk_update_request: I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 52.288322][ T703] Buffer I/O error on dev loop5p1, logical block 0, async page read [ 52.291048][ T15] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 52.298011][ T703] blk_update_request: I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 52.321865][ T703] Buffer I/O error on dev loop5p1, logical block 0, async page read [ 52.354946][ T321] blk_update_request: I/O error, dev loop5, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 52.356037][ T703] blk_update_request: I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 52.382786][ T321] Buffer I/O error on dev loop5p4, logical block 1, async page read [ 52.391173][ T703] Buffer I/O error on dev loop5p1, logical block 0, async page read [ 52.422257][ T703] Buffer I/O error on dev loop5p1, logical block 0, async page read [ 52.471084][ T703] Buffer I/O error on dev loop5p1, logical block 0, async page read [ 52.690204][ T921] F2FS-fs (loop5): Test dummy encryption mode enabled [ 52.704598][ T921] F2FS-fs (loop5): invalid crc value [ 52.849156][ T921] F2FS-fs (loop5): Found nat_bits in checkpoint [ 53.037918][ T921] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 53.171271][ T20] Bluetooth: hci1: command 0x1003 tx timeout [ 53.261111][ T40] Bluetooth: hci1: sending frame failed (-49) [ 53.635353][ T15] usb 1-1: unable to get BOS descriptor or descriptor too short [ 53.708341][ T955] device syzkaller0 entered promiscuous mode [ 53.717900][ T955] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 53.732526][ T15] usb 1-1: config 250 has an invalid interface number: 28 but max is 1 [ 53.740872][ T15] usb 1-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 53.751948][ T15] usb 1-1: config 250 has 1 interface, different from the descriptor's value: 2 [ 53.761500][ T955] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 53.775735][ T15] usb 1-1: config 250 has no interface number 0 [ 53.782031][ T15] usb 1-1: config 250 interface 28 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 23 [ 53.795287][ T955] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 53.911022][ T20] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 53.926104][ T958] F2FS-fs (loop5): invalid crc value [ 53.933015][ T958] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 53.955589][ T958] F2FS-fs (loop5): Start checkpoint disabled! [ 53.961010][ T15] usb 1-1: New USB device found, idVendor=0b49, idProduct=064f, bcdDevice=d4.fd [ 53.962415][ T958] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 53.970780][ T15] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.986647][ T15] usb 1-1: Product: syz [ 53.990845][ T15] usb 1-1: Manufacturer: syz [ 53.995641][ T15] usb 1-1: SerialNumber: syz [ 54.051006][ T296] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 54.151005][ T20] usb 3-1: Using ep0 maxpacket: 32 [ 54.281586][ T20] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 54.283160][ T15] usb 1-1: USB disconnect, device number 3 [ 54.302977][ T20] usb 3-1: config 0 has no interface number 0 [ 54.309192][ T20] usb 3-1: config 0 interface 184 has no altsetting 0 [ 54.330991][ T296] usb 7-1: device descriptor read/64, error -71 [ 54.341277][ T9] handle_bad_sector: 3 callbacks suppressed [ 54.341287][ T9] attempt to access beyond end of device [ 54.341287][ T9] loop5: rw=2049, want=45104, limit=40427 [ 54.481218][ T20] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 54.490346][ T20] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.498669][ T20] usb 3-1: Product: syz [ 54.503249][ T20] usb 3-1: Manufacturer: syz [ 54.507841][ T20] usb 3-1: SerialNumber: syz [ 54.521555][ T20] usb 3-1: config 0 descriptor?? [ 54.571346][ T20] smsc75xx v1.0.0 [ 54.581577][ T963] F2FS-fs (loop5): fault_injection options not supported [ 54.588713][ T963] F2FS-fs (loop5): fault_type options not supported [ 54.595966][ T963] F2FS-fs (loop5): invalid crc value [ 54.606370][ T963] F2FS-fs (loop5): Found nat_bits in checkpoint [ 54.627537][ T963] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 54.644344][ T963] attempt to access beyond end of device [ 54.644344][ T963] loop5: rw=2049, want=45128, limit=40427 [ 54.721023][ T296] usb 7-1: device descriptor read/64, error -71 [ 54.854103][ T978] loop0: p1 < > p3 p4 [ 54.859028][ T978] loop0: p3 start 458752 is beyond EOD, truncated [ 54.865679][ T978] loop0: p4 start 268435456 is beyond EOD, truncated [ 54.990983][ T296] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 55.110989][ T387] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 55.221063][ T20] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 55.232053][ T20] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 55.261046][ T296] usb 7-1: device descriptor read/64, error -71 [ 55.331082][ T53] Bluetooth: hci1: command 0x1001 tx timeout [ 55.337122][ T40] Bluetooth: hci1: sending frame failed (-49) [ 55.481037][ T387] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 55.491233][ T387] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 55.651491][ T296] usb 7-1: device descriptor read/64, error -71 [ 55.651804][ T387] usb 6-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice= 0.40 [ 55.666829][ T387] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.674869][ T387] usb 6-1: Product: syz [ 55.679019][ T387] usb 6-1: Manufacturer: syz [ 55.683697][ T387] usb 6-1: SerialNumber: syz [ 55.771212][ T296] usb usb7-port1: attempt power cycle [ 56.050614][ T981] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 56.082379][ T981] ext4 filesystem being mounted at /20/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 56.201064][ T296] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 56.287275][ T981] EXT4-fs warning (device loop5): verify_group_input:147: Cannot add at group 7 (only 1 groups) [ 56.351349][ T20] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 56.363191][ T20] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 56.375202][ T20] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 56.386089][ T20] smsc75xx: probe of 3-1:0.184 failed with error -71 [ 56.397847][ T20] usb 3-1: USB disconnect, device number 5 [ 56.471476][ T296] usb 7-1: device descriptor read/8, error -71 [ 56.671417][ T387] snd-usb-audio: probe of 6-1:1.0 failed with error -22 [ 56.685006][ T387] usb 6-1: USB disconnect, device number 2 [ 56.777895][ T993] F2FS-fs (loop0): Unrecognized mount option "fault_type=00000000000000033" or missing value [ 56.790992][ T296] usb 7-1: device descriptor read/8, error -71 [ 57.019473][ T24] audit: type=1400 audit(1774705311.970:21433): avc: denied { ioctl } for pid=998 comm="syz.2.211" path="socket:[19479]" dev="sockfs" ino=19479 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 57.121868][ T997] F2FS-fs (loop6): invalid crc value [ 57.140498][ T997] F2FS-fs (loop6): Found nat_bits in checkpoint [ 57.202276][ T997] F2FS-fs (loop6): Cannot turn on quotas: -2 on 2 [ 57.223269][ T703] print_req_error: 54 callbacks suppressed [ 57.223281][ T703] blk_update_request: I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 57.223301][ T321] blk_update_request: I/O error, dev loop5, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 57.229354][ T703] blk_update_request: I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 57.257754][ T321] buffer_io_error: 38 callbacks suppressed [ 57.257796][ T321] Buffer I/O error on dev loop5p4, logical block 1, async page read [ 57.262695][ T997] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 57.264246][ T703] Buffer I/O error on dev loop5p1, logical block 0, async page read [ 57.301047][ T24] audit: type=1326 audit(1774705312.250:21434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=992 comm="syz.0.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8b84629597 code=0x50000 [ 57.331508][ T703] blk_update_request: I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 57.350954][ T703] Buffer I/O error on dev loop5p1, logical block 0, async page read [ 57.357470][ T24] audit: type=1326 audit(1774705312.250:21435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=992 comm="syz.0.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b8462f819 code=0x50000 [ 57.359102][ T703] blk_update_request: I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 57.409598][ T24] audit: type=1326 audit(1774705312.250:21437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=992 comm="syz.0.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8b84629597 code=0x50000 [ 57.430992][ T703] Buffer I/O error on dev loop5p1, logical block 0, async page read [ 57.440012][ T24] audit: type=1326 audit(1774705312.250:21439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=992 comm="syz.0.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8b845d0b99 code=0x50000 [ 57.440984][ T20] Bluetooth: hci1: command 0x1009 tx timeout [ 57.469971][ T703] blk_update_request: I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 57.470465][ T24] audit: type=1326 audit(1774705312.250:21438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=992 comm="syz.0.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8b84629597 code=0x50000 [ 57.491409][ T703] Buffer I/O error on dev loop5p1, logical block 0, async page read [ 57.523917][ T24] audit: type=1326 audit(1774705312.250:21440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=992 comm="syz.0.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8b845d0b99 code=0x50000 [ 57.531104][ T703] blk_update_request: I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 57.567647][ T24] audit: type=1326 audit(1774705312.250:21441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=992 comm="syz.0.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f8b845d0c5d code=0x50000 [ 57.597834][ T24] audit: type=1326 audit(1774705312.250:21442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=992 comm="syz.0.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f8b8462f819 code=0x50000 [ 57.600946][ T703] Buffer I/O error on dev loop5p1, logical block 0, async page read [ 57.641377][ T24] audit: type=1326 audit(1774705312.250:21443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=992 comm="syz.0.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f8b845d0c5d code=0x50000 [ 57.691443][ T703] blk_update_request: I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 57.706067][ T321] blk_update_request: I/O error, dev loop5, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 57.720817][ T321] blk_update_request: I/O error, dev loop5, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 57.731880][ T703] Buffer I/O error on dev loop5p1, logical block 0, async page read [ 57.740018][ T703] Buffer I/O error on dev loop5p1, logical block 0, async page read [ 57.748664][ T321] Buffer I/O error on dev loop5p4, logical block 1, async page read [ 57.761051][ T703] Buffer I/O error on dev loop5p1, logical block 0, async page read [ 59.234389][ T1021] F2FS-fs (loop2): Test dummy encryption mode enabled [ 59.254191][ T1021] F2FS-fs (loop2): invalid crc value [ 59.259864][ T1036] device syzkaller0 entered promiscuous mode [ 59.275118][ T1036] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 59.291760][ T1021] F2FS-fs (loop2): Found nat_bits in checkpoint [ 59.340495][ T1036] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 59.370980][ T1021] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 59.401188][ T1036] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 59.471022][ T1021] fscrypt: AES-256-CTS-CBC using implementation "cts(cbc-aes-aesni)" [ 59.681053][ T296] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 59.960993][ T296] usb 7-1: device descriptor read/64, error -71 [ 59.980982][ T387] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 60.341034][ T387] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 60.350986][ T296] usb 7-1: device descriptor read/64, error -71 [ 60.351195][ T387] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 60.521042][ T387] usb 3-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice= 0.40 [ 60.530122][ T387] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.538208][ T387] usb 3-1: Product: syz [ 60.542589][ T387] usb 3-1: Manufacturer: syz [ 60.547242][ T387] usb 3-1: SerialNumber: syz [ 60.630973][ T296] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 60.839595][ T1067] netlink: 12 bytes leftover after parsing attributes in process `syz.0.228'. [ 60.854416][ T1049] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 60.873292][ T1049] ext4 filesystem being mounted at /34/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 60.906898][ T1049] EXT4-fs warning (device loop2): verify_group_input:147: Cannot add at group 7 (only 1 groups) [ 60.918058][ T296] usb 7-1: device descriptor read/64, error -71 [ 61.003204][ T387] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 61.011670][ T387] usb 3-1: USB disconnect, device number 6 [ 61.310965][ T296] usb 7-1: device descriptor read/64, error -71 [ 61.340994][ T15] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 61.431116][ T296] usb usb7-port1: attempt power cycle [ 61.653742][ T885] Bluetooth: hci0: Frame reassembly failed (-84) [ 61.701012][ T15] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 61.711253][ T15] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 61.840973][ T296] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 61.881044][ T15] usb 1-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice= 0.40 [ 61.890414][ T15] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.898859][ T15] usb 1-1: Product: syz [ 61.904142][ T15] usb 1-1: Manufacturer: syz [ 61.909123][ T15] usb 1-1: SerialNumber: syz [ 62.017428][ T1096] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 62.030969][ T296] usb 7-1: device descriptor read/8, error -71 [ 62.047958][ T1096] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:3358: comm syz.5.239: Allocating blocks 385-513 which overlap fs metadata [ 62.068785][ T1095] EXT4-fs (loop5): pa ffff88812ac24bd0: logic 16, phys. 129, len 24 [ 62.076992][ T1095] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:4375: group 0, free 0, pa_free 8 [ 62.234190][ T1083] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 62.243299][ T1083] ext4 filesystem being mounted at /43/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 62.284641][ T1083] EXT4-fs warning (device loop0): verify_group_input:147: Cannot add at group 7 (only 1 groups) [ 62.371002][ T296] usb 7-1: device descriptor read/8, error -71 [ 62.391378][ T15] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 62.401023][ T295] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 62.408689][ T24] kauditd_printk_skb: 20 callbacks suppressed [ 62.408699][ T24] audit: type=1400 audit(1774705317.360:21463): avc: denied { bind } for pid=1108 comm="syz.2.244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 62.442332][ T15] usb 1-1: USB disconnect, device number 4 [ 62.502096][ T1121] device syzkaller0 entered promiscuous mode [ 62.512457][ T1121] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 62.527062][ T1121] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 62.541538][ T1121] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 62.751033][ T387] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 62.811027][ T295] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 62.821186][ T295] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 62.871010][ T296] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 62.896999][ T1125] capability: warning: `syz.0.250' uses deprecated v2 capabilities in a way that may be insecure [ 62.938311][ T24] audit: type=1400 audit(1774705317.890:21464): avc: denied { map } for pid=1126 comm="syz.0.251" path="socket:[19772]" dev="sockfs" ino=19772 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 62.969256][ T1129] device syzkaller0 entered promiscuous mode [ 62.978417][ T1129] overlayfs: missing 'lowerdir' [ 63.031046][ T295] usb 6-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice= 0.40 [ 63.040297][ T295] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.048427][ T295] usb 6-1: Product: syz [ 63.052770][ T295] usb 6-1: Manufacturer: syz [ 63.057427][ T295] usb 6-1: SerialNumber: syz [ 63.071061][ T296] usb 7-1: device descriptor read/8, error -71 [ 63.151042][ T387] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 63.161706][ T387] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 63.261046][ T588] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 63.331487][ T387] usb 3-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice= 0.40 [ 63.340737][ T387] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.341017][ T296] usb 7-1: device descriptor read/8, error -71 [ 63.348825][ T387] usb 3-1: Product: syz [ 63.359083][ T387] usb 3-1: Manufacturer: syz [ 63.363791][ T387] usb 3-1: SerialNumber: syz [ 63.385274][ T1101] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 63.394397][ T1101] ext4 filesystem being mounted at /30/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 63.427676][ T1101] EXT4-fs warning (device loop5): verify_group_input:147: Cannot add at group 7 (only 1 groups) [ 63.471100][ T296] usb usb7-port1: unable to enumerate USB device [ 63.501281][ T295] snd-usb-audio: probe of 6-1:1.0 failed with error -22 [ 63.509056][ T295] usb 6-1: USB disconnect, device number 3 [ 63.649967][ T1119] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 63.658980][ T1119] ext4 filesystem being mounted at /39/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 63.691183][ T588] usb 1-1: unable to get BOS descriptor or descriptor too short [ 63.699074][ T1119] EXT4-fs warning (device loop2): verify_group_input:147: Cannot add at group 7 (only 1 groups) [ 63.731106][ T296] Bluetooth: hci0: command 0x1003 tx timeout [ 63.737398][ T40] Bluetooth: hci0: sending frame failed (-49) [ 63.781059][ T588] usb 1-1: config 250 has an invalid interface number: 28 but max is 1 [ 63.781429][ T387] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 63.789693][ T588] usb 1-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 63.801767][ T387] usb 3-1: USB disconnect, device number 7 [ 63.817425][ T588] usb 1-1: config 250 has 1 interface, different from the descriptor's value: 2 [ 63.826586][ T588] usb 1-1: config 250 has no interface number 0 [ 63.832898][ T588] usb 1-1: config 250 interface 28 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 23 [ 64.001113][ T588] usb 1-1: New USB device found, idVendor=0b49, idProduct=064f, bcdDevice=d4.fd [ 64.010592][ T588] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.018949][ T588] usb 1-1: Product: syz [ 64.023454][ T588] usb 1-1: Manufacturer: syz [ 64.028042][ T588] usb 1-1: SerialNumber: syz [ 64.049204][ T299] print_req_error: 60 callbacks suppressed [ 64.049219][ T299] blk_update_request: I/O error, dev loop5, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 64.067972][ T321] blk_update_request: I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 64.079960][ T321] blk_update_request: I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 64.091603][ T299] blk_update_request: I/O error, dev loop5, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 64.095068][ T321] buffer_io_error: 44 callbacks suppressed [ 64.095078][ T321] Buffer I/O error on dev loop5p1, logical block 0, async page read [ 64.103361][ T299] Buffer I/O error on dev loop5p4, logical block 1, async page read [ 64.109003][ T321] blk_update_request: I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 64.135824][ T321] Buffer I/O error on dev loop5p1, logical block 0, async page read [ 64.145099][ T321] blk_update_request: I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 64.156032][ T321] Buffer I/O error on dev loop5p1, logical block 0, async page read [ 64.164245][ T321] blk_update_request: I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 64.175251][ T321] Buffer I/O error on dev loop5p1, logical block 0, async page read [ 64.183541][ T321] blk_update_request: I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 64.194589][ T321] Buffer I/O error on dev loop5p1, logical block 0, async page read [ 64.207744][ T299] blk_update_request: I/O error, dev loop5, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 64.207985][ T321] blk_update_request: I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 64.230652][ T299] Buffer I/O error on dev loop5p4, logical block 1, async page read [ 64.239191][ T321] Buffer I/O error on dev loop5p1, logical block 0, async page read [ 64.248170][ T321] Buffer I/O error on dev loop5p1, logical block 0, async page read [ 64.277458][ T321] Buffer I/O error on dev loop5p1, logical block 0, async page read [ 64.312801][ T588] usb 1-1: USB disconnect, device number 5 [ 64.872178][ T24] audit: type=1400 audit(1774705319.830:21465): avc: denied { bind } for pid=1155 comm="syz.0.261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 64.918240][ T24] audit: type=1400 audit(1774705319.870:21466): avc: denied { name_bind } for pid=1161 comm="syz.0.264" src=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 65.199188][ T24] audit: type=1400 audit(1774705320.150:21467): avc: denied { read write } for pid=1176 comm="syz.0.271" name="vhost-vsock" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 65.223530][ T24] audit: type=1400 audit(1774705320.150:21468): avc: denied { open } for pid=1176 comm="syz.0.271" path="/dev/vhost-vsock" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 65.247638][ T24] audit: type=1400 audit(1774705320.150:21469): avc: denied { ioctl } for pid=1176 comm="syz.0.271" path="/dev/vhost-vsock" dev="devtmpfs" ino=262 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 65.291774][ T24] audit: type=1400 audit(1774705320.240:21470): avc: denied { sys_admin } for pid=1181 comm="syz.2.273" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 65.317015][ T1180] x_tables: duplicate underflow at hook 1 [ 65.332917][ T24] audit: type=1400 audit(1774705320.290:21471): avc: denied { bind } for pid=1186 comm="syz.0.275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 65.361536][ T24] audit: type=1400 audit(1774705320.320:21472): avc: denied { read } for pid=1188 comm="syz.0.276" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 65.540270][ T1199] xt_hashlimit: size too large, truncated to 1048576 [ 65.701440][ T1206] ------------[ cut here ]------------ [ 65.707197][ T1206] WARNING: CPU: 1 PID: 1206 at mm/page_alloc.c:5368 __alloc_pages_nodemask+0x345/0x620 [ 65.717575][ T1206] Modules linked in: [ 65.721697][ T1206] CPU: 1 PID: 1206 Comm: syz.6.283 Not tainted syzkaller #0 [ 65.729414][ T1206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 65.739764][ T1206] RIP: 0010:__alloc_pages_nodemask+0x345/0x620 [ 65.746050][ T1206] Code: 48 3b 8c 24 e0 00 00 00 0f 85 a0 00 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 41 f7 c6 00 20 00 00 0f 85 d8 fd ff ff <0f> 0b 31 c0 eb 95 31 c0 e9 a6 fd ff ff 4c 89 ff e8 66 78 f5 ff 49 [ 65.766111][ T1206] RSP: 0018:ffffc90000e579c0 EFLAGS: 00010246 [ 65.772392][ T1206] RAX: ffffc90000e57a50 RBX: 0000000000000000 RCX: 0000000000000000 [ 65.780699][ T1206] RDX: 0000000000000018 RSI: 0000000000000000 RDI: ffffc90000e57a68 [ 65.788937][ T1206] RBP: ffffc90000e57af8 R08: ffffc90000e57a67 R09: ffffc90000e57a50 [ 65.797158][ T1206] R10: dffffc0000000000 R11: fffff520001caf4d R12: 1ffff920001caf40 [ 65.807255][ T1206] R13: dffffc0000000000 R14: 0000000000040d40 R15: 0000000000000034 [ 65.818862][ T15] Bluetooth: hci0: command 0x1001 tx timeout [ 65.832138][ T1206] FS: 00007f6550acc6c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 65.841673][ T40] Bluetooth: hci0: sending frame failed (-49) [ 65.848000][ T1206] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 65.859959][ T1206] CR2: 0000001b33a23ffc CR3: 0000000115b11000 CR4: 00000000003526b0 [ 65.871005][ T1206] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 65.879228][ T1206] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 65.896915][ T1206] Call Trace: [ 65.900255][ T1206] ? __update_load_avg_cfs_rq+0xaf/0x2f0 [ 65.911396][ T1206] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 65.917333][ T1206] ? __kasan_check_write+0x14/0x20 [ 65.922795][ T1206] ? __switch_to+0x508/0x1020 [ 65.927907][ T1206] kmalloc_order+0x4c/0x160 [ 65.932831][ T1206] ? compat_start_thread+0x80/0x80 [ 65.938186][ T1206] kmalloc_order_trace+0x16/0x80 [ 65.943519][ T1206] __kmalloc+0x1eb/0x330 [ 65.947979][ T1206] ? __kasan_check_write+0x14/0x20 [ 65.953434][ T1206] pending_reads_dispatch_ioctl+0xc74/0x1e30 [ 65.959437][ T1206] ? __switch_to_asm+0x34/0x60 [ 65.964458][ T1206] ? pending_reads_poll+0x180/0x180 [ 65.969684][ T1206] ? __kasan_check_read+0x11/0x20 [ 65.974934][ T1206] ? preempt_schedule_irq+0xca/0x120 [ 65.981354][ T1206] ? preempt_schedule_notrace+0x120/0x120 [ 65.987335][ T1206] ? selinux_file_ioctl+0x3a0/0x4d0 [ 65.992914][ T1206] ? irqentry_exit+0x56/0x60 [ 65.997893][ T1206] ? sysvec_reschedule_ipi+0x69/0x70 [ 66.003490][ T1206] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 66.009409][ T1206] ? pending_reads_poll+0x180/0x180 [ 66.014899][ T1206] ? __se_sys_ioctl+0x114/0x1a0 [ 66.020062][ T1206] ? pending_reads_poll+0x180/0x180 [ 66.025373][ T1206] __se_sys_ioctl+0x121/0x1a0 [ 66.030102][ T1206] __x64_sys_ioctl+0x7b/0x90 [ 66.034805][ T1206] do_syscall_64+0x31/0x40 [ 66.039286][ T1206] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 66.045659][ T1206] RIP: 0033:0x7f6552071819 [ 66.050158][ T1206] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 66.069965][ T1206] RSP: 002b:00007f6550acc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 66.078718][ T1206] RAX: ffffffffffffffda RBX: 00007f65522eafa0 RCX: 00007f6552071819 [ 66.087008][ T1206] RDX: 00002000000000c0 RSI: 0000000040106726 RDI: 0000000000000007 [ 66.095701][ T1206] RBP: 00007f6552107c91 R08: 0000000000000000 R09: 0000000000000000 [ 66.103934][ T1206] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 66.112032][ T1206] R13: 00007f65522eb038 R14: 00007f65522eafa0 R15: 00007fff4725c568 [ 66.120160][ T1206] ---[ end trace 5b5aff8c4d3bbd56 ]--- [ 66.909288][ T1230] device syzkaller0 entered promiscuous mode [ 66.921985][ T1230] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 66.937275][ T1230] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 66.951715][ T1230] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 67.046750][ T1237] device syzkaller0 entered promiscuous mode [ 67.056783][ T1237] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 67.071276][ T1237] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 67.085957][ T1237] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 67.251007][ T295] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 67.371043][ T387] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 67.521018][ T295] usb 1-1: device descriptor read/64, error -71 [ 67.577239][ T24] kauditd_printk_skb: 11 callbacks suppressed [ 67.577249][ T24] audit: type=1400 audit(1774705322.530:21484): avc: denied { create } for pid=1249 comm="syz.5.300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 67.631463][ T24] audit: type=1400 audit(1774705322.590:21485): avc: denied { associate } for pid=1255 comm="syz.5.303" name="cgroup.stat" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 67.791062][ T387] usb 7-1: unable to get BOS descriptor or descriptor too short [ 67.798805][ T387] usb 7-1: no configurations [ 67.803506][ T387] usb 7-1: can't read configurations, error -22 [ 67.890979][ T15] Bluetooth: hci0: command 0x1009 tx timeout [ 67.921025][ T295] usb 1-1: device descriptor read/64, error -71 [ 67.950957][ T387] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 68.191024][ T295] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 68.227801][ T885] Bluetooth: hci1: Frame reassembly failed (-84) [ 68.281020][ T25] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 68.361041][ T387] usb 7-1: unable to get BOS descriptor or descriptor too short [ 68.368763][ T387] usb 7-1: no configurations [ 68.373413][ T387] usb 7-1: can't read configurations, error -22 [ 68.379836][ T387] usb usb7-port1: attempt power cycle [ 68.470989][ T295] usb 1-1: device descriptor read/64, error -71 [ 68.641044][ T25] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 68.651242][ T25] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 68.790972][ T387] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 68.821024][ T25] usb 3-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice= 0.40 [ 68.830113][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.838219][ T25] usb 3-1: Product: syz [ 68.842490][ T25] usb 3-1: Manufacturer: syz [ 68.847060][ T25] usb 3-1: SerialNumber: syz [ 68.881038][ T295] usb 1-1: device descriptor read/64, error -71 [ 69.001068][ T295] usb usb1-port1: attempt power cycle [ 69.051033][ T387] usb 7-1: unable to get BOS descriptor or descriptor too short [ 69.058700][ T387] usb 7-1: no configurations [ 69.063661][ T387] usb 7-1: can't read configurations, error -22 [ 69.125555][ T1262] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 69.134537][ T1262] ext4 filesystem being mounted at /59/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 69.167897][ T1262] EXT4-fs warning (device loop2): verify_group_input:147: Cannot add at group 7 (only 1 groups) [ 69.231006][ T387] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 69.241379][ T25] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 69.250863][ T25] usb 3-1: USB disconnect, device number 8 [ 69.451031][ T295] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 69.481008][ T387] usb 7-1: unable to get BOS descriptor or descriptor too short [ 69.488656][ T387] usb 7-1: no configurations [ 69.493486][ T387] usb 7-1: can't read configurations, error -22 [ 69.499767][ T387] usb usb7-port1: unable to enumerate USB device [ 69.620982][ T295] usb 1-1: device descriptor read/8, error -71 [ 69.738872][ T24] audit: type=1400 audit(1774705324.690:21486): avc: denied { mount } for pid=1270 comm="syz.2.309" name="/" dev="configfs" ino=13377 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 69.762148][ T24] audit: type=1400 audit(1774705324.710:21487): avc: denied { search } for pid=1270 comm="syz.2.309" name="/" dev="configfs" ino=13377 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 69.784685][ T24] audit: type=1400 audit(1774705324.710:21488): avc: denied { read } for pid=1270 comm="syz.2.309" name="/" dev="configfs" ino=13377 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 69.807589][ T24] audit: type=1400 audit(1774705324.710:21489): avc: denied { open } for pid=1270 comm="syz.2.309" path="/" dev="configfs" ino=13377 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 69.921010][ T295] usb 1-1: device descriptor read/8, error -71 [ 69.928235][ T1273] F2FS-fs (loop2): invalid crc value [ 69.934733][ T1273] F2FS-fs (loop2): Found nat_bits in checkpoint [ 69.975590][ T1273] F2FS-fs (loop2): Start checkpoint disabled! [ 69.982414][ T1273] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 70.004593][ T281] attempt to access beyond end of device [ 70.004593][ T281] loop2: rw=524288, want=45072, limit=40427 [ 70.016390][ T281] attempt to access beyond end of device [ 70.016390][ T281] loop2: rw=0, want=45072, limit=40427 [ 70.037748][ T885] attempt to access beyond end of device [ 70.037748][ T885] loop2: rw=2049, want=45120, limit=40427 [ 70.291136][ T588] Bluetooth: hci1: command 0x1003 tx timeout [ 70.291286][ T1287] FAT-fs (loop6): Unrecognized mount option "" or missing value [ 70.306031][ T561] Bluetooth: hci1: sending frame failed (-49) [ 70.344012][ T1290] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.351399][ T1290] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.358963][ T1290] device bridge_slave_0 entered promiscuous mode [ 70.366160][ T1290] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.373936][ T1290] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.385618][ T1290] device bridge_slave_1 entered promiscuous mode [ 70.443643][ T1290] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.450894][ T1290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.458179][ T1290] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.465320][ T1290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.482656][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.490195][ T362] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.497669][ T362] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.658589][ T362] Bluetooth: hci2: Frame reassembly failed (-84) [ 70.671665][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.679909][ T362] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.686947][ T362] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.694508][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.703414][ T362] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.710513][ T362] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.718087][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.726143][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.739145][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.749976][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.758003][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.765511][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.774881][ T1290] device veth0_vlan entered promiscuous mode [ 70.785174][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.794256][ T1290] device veth1_macvtap entered promiscuous mode [ 70.803520][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.813559][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.828386][ T24] audit: type=1400 audit(1774705325.780:21490): avc: denied { mounton } for pid=1290 comm="syz-executor" path="/root/syzkaller.s7PC89/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 70.875333][ T24] audit: type=1400 audit(1774705325.830:21491): avc: denied { connect } for pid=1303 comm="syz.7.320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 70.944917][ T1306] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue [ 70.954069][ T1306] ext4 filesystem being mounted at /2/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 70.968569][ T1306] syz.7.321 (pid 1306) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 71.008595][ T1310] device syzkaller0 entered promiscuous mode [ 71.017872][ T1310] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 71.032635][ T1310] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 71.046903][ T1310] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 71.119218][ T1312] xt_hashlimit: size too large, truncated to 1048576 [ 71.331034][ T15] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 71.352216][ T1319] device syzkaller0 entered promiscuous mode [ 71.362454][ T1319] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 71.377855][ T1319] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 71.392876][ T1319] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 71.601019][ T15] usb 8-1: device descriptor read/64, error -71 [ 71.671037][ T295] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 71.991021][ T15] usb 8-1: device descriptor read/64, error -71 [ 72.071167][ T295] usb 1-1: unable to get BOS descriptor or descriptor too short [ 72.078978][ T295] usb 1-1: no configurations [ 72.083639][ T295] usb 1-1: can't read configurations, error -22 [ 72.231039][ T295] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 72.261022][ T15] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 73.129127][ T387] Bluetooth: hci1: command 0x1001 tx timeout [ 73.135416][ T300] Bluetooth: hci2: command 0x1003 tx timeout [ 73.142016][ T434] Bluetooth: hci1: sending frame failed (-49) [ 73.157574][ T434] Bluetooth: hci2: sending frame failed (-49) [ 73.227196][ T1326] EXT4-fs (loop3): Test dummy encryption mode enabled [ 73.235602][ T1326] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a042c018, mo2=0003] [ 73.243840][ T1326] System zones: 0-5 [ 73.248277][ T1326] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,delalloc,inlinecrypt,test_dummy_encryption,errors=continue,errors=continue,delalloc,barrier,nodelalloc,,errors=continue [ 73.274414][ T24] audit: type=1400 audit(1774705328.230:21492): avc: denied { watch watch_reads } for pid=1325 comm="syz.3.328" path="/47/file0" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 73.298021][ T24] audit: type=1400 audit(1774705328.230:21493): avc: denied { create } for pid=1325 comm="syz.3.328" name=E91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 73.301003][ T15] usb 8-1: device descriptor read/64, error -71 [ 73.441047][ T295] usb 1-1: unable to get BOS descriptor or descriptor too short [ 73.448924][ T295] usb 1-1: no configurations [ 73.453872][ T295] usb 1-1: can't read configurations, error -22 [ 73.460380][ T295] usb usb1-port1: attempt power cycle [ 73.710991][ T15] usb 8-1: device descriptor read/64, error -71 [ 73.831019][ T15] usb usb8-port1: attempt power cycle [ 73.882125][ T295] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 73.933775][ T1345] EXT4-fs (loop3): Ignoring removed orlov option [ 73.940230][ T1345] EXT4-fs (loop3): Ignoring removed nobh option [ 73.951371][ T1345] EXT4-fs (loop3): can't mount with journal_async_commit, fs mounted w/o journal [ 74.074762][ T24] audit: type=1400 audit(1774705329.030:21494): avc: denied { create } for pid=1352 comm="syz.7.338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 74.096739][ T24] audit: type=1400 audit(1774705329.040:21495): avc: denied { append } for pid=1352 comm="syz.7.338" name="rt_cache" dev="proc" ino=4026532574 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 74.127921][ T24] audit: type=1400 audit(1774705329.040:21496): avc: denied { write } for pid=1352 comm="syz.7.338" path="socket:[21017]" dev="sockfs" ino=21017 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 74.131399][ T1361] tipc: Started in network mode [ 74.157464][ T1361] tipc: Own node identity ee0de16c77a, cluster identity 4711 [ 74.165266][ T1361] tipc: Enabled bearer , priority 0 [ 74.181157][ T295] usb 1-1: unable to get BOS descriptor or descriptor too short [ 74.198814][ T295] usb 1-1: no configurations [ 74.203640][ T295] usb 1-1: can't read configurations, error -22 [ 74.225851][ T1361] device syzkaller0 entered promiscuous mode [ 74.250206][ T1359] tipc: Resetting bearer [ 74.267575][ T1359] tipc: Disabling bearer [ 74.291995][ T1364] erofs: (device loop3): mounted with root inode @ nid 36. [ 74.361063][ T295] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 74.403799][ T24] audit: type=1400 audit(1774705329.360:21497): avc: denied { setopt } for pid=1374 comm="syz.3.347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 74.423708][ T24] audit: type=1400 audit(1774705329.360:21498): avc: denied { nlmsg_read } for pid=1374 comm="syz.3.347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 74.460134][ T24] audit: type=1400 audit(1774705329.410:21499): avc: denied { listen } for pid=1381 comm="syz.3.350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 74.609731][ T1377] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 74.627339][ T24] audit: type=1400 audit(1774705329.580:21500): avc: denied { getopt } for pid=1376 comm="syz.0.348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 74.648443][ T1397] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 74.648501][ T24] audit: type=1400 audit(1774705329.610:21501): avc: denied { read } for pid=1390 comm="syz.3.353" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=21143 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 74.835050][ T1411] EXT4-fs error (device loop7): ext4_orphan_get:1395: inode #15: comm syz.7.361: inode has both inline data and extents flags [ 74.848526][ T1411] EXT4-fs error (device loop7): ext4_orphan_get:1400: comm syz.7.361: couldn't read orphan inode 15 (err -117) [ 74.861103][ T295] usb 1-1: device not accepting address 13, error -71 [ 74.861686][ T1411] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue [ 74.869620][ T295] usb usb1-port1: unable to enumerate USB device [ 75.174907][ T20] Bluetooth: hci2: command 0x1001 tx timeout [ 75.181452][ T434] Bluetooth: hci2: sending frame failed (-49) [ 75.187878][ T20] Bluetooth: hci1: command 0x1009 tx timeout [ 76.190018][ T15] hid-generic 0003:0003:0000.0004: unknown main item tag 0x0 [ 76.197625][ T15] hid-generic 0003:0003:0000.0004: unknown main item tag 0x0 [ 76.205112][ T15] hid-generic 0003:0003:0000.0004: unknown main item tag 0x0 [ 76.213066][ T15] hid-generic 0003:0003:0000.0004: unknown main item tag 0x0 [ 76.220512][ T15] hid-generic 0003:0003:0000.0004: unknown main item tag 0x0 [ 76.227979][ T15] hid-generic 0003:0003:0000.0004: unknown main item tag 0x0 [ 76.235550][ T15] hid-generic 0003:0003:0000.0004: unknown main item tag 0x0 [ 76.243102][ T15] hid-generic 0003:0003:0000.0004: unknown main item tag 0x0 [ 76.250638][ T15] hid-generic 0003:0003:0000.0004: unknown main item tag 0x0 [ 76.258121][ T15] hid-generic 0003:0003:0000.0004: unknown main item tag 0x0 [ 76.265554][ T15] hid-generic 0003:0003:0000.0004: unknown main item tag 0x0 [ 76.273214][ T15] hid-generic 0003:0003:0000.0004: unknown main item tag 0x0 [ 76.280622][ T15] hid-generic 0003:0003:0000.0004: unknown main item tag 0x0 [ 76.288288][ T15] hid-generic 0003:0003:0000.0004: unknown main item tag 0x0 [ 76.296169][ T15] hid-generic 0003:0003:0000.0004: unknown main item tag 0x0 [ 76.303764][ T15] hid-generic 0003:0003:0000.0004: unknown main item tag 0x0 [ 76.311205][ T15] hid-generic 0003:0003:0000.0004: unknown main item tag 0x0 [ 76.318781][ T15] hid-generic 0003:0003:0000.0004: unknown main item tag 0x0 [ 76.327061][ T15] hid-generic 0003:0003:0000.0004: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 76.349490][ T1451] fido_id[1451]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 76.753294][ T885] Bluetooth: hci0: Frame reassembly failed (-84) [ 76.862215][ T1467] device syzkaller0 entered promiscuous mode [ 76.872053][ T1467] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 76.886333][ T1467] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 76.891875][ T1469] netlink: 52 bytes leftover after parsing attributes in process `syz.7.383'. [ 76.900860][ T1467] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 76.922443][ T1469] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1469 comm=syz.7.383 [ 76.936162][ T1469] netlink: 52 bytes leftover after parsing attributes in process `syz.7.383'. [ 77.072442][ T1472] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 77.080228][ T1472] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 77.090606][ T1472] F2FS-fs (loop7): Found nat_bits in checkpoint [ 77.113531][ T1472] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 77.120628][ T1472] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 77.147667][ T1472] attempt to access beyond end of device [ 77.147667][ T1472] loop7: rw=2049, want=45112, limit=40427 [ 77.160229][ T1472] netlink: 168 bytes leftover after parsing attributes in process `syz.7.384'. [ 77.190979][ T1324] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 77.250948][ T25] Bluetooth: hci2: command 0x1009 tx timeout [ 77.348557][ T1485] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 77.591054][ T1324] usb 4-1: unable to get BOS descriptor or descriptor too short [ 77.651544][ T1503] erofs: (device loop7): mounted with root inode @ nid 36. [ 77.661225][ T1503] erofs: (device loop7): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 77.670753][ T1503] erofs: (device loop7): z_erofs_lz4_decompress_mem: failed to decompress -29 in[58, 4038] out[1851] [ 77.682503][ T1503] erofs: (device loop7): z_erofs_readpage: failed to read, err [-117] [ 77.691046][ T1324] usb 4-1: config 250 has an invalid interface number: 28 but max is 1 [ 77.699966][ T1324] usb 4-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 77.710281][ T1324] usb 4-1: config 250 has 1 interface, different from the descriptor's value: 2 [ 77.719377][ T1324] usb 4-1: config 250 has no interface number 0 [ 77.725682][ T1324] usb 4-1: config 250 interface 28 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 23 [ 77.762854][ T1508] 9pnet: p9_errstr2errno: server reported unknown error object_r:hugetlbfs_t:s0 [ 77.871739][ T1516] netlink: 'syz.7.402': attribute type 1 has an invalid length. [ 77.879474][ T1516] netlink: 56 bytes leftover after parsing attributes in process `syz.7.402'. [ 77.891004][ T1324] usb 4-1: New USB device found, idVendor=0b49, idProduct=064f, bcdDevice=d4.fd [ 77.900227][ T1324] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.908482][ T1324] usb 4-1: Product: syz [ 77.911565][ T1518] overlayfs: failed to clone upperpath [ 77.912894][ T1324] usb 4-1: Manufacturer: syz [ 77.922837][ T1324] usb 4-1: SerialNumber: syz [ 77.940612][ T1522] overlayfs: failed to clone upperpath [ 77.960592][ T1526] overlayfs: failed to clone upperpath [ 77.967110][ T1526] overlayfs: failed to clone upperpath [ 78.222720][ T1324] usb 4-1: USB disconnect, device number 9 [ 78.793376][ T703] print_req_error: 69 callbacks suppressed [ 78.793401][ T703] blk_update_request: I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 78.819404][ T321] blk_update_request: I/O error, dev loop5, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 78.933300][ T321] blk_update_request: I/O error, dev loop5, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 78.967148][ T1542] xt_hashlimit: size too large, truncated to 1048576 [ 78.974835][ T703] blk_update_request: I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 78.991041][ T321] buffer_io_error: 50 callbacks suppressed [ 78.991058][ T321] Buffer I/O error on dev loop5p4, logical block 1, async page read [ 79.029667][ T703] Buffer I/O error on dev loop5p1, logical block 0, async page read [ 79.121449][ T703] blk_update_request: I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 79.133065][ T1324] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 79.177953][ T1543] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 79.187578][ T703] Buffer I/O error on dev loop5p1, logical block 0, async page read [ 79.217894][ T703] blk_update_request: I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 79.236421][ T1543] ext4 filesystem being mounted at /69/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.247749][ T703] Buffer I/O error on dev loop5p1, logical block 0, async page read [ 79.292787][ T703] blk_update_request: I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 79.404594][ T703] Buffer I/O error on dev loop5p1, logical block 0, async page read [ 79.489447][ T703] blk_update_request: I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 79.510704][ T703] Buffer I/O error on dev loop5p1, logical block 0, async page read [ 79.513030][ T15] Bluetooth: hci0: command 0x1003 tx timeout [ 79.524994][ T40] Bluetooth: hci0: sending frame failed (-49) [ 79.551053][ T1324] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 79.651017][ T1324] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 79.665540][ T1324] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 79.679148][ T1324] usb 6-1: SerialNumber: syz [ 79.680017][ T24] kauditd_printk_skb: 6 callbacks suppressed [ 79.680029][ T24] audit: type=1400 audit(1774705334.630:21508): avc: denied { write } for pid=1549 comm="syz.7.416" path="socket:[21728]" dev="sockfs" ino=21728 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 79.714461][ T24] audit: type=1400 audit(1774705334.650:21509): avc: denied { read } for pid=1549 comm="syz.7.416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 80.402233][ T1324] cdc_ether 6-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.5-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 80.439023][ T24] audit: type=1400 audit(1774705335.390:21510): avc: denied { read } for pid=134 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 80.464068][ T24] audit: type=1400 audit(1774705335.400:21511): avc: denied { search } for pid=134 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 80.485694][ T24] audit: type=1400 audit(1774705335.400:21512): avc: denied { read } for pid=134 comm="dhcpcd" name="n15" dev="tmpfs" ino=3577 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 80.507810][ T24] audit: type=1400 audit(1774705335.400:21513): avc: denied { open } for pid=134 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=3577 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 80.532266][ T24] audit: type=1400 audit(1774705335.400:21514): avc: denied { getattr } for pid=134 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=3577 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 80.555838][ T24] audit: type=1400 audit(1774705335.430:21515): avc: denied { read } for pid=1569 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=416 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 80.579583][ T24] audit: type=1400 audit(1774705335.430:21516): avc: denied { open } for pid=1569 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=416 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 80.620113][ T24] audit: type=1400 audit(1774705335.430:21517): avc: denied { getattr } for pid=1569 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=416 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 80.669936][ T15] usb 6-1: USB disconnect, device number 4 [ 81.213306][ T1584] overlayfs: failed to clone upperpath [ 81.220492][ T15] cdc_ether 6-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.5-1, CDC Ethernet Device [ 81.651270][ T296] Bluetooth: hci0: command 0x1001 tx timeout [ 81.657304][ T561] Bluetooth: hci0: sending frame failed (-49) [ 81.665048][ T321] blk_update_request: I/O error, dev loop5, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 81.679431][ T703] blk_update_request: I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 81.714344][ T321] Buffer I/O error on dev loop5p4, logical block 1, async page read [ 81.724885][ T703] Buffer I/O error on dev loop5p1, logical block 0, async page read [ 81.737776][ T703] Buffer I/O error on dev loop5p1, logical block 0, async page read [ 81.746186][ T703] Buffer I/O error on dev loop5p1, logical block 0, async page read [ 81.753662][ T1646] binder: BINDER_SET_CONTEXT_MGR already set [ 81.763270][ T1646] binder: 1645:1646 ioctl 4018620d 2000000002c0 returned -16 [ 81.870159][ T20] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 81.933925][ T1654] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 81.978839][ T1656] netlink: 'syz.7.437': attribute type 12 has an invalid length. [ 81.996936][ T1656] netlink: 'syz.7.437': attribute type 29 has an invalid length. [ 82.006609][ T1656] netlink: 148 bytes leftover after parsing attributes in process `syz.7.437'. [ 82.016987][ T1656] netlink: 'syz.7.437': attribute type 2 has an invalid length. [ 82.024821][ T1656] netlink: 'syz.7.437': attribute type 3 has an invalid length. [ 82.046952][ T1648] F2FS-fs (loop5): invalid crc value [ 82.056256][ T1648] F2FS-fs (loop5): Found nat_bits in checkpoint [ 82.122192][ T1648] F2FS-fs (loop5): Cannot turn on quotas: -2 on 0 [ 82.129060][ T1648] F2FS-fs (loop5): Start checkpoint disabled! [ 82.135715][ T1648] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 82.241037][ T20] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 82.260973][ T20] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 82.285038][ T885] attempt to access beyond end of device [ 82.285038][ T885] loop5: rw=2049, want=40968, limit=40427 [ 82.431018][ T20] usb 7-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice= 0.40 [ 82.440138][ T20] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.448312][ T20] usb 7-1: Product: syz [ 82.452603][ T20] usb 7-1: Manufacturer: syz [ 82.457192][ T20] usb 7-1: SerialNumber: syz [ 83.144050][ T1673] overlayfs: failed to resolve './file1': -2 [ 83.393882][ T1671] F2FS-fs (loop3): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 83.412372][ T1671] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 83.425244][ T1671] F2FS-fs (loop3): invalid crc value [ 83.457531][ T1671] F2FS-fs (loop3): Found nat_bits in checkpoint [ 83.493456][ T1671] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 83.500608][ T1671] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 83.569617][ T1671] attempt to access beyond end of device [ 83.569617][ T1671] loop3: rw=2051, want=45064, limit=40427 [ 83.590348][ T1671] attempt to access beyond end of device [ 83.590348][ T1671] loop3: rw=2051, want=65536, limit=40427 [ 83.611002][ T1671] F2FS-fs (loop3): Issue discard(4615, 4615, 1018) failed, ret: -5 [ 83.611018][ T1671] F2FS-fs (loop3): Issue discard(5637, 5637, 2555) failed, ret: -5 [ 83.713154][ T1599] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue [ 83.731024][ T5] Bluetooth: hci0: command 0x1009 tx timeout [ 83.734683][ T1599] ext4 filesystem being mounted at /30/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 83.824607][ T1599] EXT4-fs warning (device loop6): verify_group_input:147: Cannot add at group 7 (only 1 groups) [ 83.859226][ T299] print_req_error: 69 callbacks suppressed [ 83.859240][ T299] blk_update_request: I/O error, dev loop5, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 83.877868][ T321] blk_update_request: I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 83.889338][ T321] blk_update_request: I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 83.901078][ T321] blk_update_request: I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 83.901362][ T20] snd-usb-audio: probe of 7-1:1.0 failed with error -22 [ 83.912258][ T321] blk_update_request: I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 83.931802][ T299] blk_update_request: I/O error, dev loop5, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 83.935047][ T20] usb 7-1: USB disconnect, device number 14 [ 83.951414][ T321] blk_update_request: I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 83.963737][ T321] blk_update_request: I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 83.992888][ T321] blk_update_request: I/O error, dev loop5, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 83.992920][ T703] blk_update_request: I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 84.010974][ T321] buffer_io_error: 56 callbacks suppressed [ 84.010982][ T321] Buffer I/O error on dev loop5p4, logical block 1, async page read [ 84.020549][ T703] Buffer I/O error on dev loop5p1, logical block 0, async page read [ 84.038947][ T703] Buffer I/O error on dev loop5p1, logical block 0, async page read [ 84.047334][ T703] Buffer I/O error on dev loop5p1, logical block 0, async page read [ 84.055714][ T703] Buffer I/O error on dev loop5p1, logical block 0, async page read [ 84.063998][ T703] Buffer I/O error on dev loop5p1, logical block 0, async page read [ 84.482249][ T1726] fuse: Bad value for 'fd' [ 84.866038][ T24] kauditd_printk_skb: 14 callbacks suppressed [ 84.866048][ T24] audit: type=1400 audit(1774705339.820:21532): avc: denied { watch watch_reads } for pid=1735 comm="syz.5.465" path="/" dev="ramfs" ino=22743 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 84.866394][ T1736] process 'syz.5.465' launched './file0' with NULL argv: empty string added [ 84.872740][ T703] Buffer I/O error on dev loop5p1, logical block 0, async page read [ 84.909774][ T321] Buffer I/O error on dev loop5p4, logical block 1, async page read [ 84.912279][ T24] audit: type=1400 audit(1774705339.860:21533): avc: denied { execute } for pid=1735 comm="syz.5.465" name="file0" dev="ramfs" ino=22744 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 84.921081][ T703] Buffer I/O error on dev loop5p1, logical block 0, async page read [ 84.949992][ T24] audit: type=1400 audit(1774705339.860:21534): avc: denied { execute_no_trans } for pid=1735 comm="syz.5.465" path="/file0" dev="ramfs" ino=22744 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 84.960450][ T703] Buffer I/O error on dev loop5p1, logical block 0, async page read [ 84.987508][ T1738] tipc: Started in network mode [ 84.995635][ T1738] tipc: Own node identity ac1414aa, cluster identity 4711 [ 85.003813][ T1738] tipc: Enabled bearer , priority 10 [ 85.332724][ T24] audit: type=1400 audit(1774705340.290:21535): avc: denied { mount } for pid=1741 comm="syz.6.468" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 85.506698][ T1759] netlink: 12 bytes leftover after parsing attributes in process `syz.5.474'. [ 85.682131][ T1762] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.689398][ T1762] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.837240][ T24] audit: type=1400 audit(1774705340.790:21536): avc: denied { getopt } for pid=1771 comm="syz.3.479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 85.867685][ T1770] netlink: 8 bytes leftover after parsing attributes in process `syz.6.477'. [ 85.881682][ T1770] netlink: 8 bytes leftover after parsing attributes in process `syz.6.477'. [ 85.901092][ T1774] netlink: 16 bytes leftover after parsing attributes in process `syz.3.480'. [ 85.921463][ T1770] netlink: 8 bytes leftover after parsing attributes in process `syz.6.477'. [ 85.984249][ T24] audit: type=1400 audit(1774705340.940:21537): avc: denied { setopt } for pid=1769 comm="syz.6.477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 86.011002][ T20] tipc: 32-bit node address hash set to aa1414ac [ 86.053156][ T24] audit: type=1400 audit(1774705340.970:21538): avc: denied { create } for pid=1778 comm="syz.5.482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 86.100556][ T1783] kvm: emulating exchange as write [ 86.117632][ T1790] device syzkaller0 entered promiscuous mode [ 86.163768][ T1790] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 86.201017][ T1790] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 86.239676][ T1790] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 86.334810][ T1801] EXT4-fs (loop5): Invalid want_extra_isize 1 [ 86.353141][ T1810] overlayfs: failed to clone upperpath [ 86.359426][ T1810] overlayfs: failed to clone upperpath [ 86.560985][ T300] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 86.595246][ T1795] F2FS-fs (loop6): Found nat_bits in checkpoint [ 86.634363][ T1795] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 86.868867][ T24] audit: type=1400 audit(1774705341.820:21539): avc: denied { relabelfrom } for pid=1827 comm="syz.6.498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 86.895182][ T24] audit: type=1400 audit(1774705341.850:21540): avc: denied { relabelto } for pid=1827 comm="syz.6.498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 86.905745][ T1832] overlayfs: failed to clone upperpath [ 86.953752][ T1838] netlink: 52 bytes leftover after parsing attributes in process `syz.5.505'. [ 86.964600][ T1838] netlink: 52 bytes leftover after parsing attributes in process `syz.5.505'. [ 86.991059][ T300] usb 4-1: unable to get BOS descriptor or descriptor too short [ 87.045072][ T1843] EXT4-fs (loop5): mounted filesystem without journal. Opts: i_version,nodiscard,grpjquota=,,errors=continue [ 87.071897][ T300] usb 4-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 87.107822][ T1855] netlink: 4 bytes leftover after parsing attributes in process `syz.7.513'. [ 87.108071][ T300] usb 4-1: config 250 has 0 interfaces, different from the descriptor's value: 2 [ 87.181580][ T1868] overlayfs: failed to clone upperpath [ 87.200634][ T1870] device syzkaller0 entered promiscuous mode [ 87.213859][ T1870] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 87.228651][ T1870] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 87.243444][ T1870] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 87.281019][ T300] usb 4-1: New USB device found, idVendor=0b49, idProduct=064f, bcdDevice=d4.fd [ 87.290158][ T300] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.311258][ T300] usb 4-1: Product: syz [ 87.315496][ T300] usb 4-1: Manufacturer: syz [ 87.318260][ T1866] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 87.320125][ T300] usb 4-1: SerialNumber: syz [ 87.333370][ T1866] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 87.342634][ T1866] F2FS-fs (loop0): invalid crc value [ 87.349297][ T1866] F2FS-fs (loop0): Found nat_bits in checkpoint [ 87.371665][ T1866] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 87.378874][ T1866] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 87.404752][ T24] audit: type=1400 audit(1774705342.360:21541): avc: denied { rename } for pid=1865 comm="syz.0.516" name="#62" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 87.417884][ T279] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 87.426733][ T279] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 87.434357][ T279] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 87.442057][ T279] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 87.449592][ T279] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 87.457367][ T279] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 87.465634][ T279] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 87.530977][ T296] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 87.626528][ T300] usb 4-1: USB disconnect, device number 10 [ 87.830968][ T296] usb 6-1: device descriptor read/64, error -71 [ 88.090235][ T1904] kvm: pic: non byte write [ 88.094924][ T1904] kvm: pic: non byte write [ 88.099745][ T1904] kvm: pic: single mode not supported [ 88.099750][ T1904] kvm: pic: level sensitive irq not supported [ 88.105453][ T1904] kvm: pic: non byte write [ 88.116011][ T1904] kvm: pic: non byte write [ 88.120821][ T1904] kvm: pic: level sensitive irq not supported [ 88.121218][ T1904] kvm: pic: non byte write [ 88.131838][ T1904] kvm: pic: non byte write [ 88.138007][ T1904] kvm: pic: single mode not supported [ 88.138014][ T1904] kvm: pic: level sensitive irq not supported [ 88.250990][ T296] usb 6-1: device descriptor read/64, error -71 [ 88.538830][ T1941] tipc: Failed to remove local publication {66,0,0}/70469323 [ 88.540966][ T296] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 88.548816][ T1941] tipc: Failed to remove local publication {66,0,0}/70469322 [ 88.579605][ T1941] tipc: Failed to remove local publication {66,0,0}/70469323 [ 88.591551][ T1941] tipc: Failed to remove local publication {66,0,0}/70469322 [ 88.673652][ T1945] 9pnet: p9_errstr2errno: server reported unknown error 00000000000000000000007D0xffffffffffffffff.c,i Qכinput/even [ 88.688512][ T1943] netlink: 104 bytes leftover after parsing attributes in process `syz.6.540'. [ 88.752401][ T1951] netlink: 'syz.6.543': attribute type 9 has an invalid length. [ 88.760100][ T1951] netlink: 32 bytes leftover after parsing attributes in process `syz.6.543'. [ 88.792630][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 88.804349][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 88.818910][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 88.828687][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 88.837317][ T296] usb 6-1: device descriptor read/64, error -71 [ 88.846208][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 88.855327][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 88.864371][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 88.873996][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 88.945796][ T1959] device syzkaller0 entered promiscuous mode [ 89.241053][ T296] usb 6-1: device descriptor read/64, error -71 [ 89.341817][ T1968] F2FS-fs (loop6): Test dummy encryption mode enabled [ 89.349364][ T1968] F2FS-fs (loop6): invalid crc value [ 89.356440][ T1968] F2FS-fs (loop6): Found nat_bits in checkpoint [ 89.361145][ T296] usb usb6-port1: attempt power cycle [ 89.385396][ T1968] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 89.609666][ T1983] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1983 comm=syz.6.553 [ 89.622660][ T1983] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1983 comm=syz.6.553 [ 89.636062][ T1983] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1983 comm=syz.6.553 [ 89.648900][ T1983] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1983 comm=syz.6.553 [ 89.662936][ T1983] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1983 comm=syz.6.553 [ 89.675691][ T1983] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1983 comm=syz.6.553 [ 89.688511][ T1983] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1983 comm=syz.6.553 [ 89.701988][ T1983] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1983 comm=syz.6.553 [ 89.714907][ T1983] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1983 comm=syz.6.553 [ 89.727364][ T1983] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1983 comm=syz.6.553 [ 89.791020][ T296] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 90.131034][ T296] usb 6-1: device descriptor read/8, error -71 [ 90.271687][ T321] print_req_error: 155 callbacks suppressed [ 90.271700][ T321] blk_update_request: I/O error, dev loop5, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 90.292058][ T703] blk_update_request: I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 90.302321][ T321] blk_update_request: I/O error, dev loop5, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 90.314609][ T321] buffer_io_error: 109 callbacks suppressed [ 90.314617][ T321] Buffer I/O error on dev loop5p4, logical block 1, async page read [ 90.316453][ T703] blk_update_request: I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 90.339642][ T703] Buffer I/O error on dev loop5p1, logical block 0, async page read [ 90.348375][ T703] blk_update_request: I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 90.363235][ T703] Buffer I/O error on dev loop5p1, logical block 0, async page read [ 90.371558][ T703] blk_update_request: I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 90.383152][ T703] Buffer I/O error on dev loop5p1, logical block 0, async page read [ 90.391187][ T296] usb 6-1: device descriptor read/8, error -71 [ 90.391663][ T703] blk_update_request: I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 90.411586][ T703] Buffer I/O error on dev loop5p1, logical block 0, async page read [ 90.425454][ T703] blk_update_request: I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 90.436532][ T703] Buffer I/O error on dev loop5p1, logical block 0, async page read [ 90.472089][ T2013] netlink: 'syz.3.565': attribute type 4 has an invalid length. [ 90.487110][ T2013] netlink: 'syz.3.565': attribute type 4 has an invalid length. [ 90.737971][ T24] kauditd_printk_skb: 10 callbacks suppressed [ 90.738004][ T24] audit: type=1400 audit(1774705345.690:21552): avc: denied { bind } for pid=2028 comm="syz.7.571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 90.775435][ T24] audit: type=1400 audit(1774705345.700:21553): avc: denied { setopt } for pid=2028 comm="syz.7.571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 90.786410][ T2033] overlayfs: failed to clone upperpath [ 90.840792][ T2033] overlayfs: failed to clone upperpath [ 91.066681][ T2041] device syzkaller0 entered promiscuous mode [ 91.096689][ T2041] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 91.111874][ T2041] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 91.126944][ T2041] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 91.127344][ T2043] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 91.225214][ T321] blk_update_request: I/O error, dev loop5, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 91.229915][ T703] blk_update_request: I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 91.779218][ T321] Buffer I/O error on dev loop5p4, logical block 1, async page read [ 91.791578][ T24] audit: type=1400 audit(1774705346.750:21554): avc: denied { append } for pid=2048 comm="syz.0.580" name="001" dev="devtmpfs" ino=177 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 91.828310][ T24] audit: type=1400 audit(1774705346.750:21555): avc: denied { read } for pid=2048 comm="syz.0.580" name="usbmon7" dev="devtmpfs" ino=175 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 91.853953][ T24] audit: type=1400 audit(1774705346.750:21556): avc: denied { open } for pid=2048 comm="syz.0.580" path="/dev/usbmon7" dev="devtmpfs" ino=175 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 91.878586][ T24] audit: type=1400 audit(1774705346.750:21557): avc: denied { ioctl } for pid=2048 comm="syz.0.580" path="/dev/usbmon7" dev="devtmpfs" ino=175 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 91.888939][ T703] Buffer I/O error on dev loop5p1, logical block 0, async page read [ 91.924534][ T703] Buffer I/O error on dev loop5p1, logical block 0, async page read [ 91.937064][ T703] Buffer I/O error on dev loop5p1, logical block 0, async page read [ 91.961895][ T2065] netlink: 'syz.0.586': attribute type 4 has an invalid length. [ 91.980953][ T295] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 92.381031][ T295] usb 4-1: unable to get BOS descriptor or descriptor too short [ 92.464943][ T295] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 92.478550][ T295] usb 4-1: config 0 has no interfaces? [ 92.492422][ T2072] incfs: ino conflict with backing FS 1 [ 92.499308][ T24] audit: type=1400 audit(1774705347.450:21558): avc: denied { unmount } for pid=2071 comm="syz.0.590" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 92.528898][ T24] audit: type=1400 audit(1774705347.480:21559): avc: denied { mount } for pid=2073 comm="syz.0.591" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 92.641035][ T295] usb 4-1: New USB device found, idVendor=0b49, idProduct=064f, bcdDevice=d4.fd [ 92.654183][ T295] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.658289][ T2085] fuse: Bad value for 'fd' [ 92.662841][ T295] usb 4-1: Product: syz [ 92.677390][ T295] usb 4-1: Manufacturer: syz [ 92.682861][ T295] usb 4-1: SerialNumber: syz [ 92.704319][ T295] usb 4-1: config 0 descriptor?? [ 92.714213][ T2087] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 92.745025][ T24] audit: type=1400 audit(1774705347.700:21560): avc: denied { create } for pid=2091 comm="syz.5.599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 92.769693][ T2092] Unsupported ieee802154 address type: 0 [ 92.777604][ T24] audit: type=1400 audit(1774705347.730:21561): avc: denied { bind } for pid=2091 comm="syz.5.599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 92.832480][ T2101] 9pnet: Insufficient options for proto=fd [ 93.004049][ T295] usb 4-1: USB disconnect, device number 11 [ 93.386021][ T2111] pit: kvm: requested 24304 ns i8254 timer period limited to 200000 ns [ 93.412435][ T2111] pit: kvm: requested 24304 ns i8254 timer period limited to 200000 ns [ 93.441335][ T2111] pit: kvm: requested 81295 ns i8254 timer period limited to 200000 ns [ 93.469382][ T2111] pit: kvm: requested 134933 ns i8254 timer period limited to 200000 ns [ 93.499712][ T2111] pit: kvm: requested 128228 ns i8254 timer period limited to 200000 ns [ 93.542334][ T2111] pit: kvm: requested 24304 ns i8254 timer period limited to 200000 ns [ 93.578379][ T2111] pit: kvm: requested 128228 ns i8254 timer period limited to 200000 ns [ 93.622391][ T2111] pit: kvm: requested 81295 ns i8254 timer period limited to 200000 ns [ 93.655745][ T2111] pit: kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 93.718986][ T2111] pit: kvm: requested 24304 ns i8254 timer period limited to 200000 ns [ 93.795154][ T2126] xt_hashlimit: size too large, truncated to 1048576 [ 94.169608][ T2143] device syzkaller0 entered promiscuous mode [ 94.179364][ T2143] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 94.193723][ T2143] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 94.208057][ T2143] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 94.490963][ T296] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 94.734176][ T2152] device syzkaller0 entered promiscuous mode [ 94.764151][ T2152] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 94.798503][ T2152] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 94.842968][ T2152] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 94.911021][ T296] usb 4-1: unable to get BOS descriptor or descriptor too short [ 95.021002][ T296] usb 4-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 95.050984][ T296] usb 4-1: config 250 has 0 interfaces, different from the descriptor's value: 2 [ 95.100991][ T377] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 95.241030][ T296] usb 4-1: New USB device found, idVendor=0b49, idProduct=064f, bcdDevice=d4.fd [ 95.262084][ T296] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.270291][ T296] usb 4-1: Product: syz [ 95.280371][ T296] usb 4-1: Manufacturer: syz [ 95.300565][ T296] usb 4-1: SerialNumber: syz [ 95.510992][ T377] usb 6-1: unable to get BOS descriptor or descriptor too short [ 95.521055][ T377] usb 6-1: no configurations [ 95.525667][ T377] usb 6-1: can't read configurations, error -22 [ 95.612823][ T296] usb 4-1: USB disconnect, device number 12 [ 95.710977][ T377] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 95.920158][ T2166] fuse: Bad value for 'fd' [ 96.131049][ T377] usb 6-1: unable to get BOS descriptor or descriptor too short [ 96.141001][ T377] usb 6-1: no configurations [ 96.160000][ T377] usb 6-1: can't read configurations, error -22 [ 96.171979][ T2172] netlink: 4 bytes leftover after parsing attributes in process `syz.0.630'. [ 96.201029][ T377] usb usb6-port1: attempt power cycle [ 96.620984][ T377] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 96.644361][ T2186] EXT4-fs (loop6): Mount option "noacl" will be removed by 3.5 [ 96.644361][ T2186] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 96.644361][ T2186] [ 96.750044][ T2186] EXT4-fs (loop6): Mount option "noacl" will be removed by 3.5 [ 96.750044][ T2186] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 96.750044][ T2186] [ 96.829768][ T2186] EXT4-fs (loop6): mounted filesystem without journal. Opts: noacl,noacl,,errors=continue [ 96.865891][ T2186] EXT4-fs error (device loop6): ext4_iget_extra_inode:4685: inode #15: comm syz.6.635: corrupted in-inode xattr [ 96.891022][ T377] usb 6-1: unable to get BOS descriptor or descriptor too short [ 96.912296][ T377] usb 6-1: no configurations [ 96.953610][ T24] kauditd_printk_skb: 19 callbacks suppressed [ 96.953621][ T24] audit: type=1400 audit(1774705351.910:21581): avc: denied { setattr } for pid=2185 comm="syz.6.635" name="/" dev="overlay" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 96.982286][ T377] usb 6-1: can't read configurations, error -22 [ 97.003650][ T873] EXT4-fs error (device loop6): ext4_iget_extra_inode:4685: inode #15: comm syz-executor: corrupted in-inode xattr [ 97.041347][ T873] EXT4-fs error (device loop6): ext4_iget_extra_inode:4685: inode #15: comm syz-executor: corrupted in-inode xattr [ 97.053806][ T24] audit: type=1400 audit(1774705351.960:21582): avc: denied { rmdir } for pid=873 comm="syz-executor" name="lost+found" dev="loop6" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 97.136728][ T24] audit: type=1400 audit(1774705351.960:21583): avc: denied { unlink } for pid=873 comm="syz-executor" name="file1" dev="loop6" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 97.181596][ T377] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 97.190979][ T24] audit: type=1400 audit(1774705352.130:21584): avc: denied { create } for pid=2191 comm="syz.3.637" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 97.233639][ T24] audit: type=1400 audit(1774705352.180:21585): avc: denied { unlink } for pid=276 comm="syz-executor" name="file0" dev="tmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 97.381318][ T24] audit: type=1400 audit(1774705352.340:21586): avc: denied { mount } for pid=2199 comm="syz.0.642" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 97.420012][ T2208] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.427639][ T2208] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.438131][ T2208] device bridge_slave_0 entered promiscuous mode [ 97.449054][ T2208] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.460632][ T2208] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.470669][ T2208] device bridge_slave_1 entered promiscuous mode [ 97.545950][ T377] usb 6-1: unable to get BOS descriptor or descriptor too short [ 97.552192][ T2208] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.553765][ T377] usb 6-1: no configurations [ 97.560621][ T2208] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.560704][ T2208] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.565667][ T377] usb 6-1: can't read configurations, error -22 [ 97.572462][ T2208] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.593272][ T885] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 97.600950][ T377] usb usb6-port1: unable to enumerate USB device [ 97.607776][ T885] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 97.616588][ T885] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 97.629137][ T885] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 97.638589][ T885] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 97.654957][ T885] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 97.666170][ T885] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 97.674522][ T885] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 97.682241][ T885] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 97.690427][ T2208] device veth0_vlan entered promiscuous mode [ 97.705636][ T885] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 97.715134][ T2208] device veth1_macvtap entered promiscuous mode [ 97.725033][ T885] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 97.736837][ T885] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 97.755510][ T321] print_req_error: 70 callbacks suppressed [ 97.755524][ T321] blk_update_request: I/O error, dev loop5, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 97.762608][ T703] blk_update_request: I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 97.774548][ T321] blk_update_request: I/O error, dev loop5, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 97.787797][ T703] blk_update_request: I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 97.796000][ T321] buffer_io_error: 50 callbacks suppressed [ 97.796009][ T321] Buffer I/O error on dev loop5p4, logical block 1, async page read [ 97.807222][ T703] Buffer I/O error on dev loop5p1, logical block 0, async page read [ 97.832562][ T24] audit: type=1400 audit(1774705352.790:21587): avc: denied { mount } for pid=2208 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 97.834667][ T703] blk_update_request: I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 97.868891][ T703] Buffer I/O error on dev loop5p1, logical block 0, async page read [ 97.902922][ T703] blk_update_request: I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 97.975061][ T703] Buffer I/O error on dev loop5p1, logical block 0, async page read [ 97.991638][ T703] blk_update_request: I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 98.002876][ T703] Buffer I/O error on dev loop5p1, logical block 0, async page read [ 98.013426][ T703] blk_update_request: I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 98.025281][ T703] Buffer I/O error on dev loop5p1, logical block 0, async page read [ 98.052209][ T7] device bridge_slave_1 left promiscuous mode [ 98.061723][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.327041][ T7] device bridge_slave_0 left promiscuous mode [ 98.450927][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.711957][ T7] device veth1_macvtap left promiscuous mode [ 98.717986][ T7] device veth0_vlan left promiscuous mode [ 98.805388][ T2243] 9pnet: p9_errstr2errno: server reported unknown error aaaaaaaaa [ 98.829326][ T2228] EXT4-fs error (device loop3): ext4_quota_enable:6446: inode #3: comm syz.3.648: iget: checksum invalid [ 98.853669][ T2228] EXT4-fs error (device loop3): ext4_quota_enable:6449: comm syz.3.648: Bad quota inode: 3, type: 0 [ 98.877006][ T321] blk_update_request: I/O error, dev loop5, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 98.882684][ T703] blk_update_request: I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 98.901303][ T703] Buffer I/O error on dev loop5p1, logical block 0, async page read [ 98.909475][ T703] Buffer I/O error on dev loop5p1, logical block 0, async page read [ 98.918511][ T703] Buffer I/O error on dev loop5p1, logical block 0, async page read [ 98.918556][ T321] Buffer I/O error on dev loop5p4, logical block 1, async page read [ 98.927046][ T2228] EXT4-fs warning (device loop3): ext4_enable_quotas:6490: Failed to enable quota tracking (type=0, err=-74, ino=3). Please run e2fsck to fix. [ 99.001097][ T2228] EXT4-fs (loop3): mount failed [ 99.134878][ T2255] xt_hashlimit: size too large, truncated to 1048576 [ 99.143018][ T2249] F2FS-fs (loop5): Fix alignment : done, start(4096) end(16896) block(12288) [ 99.159690][ T2249] F2FS-fs (loop5): Fix alignment : done, start(4096) end(16896) block(12288) [ 99.178397][ T24] audit: type=1400 audit(1774705354.130:21588): avc: denied { mounton } for pid=2226 comm="syz.3.648" path="/117/file0/bus" dev="loop3" ino=1048627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1 [ 99.203185][ T2249] F2FS-fs (loop5): invalid crc value [ 99.210724][ T2249] F2FS-fs (loop5): invalid crc value [ 99.245750][ T2258] FAT-fs (loop3): FAT read failed (blocknr 32) [ 99.265135][ T2249] F2FS-fs (loop5): Failed to get valid F2FS checkpoint [ 99.282346][ T2259] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 99.305577][ T276] FAT-fs (loop3): Directory bread(block 33) failed [ 99.431135][ T276] FAT-fs (loop3): Directory bread(block 34) failed [ 99.549901][ T276] FAT-fs (loop3): Directory bread(block 35) failed [ 99.590674][ T276] FAT-fs (loop3): Directory bread(block 36) failed [ 99.602145][ T276] FAT-fs (loop3): Directory bread(block 37) failed [ 99.611137][ T276] FAT-fs (loop3): Directory bread(block 38) failed [ 99.630976][ T276] FAT-fs (loop3): Directory bread(block 39) failed [ 99.640958][ T276] FAT-fs (loop3): Directory bread(block 40) failed [ 99.682170][ T7] FAT-fs (loop3): unable to read inode block for updating (i_pos 532) [ 99.740963][ T7] FAT-fs (loop3): bread failed in fat_clusters_flush [ 99.758113][ T276] FAT-fs (loop3): unable to read boot sector to mark fs as dirty [ 99.909878][ T2272] device syzkaller0 entered promiscuous mode [ 99.937704][ T2272] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 99.953667][ T2272] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 99.985330][ T2277] netlink: 4 bytes leftover after parsing attributes in process `syz.7.667'. [ 100.081977][ T2285] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.089394][ T2285] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.098716][ T2285] device bridge_slave_0 entered promiscuous mode [ 100.109357][ T2285] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.116850][ T2285] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.124524][ T2285] device bridge_slave_1 entered promiscuous mode [ 100.260973][ T1324] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 100.357295][ T2285] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.364384][ T2285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.371775][ T2285] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.378801][ T2285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.389981][ T2307] ================================================================== [ 100.398281][ T2307] BUG: KASAN: slab-out-of-bounds in xfrm_policy_inexact_list_reinsert+0x606/0x6c0 [ 100.407472][ T2307] Read of size 1 at addr ffff888120520bd8 by task syz.5.676/2307 [ 100.415264][ T2307] [ 100.417609][ T2307] CPU: 1 PID: 2307 Comm: syz.5.676 Tainted: G W syzkaller #0 [ 100.427233][ T2307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 100.437389][ T2307] Call Trace: [ 100.440857][ T2307] __dump_stack+0x21/0x24 [ 100.445197][ T2307] dump_stack_lvl+0x1a7/0x208 [ 100.449872][ T2307] ? show_regs_print_info+0x18/0x18 [ 100.455159][ T2307] ? thaw_kernel_threads+0x220/0x220 [ 100.460793][ T2307] ? unwind_get_return_address+0x4d/0x90 [ 100.466419][ T2307] print_address_description+0x7f/0x2c0 [ 100.471968][ T2307] ? xfrm_policy_inexact_list_reinsert+0x606/0x6c0 [ 100.478462][ T2307] kasan_report+0xe2/0x130 [ 100.483090][ T2307] ? xfrm_policy_inexact_list_reinsert+0x606/0x6c0 [ 100.489800][ T2307] __asan_report_load1_noabort+0x14/0x20 [ 100.495613][ T2307] xfrm_policy_inexact_list_reinsert+0x606/0x6c0 [ 100.501945][ T2307] xfrm_policy_inexact_insert_node+0x938/0xb50 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 100.508218][ T2307] ? xfrm_netlink_rcv+0x72/0x90 [ 100.513154][ T2307] ? netlink_unicast+0x876/0xa40 [ 100.518102][ T2307] ? netlink_sendmsg+0x89c/0xb50 [ 100.523033][ T2307] ? ____sys_sendmsg+0x5b7/0x8f0 [ 100.527960][ T2307] ? ___sys_sendmsg+0x236/0x2e0 [ 100.532816][ T2307] ? do_syscall_64+0x31/0x40 [ 100.537403][ T2307] xfrm_policy_inexact_alloc_chain+0x53d/0xb30 [ 100.543563][ T2307] xfrm_policy_inexact_insert+0x70/0x1130 [ 100.545252][ T24] audit: type=1400 audit(1774705355.350:21589): avc: denied { write } for pid=267 comm="syz-executor" path="pipe:[14444]" dev="pipefs" ino=14444 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 100.549276][ T2307] ? __kasan_check_write+0x14/0x20 [ 100.549288][ T2307] ? _raw_spin_lock_bh+0x94/0xf0 [ 100.549299][ T2307] ? policy_hash_bysel+0x13f/0x6f0 [ 100.549309][ T2307] xfrm_policy_insert+0x126/0x9a0 [ 100.549319][ T2307] ? xfrm_policy_construct+0x54f/0x1f00 [ 100.549331][ T2307] xfrm_add_policy+0x4ed/0x850 [ 100.549344][ T2307] ? xfrm_dump_sa_done+0xc0/0xc0 [ 100.549358][ T2307] xfrm_user_rcv_msg+0x4d0/0x7b0 [ 100.549369][ T2307] ? xfrm_netlink_rcv+0x90/0x90 [ 100.549388][ T2307] ? selinux_nlmsg_lookup+0x219/0x4a0 [ 100.549402][ T2307] netlink_rcv_skb+0x1f5/0x440 [ 100.549414][ T2307] ? xfrm_netlink_rcv+0x90/0x90 [ 100.549423][ T2307] ? netlink_ack+0xb70/0xb70 [ 100.549434][ T2307] ? mutex_trylock+0xa0/0xa0 [ 100.549441][ T2307] ? __netlink_lookup+0x387/0x3b0 [ 100.549451][ T2307] xfrm_netlink_rcv+0x72/0x90 [ 100.549461][ T2307] netlink_unicast+0x876/0xa40 [ 100.549471][ T2307] netlink_sendmsg+0x89c/0xb50 [ 100.549480][ T2307] ? netlink_getsockopt+0x530/0x530 [ 100.549491][ T2307] ? security_socket_sendmsg+0x82/0xa0 [ 100.549500][ T2307] ? netlink_getsockopt+0x530/0x530 [ 100.549509][ T2307] ____sys_sendmsg+0x5b7/0x8f0 [ 100.549520][ T2307] ? __sys_sendmsg_sock+0x40/0x40 [ 100.549533][ T2307] ? import_iovec+0x7c/0xb0 [ 100.549542][ T2307] ___sys_sendmsg+0x236/0x2e0 [ 100.549553][ T2307] ? slab_post_alloc_hook+0x7d/0x2f0 [ 100.549563][ T2307] ? __sys_sendmsg+0x280/0x280 [ 100.549575][ T2307] ? alloc_file+0x82/0x540 [ 100.549586][ T2307] ? __fdget+0x1a1/0x230 [ 100.549594][ T2307] __x64_sys_sendmsg+0x1f9/0x2c0 [ 100.549604][ T2307] ? __kasan_check_write+0x14/0x20 [ 100.549612][ T2307] ? ___sys_sendmsg+0x2e0/0x2e0 [ 100.549624][ T2307] ? __kasan_check_read+0x11/0x20 [ 100.549635][ T2307] ? exit_to_user_mode_prepare+0x9a/0xa0 [ 100.549646][ T2307] do_syscall_64+0x31/0x40 [ 100.549659][ T2307] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 100.549669][ T2307] RIP: 0033:0x7faeba42b819 [ 100.549682][ T2307] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 100.549689][ T2307] RSP: 002b:00007faeb8e86028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 100.549702][ T2307] RAX: ffffffffffffffda RBX: 00007faeba6a4fa0 RCX: 00007faeba42b819 [ 100.549708][ T2307] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000006 [ 100.549715][ T2307] RBP: 00007faeba4c1c91 R08: 0000000000000000 R09: 0000000000000000 [ 100.549729][ T2307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 100.818197][ T2307] R13: 00007faeba6a5038 R14: 00007faeba6a4fa0 R15: 00007fffe41e4588 [ 100.826239][ T2307] [ 100.828746][ T2307] Allocated by task 2307: [ 100.833390][ T2307] __kasan_kmalloc+0xda/0x110 [ 100.838131][ T2307] __kmalloc+0x1a4/0x330 [ 100.842359][ T2307] sk_prot_alloc+0xb2/0x340 [ 100.846838][ T2307] sk_alloc+0x38/0x4e0 [ 100.850968][ T2307] pfkey_create+0x12a/0x660 [ 100.855448][ T2307] __sock_create+0x38d/0x770 [ 100.860015][ T2307] __sys_socket+0xec/0x190 [ 100.864411][ T2307] __x64_sys_socket+0x7a/0x90 [ 100.869063][ T2307] do_syscall_64+0x31/0x40 [ 100.873763][ T2307] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 100.879648][ T2307] [ 100.881971][ T2307] The buggy address belongs to the object at ffff888120520800 [ 100.881971][ T2307] which belongs to the cache kmalloc-1k of size 1024 [ 100.896140][ T2307] The buggy address is located 984 bytes inside of [ 100.896140][ T2307] 1024-byte region [ffff888120520800, ffff888120520c00) [ 100.909648][ T2307] The buggy address belongs to the page: [ 100.915380][ T2307] page:ffffea0004814800 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x120520 [ 100.925638][ T2307] head:ffffea0004814800 order:3 compound_mapcount:0 compound_pincount:0 [ 100.933940][ T2307] flags: 0x4000000000010200(slab|head) [ 100.939463][ T2307] raw: 4000000000010200 dead000000000100 dead000000000122 ffff888100042f00 [ 100.948022][ T2307] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 100.956581][ T2307] page dumped because: kasan: bad access detected [ 100.962962][ T2307] page_owner tracks the page as allocated [ 100.968866][ T2307] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d2a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 2285, ts 100349804032, free_ts 100343923711 [ 100.989004][ T2307] prep_new_page+0x179/0x180 [ 100.993569][ T2307] get_page_from_freelist+0x223b/0x23d0 [ 100.999210][ T2307] __alloc_pages_nodemask+0x290/0x620 [ 101.004554][ T2307] new_slab+0x84/0x3f0 [ 101.008597][ T2307] ___slab_alloc+0x2a6/0x450 [ 101.013159][ T2307] __slab_alloc+0x63/0xa0 [ 101.017484][ T2307] __kmalloc_track_caller+0x1ec/0x320 [ 101.022837][ T2307] __alloc_skb+0xdc/0x520 [ 101.027142][ T2307] inet6_rt_notify+0x293/0x480 [ 101.031882][ T2307] fib6_add+0x217e/0x3c40 [ 101.036195][ T2307] ip6_ins_rt+0xd3/0x130 [ 101.040411][ T2307] __ipv6_ifa_notify+0x4df/0xe70 [ 101.045317][ T2307] add_addr+0x1af/0x290 [ 101.049441][ T2307] addrconf_sit_config+0x7cf/0xeb0 [ 101.054522][ T2307] addrconf_notify+0x9ab/0xe90 [ 101.059259][ T2307] raw_notifier_call_chain+0x90/0x100 [ 101.064598][ T2307] page last free stack trace: [ 101.069343][ T2307] __free_pages_ok+0x80b/0x830 [ 101.074082][ T2307] __free_pages+0xd8/0x3b0 [ 101.078470][ T2307] __free_slab+0xcf/0x190 [ 101.082770][ T2307] unfreeze_partials+0x15f/0x190 [ 101.087738][ T2307] put_cpu_partial+0xc1/0x180 [ 101.092403][ T2307] __slab_free+0x2c9/0x3a0 [ 101.096879][ T2307] ___cache_free+0x10e/0x130 [ 101.101540][ T2307] qlink_free+0x50/0x90 [ 101.105668][ T2307] qlist_free_all+0x5f/0xb0 [ 101.110143][ T2307] kasan_quarantine_reduce+0x14a/0x160 [ 101.115751][ T2307] __kasan_slab_alloc+0x2f/0xf0 [ 101.120662][ T2307] slab_post_alloc_hook+0x5d/0x2f0 [ 101.125778][ T2307] __kmalloc+0x180/0x330 [ 101.130180][ T2307] kvmalloc_node+0x88/0x130 [ 101.134684][ T2307] setxattr+0x1f6/0x3f0 [ 101.138830][ T2307] path_setxattr+0x11f/0x230 [ 101.143884][ T2307] [ 101.146186][ T2307] Memory state around the buggy address: [ 101.151790][ T2307] ffff888120520a80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 101.159824][ T2307] ffff888120520b00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 101.167860][ T2307] >ffff888120520b80: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 101.175979][ T2307] ^ [ 101.182897][ T2307] ffff888120520c00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 101.191147][ T2307] ffff888120520c80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 101.199246][ T2307] ================================================================== [ 101.207587][ T2307] Disabling lock debugging due to kernel taint [ 101.256382][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.271382][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.431752][ T885] device bridge_slave_1 left promiscuous mode [ 101.437962][ T885] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.445380][ T885] device bridge_slave_0 left promiscuous mode [ 101.451660][ T885] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.459356][ T885] device veth1_macvtap left promiscuous mode [ 101.465499][ T885] device veth0_vlan left promiscuous mode [ 101.801016][ T1324] usb 9-1: device not accepting address 2, error -71 [ 102.891648][ T885] device bridge_slave_1 left promiscuous mode [ 102.897747][ T885] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.905597][ T885] device bridge_slave_0 left promiscuous mode [ 102.911744][ T885] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.919256][ T885] device bridge_slave_1 left promiscuous mode [ 102.925424][ T885] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.932821][ T885] device bridge_slave_0 left promiscuous mode [ 102.938905][ T885] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.947378][ T885] device bridge_slave_1 left promiscuous mode [ 102.953593][ T885] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.961135][ T885] device bridge_slave_0 left promiscuous mode [ 102.967501][ T885] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.975506][ T885] device veth1_macvtap left promiscuous mode [ 102.982458][ T885] device veth0_vlan left promiscuous mode [ 102.988344][ T885] device veth1_macvtap left promiscuous mode [ 102.994504][ T885] device veth0_vlan left promiscuous mode