last executing test programs: 4.379300284s ago: executing program 1 (id=135): symlink(0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000c, 0x11, r3, 0x100000000) userfaultfd(0x80001) ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r5, 0x40045402, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f0000000380)={0x6, 0x9dc8, 0x0, 0x0, 0xf}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r5, 0x54a2) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000340)={'bond0\x00', &(0x7f0000000400)=@ethtool_flash={0x28, 0x8, './file0\x00'}}) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, 0x0, 0x0) 3.454459956s ago: executing program 1 (id=138): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x28, r2, 0x1, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x28}, 0x1, 0x0, 0x0, 0x40004}, 0x20000000) 3.23951681s ago: executing program 4 (id=139): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x10084, &(0x7f00000000c0)={[{@minixdf}, {@i_version}, {@usrquota}, {@min_batch_time={'min_batch_time', 0x3d, 0x5}}, {@nomblk_io_submit}, {@lazytime}, {@jqfmt_vfsold}]}, 0x1, 0x401, &(0x7f0000000540)="$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") r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 3.148489837s ago: executing program 1 (id=141): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='vegas', 0x5) mkdirat(0xffffffffffffff9c, 0x0, 0xc0) r1 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x41) recvmsg(0xffffffffffffffff, 0x0, 0x10003) syz_fuse_handle_req(r1, &(0x7f0000002dc0)="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", 0x2000, 0x0) write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d) 3.125566938s ago: executing program 1 (id=142): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000640), 0x1, 0x5b9, &(0x7f0000000680)="$eJzs3W2IHHcdB/Df7N6mebiaNLZqa2xOQ20gdPdyuYREfGGJD7UmtaL4IhTCkdvuhezdnrkN9LaCLb4pCiL4RgShYl9YEQ3kTaXU9kWLbxSU+kClxoAKIhStFERQV2YfrmszaYr3MHjz+cDc/ec/c/v/7y3fndmd/8wEUFgT6Y8kYjwiLkXEzv7sf68w0f/VOXRxLp2S6HY//Zekt97soYtzw1WHf7cj/TEWsTUidh9PYl/l6naXljvnZprN+vnBfK09v1hbWu7cdXZ+plFv1BcOH50+NnVk+uj02j3XyZ9uv+WPd9x35Ynn//7Pb/76yPfT/o4Plo0+j7UyEROD/0klbhqpH0si7l3rxnJS7r/UccdIXTKWY4d4y7rd3d9LX7+3R8S+Xv53Rjn6L95LTz/wt53xy3vy7iOwfrpD2Ytf7QKbVqm3D5yUqhHRL5dK1Wp/H/7m2F5qtpbaBx5sXViY7e8r74pK6cGzzfrk4LPCrqgk6fzBXvn1+ak3zB+K6O0DP1be1puvnmk1Zzf6zQ7oGY+4fOlzZ7bseEP+/1Tu5x/YvNL8/+KFp55Ny6+V8+4NsJHS/H/3tflPhPxD4cg/FJf8Q3HJPxSX/ENxyT8Ul/xDcck/FJf8Q3HJPxTXMP/3nzwZ95882e0Mzn9faDXOnptbPDY1WZ2/cKZ6pnV+sdpotRq9M3bmr/+4zVZr8eBUXHio1q4vtWtLy53T860LC+3TvfP6T9czLgUA5ODUla333rT3uZeSiHjkA9t6U2rLYLmswubW7SaR9znIQD589Ificqk2KC6f8YHkOsu3XmtBc+37AmyMUt4dAHJz562O/0FR+f4fisv3/1Bc9vEB3/9D8fj+H4pr/Br3/7px5N5dkxHxtoj4Sblyw/BeX8D/r/GIy5e//dnayn24FRQUFFYKeb9DAevt9dDn3RMgL7OHLs4Np41q85nGRrUEZHnl7v4goDT3ncHUXzK2cmygsk7jhF5+LGIifvjbx/fPldMpBu9D69AUkOGRRyPiXVnb/6R3bGDXYL3d/dXi5oi4JSLeERHvXGXbX/9Umv8X6qN18g8b563m/9aIuD0ibouId0fEnoh4zyrb/vmlNP+/2jZaJ/9QDJ9/Pu8eAHn5+FN59wDIyyljDKCwvvNw3j0A8vL0D/LuAZCXr7yYdw+g2J67OyIms47/lXrH+4cqg+sC3jC4FsC2iNgeETsG5xDeODhHcOfIMcPrOf3JiIm4/UejdY7/wcYZjv/rXDX+r7Qy/q8cEXtX0cYzHxz/clb9zJ40/088PBz/l05p+8OxgMD6euXRiNsy85+sjPlNIs1pxHv/xzYmvnDlyaz6F+9LH7fyM/mHfHS/FfH+yM7/UFqqtecXa0vLnbt69/Fu1BcOH50+NnVk+uh0rXeJkNrwQiEZTvz11QNZ9S9Ppfn/xmH5h3yk2//t18j/6P7/+1bRxvGvfelUVv3479P873n2zfNf+vOW5DO9+eF9CR6aabfPH4zYkpy4un5qFR2FTW6YkWGG0vzv35f9+X/34G/S7f/xiPhwur8QEf+KiH9HxEci4qMR8bGIuOdN2vzqnY0rWfW/ezLN/+PnbP8hH2n+Z6+z/U9//2MVbRzY/+MvZtV/aG+a/+pv/nDigbF0kn8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAtbe03Dk302zWz69jIe/nCAAAAAAAAEXxnwAAAP//xOQ08g==") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000001, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000780)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x8004587d, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x8000200000000000, 0x0, 0x85c, 0x5}) chdir(&(0x7f0000000000)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) 2.797693891s ago: executing program 3 (id=144): pipe2$9p(&(0x7f0000000000), 0x84080) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x400c804) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000004"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2.725776865s ago: executing program 3 (id=145): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000cc0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_UNICAST_FLOOD={0x5}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20044010}, 0x44800) 2.679153319s ago: executing program 1 (id=147): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x800012, &(0x7f0000000200)=ANY=[@ANYRES16=0x0], 0x1, 0x3b6, &(0x7f00000006c0)="$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") r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0x763, 0x7, 0xfe02, 0x9fff, 0xb, "0000000000a4080a"}) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x7fff, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"}) r1 = syz_open_pts(r0, 0x200) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0xff) 2.665694969s ago: executing program 3 (id=148): openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000ec0)='mountstats\x00') socket(0x10, 0x803, 0x0) socket(0x1, 0x803, 0x0) pipe2$9p(&(0x7f0000000240), 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000140)=ANY=[@ANYRES8=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x541c, &(0x7f0000000000)) 2.66170938s ago: executing program 4 (id=149): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) mkdir(0x0, 0x22) syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902"], 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x48}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000009060102000000f8ffffff00000000000900020073797a310000000005000100070000001c0007800c00018008000140fffffffe0c00028008000140"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) 2.603443994s ago: executing program 3 (id=150): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f00000001c0)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000040)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) 2.560244557s ago: executing program 0 (id=152): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x132) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r0, &(0x7f0000002600)=""/4113, 0x1011) 2.499559431s ago: executing program 0 (id=153): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000040)=0x1, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newlink={0x20, 0x10, 0x437, 0x3, 0x3, {0x0, 0x0, 0x0, 0x0, 0x51b0b}}, 0x20}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010) 2.499284491s ago: executing program 0 (id=154): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x3400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbfb, {0x60, 0x0, 0x0, r3, {}, {0xffe0, 0xa}, {0x1, 0xe}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x55}, 0xc010) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) 2.492519501s ago: executing program 1 (id=155): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000200)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = fsopen(&(0x7f00000000c0)='virtiofs\x00', 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r4, 0x4b3a, 0x1) ioctl$KDSETMODE(r4, 0x4b3a, 0x2) r5 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, 0x0) ioctl$TCFLSH(r5, 0x400455c8, 0x20000000007) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, 0x0, &(0x7f00000001c0)=':,^]+*@', 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000004, &(0x7f0000000c00)={[{@block_validity}, {@minixdf}, {@noblock_validity}, {@lazytime}, {@noauto_da_alloc}, {@block_validity}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@debug}, {@usrjquota}, {@nolazytime}, {@norecovery}]}, 0xfe, 0x477, &(0x7f0000000780)="$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") symlink(&(0x7f00000008c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) 2.461331684s ago: executing program 32 (id=155): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000200)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = fsopen(&(0x7f00000000c0)='virtiofs\x00', 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r4, 0x4b3a, 0x1) ioctl$KDSETMODE(r4, 0x4b3a, 0x2) r5 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, 0x0) ioctl$TCFLSH(r5, 0x400455c8, 0x20000000007) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, 0x0, &(0x7f00000001c0)=':,^]+*@', 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000004, &(0x7f0000000c00)={[{@block_validity}, {@minixdf}, {@noblock_validity}, {@lazytime}, {@noauto_da_alloc}, {@block_validity}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@debug}, {@usrjquota}, {@nolazytime}, {@norecovery}]}, 0xfe, 0x477, &(0x7f0000000780)="$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") symlink(&(0x7f00000008c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) 1.687393836s ago: executing program 5 (id=164): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000ed0000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x8, 0x0, 0x0}}, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=@newqdisc={0x3c, 0x24, 0xf0b, 0x70bd25, 0x0, {0x0, 0x0, 0x12, r2, {0x0, 0xd}, {0xffff, 0xffff}, {0x5, 0xc}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0x9}]}}]}, 0x3c}}, 0x4000010) 1.683252097s ago: executing program 5 (id=165): syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000200)='./file0\x00', 0x300800c, &(0x7f0000000100)=ANY=[], 0x1, 0x249, &(0x7f0000000fc0)="$eJzsmDtvE0EQx/+79/JhiKChoKEgEiAUP85NmggFCYkKISW8KrDIEYU4MbIPCVtCKKKhgY4CiYaCL0ARiVQp6PgCQVAAEhJIuKCgSXNoH3e++C722dBlfsXm79mZ3ZnxZgqDIIgDy7evf748uzC7CAYcxjQcbf9hAIwpzRP+n18+OPdi7uKrt5/evF+ferQV2Q39V4SEYSKAAYUh95sAtucNPI5viqN3Q3zEtP6wCC70T6GvguOstl8HQ0nr2+C4prUPhpta30vopvAvle6uNPzSnWZjSYiKWKpi8cRS065WlF9vg2FJG8PQAEvk3+50V+uNht9KCFPvZWxNJOLGZmDBRm+ey1yxPSUzFF288fTJhjBFvamo/kmq4Kjq82pgWND2WThRb1RLEvWfMKP6RQcG609Xu/tO+oqNUUUWlJj7/V+aJYQNJY7NTHZO1O3BraMpy3DBZVsGzrGi/rU7XaHyHmhM9nSkMPd5i6z/gs/rL3S8K4oi/HLeKp67AP7py3UyMrRSlnGrUMJQUcd7Wx/SPt/TUc6ejoVs9BUs//sp5H+ryHyr+YWL7iqfqGMjEtvZVPMjfM1wGv35YSbmRzlYu19ud7ozK2v1ZX/ZX/e8mlOMJ55fKctxlB588Tx05Xw6lDjfyh6VsLmNh/UgaFXVajMbLoKg5cnPXuLfZmGz+euWDgtwCcCp/rV2fKKRTstWPlz6CnUm7YTiPhkSBEEQBEEQBEEQBEEQBEEM4ySY/BVUsHMEcLU93It3RVr/BgAA///NikOb") creat(&(0x7f0000000100)='./file0/file0\x00', 0x18) 1.680274977s ago: executing program 0 (id=166): r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f0000000100)={0xa, 0x1, 0x80000, @empty, 0xfffffffb}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000b095"], 0x18}, 0x40000) 1.657663418s ago: executing program 0 (id=167): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be6", 0x23}, {0x0}, {&(0x7f00000001c0)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c48b3072092c483271361816bf21afb8473a064f1988536d4b5888807b3aaafaf59f53121782a0a9370dc0feae13c8c2a1", 0xa2}], 0x3}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000b80)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001129dbacbfd4924d7545517fd18b5d29978f32a5b5c81755cb89cc0490958ba3211eb99df5cdbbc0f9c941aaa1495893dada02d8188acd26b5afd7476413f322c8f79de769debb56343f3eded2dca93ed6641e5", 0xb1}, {&(0x7f0000000d00)="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", 0x134}], 0x2}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 1.579388483s ago: executing program 5 (id=168): openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) epoll_create(0x400004) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff4000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040864) r0 = io_uring_setup(0xa, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000100000022bf0000000000", @ANYRES32, @ANYBLOB='\x00\x00'], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.573133074s ago: executing program 5 (id=169): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x100) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x10, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RVERSION(r3, &(0x7f0000000040)={0x13, 0x65, 0xffff, 0x91dd, 0x6, '9P2000'}, 0xc8) 1.115192705s ago: executing program 2 (id=170): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x9) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x77774002, 0x11b000, 0x2}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x8000000, 0x10000}) 1.04363127s ago: executing program 2 (id=171): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="5800000002060108000000000000000000000000050005000a000040050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c6970000c000780080006400000"], 0x58}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.043528919s ago: executing program 2 (id=172): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) quotactl$Q_QUOTAON(0xffffffff80000201, 0x0, 0xffffffffffffffff, 0x0) 1.043469099s ago: executing program 2 (id=173): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x1) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x8}) 1.0432771s ago: executing program 2 (id=174): mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x20, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40050) syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r3) 913.953719ms ago: executing program 4 (id=175): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xf, 0x0, 0x0) 879.507591ms ago: executing program 4 (id=176): syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./file0\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0035de937e8e1b26ce9bd355819db1a6abda330df4831ffdbbf3dfa77aca3418100187bc8591108841612f023a7939f7fdcc7f4034bf07f88afd63d2af1c39d6da7e423f"], 0x1, 0x14d1, &(0x7f00000015c0)="$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") truncate(&(0x7f0000000180)='./file0/file0\x00', 0x2000) creat(&(0x7f0000002240)='./file0/file0\x00', 0x0) 763.447529ms ago: executing program 0 (id=177): syz_usb_disconnect(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, 0x0) syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000300000040b80402024000010203010902"], &(0x7f0000000200)={0x0, 0x0, 0x10, &(0x7f0000000100)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x8, 0xa2, 0x2, 0x7, 0x1}]}}) r0 = io_uring_setup(0x8c3, 0x0) io_uring_enter(r0, 0x100000, 0x2, 0xf, 0x0, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, 0x0, 0x0) 763.297399ms ago: executing program 4 (id=178): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) get_robust_list(0x0, &(0x7f0000000180)=0x0, &(0x7f0000000100)) 702.276203ms ago: executing program 4 (id=179): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/246, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f00000002c0)={0x1, r3}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) 675.270105ms ago: executing program 5 (id=180): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41, 0x2}, 0x10) 611.508149ms ago: executing program 5 (id=181): syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120100009f187620ef170372362e010203010902240001000010000904bc00"], 0x0) 214.694496ms ago: executing program 3 (id=182): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) close(0x3) 64.238106ms ago: executing program 2 (id=183): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24008050}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0xfff5, 0x4}, {}, {0x8, 0xc}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x4, 0x1, 0x6, 0x8}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) 0s ago: executing program 3 (id=184): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000000)={[{@dax_never}]}, 0xfe, 0x244, &(0x7f0000000400)="$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") kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.13' (ED25519) to the list of known hosts. [ 24.228117][ T30] audit: type=1400 audit(1775760422.865:64): avc: denied { mounton } for pid=273 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 24.233085][ T273] cgroup: Unknown subsys name 'net' [ 24.253155][ T30] audit: type=1400 audit(1775760422.865:65): avc: denied { mount } for pid=273 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.282189][ T30] audit: type=1400 audit(1775760422.895:66): avc: denied { unmount } for pid=273 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.284079][ T273] cgroup: Unknown subsys name 'devices' [ 24.455150][ T273] cgroup: Unknown subsys name 'hugetlb' [ 24.461088][ T273] cgroup: Unknown subsys name 'rlimit' [ 24.602087][ T30] audit: type=1400 audit(1775760423.235:67): avc: denied { setattr } for pid=273 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 24.627339][ T30] audit: type=1400 audit(1775760423.235:68): avc: denied { mounton } for pid=273 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 24.655315][ T30] audit: type=1400 audit(1775760423.245:69): avc: denied { mount } for pid=273 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 24.677775][ T275] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 24.692047][ T30] audit: type=1400 audit(1775760423.325:70): avc: denied { relabelto } for pid=275 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.722290][ T30] audit: type=1400 audit(1775760423.325:71): avc: denied { write } for pid=275 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.762354][ T30] audit: type=1400 audit(1775760423.405:72): avc: denied { read } for pid=273 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.764230][ T273] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 24.790513][ T30] audit: type=1400 audit(1775760423.405:73): avc: denied { open } for pid=273 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 25.428608][ T281] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.436387][ T281] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.444894][ T281] device bridge_slave_0 entered promiscuous mode [ 25.453275][ T281] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.461013][ T281] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.469412][ T281] device bridge_slave_1 entered promiscuous mode [ 25.487304][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.495655][ T285] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.503532][ T285] device bridge_slave_0 entered promiscuous mode [ 25.531059][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.538275][ T285] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.546557][ T285] device bridge_slave_1 entered promiscuous mode [ 25.607944][ T282] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.616010][ T282] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.624384][ T282] device bridge_slave_0 entered promiscuous mode [ 25.641137][ T283] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.649085][ T283] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.657081][ T283] device bridge_slave_0 entered promiscuous mode [ 25.664276][ T284] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.672006][ T284] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.680126][ T284] device bridge_slave_0 entered promiscuous mode [ 25.687861][ T282] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.695587][ T282] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.704417][ T282] device bridge_slave_1 entered promiscuous mode [ 25.723672][ T283] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.731298][ T283] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.740279][ T283] device bridge_slave_1 entered promiscuous mode [ 25.747334][ T284] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.755420][ T284] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.763566][ T284] device bridge_slave_1 entered promiscuous mode [ 25.932309][ T281] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.939585][ T281] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.947199][ T281] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.955679][ T281] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.978917][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.987081][ T285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.995994][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.003450][ T285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.030084][ T283] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.038190][ T283] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.046268][ T283] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.054240][ T283] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.063210][ T284] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.070545][ T284] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.078233][ T284] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.086098][ T284] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.105254][ T282] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.113079][ T282] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.120867][ T282] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.128624][ T282] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.154629][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 26.163416][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.171079][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.179055][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.188224][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.196688][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.205369][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.213334][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.222206][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.229932][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.237332][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.247714][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 26.256487][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.264141][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.276445][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 26.297025][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 26.306313][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.314728][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.325608][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 26.334452][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.342135][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.366594][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 26.375428][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 26.383549][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 26.391364][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 26.400588][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.408704][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.417029][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 26.426118][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.433775][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.442240][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 26.451858][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.460058][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.468667][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 26.477390][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.484717][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.515912][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 26.525860][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 26.534725][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 26.543802][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 26.553251][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 26.562242][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 26.571299][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 26.580106][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 26.589307][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 26.597506][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 26.606167][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 26.614826][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 26.624255][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.633474][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.641460][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 26.650363][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 26.659100][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 26.668189][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 26.701532][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 26.710705][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 26.721340][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.730079][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.739222][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 26.748412][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 26.756800][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.764350][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.772306][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 26.781188][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 26.791320][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 26.800487][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 26.809900][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 26.819078][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 26.828734][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 26.838362][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 26.859326][ T282] device veth0_vlan entered promiscuous mode [ 26.873446][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.884088][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.894710][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.906170][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 26.915244][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.923991][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 26.933358][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.943205][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 26.953469][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.968755][ T285] device veth0_vlan entered promiscuous mode [ 26.979315][ T283] device veth0_vlan entered promiscuous mode [ 26.986265][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 26.995446][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 27.005442][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 27.014265][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 27.023983][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 27.033250][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 27.042125][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 27.051184][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 27.059847][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 27.068697][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 27.078758][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 27.088355][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 27.096510][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 27.105647][ T281] device veth0_vlan entered promiscuous mode [ 27.121536][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 27.130472][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 27.144626][ T284] device veth0_vlan entered promiscuous mode [ 27.153850][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 27.162743][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 27.176885][ T283] device veth1_macvtap entered promiscuous mode [ 27.189984][ T282] device veth1_macvtap entered promiscuous mode [ 27.198061][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 27.206946][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 27.216319][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 27.225224][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 27.234449][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 27.243387][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 27.253506][ T281] device veth1_macvtap entered promiscuous mode [ 27.271922][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 27.280638][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 27.289342][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 27.299658][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 27.308962][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 27.319869][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 27.329191][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 27.343569][ T285] device veth1_macvtap entered promiscuous mode [ 27.353926][ T284] device veth1_macvtap entered promiscuous mode [ 27.362071][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 27.372917][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 27.382140][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 27.395678][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 27.404351][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 27.421084][ T281] request_module fs-gadgetfs succeeded, but still no fs? [ 27.437665][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 27.447637][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 27.476562][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 27.487154][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 27.518227][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 27.529286][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 27.540206][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 27.550575][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 27.561798][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 27.572195][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 27.666046][ T317] loop3: detected capacity change from 0 to 1024 [ 27.687663][ T317] EXT4-fs (loop3): Ignoring removed bh option [ 27.709915][ T317] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 27.742057][ T317] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (31873!=20869) [ 27.753230][ T317] EXT4-fs (loop3): failed to open journal device unknown-block(0,5) -6 [ 27.765255][ T332] loop2: detected capacity change from 0 to 128 [ 27.772999][ T286] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 27.791403][ T332] attempt to access beyond end of device [ 27.791403][ T332] loop2: rw=2049, want=250, limit=128 [ 27.805798][ T332] attempt to access beyond end of device [ 27.805798][ T332] loop2: rw=2049, want=146, limit=128 [ 27.828360][ T335] attempt to access beyond end of device [ 27.828360][ T335] loop2: rw=2049, want=146, limit=128 [ 27.935019][ T336] ======================================================= [ 27.935019][ T336] WARNING: The mand mount option has been deprecated and [ 27.935019][ T336] and is ignored by this kernel. Remove the mand [ 27.935019][ T336] option from the mount to silence this warning. [ 27.935019][ T336] ======================================================= [ 28.012570][ T286] usb 2-1: Using ep0 maxpacket: 8 [ 28.052634][ T42] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 28.292637][ T307] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 28.322666][ T42] usb 5-1: device descriptor read/64, error -71 [ 28.332688][ T286] usb 2-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 28.342423][ T286] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.351338][ T286] usb 2-1: Product: syz [ 28.356499][ T286] usb 2-1: Manufacturer: syz [ 28.361342][ T286] usb 2-1: SerialNumber: syz [ 28.495956][ T346] overlayfs: missing 'lowerdir' [ 28.520233][ T348] loop3: detected capacity change from 0 to 1024 [ 28.548888][ T348] EXT4-fs error (device loop3): ext4_map_blocks:630: inode #3: block 2: comm syz.3.13: lblock 2 mapped to illegal pblock 2 (length 1) [ 28.564536][ T307] usb 3-1: device descriptor read/64, error -71 [ 28.571371][ T348] EXT4-fs error (device loop3): ext4_map_blocks:630: inode #3: block 48: comm syz.3.13: lblock 0 mapped to illegal pblock 48 (length 1) [ 28.586446][ T348] EXT4-fs error (device loop3): ext4_acquire_dquot:6225: comm syz.3.13: Failed to acquire dquot type 0 [ 28.600014][ T348] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5885: Corrupt filesystem [ 28.610752][ T348] EXT4-fs error (device loop3): ext4_evict_inode:283: inode #11: comm syz.3.13: mark_inode_dirty error [ 28.623466][ T348] EXT4-fs warning (device loop3): ext4_evict_inode:286: couldn't mark inode dirty (err -117) [ 28.634841][ T348] EXT4-fs (loop3): 1 orphan inode deleted [ 28.641130][ T348] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,data_err=ignore,max_batch_time=0x00000000000008c9,nodiscard,stripe=0x0000000000000004,noauto_da_alloc,,errors=continue. Quota mode: none. [ 28.668805][ T8] EXT4-fs error (device loop3): ext4_map_blocks:630: inode #3: block 1: comm kworker/u4:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 28.670158][ T303] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 28.707637][ T8] EXT4-fs error (device loop3): ext4_release_dquot:6261: comm kworker/u4:0: Failed to release dquot type 0 [ 28.776290][ T42] usb 5-1: device descriptor read/64, error -71 [ 28.826993][ T45] EXT4-fs error (device loop3): ext4_map_blocks:630: inode #3: block 1: comm kworker/u4:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 28.843375][ T45] EXT4-fs error (device loop3): ext4_release_dquot:6261: comm kworker/u4:2: Failed to release dquot type 0 [ 28.856463][ T282] EXT4-fs error (device loop3): __ext4_get_inode_loc:4358: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 28.870322][ T282] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5885: Corrupt filesystem [ 28.880624][ T282] EXT4-fs error (device loop3): ext4_quota_off:6531: inode #3: comm syz-executor: mark_inode_dirty error [ 29.012534][ T307] usb 3-1: device descriptor read/64, error -71 [ 29.052524][ T42] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 29.222528][ T20] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 29.282533][ T307] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 29.285015][ T358] loop3: detected capacity change from 0 to 131072 [ 29.332608][ T42] usb 5-1: device descriptor read/64, error -71 [ 29.345773][ T358] F2FS-fs (loop3): Test dummy encryption mode enabled [ 29.354229][ T358] F2FS-fs (loop3): invalid crc value [ 29.361401][ T358] F2FS-fs (loop3): Found nat_bits in checkpoint [ 29.399895][ T358] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 29.420841][ T30] kauditd_printk_skb: 67 callbacks suppressed [ 29.420856][ T30] audit: type=1400 audit(1775760428.055:137): avc: denied { create } for pid=357 comm="syz.3.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 29.447295][ T30] audit: type=1400 audit(1775760428.065:138): avc: denied { getopt } for pid=357 comm="syz.3.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 29.468427][ T30] audit: type=1400 audit(1775760428.065:139): avc: denied { create } for pid=357 comm="syz.3.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 29.490478][ T30] audit: type=1400 audit(1775760428.065:140): avc: denied { write } for pid=357 comm="syz.3.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 29.512699][ T30] audit: type=1400 audit(1775760428.065:141): avc: denied { nlmsg_write } for pid=357 comm="syz.3.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 29.552581][ T307] usb 3-1: device descriptor read/64, error -71 [ 29.592624][ T20] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 29.604089][ T20] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 29.681831][ T365] netlink: 76 bytes leftover after parsing attributes in process `syz.3.16'. [ 29.702912][ T20] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 29.712551][ T20] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 29.721423][ T20] usb 1-1: SerialNumber: syz [ 29.752597][ T42] usb 5-1: device descriptor read/64, error -71 [ 29.764048][ T30] audit: type=1400 audit(1775760428.405:142): avc: denied { read } for pid=368 comm="syz.3.18" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 29.770722][ T369] binder: 368:369 ioctl 4018620d 0 returned -22 [ 29.789088][ T30] audit: type=1400 audit(1775760428.405:143): avc: denied { open } for pid=368 comm="syz.3.18" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 29.820473][ T30] audit: type=1400 audit(1775760428.405:144): avc: denied { ioctl } for pid=368 comm="syz.3.18" path="/dev/binderfs/binder0" dev="binder" ino=10 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 29.872673][ T42] usb usb5-port1: attempt power cycle [ 29.895194][ T30] audit: type=1400 audit(1775760428.535:145): avc: denied { set_context_mgr } for pid=368 comm="syz.3.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 29.952630][ T307] usb 3-1: device descriptor read/64, error -71 [ 29.960576][ T30] audit: type=1400 audit(1775760428.595:146): avc: denied { create } for pid=371 comm="syz.3.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.972140][ T372] fuse: Bad value for 'fd' [ 30.023787][ T20] usb 1-1: 0:2 : does not exist [ 30.031162][ T20] usb 1-1: USB disconnect, device number 2 [ 30.072603][ T307] usb usb3-port1: attempt power cycle [ 30.243184][ T352] udevd[352]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 30.292572][ T42] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 30.332560][ T373] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 30.462632][ T42] usb 5-1: device descriptor read/8, error -71 [ 30.492517][ T307] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 30.542557][ T286] usb 2-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 30.554450][ T286] usb 2-1: clock source 0 is not valid, cannot use [ 30.573079][ T286] usb 2-1: 1:1: cannot get freq (v2/v3): err -71 [ 30.593759][ T286] usb 2-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 30.603836][ T373] usb 4-1: device descriptor read/64, error -71 [ 30.642567][ T286] usb 2-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 30.651562][ T286] usb 2-1: clock source 0 is not valid, cannot use [ 30.681556][ T286] usb 2-1: 2:1: cannot get freq (v2/v3): err -71 [ 30.702682][ T286] usb 2-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 30.726091][ T286] usb 2-1: USB disconnect, device number 2 [ 30.792616][ T307] usb 3-1: device descriptor read/8, error -71 [ 30.812537][ T42] usb 5-1: device descriptor read/8, error -71 [ 30.960992][ T411] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27 sclass=netlink_route_socket pid=411 comm=syz.0.34 [ 31.140606][ T411] Zero length message leads to an empty skb [ 31.192584][ T307] usb 3-1: device descriptor read/8, error -71 [ 31.284664][ T304] udevd[304]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 31.307488][ T425] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 31.322005][ T425] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 31.322598][ T373] usb 4-1: device descriptor read/64, error -71 [ 31.592755][ T434] tipc: Can't bind to reserved service type 2 [ 31.613522][ T431] capability: warning: `syz.1.39' uses deprecated v2 capabilities in a way that may be insecure [ 31.652527][ T373] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 31.772186][ T445] 9pnet: Insufficient options for proto=fd [ 31.785614][ T442] kvm [441]: vcpu0, guest rIP: 0x9114 disabled perfctr wrmsr: 0xc2 data 0x9d00 [ 31.810423][ T442] kvm [441]: vcpu0, guest rIP: 0x9114 disabled perfctr wrmsr: 0xc1 data 0x9d00 [ 31.932513][ T373] usb 4-1: device descriptor read/64, error -71 [ 32.071322][ T456] sch_tbf: burst 8 is lower than device lo mtu (65550) ! [ 32.107696][ T456] netlink: 'syz.4.49': attribute type 5 has an invalid length. [ 32.322554][ T373] usb 4-1: device descriptor read/64, error -71 [ 32.452598][ T373] usb usb4-port1: attempt power cycle [ 32.862502][ T373] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 32.941038][ T476] loop0: detected capacity change from 0 to 40427 [ 32.990850][ T476] F2FS-fs (loop0): Found nat_bits in checkpoint [ 33.042563][ T373] usb 4-1: device descriptor read/8, error -71 [ 33.066306][ T476] F2FS-fs (loop0): Cannot turn on quotas: -2 on 2 [ 33.074561][ T476] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 33.107732][ T476] attempt to access beyond end of device [ 33.107732][ T476] loop0: rw=2049, want=45112, limit=40427 [ 33.262529][ T373] usb 4-1: device descriptor read/8, error -71 [ 33.672511][ T307] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 33.782521][ T373] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 33.872678][ T373] usb 4-1: Using ep0 maxpacket: 16 [ 33.971667][ T501] loop1: detected capacity change from 0 to 8192 [ 34.022645][ T373] usb 4-1: config 0 has an invalid interface number: 49 but max is 0 [ 34.032609][ T307] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 34.042516][ T373] usb 4-1: config 0 has no interface number 0 [ 34.049417][ T307] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 34.052219][ T507] loop4: detected capacity change from 0 to 8192 [ 34.067851][ T373] usb 4-1: config 0 interface 49 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 16 [ 34.076714][ T307] usb 3-1: config 220 has no interface number 2 [ 34.079929][ T373] usb 4-1: config 0 interface 49 altsetting 0 has an invalid endpoint with address 0x3E, skipping [ 34.097256][ T307] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 34.103302][ T501] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 2074) [ 34.114088][ T307] usb 3-1: config 220 interface 0 has no altsetting 0 [ 34.123958][ T501] FAT-fs (loop1): Filesystem has been set read-only [ 34.131190][ T307] usb 3-1: config 220 interface 76 has no altsetting 0 [ 34.147091][ T307] usb 3-1: config 220 interface 1 has no altsetting 0 [ 34.154740][ T413] loop4: p1 p2 p3 p4 [ 34.159325][ T413] loop4: p1 size 196608 extends beyond EOD, truncated [ 34.167596][ T413] loop4: p2 size 150994944 extends beyond EOD, truncated [ 34.175863][ T413] loop4: p3 size 66846464 extends beyond EOD, truncated [ 34.184777][ T413] loop4: p4 size 479744 extends beyond EOD, truncated [ 34.195294][ T507] loop4: p1 p2 p3 p4 [ 34.200517][ T507] loop4: p1 size 196608 extends beyond EOD, truncated [ 34.227920][ T507] loop4: p2 size 150994944 extends beyond EOD, truncated [ 34.236599][ T507] loop4: p3 size 66846464 extends beyond EOD, truncated [ 34.245002][ T507] loop4: p4 size 479744 extends beyond EOD, truncated [ 34.262603][ T373] usb 4-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7 [ 34.287094][ T101] loop4: p1 p2 p3 p4 [ 34.291988][ T101] loop4: p1 size 196608 extends beyond EOD, truncated [ 34.293003][ T373] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.308493][ T101] loop4: p2 size 150994944 extends beyond EOD, truncated [ 34.316832][ T514] loop0: detected capacity change from 0 to 256 [ 34.318016][ T373] usb 4-1: Product: syz [ 34.328580][ T101] loop4: p3 size 66846464 extends beyond EOD, [ 34.328627][ T373] usb 4-1: Manufacturer: syz [ 34.328646][ T101] truncated [ 34.340671][ T101] loop4: p4 size 479744 extends beyond EOD, [ 34.343421][ T373] usb 4-1: SerialNumber: syz [ 34.357281][ T101] truncated [ 34.363239][ T373] usb 4-1: config 0 descriptor?? [ 34.382618][ T490] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 34.392587][ T307] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 34.407896][ T514] FAT-fs (loop0): Directory bread(block 64) failed [ 34.422629][ T514] FAT-fs (loop0): Directory bread(block 65) failed [ 34.430404][ T307] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.437331][ T514] FAT-fs (loop0): Directory bread(block 66) failed [ 34.459517][ T514] FAT-fs (loop0): Directory bread(block 67) failed [ 34.463139][ T307] usb 3-1: Product: syz [ 34.481459][ T514] FAT-fs (loop0): Directory bread(block 68) failed [ 34.494885][ T514] FAT-fs (loop0): Directory bread(block 69) failed [ 34.513841][ T514] FAT-fs (loop0): Directory bread(block 70) failed [ 34.523620][ T307] usb 3-1: Manufacturer: syz [ 34.529012][ T307] usb 3-1: SerialNumber: syz [ 34.529574][ T514] FAT-fs (loop0): Directory bread(block 71) failed [ 34.541567][ T514] FAT-fs (loop0): Directory bread(block 72) failed [ 34.548509][ T514] FAT-fs (loop0): Directory bread(block 73) failed [ 34.643957][ T516] tipc: Started in network mode [ 34.649292][ T516] tipc: Node identity b617568bf14b, cluster identity 4711 [ 34.655993][ T373] usb 4-1: USB disconnect, device number 5 [ 34.657247][ T516] tipc: Enabled bearer , priority 0 [ 34.689221][ T516] device syzkaller0 entered promiscuous mode [ 34.699912][ T515] tipc: Resetting bearer [ 34.713606][ T405] udevd[405]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 34.714694][ T412] udevd[412]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 34.739701][ T515] tipc: Disabling bearer [ 34.740721][ T408] udevd[408]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 34.757710][ T413] udevd[413]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 34.791891][ T520] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=55 sclass=netlink_xfrm_socket pid=520 comm=syz.0.72 [ 34.828821][ T30] kauditd_printk_skb: 41 callbacks suppressed [ 34.828835][ T30] audit: type=1400 audit(1775760433.465:188): avc: denied { name_bind } for pid=523 comm="syz.0.74" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 34.864389][ T524] loop0: detected capacity change from 0 to 512 [ 34.903265][ T524] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 34.917357][ T524] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 34.927751][ T307] usb 3-1: selecting invalid altsetting 0 [ 34.935098][ T307] usb 3-1: selecting invalid altsetting 0 [ 34.941887][ T524] EXT4-fs (loop0): ea_inode feature is not supported for Hurd [ 34.950316][ T307] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 34.957464][ T307] usb 3-1: No valid video chain found. [ 35.042677][ T42] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 35.061541][ T307] usb 3-1: USB disconnect, device number 6 [ 35.100686][ T530] loop1: detected capacity change from 0 to 128 [ 35.132176][ T532] loop3: detected capacity change from 0 to 512 [ 35.180401][ T30] audit: type=1400 audit(1775760433.815:189): avc: denied { unlink } for pid=538 comm="syz.1.81" name="#1" dev="tmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 35.180831][ T539] overlayfs: conflicting lowerdir path [ 35.233545][ T532] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 35.245333][ T532] ext4 filesystem being mounted at /12/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 35.266544][ T30] audit: type=1400 audit(1775760433.905:190): avc: denied { write } for pid=531 comm="syz.3.78" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 35.292838][ T30] audit: type=1400 audit(1775760433.925:191): avc: denied { open } for pid=531 comm="syz.3.78" path="/12/bus/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 35.326506][ T548] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 35.382955][ T30] audit: type=1400 audit(1775760433.965:192): avc: denied { mount } for pid=547 comm="syz.0.84" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 35.408814][ T42] usb 5-1: Using ep0 maxpacket: 16 [ 35.428654][ T30] audit: type=1400 audit(1775760433.985:193): avc: denied { unmount } for pid=283 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 35.479849][ T557] loop2: detected capacity change from 0 to 128 [ 35.492640][ T373] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 35.563023][ T42] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 35.604011][ T42] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 35.615968][ T42] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 35.631116][ T42] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 35.655490][ T42] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.667333][ T42] usb 5-1: config 0 descriptor?? [ 36.037830][ T566] loop2: detected capacity change from 0 to 40427 [ 36.065725][ T566] F2FS-fs (loop2): invalid crc value [ 36.092380][ T566] F2FS-fs (loop2): Found nat_bits in checkpoint [ 36.152588][ T373] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 36.164029][ T373] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.173171][ T373] usb 2-1: Product: syz [ 36.177739][ T373] usb 2-1: Manufacturer: syz [ 36.183925][ T373] usb 2-1: SerialNumber: syz [ 36.189970][ T566] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 36.198969][ T373] usb 2-1: config 0 descriptor?? [ 36.207974][ T42] hid-generic 0003:0955:7214.0001: unknown main item tag 0x0 [ 36.216307][ T42] hid-generic 0003:0955:7214.0001: unknown main item tag 0x0 [ 36.227319][ T42] hid-generic 0003:0955:7214.0001: unknown main item tag 0x0 [ 36.242309][ T42] hid-generic 0003:0955:7214.0001: unknown main item tag 0x0 [ 36.249313][ T30] audit: type=1400 audit(1775760434.885:194): avc: denied { setattr } for pid=565 comm="syz.2.90" name="file1" dev="loop2" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 36.250494][ T42] hid-generic 0003:0955:7214.0001: unknown main item tag 0x0 [ 36.284158][ T42] hid-generic 0003:0955:7214.0001: hidraw0: USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.4-1/input0 [ 36.309494][ T284] attempt to access beyond end of device [ 36.309494][ T284] loop2: rw=2049, want=45104, limit=40427 [ 36.403941][ T30] audit: type=1400 audit(1775760435.045:195): avc: denied { append } for pid=517 comm="syz.4.71" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 36.457155][ T30] audit: type=1400 audit(1775760435.075:196): avc: denied { open } for pid=517 comm="syz.4.71" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 36.487876][ T373] usb 5-1: USB disconnect, device number 6 [ 36.572433][ T30] audit: type=1400 audit(1775760435.205:197): avc: denied { sys_module } for pid=583 comm="syz.2.96" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 36.912502][ T42] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 37.172551][ T42] usb 3-1: Using ep0 maxpacket: 32 [ 37.312722][ T42] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 37.336927][ T42] usb 3-1: config 0 interface 0 has no altsetting 0 [ 37.357566][ T42] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 37.368496][ T42] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.382547][ T42] usb 3-1: config 0 descriptor?? [ 38.211909][ T42] hid-generic 0003:1B1C:0C10.0002: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.2-1/input0 [ 38.343842][ T42] usb 2-1: USB disconnect, device number 3 [ 38.684010][ T630] xt_hashlimit: size too large, truncated to 1048576 [ 38.796951][ T633] loop3: detected capacity change from 0 to 512 [ 38.807948][ T633] EXT4-fs (loop3): Test dummy encryption mode enabled [ 38.812653][ T42] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 38.816932][ T633] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 38.845646][ T633] EXT4-fs error (device loop3): ext4_orphan_get:1426: comm syz.3.112: bad orphan inode 131083 [ 38.858026][ T633] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,norecovery,,errors=continue. Quota mode: none. [ 38.971937][ T637] netlink: 204 bytes leftover after parsing attributes in process `syz.3.113'. [ 38.983179][ T637] netlink: 112 bytes leftover after parsing attributes in process `syz.3.113'. [ 39.205428][ T654] loop4: detected capacity change from 0 to 128 [ 39.362671][ T42] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 39.372953][ T42] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.381610][ T42] usb 2-1: Product: syz [ 39.386026][ T42] usb 2-1: Manufacturer: syz [ 39.391193][ T42] usb 2-1: SerialNumber: syz [ 39.673593][ T20] usb 3-1: USB disconnect, device number 7 [ 40.172554][ T20] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 40.402528][ T286] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 40.412675][ T20] usb 3-1: Using ep0 maxpacket: 8 [ 40.452561][ T373] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 40.692646][ T20] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 40.715874][ T20] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.725469][ T20] usb 3-1: Product: syz [ 40.730327][ T20] usb 3-1: Manufacturer: syz [ 40.738686][ T20] usb 3-1: SerialNumber: syz [ 40.745181][ T306] usb 2-1: USB disconnect, device number 4 [ 40.762655][ T286] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 40.773750][ T20] usb 3-1: config 0 descriptor?? [ 40.779405][ T286] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.839628][ T286] usb 1-1: config 0 descriptor?? [ 40.943399][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 40.943414][ T30] audit: type=1400 audit(1775760439.585:202): avc: denied { setopt } for pid=681 comm="syz.1.129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 40.970947][ T30] audit: type=1400 audit(1775760439.585:203): avc: denied { mounton } for pid=681 comm="syz.1.129" path="/syzcgroup/unified/syz1" dev="cgroup2" ino=24 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 41.039932][ T686] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 41.048871][ T686] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 41.057635][ T373] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 41.067646][ T373] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.076335][ T373] usb 4-1: Product: syz [ 41.080989][ T373] usb 4-1: Manufacturer: syz [ 41.087417][ T373] usb 4-1: SerialNumber: syz [ 41.131078][ T692] loop4: detected capacity change from 0 to 1024 [ 41.234987][ T692] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 41.250462][ T692] EXT4-fs error (device loop4): ext4_find_dest_de:2115: inode #2: block 16: comm syz.4.132: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=2, rec_len=65535, size=1024 fake=0 [ 41.344399][ T30] audit: type=1400 audit(1775760439.985:204): avc: denied { create } for pid=697 comm="syz.4.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 41.368112][ T30] audit: type=1400 audit(1775760439.995:205): avc: denied { shutdown } for pid=697 comm="syz.4.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 41.389993][ T30] audit: type=1400 audit(1775760439.995:206): avc: denied { read } for pid=697 comm="syz.4.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 41.872893][ T30] audit: type=1400 audit(1775760440.475:207): avc: denied { map } for pid=701 comm="syz.1.135" path="socket:[17563]" dev="sockfs" ino=17563 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 41.981974][ T30] audit: type=1400 audit(1775760440.475:208): avc: denied { read accept } for pid=701 comm="syz.1.135" path="socket:[17563]" dev="sockfs" ino=17563 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 42.188822][ T344] usb 1-1: USB disconnect, device number 3 [ 42.315529][ T30] audit: type=1400 audit(1775760440.955:209): avc: denied { append } for pid=714 comm="syz.4.137" name="001" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 42.318282][ T715] usb usb2: usbfs: process 715 (syz.4.137) did not claim interface 0 before use [ 42.360290][ T715] usb usb2: usbfs: process 715 (syz.4.137) did not claim interface 0 before use [ 42.538922][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 42.714693][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 42.725913][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 42.735222][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 42.750725][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 42.767086][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 42.779189][ T344] usb 3-1: USB disconnect, device number 8 [ 42.804986][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 42.814275][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 42.859627][ T726] loop4: detected capacity change from 0 to 512 [ 42.910703][ T731] loop1: detected capacity change from 0 to 512 [ 42.923959][ T726] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 42.934405][ T726] EXT4-fs error (device loop4): ext4_orphan_get:1426: comm syz.4.139: bad orphan inode 1 [ 42.945657][ T726] EXT4-fs (loop4): mounted filesystem without journal. Opts: minixdf,i_version,usrquota,min_batch_time=0x0000000000000005,nomblk_io_submit,lazytime,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 43.003582][ T731] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 43.117327][ T30] audit: type=1400 audit(1775760441.665:210): avc: denied { append } for pid=722 comm="syz.4.139" path="/25/file0/cgroup.controllers" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 43.159423][ T30] audit: type=1400 audit(1775760441.685:211): avc: denied { map } for pid=722 comm="syz.4.139" path="/25/file0/cgroup.controllers" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 43.188555][ T731] EXT4-fs (loop1): shut down requested (0) [ 43.206667][ T731] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=14 [ 43.219633][ T373] usb 4-1: USB disconnect, device number 6 [ 43.244097][ T731] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=14 [ 43.266204][ T731] overlayfs: failed to get origin (-5) [ 43.279390][ T731] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=14 [ 43.290945][ T731] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=14 [ 43.310755][ T731] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=14 [ 43.328700][ T281] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=11 [ 43.342933][ T281] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=11 [ 43.385342][ T281] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=11 [ 43.398467][ T281] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=11 [ 43.408015][ T281] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=11 [ 43.424809][ T281] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=11 [ 43.440078][ T281] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=11 [ 43.449704][ T281] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=11 [ 43.510783][ T762] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 43.645479][ T764] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.653457][ T764] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.662297][ T764] device bridge_slave_0 entered promiscuous mode [ 43.672811][ T764] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.680147][ T764] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.688419][ T764] device bridge_slave_1 entered promiscuous mode [ 43.753203][ T771] loop2: detected capacity change from 0 to 256 [ 43.771514][ T764] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.775967][ T771] exfat: Deprecated parameter 'namecase' [ 43.779390][ T764] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.793869][ T764] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.800744][ T771] exfat: Deprecated parameter 'utf8' [ 43.801659][ T764] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.802837][ T306] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 43.823363][ T373] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 43.846932][ T718] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 43.855900][ T771] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 43.865095][ T718] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.873183][ T771] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x5f1fc80d, utbl_chksum : 0xe619d30d) [ 43.886736][ T718] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.903257][ T718] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 43.912247][ T718] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.920057][ T718] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.932213][ T718] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 43.941349][ T718] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.949177][ T718] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.979149][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 43.988220][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 44.012079][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 44.033422][ T764] device veth0_vlan entered promiscuous mode [ 44.041103][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 44.050064][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 44.059246][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 44.074707][ T618] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 44.080238][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 44.088305][ T618] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 44.092841][ T306] usb 5-1: Using ep0 maxpacket: 16 [ 44.107981][ T764] device veth1_macvtap entered promiscuous mode [ 44.116640][ T308] device bridge_slave_1 left promiscuous mode [ 44.123357][ T308] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.131782][ T308] device bridge_slave_0 left promiscuous mode [ 44.138992][ T308] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.147966][ T308] device veth1_macvtap left promiscuous mode [ 44.154431][ T308] device veth0_vlan left promiscuous mode [ 44.222656][ T306] usb 5-1: config 0 has no interfaces? [ 44.239422][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 44.250958][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 44.305267][ T306] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 44.316434][ T306] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 44.325478][ T306] usb 5-1: Manufacturer: syz [ 44.349573][ T789] loop5: detected capacity change from 0 to 16 [ 44.358180][ T306] usb 5-1: config 0 descriptor?? [ 44.372667][ T373] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 44.383661][ T789] erofs: (device loop5): mounted with root inode @ nid 36. [ 44.417648][ T373] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.427440][ T373] usb 4-1: Product: syz [ 44.432302][ T373] usb 4-1: Manufacturer: syz [ 44.437710][ T373] usb 4-1: SerialNumber: syz [ 44.448256][ T373] usb 4-1: config 0 descriptor?? [ 44.606199][ T618] usb 5-1: USB disconnect, device number 7 [ 45.168326][ T817] loop4: detected capacity change from 0 to 256 [ 45.642502][ T306] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 45.732482][ T286] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 45.788441][ T344] usb 4-1: USB disconnect, device number 7 [ 45.892490][ T306] usb 6-1: Using ep0 maxpacket: 32 [ 46.003046][ T838] loop3: detected capacity change from 0 to 128 [ 46.010169][ T836] ================================================================== [ 46.018646][ T836] BUG: KASAN: slab-out-of-bounds in tc_setup_flow_action+0x870/0x3240 [ 46.023351][ T306] usb 6-1: config 0 has an invalid interface number: 188 but max is 0 [ 46.027415][ T836] Read of size 8 at addr ffff888114f1b1c0 by task syz.2.183/836 [ 46.027435][ T836] [ 46.027449][ T836] CPU: 1 PID: 836 Comm: syz.2.183 Not tainted syzkaller #0 [ 46.027468][ T836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 46.027487][ T836] Call Trace: [ 46.027493][ T836] [ 46.027501][ T836] __dump_stack+0x21/0x30 [ 46.027528][ T836] dump_stack_lvl+0x110/0x170 [ 46.027548][ T836] ? show_regs_print_info+0x20/0x20 [ 46.027576][ T836] ? load_image+0x3e0/0x3e0 [ 46.044754][ T306] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 46.046157][ T836] print_address_description+0x7f/0x2c0 [ 46.066422][ T306] usb 6-1: config 0 has no interface number 0 [ 46.067885][ T836] ? tc_setup_flow_action+0x870/0x3240 [ 46.120222][ T836] kasan_report+0xf1/0x140 [ 46.124677][ T836] ? tc_setup_flow_action+0x870/0x3240 [ 46.130468][ T836] __asan_report_load8_noabort+0x14/0x20 [ 46.136391][ T836] tc_setup_flow_action+0x870/0x3240 [ 46.142292][ T836] mall_replace_hw_filter+0x2cc/0x8b0 [ 46.149309][ T836] ? pcpu_block_update_hint_alloc+0x8c4/0xc50 [ 46.156213][ T836] ? mall_set_parms+0x520/0x520 [ 46.161296][ T836] ? tcf_exts_destroy+0xb0/0xb0 [ 46.163068][ T286] usb 1-1: not running at top speed; connect to a high speed hub [ 46.166768][ T836] ? pcpu_alloc+0x1170/0x16e0 [ 46.166807][ T836] ? mall_set_parms+0x1e8/0x520 [ 46.185146][ T836] mall_change+0x544/0x760 [ 46.189800][ T836] ? __kasan_check_write+0x14/0x20 [ 46.195453][ T836] ? mall_get+0xa0/0xa0 [ 46.200100][ T836] ? tcf_chain_tp_insert_unique+0xac1/0xc10 [ 46.206421][ T836] tc_new_tfilter+0x12e5/0x18e0 [ 46.211797][ T836] ? tcf_gate_entry_destructor+0x20/0x20 [ 46.217563][ T836] ? __update_load_avg_cfs_rq+0xaf/0x2f0 [ 46.224474][ T836] ? security_capable+0x87/0xb0 [ 46.229559][ T836] ? ns_capable+0x8c/0xf0 [ 46.234149][ T836] ? netlink_net_capable+0x125/0x160 [ 46.239761][ T836] ? tcf_gate_entry_destructor+0x20/0x20 [ 46.245796][ T836] rtnetlink_rcv_msg+0x871/0xce0 [ 46.251057][ T836] ? rtnetlink_bind+0x80/0x80 [ 46.253359][ T306] usb 6-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 46.255958][ T836] ? avc_has_perm_noaudit+0x391/0x490 [ 46.255992][ T836] ? memcpy+0x56/0x70 [ 46.272768][ T286] usb 1-1: config 0 has no interfaces? [ 46.275840][ T836] ? avc_has_perm_noaudit+0x30b/0x490 [ 46.287132][ T836] ? arch_stack_walk+0xee/0x140 [ 46.287347][ T306] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.292630][ T836] ? avc_denied+0x1b0/0x1b0 [ 46.292664][ T836] ? stack_trace_save+0xa6/0xf0 [ 46.292686][ T836] ? avc_has_perm+0x163/0x250 [ 46.292706][ T836] ? avc_has_perm_noaudit+0x490/0x490 [ 46.312406][ T306] usb 6-1: Product: syz [ 46.317185][ T836] ? x64_sys_call+0x4b/0x9a0 [ 46.317222][ T836] ? selinux_nlmsg_lookup+0x416/0x4c0 [ 46.333524][ T306] usb 6-1: Manufacturer: syz [ 46.338437][ T836] netlink_rcv_skb+0x1f5/0x440 [ 46.349504][ T836] ? rtnetlink_bind+0x80/0x80 [ 46.354642][ T836] ? netlink_ack+0xb50/0xb50 [ 46.358521][ T306] usb 6-1: SerialNumber: syz [ 46.359555][ T836] ? __netlink_lookup+0x387/0x3b0 [ 46.370768][ T836] rtnetlink_rcv+0x1c/0x20 [ 46.375779][ T836] netlink_unicast+0x876/0xa40 [ 46.381375][ T836] netlink_sendmsg+0x879/0xb80 [ 46.386644][ T836] ? netlink_getsockopt+0x530/0x530 [ 46.393020][ T836] ? do_futex+0xde8/0x2800 [ 46.398003][ T836] ? security_socket_sendmsg+0x82/0xa0 [ 46.403873][ T836] ? netlink_getsockopt+0x530/0x530 [ 46.404542][ T306] usb 6-1: config 0 descriptor?? [ 46.409566][ T836] ____sys_sendmsg+0x5b7/0x8f0 [ 46.409606][ T836] ? __sys_sendmsg_sock+0x40/0x40 [ 46.426102][ T836] ? import_iovec+0x7c/0xb0 [ 46.430978][ T836] ___sys_sendmsg+0x236/0x2e0 [ 46.435909][ T836] ? __sys_sendmsg+0x280/0x280 [ 46.440817][ T836] ? sock_show_fdinfo+0xa0/0xa0 [ 46.442854][ T286] usb 1-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 46.445844][ T836] ? __fdget+0x1a1/0x230 [ 46.445880][ T836] __x64_sys_sendmsg+0x206/0x2f0 [ 46.458186][ T306] asix: probe of 6-1:0.188 failed with error -22 [ 46.460529][ T836] ? ___sys_sendmsg+0x2e0/0x2e0 [ 46.477538][ T836] ? __kasan_check_write+0x14/0x20 [ 46.479060][ T286] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.483064][ T836] ? switch_fpu_return+0x15d/0x2c0 [ 46.483102][ T836] x64_sys_call+0x4b/0x9a0 [ 46.483125][ T836] do_syscall_64+0x4c/0xa0 [ 46.483149][ T836] ? clear_bhb_loop+0x50/0xa0 [ 46.508952][ T286] usb 1-1: Product: syz [ 46.512326][ T836] ? clear_bhb_loop+0x50/0xa0 [ 46.522067][ T836] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 46.527452][ T286] usb 1-1: Manufacturer: syz [ 46.528377][ T836] RIP: 0033:0x7fde6a632819 [ 46.528401][ T836] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 46.542308][ T286] usb 1-1: SerialNumber: syz [ 46.560074][ T836] RSP: 002b:00007fde6908d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 46.560105][ T836] RAX: ffffffffffffffda RBX: 00007fde6a8abfa0 RCX: 00007fde6a632819 [ 46.560120][ T836] RDX: 0000000020000000 RSI: 0000200000000580 RDI: 0000000000000006 [ 46.560133][ T836] RBP: 00007fde6a6c8c91 R08: 0000000000000000 R09: 0000000000000000 [ 46.560145][ T836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 46.560157][ T836] R13: 00007fde6a8ac038 R14: 00007fde6a8abfa0 R15: 00007ffd498710d8 [ 46.560175][ T836] [ 46.560182][ T836] [ 46.560187][ T836] Allocated by task 836: [ 46.597575][ T286] usb 1-1: config 0 descriptor?? [ 46.599459][ T836] __kasan_kmalloc+0xda/0x110 [ 46.638506][ T836] __kmalloc+0x13d/0x2c0 [ 46.643897][ T836] tcf_idr_create+0x5f/0x790 [ 46.649012][ T836] tcf_idr_create_from_flags+0x61/0x70 [ 46.654885][ T836] tcf_gact_init+0x342/0x570 [ 46.660041][ T836] tcf_action_init_1+0x3ff/0x6b0 [ 46.665921][ T836] tcf_action_init+0x233/0x7a0 [ 46.671157][ T836] tcf_exts_validate+0x24a/0x580 [ 46.676135][ T836] mall_set_parms+0x48/0x520 [ 46.676290][ T286] usb 6-1: USB disconnect, device number 2 [ 46.681044][ T836] mall_change+0x478/0x760 [ 46.681066][ T836] tc_new_tfilter+0x12e5/0x18e0 [ 46.681086][ T836] rtnetlink_rcv_msg+0x871/0xce0 [ 46.702560][ T836] netlink_rcv_skb+0x1f5/0x440 [ 46.707560][ T836] rtnetlink_rcv+0x1c/0x20 [ 46.712209][ T836] netlink_unicast+0x876/0xa40 [ 46.717408][ T836] netlink_sendmsg+0x879/0xb80 [ 46.722916][ T836] ____sys_sendmsg+0x5b7/0x8f0 [ 46.728775][ T836] ___sys_sendmsg+0x236/0x2e0 [ 46.733942][ T836] __x64_sys_sendmsg+0x206/0x2f0 [ 46.739220][ T836] x64_sys_call+0x4b/0x9a0 [ 46.743754][ T836] do_syscall_64+0x4c/0xa0 [ 46.749225][ T836] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 46.755440][ T836] [ 46.758053][ T836] The buggy address belongs to the object at ffff888114f1b100 [ 46.758053][ T836] which belongs to the cache kmalloc-192 of size 192 [ 46.772327][ T836] The buggy address is located 0 bytes to the right of [ 46.772327][ T836] 192-byte region [ffff888114f1b100, ffff888114f1b1c0) [ 46.787327][ T836] The buggy address belongs to the page: [ 46.793443][ T836] page:ffffea000453c6c0 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x114f1b [ 46.804348][ T836] flags: 0x4000000000000200(slab|zone=1) [ 46.810228][ T836] raw: 4000000000000200 dead000000000100 dead000000000122 ffff888100042c00 [ 46.819021][ T836] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 46.828073][ T836] page dumped because: kasan: bad access detected [ 46.835084][ T836] page_owner tracks the page as allocated [ 46.841090][ T836] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 105, ts 7444591554, free_ts 0 [ 46.857398][ T836] post_alloc_hook+0x192/0x1b0 [ 46.862786][ T836] prep_new_page+0x1c/0x110 [ 46.867789][ T836] get_page_from_freelist+0x2d3a/0x2dc0 [ 46.872431][ T306] usb 1-1: USB disconnect, device number 4 [ 46.874254][ T836] __alloc_pages+0x1a2/0x460 [ 46.884798][ T836] new_slab+0xa1/0x4d0 [ 46.888917][ T836] ___slab_alloc+0x381/0x810 [ 46.893759][ T836] __slab_alloc+0x49/0x90 [ 46.898744][ T836] kmem_cache_alloc_trace+0x146/0x270 [ 46.904415][ T836] kernfs_fop_open+0x343/0xb30 [ 46.909420][ T836] do_dentry_open+0x834/0x1010 [ 46.914451][ T836] vfs_open+0x73/0x80 [ 46.918711][ T836] path_openat+0x26a6/0x2f20 [ 46.923531][ T836] do_filp_open+0x1e2/0x410 [ 46.928346][ T836] do_sys_openat2+0x15e/0x7f0 [ 46.933323][ T836] __x64_sys_openat+0x136/0x160 [ 46.938629][ T836] x64_sys_call+0x219/0x9a0 [ 46.943516][ T836] page_owner free stack trace missing [ 46.949097][ T836] [ 46.951718][ T836] Memory state around the buggy address: [ 46.957548][ T836] ffff888114f1b080: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 46.966009][ T836] ffff888114f1b100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 46.975115][ T836] >ffff888114f1b180: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 46.984619][ T836] ^ [ 46.990812][ T836] ffff888114f1b200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 46.999402][ T836] ffff888114f1b280: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 47.007761][ T836] ================================================================== [ 47.016574][ T836] Disabling lock debugging due to kernel taint [ 47.090697][ T838] EXT4-fs (loop3): dax option not supported