last executing test programs: 6.228034091s ago: executing program 3: bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0xfeffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x675}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0xfeffff, 0x113, 0x3f00f000, &(0x7f0000000700)="c45c573d395de5b2891a7d637a223920f181c2e57d71483cfb2d075a3fa67258e080a194805cdb0c26d3f7ffb1e0d9cf4fa36dcb2168b72de48ac8f93e6804f1c4d70898d0810e044d7e1778eaac5dfdcc9f1208905522025bcfdf1b6f969b094d5c022c2b7ffefde71e0627b9a2069cc1e0175c4b8860aad4b0a103c589f676b6c4e85eb3950c533b6e62c39ccf9ae9bfe54ee5887358d44f46337fbe090d7c7e55847edee8130ffd3d1e719e01a68b0e691c0d35b0b56e0b514036342fd56f08ac0083f3c2fe41a1295a3d23cf3d160d4fd90f66beba68860456ed41272e1e68d16c2564c85f5556e18784113c493d13253e14d6eb891707fba3c30d07d5ee8619e4426cafec4cf6a3723c455d09b586b248", 0x0, 0xf0, 0x0, 0x4a, 0xffffff0c}, 0x40) mkdir(&(0x7f0000000080)='./file1\x00', 0x1d9) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="02000000010000000000f400040000000000000020"], 0x1c, 0x0) chdir(&(0x7f00000000c0)='./file1\x00') setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000280)={@dev, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0xa, 0x4e24, 0x80000, @local, 0x9}, 0x1c, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYRES32], 0x28}, 0x24004001) listxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)=""/250, 0xfa) syz_usb_connect(0x0, 0x2d, &(0x7f0000000c40)={{0x12, 0x1, 0x0, 0xfe, 0xeb, 0x4a, 0x8, 0xaf0, 0x8201, 0x348e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x1, 0x0, 0x39, 0xc6, 0x2b}}, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x5f, 0x8c, 0x51}}]}}]}}, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) 4.943791789s ago: executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_NMI(r3, 0xae9a) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f0000000700)=ANY=[@ANYRES8=0x0], 0x1, 0x217, &(0x7f00000004c0)="$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") r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1a, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x16, 0x0, 0x10001, 0x6d, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r8, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) r9 = creat(&(0x7f0000000240)='./bus\x00', 0x0) pwritev2(r9, &(0x7f00000015c0)=[{&(0x7f0000000080)="ec", 0x1}], 0x1, 0xfffff, 0x0, 0x0) r10 = open(&(0x7f0000000200)='./bus\x00', 0x44000, 0x0) dup3(r10, r9, 0x0) finit_module(r10, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 4.232415298s ago: executing program 2: timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) r0 = socket(0x10, 0x0, 0x0) write(r0, &(0x7f0000000040)="240000001e005f031400ff01000000f80700b3586ff606c2e553797c080008e467dc0000", 0x24) 4.130890564s ago: executing program 2: close(0xffffffffffffffff) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x204c0, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f00000001c0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x240540c7, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(r3, 0x9, &(0x7f0000000000)={0xf75, 0x4}, 0x0) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendto$inet6(r2, &(0x7f00000003c0)='\x00', 0x1, 0x0, 0x0, 0xfffffffffffffdde) close(r2) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.current\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) splice(r0, &(0x7f0000000140), r1, 0x0, 0x4, 0x0) r6 = syz_open_dev$evdev(&(0x7f0000000240), 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000300)='net/snmp\x00') dup3(r6, r7, 0x0) ioctl$EVIOCGVERSION(r7, 0x80044501, &(0x7f00000003c0)=""/84) write$P9_RWALK(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="020000000000000000"], 0x9) unshare(0x2000400) syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000005700)=ANY=[@ANYBLOB="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"], 0x1, 0x550f, &(0x7f00000001c0)="$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") 4.003196933s ago: executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000580)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000d00)='sched_switch\x00', r5}, 0x10) r7 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x498, 0x320, 0xa, 0x148, 0x368, 0x60, 0x400, 0x2a8, 0x2a8, 0x400, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x368, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4f8) write$binfmt_elf64(r6, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"/627], 0x273) r8 = socket$inet6_udp(0xa, 0x2, 0x0) socket(0x10, 0x3, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x3c1, 0x3, 0x5f0, 0x0, 0xffffff80, 0x178, 0x3b8, 0x178, 0x520, 0x22b, 0x258, 0x520, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0x398, 0x3b8, 0x340, {0x1e0002a8, 0x7203000000000000}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x1a, 0x64, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}]}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "e22e50439abb066265e088a63e13552b8b2fec412753ac647d17d2ebca69d17a9722bd2f5be411676d5993fb4cc74168209fb9f43b63bab2a88206d7dd8158d916b865d0f713f772c59ad6e6b572e9a6c498fb6459888a281e8c071a9a7229f9fe02cb8e9ba7637a2591a5367c770c87034734be6eda195ce135517efa85da52"}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth1_to_bridge\x00', 'geneve1\x00'}, 0x0, 0x100, 0x168, 0x0, {}, [@common=@ah={{0x30}}, @common=@ipv6header={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x650) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="580000001000010400000000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="000000000000000024001280090001007866726d000000001400028008000200020000000800010000000000140003007866726d300000000051f900000000005bd80b3109ea6cd2f45e60a4c336d17c3bc5e087bc2567357cc3c4ecf884a8be59d6a56bcc270164ed1202733c6b0a5fb57b88"], 0x58}}, 0x0) r9 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r10 = dup(r9) connect$inet(r10, &(0x7f0000000040)={0x27, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x60) write$cgroup_int(r0, &(0x7f0000000200), 0x43451) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x5, 0xff}, 0x48) 3.893084161s ago: executing program 2: bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0xfeffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x675}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000840)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8fff0ff79a4f0ff00000000b7060000ffffffff6d6405000000000065040400010000000404000001000000b7050000400000006a0a80fe000000008500000053000000b70000000000000095000010000000004e62011c3034fdb117168bd07ba08af339d1a1ee35fe163a255c33282044b32495ef8ab9adc67ccc945ff15d802f5132143c0a9fc7a84452569957c1002ed7d458e17f791f4798c8eb484de03312c69b3edff5be26765ba5f8f2879021c2ea53ac547a654bbd2db5356b971d83dd12742be9087a3e7b7c0efd3e38c794eb06b0b8c392904ae7dd5e4dee88518ddf12dddd4bfc6a4dd3b6beba51074229b0d4b504516c4c3e5d1aa044d8d00728141cd67bcd68f253288e655c6b34e02e90637ef2912ba7de26ff2357ef17f95a25780c3a057826ef4e912f01a201e694e3049b8c8fe8b65d8d66bb766f7f3f918c86a702522368d9f81897133af94a5a4cff7f4d8b9d8eaf302f0b2e0c252b0000000000000000ee917bca4885bbf597a14ab6458e6272d88e0c8088f404f011289ebc5623faa1182632161e073af1d69a2e36be115be3b325ecd201d2ffb0a7fa4f5d1106560cdcf071defd0a8be3b69ce3e4f361aca75827426dde87fdf4617222674280f55e98107450c19b861299fcd9ed9d8679406419406bf0c5329bd5b4697336112b0b8756ce3574046bf611a108f8df4d1a88597840b702b6fa8edfff8faf8b8ec039bab385cac0535373bb8fab90539b1a65ddff841eb671f7faf39a43a66c5540b8762b42007c9ec43193ccf617dbf8a12b4a189edbf9fb7c42b1f435ccd4b19b53b60322af0aa66e8f448e1bd96822e6b70b62912c926dbe417cccd4f696d528fa8a3ea847f10e9b1106f3bb506f1d7fbdf801000000000000006c028eb5b5a073d0de5538ab42e171b3baae34c35987b0dda497ac3f5e97e60eaeea15c6d55badf9b86b1c000100006e60cd06c9ed24313ce607d403bb6030f800000000690db0221b1705c501f802ff59b4e683efa4b6e77e042072ec9eb8166f6e28b49a7705a1befc4d315878f88a8fb1dd679fb4c5557abae6849917dc51a89d47b728502f7e621fc0e3ba04020000c149ee6601728c750930519339b44197c22da865059b475afd96187d881e93b42a5fdfd686d8900c44c67133eeb0109dcb60dddad58037fda65885a15a42560ee3027a5ebf95254744f10fd607bc3100b94932b8d9447c42f6e21ee0e54f8be386bdc09decece910a481e648e0cb074536a25ff581d92af08a06f857311a2f14326b0b290205e91a682e00c8762cbc6b904c980eef6e6ae00f0000000000006a8194479700a02b92bec8d05eae1f24fdd7b80d3dde04c22f689594de2ebb9687219de8d73ac83823feb402a2415a9850d5f0183ec67be96dc0e4acd7acf1dfe79d6771903b76e2ae47d972651390c22d641030e1ddac018dc3116e1803af10a5f2b5f7ba58aca5bcabbbab24414a3810788e5503e4be66d683daac5f00000000000000001000ba96edb95ede0e1957c2a2754258d9fd028096cc15a8b912b494d4bbe609031ea1ca65a548941d5d16297757310d9daebd5a3dabbced3b051129cd60a37d397643324e6f0aadf978d639650000000000000000570b0acbcaa196e6b46e213a34c1a550e7c2d8cee7a278cee591f360e345d37dc9f8991a16c08d72317e42d2ac9126acd76130ef1086016697e4d51c4b42b2efc8edab88d46bc3d5d6e5a634c912bc40513643bf44cb416b3149040220aa39035ae46d16d879fc815a5cb84b0d5c8ad970128adf8dec1171e860ca54ce5d6a5aa0327bca4f49a710bf8a8399071237fe5d764e2034873c94a4f21287f3bce3eeb69e94df2e14e4ab10cc7834b304bc879b80255991dd7aac2e92c9e7c411c019d229c1f1e563152f1c5ae9cda3e808000000a0c779d624c5a2b7491b8f73e767389ecd1dee951353bb22b7caf89468871520823715cfebd04189c6c6b34bd8a6541f6bc0630000000000f94e85f5111add3a3cb5bcace95f38465402c39df835754ef33056b0e1134187822c001a25304f3e00b44675d0a25a21dc4023c642cc6f5a75c45a29ab933600acf9a2d471b73a73178cdf309e5d53311996215b44295dfddc1dd6b81132e999366e460d15d366e84da02b8afc40c47e733f804460ed8300ec34eab2ed80097bd32ff1a6143ab1476037e474ca876187c85bed4391215cd77e6a1fd6399a498b96b9b0cca93255acb08c67e50004c5af6fd5b4ce7c1ebc9202bd7b329a4d2530486d5999dd7f90ebecca37f2869135438f0540801fd7481daf9ec94b799c12e714d573e2a6331f496254f254a60c52b2026ed6a72c82cd191490fabe7b151f92e5d700f21830d613fbe490f305b3845a78817e59bf7ed36471dbca01d39e50ae2535460e1d2f2614940647233a02d5000000000000000000f70e52f0d56f6a4dcf7e57c03d4b4add0500000000000000320304d0d2b308c5ed3956eae263035d703f862224e9818a3d7ac270793a7bf2af87585293960a80ac63c54e55063bf8d24639e561253ef0caf6c58118120d8acecc0528f0d81d291009fc46401baf9c22d1c452a5b61b7a1b9adfcc17f5ad99dcdf935923185db7b14a7fa7babc1f53df70618bb73aa810b756696f26653b84cf842ae433fda59fbe312be11bb7dfecdc38c1c1f688d2724568cc396fca7c74984b7f7bd000000000000003ff3e5857fc6598c933610be374909dc8622b0722259e922f40d7862f7ea72f1754f07711de7600000000000000000000000000c4cb643e73ad8a45f0c7164484540e66e29943aa72297d831ce6c978866a55ed53130c6747f569c9c9abe724b4fc647b17401d2201e8c201e7d6ffa1fa122677f7393ed4fe8a93306f048b6703b04544e42a9cd937ef8d98ee8d878a12a627791c5c2d9fc6de65356be92fd98fdbe819686c7bd3be5bd0ce627c8357675f752c73a502d25c31c831078f098c34295bfe90e882843003841f4c0c65dc1810a50000000000000015911cb03e743c482199757d35df5b59fe0a0c5240c85498d818578e2d65c4ff4acbee037498222b1f81f3726a244da1fd6b8c195f1303bedb744045f31e1547d7bc3c3eae68b8da059a59c8c37e3639c2c4eb3d8229ac24d2ce12bc0e5db4a8202d72e64d5c5eacd0d0c0cd7a879ed967f5a2bd39ae4cf7daf7c9fa1777d54fb5920c8434163f75062c62455bf6e23817a85d"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0xfeffff, 0x113, 0x3f00f000, &(0x7f0000000700)="c45c573d395de5b2891a7d637a223920f181c2e57d71483cfb2d075a3fa67258e080a194805cdb0c26d3f7ffb1e0d9cf4fa36dcb2168b72de48ac8f93e6804f1c4d70898d0810e044d7e1778eaac5dfdcc9f1208905522025bcfdf1b6f969b094d5c022c2b7ffefde71e0627b9a2069cc1e0175c4b8860aad4b0a103c589f676b6c4e85eb3950c533b6e62c39ccf9ae9bfe54ee5887358d44f46337fbe090d7c7e55847edee8130ffd3d1e719e01a68b0e691c0d35b0b56e0b514036342fd56f08ac0083f3c2fe41a1295a3d23cf3d160d4fd90f66beba68860456ed41272e1e68d16c2564c85f5556e18784113c493d13253e14d6eb891707fba3c30d07d5ee8619e4426cafec4cf6a3723c455d09b586b248", 0x0, 0xf0, 0x0, 0x4a, 0xffffff0c}, 0x40) mkdir(&(0x7f0000000080)='./file1\x00', 0x1d9) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="02000000010000000000f400040000000000000020"], 0x1c, 0x0) chdir(&(0x7f00000000c0)='./file1\x00') r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet6(r1, &(0x7f0000000300)={&(0x7f0000000200)={0xa, 0x4e24, 0x80000, @local, 0x9}, 0x1c, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYRES32=r1], 0x28}, 0x24004001) listxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)=""/250, 0xfa) syz_usb_connect(0x0, 0x2d, &(0x7f0000000c40)={{0x12, 0x1, 0x0, 0xfe, 0xeb, 0x4a, 0x8, 0xaf0, 0x8201, 0x348e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x1, 0x0, 0x39, 0xc6, 0x2b}}, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x5f, 0x8c, 0x51}}]}}]}}, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) 3.8308488s ago: executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000001000)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "df3f0400000000000000000000000609000040"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x540c, 0x0) 3.465500256s ago: executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0xf, {[@local=@item_4={0x3, 0x2, 0x0, 'WNib'}, @local=@item_4={0x3, 0x2, 0x0, "f85edaca"}, @main=@item_4]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINDEX(r1, 0xc00c4809, &(0x7f0000000000)) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0xb2d, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x7, 0x7fe2, 0x1, 0x0, 0x1}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000400)={r3, &(0x7f0000000380), 0x20000000}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000d40)={r3, &(0x7f0000000c40)="84", &(0x7f0000000880)=@tcp}, 0x20) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000080)={0x1, 0x18, 0x338, 0x61c1, "6a5e4780e67b7a6a56c9faf51c3723c8a9ab0187a69b5d71d98860affdd8e8ab"}) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x400003, &(0x7f0000000200)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x5}}, {@noblock_validity}, {@usrquota}, {@resgid}, {@nogrpid}, {@errors_remount}, {@noinit_itable}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1}}, {@resuid, 0x32}]}, 0x1b, 0x4f0, &(0x7f0000000a40)="$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") 3.270584687s ago: executing program 1: io_setup(0x6, &(0x7f00000000c0)=0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000080)={0x80}) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f0000000300)={0xc00f476f769bacbc}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r5 = socket$inet6(0xa, 0x80002, 0x0) r6 = openat$cgroup_ro(r4, &(0x7f0000000440)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r6, 0x0) ftruncate(r6, 0x3) getsockopt$inet6_mreq(r5, 0x29, 0x2, 0x0, &(0x7f00000004c0)) ioctl$TIOCGSID(r6, 0x5429, &(0x7f0000000140)=0x0) syz_open_procfs(r7, &(0x7f0000000180)='net/vlan/vlan0\x00') r8 = socket(0xb, 0x803, 0x0) io_submit(r0, 0x1, &(0x7f00000006c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r8, &(0x7f00000001c0)="89", 0x1}]) r9 = socket$igmp(0x2, 0x3, 0x2) getsockopt$bt_hci(r9, 0x0, 0x2, 0x0, &(0x7f0000000000)) io_setup(0x6, &(0x7f00000000c0)) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000080)={0x80}) (async) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f0000000300)={0xc00f476f769bacbc}) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) (async) socket$inet6(0xa, 0x80002, 0x0) (async) openat$cgroup_ro(r4, &(0x7f0000000440)='cgroup.controllers\x00', 0x275a, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r6, 0x0) (async) ftruncate(r6, 0x3) (async) getsockopt$inet6_mreq(r5, 0x29, 0x2, 0x0, &(0x7f00000004c0)) (async) ioctl$TIOCGSID(r6, 0x5429, &(0x7f0000000140)) (async) syz_open_procfs(r7, &(0x7f0000000180)='net/vlan/vlan0\x00') (async) socket(0xb, 0x803, 0x0) (async) io_submit(r0, 0x1, &(0x7f00000006c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r8, &(0x7f00000001c0)="89", 0x1}]) (async) socket$igmp(0x2, 0x3, 0x2) (async) getsockopt$bt_hci(r9, 0x0, 0x2, 0x0, &(0x7f0000000000)) (async) 3.154332754s ago: executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x8) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0x1, 0x58, &(0x7f0000000040)}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'gretap0\x00', &(0x7f0000000300)={'syztnl2\x00', 0x0, 0x80, 0x10, 0x3, 0x9, {{0x1f, 0x4, 0x3, 0x7, 0x7c, 0x68, 0x0, 0x3f, 0x29, 0x0, @broadcast, @private, {[@lsrr={0x83, 0x13, 0x3e, [@multicast2, @empty, @multicast2, @local]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x1c, 0xfc, 0x0, 0x2, [0x1, 0xb9, 0xf7, 0x9, 0x8001, 0x6]}, @cipso={0x86, 0x32, 0xffffffffffffffff, [{0x0, 0x6, "60cd437b"}, {0x1, 0x2}, {0x2, 0xd, "44a312cd7546e5ba204d15"}, {0x2, 0x5, "e7f346"}, {0x2, 0x2}, {0x1, 0x2}, {0x5, 0xe, "06d9fc0b67f4aa97c7e856ed"}]}]}}}}}) socket(0x11, 0x800000003, 0x0) socket$key(0xf, 0x3, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x3, 0xc, 0x0, 0x0}, 0x90) socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x2000000, 0xe, 0x0, &(0x7f0000000280)="63ecffffffffff4ba05df5db006b", 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) futex(0x0, 0x84, 0x0, 0x0, 0x0, 0x0) unshare(0x20000400) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040), 0x6) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x27, 0x28, 0x0, &(0x7f0000000040)="f8ad48cc02cb29fcc800775b86dd", 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$packet(0x11, 0x2, 0x300) 2.786837891s ago: executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xd, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000280)=[{{&(0x7f0000000340)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000780), 0x0, &(0x7f0000000800)=ANY=[@ANYRES64=r2, @ANYRES32=r2, @ANYRES32, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r1, @ANYRES32=0xee01, @ANYRES32=r2, @ANYBLOB="cba97c88a9cad5d0b300000000"], 0x40, 0x20000800}}], 0x1, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff50) setsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000003c0)={r1}, 0xc) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r4, 0x800c6613, &(0x7f0000000140)=@v1={0x0, @adiantum, 0x0, @desc3}) chdir(&(0x7f0000000000)='./file0\x00') add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000240)={'fscrypt:', @desc3}, &(0x7f00000002c0)={0x0, "615a091a55a8c9a640115d99d981b3886420589c6685d4982a83b71b906769e737201ac6b7a7804454156569cbf3a5be811debc957b5831b89b59d703e748c7c", 0x25}, 0x48, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0x5, &(0x7f0000000640)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x4f}, @jmp={0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x85ffffff}]}, &(0x7f0000000080)='syzkaller\x00', 0x6, 0xd8, &(0x7f0000000180)=""/216}, 0x23) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) fallocate(0xffffffffffffffff, 0x22, 0x6, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x9) ioctl$TCFLSH(r5, 0x400455c8, 0x40000000004) 2.771513263s ago: executing program 0: syz_open_procfs(0x0, &(0x7f00000000c0)='attr/sockcreate\x00') socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x7a, &(0x7f0000000200)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "92c01f", 0x44, 0x2f, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @broadcast}, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x57}}}}}}}, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) chdir(&(0x7f0000000400)='./file0\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8}, 0x90) lseek(r2, 0x900, 0x3) socket$vsock_stream(0x28, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x4800, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) 2.256921012s ago: executing program 1: syz_open_procfs(0x0, &(0x7f00000000c0)='attr/sockcreate\x00') socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x7a, &(0x7f0000000200)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "92c01f", 0x44, 0x2f, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @broadcast}, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x57}}}}}}}, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) chdir(&(0x7f0000000400)='./file0\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8}, 0x90) lseek(r2, 0x900, 0x3) socket$vsock_stream(0x28, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x4800, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) 1.871282371s ago: executing program 3: bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0xfeffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x675}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0xfeffff, 0x113, 0x3f00f000, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0x4a, 0xffffff0c}, 0x40) mkdir(&(0x7f0000000080)='./file1\x00', 0x1d9) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="02000000010000000000f400040000000000000020"], 0x1c, 0x0) chdir(&(0x7f00000000c0)='./file1\x00') setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000280)={@dev, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0xa, 0x4e24, 0x80000, @local, 0x9}, 0x1c, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYRES32], 0x28}, 0x24004001) listxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)=""/250, 0xfa) syz_usb_connect(0x0, 0x2d, &(0x7f0000000c40)={{0x12, 0x1, 0x0, 0xfe, 0xeb, 0x4a, 0x8, 0xaf0, 0x8201, 0x348e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x1, 0x0, 0x39, 0xc6, 0x2b}}, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x5f, 0x8c, 0x51}}]}}]}}, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) 1.846287035s ago: executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='ext4_writepages_result\x00'}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x23}, {{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x6}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0xa00}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x2, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {0x7, 0x0, 0x0, 0x6}, {0x5, 0x0, 0x7}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) connect$unix(0xffffffffffffffff, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e20}, 0x6e) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xc1) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(r2, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, 0x2, 0x9, 0x101, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x40800) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180), 0x2000) 1.399690404s ago: executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='ext4_writepages_result\x00'}, 0x10) r3 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000cc0)=[{{&(0x7f00000002c0)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f0000000340)=[{&(0x7f0000000200)="3c178f5516b9d0f392ed743c66694f8f", 0x10}], 0x1, &(0x7f0000000c00)=[@rights={{0x34, 0x1, 0x1, [r4, r4, r1, r1, r0, r0, r5, 0xffffffffffffffff, r2]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [r5, r0]}}, @rights={{0x1c, 0x1, 0x1, [r3, r2, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}], 0xa8, 0x20000010}}], 0x1, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r8 = getpid() r9 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setreuid(r10, r10) r11 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$setown(r11, 0x8, r8) bind$inet(r11, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r11, &(0x7f0000001980)="02101a30f44ed44601cb68fe56a6da31cefd09888697b7f95508e99ef1fc42db74c07c51e03da9624f2870071d6d8dd46635c690fb3251657c839a166bdc175a44d490c319cf4874cf9230e736a7a1eb6dfd0be0547cd2d50cc778d3790216360631864d1f5e10163d7e8336e86a9ad33e5b5bdeab6c1e0b810e46a2f0a32edef5590039a42baca732b2fa929387679dea8efbe1789f65775da2356fce957999981509065e449c758eeee8fc4d0771a69be74d21c62d34ec5a4af89f99e9196b5206772a99efd05393b96e50d9", 0xfffffff2, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom(r11, &(0x7f0000000480)=""/110, 0xfffffe32, 0x0, 0x0, 0xfffffffffffffecb) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000023080000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b706000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000b7020000000a00007baaf8ff00000000b5090000000000007baaf0ff00000000bf8200000000000007080000fffdffffbfa400000000000007060000f0ffffff750200000800000018220000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) connect$unix(0xffffffffffffffff, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e20}, 0x6e) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xc1) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(r6, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000e80)={0x148, 0x2, 0x9, 0x101, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFCTH_TUPLE={0x9c, 0x2, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xc}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010100}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @local}}}]}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x3}}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x4}, @NFCTH_TUPLE={0x78, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @remote}}, {0x14, 0x4, @mcast2}}}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x800}, 0x40800) 1.367975579s ago: executing program 1: unshare(0x400) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000000)={[{@huge_within_size}]}) chdir(&(0x7f0000000040)='./file0\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000001200)=ANY=[@ANYBLOB="1800000000000000000000000000000079111000000000009500396b55ea947d32aaaac72bd5f2221b19c14faa80e499"], &(0x7f00000000c0)='GPL\x00', 0x4, 0xac, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x70) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x810, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x1c4, &(0x7f0000000080)=0x8000, 0x0, 0x4) fstat(r0, &(0x7f0000000280)) syz_read_part_table(0x104e, &(0x7f0000001080)="$eJzsz71xg0AUBOA9jPmJXIK7cEoT7gf6cmPOngYBKkFS8H3RzuztzbzwUn/jmvT5rxrSMiSf6WuZMt3bOcuU7z1VVbr5HLW0a//7k4+2VdV6NGOb6+tRb1fazu8O3f6yf9aJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPD2bgEAAP//3LUP1Q==") 1.16558582s ago: executing program 1: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='flush,nocase,discard,dots,dmask=00000000000000000000177,dots,nodots,nmdots,dots,\x00'], 0x1, 0x140, &(0x7f0000000000)="$eJzs27Fq21AUBuDj2m3ddvFcOgi6dDJtn6CluFAqaEnwkEwJOFnsYIgXJZMfJS8YCJ683ZAo2Imxhwy2IPq+RT/8CO4dpMMV6OjT2XAwnpyO/8+i3WhE60dkMW9EJ15FM0rTAABeknlKcZNSSm+n8e4qUkpVrwgA2DbzHwDqx/wHgPox/wGgfvYPDv/+zPPeXpa1I66nRb/ol9ey//0n733N7nWWd82Kot9c9N/KPnvav473D/33tf2b+PK57O+6X//ylf5DDLa/fQAAAKiFbraw9nzf7W7qy/To+8DK+b0VH1s72wYA8AyTi8vh8Wh0ci4IgrAIVb+ZgG1bPvRVrwQAAAAAAAAAAAAAANhkF78TVb1HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWHUbAAD//0DvUik=") mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x100000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x0, &(0x7f00000001c0), 0x81, 0x79e, &(0x7f00000018c0)="$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") r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0xa2) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1081000, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600016, 0x15) r2 = open(&(0x7f0000000080)='./bus\x00', 0x181102, 0x0) ioctl$BLKDISCARD(r2, 0x1277, &(0x7f00000000c0)) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x1, 0x6, 0x44d, 0x880, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x2, 0x2}, 0x48) ptrace$ARCH_SHSTK_UNLOCK(0x1e, r3, 0x1, 0x5004) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r6, 0x6, 0x21, &(0x7f0000000280)="39dc86ae1d2baf9261a3a0df94977ee7", 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x5}, 0x48) 999.694116ms ago: executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0xfff, 0x4) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x7}, 0x1c) 947.843534ms ago: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000000)='.\x00', 0x60) renameat2(r0, &(0x7f00000001c0)='./file0\x00', r0, &(0x7f0000000200)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x89901) move_mount(r2, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x3041480, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x10a5840, 0x0) 833.475291ms ago: executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000580)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000d00)='sched_switch\x00', r5}, 0x10) r7 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x498, 0x320, 0xa, 0x148, 0x368, 0x60, 0x400, 0x2a8, 0x2a8, 0x400, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x368, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4f8) write$binfmt_elf64(r6, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"/627], 0x273) r8 = socket$inet6_udp(0xa, 0x2, 0x0) socket(0x10, 0x3, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x3c1, 0x3, 0x5f0, 0x0, 0xffffff80, 0x178, 0x3b8, 0x178, 0x520, 0x22b, 0x258, 0x520, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0x398, 0x3b8, 0x340, {0x1e0002a8, 0x7203000000000000}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x1a, 0x64, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}]}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "e22e50439abb066265e088a63e13552b8b2fec412753ac647d17d2ebca69d17a9722bd2f5be411676d5993fb4cc74168209fb9f43b63bab2a88206d7dd8158d916b865d0f713f772c59ad6e6b572e9a6c498fb6459888a281e8c071a9a7229f9fe02cb8e9ba7637a2591a5367c770c87034734be6eda195ce135517efa85da52"}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth1_to_bridge\x00', 'geneve1\x00'}, 0x0, 0x100, 0x168, 0x0, {}, [@common=@ah={{0x30}}, @common=@ipv6header={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x650) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="580000001000010400000000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="000000000000000024001280090001007866726d000000001400028008000200020000000800010000000000140003007866726d300000000051f900000000005bd80b3109ea6cd2f45e60a4c336d17c3bc5e087bc2567357cc3c4ecf884a8be59d6a56bcc270164ed1202733c6b0a5fb57b88"], 0x58}}, 0x0) r9 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r10 = dup(r9) connect$inet(r10, &(0x7f0000000040)={0x27, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x60) write$cgroup_int(r0, &(0x7f0000000200), 0x43451) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x5, 0xff}, 0x48) 757.759513ms ago: executing program 0: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r0, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000500)}, 0x20) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x24, 0x1, 0x4, 0x101, 0x0, 0x0, {}, [@NFULA_CFG_FLAGS={0x6}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x1c}}, 0x0) setrlimit(0x8, &(0x7f0000000180)) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b70400000000000085"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x53d, &(0x7f0000000a80)="$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") syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x802053, 0x0, 0x0, 0x0, &(0x7f00000000c0)) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r4 = open(&(0x7f00000002c0)='.\x00', 0x0, 0x0) mkdirat(r4, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) syz_emit_ethernet(0x26, 0x0, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_buf(r6, 0x29, 0x3e, &(0x7f00002cef88)="d84f7398", 0x4) setsockopt$inet6_IPV6_HOPOPTS(r6, 0x29, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="00006600f5ffffff"], 0x8) sendto$inet6(r6, &(0x7f0000000800)="51e251578851f74182a74b89b27df427aeef44966d202e4138b5a18e75a0424e7fe93b0d32c7abba87b65f97aba1c26a06b6d94c4aefd8fdca10e744391062c8e612721c20051608d9aa6dacf61e1eb331a4daad402b9885599d56130f7149fb1111fa116e94324d585a0569fbd311dad54cb4e32ff7f02216844ef42eeb66c3d526c878d5135ad1c9262239339c18885e2a0a95854d6cde3dd2feeaa50216af6c5760923413af81199a65a6332b02ec7bbf79d557c033cbe032fdc44f66a5c59cc4a3c5d218f5896b359d1efd60baf98df6396567478f7b817ce6e11d59a7def452a068e9607f57f626a5b8d476636ef1ee76307524009ae49be402000000000000001e80fed632155e14da1f7324d97bc61a3c1edc4431ee8a6caa2ed9f85cea5a2a9b263630c7d6fc35dda6002da571a2e51917e7c1019d8ce21a608147e408074c7c5f444fab931bda86d977d7c9ccefd881e5ef05b287f41eea526862885881c2cdc687dff02ba9b70a9b08734ac4d62c7f34465c34aa9e9f136c7f796d9eea41aa37f61830508338bb1f887089070567a1dd96cd700e7a098dabedb60f31acd17d487bc8be1a3101d2b5ac1715003793596c6daa93a27f4adb4d6fbea5669cabc206c944317ea18a2c762457f1bc945fec8f849641d44e7e2a24faeee28f3f266395fe18b0dce20c1f64e8896c8ff0e4a44a116fb32462471a0fcde143e551723d57339722765673b4163d66f473ac10f988cb252f106632f9884a47866d284b4efc6bb1aa74ed48d4a6535795f0873a99907ebc22be2337364cf9acc063e32f7d2e02fad64d04aa405d2dbdee1128ab1e4761d2dd30885ad37dd168478f10789d172feef4c817a5cd372caade57f23300e45f47e001e3ea09364ab42ee9802477368b9910f4e24037c871cb8251568c792287a6f49fa61b7c2600accaa0e7b40c59d88a29af5886c1f5dfc6837c58aaef12a9e100225c70441144ffa82927fa4802ed9ebb03eea8e945af5f4993f21a7f53baf7ec5bb6cc96b917dde82c18840c3500e9565f68f687b1c73d834c0d99d4acb002dc5682dbcdb1217a98f6c3ef8318b7fa93894e8a097b4511ba5c035e27c9fe8bfe7754741ac21bbc0303b81672e3117e5590fe2d92f912759b9937f64204ec5caa92e218daa5a3ef64617beb30cccb31016b13ed8d7bcabb03e176b1c9bda3bf1c1256ab74ab6f42ed9bafbbd0096263be1a7da1e1c88deec55a653d170e1e13c77dacaa60a37a6ba2383e661ebc9f13dbaade2dd884c9951819fb4608e19e70cd2496ccfb12f24c71f496cfe90400fe1bbea1e9a24b1d4664fb0776aca6269b396779680e52f86877d9209988d12ccb137be01ab7496d00547a7d4849d365a18dbb55c429cde87d33c4b74ad2273cdfee88b5418866ef327f25e9cbcd5a64d97184339f7e4cb5f8de171d2779c0f68884ae835e398f982d5749f085628d3608986656ea04b721f828202e9342bd7d19dfa091e772aebf9718030167a8c029df7c58b7f40029d7cfcaf26fd1900d8775ef373e8e2c5bf3525f907add3be426cd5a079c49abffe933e9ee213a3baf34f932d1299312691e1c53e6247ae0989ad66070d51fad22856a8b6b28954e7d41189b11c5321789eec8670de9e8db0b0473ba2e02731e60e7222697d61e052c18d4bcc6d1572fdf426f7b2fee6c1dee66c85c497b90facaf63b8ec5cde4a73400f9180bcfc0f81eca9580a7c81462a077f9034026bf72aa7c6de4b3c15d4a2dbd6fd7d87084aea9f25fb4bf5ec83eb56874a760533792dff2695407ccdd6a7375e0007230fd3f6501c152f1c1ff279b1d67cc95f2820762b7927659368e41657bdef2dd15b63498a93b787bdb26809d734aaf98b86fcf9fc643a34d03ebbe072820662d20d4774d66c5ae270adade5b8f6242a059b926221ee3d677487471c432b0d6d64dad030703475bb3ecac39b204a814f5ece5961621358e36f8a2cf7196c76959824bbb475a7cad8f57853fe05f59f341b5207cc9bb8d686982c2f158", 0x5a5, 0x0, &(0x7f0000000080)={0xa, 0x5e20, 0x0, @mcast2}, 0x1c) r7 = socket$inet(0x2, 0x2, 0x1) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@setlink={0x48, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'erspan0\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0xffffd9b3}}]}]}]}, 0x48}}, 0x0) shutdown(r7, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000007f00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}], 0x30}}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000066c0), 0x0, 0x140, 0x0) recvmsg(r7, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xe, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="1807000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000009400850000002b000000b70000000000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) unlinkat(r9, &(0x7f0000000280)='./file0\x00', 0x200) 495.838714ms ago: executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x8) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0x1, 0x58, &(0x7f0000000040)}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'gretap0\x00', &(0x7f0000000300)={'syztnl2\x00', 0x0, 0x80, 0x10, 0x3, 0x9, {{0x1f, 0x4, 0x3, 0x7, 0x7c, 0x68, 0x0, 0x3f, 0x29, 0x0, @broadcast, @private, {[@lsrr={0x83, 0x13, 0x3e, [@multicast2, @empty, @multicast2, @local]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x1c, 0xfc, 0x0, 0x2, [0x1, 0xb9, 0xf7, 0x9, 0x8001, 0x6]}, @cipso={0x86, 0x32, 0xffffffffffffffff, [{0x0, 0x6, "60cd437b"}, {0x1, 0x2}, {0x2, 0xd, "44a312cd7546e5ba204d15"}, {0x2, 0x5, "e7f346"}, {0x2, 0x2}, {0x1, 0x2}, {0x5, 0xe, "06d9fc0b67f4aa97c7e856ed"}]}]}}}}}) socket(0x11, 0x800000003, 0x0) socket$key(0xf, 0x3, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x3, 0xc, 0x0, 0x0}, 0x90) socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x2000000, 0xe, 0x0, &(0x7f0000000280)="63ecffffffffff4ba05df5db006b", 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) futex(0x0, 0x84, 0x0, 0x0, 0x0, 0x0) unshare(0x20000400) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040), 0x6) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x27, 0x28, 0x0, &(0x7f0000000040)="f8ad48cc02cb29fcc800775b86dd", 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$packet(0x11, 0x2, 0x300) 465.749178ms ago: executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x10) r2 = gettid() rt_sigqueueinfo(r2, 0x21, &(0x7f0000001500)={0x7}) 455.7061ms ago: executing program 4: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0) (async) mremap(&(0x7f0000a01000/0x4000)=nil, 0x4000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) munlock(&(0x7f0000fde000/0x1000)=nil, 0x1000) (async) madvise(&(0x7f0000a2a000/0x2000)=nil, 0x2000, 0x2) (async) mremap(&(0x7f000044b000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00007e4000/0x2000)=nil) munlockall() (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000d00000000080000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r0}, 0x10) (async, rerun: 64) r1 = socket(0x10, 0x3, 0x0) (rerun: 64) write(r1, &(0x7f0000000080)="24000000580025000307f4f9002304000a04f55f10000100020100020800038005000000", 0x24) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async, rerun: 32) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r3}, 0x10) (async, rerun: 32) r4 = gettid() (async, rerun: 32) write$binfmt_aout(r0, &(0x7f0000000740)={{0x107, 0xfd, 0xff, 0x17b, 0x374, 0x6, 0x74, 0xfffff801}, "8b9c2f4e548f24cdf0904dfb6722b8188a240eed8c56a086c8c8cf74b49e825bceb9d7fcef7d532a4529427f575d5b49d5e9d6a078b8041fbe7bb8d47f5ea64159d74ae8303cd9c4998e04edf4eef4b8083d3d17d25c39b5a55d0361ce67689a9abdacee305bbd8d16e7b50d0ac240d7b00df884df9d5039b2ac3fc1cbbdda103ac151215dc31639b10cb467032edac940004990414a70fb40d9b405c3afa07a097e364ed09220337085ebe208f1e5c51b433bef4eabb897b415a5af73", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x6dd) rt_sigqueueinfo(r4, 0x21, &(0x7f0000001500)) 413.926756ms ago: executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000013007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000340)="e636c55cfcda23b1d725109e5bb5a825d668f27a7fcd0d342eb0abec146cedbc6397de66dcee3f0d396d218617c00a8092c3e2717d73a3a469e1fb5ccc2575f693749d77edaaedac88c2ea622bb40d9e60c641f70ed10131e8711ad916570b10eda6b2ea527c735d9a429725862026e5202bdfa486799d3097e04e6e04cff1bb86ffa2123d26247f8325f661475c975c4461de77659ea077d6cd917e768d0eb47ec6d085", &(0x7f0000000200)=""/166}, 0x20) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000004000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r1}, 0x10) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r5, 0x0, 0x8000f28, 0x0) splice(r4, 0x0, r2, 0x0, 0x7f, 0xe) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f00000000c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r6, 0x5422) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40345410, &(0x7f00000000c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r7, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r6, 0x54a3) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r9}, 0x10) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) io_setup(0x9, &(0x7f0000000080)) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x2821030, &(0x7f0000000000)={[{@commit={'commit', 0x3d, 0x5}}]}, 0x0, 0x79f, &(0x7f00000012c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) 413.589616ms ago: executing program 4: bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0xfeffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x675}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0xfeffff, 0x113, 0x3f00f000, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0x4a, 0xffffff0c}, 0x40) mkdir(&(0x7f0000000080)='./file1\x00', 0x1d9) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="02000000010000000000f400040000000000000020"], 0x1c, 0x0) chdir(&(0x7f00000000c0)='./file1\x00') r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet6(r1, &(0x7f0000000300)={&(0x7f0000000200)={0xa, 0x4e24, 0x80000, @local, 0x9}, 0x1c, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYRES32=r1], 0x28}, 0x24004001) listxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)=""/250, 0xfa) syz_usb_connect(0x0, 0x2d, &(0x7f0000000c40)={{0x12, 0x1, 0x0, 0xfe, 0xeb, 0x4a, 0x8, 0xaf0, 0x8201, 0x348e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x1, 0x0, 0x39, 0xc6, 0x2b}}, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x5f, 0x8c, 0x51}}]}}]}}, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) 59.519031ms ago: executing program 3: r0 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) write$cgroup_type(r0, &(0x7f0000000100), 0x9) (async) write$cgroup_type(r0, &(0x7f0000000100), 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000500)='unmap\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000540)={r2, &(0x7f0000000380)="97bbc625d8afb0566e4b3c52c68535f36714fcc8f0cbc5a01fdddcbb38ddf17f1edf3882fc32adcba3588018ba20f0de7bc82e111167989c5c124468f6208e12c00150dbaa463ac7174566350a296236e70c229e6d7385baca46c610a39eefb6fdcaef", 0x0, 0x4}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000080)=ANY=[], 0x6a) (async) write$cgroup_subtree(r4, &(0x7f0000000080)=ANY=[], 0x6a) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) pipe(&(0x7f0000000300)) unshare(0x20040600) r7 = getpgrp(0xffffffffffffffff) r8 = syz_pidfd_open(r7, 0x0) pidfd_send_signal(r8, 0x11, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r9 = socket$netlink(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=ANY=[@ANYBLOB="280000001c000100000000000000000007000000", @ANYRES32=r11, @ANYBLOB="800094000a000200aaaaaaaaaa000000754f1d8fb7dd84dc26d0d2f4b0d2ddc4faebacda38906c1d23111e092887181567afa429"], 0x28}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYRES64=0x0], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r12, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r12, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c250000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c250000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='scsi_dispatch_cmd_start\x00', r13}, 0x10) write$cgroup_type(r6, &(0x7f0000000140), 0x9) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) 43.838843ms ago: executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0xc, &(0x7f0000000300)={0x0, 0x5, &(0x7f0000000080)=@framed={{}, [@alu, @jmp]}, &(0x7f0000000000)='syzkaller\x00'}, 0x78) 0s ago: executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0xf, {[@local=@item_4={0x3, 0x2, 0x0, 'WNib'}, @local=@item_4={0x3, 0x2, 0x0, "f85edaca"}, @main=@item_4]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINDEX(r1, 0xc00c4809, &(0x7f0000000000)) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0xb2d, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x7, 0x7fe2, 0x1, 0x0, 0x1}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000400)={r3, &(0x7f0000000380), 0x20000000}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000d40)={r3, &(0x7f0000000c40)="84", &(0x7f0000000880)=@tcp}, 0x20) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000080)={0x1, 0x18, 0x338, 0x61c1, "6a5e4780e67b7a6a56c9faf51c3723c8a9ab0187a69b5d71d98860affdd8e8ab"}) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x400003, &(0x7f0000000200)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x5}}, {@noblock_validity}, {@usrquota}, {@resgid}, {@nogrpid}, {@errors_remount}, {@noinit_itable}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1}}, {@resuid, 0x32}]}, 0x1b, 0x4f0, &(0x7f0000000a40)="$eJzs3V1rW+cdAPD/ObaSOHFmh+0iCywLS4Ydtkh2vCRmF1k2xnYV2JZdL/Ns2RjLlrHkJDZhc9gHGIyxDQaDXvWm0A9QKPkIpRBo70tbWkqbtBe5aKOit7w4kq0Q2Qr27wfH53nOi///R0JHes55OCeAfetURJyOiEeVSuVsRAw1lqeN6Uq1slHf7sH929PVKYlK5drnSURSX1bdZPSp/3mkvksciog//DbiL8nzcUtr6wtThUJ+pVHPlReXc6W19XPzi1Nz+bn80sTE+MXJS5MXJse60s7BiLj864///Y/Xf3P57Z/e/OD6p6N/TRrLI560o9vqTc/UXoum/ohY2YlgPdDXaE+m14kAANCR5u/8H0XE2RiKvtqvOQAAAGAvqfxiML5OIioAAADAnpXWxsAmabYxDmAw0jSbrY/h/V4cTgvFUvkns8XVpZn6WNnhyKSz84X8WGOs8HBkkmp9vFZ+Uj+/qT4REcci4l9DA7V6drpYmOn1yQ8AAADYJ45s6v9/NVTv/wMAAAB7zHCvEwAAAAB2nP4/AAAA7H36/wAAALCn/e7q1epUaT7/eubG2upC8ca5mXxpIbu4Op2dLq4sZ+eKxbnaPfsWt/t/hWJx+WextHorV86XyrnS2vr1xeLqUvn6/DOPwAYAAAB20bEf3n0/iYiNnw/UpqoDvU4K2BX9L7LxRzuXB7D7+nqdANAzL/T9D+wpmV4nAPRcEhH/32J928E77+xMPgAAQPeNfL/19f9k23MDG+kupQjsEOf/YP9y/R/2L9f/Yf/KRF903pEf2NFcgN5Itln/8tf/K5UXSggAAOi6wdqUpNmI2nmAwUjTbDbiaO2xAJlkdr6QH4uI70TEe0OZg9X6eG3PZNs+AwAAAAAAAAAAAAAAAAAAAAAAAABQV6kkUQEAAAD2tIj0k6Tx/K+RoTODm88PHEgeDtXmEXHzf9f+c2uqXF4Zry7/4vHy8n8by8/34gwGAAAAsFmzn97sxwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABANz24f3u6Oe1m3M9+GRHDreL3x6Ha/FBkIuLwl0n0P7VfEhF9XYi/cScifvWnFvGTalox3MiiVfyBbsU/3qr9W8dPI+JIF+LDfna3evy50urzl8ap2nzz5+/g4337uxC//fEvfXz862tz/DnaYYwT997MtY1/J+JEf+vjTzN+0ib+6Q7j//mP6+vt1lVeixhp+f2TPBMrV15czpXW1s/NL07N5efySxMT4xcnL01emBzLzc4X8o2/LWP88wdvPdqq/YfbxB/epv1nOmz/N/du3f9uvZhpFX/0dOv3/3ib+Gnju+/HjXJ1/UizvFEvP+3kG++e3Kr9M23av937P9ph+8/+/u8fdrgpALALSmvrC1OFQn5lXxde6tWo/izqbOO0EeZVaLJCfqX0t1cjjVey0PxMPOzJcQkAAOi+5/vAAAAAAAAAAAAAAAAAAAAAwG7rzj3DmvfE3vruek0b9dlz90IGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOilbwMAAP//lRTPYg==") kernel console output (not intermixed with test programs): i)" [ 29.703498][ T23] audit: type=1400 audit(1718915925.220:149): avc: denied { read write } for pid=488 comm="syz-executor.3" name="vga_arbiter" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 29.812028][ T23] audit: type=1400 audit(1718915925.330:150): avc: denied { open } for pid=488 comm="syz-executor.3" path="/dev/vga_arbiter" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 29.877441][ T23] audit: type=1326 audit(1718915925.390:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=446 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f818181cf29 code=0x7fc00000 [ 29.928412][ T545] overlayfs: unrecognized mount option "\eiserfs" or missing value [ 29.980066][ T18] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 30.070137][ T549] EXT4-fs (loop1): Ignoring removed oldalloc option [ 30.082496][ T549] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (56219!=33349) [ 30.092547][ T549] EXT4-fs (loop1): Unsupported blocksize for fs encryption [ 30.437235][ T18] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 30.448240][ T18] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 30.459269][ T18] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 30.469340][ T18] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 30.560391][ T18] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 30.709881][ T18] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 30.718350][ T18] usb 5-1: Manufacturer: syz [ 30.756846][ T18] usb 5-1: config 0 descriptor?? [ 30.942427][ T547] F2FS-fs (loop3): Wrong CP boundary, start(512) end(198144) blocks(1024) [ 31.649822][ T547] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 31.708517][ T547] F2FS-fs (loop3): invalid crc value [ 31.786970][ T547] F2FS-fs (loop3): Found nat_bits in checkpoint [ 31.840129][ T435] Bluetooth: hci0: command 0x1001 tx timeout [ 31.845979][ T468] Bluetooth: hci0: sending frame failed (-49) [ 31.870413][ T547] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 31.871289][ T579] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.2'. [ 31.877369][ T547] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 31.903636][ T18] appleir 0003:05AC:8243.0001: No inputs registered, leaving [ 32.088430][ T18] appleir 0003:05AC:8243.0001: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 32.122694][ T18] usb 5-1: USB disconnect, device number 2 [ 32.873366][ T609] overlayfs: unrecognized mount option "\eiserfs" or missing value [ 32.942802][ T592] syz-executor.2 (592) used greatest stack depth: 21720 bytes left [ 34.988113][ T435] Bluetooth: hci0: command 0x1009 tx timeout [ 35.762430][ T23] kauditd_printk_skb: 12 callbacks suppressed [ 35.769358][ T23] audit: type=1400 audit(1718915931.250:164): avc: denied { connect } for pid=635 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 35.965142][ T23] audit: type=1400 audit(1718915931.480:165): avc: denied { setattr } for pid=651 comm="syz-executor.3" name="001" dev="devtmpfs" ino=9894 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 37.236699][ T23] audit: type=1400 audit(1718915932.750:166): avc: denied { create } for pid=683 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 37.275252][ T23] audit: type=1400 audit(1718915932.790:167): avc: denied { bind } for pid=683 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 37.295785][ T23] audit: type=1400 audit(1718915932.790:168): avc: denied { setopt } for pid=683 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 37.354262][ T686] tipc: Failed to remove local publication {66,0,0}/203395632 [ 38.432136][ T721] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 38.441607][ T721] ext4 filesystem being mounted at /root/syzkaller-testdir2865780058/syzkaller.JhHPtA/25/file0 supports timestamps until 2038 (0x7fffffff) [ 38.478358][ T729] cgroup: syz-executor.0 (729) created nested cgroup for controller "memory" which has incomplete hierarchy support. Nested cgroups may change behavior in the future. [ 38.495329][ T729] cgroup: "memory" requires setting use_hierarchy to 1 on the root [ 38.527656][ T720] EXT4-fs error (device loop2) in ext4_do_update_inode:5534: error 27 [ 38.543548][ T23] audit: type=1400 audit(1718915934.060:169): avc: denied { mount } for pid=723 comm="syz-executor.0" name="/" dev="pstore" ino=10024 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 38.567871][ T23] audit: type=1400 audit(1718915934.090:170): avc: denied { remount } for pid=723 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 38.591098][ T720] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3002: comm syz-executor.2: Allocating blocks 18-19 which overlap fs metadata [ 38.592596][ T23] audit: type=1400 audit(1718915934.110:171): avc: denied { unmount } for pid=374 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 38.839583][ T736] syz-executor.4 (736) used greatest stack depth: 21528 bytes left [ 38.853514][ T721] EXT4-fs error (device loop2) in ext4_do_update_inode:5534: error 27 [ 38.862794][ T721] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3002: comm syz-executor.2: Allocating blocks 18-19 which overlap fs metadata [ 39.374662][ T23] audit: type=1400 audit(1718915934.890:172): avc: denied { create } for pid=765 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 39.414852][ T23] audit: type=1400 audit(1718915934.910:173): avc: denied { setopt } for pid=765 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 40.208875][ T767] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 43.117740][ T23] kauditd_printk_skb: 72 callbacks suppressed [ 43.117751][ T23] audit: type=1400 audit(1718915938.630:246): avc: denied { mount } for pid=805 comm="syz-executor.1" name="/" dev="tmpfs" ino=13283 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 43.306404][ T23] audit: type=1400 audit(1718915938.820:247): avc: denied { create } for pid=811 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 43.357403][ T23] audit: type=1400 audit(1718915938.850:248): avc: denied { mounton } for pid=811 comm="syz-executor.3" path="/root/syzkaller-testdir2349503649/syzkaller.hHWUVw/17/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 43.400082][ T23] audit: type=1400 audit(1718915938.850:249): avc: denied { mount } for pid=811 comm="syz-executor.3" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 43.422075][ T23] audit: type=1400 audit(1718915938.850:250): avc: denied { unmount } for pid=373 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 43.445688][ T23] audit: type=1326 audit(1718915938.910:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=813 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42324aff29 code=0x7ffc0000 [ 43.469678][ T23] audit: type=1326 audit(1718915938.910:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=813 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42324aff29 code=0x7ffc0000 [ 44.119558][ T816] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 44.138759][ T23] audit: type=1326 audit(1718915938.910:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=813 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f42324aff29 code=0x7ffc0000 [ 44.247647][ T23] audit: type=1326 audit(1718915938.910:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=813 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42324aff29 code=0x7ffc0000 [ 44.271972][ T23] audit: type=1326 audit(1718915938.910:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=813 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42324aff29 code=0x7ffc0000 [ 45.700815][ T859] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 45.715993][ T859] ext4 filesystem being mounted at /root/syzkaller-testdir1888820423/syzkaller.FWL8nq/21/file1 supports timestamps until 2038 (0x7fffffff) [ 45.752444][ T859] capability: warning: `syz-executor.4' uses deprecated v2 capabilities in a way that may be insecure [ 45.800631][ T869] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 45.992538][ T841] F2FS-fs (loop1): invalid crc value [ 45.999613][ T841] F2FS-fs (loop1): Found nat_bits in checkpoint [ 46.257802][ T104] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 46.270682][ T841] F2FS-fs (loop1): Cannot turn on quotas: -2 on 2 [ 46.279535][ T841] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 46.510157][ T104] usb 5-1: Using ep0 maxpacket: 8 [ 46.630138][ T104] usb 5-1: config 0 has an invalid interface number: 171 but max is 0 [ 46.638226][ T104] usb 5-1: config 0 has no interface number 0 [ 46.654340][ T104] usb 5-1: too many endpoints for config 0 interface 171 altsetting 190: 149, using maximum allowed: 30 [ 46.675670][ T104] usb 5-1: config 0 interface 171 altsetting 190 has 0 endpoint descriptors, different from the interface descriptor's value: 149 [ 46.694639][ T104] usb 5-1: config 0 interface 171 has no altsetting 0 [ 46.701365][ T104] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 46.710222][ T104] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.719046][ T104] usb 5-1: config 0 descriptor?? [ 46.932163][ T883] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 46.939125][ T883] EXT4-fs: Warning: mounting with data=journal disables delayed allocation and O_DIRECT support! [ 46.940855][ T880] F2FS-fs (loop2): Test dummy encryption mode enabled [ 46.949596][ T883] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 46.966617][ T883] EXT4-fs (loop0): Unsupported blocksize for fs encryption [ 46.968005][ T880] F2FS-fs (loop2): invalid crc value [ 46.980988][ T880] F2FS-fs (loop2): Found nat_bits in checkpoint [ 47.015996][ T880] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 47.078663][ T880] F2FS-fs (loop2): access invalid blkaddr:730368 [ 47.085312][ T104] usb 5-1: string descriptor 0 read error: -71 [ 47.091708][ T880] CPU: 0 PID: 880 Comm: syz-executor.2 Not tainted 5.4.274-syzkaller-00002-g6f97bd951d82 #0 [ 47.101515][ T880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 47.111410][ T880] Call Trace: [ 47.114550][ T880] dump_stack+0x1d8/0x241 [ 47.118707][ T880] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 47.124347][ T880] ? f2fs_lookup_extent_cache+0x16b/0xc30 [ 47.129911][ T880] f2fs_is_valid_blkaddr+0xc79/0x1380 [ 47.135112][ T880] f2fs_get_read_data_page+0x4d1/0x8c0 [ 47.140511][ T880] ? page_cache_prev_miss+0x410/0x410 [ 47.145730][ T880] ? f2fs_get_block+0x1b0/0x1b0 [ 47.150406][ T880] ? pagecache_get_page+0x684/0x750 [ 47.155434][ T880] ? f2fs_hash_filename+0x95a/0xc50 [ 47.160471][ T880] f2fs_find_data_page+0x182/0x3f0 [ 47.165417][ T880] __f2fs_find_entry+0x57c/0xc90 [ 47.170190][ T880] ? asan.module_dtor+0x20/0x20 [ 47.174886][ T880] ? f2fs_find_target_dentry+0x10f0/0x10f0 [ 47.180524][ T880] f2fs_lookup+0x273/0xee0 [ 47.184772][ T880] ? f2fs_encrypted_symlink_getattr+0x40/0x40 [ 47.190670][ T880] ? _raw_spin_lock+0xa4/0x1b0 [ 47.195269][ T880] ? _raw_spin_trylock_bh+0x190/0x190 [ 47.200489][ T880] ? _raw_spin_unlock+0x49/0x60 [ 47.205167][ T880] ? d_alloc+0x18b/0x1c0 [ 47.209249][ T880] __lookup_hash+0x117/0x240 [ 47.213671][ T880] filename_create+0x202/0x750 [ 47.218277][ T880] ? kern_path_create+0x40/0x40 [ 47.222955][ T880] ? strncpy_from_user+0x1c0/0x300 [ 47.227906][ T880] do_mkdirat+0xcc/0x2c0 [ 47.231996][ T880] ? vfs_mkdir+0x690/0x690 [ 47.236241][ T880] do_syscall_64+0xca/0x1c0 [ 47.240580][ T880] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 47.246326][ T880] RIP: 0033:0x7f52b55d3f29 [ 47.250560][ T880] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 47.270013][ T880] RSP: 002b:00007f52b494e0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 47.278247][ T880] RAX: ffffffffffffffda RBX: 00007f52b570af80 RCX: 00007f52b55d3f29 [ 47.286050][ T880] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000140 [ 47.293861][ T880] RBP: 00007f52b5643074 R08: 0000000000000000 R09: 0000000000000000 [ 47.301685][ T880] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 47.309482][ T880] R13: 000000000000000b R14: 00007f52b570af80 R15: 00007ffc44488db8 [ 47.340180][ T104] asix 5-1:0.171 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 47.350344][ T104] asix: probe of 5-1:0.171 failed with error -71 [ 47.358150][ T104] usb 5-1: USB disconnect, device number 3 [ 47.384115][ T901] input: syz0 as /devices/virtual/input/input9 [ 47.470128][ T5] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 48.051397][ T5] usb 1-1: device descriptor read/64, error 18 [ 48.138219][ T23] kauditd_printk_skb: 165 callbacks suppressed [ 48.138231][ T23] audit: type=1326 audit(1718915943.650:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=920 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42324aff29 code=0x7ffc0000 [ 48.167885][ T23] audit: type=1326 audit(1718915943.650:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=920 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42324aff29 code=0x7ffc0000 [ 48.191752][ T23] audit: type=1326 audit(1718915943.660:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=920 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f42324aff29 code=0x7ffc0000 [ 48.216943][ T922] EXT4-fs (loop3): Test dummy encryption mode enabled [ 49.045020][ T23] audit: type=1326 audit(1718915943.690:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=920 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42324aff29 code=0x7ffc0000 [ 49.069619][ T922] EXT4-fs error (device loop3): ext4_ext_check_inode:540: inode #15: comm syz-executor.3: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 24833, max 4(4), depth 0(0) [ 49.070205][ T23] audit: type=1326 audit(1718915943.690:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=920 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42324aff29 code=0x7ffc0000 [ 49.112318][ T930] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 49.116917][ T23] audit: type=1326 audit(1718915943.690:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=920 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f42324aff29 code=0x7ffc0000 [ 49.121537][ T922] EXT4-fs (loop3): Remounting filesystem read-only [ 49.148425][ T23] audit: type=1326 audit(1718915943.710:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=920 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42324aff29 code=0x7ffc0000 [ 49.151243][ T922] EXT4-fs error (device loop3): ext4_orphan_get:1240: comm syz-executor.3: couldn't read orphan inode 15 (err -117) [ 49.179105][ T23] audit: type=1326 audit(1718915944.560:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=920 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f42324ad6a7 code=0x7ffc0000 [ 49.211352][ T922] EXT4-fs (loop3): mounted filesystem without journal. Opts: user_xattr,test_dummy_encryption,nombcache,jqfmt=vfsv0,lazytime,errors=remount-ro,auto_da_alloc, [ 49.227885][ T922] ext4 filesystem being mounted at /root/syzkaller-testdir2349503649/syzkaller.hHWUVw/22/file0 supports timestamps until 2038 (0x7fffffff) [ 49.298210][ T23] audit: type=1326 audit(1718915944.560:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=920 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4232473379 code=0x7ffc0000 [ 49.323740][ T23] audit: type=1326 audit(1718915944.560:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=920 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f42324ad6a7 code=0x7ffc0000 [ 49.617023][ T5] usb 1-1: device descriptor read/64, error 18 [ 49.920035][ T401] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 50.539747][ T946] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 50.548073][ T946] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 50.595897][ T946] F2FS-fs (loop0): Found nat_bits in checkpoint [ 50.640423][ T401] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 50.644169][ T946] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 50.660039][ T401] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 50.660818][ T946] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 50.669629][ T401] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 50.686906][ T401] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.705987][ T401] usb 3-1: config 0 descriptor?? [ 51.370667][ T942] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 51.383355][ T942] device erspan0 entered promiscuous mode [ 51.458902][ T984] [ 51.461239][ T5] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 51.468984][ T984] ********************************************************** [ 51.476428][ T984] ** NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE ** [ 51.483777][ T984] ** ** [ 51.491632][ T984] ** trace_printk() being used. Allocating extra memory. ** [ 51.498988][ T984] ** ** [ 51.506329][ T984] ** This means that this is a DEBUG kernel and it is ** [ 51.513994][ T984] ** unsafe for production use. ** [ 51.525010][ T984] ** ** [ 51.532275][ T984] ** If you see this message and you are not debugging ** [ 51.539542][ T984] ** the kernel, report this immediately to your vendor! ** [ 51.546764][ T984] ** ** [ 51.554049][ T984] ** NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE ** [ 51.561221][ T984] ********************************************************** [ 52.368966][ T990] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 52.380321][ T401] usbhid 3-1:0.0: can't add hid device: -71 [ 52.386117][ T401] usbhid: probe of 3-1:0.0 failed with error -71 [ 52.392236][ T5] usb 1-1: Using ep0 maxpacket: 32 [ 52.417982][ T401] usb 3-1: USB disconnect, device number 2 [ 52.900460][ T5] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 52.914459][ T5] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 53.101107][ T5] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 53.110624][ T5] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.169072][ T1006] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=1006 comm=syz-executor.1 [ 53.190182][ T5] usb 1-1: can't set config #4, error -71 [ 53.196899][ T5] usb 1-1: USB disconnect, device number 4 [ 53.525489][ T23] kauditd_printk_skb: 228 callbacks suppressed [ 53.525502][ T23] audit: type=1326 audit(1718915949.040:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1003 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52b55d3f29 code=0x7ffc0000 [ 53.827001][ T23] audit: type=1326 audit(1718915949.040:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1003 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52b55d3f29 code=0x7ffc0000 [ 54.781658][ T1031] F2FS-fs (loop4): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 54.789188][ T1031] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 54.799028][ T1031] F2FS-fs (loop4): invalid crc value [ 54.806704][ T1031] F2FS-fs (loop4): Found nat_bits in checkpoint [ 55.330142][ T393] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 55.396344][ T1031] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 55.423236][ T1031] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 55.474633][ T1031] attempt to access beyond end of device [ 55.474633][ T1031] loop4: rw=2049, want=45104, limit=40427 [ 55.486178][ T23] audit: type=1400 audit(1718915951.000:661): avc: denied { ioctl } for pid=1030 comm="syz-executor.4" path="/root/syzkaller-testdir1888820423/syzkaller.FWL8nq/31/file0/bus" dev="loop4" ino=10 ioctlcmd=0x9418 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 57.078083][ T393] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 57.093189][ T393] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 57.317797][ T393] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 57.327339][ T393] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.405890][ T393] usb 4-1: config 0 descriptor?? [ 57.419760][ T372] attempt to access beyond end of device [ 57.419760][ T372] loop4: rw=2049, want=45112, limit=40427 [ 57.621119][ T1097] EXT4-fs (loop2): Ignoring removed bh option [ 57.627251][ T1097] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 57.634443][ T1097] EXT4-fs (loop2): Ignoring removed nobh option [ 57.656262][ T1097] EXT4-fs (loop2): mounted filesystem without journal. Opts: abort,bh,nomblk_io_submit,stripe=0x000000000004ffff,norecovery,minixdf,nobh,,errors=continue [ 57.675209][ T23] audit: type=1400 audit(1718915953.190:662): avc: denied { write } for pid=1096 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 57.697433][ T23] audit: type=1326 audit(1718915953.220:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1092 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f818181cf29 code=0x7ffc0000 [ 57.721153][ T1097] EXT4-fs error (device loop2): ext4_remount:5517: Abort forced by user [ 57.729277][ T1097] EXT4-fs (loop2): Remounting filesystem read-only [ 57.772579][ T23] audit: type=1326 audit(1718915953.220:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1092 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f818181cf29 code=0x7ffc0000 [ 57.797193][ T23] audit: type=1400 audit(1718915953.310:665): avc: denied { create } for pid=1096 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 57.818187][ T23] audit: type=1400 audit(1718915953.340:666): avc: denied { write } for pid=1096 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 57.839273][ T1097] EXT4-fs error (device loop2): empty_inline_dir:1832: inode #12: block 5: comm syz-executor.2: bad entry in directory: directory entry overrun - offset=4, inode=13, rec_len=7952, size=60 fake=0 [ 57.860211][ T1097] EXT4-fs warning (device loop2): empty_inline_dir:1839: bad inline directory (dir #12) - inode 13, rec_len 7952, name_len 0inline size 60 [ 57.868373][ T23] audit: type=1400 audit(1718915953.340:667): avc: denied { nlmsg_read } for pid=1096 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 57.874911][ T1043] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 57.920298][ T23] audit: type=1400 audit(1718915953.360:668): avc: denied { remove_name } for pid=1096 comm="syz-executor.2" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 57.943169][ T1043] device erspan0 entered promiscuous mode [ 58.180038][ T1079] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 58.260040][ T1082] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 58.500054][ T1082] usb 5-1: Using ep0 maxpacket: 8 [ 59.000156][ T1079] usb 3-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 59.002905][ T1082] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 59.161212][ T1122] EXT4-fs (loop1): Mount option "noacl" will be removed by 3.5 [ 59.161212][ T1122] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 59.161212][ T1122] [ 59.170244][ T1079] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 59.178790][ T1122] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 59.187773][ T1079] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.194862][ T1082] usb 5-1: New USB device found, idVendor=0af0, idProduct=8201, bcdDevice=34.8e [ 59.202738][ T1079] usb 3-1: Product: syz [ 59.211926][ T1082] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.220134][ T1079] usb 3-1: Manufacturer: syz [ 59.228766][ T1082] usb 5-1: Product: syz [ 59.230041][ T1079] usb 3-1: SerialNumber: syz [ 59.240483][ T1122] EXT4-fs (loop1): mounted filesystem without journal. Opts: user_xattr,noacl,sysvgroups,norecovery,errors=continue,nomblk_io_submit,quota,noauto_da_alloc,lazytime,,errors=continue [ 59.244285][ T1082] usb 5-1: Manufacturer: syz [ 59.264807][ T393] usbhid 4-1:0.0: can't add hid device: -71 [ 59.270918][ T393] usbhid: probe of 4-1:0.0 failed with error -71 [ 59.278010][ T393] usb 4-1: USB disconnect, device number 2 [ 59.284685][ T1082] usb 5-1: SerialNumber: syz [ 59.290296][ T1082] usb 5-1: config 0 descriptor?? [ 59.566395][ T1129] F2FS-fs (loop3): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 59.574382][ T1129] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 59.592916][ T1129] F2FS-fs (loop3): invalid crc value [ 59.665562][ T1129] F2FS-fs (loop3): Found nat_bits in checkpoint [ 59.753613][ T124] usb 5-1: USB disconnect, device number 4 [ 59.791439][ T1129] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 59.798360][ T1129] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 59.819963][ T1129] attempt to access beyond end of device [ 59.819963][ T1129] loop3: rw=2049, want=45104, limit=40427 [ 59.990535][ T1079] cdc_ncm 3-1:1.0: failed GET_NTB_PARAMETERS [ 59.996619][ T1079] cdc_ncm 3-1:1.0: bind() failure [ 60.064074][ T1079] cdc_ncm 3-1:1.1: bind() failure [ 60.380260][ T373] attempt to access beyond end of device [ 60.380260][ T373] loop3: rw=2049, want=45112, limit=40427 [ 60.424484][ T23] kauditd_printk_skb: 1 callbacks suppressed [ 60.424496][ T23] audit: type=1400 audit(1718915955.940:670): avc: denied { create } for pid=1147 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 60.486892][ T23] audit: type=1400 audit(1718915955.970:671): avc: denied { setopt } for pid=1147 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 60.492517][ T1151] FAT-fs (loop4): Directory bread(block 64) failed [ 60.520075][ T1151] FAT-fs (loop4): Directory bread(block 65) failed [ 60.526446][ T1151] FAT-fs (loop4): Directory bread(block 66) failed [ 60.550140][ T23] audit: type=1400 audit(1718915955.970:672): avc: denied { bind } for pid=1147 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 60.564973][ T1151] FAT-fs (loop4): Directory bread(block 67) failed [ 60.581630][ T23] audit: type=1400 audit(1718915956.070:673): avc: denied { write } for pid=1147 comm="syz-executor.0" name="kvm" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 60.604609][ T1151] FAT-fs (loop4): Directory bread(block 68) failed [ 60.620056][ T1151] FAT-fs (loop4): Directory bread(block 69) failed [ 60.636596][ T1151] FAT-fs (loop4): Directory bread(block 70) failed [ 60.637390][ T23] audit: type=1400 audit(1718915956.150:674): avc: denied { read } for pid=1159 comm="syz-executor.0" name="ppp" dev="devtmpfs" ino=155 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 60.653227][ T1151] FAT-fs (loop4): Directory bread(block 71) failed [ 60.665947][ T23] audit: type=1400 audit(1718915956.150:675): avc: denied { read } for pid=1159 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 60.693031][ T1151] FAT-fs (loop4): Directory bread(block 72) failed [ 60.699362][ T1151] FAT-fs (loop4): Directory bread(block 73) failed [ 60.824468][ T23] audit: type=1326 audit(1718915956.340:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1156 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb98be1af29 code=0x7ffc0000 [ 60.891311][ T23] audit: type=1326 audit(1718915956.370:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1156 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb98be1af29 code=0x7ffc0000 [ 61.344964][ T1082] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 61.425885][ T393] usb 3-1: USB disconnect, device number 3 [ 61.810136][ T1082] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 61.821343][ T1082] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 61.831206][ T1082] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 61.842727][ T1082] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.851784][ T1082] usb 5-1: config 0 descriptor?? [ 62.439143][ T23] audit: type=1400 audit(1718915957.950:678): avc: denied { create } for pid=1197 comm="syz-executor.3" dev="anon_inodefs" ino=14892 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 62.471387][ T23] audit: type=1400 audit(1718915957.950:679): avc: denied { ioctl } for pid=1197 comm="syz-executor.3" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=14892 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 62.662250][ T1169] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 62.686223][ T1169] device erspan0 entered promiscuous mode [ 62.789044][ T1191] F2FS-fs (loop0): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 62.796940][ T1191] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 62.809809][ T1191] F2FS-fs (loop0): invalid crc value [ 62.817578][ T1191] F2FS-fs (loop0): Found nat_bits in checkpoint [ 62.851338][ T1220] EXT4-fs (loop2): Ignoring removed bh option [ 62.856734][ T1191] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 62.857265][ T1220] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 62.857310][ T1220] EXT4-fs (loop2): Ignoring removed nobh option [ 62.864295][ T1191] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 62.882195][ T1220] EXT4-fs (loop2): mounted filesystem without journal. Opts: abort,bh,nomblk_io_submit,stripe=0x000000000004ffff,norecovery,minixdf,nobh,,errors=continue [ 62.899446][ T1191] attempt to access beyond end of device [ 62.899446][ T1191] loop0: rw=2049, want=45104, limit=40427 [ 62.914611][ T1220] EXT4-fs error (device loop2): ext4_remount:5517: Abort forced by user [ 62.924364][ T1220] EXT4-fs (loop2): Remounting filesystem read-only [ 62.936607][ T1220] EXT4-fs error (device loop2): empty_inline_dir:1832: inode #12: block 5: comm syz-executor.2: bad entry in directory: directory entry overrun - offset=4, inode=13, rec_len=7952, size=60 fake=0 [ 62.955798][ T1220] EXT4-fs warning (device loop2): empty_inline_dir:1839: bad inline directory (dir #12) - inode 13, rec_len 7952, name_len 0inline size 60 [ 63.154482][ T393] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 63.331212][ T374] attempt to access beyond end of device [ 63.331212][ T374] loop0: rw=2049, want=45112, limit=40427 [ 63.350042][ T124] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 63.560153][ T393] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 63.570904][ T393] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 63.580416][ T393] usb 2-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 63.589237][ T393] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.610265][ T393] usb 2-1: config 0 descriptor?? [ 63.702308][ T1229] erofs: (device loop3): erofs_parse_options: Unrecognized mount option "" or missing value [ 63.730164][ T124] usb 3-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 63.822281][ T1229] overlayfs: './bus' not a directory [ 63.930192][ T124] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 63.939184][ T124] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.947031][ T124] usb 3-1: Product: syz [ 63.951064][ T124] usb 3-1: Manufacturer: syz [ 63.955548][ T124] usb 3-1: SerialNumber: syz [ 64.200143][ T1082] usbhid 5-1:0.0: can't add hid device: -71 [ 64.206007][ T1082] usbhid: probe of 5-1:0.0 failed with error -71 [ 64.213187][ T1082] usb 5-1: USB disconnect, device number 5 [ 64.260043][ T396] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 64.530155][ T393] usbhid 2-1:0.0: can't add hid device: -71 [ 64.536002][ T393] usbhid: probe of 2-1:0.0 failed with error -71 [ 64.542983][ T393] usb 2-1: USB disconnect, device number 2 [ 64.700065][ T396] usb 1-1: device descriptor read/64, error 18 [ 64.721286][ T1249] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 64.730181][ T124] cdc_ncm 3-1:1.0: failed GET_NTB_PARAMETERS [ 64.736223][ T124] cdc_ncm 3-1:1.0: bind() failure [ 64.738481][ T1249] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 64.742750][ T124] cdc_ncm 3-1:1.1: bind() failure [ 64.752095][ T1249] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 65.180097][ T396] usb 1-1: device descriptor read/64, error 18 [ 65.490566][ T396] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 65.497936][ T1082] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 65.576924][ T1262] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 65.584593][ T1262] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 65.667120][ T1262] F2FS-fs (loop4): invalid crc value [ 65.784976][ T1262] F2FS-fs (loop4): Found nat_bits in checkpoint [ 65.820319][ T1262] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 65.827218][ T1262] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 65.930075][ T396] usb 1-1: device descriptor read/64, error 18 [ 66.020139][ T1082] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 66.031478][ T1082] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 66.040995][ T1082] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 66.049812][ T1082] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.058747][ T1082] usb 4-1: config 0 descriptor?? [ 66.141467][ T524] usb 3-1: USB disconnect, device number 4 [ 66.182297][ T23] kauditd_printk_skb: 9 callbacks suppressed [ 66.182309][ T23] audit: type=1400 audit(1718915961.700:689): avc: denied { ioctl } for pid=1261 comm="syz-executor.4" path="/dev/binderfs/binder1" dev="binder" ino=5 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 66.320075][ T396] usb 1-1: device descriptor read/64, error 18 [ 66.374488][ T24] cfg80211: failed to load regulatory.db [ 66.668479][ T23] audit: type=1400 audit(1718915962.180:690): avc: denied { create } for pid=1268 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 66.700318][ T1269] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 66.857694][ T396] usb usb1-port1: attempt power cycle [ 66.928247][ T1294] F2FS-fs (loop4): Mismatch start address, segment0(0) cp_blkaddr(512) [ 66.936624][ T1294] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 66.957208][ T1294] F2FS-fs (loop4): Ignore s_resuid=0, s_resgid=60929 w/o reserve_root [ 67.026708][ T1294] F2FS-fs (loop4): Found nat_bits in checkpoint [ 67.221056][ T1294] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 67.229486][ T1294] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 68.976606][ T23] audit: type=1400 audit(1718915964.490:691): avc: denied { read } for pid=1329 comm="syz-executor.0" name="loop-control" dev="devtmpfs" ino=138 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 69.001161][ T1082] usbhid 4-1:0.0: can't add hid device: -71 [ 69.006941][ T1082] usbhid: probe of 4-1:0.0 failed with error -71 [ 69.028489][ T1082] usb 4-1: USB disconnect, device number 3 [ 69.039632][ T23] audit: type=1400 audit(1718915964.490:692): avc: denied { open } for pid=1329 comm="syz-executor.0" path="/dev/loop-control" dev="devtmpfs" ino=138 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 69.112688][ T1341] request_module fs-nfsd succeeded, but still no fs? [ 69.126036][ T23] audit: type=1400 audit(1718915964.640:693): avc: denied { name_bind } for pid=1329 comm="syz-executor.0" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 69.580033][ T396] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 70.110029][ T396] usb 3-1: Using ep0 maxpacket: 32 [ 70.260119][ T396] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 70.537093][ T396] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 70.547325][ T396] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 70.556216][ T396] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.580958][ T396] usb 3-1: config 0 descriptor?? [ 70.620514][ T396] hub 3-1:0.0: USB hub found [ 70.684036][ T1349] F2FS-fs (loop1): Mismatch start address, segment0(0) cp_blkaddr(512) [ 70.750111][ T1349] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 70.764233][ T1349] F2FS-fs (loop1): Ignore s_resuid=0, s_resgid=60929 w/o reserve_root [ 70.776801][ T1349] F2FS-fs (loop1): Found nat_bits in checkpoint [ 70.822192][ T1349] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 70.829058][ T1349] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 70.864888][ T1341] F2FS-fs (loop3): Invalid log sectorsize (67108873) [ 70.878960][ T1341] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 71.116852][ T23] audit: type=1400 audit(1718915966.380:694): avc: denied { mounton } for pid=1330 comm="syz-executor.3" path="/root/syzkaller-testdir2349503649/syzkaller.hHWUVw/47/file0" dev="sda1" ino=1952 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=fifo_file permissive=1 [ 71.146934][ T1341] F2FS-fs (loop3): Unrecognized mount option "/dev/zero" or missing value [ 71.151250][ T396] hub 3-1:0.0: 1 port detected [ 71.928469][ T23] audit: type=1400 audit(1718915967.440:695): avc: denied { ioctl } for pid=1330 comm="syz-executor.3" path="socket:[15229]" dev="sockfs" ino=15229 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 71.969077][ T1381] syz-executor.1 uses obsolete (PF_INET,SOCK_PACKET) [ 71.975655][ T1327] hub 3-1:0.0: activate --> -90 [ 71.977204][ T1381] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 72.025519][ T1341] loop3: unable to read partition table [ 72.031124][ T1341] loop3: partition table beyond EOD, truncated [ 72.037095][ T1341] loop_reread_partitions: partition scan of loop3 () failed (rc=-5) [ 72.239317][ T524] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 72.462275][ T1390] F2FS-fs (loop1): Insane cp_payload (553648128 > 510) [ 72.469115][ T1390] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 72.477404][ T1390] F2FS-fs (loop1): Unrecognized mount option "active_logive_logs=4" or missing value [ 72.530082][ T524] usb 1-1: Using ep0 maxpacket: 8 [ 72.650364][ T524] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 72.710057][ T23] audit: type=1400 audit(1718915968.220:696): avc: denied { mounton } for pid=1389 comm="syz-executor.1" path="/root/syzkaller-testdir3437309655/syzkaller.c5DAp1/63/file0" dev="tmpfs" ino=15798 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 72.740461][ T1390] fuse: Unknown parameter 'roo' [ 72.900116][ T524] usb 1-1: New USB device found, idVendor=0af0, idProduct=8201, bcdDevice=34.8e [ 72.919164][ T524] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.927046][ T524] usb 1-1: Product: syz [ 72.931013][ T524] usb 1-1: Manufacturer: syz [ 72.935391][ T524] usb 1-1: SerialNumber: syz [ 72.941383][ T524] usb 1-1: config 0 descriptor?? [ 73.102025][ T1405] F2FS-fs (loop1): Insane cp_payload (553648128 > 510) [ 73.108811][ T1405] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 73.117325][ T1405] F2FS-fs (loop1): Unrecognized mount option "subj_user=!/:/\-" or missing value [ 73.155011][ T524] usb 3-1: USB disconnect, device number 5 [ 73.170049][ T1327] hub 3-1:0.0: hub_ext_port_status failed (err = -71) [ 73.192580][ T124] usb 1-1: USB disconnect, device number 8 [ 73.304799][ T1405] fuse: Unknown parameter 'roo' [ 74.023014][ T23] audit: type=1400 audit(1718915969.540:697): avc: denied { bind } for pid=1442 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 74.044120][ T23] audit: type=1400 audit(1718915969.540:698): avc: denied { setopt } for pid=1442 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 74.066537][ T23] audit: type=1400 audit(1718915969.540:699): avc: denied { write } for pid=1442 comm="syz-executor.2" path="socket:[15866]" dev="sockfs" ino=15866 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 74.248128][ T23] audit: type=1326 audit(1718915969.760:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1447 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7febc4dd0f29 code=0x0 [ 74.310056][ T1327] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 74.680148][ T1327] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 74.710041][ T1327] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 74.719703][ T1327] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 74.750066][ T1327] usb 3-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.10 [ 74.758914][ T1327] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.783603][ T1327] usb 3-1: config 0 descriptor?? [ 75.050295][ T1438] F2FS-fs (loop4): Invalid log sectorsize (67108873) [ 75.057179][ T1438] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 75.112198][ T1438] F2FS-fs (loop4): Unrecognized mount option "/dev/zero" or missing value [ 75.141145][ T23] audit: type=1400 audit(1718915970.660:701): avc: denied { create } for pid=1463 comm="syz-executor.3" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=blk_file permissive=1 [ 75.161974][ T23] audit: type=1400 audit(1718915970.660:702): avc: denied { read } for pid=1463 comm="syz-executor.3" name="file2" dev="sda1" ino=1966 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=blk_file permissive=1 [ 75.184286][ T23] audit: type=1400 audit(1718915970.660:703): avc: denied { open } for pid=1463 comm="syz-executor.3" path="/root/syzkaller-testdir2349503649/syzkaller.hHWUVw/52/file2" dev="sda1" ino=1966 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=blk_file permissive=1 [ 75.261478][ T1327] prodikeys 0003:041E:2801.0002: unexpected long global item [ 75.266082][ T23] audit: type=1400 audit(1718915970.780:704): avc: denied { unlink } for pid=373 comm="syz-executor.3" name="file2" dev="sda1" ino=1966 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=blk_file permissive=1 [ 75.269758][ T1327] prodikeys 0003:041E:2801.0002: hid parse failed [ 75.308471][ T1327] prodikeys: probe of 0003:041E:2801.0002 failed with error -22 [ 75.465077][ T394] usb 3-1: USB disconnect, device number 6 [ 76.128149][ T1432] loop4: unable to read partition table [ 76.133856][ T1432] loop4: partition table beyond EOD, truncated [ 76.139891][ T1432] loop_reread_partitions: partition scan of loop4 () failed (rc=-5) [ 76.329114][ T1432] syz-executor.4 (1432) used greatest stack depth: 21144 bytes left [ 76.392383][ T1498] netlink: 'syz-executor.4': attribute type 6 has an invalid length. [ 76.803345][ T1520] netlink: 'syz-executor.2': attribute type 13 has an invalid length. [ 76.818962][ T1520] gretap1: activation failed [ 76.823454][ T1520] device gretap1 entered promiscuous mode [ 76.830621][ T1510] F2FS-fs (loop4): Found nat_bits in checkpoint [ 76.832278][ T1520] process 'syz-executor.2' launched './file2' with NULL argv: empty string added [ 76.912528][ T1510] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 76.938335][ T23] kauditd_printk_skb: 2 callbacks suppressed [ 76.938357][ T23] audit: type=1400 audit(1718915972.450:707): avc: denied { write } for pid=1528 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 76.945668][ T372] attempt to access beyond end of device [ 76.945668][ T372] loop4: rw=2049, want=45104, limit=40427 [ 76.966602][ T23] audit: type=1400 audit(1718915972.450:708): avc: denied { read } for pid=1528 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 77.220026][ T1082] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 77.470026][ T1082] usb 2-1: Using ep0 maxpacket: 16 [ 77.590067][ T1082] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 77.599955][ T1082] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 24 [ 77.690163][ T1082] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 77.705704][ T1082] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 77.723461][ T1082] usb 2-1: SerialNumber: syz [ 78.250892][ T124] usb 2-1: USB disconnect, device number 3 [ 78.317546][ T1569] netlink: 'syz-executor.0': attribute type 13 has an invalid length. [ 78.328258][ T1569] gretap1: activation failed [ 78.332829][ T1569] device gretap1 entered promiscuous mode [ 78.411755][ T1572] EXT4-fs (loop0): Test dummy encryption mode enabled [ 78.418526][ T1572] EXT4-fs (loop0): Ignoring removed orlov option [ 78.425059][ T1572] EXT4-fs (loop0): Unsupported blocksize for fs encryption [ 78.525580][ T1572] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 78.534963][ T1572] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 78.542961][ T1572] xt_l2tp: invalid flags combination: 0 [ 78.681404][ T1578] EXT4-fs (loop0): Unrecognized mount option "obj_user=jqfmt=wfsv1" or missing value [ 78.933495][ T1550] F2FS-fs (loop4): Invalid log sectorsize (67108873) [ 78.954091][ T1550] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 78.982610][ T1550] F2FS-fs (loop4): Unrecognized mount option "/dev/zero" or missing value [ 79.225713][ T1578] F2FS-fs (loop0): Insane cp_payload (553648128 > 510) [ 79.225992][ T1584] F2FS-fs (loop1): Insane cp_payload (553648128 > 510) [ 79.239262][ T1584] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 79.241859][ T1578] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 79.247340][ T1584] F2FS-fs (loop1): Unrecognized mount option "active_logive_logs=4" or missing value [ 79.266668][ T1578] F2FS-fs (loop0): invalid crc value [ 79.273554][ T1578] F2FS-fs (loop0): Found nat_bits in checkpoint [ 79.318684][ T1578] F2FS-fs (loop0): Cannot turn on quotas: -2 on 1 [ 79.326000][ T1578] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 79.345315][ T1578] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 79.371999][ T23] audit: type=1400 audit(1718915974.890:709): avc: denied { create } for pid=1577 comm="syz-executor.0" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 79.404164][ T23] audit: type=1400 audit(1718915974.910:710): avc: denied { mounton } for pid=1577 comm="syz-executor.0" path="/root/syzkaller-testdir224767581/syzkaller.JOzfjg/48/file2/file0" dev="loop0" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 79.505621][ T1584] fuse: Unknown parameter 'roo' [ 79.675842][ T1549] loop4: unable to read partition table [ 79.683904][ T1549] loop4: partition table beyond EOD, truncated [ 79.689926][ T1549] loop_reread_partitions: partition scan of loop4 () failed (rc=-5) [ 79.700037][ T23] audit: type=1400 audit(1718915975.210:711): avc: denied { unmount } for pid=374 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 79.719938][ T374] attempt to access beyond end of device [ 79.719938][ T374] loop0: rw=524288, want=45072, limit=40427 [ 79.731459][ T374] attempt to access beyond end of device [ 79.731459][ T374] loop0: rw=0, want=45072, limit=40427 [ 79.782894][ T374] attempt to access beyond end of device [ 79.782894][ T374] loop0: rw=2049, want=45112, limit=40427 [ 79.911341][ T1611] netlink: 'syz-executor.2': attribute type 13 has an invalid length. [ 79.950880][ T1611] gretap2: activation failed [ 79.960017][ T1611] device gretap2 entered promiscuous mode [ 80.380364][ T124] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 80.717165][ T124] usb 5-1: Using ep0 maxpacket: 16 [ 80.774854][ T1635] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.157874][ T1635] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.165554][ T1635] device bridge_slave_0 entered promiscuous mode [ 81.206115][ T1635] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.213263][ T1635] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.221004][ T1635] device bridge_slave_1 entered promiscuous mode [ 81.230235][ T124] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 81.247040][ T124] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 24 [ 81.300841][ T1635] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.307685][ T1635] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.312341][ T1647] EXT4-fs (loop2): Ignoring removed orlov option [ 81.314842][ T1635] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.321098][ T1647] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 81.327732][ T1635] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.350308][ T124] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 81.369088][ T124] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 81.386976][ T124] usb 5-1: SerialNumber: syz [ 81.424047][ T1647] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue [ 81.445479][ T23] audit: type=1400 audit(1718915976.960:712): avc: denied { mount } for pid=1646 comm="syz-executor.2" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 81.624677][ T18] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.634525][ T18] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.654490][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 81.662731][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 81.672313][ T23] audit: type=1400 audit(1718915977.190:713): avc: denied { read } for pid=1646 comm="syz-executor.2" name="usbmon7" dev="devtmpfs" ino=9892 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 81.697127][ T23] audit: type=1400 audit(1718915977.190:714): avc: denied { open } for pid=1646 comm="syz-executor.2" path="/dev/usbmon7" dev="devtmpfs" ino=9892 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 81.725351][ T394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 81.734385][ T394] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 81.750931][ T394] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.757772][ T394] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.765676][ T394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 81.774326][ T394] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 81.782487][ T394] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.789312][ T394] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.801737][ T394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 81.809833][ T394] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 81.812793][ T435] usb 5-1: USB disconnect, device number 6 [ 81.817989][ T394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 81.903905][ T394] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 81.920874][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 81.929253][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 81.961560][ T394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 81.977956][ T394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 81.995172][ T394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 82.003851][ T394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 82.015767][ T403] device bridge_slave_1 left promiscuous mode [ 82.021942][ T403] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.029262][ T403] device bridge_slave_0 left promiscuous mode [ 82.035437][ T403] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.168057][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 82.176639][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 82.194968][ T394] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 82.204057][ T394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 82.224398][ T23] audit: type=1400 audit(1718915977.740:715): avc: denied { mounton } for pid=1635 comm="syz-executor.0" path="/dev/binderfs" dev="devtmpfs" ino=11081 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 82.351666][ T1667] EXT4-fs (loop0): Unrecognized mount option "obj_user=jqfmt=wfsv1" or missing value [ 82.460802][ T1661] F2FS-fs (loop1): Invalid log sectorsize (67108873) [ 82.471737][ T1661] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 82.481352][ T1661] F2FS-fs (loop1): Unrecognized mount option "/dev/zero" or missing value [ 82.501291][ T23] audit: type=1400 audit(1718915978.010:716): avc: denied { block_suspend } for pid=1678 comm="syz-executor.2" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 82.906975][ T23] audit: type=1400 audit(1718915978.420:717): avc: denied { getopt } for pid=1678 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 83.012522][ T1667] F2FS-fs (loop0): Insane cp_payload (553648128 > 510) [ 83.019322][ T1667] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 83.062011][ T1667] F2FS-fs (loop0): invalid crc value [ 83.100460][ T1667] F2FS-fs (loop0): Found nat_bits in checkpoint [ 83.153169][ T1667] F2FS-fs (loop0): Cannot turn on quotas: -2 on 1 [ 83.160105][ T1667] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 83.167005][ T1667] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 83.196010][ T1658] loop1: unable to read partition table [ 83.204505][ T1658] loop1: partition table beyond EOD, truncated [ 83.216262][ T1658] loop_reread_partitions: partition scan of loop1 () failed (rc=-5) [ 83.825467][ T23] audit: type=1400 audit(1718915979.340:718): avc: denied { ioctl } for pid=1698 comm="syz-executor.1" path="socket:[16355]" dev="sockfs" ino=16355 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 83.839001][ T1635] attempt to access beyond end of device [ 83.839001][ T1635] loop0: rw=524288, want=45072, limit=40427 [ 83.919345][ T1635] attempt to access beyond end of device [ 83.919345][ T1635] loop0: rw=0, want=45072, limit=40427 [ 84.043449][ T1635] attempt to access beyond end of device [ 84.043449][ T1635] loop0: rw=2049, want=45112, limit=40427 [ 84.059135][ T1705] device syzkaller0 entered promiscuous mode [ 84.067350][ T1715] device batadv_slave_1 entered promiscuous mode [ 84.131805][ T23] audit: type=1400 audit(1718915979.650:719): avc: denied { write } for pid=1712 comm="syz-executor.3" path="socket:[17035]" dev="sockfs" ino=17035 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 84.360274][ T524] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 84.374548][ T1635] syz-executor.0 (1635) used greatest stack depth: 20760 bytes left [ 84.610044][ T524] usb 3-1: Using ep0 maxpacket: 16 [ 84.730091][ T524] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 84.740064][ T524] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 24 [ 84.789675][ T1712] device batadv_slave_1 left promiscuous mode [ 84.830228][ T524] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 84.839080][ T524] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 84.846987][ T524] usb 3-1: SerialNumber: syz [ 84.930259][ T403] device bridge_slave_1 left promiscuous mode [ 84.936200][ T403] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.943393][ T403] device bridge_slave_0 left promiscuous mode [ 84.949296][ T403] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.096906][ T524] usb 3-1: USB disconnect, device number 7 [ 88.737956][ T1724] SELinux: duplicate or incompatible mount options [ 88.747384][ T1724] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 89.024856][ T1724] EXT4-fs (loop1): Unsupported blocksize for fs encryption [ 89.045001][ T1733] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.052077][ T1733] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.059611][ T1733] device bridge_slave_0 entered promiscuous mode [ 89.066645][ T1733] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.073776][ T1733] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.081347][ T1733] device bridge_slave_1 entered promiscuous mode [ 89.105886][ T1082] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 89.166570][ T1733] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.173443][ T1733] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.180943][ T1733] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.187771][ T1733] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.211372][ T23] audit: type=1400 audit(1718915984.730:720): avc: denied { ioctl } for pid=1720 comm="syz-executor.1" path="socket:[16380]" dev="sockfs" ino=16380 ioctlcmd=0x943c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 89.252632][ T124] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.260369][ T124] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.267784][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 89.275332][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 89.291581][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 89.300022][ T524] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.306846][ T524] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.314339][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 89.322770][ T524] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.329626][ T524] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.357824][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 89.360015][ T1082] usb 4-1: Using ep0 maxpacket: 32 [ 89.366007][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 89.409095][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 89.419685][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 89.441228][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 89.451857][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 89.473339][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 89.490109][ T1082] usb 4-1: config 0 has an invalid interface descriptor of length 8, skipping [ 89.499002][ T1082] usb 4-1: config 0 has an invalid descriptor of length 15, skipping remainder of the config [ 89.509116][ T1082] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 89.517990][ T1082] usb 4-1: New USB device found, idVendor=05ac, idProduct=024f, bcdDevice= 0.00 [ 89.542923][ T1082] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.617573][ T1082] usb 4-1: config 0 descriptor?? [ 89.691223][ T1755] EXT4-fs (loop1): Unrecognized mount option "obj_user=jqfmt=wfsv1" or missing value [ 89.862678][ T23] audit: type=1400 audit(1718915985.380:721): avc: denied { listen } for pid=1723 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 89.910031][ T23] audit: type=1400 audit(1718915985.390:722): avc: denied { ioctl } for pid=1723 comm="syz-executor.3" path="socket:[17047]" dev="sockfs" ino=17047 ioctlcmd=0xae80 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 89.980022][ T23] audit: type=1400 audit(1718915985.390:723): avc: denied { read } for pid=1723 comm="syz-executor.3" path="socket:[17047]" dev="sockfs" ino=17047 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 90.431569][ T1755] F2FS-fs (loop1): Insane cp_payload (553648128 > 510) [ 90.441596][ T1755] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 90.537558][ T1755] F2FS-fs (loop1): invalid crc value [ 90.554105][ T1755] F2FS-fs (loop1): Found nat_bits in checkpoint [ 90.762769][ T1755] F2FS-fs (loop1): Cannot turn on quotas: -2 on 1 [ 90.789137][ T1755] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 90.801560][ T1755] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 90.840918][ T1749] F2FS-fs (loop2): Invalid log sectorsize (67108873) [ 90.847439][ T1749] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 90.855847][ T1749] F2FS-fs (loop2): Unrecognized mount option "/dev/zero" or missing value [ 91.127397][ T375] attempt to access beyond end of device [ 91.127397][ T375] loop1: rw=524288, want=45072, limit=40427 [ 91.153808][ T375] attempt to access beyond end of device [ 91.153808][ T375] loop1: rw=0, want=45072, limit=40427 [ 91.168394][ T375] attempt to access beyond end of device [ 91.168394][ T375] loop1: rw=2049, want=45112, limit=40427 [ 91.467818][ T1744] loop2: unable to read partition table [ 91.473498][ T1744] loop2: partition table beyond EOD, truncated [ 91.479521][ T1744] loop_reread_partitions: partition scan of loop2 () failed (rc=-5) [ 91.653444][ T1792] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.660531][ T1792] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.668156][ T1792] device bridge_slave_0 entered promiscuous mode [ 91.670403][ T1799] EXT4-fs (loop0): can't mount with journal_async_commit, fs mounted w/o journal [ 91.675687][ T1792] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.690352][ T1792] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.697895][ T1792] device bridge_slave_1 entered promiscuous mode [ 91.720060][ T1082] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 91.741267][ T1327] usb 4-1: USB disconnect, device number 4 [ 91.910018][ T18] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 91.980729][ T1792] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.987586][ T1792] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.994755][ T1792] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.001590][ T1792] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.036240][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 92.044024][ T124] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.052765][ T124] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.129951][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 92.130063][ T1082] usb 5-1: Using ep0 maxpacket: 16 [ 92.138536][ T124] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.149670][ T124] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.160333][ T1327] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 92.168507][ T1327] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.175437][ T1327] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.180257][ T18] usb 3-1: Using ep0 maxpacket: 8 [ 92.348300][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 92.359791][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 92.368171][ T18] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 92.434386][ T1327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 92.442700][ T1327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 92.451379][ T1327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 92.459085][ T1327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 92.474752][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 92.482962][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 92.500378][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 92.508875][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 92.525159][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 92.533234][ T18] usb 3-1: New USB device found, idVendor=0af0, idProduct=8201, bcdDevice=34.8e [ 92.544451][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 92.547676][ T1082] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 92.562249][ T18] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.562259][ T18] usb 3-1: Product: syz [ 92.562274][ T18] usb 3-1: Manufacturer: syz [ 92.570489][ T1082] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 24 [ 92.576966][ T18] usb 3-1: SerialNumber: syz [ 92.598220][ T18] usb 3-1: config 0 descriptor?? [ 92.630529][ T9] device bridge_slave_1 left promiscuous mode [ 92.880239][ T1082] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 92.891943][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.911971][ T1082] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 92.919947][ T1082] usb 5-1: SerialNumber: syz [ 92.974073][ T9] device bridge_slave_0 left promiscuous mode [ 92.980179][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.093931][ T1082] usb 3-1: USB disconnect, device number 8 [ 93.196138][ T1327] usb 5-1: USB disconnect, device number 7 [ 93.713733][ T1836] device batadv_slave_1 entered promiscuous mode [ 94.313046][ T1858] EXT4-fs (loop3): can't mount with journal_async_commit, fs mounted w/o journal [ 94.560970][ T1835] device batadv_slave_1 left promiscuous mode [ 95.424995][ T1874] xt_TCPMSS: Only works on TCP SYN packets [ 95.432744][ T23] audit: type=1400 audit(1718915990.950:724): avc: denied { name_bind } for pid=1871 comm="syz-executor.2" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 95.950041][ T18] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 95.957373][ T124] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 96.040071][ T394] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 96.050039][ T524] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 96.200042][ T124] usb 3-1: Using ep0 maxpacket: 8 [ 96.204937][ T18] usb 5-1: Using ep0 maxpacket: 16 [ 96.320232][ T124] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 96.330224][ T18] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 96.340264][ T18] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 24 [ 96.400087][ T394] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 96.410281][ T524] usb 2-1: config 0 has an invalid interface number: 248 but max is 1 [ 96.418345][ T524] usb 2-1: config 0 has an invalid interface number: 247 but max is 1 [ 96.426578][ T394] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 3 [ 96.435587][ T18] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 96.444431][ T524] usb 2-1: config 0 has no interface number 0 [ 96.450362][ T18] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 96.458357][ T524] usb 2-1: config 0 has no interface number 1 [ 96.464319][ T18] usb 5-1: SerialNumber: syz [ 96.468842][ T524] usb 2-1: config 0 interface 247 has no altsetting 0 [ 96.500163][ T124] usb 3-1: New USB device found, idVendor=0af0, idProduct=8201, bcdDevice=34.8e [ 96.509063][ T124] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.554393][ T124] usb 3-1: Product: syz [ 96.558393][ T124] usb 3-1: Manufacturer: syz [ 96.562836][ T124] usb 3-1: SerialNumber: syz [ 96.568214][ T124] usb 3-1: config 0 descriptor?? [ 96.650211][ T394] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 96.659434][ T394] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.667167][ T394] usb 4-1: Product: syz [ 96.671251][ T524] usb 2-1: New USB device found, idVendor=050d, idProduct=1003, bcdDevice=b5.09 [ 96.680108][ T394] usb 4-1: Manufacturer: syz [ 96.684522][ T524] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.692331][ T394] usb 4-1: SerialNumber: syz [ 96.697167][ T524] usb 2-1: Product: syz [ 96.701159][ T524] usb 2-1: Manufacturer: syz [ 96.705545][ T524] usb 2-1: SerialNumber: syz [ 96.710219][ T394] usb 4-1: config 0 descriptor?? [ 96.715793][ T524] usb 2-1: config 0 descriptor?? [ 96.722956][ T124] usb 5-1: USB disconnect, device number 8 [ 96.811560][ T394] usb 3-1: USB disconnect, device number 9 [ 96.951170][ T1893] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 96.965104][ T124] usb 4-1: USB disconnect, device number 5 [ 96.975916][ T1887] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 97.061838][ T1887] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 97.070676][ T1887] ext4 filesystem being mounted at /root/syzkaller-testdir3265663135/syzkaller.FvUvgT/6/w5T)`)YFnA@T<3ڂ$rcnHwC" -8 supports timestamps until 2038 (0x7fffffff) [ 97.162033][ T524] usb 2-1: USB disconnect, device number 4 [ 97.513181][ T1911] device batadv_slave_1 entered promiscuous mode [ 97.595622][ T23] audit: type=1400 audit(1718915993.110:725): avc: denied { write } for pid=1916 comm="syz-executor.3" name="urandom" dev="devtmpfs" ino=27 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 97.620204][ T1914] EXT4-fs (loop4): can't mount with journal_async_commit, fs mounted w/o journal [ 97.665961][ T1887] syz-executor.1 (1887) used greatest stack depth: 19352 bytes left [ 97.691243][ T1918] overlayfs: overlapping lowerdir path [ 98.433994][ T1910] device batadv_slave_1 left promiscuous mode [ 100.320049][ T124] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 100.480049][ T394] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 100.570030][ T124] usb 4-1: Using ep0 maxpacket: 16 [ 100.610035][ T396] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 100.690150][ T124] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 100.700284][ T124] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 24 [ 100.730069][ T394] usb 1-1: Using ep0 maxpacket: 8 [ 100.790202][ T124] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 100.799204][ T124] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 100.806993][ T124] usb 4-1: SerialNumber: syz [ 100.850109][ T394] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 100.971163][ T396] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 100.981273][ T396] usb 3-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice= 9.99 [ 100.990059][ T396] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.991099][ T396] usb 3-1: config 0 descriptor?? [ 101.010199][ T394] usb 1-1: New USB device found, idVendor=0af0, idProduct=8201, bcdDevice=34.8e [ 101.022971][ T394] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.030878][ T394] usb 1-1: Product: syz [ 101.034797][ T394] usb 1-1: Manufacturer: syz [ 101.039184][ T394] usb 1-1: SerialNumber: syz [ 101.062195][ T524] usb 4-1: USB disconnect, device number 6 [ 101.086260][ T394] usb 1-1: config 0 descriptor?? [ 101.202013][ T1972] erofs: (device loop4): mounted with opts: , root inode @ nid 36. [ 101.224739][ T23] audit: type=1400 audit(1718915996.740:726): avc: denied { mounton } for pid=1970 comm="syz-executor.4" path="/root/syzkaller-testdir1888820423/syzkaller.FWL8nq/75/file2/file0" dev="loop4" ino=46 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 101.292225][ T396] snd-usb-audio: probe of 3-1:0.0 failed with error -2 [ 101.332879][ T524] usb 1-1: USB disconnect, device number 9 [ 101.430468][ T1977] EXT4-fs (loop1): can't mount with journal_async_commit, fs mounted w/o journal [ 101.988405][ T1988] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 102.011325][ T1989] EXT4-fs (loop0): Ignoring removed oldalloc option [ 102.038330][ T396] usb 3-1: USB disconnect, device number 10 [ 102.058531][ T1989] EXT4-fs (loop0): mounted filesystem without journal. Opts: oldalloc,auto_da_alloc=0x0000000000007fff,errors=remount-ro,norecovery,nombcache, [ 102.073233][ T1989] ext4 filesystem being mounted at /root/syzkaller-testdir890187903/syzkaller.K8Ecbh/12/file1 supports timestamps until 2038 (0x7fffffff) [ 102.950545][ T23] audit: type=1326 audit(1718915998.470:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1998 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52b55d3f29 code=0x7fc00000 [ 102.975406][ T23] audit: type=1326 audit(1718915998.490:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1998 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f52b55d3f29 code=0x7fc00000 [ 103.092280][ T23] audit: type=1326 audit(1718915998.610:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1998 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52b55d3f29 code=0x7fc00000 [ 104.161938][ T2033] erofs: (device loop0): mounted with opts: , root inode @ nid 36. [ 104.210249][ T396] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 104.270030][ T394] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 104.300266][ T435] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 104.450462][ T396] usb 5-1: Using ep0 maxpacket: 16 [ 104.520063][ T394] usb 4-1: Using ep0 maxpacket: 8 [ 104.571663][ T396] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 104.586344][ T396] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 24 [ 104.660122][ T394] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 104.671053][ T435] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 104.682871][ T435] usb 3-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice= 9.99 [ 104.694928][ T396] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 104.704593][ T435] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.712870][ T396] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 104.741904][ T435] usb 3-1: config 0 descriptor?? [ 104.747791][ T396] usb 5-1: SerialNumber: syz [ 104.840200][ T394] usb 4-1: New USB device found, idVendor=0af0, idProduct=8201, bcdDevice=34.8e [ 104.859792][ T394] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.870080][ T394] usb 4-1: Product: syz [ 104.874059][ T394] usb 4-1: Manufacturer: syz [ 104.878495][ T394] usb 4-1: SerialNumber: syz [ 104.884507][ T394] usb 4-1: config 0 descriptor?? [ 105.010220][ T435] snd-usb-audio: probe of 3-1:0.0 failed with error -2 [ 105.023803][ T435] usb 5-1: USB disconnect, device number 9 [ 105.129358][ T524] usb 4-1: USB disconnect, device number 7 [ 105.727265][ T1082] usb 3-1: USB disconnect, device number 11 [ 105.826424][ T23] audit: type=1326 audit(1718916001.340:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2048 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febc4dd0f29 code=0x7fc00000 [ 105.850820][ T23] audit: type=1326 audit(1718916001.340:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2048 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7febc4dd0f29 code=0x7fc00000 [ 105.950778][ T23] audit: type=1326 audit(1718916001.470:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2048 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febc4dd0f29 code=0x7fc00000 [ 106.803185][ T2069] F2FS-fs (loop4): invalid crc value [ 106.851822][ T2077] erofs: (device loop2): mounted with opts: , root inode @ nid 36. [ 106.870349][ T435] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 106.890571][ T2069] F2FS-fs (loop4): Found nat_bits in checkpoint [ 107.076908][ T2069] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 107.089019][ T23] audit: type=1400 audit(1718916002.600:733): avc: denied { map } for pid=2068 comm="syz-executor.4" path="/root/syzkaller-testdir1888820423/syzkaller.FWL8nq/83/file0/memory.events.local" dev="loop4" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 107.100037][ T394] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 107.122193][ T23] audit: type=1400 audit(1718916002.640:734): avc: denied { getopt } for pid=2068 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 107.189095][ T372] attempt to access beyond end of device [ 107.189095][ T372] loop4: rw=2049, want=45104, limit=40427 [ 107.202208][ T435] usb 2-1: Using ep0 maxpacket: 16 [ 107.490257][ T394] usb 1-1: Using ep0 maxpacket: 8 [ 107.541015][ T435] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 107.557504][ T435] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 24 [ 107.620692][ T394] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 107.650383][ T435] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 107.659908][ T435] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 107.667745][ T435] usb 2-1: SerialNumber: syz [ 107.790153][ T394] usb 1-1: New USB device found, idVendor=0af0, idProduct=8201, bcdDevice=34.8e [ 107.803884][ T394] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.824854][ T394] usb 1-1: Product: syz [ 107.835374][ T394] usb 1-1: Manufacturer: syz [ 107.846653][ T394] usb 1-1: SerialNumber: syz [ 107.859496][ T394] usb 1-1: config 0 descriptor?? [ 107.923126][ T435] usb 2-1: USB disconnect, device number 5 [ 107.953489][ T23] audit: type=1326 audit(1718916003.470:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2093 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42324aff29 code=0x7fc00000 [ 107.979569][ T23] audit: type=1326 audit(1718916003.470:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2093 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f42324aff29 code=0x7fc00000 [ 108.000016][ T524] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 108.070419][ T23] audit: type=1326 audit(1718916003.590:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2093 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42324aff29 code=0x7fc00000 [ 108.117594][ T396] usb 1-1: USB disconnect, device number 10 [ 108.420387][ T524] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 108.505270][ T524] usb 3-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice= 9.99 [ 108.949031][ T524] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.004563][ T524] usb 3-1: config 0 descriptor?? [ 109.066444][ T2111] [EXT4 FS bs=4096, gc=1, bpg=71, ipg=32, mo=8843c09c, mo2=0000] [ 109.081072][ T2111] EXT4-fs (loop1): 1 orphan inode deleted [ 109.090219][ T2111] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,stripe=0x0000000000000007,minixdf,errors=continue,noauto_da_alloc,init_itable=0x0000000000000080,bsdgroups,dioread_nolock,debug,,errors=continue [ 109.136021][ T23] audit: type=1400 audit(1718916004.650:738): avc: denied { connect } for pid=2122 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 109.155947][ T2111] ext4 filesystem being mounted at /root/syzkaller-testdir3265663135/syzkaller.FvUvgT/13/file1 supports timestamps until 2038 (0x7fffffff) [ 109.173508][ T2123] x_tables: duplicate underflow at hook 1 [ 109.194208][ T23] audit: type=1400 audit(1718916004.690:739): avc: denied { write } for pid=2122 comm="syz-executor.0" path="socket:[18346]" dev="sockfs" ino=18346 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 109.232032][ T23] audit: type=1400 audit(1718916004.700:740): avc: denied { read } for pid=2122 comm="syz-executor.0" path="socket:[18346]" dev="sockfs" ino=18346 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 109.260368][ T524] snd-usb-audio: probe of 3-1:0.0 failed with error -2 [ 109.282975][ T2120] F2FS-fs (loop3): invalid crc value [ 109.293733][ T2120] F2FS-fs (loop3): Found nat_bits in checkpoint [ 109.351985][ T2120] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 109.500043][ T396] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 109.930155][ T396] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 109.950993][ T396] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.271989][ T2140] erofs: (device loop0): mounted with opts: , root inode @ nid 36. [ 110.272334][ T396] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.301129][ T396] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 110.341926][ T104] usb 3-1: USB disconnect, device number 12 [ 112.140076][ T396] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 112.140901][ T394] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 112.148927][ T396] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 112.165590][ T396] usb 2-1: config 0 descriptor?? [ 112.200229][ T396] usb 2-1: can't set config #0, error -71 [ 112.210170][ T396] usb 2-1: USB disconnect, device number 6 [ 112.500786][ T394] usb 5-1: Using ep0 maxpacket: 8 [ 112.530022][ T524] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 112.640410][ T394] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 112.780041][ T524] usb 4-1: Using ep0 maxpacket: 16 [ 112.830201][ T394] usb 5-1: New USB device found, idVendor=0af0, idProduct=8201, bcdDevice=34.8e [ 112.839188][ T394] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.847154][ T394] usb 5-1: Product: syz [ 112.851247][ T394] usb 5-1: Manufacturer: syz [ 112.855689][ T394] usb 5-1: SerialNumber: syz [ 112.861785][ T394] usb 5-1: config 0 descriptor?? [ 112.873647][ T23] audit: type=1326 audit(1718916008.390:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2169 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1de99d1f29 code=0x7fc00000 [ 112.897741][ T23] audit: type=1326 audit(1718916008.390:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2169 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1de99d1f29 code=0x7fc00000 [ 112.900095][ T524] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 112.933000][ T524] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 24 [ 113.012211][ T23] audit: type=1326 audit(1718916008.530:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2169 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1de99d1f29 code=0x7fc00000 [ 113.020117][ T524] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 113.050075][ T524] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 113.060341][ T524] usb 4-1: SerialNumber: syz [ 113.159748][ T396] usb 5-1: USB disconnect, device number 10 [ 113.321243][ T524] usb 4-1: USB disconnect, device number 8 [ 113.342664][ T124] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 113.740334][ T124] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 113.766480][ T124] usb 1-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice= 9.99 [ 113.776270][ T124] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.789417][ T124] usb 1-1: config 0 descriptor?? [ 114.511510][ T124] snd-usb-audio: probe of 1-1:0.0 failed with error -2 [ 114.511551][ T23] audit: type=1326 audit(1718916010.030:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2196 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febc4dd0f29 code=0x7fc00000 [ 114.542608][ T23] audit: type=1326 audit(1718916010.030:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2196 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7febc4dd0f29 code=0x7fc00000 [ 114.581927][ T2200] erofs: (device loop2): mounted with opts: , root inode @ nid 36. [ 114.652884][ T23] audit: type=1326 audit(1718916010.170:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2196 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febc4dd0f29 code=0x7fc00000 [ 114.822562][ T23] audit: type=1326 audit(1718916010.340:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2211 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba5ea3af29 code=0x7fc00000 [ 114.846622][ T23] audit: type=1326 audit(1718916010.340:748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2211 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fba5ea3af29 code=0x7fc00000 [ 115.030814][ T23] audit: type=1326 audit(1718916010.550:749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2211 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba5ea3af29 code=0x7fc00000 [ 116.911800][ T124] usb 4-1: new low-speed USB device number 9 using dummy_hcd [ 116.947340][ T394] usb 1-1: USB disconnect, device number 11 [ 117.320043][ T124] usb 4-1: Invalid ep0 maxpacket: 64 [ 117.470027][ T124] usb 4-1: new low-speed USB device number 10 using dummy_hcd [ 117.470273][ T435] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 117.558369][ T394] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 117.750511][ T124] usb 4-1: Invalid ep0 maxpacket: 64 [ 117.761923][ T124] usb usb4-port1: attempt power cycle [ 117.870023][ T394] usb 1-1: Using ep0 maxpacket: 8 [ 117.927776][ T23] audit: type=1326 audit(1718916013.440:750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2256 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febc4dd0f29 code=0x7fc00000 [ 117.952130][ T23] audit: type=1326 audit(1718916013.470:751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2256 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7febc4dd0f29 code=0x7fc00000 [ 117.975963][ T435] usb 5-1: Using ep0 maxpacket: 16 [ 118.010184][ T394] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 118.068866][ T23] audit: type=1326 audit(1718916013.580:752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2256 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febc4dd0f29 code=0x7fc00000 [ 118.120118][ T435] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 118.138324][ T435] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 24 [ 118.170450][ T394] usb 1-1: New USB device found, idVendor=0af0, idProduct=8201, bcdDevice=34.8e [ 118.183546][ T394] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.196709][ T394] usb 1-1: Product: syz [ 118.200877][ T394] usb 1-1: Manufacturer: syz [ 118.205366][ T394] usb 1-1: SerialNumber: syz [ 118.218296][ T394] usb 1-1: config 0 descriptor?? [ 118.260095][ T435] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 118.271783][ T435] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 118.280320][ T435] usb 5-1: SerialNumber: syz [ 118.410364][ T2273] input: syz1 as /devices/virtual/input/input10 [ 118.418343][ T23] audit: type=1400 audit(1718916013.930:753): avc: denied { read } for pid=147 comm="acpid" name="event3" dev="devtmpfs" ino=19602 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 118.441609][ T23] audit: type=1400 audit(1718916013.930:754): avc: denied { open } for pid=147 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=19602 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 118.462418][ T524] usb 1-1: USB disconnect, device number 12 [ 118.465057][ T23] audit: type=1400 audit(1718916013.930:755): avc: denied { ioctl } for pid=147 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=19602 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 118.506896][ T23] audit: type=1400 audit(1718916013.960:756): avc: denied { create } for pid=2275 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 118.526922][ T2279] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.2'. [ 118.540018][ T394] usb 5-1: USB disconnect, device number 11 [ 118.920043][ T124] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 119.102314][ T2283] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 119.111228][ T2283] ext4 filesystem being mounted at /root/syzkaller-testdir890187903/syzkaller.K8Ecbh/29/file0 supports timestamps until 2038 (0x7fffffff) [ 119.130120][ T124] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.140845][ T124] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 119.153695][ T124] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 119.155156][ T2286] EXT4-fs (loop4): Unrecognized mount option "smackfshat=ext4" or missing value [ 119.162933][ T124] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.180177][ T124] usb 4-1: config 0 descriptor?? [ 119.190520][ T2283] EXT4-fs error (device loop0): ext4_find_dest_de:2063: inode #2: block 3: comm syz-executor.0: bad entry in directory: directory entry overrun - offset=12, inode=2, rec_len=62732, size=2048 fake=0 [ 119.214629][ T2283] EXT4-fs error (device loop0): ext4_find_dest_de:2063: inode #2: block 3: comm syz-executor.0: bad entry in directory: directory entry overrun - offset=12, inode=2, rec_len=62732, size=2048 fake=0 [ 120.055159][ T396] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 120.211191][ T124] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 120.221400][ T124] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 120.252622][ T124] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 120.280133][ T124] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 120.287355][ T124] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 120.295430][ T124] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 120.306038][ T124] plantronics 0003:047F:FFFF.0003: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 120.309993][ T396] usb 3-1: Using ep0 maxpacket: 8 [ 120.423288][ T2276] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 120.430959][ T2276] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 120.438534][ T2276] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 120.446588][ T124] usb 4-1: USB disconnect, device number 11 [ 120.450070][ T396] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 120.500149][ T2148] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 120.620090][ T396] usb 3-1: New USB device found, idVendor=0af0, idProduct=8201, bcdDevice=34.8e [ 120.628937][ T396] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.636921][ T396] usb 3-1: Product: syz [ 120.641841][ T396] usb 3-1: Manufacturer: syz [ 120.646326][ T396] usb 3-1: SerialNumber: syz [ 120.655805][ T396] usb 3-1: config 0 descriptor?? [ 120.660588][ T435] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 120.750012][ T2148] usb 1-1: Using ep0 maxpacket: 8 [ 120.870091][ T2148] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 120.900010][ T435] usb 5-1: Using ep0 maxpacket: 8 [ 120.914776][ T124] usb 3-1: USB disconnect, device number 13 [ 121.020133][ T435] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 121.030103][ T2148] usb 1-1: New USB device found, idVendor=0af0, idProduct=8201, bcdDevice=34.8e [ 121.038938][ T2148] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.046866][ T2148] usb 1-1: Product: syz [ 121.538058][ T2325] input: syz0 as /devices/virtual/input/input11 [ 121.544840][ T2148] usb 1-1: Manufacturer: syz [ 121.549241][ T2148] usb 1-1: SerialNumber: syz [ 121.557565][ T2148] usb 1-1: config 0 descriptor?? [ 121.660095][ T435] usb 5-1: New USB device found, idVendor=0af0, idProduct=8201, bcdDevice=34.8e [ 121.669419][ T435] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.677242][ T435] usb 5-1: Product: syz [ 121.681308][ T435] usb 5-1: Manufacturer: syz [ 121.685742][ T435] usb 5-1: SerialNumber: syz [ 121.691214][ T435] usb 5-1: config 0 descriptor?? [ 121.829638][ T104] usb 1-1: USB disconnect, device number 13 [ 122.282894][ T435] usb 5-1: USB disconnect, device number 12 [ 122.341160][ T2340] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 122.348735][ T2340] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 122.360232][ T2340] F2FS-fs (loop2): Found nat_bits in checkpoint [ 122.393829][ T2340] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 122.400722][ T2340] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 122.438878][ T23] audit: type=1400 audit(1718916017.950:757): avc: denied { create } for pid=2339 comm="syz-executor.2" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 123.256319][ T2359] tipc: Started in network mode [ 123.261231][ T2359] tipc: Own node identity ac1414aa, cluster identity 4711 [ 123.268445][ T2359] tipc: New replicast peer: 100.1.1.1 [ 123.273940][ T2359] tipc: Enabled bearer , priority 10 [ 123.285131][ T2359] input: syz1 as /devices/virtual/input/input12 [ 123.290550][ T124] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 123.680142][ T124] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.691121][ T124] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.700872][ T124] usb 3-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 123.709749][ T124] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.718908][ T124] usb 3-1: config 0 descriptor?? [ 123.729999][ T104] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 124.090071][ T104] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.103567][ T104] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 124.119958][ T104] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 124.129809][ T104] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.153494][ T104] usb 1-1: config 0 descriptor?? [ 124.217879][ T23] audit: type=1400 audit(1718916019.730:758): avc: denied { setopt } for pid=2385 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 124.242027][ T124] dragonrise 0003:0079:0011.0004: unknown global tag 0xd [ 124.252807][ T124] dragonrise 0003:0079:0011.0004: item 0 0 1 13 parsing failed [ 124.270279][ T124] dragonrise 0003:0079:0011.0004: parse failed [ 124.285162][ T124] dragonrise: probe of 0003:0079:0011.0004 failed with error -22 [ 124.304028][ T2392] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 124.320388][ T2392] ext4 filesystem being mounted at /root/syzkaller-testdir3265663135/syzkaller.FvUvgT/30/file0 supports timestamps until 2038 (0x7fffffff) [ 124.362927][ T23] audit: type=1400 audit(1718916019.880:759): avc: denied { mounton } for pid=2391 comm="syz-executor.1" path="/root/syzkaller-testdir3265663135/syzkaller.FvUvgT/30/file0/file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 124.400142][ T524] tipc: 32-bit node address hash set to aa1414ac [ 124.590029][ T124] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 124.631096][ T104] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 124.638279][ T104] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 124.645655][ T104] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 124.653065][ T104] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 124.660456][ T104] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 124.672356][ T104] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 124.687307][ T104] plantronics 0003:047F:FFFF.0005: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 124.830005][ T124] usb 5-1: Using ep0 maxpacket: 8 [ 124.843112][ T2384] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 124.850976][ T2384] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 124.858725][ T2384] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 124.866917][ T524] usb 1-1: USB disconnect, device number 14 [ 124.962814][ T124] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 125.220119][ T124] usb 5-1: New USB device found, idVendor=0af0, idProduct=8201, bcdDevice=34.8e [ 125.236065][ T124] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.264208][ T124] usb 5-1: Product: syz [ 125.268194][ T124] usb 5-1: Manufacturer: syz [ 125.283115][ T124] usb 5-1: SerialNumber: syz [ 125.300529][ T124] usb 5-1: config 0 descriptor?? [ 125.489389][ T396] usb 3-1: USB disconnect, device number 14 [ 125.532702][ T2408] attempt to access beyond end of device [ 125.532702][ T2408] loop0: rw=2049, want=348, limit=256 [ 125.552225][ T104] usb 5-1: USB disconnect, device number 13 [ 125.656692][ T2413] input: syz1 as /devices/virtual/input/input14 [ 127.180089][ T104] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 127.351251][ T2451] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 127.358827][ T2451] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 127.370406][ T2451] F2FS-fs (loop2): Found nat_bits in checkpoint [ 127.400125][ T401] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 127.468485][ T2451] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 127.480207][ T2451] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 127.570115][ T104] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.589995][ T104] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.606102][ T104] usb 2-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 127.615679][ T104] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.625669][ T104] usb 2-1: config 0 descriptor?? [ 127.760252][ T401] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.771369][ T401] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 127.784143][ T401] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 127.793022][ T401] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.810433][ T401] usb 1-1: config 0 descriptor?? [ 127.821945][ T2470] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 127.835740][ T2470] ext4 filesystem being mounted at /root/syzkaller-testdir1888820423/syzkaller.FWL8nq/106/bus supports timestamps until 2038 (0x7fffffff) [ 127.880049][ T124] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 127.960007][ T396] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 128.090466][ T2439] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 128.240105][ T124] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.253181][ T124] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 128.265986][ T124] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 128.274883][ T124] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.293132][ T124] usb 4-1: config 0 descriptor?? [ 128.302041][ T401] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 128.309317][ T401] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 128.316599][ T401] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 128.323881][ T401] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 128.332416][ T401] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 128.340339][ T396] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.340444][ T401] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 128.351861][ T396] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.361243][ T401] plantronics 0003:047F:FFFF.0006: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 128.368543][ T396] usb 3-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 128.389310][ T396] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.402767][ T396] usb 3-1: config 0 descriptor?? [ 128.409392][ T2439] F2FS-fs (loop1): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288) [ 128.418751][ T2439] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 128.431177][ T2439] F2FS-fs (loop1): Found nat_bits in checkpoint [ 128.477855][ T2439] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 128.485157][ T2439] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 128.507091][ T2449] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 128.516753][ T2449] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 128.524761][ T2449] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 128.539824][ T18] usb 1-1: USB disconnect, device number 15 [ 128.550003][ T394] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 128.552080][ T104] itetech 0003:258A:6A88.0007: unknown main item tag 0x0 [ 128.570604][ T104] itetech 0003:258A:6A88.0007: hidraw0: USB HID v0.00 Device [HID 258a:6a88] on usb-dummy_hcd.1-1/input0 [ 128.751385][ T124] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 128.752427][ T435] usb 2-1: USB disconnect, device number 7 [ 128.759122][ T124] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving [ 128.775018][ T124] plantronics 0003:047F:FFFF.0008: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 128.800030][ T394] usb 5-1: Using ep0 maxpacket: 8 [ 128.870990][ T396] dragonrise 0003:0079:0011.0009: unknown global tag 0xd [ 128.877815][ T396] dragonrise 0003:0079:0011.0009: item 0 0 1 13 parsing failed [ 128.889501][ T396] dragonrise 0003:0079:0011.0009: parse failed [ 128.896294][ T396] dragonrise: probe of 0003:0079:0011.0009 failed with error -22 [ 128.930102][ T394] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 129.086037][ T2465] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 129.095303][ T394] usb 5-1: New USB device found, idVendor=0af0, idProduct=8201, bcdDevice=34.8e [ 129.104235][ T394] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.114290][ T2465] EXT4-fs (loop3): orphan cleanup on readonly fs [ 129.120530][ T394] usb 5-1: Product: syz [ 129.126000][ T2465] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3002: comm syz-executor.3: Allocating blocks 41-42 which overlap fs metadata [ 129.140097][ T394] usb 5-1: Manufacturer: syz [ 129.144504][ T394] usb 5-1: SerialNumber: syz [ 129.150332][ T394] usb 5-1: config 0 descriptor?? [ 129.155593][ T2465] EXT4-fs (loop3): Remounting filesystem read-only [ 129.161995][ T2465] Quota error (device loop3): write_blk: dquota write failed [ 129.169238][ T2465] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 129.179641][ T2465] EXT4-fs (loop3): 1 truncate cleaned up [ 129.185326][ T2465] EXT4-fs (loop3): pa ffff8881e84ac5e8: logic 1, phys. 41, len 23 [ 129.193018][ T2465] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:3899: group 0, free 22, pa_free 23 [ 129.204993][ T2465] EXT4-fs (loop3): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000005,noblock_validity,usrquota,resgid=0x0000000000000000,nogrpid,errors=remount-ro,noinit_itable,inode_readahead_blks=0x0000000000000001,resuid=0x00000000000000002 [ 129.231243][ T394] usb 4-1: USB disconnect, device number 12 [ 129.390005][ T435] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 129.404813][ T124] usb 5-1: USB disconnect, device number 14 [ 129.649998][ T435] usb 1-1: Using ep0 maxpacket: 8 [ 129.950043][ T435] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 130.120093][ T435] usb 1-1: New USB device found, idVendor=0af0, idProduct=8201, bcdDevice=34.8e [ 130.129741][ T435] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.139100][ T435] usb 1-1: Product: syz [ 130.146096][ T435] usb 1-1: Manufacturer: syz [ 130.156855][ T435] usb 1-1: SerialNumber: syz [ 130.210629][ T435] usb 1-1: config 0 descriptor?? [ 130.237431][ T104] usb 3-1: USB disconnect, device number 15 [ 130.451701][ T435] usb 1-1: USB disconnect, device number 16 [ 131.266907][ T2523] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=537 sclass=netlink_xfrm_socket pid=2523 comm=syz-executor.3 [ 131.270372][ T2517] EXT4-fs (loop4): can't mount with journal_async_commit, fs mounted w/o journal [ 131.380937][ T2523] erofs: (device loop3): mounted with opts: , root inode @ nid 36. [ 131.785632][ T435] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 132.120609][ T23] audit: type=1400 audit(1718916027.640:760): avc: denied { map } for pid=2531 comm="syz-executor.0" path="socket:[20011]" dev="sockfs" ino=20011 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 132.146800][ T23] audit: type=1400 audit(1718916027.670:761): avc: denied { listen } for pid=2531 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 132.290096][ T435] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.310053][ T435] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 132.330096][ T435] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 132.348262][ T435] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.366921][ T435] usb 2-1: config 0 descriptor?? [ 132.411194][ T2540] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 132.420274][ T2540] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 132.440299][ T2540] F2FS-fs (loop4): Found nat_bits in checkpoint [ 132.484517][ T2540] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 132.491509][ T2540] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 132.851529][ T435] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 132.858785][ T396] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 132.866916][ T435] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 132.874801][ T435] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 132.884581][ T435] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 132.893451][ T435] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 132.905702][ T435] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving [ 132.920272][ T435] plantronics 0003:047F:FFFF.000A: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 133.056421][ T2524] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 133.068458][ T2524] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 133.080783][ T2524] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 133.093406][ T435] usb 2-1: USB disconnect, device number 8 [ 133.280089][ T396] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.291477][ T396] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.302000][ T396] usb 5-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 133.311657][ T396] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.320756][ T396] usb 5-1: config 0 descriptor?? [ 133.460019][ T124] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 133.699999][ T124] usb 4-1: Using ep0 maxpacket: 8 [ 133.994088][ T396] dragonrise 0003:0079:0011.000B: unknown global tag 0xd [ 134.002158][ T396] dragonrise 0003:0079:0011.000B: item 0 0 1 13 parsing failed [ 134.010105][ T124] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 134.010522][ T396] dragonrise 0003:0079:0011.000B: parse failed [ 134.029831][ T396] dragonrise: probe of 0003:0079:0011.000B failed with error -22 [ 134.032526][ T2562] EXT4-fs (loop2): quotafile must be on filesystem root [ 134.283983][ T124] usb 4-1: New USB device found, idVendor=0af0, idProduct=8201, bcdDevice=34.8e [ 134.307117][ T124] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.320574][ T124] usb 4-1: Product: syz [ 134.324640][ T124] usb 4-1: Manufacturer: syz [ 134.329339][ T124] usb 4-1: SerialNumber: syz [ 134.382437][ T124] usb 4-1: config 0 descriptor?? [ 134.403033][ T2562] overlayfs: statfs failed on './file0' [ 134.432880][ T23] audit: type=1400 audit(1718916029.920:762): avc: denied { getattr } for pid=2561 comm="syz-executor.2" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 134.466759][ T23] audit: type=1400 audit(1718916029.980:763): avc: denied { unmount } for pid=371 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 134.730152][ T124] usb 4-1: USB disconnect, device number 13 [ 135.190121][ T396] usb 5-1: USB disconnect, device number 15 [ 135.261087][ T2579] FAT-fs (loop1): Unrecognized mount option "Kodots" or missing value [ 135.600641][ T124] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 135.620896][ T2595] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=537 sclass=netlink_xfrm_socket pid=2595 comm=syz-executor.4 [ 135.681235][ T2595] erofs: (device loop4): mounted with opts: , root inode @ nid 36. [ 136.259995][ T435] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 136.343019][ T2599] xt_hashlimit: overflow, try lower: 0/0 [ 136.589243][ T18] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 136.803807][ T2633] fscrypt: Adiantum using implementation "adiantum(xchacha12-simd,aes-aesni,nhpoly1305-generic)" [ 136.879997][ T18] usb 3-1: Using ep0 maxpacket: 8 [ 136.880134][ T435] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 136.896062][ T435] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 136.909521][ T435] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 136.918735][ T435] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.931865][ T435] usb 5-1: config 0 descriptor?? [ 137.000077][ T18] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 137.190185][ T18] usb 3-1: New USB device found, idVendor=0af0, idProduct=8201, bcdDevice=34.8e [ 137.199181][ T18] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.207035][ T18] usb 3-1: Product: syz [ 137.211174][ T18] usb 3-1: Manufacturer: syz [ 137.215623][ T18] usb 3-1: SerialNumber: syz [ 137.221422][ T18] usb 3-1: config 0 descriptor?? [ 137.409386][ T435] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 137.420187][ T435] plantronics 0003:047F:FFFF.000C: No inputs registered, leaving [ 137.440059][ T435] plantronics 0003:047F:FFFF.000C: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 137.494756][ T435] usb 3-1: USB disconnect, device number 16 [ 137.622234][ T2645] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 137.636031][ T2645] ext4 filesystem being mounted at /root/syzkaller-testdir890187903/syzkaller.K8Ecbh/48/bus supports timestamps until 2038 (0x7fffffff) [ 137.731509][ T2602] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 137.741993][ T2602] EXT4-fs (loop4): orphan cleanup on readonly fs [ 137.749017][ T2602] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3002: comm syz-executor.4: Allocating blocks 41-42 which overlap fs metadata [ 137.765489][ T2602] EXT4-fs (loop4): Remounting filesystem read-only [ 137.772269][ T2602] Quota error (device loop4): write_blk: dquota write failed [ 137.779775][ T2602] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 137.790118][ T2602] EXT4-fs (loop4): 1 truncate cleaned up [ 137.795813][ T2602] EXT4-fs (loop4): pa ffff8881e84acbd0: logic 1, phys. 41, len 23 [ 137.803480][ T2602] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:3899: group 0, free 22, pa_free 23 [ 137.814441][ T2602] EXT4-fs (loop4): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000005,noblock_validity,usrquota,resgid=0x0000000000000000,nogrpid,errors=remount-ro,noinit_itable,inode_readahead_blks=0x0000000000000001,resuid=0x00000000000000002 [ 137.820001][ T124] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 137.863050][ T401] usb 5-1: USB disconnect, device number 16 [ 138.065848][ T2654] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 138.081576][ T2654] ext4 filesystem being mounted at /root/syzkaller-testdir2865780058/syzkaller.JhHPtA/110/bus supports timestamps until 2038 (0x7fffffff) [ 138.090107][ T124] usb 4-1: Using ep0 maxpacket: 8 [ 138.220093][ T124] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 138.371469][ T2664] FAT-fs (loop1): Unrecognized mount option "nmdots" or missing value [ 138.380101][ T124] usb 4-1: New USB device found, idVendor=0af0, idProduct=8201, bcdDevice=34.8e [ 138.389025][ T124] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.397317][ T124] usb 4-1: Product: syz [ 138.409286][ T124] usb 4-1: Manufacturer: syz [ 138.414059][ T124] usb 4-1: SerialNumber: syz [ 138.419488][ T124] usb 4-1: config 0 descriptor?? [ 138.641923][ T2664] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 138.652520][ T23] audit: type=1400 audit(1718916034.170:764): avc: denied { mounton } for pid=2663 comm="syz-executor.1" path="/root/syzkaller-testdir3265663135/syzkaller.FvUvgT/45/file0/bus" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 138.680802][ T23] audit: type=1400 audit(1718916034.170:765): avc: denied { map } for pid=2663 comm="syz-executor.1" path="/root/syzkaller-testdir3265663135/syzkaller.FvUvgT/45/file0/bus" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 138.682726][ T124] usb 4-1: USB disconnect, device number 14 [ 138.764723][ T2679] xt_hashlimit: overflow, try lower: 0/0 [ 138.922622][ T2678] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 138.931600][ T2678] ext4 filesystem being mounted at /root/syzkaller-testdir890187903/syzkaller.K8Ecbh/50/file0 supports timestamps until 2038 (0x7fffffff) [ 138.951187][ T2678] EXT4-fs error (device loop0) in ext4_do_update_inode:5534: error 27 [ 138.959497][ T2678] EXT4-fs error (device loop0) in ext4_do_update_inode:5534: error 27 [ 138.974036][ T23] audit: type=1400 audit(1718916034.490:766): avc: denied { shutdown } for pid=2675 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 138.995114][ T23] audit: type=1400 audit(1718916034.490:767): avc: denied { rmdir } for pid=2675 comm="syz-executor.0" name="file0" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 139.366118][ T1792] EXT4-fs error (device loop1): ext4_validate_block_bitmap:418: comm syz-executor.1: bg 0: block 9219: padding at end of block bitmap is not set [ 139.384121][ T1792] EXT4-fs error (device loop1) in ext4_free_blocks:5019: Corrupt filesystem [ 139.393175][ T1792] EXT4-fs error (device loop1): __ext4_iget:5217: inode #13: block 127754: comm syz-executor.1: invalid block [ 139.405440][ T1792] EXT4-fs error (device loop1): __ext4_iget:5217: inode #13: block 127754: comm syz-executor.1: invalid block [ 139.420662][ T23] audit: type=1400 audit(1718916034.940:768): avc: denied { remount } for pid=2698 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 139.510019][ T396] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 139.518023][ T838] tipc: Disabling bearer [ 139.521858][ T2673] ------------[ cut here ]------------ [ 139.523206][ T838] tipc: Left network mode [ 139.528408][ T2673] kernel BUG at fs/buffer.c:3027! [ 139.528549][ T2673] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 139.543434][ T2673] CPU: 1 PID: 2673 Comm: kmmpd-loop1 Not tainted 5.4.274-syzkaller-00002-g6f97bd951d82 #0 2024/06/20 20:40:35 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 139.553227][ T2673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 139.563157][ T2673] RIP: 0010:submit_bh_wbc+0x831/0x850 [ 139.568348][ T2673] Code: 10 80 e1 07 80 c1 03 38 c1 0f 8c 14 fe ff ff 48 8b 7c 24 10 e8 00 8d ea ff e9 05 fe ff ff e8 f6 a7 ba ff 0f 0b e8 ef a7 ba ff <0f> 0b e8 e8 a7 ba ff 0f 0b e8 e1 a7 ba ff 0f 0b e8 da a7 ba ff 0f [ 139.587780][ T2673] RSP: 0018:ffff8881f47e7bf0 EFLAGS: 00010293 [ 139.593688][ T2673] RAX: ffffffff81a99431 RBX: 0000000000000000 RCX: ffff8881f30f0000 [ 139.601488][ T2673] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 139.609303][ T2673] RBP: 0000000000003800 R08: ffffffff81a98ca4 R09: ffffed1039a584d3 [ 139.617114][ T2673] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 139.624926][ T2673] R13: ffff8881cd2c2690 R14: 0000000000000001 R15: 0000000000000000 [ 139.632734][ T2673] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 139.641501][ T2673] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 139.647922][ T2673] CR2: 0000001b2fc28000 CR3: 00000001cdc14000 CR4: 00000000003406a0 [ 139.655733][ T2673] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 139.663543][ T2673] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 139.671359][ T2673] Call Trace: [ 139.674493][ T2673] ? __die+0xb4/0x100 [ 139.678302][ T2673] ? die+0x26/0x50 [ 139.681870][ T2673] ? do_trap+0x1e7/0x340 [ 139.685940][ T2673] ? submit_bh_wbc+0x831/0x850 [ 139.690542][ T2673] ? submit_bh_wbc+0x831/0x850 [ 139.695141][ T2673] ? do_invalid_op+0xfb/0x110 [ 139.699652][ T2673] ? submit_bh_wbc+0x831/0x850 [ 139.704262][ T2673] ? invalid_op+0x1e/0x30 [ 139.708421][ T2673] ? submit_bh_wbc+0xa4/0x850 [ 139.712931][ T2673] ? submit_bh_wbc+0x831/0x850 [ 139.717532][ T2673] ? submit_bh_wbc+0x831/0x850 [ 139.722133][ T2673] ? debug_smp_processor_id+0x20/0x20 [ 139.727343][ T2673] submit_bh+0x21/0x30 [ 139.731249][ T2673] write_mmp_block+0x3ff/0x5b0 [ 139.735853][ T2673] ? console_conditional_schedule+0x10/0x10 [ 139.741574][ T2673] ? check_preemption_disabled+0x9f/0x320 [ 139.747135][ T2673] ? read_mmp_block+0x8a0/0x8a0 [ 139.751820][ T2673] kmmpd+0x7de/0xa10 [ 139.755554][ T2673] ? write_mmp_block+0x5b0/0x5b0 [ 139.7603