last executing test programs: 22.531670953s ago: executing program 3 (id=2453): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r2 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) r3 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) r4 = add_key$fscrypt_v1(&(0x7f0000000540), &(0x7f0000000440)={'fscrypt:', @desc1}, &(0x7f0000000880)={0x0, "6035ae1ef8ffffff1705322225930e6c1e3e2a51a92fd796bc34d7a4c6a7ef5402003fd7264c39ea00c508ba6062696138006f00", 0x4}, 0x48, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x4, r4, r3, 0x0, 0x0) keyctl$KEYCTL_MOVE(0x4, r2, r2, 0x0, 0x0) 22.423558183s ago: executing program 3 (id=2454): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x2808000, &(0x7f0000000040)=ANY=[@ANYBLOB="696f636861727365743d6d616369810e00002c696f636861727365743d6d616363726d617469616e2c73686f72746e616d653d6d697865642c756e695f786c6174653d73686f72746e616d653d77526e39352c7f8ed39f747a3d5554432c73686f72746e616d653d6d6978c4c36e717466383d312c73686f72746e616d653d77696e39352c757466383d302c726f6469722c73686f72423d79be653d6d697865642c356e695f786c6174650000"], 0x1, 0x294, &(0x7f0000000500)="$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") 21.610460518s ago: executing program 3 (id=2456): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffc20, 0x0, 0x0, 0x3d, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x147042, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000001680)=ANY=[@ANYBLOB="180000000000000000000000000000ce850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, &(0x7f0000001700)={0x0, "2b1bb2423170062f6bba27c6f1bcc170"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r5}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 21.561931692s ago: executing program 0 (id=2457): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r4}, 0x10) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0xfe66}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001a00)=@newtfilter={0x8c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {}, {0xfff1}}, [@filter_kind_options=@f_fw={{0x7}, {0x60, 0x2, [@TCA_FW_MASK={0x8}, @TCA_FW_INDEV={0x14, 0x3, 'gre0\x00'}, @TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x1}}]}]}}]}, 0x8c}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c10000", @ANYRES32=r9, @ANYBLOB="0100000000000000240012000c000100627269646765"], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000001ce5000000e1000000000000a8629e220000000000000000"], 0x48) 21.548075794s ago: executing program 3 (id=2458): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0xffffffffffffff73, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008bd6000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='jbd2_handle_stats\x00', r1}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000340)='task\x00') fchdir(r2) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000140)={0x0, 0x0}) r5 = syz_open_procfs(r4, &(0x7f0000000600)='fd/4\x00') ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000180)=0x80020) 21.458531852s ago: executing program 3 (id=2460): bpf$MAP_CREATE(0x0, &(0x7f0000001600)=@base={0x9, 0x4, 0x3, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x3000010, &(0x7f00000001c0)={[{@usrquota}, {@journal_ioprio}]}, 0x1, 0x515, &(0x7f0000001c40)="$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") ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x8927, &(0x7f0000000980)=ANY=[]) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000180)=@fragment={0x0, 0x0, 0xb, 0x1, 0x0, 0x6, 0x64}, 0x8) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000400000000dfffff1918120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r5}, 0x10) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) 21.431446714s ago: executing program 3 (id=2462): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) pwrite64(r2, &(0x7f0000000080)='3', 0x500, 0x0) 20.233279474s ago: executing program 0 (id=2463): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x44f, 0xb65d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000b80)={0x24, 0x0, 0x0, &(0x7f0000000340)={0x0, 0x22, 0x6, {[@main=@item_012={0x0, 0x0, 0xb}, @main=@item_4={0x3, 0x0, 0xa, "b5fa124b"}]}}, 0x0}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000001340)={0x44, &(0x7f0000001080), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') dup(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f0000006280)="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", 0x2000, &(0x7f0000001dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001780)={0x90, 0x0, 0x0, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, r2}, 0x50) mount$fuse(0x0, &(0x7f0000000080)='./file0/../file0/file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=r3]) umount2(&(0x7f00000001c0)='./file0\x00', 0x1) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x4842, 0x0) r4 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000dc0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xff, 0x80, 0x8, [{{0x9, 0x4, 0x0, 0xfd, 0x1, 0x7, 0x1, 0x1, 0x1, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x4, 0x0, 0xb}}}}}]}}]}}, 0x0) syz_usb_control_io$printer(r4, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1e, @string={0x1e, 0x3, "19b80207899614429f2dafd787e54c59f6513b87baad664136adf532"}}}, 0x0) syz_usb_control_io(r4, &(0x7f00000015c0)={0x2c, 0x0, &(0x7f0000001480)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40b}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_ep_read(r4, 0x1, 0x0, 0x0) syz_usb_disconnect(r4) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r5, &(0x7f0000001680)="f31552c51ef8205abfa9f8ff810b310cabf01c94d4ce91d436423cf90c15d97c1217cc21e800e1a7c1ffe6b70eb4e86ad3d217ad07e656cdbdf756ca5078b27a12", 0x41) r6 = syz_clone(0x0, &(0x7f0000000100)="7a2c0d02c336df5292a53d736808d13fae49c6d6e9faa7e41eb7af803c7664522fadf4b2fa45c8344281f71b8c6f84e97a5e18f79335a78d14c1e60ab63c4b0f0d2dfd418725a1ccba1b8de638ffa9217835e79be4924e6f6074b0ac84dea5cce75e1173e1c48c8914b60190d2322f690146714a5dcd4d460808c32247b703bc75", 0x81, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)="1215bbff97f71e8c0ec95d2825e53aeca6f66a953383bdf09b594e57eca8a333dfb0edbc353533c8b84e9e152f23320d631da5b3109802bf4b09a54703521959e005c9da73d2eabf2446ccb1178a771a7132b78789271dcfe19a857148088b904b72032671da6d165b88b40da77246a25a468fad65bf44bd652f1bbeba142bbe12b19809db12a8e122fef05a82b32393c5335a3770679deab36df5eecfc07167cf8cc75dbb6b1f") syz_open_procfs(r6, &(0x7f0000000080)='status\x00') 16.67474042s ago: executing program 0 (id=2473): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="757466383d302c726f6469722c757365667265652c636865636b3d7374726963742c636f646570616765393933362c6e6f6e756d7461696c3d302c696f636861727365743d757466382c6e6f6e756d7461696c3d302c6e6f6e756d7461696c3d302c696f63686172736574ff6d61636963656c616e642c616c6c6f775f7574696d653d30303030303030303030303030303030303030303030312c73686f72746e616d653d77696e39522c726f6469722c00"], 0x26, 0x336, &(0x7f00000001c0)="$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") r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) keyctl$negate(0xd, 0x0, 0x4, 0x0) add_key$fscrypt_provisioning(&(0x7f0000000200), 0x0, &(0x7f0000001480)=ANY=[], 0x8, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x0, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xc, 0xffffff60, 0x2, 0x9, 0x1, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x90) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0) ptrace(0x10, 0x1) syz_usb_connect(0x0, 0x24, &(0x7f0000003cc0)=ANY=[@ANYBLOB="121500003d55"], 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 12.027644137s ago: executing program 2 (id=2484): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0xffffffffffffff73, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008bd6000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='jbd2_handle_stats\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x19, 0x3, &(0x7f00000002c0)=ANY=[], 0x0, 0xfffffa84, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='sched_switch\x00', r5, 0x0, 0x1}, 0x18) syz_open_procfs(0xffffffffffffffff, &(0x7f00000006c0)='net/route\x00') bpf$MAP_CREATE(0x0, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r6}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) setsockopt$netlink_NETLINK_PKTINFO(r8, 0x10e, 0x3, &(0x7f0000000280)=0x6, 0x4) sendmsg$nl_route(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r10], 0x20}}, 0x0) 10.616429576s ago: executing program 1 (id=2485): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000180018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r1}, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r4 = dup(r3) mount$9p_fd(0x2000000, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}}) 10.615743996s ago: executing program 2 (id=2486): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b00000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r2}, 0x10) r3 = getpid() ptrace$ARCH_SHSTK_ENABLE(0x1e, r3, 0x3, 0x5001) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x150) ioctl$KVM_RUN(r4, 0xae80, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io(r7, &(0x7f00000011c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect$cdc_ecm(0x1, 0x4d, &(0x7f0000000340)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x10, 0xe0, 0xf7, [{{0x9, 0x4, 0x0, 0x1, 0x3, 0x2, 0x6, 0x0, 0x9, {{0x5}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0xfffffffc, 0x5, 0x100, 0xfb}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x6, 0x1, 0x40}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x8, 0x6}}}}}]}}]}}, 0x0) syz_usb_ep_write(r7, 0x81, 0xa4, &(0x7f0000000240)="b9425b446512d2323697354a16941ff5f4b4f1f0add7fc8280adbfa66d5b5ebe1adf42b8f59f90604e07d2388862672dfbf3e0c9d3969890524f3323746bc78946c7ec160f9e688f6b86781684ed273a5bd5531d459dc627ec0af211ebbf909987f5d2e8dcb3351da332165081af7d0814c57f5d65e4b436aa9f50bc0f19b7df372ff9ebcede1ff0cc752cf246a5d2da34a5a297dc14a469c3dd3e26b41c356484e06fd6") connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x804, &(0x7f00000000c0)={[{@shortname_win95}, {@uni_xlate}, {@utf8}, {@shortname_win95}, {@shortname_mixed}, {@utf8no}, {@rodir}, {@utf8no}, {@fat=@check_normal}, {@fat=@codepage={'codepage', 0x3d, '775'}}, {@fat=@check_strict}, {@utf8no}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'iso8859-6'}}, {@shortname_win95}, {@shortname_winnt}]}, 0x1, 0x276, &(0x7f00000003c0)="$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") write$selinux_access(0xffffffffffffffff, &(0x7f0000000800)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6763745f723a6574635f9a"], 0x44) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0xfeff, &(0x7f0000000100)="e0857f9f582f0300000000000000", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 10.615302806s ago: executing program 4 (id=2487): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0xfd214ae7a1b487c8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0500000004000000030000000800000000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="00000000080000000000000000000200000000000000000000000000a8c9c5450307cad01104128a1122085517b8809727911c9d5f923ae6bb3800b157c1d7ad72b5d8c682fcc7220de07d5f8c"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1810714, &(0x7f0000000d00)={[{@dax}, {@init_itable_val}, {@nolazytime}, {@grpid}, {@prjquota}, {@norecovery}, {@data_writeback}, {@errors_continue}, {@auto_da_alloc}, {@test_dummy_encryption}], [{@flag='sync'}, {@seclabel}, {@func={'func', 0x3d, 'MODULE_CHECK'}}, {@euid_gt}, {@obj_user={'obj_user', 0x3d, '@[\\]'}}, {@appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, 'sched_switch\x00'}}]}, 0xff, 0x468, &(0x7f0000000e00)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x9, &(0x7f0000000400)=0x80, 0x4) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000180)={@loopback={0xfec0ffff00000000}, 0x0, 0x0, 0x3}, 0x20) setitimer(0x0, 0x0, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) lstat(&(0x7f0000000500)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000380)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x21, 0x3, 0x2b0, 0x268, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private2, @local, [], [], 'geneve1\x00', 'syzkaller1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48}}, {{@ipv6={@empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'erspan0\x00', 'veth1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r6 = dup(r5) ioctl$PTP_EXTTS_REQUEST2(r6, 0xc0603d06, &(0x7f0000000000)) bind$unix(r4, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 9.096758755s ago: executing program 1 (id=2488): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r4}, 0x10) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0xfe66}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001a00)=@newtfilter={0x8c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {}, {0xfff1}}, [@filter_kind_options=@f_fw={{0x7}, {0x60, 0x2, [@TCA_FW_MASK={0x8}, @TCA_FW_INDEV={0x14, 0x3, 'gre0\x00'}, @TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x1}}]}]}}]}, 0x8c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c10000", @ANYRES32=r8, @ANYBLOB="0100000000000000240012000c000100627269646765"], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000001ce5000000e1000000000000a8629e220000000000000000"], 0x48) 9.088587706s ago: executing program 4 (id=2489): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='clear_refs\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 7.452850976s ago: executing program 1 (id=2490): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x3a, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f0000000040)='./bus\x00', 0x2008410, &(0x7f0000001f80)=ANY=[@ANYBLOB="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", @ANYRES64=0x0], 0x1, 0x553b, &(0x7f000000ac00)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000800000200000000200000000181900000bc558b4dd4f0ee7da855edb9a74b259c0299a95f8840b3e17c4f8e486925ff3d960862c78436186d091127142063b1b8cd6139df7005c1ecb0b0e80170f7e506cb10dac74d034d9871474a58ee23504a5929fc64145bf3fb954d1d106e8f52d368df7", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000280)='f2fs_write_checkpoint\x00', r3}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) 7.452451816s ago: executing program 4 (id=2491): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00220f0000df753c6f03700d7dec834f11e31201a1"], 0x0}, 0x0) ioctl$VHOST_VDPA_GET_STATUS(0xffffffffffffffff, 0x8001af71, &(0x7f0000000000)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000e00)=@deltaction={0x4c, 0x31, 0x0, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x4}, @TCA_ACT_TAB={0x34, 0x1, [{0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x14, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}]}, 0x4c}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) r4 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) r5 = add_key$fscrypt_v1(&(0x7f0000000540), &(0x7f0000000440)={'fscrypt:', @desc1}, &(0x7f0000000880)={0x0, "6035ae1ef8ffffff1705322225930e6c1e3e2a51a92fd796bc34d7a4c6a7ef5402003fd7264c39ea00c508ba6062696138006f00", 0x4}, 0x48, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x4, r5, r4, 0x0, 0x0) keyctl$KEYCTL_MOVE(0x4, r3, r3, 0x0, 0x0) 5.735300884s ago: executing program 1 (id=2493): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2040d0, &(0x7f0000000100), 0xfb, 0x49f, &(0x7f0000001440)="$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") r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000280)='%ps \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000c40)='sys_enter\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r3, 0xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@volatile={0x1}]}, {0x0, [0x0, 0x30, 0x2e, 0x61, 0x30, 0x30]}}, &(0x7f0000000580)=""/89, 0x2c, 0x59, 0x1, 0x0, 0x10000, @value=r4}, 0x28) bpf$TOKEN_CREATE(0x24, &(0x7f0000000700)={0x0, r1}, 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f00000006c0)=ANY=[@ANYRESOCT=0x0, @ANYRES64=r2], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f00000003c0)={'bridge0\x00'}) ioctl$sock_SIOCBRDELBR(r7, 0x89a1, &(0x7f0000000080)='bridge0\x00') r8 = inotify_init() inotify_add_watch(r8, &(0x7f00000000c0)='./file0\x00', 0x20000002) 5.733790024s ago: executing program 2 (id=2494): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv6_delrule={0x1c, 0x18, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0x1c}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_all\x00', 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000000000001}) write$binfmt_script(r2, &(0x7f0000000100)={'#! ', '', [{0x20, 'wg0\x00'}, {0x20, ']'}, {}, {}, {0x20, 'cpuacct.usage_all\x00'}]}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(r4, 0x1, 0x19, &(0x7f00000000c0)='wg0\x00', 0x4) sendmmsg$inet(r4, &(0x7f0000001b80)=[{{&(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000180)="a33dafaa53bdab00633496ee289d84a0d54b4610475a7c92838f1f415349642a86ea11285a8294685429cab60eafc9557c76d99ba022c25aa9c7b7d7146586ec018fdf05900a5a7ccf3677ad959983a78446d615d4dc60a99ce45b89c16f", 0x5e}, {&(0x7f0000000a40)="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", 0x50f}], 0x2, &(0x7f0000000240)=ANY=[@ANYBLOB="14000000000000000000000002000000050000000000000014000000000000000000000063fe48a02f22f4a41bff0300000000000000000000001a81c4ec3030d6dac1caf90454881dbe60072412287cebe735eb37d6cd5648c921877d1bad6afcd87b6c48ba51984d90455a7dbfb7c299d478559bf14476e4ed72fedff0ca14044ffe77a093a4468f49e5c1b174a0c820066b91a7"], 0x30}}], 0x1, 0x40) 3.934134569s ago: executing program 0 (id=2492): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) mkdir(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r8, 0x0, 0x0, 0x8000, &(0x7f0000000180)={0xa, 0x4e24, 0x0, @dev}, 0x1c) sendto$inet6(r8, 0x0, 0xfffffffffffffd2f, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c) 3.933819209s ago: executing program 1 (id=2495): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) mount$bind(&(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340), 0x8004, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000380)={'bridge_slave_0\x00', @random="c61f10929cd8"}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=@framed={{}, [@printk={@llx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = socket$tipc(0x1e, 0x1, 0x0) bind$tipc(r6, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r7 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r7, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)="c4", 0x1}], 0x1}, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000000)='./file1\x00', 0x1000801, &(0x7f0000000140)=ANY=[], 0xff, 0x208, &(0x7f0000000780)="$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") clock_nanosleep(0x2, 0x0, &(0x7f0000000300)={0x0, 0x989680}, 0x0) (fail_nth: 1) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000040)={'bridge_slave_1\x00', &(0x7f0000000000)=@ethtool_perm_addr}) 3.933233469s ago: executing program 2 (id=2496): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x89}, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x74, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f00000003c0)={0x20000000}) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000080)) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1068) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000440), 0x51, 0x20004) mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000340), 0x908004, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000380)={'bridge_slave_0\x00', @random="c61f10929cd8"}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff0000ff03bfa100000000000007010000f8ffffffb7020000850000002d0000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$inet_tcp(0x2, 0x1, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = socket$tipc(0x1e, 0x1, 0x0) bind$tipc(r6, &(0x7f0000000000)=@id={0x1e, 0x3, 0x1, {0x4e22, 0x2}}, 0x10) r7 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r7, &(0x7f0000000240)={&(0x7f0000000400)=@name={0x1e, 0x2, 0x0, {{0x0, 0x2}, 0x3}}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000480)="ed05ce6ed4d926507ca16cb253d59e3ebc88943f2da7b2686c4d0049b1090c5129f1db98c7c46f0a7e745eb6620af16c85370f8e69b652f0620d54d651c687a2052e7dba4a1f267d663a5a93079d7f7552e4874b38a32467708851a434e89d15459b4e88b667c88332368fc1a3c7771716a822942e379f566a94a669eacec720b5bd87484bc1008815abf9a3a5759fb7bf2c33939e587412e23f10e7bcbfca1587010745db7fa54d6bf875b5d221a79120d54fa2f3ae5bbc45f363ba05ebd9847ec3c29a0125f5aa354667e78482b32bc13c63f92fc85370567221d977b455562d0dab5bceb9eadd5d0de4b308abe5e6ee2de19a2115684a8d5f18823921327a7bf62a", 0x103}], 0x1, 0x0, 0x0, 0x4400484f}, 0x44002) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000000)='./file1\x00', 0x1000801, &(0x7f0000000140)=ANY=[], 0xff, 0x208, &(0x7f0000000780)="$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") clock_nanosleep(0x2, 0x0, &(0x7f0000000300)={0x0, 0x989680}, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) 3.932800849s ago: executing program 4 (id=2497): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x7, 0x6, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='ext4_remove_blocks\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0xa08000, &(0x7f0000000240), 0xfe, 0x56b, &(0x7f00000003c0)="$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") chdir(&(0x7f0000000080)='./file0\x00') lsetxattr$trusted_overlay_upper(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000280)=ANY=[], 0xe01, 0x0) rename(&(0x7f0000000300)='./file0\x00', &(0x7f00000000c0)='./file1\x00') write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='ext4_es_find_extent_range_enter\x00'}, 0x10) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f00000005c0)={0x1, 0x0, [{0x80000008, 0x0, 0x0, 0x0, 0xffffffff}]}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x30, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}, @IPSET_ATTR_MAXELEM={0x8}]}]}, 0x30}}, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2.010750785s ago: executing program 0 (id=2498): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="6801"], 0x168) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r3}}) 2.010204025s ago: executing program 1 (id=2499): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x44f, 0xb65d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000b80)={0x24, 0x0, 0x0, &(0x7f0000000340)={0x0, 0x22, 0x6, {[@main=@item_012={0x0, 0x0, 0xb}, @main=@item_4={0x3, 0x0, 0xa, "b5fa124b"}]}}, 0x0}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000001340)={0x44, &(0x7f0000001080), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') dup(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f0000006280)="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", 0x2000, &(0x7f0000001dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001780)={0x90, 0x0, 0x0, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, r2}, 0x50) mount$fuse(0x0, &(0x7f0000000080)='./file0/../file0/file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=r3]) umount2(&(0x7f00000001c0)='./file0\x00', 0x1) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x4842, 0x0) r4 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000dc0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xff, 0x80, 0x8, [{{0x9, 0x4, 0x0, 0xfd, 0x1, 0x7, 0x1, 0x1, 0x1, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x4, 0x0, 0xb}}}}}]}}]}}, 0x0) syz_usb_control_io$printer(r4, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1e, @string={0x1e, 0x3, "19b80207899614429f2dafd787e54c59f6513b87baad664136adf532"}}}, 0x0) syz_usb_control_io(r4, &(0x7f00000015c0)={0x2c, 0x0, &(0x7f0000001480)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40b}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_ep_read(r4, 0x1, 0x0, 0x0) syz_usb_disconnect(r4) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r5, &(0x7f0000001680)="f31552c51ef8205abfa9f8ff810b310cabf01c94d4ce91d436423cf90c15d97c1217cc21e800e1a7c1ffe6b70eb4e86ad3d217ad07e656cdbdf756ca5078b27a12", 0x41) r6 = syz_clone(0x0, &(0x7f0000000100)="7a2c0d02c336df5292a53d736808d13fae49c6d6e9faa7e41eb7af803c7664522fadf4b2fa45c8344281f71b8c6f84e97a5e18f79335a78d14c1e60ab63c4b0f0d2dfd418725a1ccba1b8de638ffa9217835e79be4924e6f6074b0ac84dea5cce75e1173e1c48c8914b60190d2322f690146714a5dcd4d460808c32247b703bc75", 0x81, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)="1215bbff97f71e8c0ec95d2825e53aeca6f66a953383bdf09b594e57eca8a333dfb0edbc353533c8b84e9e152f23320d631da5b3109802bf4b09a54703521959e005c9da73d2eabf2446ccb1178a771a7132b78789271dcfe19a857148088b904b72032671da6d165b88b40da77246a25a468fad65bf44bd652f1bbeba142bbe12b19809db12a8e122fef05a82b32393c5335a3770679deab36df5eecfc07167cf8cc75dbb6b1f") syz_open_procfs(r6, &(0x7f0000000080)='status\x00') 2.009568695s ago: executing program 2 (id=2500): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB="00003a6ab0dfe4e4"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="00000000004f1d00b70200000000000085000300860000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) process_mrelease(0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="f6ff000004000000ff0f00000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x1e, 0x25, &(0x7f0000000c40)=ANY=[@ANYBLOB="180000004a373d2f761b21dcf20100010007000000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000070000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000185a00001000000000000000000000006542f4ff0400000018460000ffffffff00000000000000001851000010000000000000000000000018650000010000000000000001000080bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], 0x0, 0x8, 0x2e, &(0x7f00000003c0)=""/46, 0x41000, 0x80, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x8, &(0x7f0000000a40)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000a80)={0x3, 0x3, 0x10000000}, 0x10, 0x0, 0xffffffffffffffff, 0x2, &(0x7f0000000ac0)=[r0, r0], &(0x7f0000000b00)=[{0x5, 0x5, 0x4, 0x4}, {0x5, 0x1, 0x1, 0xa}], 0x10, 0x1, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000b98bc2c900000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000340)={r2, 0x0, 0x0}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x2808000, &(0x7f0000000040)=ANY=[@ANYBLOB="696f636861727365743d6d616369810e00002c696f636861727365743d6d616363726d617469616e2c73686f72746e616d653d6d697865642c756e695f786c6174653d73686f72746e616d653d77526e39352c7f8ed39f747a3d5554432c73686f72746e616d653d6d6978c4c36e717466383d312c73686f72746e616d653d77696e39352c757466383d302c726f6469722c73686f72423d79be653d6d697865642c356e695f786c6174650000"], 0x1, 0x294, &(0x7f0000000500)="$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") mkdir(&(0x7f0000000000)='./control\x00', 0x0) syz_io_uring_setup(0x1b1b, &(0x7f0000000040)={0x0, 0x9461, 0x8, 0x3, 0x249}, &(0x7f00000000c0), &(0x7f0000000100)) 2.009198705s ago: executing program 4 (id=2501): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r4}, 0x10) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0xfe66}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001a00)=@newtfilter={0x8c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {}, {0xfff1}}, [@filter_kind_options=@f_fw={{0x7}, {0x60, 0x2, [@TCA_FW_MASK={0x8}, @TCA_FW_INDEV={0x14, 0x3, 'gre0\x00'}, @TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x1}}]}]}}]}, 0x8c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c10000", @ANYRES32=r8, @ANYBLOB="0100000000000000240012000c000100627269646765"], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000001ce5000000e1000000000000a8629e220000000000000000"], 0x48) 1.351099ms ago: executing program 0 (id=2502): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="757466383d302c726f6469722c757365667265652c636865636b3d7374726963742c636f646570616765393933362c6e6f6e756d7461696c3d302c696f636861727365743d757466382c6e6f6e756d7461696c3d302c6e6f6e756d7461696c3d302c696f63686172736574ff6d61636963656c616e642c616c6c6f775f7574696d653d30303030303030303030303030303030303030303030312c73686f72746e616d653d77696e39522c726f6469722c00"], 0x26, 0x336, &(0x7f00000001c0)="$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") r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) keyctl$negate(0xd, 0x0, 0x4, 0x0) add_key$fscrypt_provisioning(&(0x7f0000000200), 0x0, &(0x7f0000001480)=ANY=[], 0x8, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x0, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xc, 0xffffff60, 0x2, 0x9, 0x1, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x90) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0) ptrace(0x10, 0x1) syz_usb_connect(0x0, 0x24, &(0x7f0000003cc0)=ANY=[@ANYBLOB="121500003d55b8"], 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000100)) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 447.94Âľs ago: executing program 2 (id=2503): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="160000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB="0000000016000000000000000000000000000000ef2fbebc08fb7e0a2f9e1e6146a1a96aa364c05b8e7e08048cd88a34804e4fe61b7828e9ef776c12cc04da1854b6c6634d4e9a885292c974c249ed2b9e144ce63599323c80b4454d34fd761c888a11bbcde2e2157c637318ed8d706cf06f72b84dfdb2c2b5dcb3a63aa8e98ed0f14085ec1485c1b6e4330f", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES64=0x0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000005900"/64], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f00000004c0)}, 0x20) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r1}, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x513, &(0x7f0000000c40)="$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") socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYRES64=0x0, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000002000000000000000000f0018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x4000000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\f\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0x5, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r7 = socket(0x10, 0x3, 0x0) ioctl$RTC_PIE_ON(r6, 0x7005) read(r7, &(0x7f0000000240)=""/150, 0x96) close_range(r5, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) 0s ago: executing program 4 (id=2504): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="757466383d302c726f6469722c757365667265652c636865636b3d7374726963742c636f646570616765393933362c6e6f6e756d7461696c3d302c696f636861727365743d757466382c6e6f6e756d7461696c3d302c6e6f6e756d7461696c3d302c696f63686172736574ff6d61636963656c616e642c616c6c6f775f7574696d653d30303030303030303030303030303030303030303030312c73686f72746e616d653d77696e39522c726f6469722c00"], 0x26, 0x336, &(0x7f00000001c0)="$eJzs3T1sW9UXAPDjviROI/VvD3+pgsmwIaGqCWKAKVFVpIoMUGTxtWDRlI/YVIqFpTDE9QJiBLEgwcTWAcbOiAEhNgZWioQKiIVulVrxkP1e7OeP0BThlI/fb4iOzj3H976Xq/glSm5eWo/tC4tx8caN67G8XIqF9TPrcbMU1TgWSWQuBwDwb3IzTePXNHPn6vdX9qOlOa8LAJifwfv/KydGifK9XA0AcBQO+f3/UzOzl+a2LABgjqbe/x8cG574Mf/C8HcCAIB/rmeef+HJjc2I87XackTrnU69U4/HR+MbF+O1aMZWnI5K3I7IHhSyp4X+xyfObZ49Xev7sRr1fkenHtHqdurZk8JGMugvx2pUopr3p8P+pN+/OuivRcTl7mD+aJU69cVYyef/biW2Yi0q8f+p/ohzm2fXavkL1Fv7/d2IXizvX0R//aeiEt+8HJeiGRei3zta/95qrXYm3Rzr71wpD+oAAAAAAAAAAAAAAAAAAAAAAGAeTtWGqsPzb9JWt/P2+cmC6tj5OPVsOD8fqJedD5SW90/neTeZPB9o/HyeTn0hjt3TKwcAAAAAAAAAAAAAAAAAAIC/j/buUjSaza2d9u5b28WgW8i88dWnXxyPyZrXk1EmFrKXG6vJc1HoSmLYng7b02SsJg+SiFHxlavDFRdrysOrmGrvB+WpoVK+pkazeeKBHz6a1fXbKJPE1G0ZD0r5/IWh1v+y1B90HRys3aHmWpqmB7XvfTjdFaWIhalP3F8RfHn91fseaZ98dJD5PD/04aGHK89e++CTn7cbzchvTbO5tNO+nf7puZLC/inl97k0YyfMDnqjTG+nvdtIvv3lufvf+3qiOJm9f9Ji5s2D5/psMrOUBf1lHuZKF2ds/tnBi7eGu/fub+bJj9cbV/e+/+mwXYUvEg7qAAAAAAAAAAAAAAAAAACAI1H4W/G78NjT81sRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABy90f//LwS9qcxhglvdmB4qb+20D5z8+JFeKgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/2G/BwAA//9pxHjs") r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) keyctl$negate(0xd, 0x0, 0x4, 0x0) add_key$fscrypt_provisioning(&(0x7f0000000200), 0x0, &(0x7f0000001480)=ANY=[], 0x8, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x0, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xc, 0xffffff60, 0x2, 0x9, 0x1, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x90) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0) ptrace(0x10, 0x1) syz_usb_connect(0x0, 0x24, &(0x7f0000003cc0)=ANY=[@ANYBLOB="121500003d55"], 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) kernel console output (not intermixed with test programs): locksize (268), supports only 12 [ 615.804770][T10086] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 615.826178][T10082] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 615.834545][T10086] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 615.835136][ T9281] EXT4-fs (loop0): unmounting filesystem. [ 615.848536][T10082] F2FS-fs (loop2): invalid crc value [ 615.862092][T10082] F2FS-fs (loop2): Found nat_bits in checkpoint [ 615.883837][T10086] F2FS-fs (loop4): Found nat_bits in checkpoint [ 615.991174][T10082] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 615.998842][T10082] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 616.054301][T10086] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 616.146805][T10086] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 616.217862][T10126] bridge0: port 3(vlan2) entered blocking state [ 616.223973][T10126] bridge0: port 3(vlan2) entered disabled state [ 616.916052][T10138] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2308'. [ 617.245662][T10142] loop1: detected capacity change from 0 to 512 [ 617.277476][ T28] kauditd_printk_skb: 67 callbacks suppressed [ 617.277492][ T28] audit: type=1400 audit(1727592626.569:4740): avc: denied { mounton } for pid=10141 comm="syz.1.2309" path="/22/bus" dev="tmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 617.379519][T10142] EXT4-fs error (device loop1): ext4_orphan_get:1422: comm syz.1.2309: bad orphan inode 17 [ 617.389634][T10142] ext4_test_bit(bit=16, block=4) = 1 [ 617.394744][T10142] is_bad_inode(inode)=0 [ 617.398908][T10142] NEXT_ORPHAN(inode)=0 [ 617.402905][T10142] max_ino=32 [ 617.405822][T10142] i_nlink=1 [ 617.408893][T10142] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 617.419463][ T28] audit: type=1400 audit(1727592626.709:4741): avc: denied { write } for pid=10141 comm="syz.1.2309" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 617.454389][T10142] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.2309: bg 0: block 7: invalid block bitmap [ 617.466657][ T28] audit: type=1400 audit(1727592626.739:4742): avc: denied { add_name } for pid=10141 comm="syz.1.2309" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 617.620694][T10150] loop3: detected capacity change from 0 to 40427 [ 617.635981][ T28] audit: type=1400 audit(1727592626.739:4743): avc: denied { create } for pid=10141 comm="syz.1.2309" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 617.653346][T10150] F2FS-fs (loop3): Found nat_bits in checkpoint [ 617.673709][ T9774] EXT4-fs (loop1): unmounting filesystem. [ 617.706202][ T28] audit: type=1400 audit(1727592626.989:4744): avc: denied { ioctl } for pid=10139 comm="syz.2.2306" path="socket:[51308]" dev="sockfs" ino=51308 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 617.719414][T10158] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2306'. [ 617.731398][ T28] audit: type=1400 audit(1727592626.999:4745): avc: denied { read write } for pid=10161 comm="syz.1.2315" name="raw-gadget" dev="devtmpfs" ino=166 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 617.742835][T10150] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 617.767009][ T28] audit: type=1400 audit(1727592626.999:4746): avc: denied { open } for pid=10161 comm="syz.1.2315" path="/dev/raw-gadget" dev="devtmpfs" ino=166 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 617.794691][ T28] audit: type=1400 audit(1727592626.999:4747): avc: denied { ioctl } for pid=10161 comm="syz.1.2315" path="/dev/raw-gadget" dev="devtmpfs" ino=166 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 617.819943][ T28] audit: type=1400 audit(1727592627.069:4748): avc: denied { write open } for pid=10148 comm="syz.3.2311" path="/60/file0/file0" dev="loop3" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 617.843381][ T28] audit: type=1400 audit(1727592627.069:4749): avc: denied { read } for pid=10148 comm="syz.3.2311" name="file0" dev="loop3" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 617.996861][ T5954] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 618.370337][ T9190] syz-executor: attempt to access beyond end of device [ 618.370337][ T9190] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 618.459548][T10176] bridge0: port 3(vlan2) entered blocking state [ 618.465645][T10176] bridge0: port 3(vlan2) entered disabled state [ 619.400432][T10172] FAULT_INJECTION: forcing a failure. [ 619.400432][T10172] name failslab, interval 1, probability 0, space 0, times 0 [ 619.413080][T10172] CPU: 1 PID: 10172 Comm: syz.4.2316 Not tainted 6.1.99-syzkaller-00091-g110595418159 #0 [ 619.422668][T10172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 619.432576][T10172] Call Trace: [ 619.435683][T10172] [ 619.438458][T10172] dump_stack_lvl+0x151/0x1b7 [ 619.442975][T10172] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 619.448275][T10172] ? release_sock+0x163/0x1b0 [ 619.452790][T10172] dump_stack+0x15/0x1c [ 619.456775][T10172] should_fail_ex+0x3d0/0x520 [ 619.461285][T10172] ? __alloc_skb+0xcc/0x2d0 [ 619.465624][T10172] __should_failslab+0xaf/0xf0 [ 619.470225][T10172] should_failslab+0x9/0x20 [ 619.474566][T10172] kmem_cache_alloc_node+0x3e/0x2d0 [ 619.479608][T10172] __alloc_skb+0xcc/0x2d0 [ 619.483788][T10172] netlink_sendmsg+0x7a6/0xd30 [ 619.488368][T10172] ? netlink_getsockopt+0x540/0x540 [ 619.493403][T10172] ? security_socket_sendmsg+0x82/0xb0 [ 619.498692][T10172] ? netlink_getsockopt+0x540/0x540 [ 619.503737][T10172] ____sys_sendmsg+0x5d3/0x9a0 [ 619.508332][T10172] ? __sys_sendmsg_sock+0x40/0x40 [ 619.513197][T10172] __sys_sendmsg+0x2a9/0x390 [ 619.517613][T10172] ? ____sys_sendmsg+0x9a0/0x9a0 [ 619.522386][T10172] ? __kasan_check_write+0x14/0x20 [ 619.527331][T10172] ? mutex_unlock+0xb2/0x260 [ 619.531765][T10172] ? __ia32_sys_read+0x90/0x90 [ 619.536361][T10172] __x64_sys_sendmsg+0x7f/0x90 [ 619.540961][T10172] x64_sys_call+0x16a/0x9a0 [ 619.545297][T10172] do_syscall_64+0x3b/0xb0 [ 619.549550][T10172] ? clear_bhb_loop+0x55/0xb0 [ 619.554064][T10172] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 619.559792][T10172] RIP: 0033:0x7fcafe37dff9 [ 619.564049][T10172] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 619.583493][T10172] RSP: 002b:00007fcaff25b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 619.591745][T10172] RAX: ffffffffffffffda RBX: 00007fcafe535f80 RCX: 00007fcafe37dff9 [ 619.599543][T10172] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 000000000000000a [ 619.607353][T10172] RBP: 00007fcaff25b090 R08: 0000000000000000 R09: 0000000000000000 [ 619.615164][T10172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 619.622980][T10172] R13: 0000000000000000 R14: 00007fcafe535f80 R15: 00007fff0b1399f8 [ 619.630795][T10172] [ 624.846810][ T5954] usb 2-1: unable to read config index 0 descriptor/start: -110 [ 624.854287][ T5954] usb 2-1: can't read configurations, error -110 [ 625.066735][ T5954] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 630.276773][ T5954] usb 2-1: device descriptor read/64, error -110 [ 630.606782][ T5954] usb 2-1: device descriptor read/64, error -32 [ 630.727548][ T5954] usb usb2-port1: attempt power cycle [ 631.146750][ T5954] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 631.256792][ T5954] usb 2-1: device descriptor read/8, error -71 [ 631.466730][ T5954] usb 2-1: device descriptor read/8, error -71 [ 635.350332][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 635.350348][ T28] audit: type=1400 audit(1727592644.639:4754): avc: denied { read } for pid=10207 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 635.407065][ T28] audit: type=1400 audit(1727592644.639:4755): avc: denied { open } for pid=10207 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 635.446754][ T28] audit: type=1400 audit(1727592644.639:4756): avc: denied { mounton } for pid=10207 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 635.599199][T10210] bridge0: port 1(bridge_slave_0) entered blocking state [ 635.606056][T10210] bridge0: port 1(bridge_slave_0) entered disabled state [ 635.613446][T10210] device bridge_slave_0 entered promiscuous mode [ 635.623676][T10207] bridge0: port 1(bridge_slave_0) entered blocking state [ 635.630541][T10207] bridge0: port 1(bridge_slave_0) entered disabled state [ 635.637834][T10207] device bridge_slave_0 entered promiscuous mode [ 635.644370][T10208] bridge0: port 1(bridge_slave_0) entered blocking state [ 635.651557][T10208] bridge0: port 1(bridge_slave_0) entered disabled state [ 635.658847][T10208] device bridge_slave_0 entered promiscuous mode [ 635.666765][T10210] bridge0: port 2(bridge_slave_1) entered blocking state [ 635.673604][T10210] bridge0: port 2(bridge_slave_1) entered disabled state [ 635.680927][T10210] device bridge_slave_1 entered promiscuous mode [ 635.692075][T10209] bridge0: port 1(bridge_slave_0) entered blocking state [ 635.698994][T10209] bridge0: port 1(bridge_slave_0) entered disabled state [ 635.706126][T10209] device bridge_slave_0 entered promiscuous mode [ 635.713683][T10207] bridge0: port 2(bridge_slave_1) entered blocking state [ 635.720558][T10207] bridge0: port 2(bridge_slave_1) entered disabled state [ 635.727748][T10207] device bridge_slave_1 entered promiscuous mode [ 635.734053][T10208] bridge0: port 2(bridge_slave_1) entered blocking state [ 635.740946][T10208] bridge0: port 2(bridge_slave_1) entered disabled state [ 635.748129][T10208] device bridge_slave_1 entered promiscuous mode [ 635.763362][T10209] bridge0: port 2(bridge_slave_1) entered blocking state [ 635.770254][T10209] bridge0: port 2(bridge_slave_1) entered disabled state [ 635.777574][T10209] device bridge_slave_1 entered promiscuous mode [ 635.865089][T10211] bridge0: port 1(bridge_slave_0) entered blocking state [ 635.872160][T10211] bridge0: port 1(bridge_slave_0) entered disabled state [ 635.879454][T10211] device bridge_slave_0 entered promiscuous mode [ 635.898657][T10211] bridge0: port 2(bridge_slave_1) entered blocking state [ 635.905511][T10211] bridge0: port 2(bridge_slave_1) entered disabled state [ 635.912828][T10211] device bridge_slave_1 entered promiscuous mode [ 636.071080][ T845] device bridge_slave_1 left promiscuous mode [ 636.077080][ T845] bridge0: port 2(bridge_slave_1) entered disabled state [ 636.084223][ T845] device bridge_slave_0 left promiscuous mode [ 636.090213][ T845] bridge0: port 1(bridge_slave_0) entered disabled state [ 636.097786][ T845] device veth1_macvtap left promiscuous mode [ 636.103595][ T845] device veth0_vlan left promiscuous mode [ 636.219083][T10210] bridge0: port 2(bridge_slave_1) entered blocking state [ 636.225936][T10210] bridge0: port 2(bridge_slave_1) entered forwarding state [ 636.233066][T10210] bridge0: port 1(bridge_slave_0) entered blocking state [ 636.239835][T10210] bridge0: port 1(bridge_slave_0) entered forwarding state [ 636.249096][T10208] bridge0: port 2(bridge_slave_1) entered blocking state [ 636.255938][T10208] bridge0: port 2(bridge_slave_1) entered forwarding state [ 636.263061][T10208] bridge0: port 1(bridge_slave_0) entered blocking state [ 636.269837][T10208] bridge0: port 1(bridge_slave_0) entered forwarding state [ 636.283607][ T6661] bridge0: port 1(bridge_slave_0) entered disabled state [ 636.292030][ T6661] bridge0: port 2(bridge_slave_1) entered disabled state [ 636.299726][ T6661] bridge0: port 1(bridge_slave_0) entered disabled state [ 636.307487][ T6661] bridge0: port 2(bridge_slave_1) entered disabled state [ 636.384139][ T5954] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 636.391423][ T5954] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 636.419485][ T5954] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 636.428456][ T5954] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 636.436411][ T5954] bridge0: port 1(bridge_slave_0) entered blocking state [ 636.443259][ T5954] bridge0: port 1(bridge_slave_0) entered forwarding state [ 636.451199][ T5954] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 636.459816][ T5954] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 636.467805][ T5954] bridge0: port 2(bridge_slave_1) entered blocking state [ 636.474623][ T5954] bridge0: port 2(bridge_slave_1) entered forwarding state [ 636.481832][ T5954] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 636.489685][ T5954] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 636.497504][ T5954] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 636.505300][ T5954] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 636.513143][ T5954] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 636.520375][ T5954] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 636.527681][ T5954] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 636.535733][ T5954] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 636.543766][ T5954] bridge0: port 1(bridge_slave_0) entered blocking state [ 636.550615][ T5954] bridge0: port 1(bridge_slave_0) entered forwarding state [ 636.557841][ T5954] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 636.565946][ T5954] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 636.573997][ T5954] bridge0: port 2(bridge_slave_1) entered blocking state [ 636.580834][ T5954] bridge0: port 2(bridge_slave_1) entered forwarding state [ 636.588014][ T5954] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 636.595232][ T5954] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 636.613584][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 636.621173][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 636.629311][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 636.637240][ T315] bridge0: port 1(bridge_slave_0) entered blocking state [ 636.644058][ T315] bridge0: port 1(bridge_slave_0) entered forwarding state [ 636.651807][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 636.659036][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 636.666222][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 636.674406][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 636.682509][ T315] bridge0: port 1(bridge_slave_0) entered blocking state [ 636.689347][ T315] bridge0: port 1(bridge_slave_0) entered forwarding state [ 636.696544][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 636.704715][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 636.712660][ T315] bridge0: port 2(bridge_slave_1) entered blocking state [ 636.719501][ T315] bridge0: port 2(bridge_slave_1) entered forwarding state [ 636.741013][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 636.748766][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 636.757191][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 636.765156][ T315] bridge0: port 2(bridge_slave_1) entered blocking state [ 636.772003][ T315] bridge0: port 2(bridge_slave_1) entered forwarding state [ 636.779361][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 636.786562][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 636.794193][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 636.802350][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 636.810508][ T315] bridge0: port 1(bridge_slave_0) entered blocking state [ 636.817347][ T315] bridge0: port 1(bridge_slave_0) entered forwarding state [ 636.824474][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 636.832537][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 636.840454][ T315] bridge0: port 2(bridge_slave_1) entered blocking state [ 636.847299][ T315] bridge0: port 2(bridge_slave_1) entered forwarding state [ 636.854406][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 636.862224][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 636.869916][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 636.877815][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 636.885496][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 636.893454][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 636.918411][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 636.926464][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 636.934266][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 636.948718][T10208] device veth0_vlan entered promiscuous mode [ 636.957097][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 636.964915][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 636.973435][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 636.981192][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 636.989766][ T2731] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 636.997130][ T2731] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 637.012159][T10211] device veth0_vlan entered promiscuous mode [ 637.025112][T10208] device veth1_macvtap entered promiscuous mode [ 637.037819][ T5954] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 637.046011][ T5954] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 637.054233][ T5954] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 637.062892][ T5954] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 637.071121][ T5954] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 637.078874][ T5954] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 637.086008][ T5954] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 637.100409][T10210] device veth0_vlan entered promiscuous mode [ 637.117995][ T5954] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 637.126096][ T5954] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 637.133634][ T5954] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 637.141843][ T5954] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 637.150134][ T5954] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 637.158234][ T5954] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 637.166310][ T5954] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 637.175446][ T5954] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 637.188399][T10211] device veth1_macvtap entered promiscuous mode [ 637.217823][ T2731] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 637.225758][ T2731] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 637.233649][ T2731] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 637.249712][T10209] device veth0_vlan entered promiscuous mode [ 637.258955][ T28] audit: type=1400 audit(1727592646.549:4757): avc: denied { mounton } for pid=10208 comm="syz-executor" path="/root/syzkaller.I1FjV0/syz-tmp" dev="sda1" ino=2028 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 637.261666][T10210] device veth1_macvtap entered promiscuous mode [ 637.290644][ T28] audit: type=1400 audit(1727592646.579:4758): avc: denied { mount } for pid=10208 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 637.313637][ T2731] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 637.315052][ T28] audit: type=1400 audit(1727592646.579:4759): avc: denied { mount } for pid=10208 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 637.343909][ T28] audit: type=1400 audit(1727592646.579:4760): avc: denied { mounton } for pid=10208 comm="syz-executor" path="/root/syzkaller.I1FjV0/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 637.373342][ T28] audit: type=1400 audit(1727592646.579:4761): avc: denied { mounton } for pid=10208 comm="syz-executor" path="/root/syzkaller.I1FjV0/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=51038 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 637.377834][ T2731] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 637.412728][ T28] audit: type=1400 audit(1727592646.599:4762): avc: denied { mounton } for pid=10208 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=370 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 637.435791][ T28] audit: type=1400 audit(1727592646.599:4763): avc: denied { mount } for pid=10208 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 637.458862][ T2731] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 637.466166][ T2731] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 637.473695][ T2731] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 637.481208][ T2731] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 637.490069][T10207] device veth0_vlan entered promiscuous mode [ 637.526248][T10209] device veth1_macvtap entered promiscuous mode [ 637.536833][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 637.546797][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 637.554962][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 637.563324][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 637.571814][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 637.580247][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 637.588675][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 637.596883][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 637.604888][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 637.643230][ T6661] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 637.653923][ T6661] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 637.662985][ T6661] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 637.671252][ T6661] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 637.683405][T10207] device veth1_macvtap entered promiscuous mode [ 637.694320][ T6661] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 637.708176][ T6661] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 637.723815][ T6661] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 637.766477][ T2731] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 638.083460][ T2731] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 638.091940][ T2731] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 638.107138][ T2731] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 638.747654][ T845] device bridge_slave_1 left promiscuous mode [ 638.763858][ T845] bridge0: port 2(bridge_slave_1) entered disabled state [ 638.791193][ T845] device bridge_slave_0 left promiscuous mode [ 638.811212][ T845] bridge0: port 1(bridge_slave_0) entered disabled state [ 639.221096][ T845] device bridge_slave_1 left promiscuous mode [ 639.235614][ T845] bridge0: port 2(bridge_slave_1) entered disabled state [ 639.261662][ T845] device bridge_slave_0 left promiscuous mode [ 639.277327][ T845] bridge0: port 1(bridge_slave_0) entered disabled state [ 639.304803][ T845] device bridge_slave_1 left promiscuous mode [ 639.313455][ T845] bridge0: port 2(bridge_slave_1) entered disabled state [ 639.347225][ T845] device bridge_slave_0 left promiscuous mode [ 639.356901][ T845] bridge0: port 1(bridge_slave_0) entered disabled state [ 639.372325][T10266] loop3: detected capacity change from 0 to 512 [ 639.378792][ T845] device bridge_slave_1 left promiscuous mode [ 639.389748][ T845] bridge0: port 2(bridge_slave_1) entered disabled state [ 639.405944][ T845] device bridge_slave_0 left promiscuous mode [ 639.419247][ T845] bridge0: port 1(bridge_slave_0) entered disabled state [ 639.429698][T10258] input: syz0 as /devices/virtual/input/input83 [ 639.439732][ T845] device veth1_macvtap left promiscuous mode [ 639.442172][T10266] EXT4-fs error (device loop3): ext4_do_update_inode:5212: inode #3: comm syz.3.2328: corrupted inode contents [ 639.445573][ T845] device veth0_vlan left promiscuous mode [ 639.463111][ T845] device veth1_macvtap left promiscuous mode [ 639.469080][ T845] device veth0_vlan left promiscuous mode [ 639.476213][T10266] EXT4-fs error (device loop3): ext4_dirty_inode:6074: inode #3: comm syz.3.2328: mark_inode_dirty error [ 639.488942][ T845] device veth1_macvtap left promiscuous mode [ 639.499673][ T845] device veth0_vlan left promiscuous mode [ 639.509769][T10266] EXT4-fs error (device loop3): ext4_do_update_inode:5212: inode #3: comm syz.3.2328: corrupted inode contents [ 639.521766][ T845] device veth1_macvtap left promiscuous mode [ 639.545526][T10266] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #3: comm syz.3.2328: mark_inode_dirty error [ 639.561648][ T845] device veth0_vlan left promiscuous mode [ 639.574796][T10266] EXT4-fs error (device loop3): ext4_acquire_dquot:6764: comm syz.3.2328: Failed to acquire dquot type 0 [ 639.605424][T10272] loop4: detected capacity change from 0 to 1024 [ 639.626786][ T297] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 639.638712][T10266] EXT4-fs error (device loop3): ext4_do_update_inode:5212: inode #16: comm syz.3.2328: corrupted inode contents [ 639.662856][T10272] EXT4-fs: Ignoring removed orlov option [ 639.673682][T10272] EXT4-fs (loop4): Test dummy encryption mode enabled [ 639.738511][T10272] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 639.755197][T10266] EXT4-fs error (device loop3): ext4_dirty_inode:6074: inode #16: comm syz.3.2328: mark_inode_dirty error [ 639.797924][T10266] EXT4-fs error (device loop3): ext4_do_update_inode:5212: inode #16: comm syz.3.2328: corrupted inode contents [ 639.818591][T10266] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #16: comm syz.3.2328: mark_inode_dirty error [ 639.958837][T10279] loop2: detected capacity change from 0 to 256 [ 639.970894][T10279] FAT-fs (loop2): IO charset maci not found [ 640.337988][T10266] EXT4-fs error (device loop3): ext4_do_update_inode:5212: inode #16: comm syz.3.2328: corrupted inode contents [ 640.361245][T10266] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 640.384510][T10266] EXT4-fs error (device loop3): ext4_do_update_inode:5212: inode #16: comm syz.3.2328: corrupted inode contents [ 640.408147][T10266] EXT4-fs error (device loop3): ext4_truncate:4302: inode #16: comm syz.3.2328: mark_inode_dirty error [ 640.429358][T10266] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 640.441415][T10266] EXT4-fs (loop3): 1 truncate cleaned up [ 640.447104][T10266] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 640.455842][T10266] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038 (0x7fffffff) [ 640.467339][ T297] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 640.506737][ T297] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 640.534182][ T297] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 640.569093][ T297] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 640.594092][ T297] usb 1-1: config 0 descriptor?? [ 640.597058][T10284] loop2: detected capacity change from 0 to 512 [ 640.605205][T10284] EXT4-fs: dax option not supported [ 640.706752][ T28] kauditd_printk_skb: 20 callbacks suppressed [ 640.724471][ T28] audit: type=1400 audit(1727592649.989:4782): avc: denied { create } for pid=10265 comm="syz.3.2328" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 641.196169][T10210] EXT4-fs (loop3): unmounting filesystem. [ 641.215200][T10290] loop3: detected capacity change from 0 to 256 [ 641.217000][T10258] bridge0: port 3(vlan2) entered blocking state [ 641.221818][T10290] FAT-fs (loop3): Unrecognized mount option "codepage9936" or missing value [ 641.228706][T10258] bridge0: port 3(vlan2) entered disabled state [ 641.272586][ T28] audit: type=1400 audit(1727592650.559:4783): avc: denied { create } for pid=10289 comm="syz.3.2332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 641.344863][T10294] loop1: detected capacity change from 0 to 512 [ 641.362390][T10294] EXT4-fs error (device loop1): ext4_do_update_inode:5212: inode #3: comm syz.1.2333: corrupted inode contents [ 641.374336][T10294] EXT4-fs error (device loop1): ext4_dirty_inode:6074: inode #3: comm syz.1.2333: mark_inode_dirty error [ 641.386002][T10294] EXT4-fs error (device loop1): ext4_do_update_inode:5212: inode #3: comm syz.1.2333: corrupted inode contents [ 641.398393][T10294] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #3: comm syz.1.2333: mark_inode_dirty error [ 641.409939][T10294] Quota error (device loop1): write_blk: dquota write failed [ 641.417205][T10294] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 641.427033][T10294] EXT4-fs error (device loop1): ext4_acquire_dquot:6764: comm syz.1.2333: Failed to acquire dquot type 0 [ 641.438674][T10294] EXT4-fs error (device loop1): ext4_do_update_inode:5212: inode #16: comm syz.1.2333: corrupted inode contents [ 641.450707][ T297] usbhid 1-1:0.0: can't add hid device: -71 [ 641.456520][ T297] usbhid: probe of 1-1:0.0 failed with error -71 [ 641.457018][T10294] EXT4-fs error (device loop1): ext4_dirty_inode:6074: inode #16: comm syz.1.2333: mark_inode_dirty error [ 641.464396][ T297] usb 1-1: USB disconnect, device number 34 [ 641.478057][T10294] EXT4-fs error (device loop1): ext4_do_update_inode:5212: inode #16: comm syz.1.2333: corrupted inode contents [ 641.491511][T10294] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #16: comm syz.1.2333: mark_inode_dirty error [ 641.502910][T10294] EXT4-fs error (device loop1): ext4_do_update_inode:5212: inode #16: comm syz.1.2333: corrupted inode contents [ 641.514915][T10294] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 641.523508][T10294] EXT4-fs error (device loop1): ext4_do_update_inode:5212: inode #16: comm syz.1.2333: corrupted inode contents [ 641.535689][T10294] EXT4-fs error (device loop1): ext4_truncate:4302: inode #16: comm syz.1.2333: mark_inode_dirty error [ 641.546906][T10294] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 641.556267][T10294] EXT4-fs (loop1): 1 truncate cleaned up [ 641.561992][T10294] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 641.570979][T10294] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038 (0x7fffffff) [ 641.633858][ T24] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 641.653679][ T28] audit: type=1400 audit(1727592650.939:4784): avc: denied { setopt } for pid=10293 comm="syz.1.2333" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 641.936953][ T24] usb 4-1: device descriptor read/64, error -71 [ 642.067872][T10305] loop0: detected capacity change from 0 to 512 [ 642.076320][T10305] EXT4-fs: dax option not supported [ 642.187872][T10308] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2334'. [ 642.956633][T10208] EXT4-fs (loop1): unmounting filesystem. [ 642.963043][T10211] EXT4-fs (loop4): unmounting filesystem. [ 643.021216][T10311] loop2: detected capacity change from 0 to 512 [ 643.046973][T10311] EXT4-fs: Ignoring removed orlov option [ 643.063499][T10315] loop1: detected capacity change from 0 to 1024 [ 643.070697][T10315] EXT4-fs: Ignoring removed orlov option [ 643.079333][T10315] EXT4-fs (loop1): Test dummy encryption mode enabled [ 643.090144][T10315] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 643.119990][T10311] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 643.137280][T10311] ext4 filesystem being mounted at /5/bus supports timestamps until 2038 (0x7fffffff) [ 643.141737][ T24] usb 4-1: device descriptor read/64, error -71 [ 643.217864][ T28] audit: type=1400 audit(1727592652.469:4785): avc: denied { write } for pid=10310 comm="syz.2.2339" name="bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 643.255080][ T28] audit: type=1400 audit(1727592652.469:4786): avc: denied { add_name } for pid=10310 comm="syz.2.2339" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 643.275409][ T28] audit: type=1400 audit(1727592652.469:4787): avc: denied { mounton } for pid=10310 comm="syz.2.2339" path="/5/bus/bus/bus" dev="loop2" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 643.309615][ T28] audit: type=1400 audit(1727592652.469:4788): avc: denied { setattr } for pid=10310 comm="syz.2.2339" name="work" dev="loop2" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 643.607533][T10324] input: syz0 as /devices/virtual/input/input84 [ 643.615706][ T28] audit: type=1400 audit(1727592652.469:4789): avc: denied { remove_name } for pid=10310 comm="syz.2.2339" name="#26" dev="loop2" ino=24 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 643.655544][T10328] bridge0: port 3(vlan2) entered blocking state [ 643.670546][ T24] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 643.678191][T10328] bridge0: port 3(vlan2) entered disabled state [ 643.752676][T10330] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2341'. [ 643.946719][ T24] usb 4-1: device descriptor read/64, error -71 [ 644.009138][T10209] EXT4-fs error (device loop2): ext4_readdir:260: inode #12: block 32: comm syz-executor: path /5/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 644.086186][T10332] fuse: Unknown parameter 'fd0x0000000000000003' [ 644.094966][T10332] cgroup: name respecified [ 644.102645][T10332] loop4: detected capacity change from 0 to 512 [ 644.120734][T10332] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 644.129586][T10332] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038 (0x7fffffff) [ 644.144988][T10332] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 644.153382][T10332] EXT4-fs error (device loop4): __ext4_remount:6412: comm syz.4.2343: Abort forced by user [ 644.163801][T10332] EXT4-fs (loop4): Remounting filesystem read-only [ 644.336728][ T24] usb 4-1: device descriptor read/64, error -71 [ 644.457203][ T24] usb usb4-port1: attempt power cycle [ 644.728899][T10341] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2344'. [ 644.926998][ T24] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 645.021843][T10211] EXT4-fs (loop4): unmounting filesystem. [ 645.156827][ T24] usb 4-1: device descriptor read/8, error -71 [ 645.262588][T10346] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2345'. [ 645.299999][T10346] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2345'. [ 645.676780][ T24] usb 4-1: device descriptor read/8, error -71 [ 645.826732][ T6661] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 645.946728][ T24] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 645.952664][T10350] loop4: detected capacity change from 0 to 16 [ 645.968152][T10350] erofs: (device loop4): mounted with root inode @ nid 36. [ 645.988810][T10350] syz.4.2347: attempt to access beyond end of device [ 645.988810][T10350] loop4: rw=0, sector=14552337248, nr_sectors = 16 limit=16 [ 646.090814][T10208] EXT4-fs (loop1): unmounting filesystem. [ 646.161158][ T24] usb 4-1: device descriptor read/8, error -71 [ 646.197118][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 646.197133][ T28] audit: type=1400 audit(1727592655.489:4801): avc: denied { ioctl } for pid=10347 comm="syz.0.2346" path="/dev/raw-gadget" dev="devtmpfs" ino=166 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 646.476870][ T24] usb 4-1: device descriptor read/8, error -71 [ 646.514644][ T6661] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 646.525456][ T6661] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 646.538199][ T6661] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 646.547062][ T6661] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 646.549035][T10360] loop1: detected capacity change from 0 to 512 [ 646.556111][ T6661] usb 1-1: config 0 descriptor?? [ 646.566222][ T28] audit: type=1400 audit(1727592655.549:4802): avc: denied { read write } for pid=10208 comm="syz-executor" name="loop1" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 646.596700][ T28] audit: type=1400 audit(1727592655.549:4803): avc: denied { open } for pid=10208 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 646.597305][ T24] usb usb4-port1: unable to enumerate USB device [ 646.620701][ T28] audit: type=1400 audit(1727592655.549:4804): avc: denied { ioctl } for pid=10208 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=115 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 646.654268][T10360] EXT4-fs error (device loop1): ext4_orphan_get:1422: comm syz.1.2350: bad orphan inode 17 [ 646.654286][ T28] audit: type=1400 audit(1727592655.669:4805): avc: denied { append } for pid=84 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=13 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 646.686734][T10360] ext4_test_bit(bit=16, block=4) = 1 [ 646.686748][ T28] audit: type=1400 audit(1727592655.819:4806): avc: denied { bpf } for pid=10359 comm="syz.1.2350" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 646.691931][T10360] is_bad_inode(inode)=0 [ 646.712275][ T28] audit: type=1400 audit(1727592655.829:4807): avc: denied { prog_load } for pid=10359 comm="syz.1.2350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 646.712308][ T28] audit: type=1400 audit(1727592655.869:4808): avc: denied { mounton } for pid=10359 comm="syz.1.2350" path="/6/bus" dev="tmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 646.739027][T10360] NEXT_ORPHAN(inode)=0 [ 646.761101][T10360] max_ino=32 [ 646.764153][ T28] audit: type=1400 audit(1727592656.009:4809): avc: denied { read } for pid=84 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 646.764179][T10360] i_nlink=1 [ 646.788851][T10360] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 646.797281][ T28] audit: type=1400 audit(1727592656.009:4810): avc: denied { search } for pid=84 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 646.835219][T10360] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.2350: bg 0: block 7: invalid block bitmap [ 646.999744][T10208] EXT4-fs (loop1): unmounting filesystem. [ 647.021613][T10366] loop1: detected capacity change from 0 to 512 [ 647.036375][T10366] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 647.114843][T10367] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2351'. [ 647.148424][T10367] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2351'. [ 647.516769][ T6661] usbhid 1-1:0.0: can't add hid device: -71 [ 647.522550][ T6661] usbhid: probe of 1-1:0.0 failed with error -71 [ 647.530073][ T6661] usb 1-1: USB disconnect, device number 35 [ 647.811514][T10371] loop4: detected capacity change from 0 to 512 [ 647.839065][T10371] EXT4-fs error (device loop4): ext4_do_update_inode:5212: inode #3: comm syz.4.2353: corrupted inode contents [ 647.851490][T10371] EXT4-fs error (device loop4): ext4_dirty_inode:6074: inode #3: comm syz.4.2353: mark_inode_dirty error [ 647.863000][T10371] EXT4-fs error (device loop4): ext4_do_update_inode:5212: inode #3: comm syz.4.2353: corrupted inode contents [ 647.874818][T10371] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #3: comm syz.4.2353: mark_inode_dirty error [ 647.886435][T10371] EXT4-fs error (device loop4): ext4_acquire_dquot:6764: comm syz.4.2353: Failed to acquire dquot type 0 [ 647.892996][T10376] loop1: detected capacity change from 0 to 1024 [ 647.897985][T10371] EXT4-fs error (device loop4): ext4_do_update_inode:5212: inode #16: comm syz.4.2353: corrupted inode contents [ 647.915418][T10371] EXT4-fs error (device loop4): ext4_dirty_inode:6074: inode #16: comm syz.4.2353: mark_inode_dirty error [ 647.926882][T10371] EXT4-fs error (device loop4): ext4_do_update_inode:5212: inode #16: comm syz.4.2353: corrupted inode contents [ 647.945214][T10376] EXT4-fs: Ignoring removed orlov option [ 647.950982][T10371] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #16: comm syz.4.2353: mark_inode_dirty error [ 647.986765][T10376] EXT4-fs (loop1): Test dummy encryption mode enabled [ 647.988871][T10378] loop0: detected capacity change from 0 to 512 [ 647.996798][T10371] EXT4-fs error (device loop4): ext4_do_update_inode:5212: inode #16: comm syz.4.2353: corrupted inode contents [ 648.020151][T10371] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 648.029416][T10371] EXT4-fs error (device loop4): ext4_do_update_inode:5212: inode #16: comm syz.4.2353: corrupted inode contents [ 648.041849][T10376] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 648.043330][T10378] EXT4-fs error (device loop0): ext4_do_update_inode:5212: inode #3: comm syz.0.2355: corrupted inode contents [ 648.069224][T10371] EXT4-fs error (device loop4): ext4_truncate:4302: inode #16: comm syz.4.2353: mark_inode_dirty error [ 648.075577][T10378] EXT4-fs error (device loop0): ext4_dirty_inode:6074: inode #3: comm syz.0.2355: mark_inode_dirty error [ 648.081180][T10371] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 648.100596][T10371] EXT4-fs (loop4): 1 truncate cleaned up [ 648.106106][T10371] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 648.115038][T10371] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038 (0x7fffffff) [ 648.125762][T10378] EXT4-fs error (device loop0): ext4_do_update_inode:5212: inode #3: comm syz.0.2355: corrupted inode contents [ 648.137712][T10378] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #3: comm syz.0.2355: mark_inode_dirty error [ 648.149276][T10378] EXT4-fs error (device loop0): ext4_acquire_dquot:6764: comm syz.0.2355: Failed to acquire dquot type 0 [ 648.160902][T10378] EXT4-fs error (device loop0): ext4_do_update_inode:5212: inode #16: comm syz.0.2355: corrupted inode contents [ 648.172900][T10378] EXT4-fs error (device loop0): ext4_dirty_inode:6074: inode #16: comm syz.0.2355: mark_inode_dirty error [ 648.208701][T10378] EXT4-fs error (device loop0): ext4_do_update_inode:5212: inode #16: comm syz.0.2355: corrupted inode contents [ 648.876944][T10378] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #16: comm syz.0.2355: mark_inode_dirty error [ 648.925158][T10378] EXT4-fs error (device loop0): ext4_do_update_inode:5212: inode #16: comm syz.0.2355: corrupted inode contents [ 649.028960][T10378] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 649.067440][T10378] EXT4-fs error (device loop0): ext4_do_update_inode:5212: inode #16: comm syz.0.2355: corrupted inode contents [ 649.217890][T10378] EXT4-fs error (device loop0): ext4_truncate:4302: inode #16: comm syz.0.2355: mark_inode_dirty error [ 649.229933][T10211] EXT4-fs (loop4): unmounting filesystem. [ 649.235046][T10378] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 649.245085][T10378] EXT4-fs (loop0): 1 truncate cleaned up [ 649.250804][T10378] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 649.266859][T10378] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038 (0x7fffffff) [ 649.290399][T10389] loop4: detected capacity change from 0 to 1024 [ 649.309700][T10389] EXT4-fs: Ignoring removed orlov option [ 649.316941][T10389] EXT4-fs (loop4): Test dummy encryption mode enabled [ 649.395495][T10389] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 649.971056][T10207] EXT4-fs (loop0): unmounting filesystem. [ 650.910221][T10208] EXT4-fs (loop1): unmounting filesystem. [ 650.992606][T10406] loop1: detected capacity change from 0 to 512 [ 651.013011][T10406] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 651.177683][T10407] input: syz0 as /devices/virtual/input/input85 [ 651.190372][T10408] bridge0: port 3(vlan2) entered blocking state [ 651.196445][T10408] bridge0: port 3(vlan2) entered disabled state [ 651.301118][ T28] kauditd_printk_skb: 35 callbacks suppressed [ 651.301141][ T28] audit: type=1400 audit(1727592660.589:4842): avc: denied { read } for pid=87 comm="acpid" name="event3" dev="devtmpfs" ino=1801 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 651.344372][ T28] audit: type=1400 audit(1727592660.619:4843): avc: denied { open } for pid=87 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=1801 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 651.374343][T10411] fuse: Unknown parameter 'fd0x0000000000000003' [ 651.403050][T10411] cgroup: name respecified [ 651.418665][T10411] loop1: detected capacity change from 0 to 512 [ 651.419238][ T28] audit: type=1400 audit(1727592660.619:4844): avc: denied { ioctl } for pid=87 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=1801 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 651.465042][T10411] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 651.478585][T10411] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038 (0x7fffffff) [ 651.485543][ T28] audit: type=1400 audit(1727592660.659:4845): avc: denied { read write } for pid=10410 comm="syz.1.2360" name="fuse" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 651.517142][T10411] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 651.525505][T10411] EXT4-fs error (device loop1): __ext4_remount:6412: comm syz.1.2360: Abort forced by user [ 651.535705][ T28] audit: type=1400 audit(1727592660.659:4846): avc: denied { open } for pid=10410 comm="syz.1.2360" path="/dev/fuse" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 651.546721][T10411] EXT4-fs (loop1): Remounting filesystem read-only [ 651.559003][ T28] audit: type=1400 audit(1727592660.799:4847): avc: denied { mounton } for pid=10410 comm="syz.1.2360" path="/10/file0/file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 651.589282][ T28] audit: type=1400 audit(1727592660.809:4848): avc: denied { remount } for pid=10410 comm="syz.1.2360" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 651.613552][ T28] audit: type=1400 audit(1727592660.899:4849): avc: denied { mounton } for pid=10416 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 651.682626][ T28] audit: type=1400 audit(1727592660.929:4850): avc: denied { module_request } for pid=10416 comm="syz-executor" kmod="netdev-nr3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 651.798659][T10416] bridge0: port 1(bridge_slave_0) entered blocking state [ 651.805554][T10416] bridge0: port 1(bridge_slave_0) entered disabled state [ 651.818662][ T28] audit: type=1400 audit(1727592661.109:4851): avc: denied { read write } for pid=10423 comm="syz.0.2363" name="raw-gadget" dev="devtmpfs" ino=166 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 651.818742][T10416] device bridge_slave_0 entered promiscuous mode [ 651.854686][T10416] bridge0: port 2(bridge_slave_1) entered blocking state [ 651.861584][T10416] bridge0: port 2(bridge_slave_1) entered disabled state [ 651.869331][T10416] device bridge_slave_1 entered promiscuous mode [ 651.945919][T10416] bridge0: port 2(bridge_slave_1) entered blocking state [ 651.952796][T10416] bridge0: port 2(bridge_slave_1) entered forwarding state [ 651.959903][T10416] bridge0: port 1(bridge_slave_0) entered blocking state [ 651.966657][T10416] bridge0: port 1(bridge_slave_0) entered forwarding state [ 652.000226][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 652.008104][ T6] bridge0: port 1(bridge_slave_0) entered disabled state [ 652.017551][ T6] bridge0: port 2(bridge_slave_1) entered disabled state [ 652.035217][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 652.043685][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 652.050559][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 652.062245][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 652.070467][ T315] bridge0: port 2(bridge_slave_1) entered blocking state [ 652.077320][ T315] bridge0: port 2(bridge_slave_1) entered forwarding state [ 652.095326][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 652.103943][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 652.117104][ T517] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 652.132685][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 652.145896][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 652.154410][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 652.162333][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 652.172727][T10416] device veth0_vlan entered promiscuous mode [ 652.185615][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 652.195105][T10416] device veth1_macvtap entered promiscuous mode [ 652.207509][ T684] device bridge_slave_1 left promiscuous mode [ 652.214278][ T684] bridge0: port 2(bridge_slave_1) entered disabled state [ 652.227159][ T684] device bridge_slave_0 left promiscuous mode [ 652.233106][ T684] bridge0: port 1(bridge_slave_0) entered disabled state [ 652.257901][ T684] device veth1_macvtap left promiscuous mode [ 652.263769][ T684] device veth0_vlan left promiscuous mode [ 652.277260][T10208] EXT4-fs (loop1): unmounting filesystem. [ 652.310089][T10211] EXT4-fs (loop4): unmounting filesystem. [ 652.444597][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 652.453225][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 652.462317][T10427] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2364'. [ 652.549172][T10431] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2365'. [ 652.579827][T10431] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2365'. [ 652.759945][ T517] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 652.771460][ T517] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 652.784185][ T517] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 652.790735][T10434] loop3: detected capacity change from 0 to 512 [ 652.793014][ T517] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 652.817892][ T517] usb 1-1: config 0 descriptor?? [ 652.827730][T10434] EXT4-fs error (device loop3): ext4_do_update_inode:5212: inode #3: comm syz.3.2361: corrupted inode contents [ 652.854698][T10434] EXT4-fs error (device loop3): ext4_dirty_inode:6074: inode #3: comm syz.3.2361: mark_inode_dirty error [ 652.866547][T10434] EXT4-fs error (device loop3): ext4_do_update_inode:5212: inode #3: comm syz.3.2361: corrupted inode contents [ 652.878825][T10434] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #3: comm syz.3.2361: mark_inode_dirty error [ 652.890847][T10434] EXT4-fs error (device loop3): ext4_acquire_dquot:6764: comm syz.3.2361: Failed to acquire dquot type 0 [ 652.902459][T10434] EXT4-fs error (device loop3): ext4_do_update_inode:5212: inode #16: comm syz.3.2361: corrupted inode contents [ 652.914546][T10434] EXT4-fs error (device loop3): ext4_dirty_inode:6074: inode #16: comm syz.3.2361: mark_inode_dirty error [ 652.926327][T10434] EXT4-fs error (device loop3): ext4_do_update_inode:5212: inode #16: comm syz.3.2361: corrupted inode contents [ 652.938523][T10434] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #16: comm syz.3.2361: mark_inode_dirty error [ 652.949935][T10434] EXT4-fs error (device loop3): ext4_do_update_inode:5212: inode #16: comm syz.3.2361: corrupted inode contents [ 652.962010][T10434] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 652.970788][T10434] EXT4-fs error (device loop3): ext4_do_update_inode:5212: inode #16: comm syz.3.2361: corrupted inode contents [ 652.982861][T10434] EXT4-fs error (device loop3): ext4_truncate:4302: inode #16: comm syz.3.2361: mark_inode_dirty error [ 652.994036][T10434] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 653.005158][T10434] EXT4-fs (loop3): 1 truncate cleaned up [ 653.010752][T10434] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 653.019855][T10434] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038 (0x7fffffff) [ 653.176728][ T5954] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 653.585209][T10416] EXT4-fs (loop3): unmounting filesystem. [ 653.602409][T10447] loop3: detected capacity change from 0 to 512 [ 653.608959][T10447] EXT4-fs: dax option not supported [ 653.724576][T10449] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2368'. [ 654.132674][T10449] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2368'. [ 654.806738][ T517] usbhid 1-1:0.0: can't add hid device: -71 [ 654.812501][ T517] usbhid: probe of 1-1:0.0 failed with error -71 [ 654.837551][ T517] usb 1-1: USB disconnect, device number 36 [ 654.856771][ T5954] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 654.873372][ T5954] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 654.886152][T10209] EXT4-fs (loop2): unmounting filesystem. [ 654.887273][ T5954] usb 2-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 654.900893][ T5954] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 654.910217][ T5954] usb 2-1: config 0 descriptor?? [ 654.924517][T10454] bridge0: port 1(bridge_slave_0) entered blocking state [ 654.931685][T10454] bridge0: port 1(bridge_slave_0) entered disabled state [ 654.939833][T10454] device bridge_slave_0 entered promiscuous mode [ 654.947333][T10454] bridge0: port 2(bridge_slave_1) entered blocking state [ 654.954172][T10454] bridge0: port 2(bridge_slave_1) entered disabled state [ 654.961804][T10454] device bridge_slave_1 entered promiscuous mode [ 655.043080][T10454] bridge0: port 2(bridge_slave_1) entered blocking state [ 655.049971][T10454] bridge0: port 2(bridge_slave_1) entered forwarding state [ 655.057073][T10454] bridge0: port 1(bridge_slave_0) entered blocking state [ 655.063824][T10454] bridge0: port 1(bridge_slave_0) entered forwarding state [ 655.094422][ T517] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 655.135872][ T517] bridge0: port 1(bridge_slave_0) entered disabled state [ 655.143427][ T517] bridge0: port 2(bridge_slave_1) entered disabled state [ 655.168051][ T517] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 655.176286][ T517] bridge0: port 1(bridge_slave_0) entered blocking state [ 655.183155][ T517] bridge0: port 1(bridge_slave_0) entered forwarding state [ 655.202983][ T517] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 655.220216][ T517] bridge0: port 2(bridge_slave_1) entered blocking state [ 655.227176][ T517] bridge0: port 2(bridge_slave_1) entered forwarding state [ 655.234920][ T517] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 655.243026][ T517] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 655.269580][ T2731] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 655.349083][T10465] input: syz0 as /devices/virtual/input/input86 [ 655.412338][ T5954] isku 0003:1E7D:319C.000A: unbalanced collection at end of report description [ 655.494267][ T5954] isku 0003:1E7D:319C.000A: parse failed [ 655.546323][ T2731] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 655.554247][ T2731] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 655.559077][ T5954] isku: probe of 0003:1E7D:319C.000A failed with error -22 [ 655.561595][ T2731] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 655.577578][T10465] bridge0: port 3(vlan2) entered blocking state [ 655.583670][T10465] bridge0: port 3(vlan2) entered disabled state [ 655.612142][T10454] device veth0_vlan entered promiscuous mode [ 655.638114][ T517] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 655.647849][T10454] device veth1_macvtap entered promiscuous mode [ 655.656998][ T5954] usb 2-1: USB disconnect, device number 38 [ 655.670493][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 655.683068][ T517] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 655.724459][T10472] loop2: detected capacity change from 0 to 256 [ 655.732940][T10472] FAT-fs (loop2): Unrecognized mount option "codepage9936" or missing value [ 656.040104][T10477] loop3: detected capacity change from 0 to 1024 [ 656.050004][T10477] EXT4-fs: Ignoring removed orlov option [ 656.062304][T10477] EXT4-fs (loop3): Test dummy encryption mode enabled [ 656.071009][T10477] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 656.087010][ T684] device bridge_slave_1 left promiscuous mode [ 656.099248][ T684] bridge0: port 2(bridge_slave_1) entered disabled state [ 656.111936][ T684] device bridge_slave_0 left promiscuous mode [ 656.122249][ T684] bridge0: port 1(bridge_slave_0) entered disabled state [ 656.134622][ T684] device veth1_macvtap left promiscuous mode [ 656.144763][ T684] device veth0_vlan left promiscuous mode [ 656.397167][ T28] kauditd_printk_skb: 77 callbacks suppressed [ 656.397249][ T28] audit: type=1400 audit(1727592665.659:4927): avc: denied { read append open } for pid=10476 comm="syz.3.2375" path="/3/file0/bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 656.546484][T10486] loop0: detected capacity change from 0 to 512 [ 656.553148][T10486] EXT4-fs: dax option not supported [ 656.576758][ T2731] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 656.634885][T10479] loop4: detected capacity change from 0 to 40427 [ 656.646332][T10479] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 656.653613][T10479] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 656.670465][T10479] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 656.880286][T10493] loop1: detected capacity change from 0 to 256 [ 656.975265][ T28] audit: type=1400 audit(1727592666.259:4928): avc: denied { mount } for pid=10487 comm="syz.1.2378" name="/" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 656.997384][T10479] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 657.004304][T10479] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 657.028509][ T28] audit: type=1400 audit(1727592666.319:4929): avc: denied { write } for pid=10478 comm="syz.4.2376" path="/15/file1/file1" dev="loop4" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 657.221018][T10497] syz.4.2376: attempt to access beyond end of device [ 657.221018][T10497] loop4: rw=2049, sector=53248, nr_sectors = 8 limit=40427 [ 657.363906][ T2731] usb 3-1: device descriptor read/64, error -71 [ 657.422072][ T28] audit: type=1400 audit(1727592666.699:4930): avc: denied { unmount } for pid=10208 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 657.437088][T10211] syz-executor: attempt to access beyond end of device [ 657.437088][T10211] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 657.445872][T10499] loop1: detected capacity change from 0 to 512 [ 657.473201][T10499] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 657.484854][T10499] EXT4-fs (loop1): 1 truncate cleaned up [ 657.490846][T10499] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 657.545750][T10502] loop4: detected capacity change from 0 to 512 [ 657.555703][T10502] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 657.572713][T10502] EXT4-fs (loop4): 1 truncate cleaned up [ 657.578490][T10502] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 658.548331][T10518] loop0: detected capacity change from 0 to 512 [ 658.559437][T10518] EXT4-fs error (device loop0): ext4_do_update_inode:5212: inode #3: comm syz.0.2381: corrupted inode contents [ 658.571289][T10518] EXT4-fs error (device loop0): ext4_dirty_inode:6074: inode #3: comm syz.0.2381: mark_inode_dirty error [ 658.583037][T10518] EXT4-fs error (device loop0): ext4_do_update_inode:5212: inode #3: comm syz.0.2381: corrupted inode contents [ 658.594955][T10518] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #3: comm syz.0.2381: mark_inode_dirty error [ 658.596815][ T2731] usb 3-1: device descriptor read/64, error -71 [ 658.607083][T10518] Quota error (device loop0): write_blk: dquota write failed [ 658.619319][T10518] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 658.629338][T10518] EXT4-fs error (device loop0): ext4_acquire_dquot:6764: comm syz.0.2381: Failed to acquire dquot type 0 [ 658.641106][T10518] EXT4-fs error (device loop0): ext4_do_update_inode:5212: inode #16: comm syz.0.2381: corrupted inode contents [ 658.653450][T10518] EXT4-fs error (device loop0): ext4_dirty_inode:6074: inode #16: comm syz.0.2381: mark_inode_dirty error [ 658.665937][T10518] EXT4-fs error (device loop0): ext4_do_update_inode:5212: inode #16: comm syz.0.2381: corrupted inode contents [ 658.678051][T10518] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #16: comm syz.0.2381: mark_inode_dirty error [ 658.689570][T10518] EXT4-fs error (device loop0): ext4_do_update_inode:5212: inode #16: comm syz.0.2381: corrupted inode contents [ 658.701691][T10518] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 658.710459][T10518] EXT4-fs error (device loop0): ext4_do_update_inode:5212: inode #16: comm syz.0.2381: corrupted inode contents [ 658.723308][T10518] EXT4-fs error (device loop0): ext4_truncate:4302: inode #16: comm syz.0.2381: mark_inode_dirty error [ 658.734677][T10518] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 658.744508][T10211] EXT4-fs (loop4): unmounting filesystem. [ 658.744649][T10208] EXT4-fs (loop1): unmounting filesystem. [ 658.755774][T10518] EXT4-fs (loop0): 1 truncate cleaned up [ 658.765478][T10522] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2383'. [ 658.774934][T10518] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 658.786751][T10518] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038 (0x7fffffff) [ 658.880029][ T2731] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 659.179800][T10533] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2385'. [ 659.476125][T10533] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2385'. [ 659.542382][T10207] EXT4-fs (loop0): unmounting filesystem. [ 659.683546][ T297] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 659.754460][T10539] loop4: detected capacity change from 0 to 2048 [ 659.775315][T10539] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 659.826749][ T2731] usb 3-1: device descriptor read/64, error -71 [ 660.150598][T10416] EXT4-fs (loop3): unmounting filesystem. [ 660.152048][T10541] input: syz0 as /devices/virtual/input/input89 [ 660.157340][T10540] bridge0: port 3(vlan2) entered blocking state [ 660.168360][T10540] bridge0: port 3(vlan2) entered disabled state [ 660.239171][T10546] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2388'. [ 660.324796][T10548] loop3: detected capacity change from 0 to 512 [ 660.331025][ T297] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 660.331199][T10548] EXT4-fs: dax option not supported [ 660.342045][ T297] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 660.359943][ T297] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 660.368835][ T297] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 660.377482][ T297] usb 2-1: config 0 descriptor?? [ 660.410148][ T39] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 660.446700][ T2731] usb 3-1: device descriptor read/64, error -71 [ 660.572151][ T2731] usb usb3-port1: attempt power cycle [ 660.847065][ T39] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 660.858432][ T39] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 660.868611][ T39] usb 5-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 660.877522][ T39] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 660.885970][ T39] usb 5-1: config 0 descriptor?? [ 661.106789][ T297] usbhid 2-1:0.0: can't add hid device: -71 [ 661.112628][ T297] usbhid: probe of 2-1:0.0 failed with error -71 [ 661.121439][ T297] usb 2-1: USB disconnect, device number 39 [ 661.156716][ T2731] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 661.326888][ T2731] usb 3-1: device descriptor read/8, error -71 [ 661.357715][ T39] steelseries_srws1 0003:1038:1410.000B: unknown main item tag 0x0 [ 661.365732][ T39] steelseries_srws1 0003:1038:1410.000B: unknown main item tag 0x0 [ 661.373511][ T39] steelseries_srws1 0003:1038:1410.000B: unknown main item tag 0x0 [ 661.381180][ T39] steelseries_srws1 0003:1038:1410.000B: unknown main item tag 0x0 [ 661.388931][ T39] steelseries_srws1 0003:1038:1410.000B: unknown main item tag 0x0 [ 661.396616][ T39] steelseries_srws1 0003:1038:1410.000B: unknown main item tag 0x0 [ 661.404413][ T39] steelseries_srws1 0003:1038:1410.000B: unknown main item tag 0x0 [ 661.412200][ T39] steelseries_srws1 0003:1038:1410.000B: missing HID_OUTPUT_REPORT 0 [ 661.826973][ T2731] usb 3-1: device descriptor read/8, error -71 [ 661.834202][ T28] audit: type=1400 audit(1727592671.119:4931): avc: denied { ioctl } for pid=10471 comm="syz.2.2370" path="/dev/raw-gadget" dev="devtmpfs" ino=166 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 661.870989][T10562] loop3: detected capacity change from 0 to 512 [ 661.872980][ T28] audit: type=1400 audit(1727592671.149:4932): avc: denied { bpf } for pid=10559 comm="syz.3.2392" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 661.898534][ T28] audit: type=1400 audit(1727592671.149:4933): avc: denied { map_create } for pid=10559 comm="syz.3.2392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 661.920592][T10562] EXT4-fs: dax option not supported [ 661.933791][ T28] audit: type=1400 audit(1727592671.149:4934): avc: denied { prog_load } for pid=10559 comm="syz.3.2392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 661.952999][ T28] audit: type=1400 audit(1727592671.159:4935): avc: denied { read write } for pid=10559 comm="syz.3.2392" name="loop3" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 661.977094][ T28] audit: type=1400 audit(1727592671.159:4936): avc: denied { open } for pid=10559 comm="syz.3.2392" path="/dev/loop3" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 662.002201][ T28] audit: type=1400 audit(1727592671.159:4937): avc: denied { ioctl } for pid=10559 comm="syz.3.2392" path="/dev/loop3" dev="devtmpfs" ino=117 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 662.027597][ T28] audit: type=1400 audit(1727592671.159:4938): avc: denied { read } for pid=84 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 662.065111][T10568] loop4: detected capacity change from 0 to 512 [ 662.077139][T10568] EXT4-fs (loop4): bad s_want_extra_isize: 11962 [ 662.141917][ T28] audit: type=1400 audit(1727592671.159:4939): avc: denied { search } for pid=84 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 662.196782][ T2731] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 662.204717][ T28] audit: type=1400 audit(1727592671.159:4940): avc: denied { append } for pid=84 comm="syslogd" name="messages" dev="tmpfs" ino=13 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 662.234002][T10570] loop1: detected capacity change from 0 to 512 [ 662.244192][T10570] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 662.267363][T10196] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 662.468314][ T2731] usb 3-1: device descriptor read/8, error -71 [ 662.502123][T10578] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2397'. [ 662.561483][T10578] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2397'. [ 662.746721][ T2731] usb 3-1: device descriptor read/8, error -71 [ 662.866774][ T2731] usb usb3-port1: unable to enumerate USB device [ 662.971895][T10580] loop1: detected capacity change from 0 to 512 [ 662.978732][T10580] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 663.338522][ T5954] usb 5-1: USB disconnect, device number 39 [ 663.382961][T10590] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2399'. [ 664.187032][T10591] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2400'. [ 664.228802][T10597] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2400'. [ 664.240285][T10598] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2401'. [ 664.257259][T10603] loop1: detected capacity change from 0 to 512 [ 664.270968][T10603] EXT4-fs: dax option not supported [ 664.406188][T10606] loop3: detected capacity change from 0 to 512 [ 664.426167][T10606] EXT4-fs: dax option not supported [ 664.716789][ T24] usb 1-1: new full-speed USB device number 37 using dummy_hcd [ 664.756906][ T6] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 665.116795][ T6] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 665.127709][ T6] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 665.136746][ T24] usb 1-1: too many endpoints for config 0 interface 0 altsetting 3: 253, using maximum allowed: 30 [ 665.140392][ T6] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 665.151756][ T24] usb 1-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 665.163795][ T6] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 665.173989][ T24] usb 1-1: config 0 interface 0 altsetting 3 has 2 endpoint descriptors, different from the interface descriptor's value: 253 [ 665.182971][ T6] usb 5-1: config 0 descriptor?? [ 665.192206][ T24] usb 1-1: config 0 interface 0 has no altsetting 0 [ 665.202674][ T24] usb 1-1: New USB device found, idVendor=046d, idProduct=c262, bcdDevice= 0.00 [ 665.211609][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 665.220031][ T24] usb 1-1: config 0 descriptor?? [ 665.546887][ T24] usbhid 1-1:0.0: can't add hid device: -71 [ 665.552719][ T24] usbhid: probe of 1-1:0.0 failed with error -71 [ 665.560947][ T24] usb 1-1: USB disconnect, device number 37 [ 665.714364][T10619] loop3: detected capacity change from 0 to 512 [ 665.721634][T10619] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 666.116729][ T6] usbhid 5-1:0.0: can't add hid device: -71 [ 666.122615][ T6] usbhid: probe of 5-1:0.0 failed with error -71 [ 666.130861][T10626] loop0: detected capacity change from 0 to 128 [ 666.138088][ T6] usb 5-1: USB disconnect, device number 40 [ 666.282800][T10624] loop3: detected capacity change from 0 to 40427 [ 666.290276][T10624] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 666.298036][T10624] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 666.309971][T10624] F2FS-fs (loop3): Found nat_bits in checkpoint [ 666.344835][T10628] bridge0: port 1(bridge_slave_0) entered blocking state [ 666.352348][T10628] bridge0: port 1(bridge_slave_0) entered disabled state [ 666.361154][T10628] device bridge_slave_0 entered promiscuous mode [ 666.370761][T10628] bridge0: port 2(bridge_slave_1) entered blocking state [ 666.377755][T10628] bridge0: port 2(bridge_slave_1) entered disabled state [ 666.385247][T10628] device bridge_slave_1 entered promiscuous mode [ 666.507496][T10624] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 666.516742][T10624] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 666.529379][T10628] bridge0: port 2(bridge_slave_1) entered blocking state [ 666.536229][T10628] bridge0: port 2(bridge_slave_1) entered forwarding state [ 666.543346][T10628] bridge0: port 1(bridge_slave_0) entered blocking state [ 666.550119][T10628] bridge0: port 1(bridge_slave_0) entered forwarding state [ 666.562390][T10639] loop0: detected capacity change from 0 to 512 [ 666.568785][T10639] ext4: Unknown parameter 'noacl' [ 666.717943][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 666.727188][ T6] bridge0: port 1(bridge_slave_0) entered disabled state [ 666.738486][ T6] bridge0: port 2(bridge_slave_1) entered disabled state [ 667.179988][ T28] kauditd_printk_skb: 34 callbacks suppressed [ 667.181014][ T28] audit: type=1400 audit(1727592676.469:4975): avc: denied { unmount } for pid=10416 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 667.205287][ T684] kworker/u4:6: attempt to access beyond end of device [ 667.205287][ T684] loop3: rw=1, sector=45096, nr_sectors = 16 limit=40427 [ 667.255850][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 667.310768][ T6] bridge0: port 1(bridge_slave_0) entered blocking state [ 667.317636][ T6] bridge0: port 1(bridge_slave_0) entered forwarding state [ 667.327286][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 667.335407][ T6] bridge0: port 2(bridge_slave_1) entered blocking state [ 667.342276][ T6] bridge0: port 2(bridge_slave_1) entered forwarding state [ 667.353485][T10651] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2413'. [ 667.372102][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 667.383271][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 667.412458][ T553] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 667.415431][T10657] loop0: detected capacity change from 0 to 512 [ 667.420448][ T553] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 667.438788][T10657] EXT4-fs: dax option not supported [ 667.443215][T10628] device veth0_vlan entered promiscuous mode [ 667.457938][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 667.462133][T10659] loop3: detected capacity change from 0 to 512 [ 667.511772][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 667.521083][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 667.541567][T10664] loop1: detected capacity change from 0 to 512 [ 667.555730][T10664] EXT4-fs: dax option not supported [ 667.562058][T10659] EXT4-fs error (device loop3): ext4_orphan_get:1422: comm syz.3.2414: bad orphan inode 17 [ 667.572155][T10659] ext4_test_bit(bit=16, block=4) = 1 [ 667.577396][T10659] is_bad_inode(inode)=0 [ 667.581433][T10659] NEXT_ORPHAN(inode)=0 [ 667.585319][T10659] max_ino=32 [ 667.588755][T10659] i_nlink=1 [ 667.591699][T10659] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 667.593905][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 667.619506][T10659] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.2414: bg 0: block 7: invalid block bitmap [ 667.671065][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 667.678648][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 667.690227][T10416] EXT4-fs (loop3): unmounting filesystem. [ 668.058618][ T28] audit: type=1400 audit(1727592677.349:4976): avc: denied { create } for pid=10660 comm="syz.4.2417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 668.079067][ T393] device bridge_slave_1 left promiscuous mode [ 668.085340][ T393] bridge0: port 2(bridge_slave_1) entered disabled state [ 668.108531][ T393] device bridge_slave_0 left promiscuous mode [ 668.129592][ T393] bridge0: port 1(bridge_slave_0) entered disabled state [ 668.138643][ T28] audit: type=1400 audit(1727592677.379:4977): avc: denied { ioctl } for pid=10660 comm="syz.4.2417" path="socket:[52970]" dev="sockfs" ino=52970 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 668.149454][T10675] loop3: detected capacity change from 0 to 512 [ 668.173632][ T393] device veth1_macvtap left promiscuous mode [ 668.202787][ T393] device veth0_vlan left promiscuous mode [ 668.204476][T10675] EXT4-fs error (device loop3): ext4_do_update_inode:5212: inode #3: comm syz.3.2420: corrupted inode contents [ 668.220465][T10675] EXT4-fs error (device loop3): ext4_dirty_inode:6074: inode #3: comm syz.3.2420: mark_inode_dirty error [ 668.232263][T10675] EXT4-fs error (device loop3): ext4_do_update_inode:5212: inode #3: comm syz.3.2420: corrupted inode contents [ 668.244268][T10675] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #3: comm syz.3.2420: mark_inode_dirty error [ 668.255752][T10675] Quota error (device loop3): write_blk: dquota write failed [ 668.263188][T10675] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 668.273142][T10675] EXT4-fs error (device loop3): ext4_acquire_dquot:6764: comm syz.3.2420: Failed to acquire dquot type 0 [ 668.285816][T10675] EXT4-fs error (device loop3): ext4_do_update_inode:5212: inode #16: comm syz.3.2420: corrupted inode contents [ 668.297830][T10675] EXT4-fs error (device loop3): ext4_dirty_inode:6074: inode #16: comm syz.3.2420: mark_inode_dirty error [ 668.309257][T10675] EXT4-fs error (device loop3): ext4_do_update_inode:5212: inode #16: comm syz.3.2420: corrupted inode contents [ 668.321277][T10675] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #16: comm syz.3.2420: mark_inode_dirty error [ 668.332686][T10675] EXT4-fs error (device loop3): ext4_do_update_inode:5212: inode #16: comm syz.3.2420: corrupted inode contents [ 668.345647][T10675] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 668.370782][T10675] EXT4-fs error (device loop3): ext4_do_update_inode:5212: inode #16: comm syz.3.2420: corrupted inode contents [ 668.388645][T10675] EXT4-fs error (device loop3): ext4_truncate:4302: inode #16: comm syz.3.2420: mark_inode_dirty error [ 668.399965][T10675] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 668.410170][T10675] EXT4-fs (loop3): 1 truncate cleaned up [ 668.415629][T10675] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 668.424639][T10675] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038 (0x7fffffff) [ 668.431012][T10628] device veth1_macvtap entered promiscuous mode [ 668.448414][T10670] bridge0: port 3(vlan2) entered blocking state [ 668.454573][T10670] bridge0: port 3(vlan2) entered disabled state [ 668.464854][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 668.473223][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 668.485276][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 668.536512][ T517] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 668.544506][ T28] audit: type=1400 audit(1727592677.819:4978): avc: denied { mounton } for pid=10628 comm="syz-executor" path="/root/syzkaller.5uB3H0/syz-tmp" dev="sda1" ino=2038 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 668.570052][ T517] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 668.573052][ T28] audit: type=1400 audit(1727592677.819:4979): avc: denied { mount } for pid=10628 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 668.578675][ T517] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 669.367967][ T517] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 669.378794][ T28] audit: type=1400 audit(1727592677.819:4980): avc: denied { mount } for pid=10628 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 669.435527][ T28] audit: type=1400 audit(1727592677.819:4981): avc: denied { mounton } for pid=10628 comm="syz-executor" path="/root/syzkaller.5uB3H0/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 669.453825][T10689] loop2: detected capacity change from 0 to 128 [ 669.469911][T10416] EXT4-fs (loop3): unmounting filesystem. [ 669.479961][ T28] audit: type=1400 audit(1727592677.819:4982): avc: denied { mounton } for pid=10628 comm="syz-executor" path="/root/syzkaller.5uB3H0/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=52981 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 669.550386][T10197] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 669.689049][T10697] input: syz0 as /devices/virtual/input/input90 [ 669.735802][T10697] bridge0: port 3(vlan2) entered blocking state [ 669.741998][T10697] bridge0: port 3(vlan2) entered disabled state [ 669.896711][ T517] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 669.929989][T10702] FAULT_INJECTION: forcing a failure. [ 669.929989][T10702] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 669.960449][T10702] CPU: 0 PID: 10702 Comm: syz.2.2409 Not tainted 6.1.99-syzkaller-00091-g110595418159 #0 [ 669.970090][T10702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 669.979983][T10702] Call Trace: [ 669.983108][T10702] [ 669.985884][T10702] dump_stack_lvl+0x151/0x1b7 [ 669.990399][T10702] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 669.995693][T10702] ? kstrtouint+0xf6/0x180 [ 669.999946][T10702] ? _kstrtol+0x150/0x150 [ 670.004115][T10702] dump_stack+0x15/0x1c [ 670.008108][T10702] should_fail_ex+0x3d0/0x520 [ 670.012627][T10702] should_fail+0xb/0x10 [ 670.016608][T10702] should_fail_usercopy+0x1a/0x20 [ 670.021470][T10702] _copy_from_user+0x1e/0xc0 [ 670.025897][T10702] copy_msghdr_from_user+0xaa/0x670 [ 670.030935][T10702] ? sendmsg_copy_msghdr+0x70/0x70 [ 670.035888][T10702] __sys_sendmsg+0x236/0x390 [ 670.040303][T10702] ? ____sys_sendmsg+0x9a0/0x9a0 [ 670.045078][T10702] ? __kasan_check_write+0x14/0x20 [ 670.050024][T10702] ? mutex_unlock+0xb2/0x260 [ 670.054454][T10702] ? __kasan_check_write+0x14/0x20 [ 670.059402][T10702] ? __ia32_sys_read+0x90/0x90 [ 670.064009][T10702] ? debug_smp_processor_id+0x17/0x20 [ 670.069204][T10702] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 670.075109][T10702] __x64_sys_sendmsg+0x7f/0x90 [ 670.079709][T10702] x64_sys_call+0x16a/0x9a0 [ 670.084045][T10702] do_syscall_64+0x3b/0xb0 [ 670.088300][T10702] ? clear_bhb_loop+0x55/0xb0 [ 670.092814][T10702] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 670.098542][T10702] RIP: 0033:0x7ff81ef7dff9 [ 670.102795][T10702] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 670.122234][T10702] RSP: 002b:00007ff81fdd1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 670.130488][T10702] RAX: ffffffffffffffda RBX: 00007ff81f136130 RCX: 00007ff81ef7dff9 [ 670.138290][T10702] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000007 [ 670.146098][T10702] RBP: 00007ff81fdd1090 R08: 0000000000000000 R09: 0000000000000000 [ 670.153914][T10702] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 670.161725][T10702] R13: 0000000000000000 R14: 00007ff81f136130 R15: 00007fff22df5a88 [ 670.169541][T10702] [ 670.319138][ T297] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 670.405559][T10704] loop0: detected capacity change from 0 to 256 [ 670.412692][T10704] FAT-fs (loop0): IO charset maci not found [ 670.438741][ T517] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 670.456789][ T517] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 670.477495][ T517] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 670.498008][T10699] loop4: detected capacity change from 0 to 40427 [ 670.503103][ T517] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 670.511537][T10699] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 670.515839][ T517] usb 2-1: config 0 descriptor?? [ 670.520391][T10699] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 670.533361][T10195] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 670.537926][T10699] F2FS-fs (loop4): Found nat_bits in checkpoint [ 670.589501][T10699] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 670.596491][T10699] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 670.645863][ T24] kernel write not supported for file 97/task/98/clear_refs (pid: 24 comm: kworker/1:0) [ 670.672608][T10717] loop0: detected capacity change from 0 to 512 [ 670.686871][ T297] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 670.702098][T10717] EXT4-fs error (device loop0): ext4_do_update_inode:5212: inode #3: comm syz.0.2429: corrupted inode contents [ 670.714542][T10717] EXT4-fs error (device loop0): ext4_dirty_inode:6074: inode #3: comm syz.0.2429: mark_inode_dirty error [ 670.729300][T10717] EXT4-fs error (device loop0): ext4_do_update_inode:5212: inode #3: comm syz.0.2429: corrupted inode contents [ 670.760814][T10720] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2427'. [ 670.790423][T10717] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #3: comm syz.0.2429: mark_inode_dirty error [ 670.803760][T10717] EXT4-fs error (device loop0): ext4_acquire_dquot:6764: comm syz.0.2429: Failed to acquire dquot type 0 [ 670.850413][T10717] EXT4-fs error (device loop0): ext4_do_update_inode:5212: inode #16: comm syz.0.2429: corrupted inode contents [ 670.899192][ T297] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 670.905047][T10717] EXT4-fs error (device loop0): ext4_dirty_inode:6074: inode #16: comm syz.0.2429: mark_inode_dirty error [ 670.908095][ T297] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 670.920175][T10717] EXT4-fs error (device loop0): ext4_do_update_inode:5212: inode #16: comm syz.0.2429: corrupted inode contents [ 670.927846][ T297] usb 4-1: config 0 descriptor?? [ 670.939996][T10717] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #16: comm syz.0.2429: mark_inode_dirty error [ 670.954841][T10717] EXT4-fs error (device loop0): ext4_do_update_inode:5212: inode #16: comm syz.0.2429: corrupted inode contents [ 670.966862][T10717] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 670.975355][T10717] EXT4-fs error (device loop0): ext4_do_update_inode:5212: inode #16: comm syz.0.2429: corrupted inode contents [ 670.987653][T10717] EXT4-fs error (device loop0): ext4_truncate:4302: inode #16: comm syz.0.2429: mark_inode_dirty error [ 670.999712][T10717] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 671.010474][T10717] EXT4-fs (loop0): 1 truncate cleaned up [ 671.015944][T10717] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 671.024970][T10717] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038 (0x7fffffff) [ 671.717782][ T297] keytouch 0003:0926:3333.000C: fixing up Keytouch IEC report descriptor [ 671.745825][ T297] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.000C/input/input91 [ 671.761390][T10207] EXT4-fs (loop0): unmounting filesystem. [ 671.776788][ T517] usbhid 2-1:0.0: can't add hid device: -71 [ 671.779531][T10732] loop2: detected capacity change from 0 to 512 [ 671.792368][T10732] EXT4-fs: dax option not supported [ 671.793538][ T517] usbhid: probe of 2-1:0.0 failed with error -71 [ 671.803822][T10734] loop0: detected capacity change from 0 to 512 [ 671.822158][ T517] usb 2-1: USB disconnect, device number 40 [ 671.833365][T10734] EXT4-fs: dax option not supported [ 671.844305][ T297] keytouch 0003:0926:3333.000C: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 672.159406][T10737] loop4: detected capacity change from 0 to 512 [ 672.210640][T10695] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 672.219850][T10737] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 672.223099][T10695] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 672.283400][T10742] loop4: detected capacity change from 0 to 512 [ 672.292369][T10742] EXT4-fs error (device loop4): ext4_orphan_get:1422: comm syz.4.2435: bad orphan inode 17 [ 672.302384][T10742] ext4_test_bit(bit=16, block=4) = 1 [ 672.307565][T10742] is_bad_inode(inode)=0 [ 672.311501][T10742] NEXT_ORPHAN(inode)=0 [ 672.315410][T10742] max_ino=32 [ 672.318536][T10742] i_nlink=1 [ 672.321427][T10742] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 672.333414][T10742] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.2435: bg 0: block 7: invalid block bitmap [ 672.372115][T10211] EXT4-fs (loop4): unmounting filesystem. [ 672.404339][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 672.404354][ T28] audit: type=1400 audit(1727592681.689:4993): avc: denied { read write } for pid=10211 comm="syz-executor" name="loop4" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 672.457479][T10750] loop4: detected capacity change from 0 to 512 [ 672.458617][ T28] audit: type=1400 audit(1727592681.729:4994): avc: denied { append } for pid=84 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=13 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 672.463963][T10750] EXT4-fs: dax option not supported [ 672.488112][ T28] audit: type=1400 audit(1727592681.729:4995): avc: denied { open } for pid=10211 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 672.611152][T10751] input: syz0 as /devices/virtual/input/input92 [ 672.650110][T10751] bridge0: port 3(vlan2) entered blocking state [ 672.650154][T10751] bridge0: port 3(vlan2) entered disabled state [ 672.652378][ T28] audit: type=1400 audit(1727592681.729:4996): avc: denied { ioctl } for pid=10211 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=118 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 672.652442][ T28] audit: type=1400 audit(1727592681.739:4997): avc: denied { bpf } for pid=10749 comm="syz.4.2438" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 672.652501][ T28] audit: type=1400 audit(1727592681.739:4998): avc: denied { map_create } for pid=10749 comm="syz.4.2438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 672.652595][ T28] audit: type=1400 audit(1727592681.739:4999): avc: denied { prog_load } for pid=10749 comm="syz.4.2438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 672.652669][ T28] audit: type=1400 audit(1727592681.749:5000): avc: denied { mounton } for pid=10749 comm="syz.4.2438" path="/31/file0" dev="tmpfs" ino=187 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 672.652735][ T28] audit: type=1400 audit(1727592681.779:5001): avc: denied { execmem } for pid=10749 comm="syz.4.2438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 672.652799][ T28] audit: type=1400 audit(1727592681.869:5002): avc: denied { map_read map_write } for pid=10744 comm="syz.1.2437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 672.977678][T10700] loop3: detected capacity change from 0 to 256 [ 673.498602][T10764] input: syz0 as /devices/virtual/input/input93 [ 673.506850][T10765] loop0: detected capacity change from 0 to 256 [ 673.520539][T10764] bridge0: port 3(vlan2) entered blocking state [ 673.526768][T10764] bridge0: port 3(vlan2) entered disabled state [ 673.537451][T10765] FAT-fs (loop0): IO charset maci not found [ 674.006864][T10773] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2443'. [ 674.097827][T10773] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2443'. [ 674.231726][ T517] usb 4-1: USB disconnect, device number 28 [ 674.905672][T10785] loop3: detected capacity change from 0 to 256 [ 674.923243][T10785] FAT-fs (loop3): IO charset maci not found [ 674.994994][T10786] loop1: detected capacity change from 0 to 512 [ 675.102980][T10195] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 675.191034][T10786] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 675.219335][T10797] loop2: detected capacity change from 0 to 512 [ 675.231320][T10795] loop0: detected capacity change from 0 to 512 [ 675.244285][ T297] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 675.257454][T10797] EXT4-fs: dax option not supported [ 675.260070][T10799] loop3: detected capacity change from 0 to 512 [ 675.262929][T10795] EXT4-fs: dax option not supported [ 675.290115][T10799] EXT4-fs error (device loop3): ext4_orphan_get:1422: comm syz.3.2452: bad orphan inode 17 [ 675.313072][T10799] ext4_test_bit(bit=16, block=4) = 1 [ 675.318611][T10799] is_bad_inode(inode)=0 [ 675.322732][T10799] NEXT_ORPHAN(inode)=0 [ 675.326637][T10799] max_ino=32 [ 675.329874][T10799] i_nlink=1 [ 675.332900][T10799] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 675.347532][T10196] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 675.350259][T10799] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.2452: bg 0: block 7: invalid block bitmap [ 675.603010][T10416] EXT4-fs (loop3): unmounting filesystem. [ 675.839322][T10813] loop3: detected capacity change from 0 to 256 [ 675.848313][T10813] FAT-fs (loop3): IO charset maci not found [ 675.887272][T10195] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 675.939924][ T297] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 675.967298][T10815] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2455'. [ 676.075189][T10815] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2455'. [ 676.151676][ T297] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 676.164465][ T297] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 676.173281][ T297] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 676.182003][ T297] usb 5-1: config 0 descriptor?? [ 676.873744][T10830] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2457'. [ 676.925730][T10832] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2457'. [ 677.299090][ T297] usbhid 5-1:0.0: can't add hid device: -71 [ 677.305003][ T297] usbhid: probe of 5-1:0.0 failed with error -71 [ 677.312628][ T297] usb 5-1: USB disconnect, device number 41 [ 677.392671][T10829] loop1: detected capacity change from 0 to 40427 [ 677.399947][T10829] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 677.406163][T10829] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 677.418744][T10829] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 677.457185][ T446] device bridge_slave_1 left promiscuous mode [ 677.463142][ T446] bridge0: port 2(bridge_slave_1) entered disabled state [ 677.470627][T10829] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 677.470785][ T446] device bridge_slave_0 left promiscuous mode [ 677.483967][ T446] bridge0: port 1(bridge_slave_0) entered disabled state [ 677.487237][T10829] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 677.500859][ T446] device veth1_macvtap left promiscuous mode [ 677.508911][ T446] device veth0_vlan left promiscuous mode [ 677.529871][ T28] kauditd_printk_skb: 66 callbacks suppressed [ 677.529884][ T28] audit: type=1400 audit(1727592686.819:5069): avc: denied { read write open } for pid=10828 comm="syz.1.2461" path="/32/file1/file1" dev="loop1" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 677.734638][T10843] syz.1.2461: attempt to access beyond end of device [ 677.734638][T10843] loop1: rw=2049, sector=53248, nr_sectors = 8 limit=40427 [ 677.916172][T10847] loop4: detected capacity change from 0 to 512 [ 677.922895][T10847] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 677.936700][ T28] audit: type=1400 audit(1727592687.189:5070): avc: denied { read write } for pid=10848 comm="syz.0.2463" name="raw-gadget" dev="devtmpfs" ino=166 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 677.960663][T10208] syz-executor: attempt to access beyond end of device [ 677.960663][T10208] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 677.980807][ T28] audit: type=1400 audit(1727592687.189:5071): avc: denied { open } for pid=10848 comm="syz.0.2463" path="/dev/raw-gadget" dev="devtmpfs" ino=166 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 678.166714][ T297] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 678.404481][ T28] audit: type=1400 audit(1727592687.689:5072): avc: denied { read } for pid=10854 comm="syz.1.2466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 678.424815][T10856] loop2: detected capacity change from 0 to 512 [ 678.434020][T10856] EXT4-fs: dax option not supported [ 678.536742][ T297] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 678.547730][ T297] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 678.557335][ T297] usb 1-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 678.566361][ T297] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 678.575387][ T297] usb 1-1: config 0 descriptor?? [ 679.058123][ T297] hid-thrustmaster 0003:044F:B65D.000D: item fetching failed at offset 1/5 [ 679.066817][ T297] hid-thrustmaster 0003:044F:B65D.000D: parse failed with error -22 [ 679.074663][ T297] hid-thrustmaster: probe of 0003:044F:B65D.000D failed with error -22 [ 679.161628][T10865] loop4: detected capacity change from 0 to 256 [ 679.168588][T10865] FAT-fs (loop4): IO charset maci not found [ 679.217234][T10195] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 679.613015][ T28] audit: type=1400 audit(1727592688.899:5073): avc: denied { read write } for pid=10848 comm="syz.0.2463" name="fuse" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 679.636246][ T28] audit: type=1400 audit(1727592688.899:5074): avc: denied { open } for pid=10848 comm="syz.0.2463" path="/dev/fuse" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 679.659769][ T28] audit: type=1400 audit(1727592688.899:5075): avc: denied { mount } for pid=10848 comm="syz.0.2463" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 679.682988][ T28] audit: type=1400 audit(1727592688.969:5076): avc: denied { mounton } for pid=10848 comm="syz.0.2463" path="/34/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 679.705708][ T28] audit: type=1400 audit(1727592688.969:5077): avc: denied { unmount } for pid=10848 comm="syz.0.2463" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 679.706989][T10867] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 679.737464][T10867] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 680.555946][T10881] loop1: detected capacity change from 0 to 512 [ 680.556183][T10883] 9pnet_fd: Insufficient options for proto=fd [ 680.565384][T10881] EXT4-fs: dax option not supported [ 680.971611][ T6] usb 1-1: USB disconnect, device number 38 [ 681.460952][T10891] loop0: detected capacity change from 0 to 256 [ 681.479295][T10891] FAT-fs (loop0): Unrecognized mount option "codepage9936" or missing value [ 681.564435][ T28] audit: type=1400 audit(1727592690.849:5078): avc: denied { read } for pid=10890 comm="syz.0.2473" dev="nsfs" ino=4026532332 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 681.944776][T10898] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2474'. [ 681.971097][T10898] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2474'. [ 682.126763][ T298] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 682.580616][T10906] loop2: detected capacity change from 0 to 40427 [ 682.587382][T10906] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 682.594927][T10906] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 682.604965][T10906] F2FS-fs (loop2): Found nat_bits in checkpoint [ 682.638245][T10906] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 682.645134][T10906] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 682.662144][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 682.662157][ T28] audit: type=1400 audit(1727592691.949:5081): avc: denied { read } for pid=10905 comm="syz.2.2477" name="usbmon2" dev="devtmpfs" ino=145 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 682.691197][ T28] audit: type=1400 audit(1727592691.949:5082): avc: denied { open } for pid=10905 comm="syz.2.2477" path="/dev/usbmon2" dev="devtmpfs" ino=145 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 682.715359][ T28] audit: type=1400 audit(1727592691.999:5083): avc: denied { write } for pid=10905 comm="syz.2.2477" name="001" dev="devtmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 682.738089][ T517] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 682.767919][ T28] audit: type=1400 audit(1727592692.059:5084): avc: denied { create } for pid=10905 comm="syz.2.2477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 683.186762][ T517] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 683.197481][ T517] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 683.210153][ T517] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 683.218992][ T517] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 683.227671][ T517] usb 2-1: config 0 descriptor?? [ 683.966771][ T517] usbhid 2-1:0.0: can't add hid device: -71 [ 683.972600][ T517] usbhid: probe of 2-1:0.0 failed with error -71 [ 683.979616][ T517] usb 2-1: USB disconnect, device number 41 [ 684.232499][ T845] kworker/u4:7: attempt to access beyond end of device [ 684.232499][ T845] loop2: rw=1, sector=45096, nr_sectors = 16 limit=40427 [ 684.793877][T10924] loop4: detected capacity change from 0 to 512 [ 684.799403][ T28] audit: type=1400 audit(1727592694.089:5085): avc: denied { read } for pid=10926 comm="syz.1.2480" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 684.804544][T10924] EXT4-fs: dax option not supported [ 684.831745][T10925] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2481'. [ 684.840879][ T28] audit: type=1400 audit(1727592694.119:5086): avc: denied { open } for pid=10926 comm="syz.1.2480" path="/dev/kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 684.864443][ T28] audit: type=1400 audit(1727592694.129:5087): avc: denied { ioctl } for pid=10926 comm="syz.1.2480" path="/dev/kvm" dev="devtmpfs" ino=83 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 685.002957][ T28] audit: type=1400 audit(1727592694.289:5088): avc: denied { remount } for pid=10926 comm="syz.1.2480" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 685.027210][ T28] audit: type=1400 audit(1727592694.319:5089): avc: denied { write } for pid=10926 comm="syz.1.2480" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 685.035806][T10927] kvm: emulating exchange as write [ 686.170953][T10937] bridge0: port 2(bridge_slave_1) entered disabled state [ 686.180158][T10937] device bridge_slave_1 left promiscuous mode [ 686.181336][ T28] audit: type=1400 audit(1727592695.459:5090): avc: denied { ioctl } for pid=10933 comm="syz.2.2484" path="socket:[55349]" dev="sockfs" ino=55349 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 686.186085][T10937] bridge0: port 2(bridge_slave_1) entered disabled state [ 686.326099][T10940] loop1: detected capacity change from 0 to 256 [ 686.336475][T10940] FAT-fs (loop1): IO charset maci not found [ 686.472768][T10195] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 687.527812][T10948] loop4: detected capacity change from 0 to 512 [ 687.536476][T10948] EXT4-fs: dax option not supported [ 688.006725][ T517] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 688.396828][ T517] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 688.407628][ T517] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 688.416440][ T517] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 688.425097][ T517] usb 3-1: config 0 descriptor?? [ 688.907216][ T517] keytouch 0003:0926:3333.000E: fixing up Keytouch IEC report descriptor [ 688.917523][ T517] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.000E/input/input94 [ 688.998600][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 688.998614][ T28] audit: type=1400 audit(1727592698.289:5094): avc: denied { read } for pid=87 comm="acpid" name="event3" dev="devtmpfs" ino=1915 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 688.999656][ T517] keytouch 0003:0926:3333.000E: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 689.004551][ T28] audit: type=1400 audit(1727592698.289:5095): avc: denied { open } for pid=87 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=1915 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 689.065321][ T28] audit: type=1400 audit(1727592698.289:5096): avc: denied { ioctl } for pid=87 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=1915 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 689.078394][T10957] 9pnet_fd: Insufficient options for proto=fd [ 689.129082][T10946] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 689.138120][T10946] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 689.266723][T10960] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2488'. [ 689.551124][T10961] loop2: detected capacity change from 0 to 256 [ 689.558471][ T28] audit: type=1400 audit(1727592698.849:5097): avc: denied { mounton } for pid=10945 comm="syz.2.2486" path="/15/file0" dev="tmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 689.581834][ T28] audit: type=1400 audit(1727592698.869:5098): avc: denied { mount } for pid=10945 comm="syz.2.2486" name="/" dev="loop2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 690.780213][ T5954] usb 3-1: USB disconnect, device number 35 [ 690.946709][ T298] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 690.986394][T10969] loop1: detected capacity change from 0 to 40427 [ 690.993166][T10969] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 691.001117][T10969] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 691.016176][T10969] F2FS-fs (loop1): Found nat_bits in checkpoint [ 691.066885][T10969] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 691.073932][T10969] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 691.106627][ T28] audit: type=1400 audit(1727592700.389:5099): avc: denied { create } for pid=10964 comm="syz.1.2490" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 691.306762][ T298] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 691.317482][ T298] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 691.330145][ T298] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 691.338954][ T298] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 691.347593][ T298] usb 5-1: config 0 descriptor?? [ 692.086735][ T298] usbhid 5-1:0.0: can't add hid device: -71 [ 692.092498][ T298] usbhid: probe of 5-1:0.0 failed with error -71 [ 692.099381][ T298] usb 5-1: USB disconnect, device number 42 [ 692.401340][T10981] loop1: detected capacity change from 0 to 512 [ 692.455675][T10981] EXT4-fs error (device loop1): ext4_orphan_get:1396: inode #17: comm syz.1.2493: iget: bogus i_mode (0) [ 692.467317][T10981] EXT4-fs error (device loop1): ext4_orphan_get:1401: comm syz.1.2493: couldn't read orphan inode 17 (err -117) [ 692.487918][ T28] audit: type=1400 audit(1727592701.779:5100): avc: denied { mounton } for pid=10985 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 692.506925][T10981] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 692.527210][ T28] audit: type=1400 audit(1727592701.819:5101): avc: denied { ioctl } for pid=10980 comm="syz.1.2493" path="socket:[55502]" dev="sockfs" ino=55502 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 692.553185][T10981] bridge0: port 2(bridge_slave_1) entered disabled state [ 692.560224][T10981] bridge0: port 1(bridge_slave_0) entered disabled state [ 692.568833][T10981] device bridge_slave_1 left promiscuous mode [ 692.574799][T10981] bridge0: port 2(bridge_slave_1) entered disabled state [ 692.582118][T10981] device bridge_slave_0 left promiscuous mode [ 692.588326][T10981] bridge0: port 1(bridge_slave_0) entered disabled state [ 692.620985][ T28] audit: type=1400 audit(1727592701.909:5102): avc: denied { watch } for pid=10980 comm="syz.1.2493" path="/42/bus/file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 692.657580][T10985] bridge0: port 1(bridge_slave_0) entered blocking state [ 692.664407][T10985] bridge0: port 1(bridge_slave_0) entered disabled state [ 692.672041][T10985] device bridge_slave_0 entered promiscuous mode [ 692.679734][T10985] bridge0: port 2(bridge_slave_1) entered blocking state [ 692.686572][T10985] bridge0: port 2(bridge_slave_1) entered disabled state [ 692.687172][T10208] EXT4-fs (loop1): unmounting filesystem. [ 692.694201][T10985] device bridge_slave_1 entered promiscuous mode [ 692.751363][T10985] bridge0: port 2(bridge_slave_1) entered blocking state [ 692.758342][T10985] bridge0: port 2(bridge_slave_1) entered forwarding state [ 692.765415][T10985] bridge0: port 1(bridge_slave_0) entered blocking state [ 692.772240][T10985] bridge0: port 1(bridge_slave_0) entered forwarding state [ 692.794012][ T517] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 692.801410][ T517] bridge0: port 1(bridge_slave_0) entered disabled state [ 692.808661][ T517] bridge0: port 2(bridge_slave_1) entered disabled state [ 692.830412][ T517] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 692.838333][ T517] bridge0: port 1(bridge_slave_0) entered blocking state [ 692.845150][ T517] bridge0: port 1(bridge_slave_0) entered forwarding state [ 692.852341][ T517] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 692.860252][ T517] bridge0: port 2(bridge_slave_1) entered blocking state [ 692.866993][ T517] bridge0: port 2(bridge_slave_1) entered forwarding state [ 692.874104][ T517] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 692.881773][ T517] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 692.893518][T10985] device veth0_vlan entered promiscuous mode [ 692.900011][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 692.907908][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 692.915029][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 692.922226][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 692.935798][ T517] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 692.944854][T10985] device veth1_macvtap entered promiscuous mode [ 692.953961][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 692.967628][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 692.978672][ T28] audit: type=1400 audit(1727592702.269:5103): avc: denied { mounton } for pid=10985 comm="syz-executor" path="/root/syzkaller.7K4or9/syz-tmp" dev="sda1" ino=2057 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 693.147454][ T845] device bridge_slave_1 left promiscuous mode [ 693.153374][ T845] bridge0: port 2(bridge_slave_1) entered disabled state [ 693.163363][ T845] device bridge_slave_0 left promiscuous mode [ 693.169376][ T845] bridge0: port 1(bridge_slave_0) entered disabled state [ 693.177094][ T845] device veth1_macvtap left promiscuous mode [ 693.182903][ T845] device veth0_vlan left promiscuous mode [ 694.205185][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 694.205201][ T28] audit: type=1400 audit(1727592703.489:5109): avc: denied { write } for pid=10993 comm="syz.2.2496" name="event2" dev="devtmpfs" ino=180 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 694.234811][ T28] audit: type=1400 audit(1727592703.509:5110): avc: denied { open } for pid=10993 comm="syz.2.2496" path="/dev/input/event2" dev="devtmpfs" ino=180 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 694.259622][T11001] device bridge_slave_0 entered promiscuous mode [ 694.265898][ T28] audit: type=1400 audit(1727592703.509:5111): avc: denied { ioctl } for pid=10993 comm="syz.2.2496" path="/dev/input/event2" dev="devtmpfs" ino=180 ioctlcmd=0x4590 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 694.318328][T11004] bridge0: port 1(bridge_slave_0) entered disabled state [ 694.688039][T11001] loop1: detected capacity change from 0 to 16 [ 694.719514][T11006] loop2: detected capacity change from 0 to 16 [ 694.739301][T11001] erofs: (device loop1): mounted with root inode @ nid 36. [ 694.749276][T11001] FAULT_INJECTION: forcing a failure. [ 694.749276][T11001] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 694.762189][T11001] CPU: 1 PID: 11001 Comm: syz.1.2495 Not tainted 6.1.99-syzkaller-00091-g110595418159 #0 [ 694.771755][T11001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 694.781653][T11001] Call Trace: [ 694.784777][T11001] [ 694.787553][T11001] dump_stack_lvl+0x151/0x1b7 [ 694.792072][T11001] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 694.797513][T11001] dump_stack+0x15/0x1c [ 694.801499][T11001] should_fail_ex+0x3d0/0x520 [ 694.806017][T11001] should_fail+0xb/0x10 [ 694.810004][T11001] should_fail_usercopy+0x1a/0x20 [ 694.814866][T11001] _copy_from_user+0x1e/0xc0 [ 694.819291][T11001] get_timespec64+0x93/0x270 [ 694.823722][T11001] ? timespec64_add_safe+0x220/0x220 [ 694.828840][T11001] __se_sys_clock_nanosleep+0x1a1/0x3b0 [ 694.834220][T11001] ? __x64_sys_clock_nanosleep+0xb0/0xb0 [ 694.839688][T11001] ? fpregs_restore_userregs+0x130/0x290 [ 694.845156][T11001] __x64_sys_clock_nanosleep+0x9b/0xb0 [ 694.850450][T11001] x64_sys_call+0x609/0x9a0 [ 694.854789][T11001] do_syscall_64+0x3b/0xb0 [ 694.859041][T11001] ? clear_bhb_loop+0x55/0xb0 [ 694.860212][ T28] audit: type=1400 audit(1727592703.959:5112): avc: denied { create } for pid=10994 comm="syz.1.2495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 694.863552][T11001] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 694.888634][T11001] RIP: 0033:0x7f761bf7dff9 [ 694.892892][T11001] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 694.912480][T11001] RSP: 002b:00007f761cd31038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 694.920723][T11001] RAX: ffffffffffffffda RBX: 00007f761c136058 RCX: 00007f761bf7dff9 [ 694.928535][T11001] RDX: 0000000020000300 RSI: 0000000000000000 RDI: 0000000000000002 [ 694.936346][T11001] RBP: 00007f761cd31090 R08: 0000000000000000 R09: 0000000000000000 [ 694.944159][T11001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 694.951967][T11001] R13: 0000000000000000 R14: 00007f761c136058 R15: 00007ffe6336c8d8 [ 694.959788][T11001] [ 694.963037][T11005] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 694.966880][T11006] erofs: (device loop2): mounted with root inode @ nid 36. [ 694.974278][ T28] audit: type=1400 audit(1727592703.959:5113): avc: denied { bind } for pid=10994 comm="syz.1.2495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 694.998607][T11005] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -35 in[64, 4032] out[1851] [ 695.011185][T11005] erofs: (device loop1): z_erofs_read_folio: failed to read, err [-117] [ 695.035114][T10997] loop4: detected capacity change from 0 to 1024 [ 695.057108][ T28] audit: type=1400 audit(1727592703.969:5114): avc: denied { write } for pid=10994 comm="syz.1.2495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 695.078811][T10997] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 695.091625][ T28] audit: type=1400 audit(1727592704.379:5115): avc: denied { setattr } for pid=10996 comm="syz.4.2497" name="file1" dev="loop4" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 695.092533][T10997] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #14: comm syz.4.2497: attempt to clear invalid blocks 1886221359 len 1 [ 695.116915][ T28] audit: type=1400 audit(1727592704.379:5116): avc: denied { remove_name } for pid=10996 comm="syz.4.2497" name="file0" dev="loop4" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 695.279399][ T28] audit: type=1400 audit(1727592704.379:5117): avc: denied { rename } for pid=10996 comm="syz.4.2497" name="file0" dev="loop4" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 695.407646][ T28] audit: type=1400 audit(1727592704.379:5118): avc: denied { unlink } for pid=10996 comm="syz.4.2497" name="file1" dev="loop4" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 695.503161][T10211] EXT4-fs (loop4): unmounting filesystem. [ 696.129174][T11019] 9pnet_fd: Insufficient options for proto=fd [ 696.710754][T11027] loop2: detected capacity change from 0 to 256 [ 696.848496][T11024] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2501'. [ 696.860279][T11027] FAT-fs (loop2): IO charset maci not found [ 697.196785][ T517] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 697.557073][ T517] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 697.567765][ T517] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 697.577329][ T517] usb 2-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 697.586148][ T517] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 697.594728][ T517] usb 2-1: config 0 descriptor?? [ 698.077492][ T517] hid-thrustmaster 0003:044F:B65D.000F: item fetching failed at offset 1/5 [ 698.086051][ T517] hid-thrustmaster 0003:044F:B65D.000F: parse failed with error -22 [ 698.093866][ T517] hid-thrustmaster: probe of 0003:044F:B65D.000F failed with error -22 SYZFAIL: mmap of output file failed want 0x1b30f20000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of output file failed want 0x1b31020000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of output file failed want 0x1b31120000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of output file failed want 0x1b31820000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of output file failed want 0x1b32120000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of output file failed want 0x1b32920000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of output file failed want 0x1b33120000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of output file failed want 0x1b33620000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of output file failed want 0x1b2c320000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of output file failed want 0x1b2d020000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of output file failed want 0x1b2de20000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of output file failed want 0x1b2e520000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of output file failed want 0x1b2f020000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of output file failed want 0x1b2fa20000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of output file failed want 0x1b30520000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of output file failed want 0x1b30f20000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of output file failed want 0x1b31c20000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of output file failed want 0x1b32b20000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of output file failed want 0x1b2c320000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of output file failed want 0x1b2d220000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: repeatedly failed to execute the program proc=3 req=2462 state=1 status=67 (errno 11: Resource temporarily unavailable) [ 698.134371][T11032] loop0: detected capacity change from 0 to 256 [ 698.142674][T11035] loop4: detected capacity change from 0 to 256 [ 698.151782][T11036] loop2: detected capacity change from 0 to 512 [ 698.158464][T11032] FAT-fs (loop0): Unrecognized mount option "codepage9936" or missing value [ 698.168929][T11036] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 698.169215][T11035] FAT-fs (loop4): Unrecognized mount option "codepage9936" or missing value [ 698.454771][ T517] usb 2-1: USB disconnect, device number 42 [ 699.007165][ T393] bridge0: port 1(bridge_slave_0) entered disabled state [ 699.014673][ T393] device veth1_macvtap left promiscuous mode [ 699.020617][ T393] device veth0_vlan left promiscuous mode [ 699.807640][ T393] device bridge_slave_1 left promiscuous mode [ 699.813691][ T393] bridge0: port 2(bridge_slave_1) entered disabled state [ 699.821059][ T393] device bridge_slave_0 left promiscuous mode [ 699.827038][ T393] bridge0: port 1(bridge_slave_0) entered disabled state [ 699.834538][ T393] device bridge_slave_1 left promiscuous mode [ 699.840549][ T393] bridge0: port 2(bridge_slave_1) entered disabled state [ 699.847784][ T393] device bridge_slave_0 left promiscuous mode [ 699.853699][ T393] bridge0: port 1(bridge_slave_0) entered disabled state [ 699.862071][ T393] device veth1_macvtap left promiscuous mode [ 699.867953][ T393] device veth0_vlan left promiscuous mode [ 699.873734][ T393] device veth1_macvtap left promiscuous mode [ 699.879602][ T393] device veth0_vlan left promiscuous mode [ 699.885386][ T393] device veth1_macvtap left promiscuous mode [ 699.891242][ T393] device veth0_vlan left promiscuous mode