last executing test programs: 12.038399785s ago: executing program 0 (id=520): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546000677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289d01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5467a932b77674e802a0d42bc6099ad238af770b5ed8925161729298700000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809b5b9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed3957f813567f7a95435ac15fc0288d9b2a169cdcacc413b48dafb7a2c8cb482bac0ac559eaf39027ceb379a902d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff7a1ef3282830689da6b53b263339863297771429d120000003341bf4abacac94500fca0493cf29b33dcc9ffffffffffffffd39f6ce0c6ff01589646efd1cf870cd7bb2366fdf870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1293b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd000c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c7df8be5877050c91301fb997316dbf17866fb84d4173731efe895ff2e1c55ef08235a0126e01254c44060926e90109b598502d3e959efc71f665c4d75cf2458e3542c9062ece84c99a861887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc74aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7ad333545794f37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f4df90400000000000000d6b2c5ea139376f24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff070000001e48418046c216c1f895778cb25122a2a998de0842a486721737390cbf3a74cb2003016f1514216bdf57d2a40dddb51ab63e96ec84ac3571f02f647b3385b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba2f58ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df986741517abf11389b751f4e109b60000000000000000d6d5210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288d139bd3da230ed05a8fe64680b0a3f9f2dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30235b9100000000a55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854356cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c776f4b4ce07e1c6fa66fcfc7a228805f76785efc0ceb1c8e5729c66418d169fc03aa18854693ad2a182068e1e3a0e2505bc7f41019645466ac96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7e478950aa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab848753203b458b97ec1afb079b4b4ba686fcdf240430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7db3c4be290159f6bcd75f0dda9de5532e71ae9e48b0ed1254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b70ebc660309e1e245b0fdf9743af932cd6db49a47613808bad959719c0000000000378ac2e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6ca0400966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e3030108000000000000c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bffef97dcecc467ace456597685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4cba6e6390a9f302c6eb2df7766411bef0ebb5000000000006065d6735eb7a00e127c0000000000000000000000bfb0bba79344643b1d8daa9f38e4b62c1e2af68c6f5054b078acd74b4a9c944e4505da485a3a4154387a0a88370d9ed9467b09c5888a06431df3f68abf0b366c4d5f8bea7b29c257ed756dff7a21c6b661cbdd43de65afd7f661d5c84f915c90e3d6ea012b68b787eb01d8320000000000000060176dacba0ec503a37fae6b472ec369c79ee6a420c0fd8d8d82fe136d5af6c30bfeb0a7275babfdb96a127aa9386e0671c6454245a18c1c8c49552cff5d27b547cdc34c0858c77a47a9ff86ee9fbd9ceda428716a4218821176d8067997527230fa67d26950d3e4f2750fa7c872874ad3a2d11f9f6eb08e6d7b6fa257b04d8ce36360f524e3dfd2211641f3d2637d86b80681eca50ce0eecafdd22d41fa515c15591e70ded4b70efac3cb42fb352d82e8f7573e8ed8248da356fa91a252976d3a4d8c1843a8d5bb7f5f1028453a0562a3ea93117076dd4940b7df50d78289fe66197525f6095f8662d232970bef61b03fa83027963a1a2e07cfee30c0d0b4c5877f93b3637ca21eab5afcf5d4638dfe8f9202aaad51c979049dd76d65368cbd4187d9f74257c7c4a23ac4a34eec5aa17e78c5167216f5e72138d20f8325dd5f8f96c32189c904eaef580987f1ce601a7cdc35461db9981ac42f9e24b0699bbe4e3d986e38952b0b7938eefd9e7a292bbb66367ad77045fdc18855c81c031dedd185c723238373fc698d676791d04f1ff5f0825a6619e844882f31ed190233d58ecee949e310bf2b1a51b8a33ae65a06d2b6ad386bf8dc49dd328bcd75d1843a13d68560175a18af7efc3c0f20e32f84f6aaaf000000000000000000000013a6c66bce74a8fb9092023df695da2714a7933d699d42de2bc4a85e0a0e22228290a7a7553ab93a16e42553ed86869a02df2f47d4088fac1772d3cd955c81cbf91c2ca7942942f61723b558079b82547844f92df2499c4b2c2ef2539e5daa8d8727baaa6b5755e6f83bbfca000000000000000000000509619f5f0cbc72eebc653946d3552236f0dfe485cfa71bd69f4ded6e131128c3875b785875addfcbd5931c12adbef75535e694f3a19f28f9f99fa32e8ff66e7b1ff674434fb63ba0e28aadccf77d387525c98e81476058c958eaccfa7d251d0671222dc9d06485f7f690d3d4227bd21bd7ff8338617705b7faec47c86789a488b43d0fedf1b0ee05d65c67"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0xb, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80000}, [@alu={0x4, 0x1, 0x3, 0x9, 0x4, 0x8, 0x10}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x2}, @generic={0xe, 0x2, 0xa, 0x7, 0x7ff}]}, &(0x7f0000000180)='syzkaller\x00', 0x101, 0x75, &(0x7f0000000440)=""/117, 0x40f00, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f00000004c0)={0x5, 0x4, 0xdb62, 0x9c8f}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000500)=[r0], &(0x7f0000000540)=[{0x3, 0x1, 0x10, 0x2cb9d5e8e3ab34a9}, {0x3, 0x5, 0xc, 0x7}, {0x2, 0x4, 0x7, 0xa}, {0x3, 0x3, 0x1, 0x6}], 0x10, 0x166}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r5, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000005d, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x0, 0x0, &(0x7f0000000380), 0x8, 0x2a, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8002, &(0x7f00000000c0), 0x1, 0x4b4, &(0x7f0000000c80)="$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") bind$inet6(0xffffffffffffffff, &(0x7f0000000640)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) syz_open_dev$loop(&(0x7f0000000040), 0x1, 0x135e80) socket$inet6_tcp(0xa, 0x1, 0x0) 7.514368763s ago: executing program 0 (id=524): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, 0x0) mount$binderfs(0x0, 0x0, 0x0, 0x4000, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x11, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x1ac81b, 0x0, 0x0, 0x0, 0x1000000}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8, 0x0, 0x0, 0x1010000}, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x0, 0x300}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94) 6.428314564s ago: executing program 3 (id=531): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) epoll_create1(0x80000) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000020000000850000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x18) socket$netlink(0x10, 0x3, 0x0) r4 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x7fffefff) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$pokeuser(0x6, r6, 0x388, 0x41d9fda7) 6.243418848s ago: executing program 0 (id=533): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2}, 0x10) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000440), 0x0}, 0x0) 6.242740978s ago: executing program 4 (id=534): r0 = syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000480)='./file0\x00', 0x2000000, &(0x7f0000000880)=ANY=[@ANYRESHEX, @ANYRES8, @ANYRESOCT, @ANYBLOB="ac82fa3da8cb64cc9eacb70c5918a0fd0f53ab333860bfb7988f9b8200a0d9b5f31f4d5b386152286170eda7f0291b03bafde1116c6f4799c9f36b7247c9664cfa9b290a30352b971c", @ANYRESHEX], 0x8, 0x2f8, &(0x7f0000000ac0)="$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") sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000710000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x40000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@ipv6_newrule={0x1c, 0x20, 0x1, 0x70bd23, 0xffffffff, {0xa, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1}}, 0x1c}, 0x1, 0x0, 0x0, 0x40810}, 0x4044) timer_create(0x3, 0x0, &(0x7f0000000040)) 6.167676639s ago: executing program 1 (id=535): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546000677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289d01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5467a932b77674e802a0d42bc6099ad238af770b5ed8925161729298700000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809b5b9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed3957f813567f7a95435ac15fc0288d9b2a169cdcacc413b48dafb7a2c8cb482bac0ac559eaf39027ceb379a902d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff7a1ef3282830689da6b53b263339863297771429d120000003341bf4abacac94500fca0493cf29b33dcc9ffffffffffffffd39f6ce0c6ff01589646efd1cf870cd7bb2366fdf870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1293b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd000c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c7df8be5877050c91301fb997316dbf17866fb84d4173731efe895ff2e1c55ef08235a0126e01254c44060926e90109b598502d3e959efc71f665c4d75cf2458e3542c9062ece84c99a861887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc74aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7ad333545794f37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f4df90400000000000000d6b2c5ea139376f24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff070000001e48418046c216c1f895778cb25122a2a998de0842a486721737390cbf3a74cb2003016f1514216bdf57d2a40dddb51ab63e96ec84ac3571f02f647b3385b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba2f58ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df986741517abf11389b751f4e109b60000000000000000d6d5210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288d139bd3da230ed05a8fe64680b0a3f9f2dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30235b9100000000a55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854356cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c776f4b4ce07e1c6fa66fcfc7a228805f76785efc0ceb1c8e5729c66418d169fc03aa18854693ad2a182068e1e3a0e2505bc7f41019645466ac96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7e478950aa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab848753203b458b97ec1afb079b4b4ba686fcdf240430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7db3c4be290159f6bcd75f0dda9de5532e71ae9e48b0ed1254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b70ebc660309e1e245b0fdf9743af932cd6db49a47613808bad959719c0000000000378ac2e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6ca0400966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e3030108000000000000c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bffef97dcecc467ace456597685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4cba6e6390a9f302c6eb2df7766411bef0ebb5000000000006065d6735eb7a00e127c0000000000000000000000bfb0bba79344643b1d8daa9f38e4b62c1e2af68c6f5054b078acd74b4a9c944e4505da485a3a4154387a0a88370d9ed9467b09c5888a06431df3f68abf0b366c4d5f8bea7b29c257ed756dff7a21c6b661cbdd43de65afd7f661d5c84f915c90e3d6ea012b68b787eb01d8320000000000000060176dacba0ec503a37fae6b472ec369c79ee6a420c0fd8d8d82fe136d5af6c30bfeb0a7275babfdb96a127aa9386e0671c6454245a18c1c8c49552cff5d27b547cdc34c0858c77a47a9ff86ee9fbd9ceda428716a4218821176d8067997527230fa67d26950d3e4f2750fa7c872874ad3a2d11f9f6eb08e6d7b6fa257b04d8ce36360f524e3dfd2211641f3d2637d86b80681eca50ce0eecafdd22d41fa515c15591e70ded4b70efac3cb42fb352d82e8f7573e8ed8248da356fa91a252976d3a4d8c1843a8d5bb7f5f1028453a0562a3ea93117076dd4940b7df50d78289fe66197525f6095f8662d232970bef61b03fa83027963a1a2e07cfee30c0d0b4c5877f93b3637ca21eab5afcf5d4638dfe8f9202aaad51c979049dd76d65368cbd4187d9f74257c7c4a23ac4a34eec5aa17e78c5167216f5e72138d20f8325dd5f8f96c32189c904eaef580987f1ce601a7cdc35461db9981ac42f9e24b0699bbe4e3d986e38952b0b7938eefd9e7a292bbb66367ad77045fdc18855c81c031dedd185c723238373fc698d676791d04f1ff5f0825a6619e844882f31ed190233d58ecee949e310bf2b1a51b8a33ae65a06d2b6ad386bf8dc49dd328bcd75d1843a13d68560175a18af7efc3c0f20e32f84f6aaaf000000000000000000000013a6c66bce74a8fb9092023df695da2714a7933d699d42de2bc4a85e0a0e22228290a7a7553ab93a16e42553ed86869a02df2f47d4088fac1772d3cd955c81cbf91c2ca7942942f61723b558079b82547844f92df2499c4b2c2ef2539e5daa8d8727baaa6b5755e6f83bbfca000000000000000000000509619f5f0cbc72eebc653946d3552236f0dfe485cfa71bd69f4ded6e131128c3875b785875addfcbd5931c12adbef75535e694f3a19f28f9f99fa32e8ff66e7b1ff674434fb63ba0e28aadccf77d387525c98e81476058c958eaccfa7d251d0671222dc9d06485f7f690d3d4227bd21bd7ff8338617705b7faec47c86789a488b43d0fedf1b0ee05d65c67"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0xc, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80000}, [@alu={0x4, 0x1, 0x3, 0x9, 0x4, 0x8, 0x10}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x2}, @map_fd={0x18, 0xd, 0x1, 0x0, r0}]}, &(0x7f0000000180)='syzkaller\x00', 0x101, 0x75, &(0x7f0000000440)=""/117, 0x40f00, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f00000004c0)={0x5, 0x4, 0xdb62, 0x9c8f}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000500)=[r0], &(0x7f0000000540)=[{0x3, 0x1, 0x10, 0x2cb9d5e8e3ab34a9}, {0x3, 0x5, 0xc, 0x7}, {0x2, 0x4, 0x7, 0xa}, {0x3, 0x3, 0x1, 0x6}], 0x10, 0x166}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r5, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000005d, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x0, 0x0, &(0x7f0000000380), 0x8, 0x2a, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8002, &(0x7f00000000c0), 0x1, 0x4b4, &(0x7f0000000c80)="$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") bind$inet6(0xffffffffffffffff, &(0x7f0000000640)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) syz_open_dev$loop(&(0x7f0000000040), 0x1, 0x135e80) socket$inet6_tcp(0xa, 0x1, 0x0) 5.012011462s ago: executing program 3 (id=536): r0 = socket$inet6(0xa, 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0xd, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80000}, [@alu={0x4, 0x1, 0x3, 0x9, 0x4, 0x8, 0x10}, @ringbuf_query, @btf_id={0x18, 0x7, 0x3, 0x0, 0x2}, @generic={0xe, 0x2, 0xa, 0x7, 0x7ff}, @map_fd={0x18, 0xd}]}, 0x0, 0x101, 0x75, &(0x7f0000000440)=""/117, 0x40f00, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f00000004c0)={0x5, 0x4, 0xdb62, 0x9c8f}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000500)=[0xffffffffffffffff], &(0x7f0000000540)=[{0x3, 0x1, 0x10, 0x2cb9d5e8e3ab34a9}, {0x3, 0x5, 0xc, 0x7}, {0x2, 0x4, 0x7, 0xa}, {0x3, 0x3, 0x1, 0x6}], 0x10, 0x166}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8002, &(0x7f00000000c0), 0x1, 0x4b4, &(0x7f0000000c80)="$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") setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) 4.63818671s ago: executing program 2 (id=537): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x4b301, 0x0) write(r1, 0x0, 0x0) 3.826225406s ago: executing program 1 (id=538): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getrlimit(0xc, &(0x7f0000000000)) sched_setaffinity(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r1}, 0x18) timerfd_settime(0xffffffffffffffff, 0x2, &(0x7f00000000c0)={{}, {0x0, 0x989680}}, &(0x7f0000000600)) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xa}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x2}, {0xfffe}}}]}}]}]}]}}]}, 0x6c}}, 0x0) 3.825200766s ago: executing program 2 (id=539): mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000280)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000540)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) sched_setaffinity(0x0, 0x0, 0x0) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) r5 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mknodat$loop(r5, &(0x7f00000002c0)='./file1\x00', 0x4, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') rename(&(0x7f0000000040)='./file1\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 3.825010156s ago: executing program 3 (id=540): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) 3.167794938s ago: executing program 1 (id=541): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$binderfs(0x0, 0x0, 0x0, 0x4000, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x1ac81b, 0x0, 0x0, 0x0, 0x1000000}, [@map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8, 0x0, 0x0, 0x1010000}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x0, 0x300}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) 3.150844858s ago: executing program 0 (id=542): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@minixdf}, {}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@commit={'commit', 0x3d, 0x5}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@noblock_validity}, {@nomblk_io_submit}]}, 0x1, 0x566, &(0x7f00000015c0)="$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") socket$inet6_udp(0xa, 0x2, 0x0) lsetxattr$security_ima(0x0, &(0x7f0000000140), &(0x7f0000000400)=ANY=[], 0x1d, 0x1) r0 = syz_open_dev$usbfs(0x0, 0x75, 0x10b701) ioctl$USBDEVFS_CLAIM_PORT(r0, 0x80045518, &(0x7f0000000000)=0x1) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c000280050001000000000008000740"], 0x64}}, 0x0) 3.09718739s ago: executing program 3 (id=543): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, 0x0) setsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000600)={r0}, 0xc) ioctl$sock_FIOGETOWN(r1, 0x8903, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) socket$netlink(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) socket(0x10, 0x3, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0xc0) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x1ac81b, 0x0, 0x0, 0x0, 0x1000000}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8, 0x0, 0x0, 0x1010000}, @initr0, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x0, 0x300}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94) 2.820077755s ago: executing program 2 (id=544): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, 0x0) mount$binderfs(0x0, 0x0, 0x0, 0x4000, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x1ac81b, 0x0, 0x0, 0x0, 0x1000000}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x0, 0x300}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94) 2.654554578s ago: executing program 4 (id=545): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0xc0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x1ac81b, 0x0, 0x0, 0x0, 0x1000000}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8, 0x0, 0x0, 0x1010000}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x0, 0x300}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) 2.282306286s ago: executing program 1 (id=546): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) epoll_create1(0x80000) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000020000000850000008600"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x18) socket$netlink(0x10, 0x3, 0x0) r4 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x7fffefff) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$pokeuser(0x6, r6, 0x388, 0x41d9fda7) 2.002800181s ago: executing program 0 (id=547): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, 0x0) setsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000600)={r0}, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) socket$netlink(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x11, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x1ac81b, 0x0, 0x0, 0x0, 0x1000000}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @initr0, @exit, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94) 1.983063781s ago: executing program 3 (id=548): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c00)=@framed={{}, [@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r2}, 0x18) r3 = socket(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0xc08, 0x3, 0x440, 0x310, 0x5002004a, 0xb, 0x310, 0xea13, 0x3a8, 0x3c8, 0x3c8, 0x3a8, 0x3c8, 0x3, 0x0, {[{{@ip={@multicast2, @private=0xa010101, 0xff, 0xffffffff, 'bridge0\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x5c, 0x3, 0x2}, 0x0, 0x2c8, 0x310, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{}, {0x16}, {0x4}, {}, {}, {0x0, 0x0, 0x5e}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}, {0x0, 0x0, 0x4}, {}, {0x4, 0x8}, {}, {}, {0x1}, {0x0, 0x0, 0x0, 0x7f}, {0x0, 0x4}, {}, {}, {}, {0xfffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {0x0, 0x0, 0x40}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x80}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfd}]}}, @common=@inet=@socket3={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4a0) 1.836389894s ago: executing program 2 (id=549): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id', @ANYRESDEC=0x0, @ANYBLOB=',group_id', @ANYRESDEC=0x0]) syz_fuse_handle_req(r0, &(0x7f00000021c0), 0x2000, &(0x7f00000041c0)={&(0x7f0000000140)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0x0, 0x40, 0x0, 0x0, 0x57, 0x0, 0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004300)="d5c2280baf4e05cfa1d1112770cf43a123827586f0f2675b130041ff58ba6533ea7947f2f65b1d458fe88a96133ea3927f41fa6976fad8c967c88679769ee674b80debcd1ec6ce1eb490888bd66a52141fa82f51882b22a8e36ff462b51560307cd0048156800ad137f359719a9c5d6ad6a8c999984f22461c4ca6614ca4cbbd5e9103a3459228e3bd35e3c1cd5f2a83fbefafe7c5a39617ba1d856f37977da077ffcf4d52f5bb3feffa9e100b0279cb635a61ae9f5f4491bb1c9f04c041818a1ae9a25cbca38c4b4754a8be4f52db20ca464b3b4faf0ea8ff193b414e7b7a4ec8aec2e77adc43d09c62d37fc0aa6296a56a9445f264a245d41e77de43c2694cc5885ebd454a3b78b60172e3e6a2fd79efa8b5fbbe827512aa0656920858da51616244ad32e53ed039a270c042662bc966a8fa05e23a51c76585a6f753e57c63b5a1dd11c4ce8773702c5c759471b79ee9bed600d99853afda9b675f071bdf6ff4eb99cb1ae0128ac1f8132f9b7bef82221276395e59f1323c9f9f6bb937a9db0bc2088670ffc3e6233ba73d4e324df7bc866e84e82ab707ab8aadd593913dd3533cddb396e804a63155ad6911962bc49bad21faba90b5570b62d98eb5328214a7198b36ea6df9a72dc248311040e01539112e1d6bcb4ed9d7fb70d22768ec6603e4727b6ed2616eb9108524985ccd70f1361f68b1fb7088829acdd59ec5af9e84409737f0d852a3c55993cb7398b5640c458bc036115b86de7b8e68f1cff882ee5707040571c3e5c9602c773459cfecad4917d8ba2902bd64a676e2c6e507d06dbc806c13c0fd18175087440ce7d7300dfe745b8e98ac63b400e449a3f2518c6112c9864fde68f580ebc2d72e4bbd03f16a7289be813c258b02f76ce901afdafc69046c947c9e801ac635b2a95cca291c052c7f8149c92aaeaab41edb34a70604a7538c4bb6486b983416843fe6a65d7b828d66deb991e71526b7627e71c6a795a02e787bc561ec4b65d4742a129c59bc71b323850cb416f3d32494d6dbfe3ea73cb473b093ae0b0ebbbd3e3251ece756b3cc381f05ea1b8c3f7fbcbb16fc446fc084725e6c3a608221aad8d8179112f9e5ee3697346a0dc0645e530df523cf4daea14764c25da2da863adebaccefc2c83a9257b3131ac2fe04a27bf3aea8979b6f3091b4fef99e203725368d297bad3b020273d0b606d2368e2ecb0776349cb86bbcbaa5c910636527e3cbeca06b4135170d8808c5f113fcd77ecb2f099d1e663617a46ffc5275c8fcc339d315ca1583f66fe7a7e6430405c0be889826c07fcafa17f04e08bc39570a1f499092d390c5dba82d259f652307ff941e9f1f569a48144da846f14452df295553de6ef4e9ba0cd98dd16cf89d8bead08eacd4eea71cc5f8232349f2d8519b1172c724d3bbc415c19c9e679b5a96bc9051cf6f243f243366622023ab1b7039a89152e7db97f291bb3f0213c445c25caf5f0a5a2b382c841cd8a490dc97d008966e94ed0b5ce07bcc0c13b39c349e4b596147a633f3a73ab6012a1582d3d283293bd7c01f99cdbad8e18d24867c39ed0dc3fc3cc800edd23af24b225acb2cca5aa264bcda40e1432cf2cc0050efdff48fd49ae4225a983d1b12facbaaba73294eb225fff64a677d0ed2cd71bab61b3fde8a1fdae638d2036283a8a4ff5a548d05cb706f56ce7e3f55a688fa6c70393c53c33be11f34a38f61f80c8e94e50fc9d7c3695d234705bb9e0b2a8316cf54d7963f548d49f153bf796d0970ed1264c19d79eb77fd0aad4844796cec73a08206b9eca76f2ad76318a20d52e7d3338eac40d03775cca0c2b29a451cb10bc141289c2703198e7137200a360463000fab97d0da72a7b4e8aadfa8a2e559a7d06bf49d6d4a932cb29994ef7ca0c1beabf05b898bb2338e89a67373d50614300f13523fe451d4058e5a522d364ec884099ee3c6e6db8d4ec1e5dc08d127b6301a308a1d6798878c28ef828b91b529a22b7519d249a189a7eb942b94ce26148ea8bf16a44261cd9691ba980ec2d0c710dbee41756cb39b88213ad5763239ae7636e983580c41a40b0f3a3af9fa6f995ed1981d073f63a623554bb01869bdfda190bc8d9507cc067b897e1c5f0d087cf8dfcb171169541fa3cce7c3a620544c74f2d3234935a0acf6c804c43992812925cbaaa24f497e7a00efb20c45c7acb80adb3322cbe0f08d1015b40f5ae1366003ebea977b7b95f803487d10aedca3fd018cfa7b267dae604ed0ada202cbebd731f86b7c6764911d4ff0c75a318ee43b1b556781ac58fbd773b2bd0dd693f9b12fa149bbe392cb2d6bf72015912f4a120e47654d42d14107c67b4502b5ad62044d0022c7f8b255a3e46da4bb8f9e44515e4076ce7b1aefd57c4e264b2cbee4a9e8612ce8517b028067644c927a9ce7564449c8fb0471a87b9b76f374c7c2559379a3004326bdc91be5ec52672dc5fac0883ec527f2a1248601bb9267c3123568b815b90b40ba06c250e3068dee2d7fc232141eaaa130443a5775d049464ec454a7c980d9eebaa4f67a75075a6bc28ded9a5f07fe658a2b9eafa37f14055155409d1aa50be6343d13d515d0531b84644d2f58c280d6d008dee95607f67eb74c900f664d97f411f4ac6afc18f11b6fb75e78b3ff25680ed3bbf5b20969678475b86faa02a751e4cec87735645753f245047371c9e6e2e7ab5a9ea3182b4c96934a21b9df3628b478f5ef705aeda49a0609d4b8f5bf34424581557d029438306002fd4e9cff5a2d4e7d5e23c2992032d314b8fbb46ccda250070fc1b679c9c8646c5fe22d8fe2e0fff73d8153fc46ef7885aeaa2d1eabbe455544d46fdef8e3ef9debfe589870942bcc7196e62736e927c311782b5e4da2889d530a7c1550bff4909d2055941655cbcc5c924a477c80fc3b8a904cd9e62f5fb005b5b00154db5becbe327c0f3ec8314ef3fb53977ec24ff7d15aa83a13b23ab99c5332306023005d2dfb70d3ea2aefababd019ae16d304c083e38997cc94bdeb746fc151849c98dc2a23554e6fe789d3aba8bf4e31133c7f93a3cdcd884271dfdd2c45be398a5349ef5d08456178dfafa31cb4c607f09394d71b3405b3d615c7c59c125db88f72380140345d24c56094711dd833221d6b7c5864d049585605c1301c31982d19e403b601b797fe99d0bbfe30d647a913da72b4c5306f6123e7c572828308a9a8f4c686d07125d0006229c2e890ff7d3c354dde61ccd3b26069a81a98e112e61a930f253d607cda5023f002a09df6b1371638d9661c5a06bed166434f07120ad21476de8ad47296af4b449d581cddc74f9be42a84596fb0634f330a856216a9b32b080c8b66e9f51a758b9ca2e1215ddfe633714ca512032f6547217b1a60fcdb27ac8a04bc7851718b38607bc92c13118a323c3221bad99a8639762abcc4a08654da9938aeb301c55546f5ae7f61439dd883a1b2dede156a57c805ab12337d5381a2fb25b32916a8827fc4de8e2ecc70eeebeb01659d6bf88055477b863fb897d5db275a0c222d261e7df79474858b721e57747fe8997faaf36f5f175b23dd3c5efb2b93fb5824da18d635cd7027a3b0b1c87e7c90a5681682b8a7c47dc82fdd3f329c7b60270100dec8ccdd310245b92f4b0bd9a92e1f2a5733b1b91966be15a4761b06f6fe3b05b60ee7964b4d028257c2210ca88031db0590190d3714c1b6ec86e2821dca03db2fc0c9f0ad9800d1773c8037e9b38c7eb7c99618b731e0526f8453c7e1bb67cffcc2d96cc297e1f917b13dd7dda2a8b12191ed107c1e076ffd4965b9415f830be97935cac23a87f07e26354273c2663c7ef19a27dfe08543fa057e1285c909051602981f5929078214058684bc80bed493f6ef853012cb654d180e414fd484f5cb2cfd06c9b753f417697ff42794649e05fcaa3d53ad0fdfbb0db57dc549115e59978b14dd621370d136176098af2f39a2de72482a29b616e8b308b3d9b46ac9abf3d57ff89fe59b5a97966cc4b97d06c20ee4fd765e1c2abce54dc271a7c7efe656648800c27a9988583b4b76572222cb28916b9ff5f6f649de93923179809405c879a90cb450f604cbe8af55cf2a6d844a59ab0393b394e09c79e1b3c403af6eba69330f6969f78a49eb7022e77a39363f11e07fcc69f670f63c11497352f3f5bfea0aee446da35428cebe28f1c2d23ef3ff97e16ceeb2f88ab19b2b69dcdcc81b947b483cc06c776c52232489f86f4c377eb38056042e2e9e0943fc0ef1490df472b9b244235598894a2ffc296f0a2e4257baca6a3ea8cfb1a22ea8295ab9e5faaa2a9e964ae7625dbf945cdbb369265f429d475ab69413cc5bcb89af57b1b966bd0076f799a401d4b46e5045aceb1ef36e5bbfb037bb7681f2a38ef1df9b84baa3598201d13a813165355bf052bb5e456dc0abdefed995b4eb37a39b313af800f6029243a6a7bec75a23389a90034cac8df6713b919028a14649d756d0093550278aad494de2dfeb76220fd3ee5be31f73839ace7f0d6da650e26f5ded30471ed55d2e814fc1b89102e5917b4e58840ecc211eaffa5a2937abeb882ccdf29308e3ac30e23d66ee79c29b4fb7e793a55e344cac298e30f1ca3333df8b58f43126a3404a61501ce06b75e6e6a4bf13dbfb05efd7b9b4219efd428c8f7f345884640d19f5515abcce05f315f00e65d9aa8022890a23da45ede06f455d66e0c96bbf7e9cc74eddca999a51174b4784eba8a9ebed13415de6bd0f160443d43b78181cfa381313a54e25f6751a38f290e5972ff7f70692e18c4737af2a7f6d4eac52ea594a22be4fd00fac1484e6d2d4d3196b49212b49598f5bc77b34d8a3633cf7212c869557d6eb27bf0d0a02555d9318194e9de9c9730ac72daee7cad6c2d4b248a8744515670766a8f1c739917fb859d98974532477989f4c24345f120f5320fdb8d8d56fa6ff2511e701bab399513cecb3e740e3761d02685a765f5267554d0f9243b51620197adc3b561b59c58f334307220db357c1121d7dbf593898b5d2c505f333445c084a6cbc6a7e5252724c83fcee85e304534780a01e7ecceb2ef53ffb6bc6cb9051b1400493ce55d62c01e972fff3cc7d0b68a2dd4d263c9191df1b629e323797f570083f122db3df6abb6fd6c4a351bb7500c7241e4392ac76e04259968e517a43e907cb0b0533d6750b9587a1a5d852639c6b789d333e848e3ad66cbf19c5ee5a641036cb7a858f822f657dec36cc134d6c1a629cfce1f1e24dbb73d09fba04f53b2c6309d71d92211a1f08535244eefcbb52e095626bcc78b950db1cb8facc3660fa705dceef155b00aef3291367ffcea06b5abe588bbdcea2637761308dc65509798b6a494dae4a75c1922c1234248dbfcabfaab3088a0dad09a135a45d75105314020f3ba8901dc39ee624a32e9f863ff55844974b44e57b30302cd0c349f3cc091befd5665f918c298ba89454fb811ce573e41f27490853a52abd6144e85d77de88c3f2e5506c8de40a3957e65936f3b294ce92610b63cec888cb16fe0e8a7af3dd142da96b57f602cc64ba69966724584c2872e5fc42348a324ff082a3ecfded82c3e5b7292d3726c4800176acab6a7a1479a0b5fea79f299e90ffdb1b3843e2349b8f8dc7881145b3796380474c2ceb57e27726c9e50b746a2b12a214fea9cfd6c668363fe6e402710665118928fedb2f4900322b0c7d2c348881ea52278dae765c14b51fd5e8f000602aa3978d83b76056410c2260931e35d841793c8a36b191f93c33c0e4e6367ef45a1cf5145d774861224afbb11a7b77bb94492ec49827f713f8309d80d22e17701046e04c5b277f7b423cbbada01e6d40beb56e755e583b8f3de4b67c4b5ac83771b805fa7af49de2fc8b9a223293d83e7eb4eea3a3af1d1221e5d458e7cab60eaf1b51550a1b125ce018d76096f16d922f4aba48a728ec1b7d4812fe2ca789261b6d8e0c8edb3ba9007649084899c4f6b7986c1cb4a98d412c801fb91675ee42e2bb511bff6700772d3c03a7cb6adb41cbddc33053f8f65c164e9bd47b931510046506b169216d0a04edc479bc51c28acc536ced3834a7a9ce8fb55b72fa186a559437bf41f04b733e05986c915bc19f1b2f99d3bae6c13873d32e3c809b71881c3075f8dd1746f36409ac7934c25236ee2752560fcdd5175037a6fc5f0da58a229418ce30f3e64f9eb6ff3fe4498f47fdd69ceac5e792c8c9f087316f334b7f75e3432d3f1d03ee97c8f16485ec906c94e6c9580f7d03d98a8da85ec118b77c6c1d3b2e99fbf4b45e66cb4f8817f786d1f90e1e5e250be8c240a9648a219a02e62acbd72d1b0c0b42c75065a35664ea6a03cb05ea179f2e8e50e3d7ed53d31cdc10cf5fce48781fa338e3ee819f410540f045cb0edd7b2d219993faaa97cf95aa6144e889a02069421291d05eade30693a751039fece452c22d1afba081d1c40178fed7684cae475fcc365484118a184670cd7aa2758bdb01058ea9b244d5241f627bc5be11c9395e3cb839b0eac7842a312e1fc8b4ddae2aa4ef907ca5c9b847785051323e16d5497c4424289496277475bba67da750fa05bd8be730e4aabaeb94641fa2263dd3d4eb511b4fa40b8cf8b16d7aded1163f2258add79b04e1eb888afa27d057de2523863fc2da38d44cc69ae2d455900eede5fce69d7e9f8707cdb2456a45dda14d257eee4982f86259b855a0293068aa4aeff9439bc06c8ed5a370fe46fa88fa9bb92872166ac69152d1cbb4720eec5b9a057890cbb838aef12091454fe721395b46f9fa29ec1829fedf65aaec1176bb9eb15511bd77e7d4fe7321b3e0dfda95e5c90c3663956477885d6d94b280f58edbc77e864dca73536cd4988bcde2a3edb91704ad59148d85a001e393cebdb56ee088fa1033cdc6fbcbea30e2974035bfe29cee1eace13e30950bb4658886dae7e565ffd7b71e41feecbcac35fd97c81a8fff9d2a1d43f183c6e984671e06645eb0a60228d1b6c12c28bc6eaa4b9125c57b48ced2e199ed3acf12dbe10af4a56f2f5dca829fd07fc3f7e0de6913c73be0ada3e43bcbe70de784de699d0b51d7a56a3eacaf5d7dcd77d73cfb82e04633574213e05dc98850d822bc6dc90dc3fd6184296287342e2243fe6f0cf94e6d02a1b900d0c718e2afbe7fea2fafa375f209fb9cef5d844b861a1029aa3dd7081e81fe6501bbb413dcd23e013f279ef87e082335ade324b7688054992ccc63fbf9153213ab6d07ed0b79945d19639aaa5dd10e53aafe57f1e323300246cb1d6ede1eb1f319ca6fe1b0cc8e733b34818425888110b6eabe2db302310d0a8bcdd5342146b29c535cc9a95a455c8926d77323a31b948d47dc611815a329654a252fd09dbcec5f3cd8bc7e465759eb8e72ff6fd4ef1f375e4e8762a58148622d14480b7bb9aca2eeab3367a7376c9c85e6ba1735e56a2fcc6baf92c8d21942883f318eab7a568fc7ff01885a7089aa7661b15d73799bc0b8f8ce6a3b61adb6949965a223850b6825616c036e099952e04fde7cf086b5e76d45b86ab78b322f9af580173f2e798a39df7cade0d365c9d46d3fb36970f8a99d7b20a1b275afff852126f21ac24ca8c34deb49ba511f4d9edb4f56941aaaa477253f9bfc9a25a2694bbbe3b917074dd4eb6f1be20395ac33dd932a7ccf0604d64257b5af3faf271c145c190a528e471a7f23a53b5f9ea1bd0cc36410e9c538e91dd01d162edde856087b60dcba2042e65b6ae7b81787bd3308db9eb025b6fd930a9eb74a30883b83cfa8be5270dd3ee3408db7f7b136adebb3ee30f0e0b8835a0ded325363e4a2991cafd4a73483954c0f5d3358b25780608fa48f3f527c7e617ec12eb017df33f5088676d8bc476da251e608394e3d8fc0883fd4d1804f8e07f5e12ffa4ee80365a88abf29936bf1b255539fef95f5cf3bebcd26817edb28e7b6adf4851dcfe8aa1aa097f67c51557326ccf9c46ee2780d491e87774324d4dc5e199b0cdef01094ea72bd5ad5fe1be6c9d545df3dc5de550665d220718a2c0baed2833cfb1428e2d1c2b9ea1e29f4b07fd6c51492643d4000716cd1e8a4f9d58b6b04b805d8962495323fd62949b17348418201664c6f2f651f99d73f8d17bb5e52dba2e6f94fa33f816d74bb6a45bd6cbdbd07f530406227c8fd11f390e805bbc17bc0e81076a27c0be023b64777afec0a7a0c3f53f03bc2ca72ae2873d68217a1a6905f414c2cb1b9561dfd07850a026da5f5775a66f8f3a6bc29b48c8a81b06ba30994ba8e7e233e3a3a5d886767ea6de91fbfc0a594c2375d62e71c7209d87d0f6c7a79a0d80da328e93f08650ec745495c771410913d094e4190075b7225761172eb420c82ab493548f6de38e17d3e687a89ce77c67c58b875c48c8a4d1664cbc6f67df357e040444fcd515d92d5823fc3ef6485208b6f3eda8cd09ea3b004f7eb06ac268ae8c3bf571aa3f619222a47540f9af340c80c587f7226e3d715b18c3ee41f64777d3a0a09f32190ad67922f6ecc63c956a715c3c42a6aaaf5e588d119210083ceaa414820b62fef87a678cd3f24f8fa3cdb6629b041cd7555974313f56d1b0e117ea925dc95e18b5d3f4ba9812f1067022945c3f5d547370d45853c4db3c9ca4436d7e649e1ac3ec02f9c1e9139849b46027d4b276cb0eb4b09848999f466f528290e47ba9540ceca89390db3fcbacb1d566e22e917f01f4442bd4dd0d350d057ffdf5b3549ca559901e6ff5147bdc25c11b23f1678f02c20e4e2e6f339b262e2b82eae0b15b4227f1d514f99ec78fbcf80c8f6f243536f2d7a809de05ae5e1d676fe950ad3513f801bbe4d16737def4b5ec4b62f8562cd5432bd372645202edeb286662d7e8d0dadac5b91c903c2756bdc4f5a7c931f2c3f7feace2b83f5459a196000e2ed1e1b2accaa9d637d5e408340161331c4b0047bf2ab31d317bb1c8f6e1b3d52f9f240bd971a447942dd4b73301781656aad9ce9b01aed907b7eb3a78397b97e601b04a4cb028d327ef32cf20c34e8dad9c9b1f981ab5c06a2b0271852e2a1016ee460d8568391c9ece5a2b8f29cbc6f2d6cc2e66c30c96df548e67dd6ad8c1ff09dfa22b2e8b2c52a3948c4febb0910c2d34c0604a5ef930cd53be69a4bed9c9ee057178ece02a6b4df4624191590952888bdfafd2dbeca128d500872a8b236fba9623672c4dc15f56a761ee0c54026112fc464f72d3039587f009b94930dac0dbe444a939b38c0f5bce7aa366bfc2bb909db231178228846f71a56ab219e28cef1b102c1bfadbe8f0916d10a573b8cb38cc2cc2ec496a410a4e82847006d2ed4bac927a63a00416d0bfce59cc69aaf78ddc9566f23582999a655c8ad3b217486fb5a037ce089baf344d55bbd475be4e90b10e92c9c1bae3202c2d63355549f0ac95058724fea81ff9cec027e7b93e2cee43af81c6978fee5faf6216118785251b8ca023115b2f87d5d4b10c29aa3616628ab40a8ef36668ef57d7f9be505eabc01947ca222362818a71b3d63e5725a4d8a2c619b1867f70daa07703360d026d6f65247330be1ba84ddaaa7779591ca261beda4f4c094af65c5c276fe3bfb89f067c8c54af67e78f61bdc114ed4aa869c3adf282d7a8e7272579e9fd9e47611e0dc89f97561110e0141c69b1fa114e27b3d1e2c825ea008a370e08cd0a0610edef20cdd8a7cda0922fff046edfd2ff391a10ffce5dd6045619ce9af6b03f4193d858a76b201ed5beb0f11321707b7b593b23adaee4a0c0caf39dfeebcbd2948030435dc94ca00990c728502ec4686194f0f454304a422023c1b2c5b1ebbcd8cd50fa2d11361e3bbdc306e2739e27de300eda27b1c1ea62d773104cea77c18037c6bcc76423621b45abbe789b384bfdfb46efa1627ff29d9d840bf6e1f05e7e13fae6383e42ce153dcb062fa0cefd0fe9298ddbe77fd78d7036b5a815504b48267203da08ca685bfe8ae89c031074bbe5d3d6dcc6a3a8a8a4d3102765c3b714867f4516df62f214351b97bb8b5697a9f9a9dd78627342b239c524a3943d1d70f8cdd7391f05e7395731a8fc05210c6733ea256040bbbb53389229b84dafaaa3db1d5eca2971d9e550149461f1a672eae2319a99beed48934520666bc54b63085a744b5fc9a9b089b16c50ae945f74adcd4c5d064a12a6e103ef59bcc035a755ad31836eb7d04e5900d3800c822b96b466a9f6611f46b8a7d6131f91c625a5604de5bf01e5ca5d99a714c8dc1160260010f8d55f9125ee453b61c911bdf0824caa804c76d6512802875c5433de9b2e8b6c579a67fec5d2bc64ed3d1c313854221b75c9a0ed42af6f5354e7b1d1bf8661baa1261e68fc20d14b5652d25a536f208bff2b90fefa163a232696e655bcf95bed39355ec865e272fed582aae18858f5096ece40b9108efb00147f9c2ced59bfe2a79826851850ed95b35908dfb4d9ab7da0668a1fa8933ac4f6534e9598481477791fd1a1c269011ac9fe81f0491790e8aac121ffc00e38a7619a1855e6899abc2c670375a3ba4ac0cf652da89a70628cee1a35ae17b3490102e3c88ca324d06fce2151bc9de49472cf6e76ccb16d2a9cbf4161812e2c7758d73631024190fe9b71935de6968b289d3503b497f3f4b6306446ae9c312f8f1c63c1f7e62652173d9ed48cb128815bd44a12061f9b73fbdc6674ab9e0d01807f7bcfa0aa59168420e5ad8b72d7b576e273a1d229934fce2867689a41cb17767cf9defe1a96515a677ba08e10e187a3ce2f1d78e6b43b0d46c36163a1967b203df4f53379ee98422e973ab5c090adff21b5cc84fc78358021f681a0f0fd744f687e4f6c295470bf8f548d2d3dc841481dd51db9124cacde83bc9fef44a3e69e1cb28579d897f3013ac6133395328247fdcc152e5563678258936576196ced017c79bb6a4ea501a44cb25e5af1697afbdb3abb316837470ffdbe985ac3967334a90731602d3fac4f5c2758f04ec9c161a7cf330b7c7549fb62e6c15d07a7203c94edd3a8141c91b2029d6a90b14322337e6610822d9d7bff58c10d9c6cff71822f6456a421a65fdaa5d2c793f256a4e7a39f0d85d65fb95479eff79345c0615c9bbb4fb3324f9360b70dc709b0200042e8461b8cee9ce30beab3e276df48f41f001262fc14153f9764e13b50397442e00d7b11266bde10a3b7f83818086ff0015409679e4472d9e0215804fa9d21cebfa5cb5099cf88750cbeaaf58c2743f2746ea4cb73760ba88a07b91b68553716d563af5d7702219d0c600916dc54242d825c6d68320baf234a39f0b9ea9e6a4a72c4d5829b2f28508f54b33c7e0394a43fe23e7940d9b04bbe790d903a2d2c979e0ea79931b934d094fa2d5948c05cf278c341d788f2061ff617c9fa4700b1e1f0fbfa1b8c42848f2ea01cd318a8748c3336622ead25527ddbcd8a12ba3a5183f4419deb13558ed0ec99e73448c21ede0dbee9c01fc7675e54c60d4dee29c0f8fe81af6fe7b726f5d3c50dac634aefbf1ca6aa4df1b340a4109acf30939f6094c8591218729788111bfde98cd96d4b04b25bcd1bcb7f826241995573bae00", 0x2000, &(0x7f0000008c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x78, 0x0, 0x7, {0xe, 0xcbff, 0x0, {0x5, 0xfffffffffffffff9, 0x1, 0x9, 0xa, 0x80000006, 0x5, 0x6, 0x101, 0xc000, 0x4, 0xffffffffffffffff, 0x0, 0x3, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x78, 0x0, 0x7, {0xe, 0xcbff, 0x0, {0x5, 0x7, 0x29000000000, 0x1af3, 0xa, 0x80000006, 0x5, 0x6, 0xfff, 0x4000, 0x11, 0xffffffffffffffff, 0x0, 0x800003, 0x1c00}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchmodat(0xffffffffffffff9c, 0x0, 0x2) 1.54837532s ago: executing program 4 (id=550): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x4b301, 0x0) write(r1, 0x0, 0x0) 1.506031171s ago: executing program 2 (id=551): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getrlimit(0xc, &(0x7f0000000000)) sched_setaffinity(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r1}, 0x18) timerfd_settime(0xffffffffffffffff, 0x2, &(0x7f00000000c0)={{}, {0x0, 0x989680}}, &(0x7f0000000600)) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xa}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x2}, {0xfffe}}}]}}]}]}]}}]}, 0x6c}}, 0x0) 1.505602041s ago: executing program 2 (id=552): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2}, 0x10) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000440), 0x0}, 0x0) 1.220860896s ago: executing program 4 (id=553): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) 1.165954897s ago: executing program 1 (id=554): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = getpid() mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000200)='./bus/file0\x00', 0x0) syz_pidfd_open(r3, 0x0) 1.090517059s ago: executing program 0 (id=555): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000600)={r0}, 0xc) mount$binderfs(0x0, 0x0, 0x0, 0x4000, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x1ac81b, 0x0, 0x0, 0x0, 0x1000000}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8, 0x0, 0x0, 0x1010000}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x0, 0x300}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) 1.090179189s ago: executing program 4 (id=556): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='sched_switch\x00', r1}, 0x18) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x802, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 959.804361ms ago: executing program 4 (id=557): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$binderfs(0x0, 0x0, 0x0, 0x4000, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x1ac81b, 0x0, 0x0, 0x0, 0x1000000}, [@map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8, 0x0, 0x0, 0x1010000}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x0, 0x300}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) 70.785429ms ago: executing program 3 (id=558): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, 0x0) setsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000600)={r0}, 0xc) ioctl$sock_FIOGETOWN(r1, 0x8903, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) socket$netlink(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) socket(0x10, 0x3, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0xc0) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x1ac81b, 0x0, 0x0, 0x0, 0x1000000}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8, 0x0, 0x0, 0x1010000}, @initr0, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x0, 0x300}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94) 0s ago: executing program 1 (id=559): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, 0x0) mount$binderfs(0x0, 0x0, 0x0, 0x4000, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x1ac81b, 0x0, 0x0, 0x0, 0x1000000}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x0, 0x300}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94) kernel console output (not intermixed with test programs): syzkaller syzkaller login: [ 14.249723][ T28] kauditd_printk_skb: 29 callbacks suppressed [ 14.249737][ T28] audit: type=1400 audit(1757741006.044:59): avc: denied { transition } for pid=224 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 14.253998][ T28] audit: type=1400 audit(1757741006.044:60): avc: denied { noatsecure } for pid=224 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 14.257023][ T28] audit: type=1400 audit(1757741006.044:61): avc: denied { write } for pid=224 comm="sh" path="pipe:[7983]" dev="pipefs" ino=7983 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 14.260315][ T28] audit: type=1400 audit(1757741006.044:62): avc: denied { rlimitinh } for pid=224 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 14.263210][ T28] audit: type=1400 audit(1757741006.044:63): avc: denied { siginh } for pid=224 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.1.27' (ED25519) to the list of known hosts. [ 21.732707][ T28] audit: type=1400 audit(1757741013.524:64): avc: denied { mounton } for pid=274 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.734067][ T274] cgroup: Unknown subsys name 'net' [ 21.755373][ T28] audit: type=1400 audit(1757741013.524:65): avc: denied { mount } for pid=274 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.783550][ T28] audit: type=1400 audit(1757741013.574:66): avc: denied { unmount } for pid=274 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.783690][ T274] cgroup: Unknown subsys name 'devices' [ 21.897690][ T274] cgroup: Unknown subsys name 'hugetlb' [ 21.903301][ T274] cgroup: Unknown subsys name 'rlimit' [ 22.038065][ T28] audit: type=1400 audit(1757741013.834:67): avc: denied { setattr } for pid=274 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.061252][ T28] audit: type=1400 audit(1757741013.834:68): avc: denied { mounton } for pid=274 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 22.086151][ T28] audit: type=1400 audit(1757741013.834:69): avc: denied { mount } for pid=274 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 22.109859][ T276] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 22.118617][ T28] audit: type=1400 audit(1757741013.924:70): avc: denied { relabelto } for pid=276 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.144108][ T28] audit: type=1400 audit(1757741013.924:71): avc: denied { write } for pid=276 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.160123][ T274] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 22.169997][ T28] audit: type=1400 audit(1757741013.954:72): avc: denied { read } for pid=274 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.203915][ T28] audit: type=1400 audit(1757741013.954:73): avc: denied { open } for pid=274 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.724834][ T284] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.732136][ T284] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.739665][ T284] device bridge_slave_0 entered promiscuous mode [ 23.747728][ T284] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.754765][ T284] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.762238][ T284] device bridge_slave_1 entered promiscuous mode [ 23.863391][ T282] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.870484][ T282] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.878021][ T282] device bridge_slave_0 entered promiscuous mode [ 23.886731][ T282] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.893771][ T282] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.901321][ T282] device bridge_slave_1 entered promiscuous mode [ 23.976621][ T283] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.983698][ T283] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.991284][ T283] device bridge_slave_0 entered promiscuous mode [ 23.998040][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.005075][ T286] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.012584][ T286] device bridge_slave_0 entered promiscuous mode [ 24.025986][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.033025][ T285] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.040478][ T285] device bridge_slave_0 entered promiscuous mode [ 24.047164][ T283] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.054203][ T283] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.061689][ T283] device bridge_slave_1 entered promiscuous mode [ 24.074773][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.081891][ T286] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.089245][ T286] device bridge_slave_1 entered promiscuous mode [ 24.099797][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.106871][ T285] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.114247][ T285] device bridge_slave_1 entered promiscuous mode [ 24.137350][ T284] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.144417][ T284] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.257910][ T282] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.264965][ T282] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.272285][ T282] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.279328][ T282] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.329818][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.337232][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.344362][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.352912][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 24.360448][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.388408][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 24.396808][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.404934][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.411990][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.419390][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.427762][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.434788][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.461993][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.469534][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.477763][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.494132][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.518682][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.527074][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.534113][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.541642][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.549849][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.556936][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.583642][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.591466][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.599800][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.606853][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.614186][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.622525][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.630722][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.637755][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.645156][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 24.652939][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 24.672234][ T284] device veth0_vlan entered promiscuous mode [ 24.685943][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.694388][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.702502][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.710064][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.718042][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.725886][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.733985][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.741019][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.748459][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.756603][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.764728][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.771764][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.779423][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 24.808262][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 24.816736][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.824866][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.831905][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.839997][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.848217][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.856224][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.864370][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.872561][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.880860][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.888938][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 24.897315][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.905794][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.912830][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.920294][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.928535][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.936673][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.944652][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.952719][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.960936][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.979023][ T284] device veth1_macvtap entered promiscuous mode [ 24.987272][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.995024][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.003484][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.012513][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.021012][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.031195][ T282] device veth0_vlan entered promiscuous mode [ 25.047194][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.055697][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.063703][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.072275][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.080782][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.089523][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.098062][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.106359][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.114649][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.122316][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.137131][ T286] device veth0_vlan entered promiscuous mode [ 25.144466][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.152599][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.162774][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.170628][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.178270][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.186822][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.200903][ T282] device veth1_macvtap entered promiscuous mode [ 25.212982][ T284] request_module fs-gadgetfs succeeded, but still no fs? [ 25.220428][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.228900][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.237580][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.245188][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.253539][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.261748][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.270062][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.278531][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.286876][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.296247][ T286] device veth1_macvtap entered promiscuous mode [ 25.305099][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.312812][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.321164][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.331125][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.339389][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.349646][ T283] device veth0_vlan entered promiscuous mode [ 25.356346][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.364374][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.383316][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.395417][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.412169][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.420758][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.431170][ T285] device veth0_vlan entered promiscuous mode [ 25.442351][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.452218][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.461220][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.468726][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.482431][ T285] device veth1_macvtap entered promiscuous mode [ 25.505235][ T283] device veth1_macvtap entered promiscuous mode [ 25.583126][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.591558][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.599732][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.607420][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.615605][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.623775][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.632194][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.641217][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.650614][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.660477][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.669419][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.678513][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.710640][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.719107][ T24] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 25.775601][ T342] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 25.937497][ T24] usb 2-1: config 0 has an invalid interface number: 117 but max is 0 [ 26.052463][ T24] usb 2-1: config 0 has no interface number 0 [ 26.077393][ T342] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 26.903054][ T24] usb 2-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice= f.d6 [ 26.980634][ T342] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 27.110541][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.131770][ T342] usb 1-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 27.203041][ T359] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 27.433811][ T24] usb 2-1: Product: syz [ 27.477532][ T24] usb 2-1: Manufacturer: syz [ 27.482214][ T342] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.490301][ T24] usb 2-1: SerialNumber: syz [ 27.503526][ T24] usb 2-1: config 0 descriptor?? [ 27.515066][ T342] usb 1-1: config 0 descriptor?? [ 27.541924][ T24] ftdi_sio 2-1:0.117: FTDI USB Serial Device converter detected [ 27.550731][ T24] ftdi_sio ttyUSB0: unknown device type: 0xfd6 [ 27.593757][ T28] kauditd_printk_skb: 32 callbacks suppressed [ 27.593777][ T28] audit: type=1400 audit(1757741019.384:106): avc: denied { create } for pid=349 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 27.727185][ T28] audit: type=1400 audit(1757741019.524:107): avc: denied { prog_run } for pid=343 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 27.765584][ T6] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 27.776049][ T290] usb 2-1: USB disconnect, device number 2 [ 27.782293][ T290] ftdi_sio 2-1:0.117: device disconnected [ 27.862073][ T28] audit: type=1400 audit(1757741019.654:108): avc: denied { create } for pid=367 comm="syz.4.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.952145][ T342] itetech 0003:258A:6A88.0001: item fetching failed at offset 5/7 [ 27.955574][ T6] usb 3-1: Using ep0 maxpacket: 16 [ 27.960374][ T342] itetech: probe of 0003:258A:6A88.0001 failed with error -22 [ 27.966912][ T6] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 27.981734][ T6] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 27.991667][ T6] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 28.001450][ T6] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 28.011222][ T6] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 28.020993][ T6] usb 3-1: config 1 interface 0 has no altsetting 0 [ 28.027630][ T6] usb 3-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 28.036692][ T6] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.046703][ T6] ums-sddr09 3-1:1.0: USB Mass Storage device detected [ 28.046735][ T24] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 28.177841][ T28] audit: type=1400 audit(1757741019.974:109): avc: denied { read write } for pid=372 comm="syz.4.10" name="uinput" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 28.236583][ T24] usb 4-1: New USB device found, idVendor=1e7d, idProduct=3264, bcdDevice= 0.00 [ 28.240410][ T376] usb 1-1: USB disconnect, device number 2 [ 28.255500][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.267496][ T375] input: syz1 as /devices/virtual/input/input4 [ 28.270337][ T24] usb 4-1: config 0 descriptor?? [ 28.286235][ T28] audit: type=1400 audit(1757741019.994:110): avc: denied { open } for pid=372 comm="syz.4.10" path="/dev/uinput" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 28.311790][ T28] audit: type=1400 audit(1757741020.004:111): avc: denied { ioctl } for pid=372 comm="syz.4.10" path="/dev/uinput" dev="devtmpfs" ino=262 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 28.337250][ T6] ums-sddr09: probe of 3-1:1.0 failed with error -22 [ 28.337251][ T28] audit: type=1400 audit(1757741020.054:112): avc: denied { append } for pid=360 comm="syz.2.7" name="001" dev="devtmpfs" ino=182 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 28.374409][ T28] audit: type=1400 audit(1757741020.174:113): avc: denied { create } for pid=372 comm="syz.4.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 28.376339][ T6] usb 3-1: USB disconnect, device number 2 [ 28.683487][ T24] isku 0003:1E7D:3264.0002: unbalanced delimiter at end of report description [ 28.692612][ T24] isku 0003:1E7D:3264.0002: parse failed [ 28.698314][ T24] isku: probe of 0003:1E7D:3264.0002 failed with error -22 [ 28.938394][ T24] usb 4-1: USB disconnect, device number 2 [ 29.909656][ T28] audit: type=1400 audit(1757741020.904:114): avc: denied { create } for pid=384 comm="syz.2.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 31.536773][ T28] audit: type=1400 audit(1757741020.954:115): avc: denied { connect } for pid=384 comm="syz.2.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 32.224341][ T409] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17'. [ 32.245552][ T405] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15'. [ 32.265565][ T409] netlink: 12 bytes leftover after parsing attributes in process `syz.2.17'. [ 32.425983][ T411] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15'. [ 32.532544][ T417] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 32.981172][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 32.981209][ T28] audit: type=1400 audit(1757741024.774:123): avc: denied { unmount } for pid=284 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 33.455598][ T342] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 33.510383][ T436] loop1: detected capacity change from 0 to 512 [ 33.629963][ T436] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.24: bg 0: block 393: padding at end of block bitmap is not set [ 33.645619][ T342] usb 5-1: Using ep0 maxpacket: 16 [ 33.650927][ T436] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 33.661361][ T436] EXT4-fs (loop1): 2 truncates cleaned up [ 33.667259][ T436] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 33.788215][ T292] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 33.798332][ T342] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 34.299695][ T342] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 34.309750][ T342] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 34.319598][ T342] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 34.329483][ T342] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 34.414217][ T342] usb 5-1: config 1 interface 0 has no altsetting 0 [ 34.435549][ T292] usb 4-1: Using ep0 maxpacket: 16 [ 34.441854][ T292] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 34.453753][ T342] usb 5-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 34.493924][ T342] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.503684][ T284] EXT4-fs (loop1): unmounting filesystem. [ 34.509621][ T292] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 34.541729][ T28] audit: type=1400 audit(1757741026.334:124): avc: denied { ioctl } for pid=442 comm="syz.1.27" path="/dev/kvm" dev="devtmpfs" ino=83 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 34.572636][ T444] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 34.589434][ T292] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 34.604898][ T342] ums-sddr09 5-1:1.0: USB Mass Storage device detected [ 34.612209][ T292] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 34.623197][ T292] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.637798][ T443] xt_CT: No such helper "pptp" [ 34.648148][ T292] usb 4-1: config 0 descriptor?? [ 34.732274][ T452] loop2: detected capacity change from 0 to 512 [ 34.741528][ T28] audit: type=1400 audit(1757741026.534:125): avc: denied { remount } for pid=451 comm="syz.2.29" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 34.760987][ T452] ======================================================= [ 34.760987][ T452] WARNING: The mand mount option has been deprecated and [ 34.760987][ T452] and is ignored by this kernel. Remove the mand [ 34.760987][ T452] option from the mount to silence this warning. [ 34.760987][ T452] ======================================================= [ 35.639334][ T292] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 35.646743][ T342] ums-sddr09: probe of 5-1:1.0 failed with error -22 [ 35.658550][ T342] usb 5-1: USB disconnect, device number 2 [ 35.662775][ T28] audit: type=1400 audit(1757741027.434:126): avc: denied { read write } for pid=432 comm="syz.3.25" name="vhost-vsock" dev="devtmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 35.736179][ T292] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 35.763955][ T459] loop0: detected capacity change from 0 to 512 [ 35.933616][ T459] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.30: bg 0: block 393: padding at end of block bitmap is not set [ 35.949110][ T459] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 35.960878][ T459] EXT4-fs (loop0): 2 truncates cleaned up [ 35.966707][ T459] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 36.529395][ T292] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 36.537005][ T292] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 36.544282][ T292] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 36.552096][ T292] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 36.584046][ T292] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 36.621878][ T292] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 36.638350][ T292] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 36.647740][ T28] audit: type=1400 audit(1757741027.434:127): avc: denied { open } for pid=432 comm="syz.3.25" path="/dev/vhost-vsock" dev="devtmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 36.672583][ T282] EXT4-fs (loop0): unmounting filesystem. [ 36.677878][ T292] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 36.700285][ T292] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0003/input/input5 [ 36.786770][ T292] microsoft 0003:045E:07DA.0003: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 36.986920][ T292] usb 4-1: USB disconnect, device number 3 [ 37.012042][ T474] fido_id[474]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 37.135790][ T480] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 37.155792][ T342] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 37.336566][ T342] usb 1-1: config 0 has an invalid interface number: 117 but max is 0 [ 37.344802][ T342] usb 1-1: config 0 has no interface number 0 [ 37.352729][ T342] usb 1-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice= f.d6 [ 37.361813][ T342] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.369893][ T292] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 37.377421][ T342] usb 1-1: Product: syz [ 37.381652][ T342] usb 1-1: Manufacturer: syz [ 37.386310][ T342] usb 1-1: SerialNumber: syz [ 37.391517][ T342] usb 1-1: config 0 descriptor?? [ 37.397241][ T342] ftdi_sio 1-1:0.117: FTDI USB Serial Device converter detected [ 37.405147][ T342] ftdi_sio ttyUSB0: unknown device type: 0xfd6 [ 37.565531][ T292] usb 4-1: Using ep0 maxpacket: 16 [ 37.571983][ T292] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 37.581090][ T292] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 37.590900][ T292] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 37.600642][ T292] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 37.610535][ T292] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 37.620604][ T292] usb 4-1: config 1 interface 0 has no altsetting 0 [ 37.627419][ T292] usb 4-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 37.636557][ T292] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.652319][ T484] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 37.735620][ T292] ums-sddr09 4-1:1.0: USB Mass Storage device detected [ 37.863607][ T376] usb 1-1: USB disconnect, device number 3 [ 37.874137][ T376] ftdi_sio 1-1:0.117: device disconnected [ 38.016335][ T292] ums-sddr09: probe of 4-1:1.0 failed with error -22 [ 38.024188][ T292] usb 4-1: USB disconnect, device number 4 [ 38.537584][ T501] loop0: detected capacity change from 0 to 2048 [ 38.735959][ T501] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 38.872348][ T501] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.889155][ T28] audit: type=1400 audit(1757741030.684:128): avc: denied { write } for pid=500 comm="syz.0.42" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 38.914223][ T28] audit: type=1400 audit(1757741030.684:129): avc: denied { add_name } for pid=500 comm="syz.0.42" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 38.935583][ T28] audit: type=1400 audit(1757741030.684:130): avc: denied { create } for pid=500 comm="syz.0.42" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 38.958744][ T28] audit: type=1400 audit(1757741030.684:131): avc: denied { read write } for pid=500 comm="syz.0.42" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 38.984951][ T28] audit: type=1400 audit(1757741030.684:132): avc: denied { open } for pid=500 comm="syz.0.42" path="/7/file0/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 39.007831][ T510] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.42: bg 0: block 345: padding at end of block bitmap is not set [ 39.022559][ T510] EXT4-fs (loop0): Remounting filesystem read-only [ 39.057200][ T282] EXT4-fs (loop0): unmounting filesystem. [ 39.371970][ T28] audit: type=1400 audit(1757741031.164:133): avc: denied { read } for pid=522 comm="syz.4.48" dev="nsfs" ino=4026532464 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 39.404385][ T28] audit: type=1400 audit(1757741031.164:134): avc: denied { open } for pid=522 comm="syz.4.48" path="net:[4026532464]" dev="nsfs" ino=4026532464 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 39.427486][ T28] audit: type=1400 audit(1757741031.164:135): avc: denied { create } for pid=522 comm="syz.4.48" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 39.451802][ T28] audit: type=1400 audit(1757741031.194:136): avc: denied { write } for pid=522 comm="syz.4.48" path="socket:[16579]" dev="sockfs" ino=16579 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 39.927088][ T28] audit: type=1400 audit(1757741031.724:137): avc: denied { create } for pid=536 comm="syz.2.53" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 40.025551][ T342] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 40.115587][ T24] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 41.024131][ T342] usb 4-1: Using ep0 maxpacket: 16 [ 41.084841][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 41.115778][ T547] loop0: detected capacity change from 0 to 512 [ 41.450235][ T24] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 41.460261][ T24] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 41.471290][ T342] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 41.483769][ T24] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 41.494344][ T342] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 41.504887][ T24] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 41.515411][ T342] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 41.706369][ T547] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.55: bg 0: block 393: padding at end of block bitmap is not set [ 41.721450][ T547] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 41.732538][ T547] EXT4-fs (loop0): 2 truncates cleaned up [ 41.738352][ T547] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 41.819699][ T24] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 42.138249][ T342] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 42.186427][ T24] usb 2-1: config 1 interface 0 has no altsetting 0 [ 42.193901][ T282] EXT4-fs (loop0): unmounting filesystem. [ 42.200490][ T24] usb 2-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 42.209637][ T342] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.217645][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.239318][ T342] usb 4-1: config 0 descriptor?? [ 42.249544][ T24] ums-sddr09 2-1:1.0: USB Mass Storage device detected [ 42.313218][ T557] loop0: detected capacity change from 0 to 2048 [ 42.321075][ T560] SELinux: Context system_u:object_r:bsdpty_device_t:s0 is not valid (left unmapped). [ 42.351638][ T557] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 42.360436][ T557] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.492047][ T563] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.58: bg 0: block 345: padding at end of block bitmap is not set [ 42.515804][ T563] EXT4-fs (loop0): Remounting filesystem read-only [ 42.546236][ T24] ums-sddr09: probe of 2-1:1.0 failed with error -22 [ 42.559480][ T24] usb 2-1: USB disconnect, device number 3 [ 42.607125][ T282] EXT4-fs (loop0): unmounting filesystem. [ 42.701918][ T342] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 42.714710][ T342] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 42.722153][ T342] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 42.729549][ T342] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 42.736953][ T342] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 42.744206][ T342] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 42.752173][ T342] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 42.759896][ T342] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 42.767615][ T342] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 42.774972][ T342] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 42.845084][ T342] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0004/input/input6 [ 42.926674][ T342] microsoft 0003:045E:07DA.0004: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 42.953378][ T342] usb 4-1: USB disconnect, device number 5 [ 42.960853][ T571] fido_id[571]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 43.690739][ T593] netlink: 8 bytes leftover after parsing attributes in process `syz.4.66'. [ 43.709081][ T593] loop4: detected capacity change from 0 to 16 [ 43.738252][ T593] erofs: (device loop4): mounted with root inode @ nid 36. [ 44.405884][ T603] netlink: 4 bytes leftover after parsing attributes in process `syz.1.67'. [ 44.412279][ T608] loop0: detected capacity change from 0 to 512 [ 44.421912][ T603] netlink: 12 bytes leftover after parsing attributes in process `syz.1.67'. [ 44.516783][ T388] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 45.485584][ T39] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 45.507234][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 45.507248][ T28] audit: type=1400 audit(1757741037.304:146): avc: denied { read write } for pid=624 comm="syz.3.75" name="fuse" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 45.560869][ T28] audit: type=1400 audit(1757741037.334:147): avc: denied { open } for pid=624 comm="syz.3.75" path="/dev/fuse" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 45.663735][ T632] loop4: detected capacity change from 0 to 512 [ 45.707908][ T388] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 45.749935][ T635] loop0: detected capacity change from 0 to 512 [ 45.759593][ T39] usb 3-1: Using ep0 maxpacket: 16 [ 45.777622][ T39] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 46.318585][ T39] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 46.329728][ T39] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 46.343527][ T39] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 46.353446][ T39] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.441691][ T635] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.76: bg 0: block 393: padding at end of block bitmap is not set [ 46.456837][ T635] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 46.467011][ T635] EXT4-fs (loop0): 2 truncates cleaned up [ 46.472818][ T635] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 46.594782][ T39] usb 3-1: config 0 descriptor?? [ 46.972690][ T640] loop1: detected capacity change from 0 to 16 [ 46.989255][ T640] erofs: (device loop1): mounted with root inode @ nid 36. [ 46.990320][ T282] EXT4-fs (loop0): unmounting filesystem. [ 48.589295][ T39] usbhid 3-1:0.0: can't add hid device: -71 [ 48.595279][ T39] usbhid: probe of 3-1:0.0 failed with error -71 [ 52.439599][ T39] usb 3-1: USB disconnect, device number 3 [ 52.592983][ T685] xt_CT: No such helper "pptp" [ 52.613351][ T666] netlink: 4 bytes leftover after parsing attributes in process `syz.3.83'. [ 52.622838][ T666] netlink: 12 bytes leftover after parsing attributes in process `syz.3.83'. [ 52.935539][ T39] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 52.945677][ T19] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 53.115509][ T39] usb 3-1: Using ep0 maxpacket: 16 [ 53.121760][ T39] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 53.130801][ T39] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 53.135504][ T19] usb 5-1: Using ep0 maxpacket: 16 [ 53.140481][ T39] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 53.147093][ T19] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 53.155243][ T39] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 53.166384][ T19] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 53.175870][ T39] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 53.186273][ T19] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 53.195879][ T39] usb 3-1: config 1 interface 0 has no altsetting 0 [ 53.209008][ T19] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 53.215159][ T39] usb 3-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 53.224514][ T19] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.233257][ T39] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.251621][ T39] ums-sddr09 3-1:1.0: USB Mass Storage device detected [ 53.260708][ T19] usb 5-1: config 0 descriptor?? [ 53.292578][ T28] audit: type=1400 audit(1757741045.084:148): avc: denied { read } for pid=692 comm="syz.0.93" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 53.318343][ T28] audit: type=1400 audit(1757741045.084:149): avc: denied { open } for pid=692 comm="syz.0.93" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 53.350549][ T28] audit: type=1400 audit(1757741045.084:150): avc: denied { ioctl } for pid=692 comm="syz.0.93" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 53.375910][ T28] audit: type=1400 audit(1757741045.084:151): avc: denied { set_context_mgr } for pid=692 comm="syz.0.93" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 53.405885][ T28] audit: type=1400 audit(1757741045.084:152): avc: denied { write } for pid=692 comm="syz.0.93" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 53.431021][ T28] audit: type=1400 audit(1757741045.094:153): avc: denied { map } for pid=692 comm="syz.0.93" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 53.455382][ T28] audit: type=1400 audit(1757741045.094:154): avc: denied { call } for pid=692 comm="syz.0.93" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 53.767288][ T39] ums-sddr09: probe of 3-1:1.0 failed with error -22 [ 53.818975][ T39] usb 3-1: USB disconnect, device number 4 [ 53.959233][ T707] netlink: 4 bytes leftover after parsing attributes in process `syz.3.96'. [ 54.036931][ T19] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 54.044251][ T19] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 54.053630][ T19] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 54.062977][ T19] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 54.072759][ T19] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 54.082118][ T19] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 54.089710][ T19] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 54.097108][ T19] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 54.104395][ T19] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 54.111809][ T19] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 54.123361][ T19] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0005/input/input7 [ 54.197465][ T19] microsoft 0003:045E:07DA.0005: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 54.230004][ T19] usb 5-1: USB disconnect, device number 3 [ 54.258143][ T711] fido_id[711]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 54.407979][ T716] loop2: detected capacity change from 0 to 16 [ 54.420775][ T716] erofs: (device loop2): mounted with root inode @ nid 36. [ 54.466633][ T6] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 54.529156][ T719] netlink: 8 bytes leftover after parsing attributes in process `syz.2.100'. [ 54.539255][ T719] loop2: detected capacity change from 0 to 16 [ 54.546656][ T719] erofs: (device loop2): mounted with root inode @ nid 36. [ 54.655508][ T6] usb 1-1: Using ep0 maxpacket: 16 [ 54.662014][ T6] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 54.676667][ T6] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 54.707474][ T6] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 54.717577][ T6] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 54.727885][ T6] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 54.738452][ T6] usb 1-1: config 1 interface 0 has no altsetting 0 [ 55.031118][ T6] usb 1-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 55.040350][ T6] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.052521][ T6] ums-sddr09 1-1:1.0: USB Mass Storage device detected [ 55.296298][ T6] ums-sddr09: probe of 1-1:1.0 failed with error -22 [ 55.312421][ T6] usb 1-1: USB disconnect, device number 4 [ 55.319686][ T736] xt_CT: No such helper "pptp" [ 57.849267][ T761] loop0: detected capacity change from 0 to 512 [ 57.858230][ T763] loop3: detected capacity change from 0 to 16 [ 57.875101][ T763] erofs: (device loop3): mounted with root inode @ nid 36. [ 57.907104][ T388] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 58.049237][ T771] netlink: 4 bytes leftover after parsing attributes in process `syz.2.112'. [ 58.455544][ T705] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 58.685536][ T705] usb 5-1: Using ep0 maxpacket: 16 [ 58.726449][ T705] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 58.819508][ T705] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 58.887546][ T705] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 58.897280][ T705] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 58.966017][ T705] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 58.976782][ T705] usb 5-1: config 1 interface 0 has no altsetting 0 [ 58.983510][ T705] usb 5-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 58.998268][ T784] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 59.019330][ T705] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.164249][ T789] xt_CT: No such helper "pptp" [ 59.166879][ T705] ums-sddr09 5-1:1.0: USB Mass Storage device detected [ 59.303103][ T796] xt_CT: No such helper "pptp" [ 59.408394][ T705] ums-sddr09: probe of 5-1:1.0 failed with error -22 [ 59.437794][ T705] usb 5-1: USB disconnect, device number 4 [ 59.637891][ T28] audit: type=1400 audit(1757741051.434:155): avc: denied { open } for pid=797 comm="syz.0.121" path="/dev/net/tun" dev="devtmpfs" ino=156 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:bsdpty_device_t:s0" [ 63.017823][ T833] loop4: detected capacity change from 0 to 512 [ 63.145780][ T28] audit: type=1400 audit(1757741053.774:156): avc: denied { write } for pid=808 comm="syz.2.124" name="tun" dev="devtmpfs" ino=156 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:bsdpty_device_t:s0" [ 63.219673][ T835] netlink: 4 bytes leftover after parsing attributes in process `syz.0.127'. [ 63.345731][ T833] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.128: bg 0: block 393: padding at end of block bitmap is not set [ 63.360956][ T833] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 63.371901][ T833] EXT4-fs (loop4): 2 truncates cleaned up [ 63.377721][ T833] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 63.529030][ T835] netlink: 12 bytes leftover after parsing attributes in process `syz.0.127'. [ 63.955156][ T28] audit: type=1400 audit(1757741053.934:157): avc: denied { write } for pid=826 comm="syz.1.130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 64.020284][ T28] audit: type=1400 audit(1757741053.934:158): avc: denied { read } for pid=826 comm="syz.1.130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 64.048242][ T285] EXT4-fs (loop4): unmounting filesystem. [ 64.089358][ T705] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 64.100340][ T843] netlink: 4 bytes leftover after parsing attributes in process `syz.4.132'. [ 64.222717][ T851] xt_CT: No such helper "pptp" [ 64.351267][ T853] loop3: detected capacity change from 0 to 512 [ 64.385584][ T705] usb 2-1: Using ep0 maxpacket: 16 [ 64.418522][ T705] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 64.454837][ T853] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.134: bg 0: block 393: padding at end of block bitmap is not set [ 64.470183][ T853] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 64.480681][ T853] EXT4-fs (loop3): 2 truncates cleaned up [ 64.486531][ T853] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 64.627936][ T705] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 64.706589][ T705] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 32 [ 64.796304][ T705] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 64.896277][ T705] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 65.269369][ T705] usb 2-1: SerialNumber: syz [ 65.290127][ T838] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 65.299742][ T283] EXT4-fs (loop3): unmounting filesystem. [ 65.315544][ T6] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 65.316576][ T705] cdc_acm 2-1:1.0: skipping garbage [ 65.389841][ T705] cdc_acm: probe of 2-1:1.0 failed with error -12 [ 66.112979][ T866] xt_CT: No such helper "pptp" [ 66.127938][ T6] usb 5-1: Using ep0 maxpacket: 16 [ 66.265412][ T705] usb 2-1: USB disconnect, device number 4 [ 66.326403][ T6] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 66.335708][ T6] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 66.345538][ T6] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 66.355185][ T6] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 66.365006][ T6] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 66.425685][ T6] usb 5-1: config 1 interface 0 has no altsetting 0 [ 66.438635][ T6] usb 5-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 66.615527][ T340] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 66.742280][ T6] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.752703][ T6] ums-sddr09 5-1:1.0: USB Mass Storage device detected [ 66.818155][ T877] loop1: detected capacity change from 0 to 2048 [ 66.844457][ T877] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 66.853066][ T877] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.893556][ T340] usb 4-1: Using ep0 maxpacket: 16 [ 66.904819][ T340] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 66.916136][ T340] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 66.926039][ T340] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 66.943101][ T884] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.142: bg 0: block 345: padding at end of block bitmap is not set [ 66.957368][ T340] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 66.960442][ T884] EXT4-fs (loop1): Remounting filesystem read-only [ 66.966818][ T340] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.006165][ T340] usb 4-1: config 0 descriptor?? [ 67.265295][ T6] ums-sddr09: probe of 5-1:1.0 failed with error -22 [ 67.279921][ T6] usb 5-1: USB disconnect, device number 5 [ 67.287180][ T887] netlink: 8 bytes leftover after parsing attributes in process `syz.2.144'. [ 67.298128][ T887] loop2: detected capacity change from 0 to 16 [ 67.306351][ T887] erofs: (device loop2): mounted with root inode @ nid 36. [ 67.309216][ T284] EXT4-fs (loop1): unmounting filesystem. [ 67.393010][ T891] netlink: 4 bytes leftover after parsing attributes in process `syz.1.145'. [ 67.407994][ T891] netlink: 12 bytes leftover after parsing attributes in process `syz.1.145'. [ 67.474612][ T340] microsoft 0003:045E:07DA.0006: No inputs registered, leaving [ 67.483296][ T340] microsoft 0003:045E:07DA.0006: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 67.494810][ T340] microsoft 0003:045E:07DA.0006: no inputs found [ 67.501256][ T340] microsoft 0003:045E:07DA.0006: could not initialize ff, continuing anyway [ 67.676804][ T6] usb 4-1: USB disconnect, device number 6 [ 69.915292][ T919] loop2: detected capacity change from 0 to 512 [ 70.436167][ T919] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.152: bg 0: block 393: padding at end of block bitmap is not set [ 70.451796][ T919] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 70.463325][ T919] EXT4-fs (loop2): 2 truncates cleaned up [ 70.469204][ T919] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 71.295609][ T286] EXT4-fs (loop2): unmounting filesystem. [ 71.521982][ T933] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 73.135170][ T947] netlink: 4 bytes leftover after parsing attributes in process `syz.1.157'. [ 73.272558][ T951] netlink: 12 bytes leftover after parsing attributes in process `syz.1.157'. [ 73.411386][ T954] loop0: detected capacity change from 0 to 512 [ 74.133594][ T434] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 75.325460][ C0] sched: RT throttling activated [ 75.325554][ T19] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 75.457667][ T954] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.161: bg 0: block 393: padding at end of block bitmap is not set [ 75.495518][ T434] usb 5-1: Using ep0 maxpacket: 16 [ 75.501738][ T434] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 75.515689][ T954] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 75.524665][ T954] EXT4-fs (loop0): 2 truncates cleaned up [ 75.530712][ T954] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 75.601473][ T951] syz.1.157 (951) used greatest stack depth: 22288 bytes left [ 75.665621][ T434] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 75.680691][ T434] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 75.693539][ T434] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 75.702913][ T434] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.744042][ T965] netlink: 4 bytes leftover after parsing attributes in process `syz.3.164'. [ 75.744392][ T282] EXT4-fs (loop0): unmounting filesystem. [ 75.753203][ T434] usb 5-1: config 0 descriptor?? [ 75.764120][ T965] netlink: 12 bytes leftover after parsing attributes in process `syz.3.164'. [ 76.742395][ T434] microsoft 0003:045E:07DA.0007: No inputs registered, leaving [ 76.755094][ T434] microsoft 0003:045E:07DA.0007: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 76.816490][ T28] audit: type=1400 audit(1757741068.584:159): avc: denied { write } for pid=978 comm="syz.0.167" name="001" dev="devtmpfs" ino=185 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 76.859444][ T434] microsoft 0003:045E:07DA.0007: no inputs found [ 76.865869][ T434] microsoft 0003:045E:07DA.0007: could not initialize ff, continuing anyway [ 76.978540][ T434] usb 5-1: USB disconnect, device number 6 [ 77.209871][ T993] xt_CT: No such helper "pptp" [ 77.385489][ T376] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 77.565714][ T376] usb 2-1: Using ep0 maxpacket: 16 [ 77.575064][ T376] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.586017][ T376] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 77.595781][ T376] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 77.608617][ T376] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 77.617714][ T376] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.663538][ T376] usb 2-1: config 0 descriptor?? [ 77.804886][ T1000] loop4: detected capacity change from 0 to 512 [ 78.985533][ T1000] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.172: bg 0: block 393: padding at end of block bitmap is not set [ 78.999949][ T1000] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 79.009873][ T376] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 79.018034][ T1000] EXT4-fs (loop4): 2 truncates cleaned up [ 79.023785][ T1000] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 79.066716][ T376] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 79.074222][ T376] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 79.081566][ T376] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 79.088918][ T376] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 79.096540][ T376] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 79.134915][ T376] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 79.142192][ T376] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 79.149580][ T376] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 79.154304][ T1014] netlink: 4 bytes leftover after parsing attributes in process `syz.0.175'. [ 79.156831][ T376] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 79.176401][ T376] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0008/input/input10 [ 79.947809][ T285] EXT4-fs (loop4): unmounting filesystem. [ 80.000266][ T376] microsoft 0003:045E:07DA.0008: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 80.017678][ T1017] netlink: 12 bytes leftover after parsing attributes in process `syz.0.175'. [ 80.041563][ T376] usb 2-1: USB disconnect, device number 5 [ 80.068352][ T388] udevd[388]: setting owner of /dev/input/event3 to uid=0, gid=104 failed: No such file or directory [ 80.079455][ T19] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 80.526509][ T19] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 80.539625][ T19] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 80.553553][ T19] usb 4-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 80.565765][ T19] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.581273][ T19] usb 4-1: config 0 descriptor?? [ 80.822522][ T1033] netlink: 4 bytes leftover after parsing attributes in process `syz.1.180'. [ 80.841602][ T1033] netlink: 12 bytes leftover after parsing attributes in process `syz.1.180'. [ 80.906516][ T1035] loop2: detected capacity change from 0 to 2048 [ 80.927884][ T1035] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 80.936477][ T1035] ext4 filesystem being mounted at /38/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.961837][ T286] EXT4-fs (loop2): unmounting filesystem. [ 80.997022][ T19] itetech 0003:258A:6A88.0009: item fetching failed at offset 5/7 [ 81.005027][ T19] itetech: probe of 0003:258A:6A88.0009 failed with error -22 [ 81.200974][ T19] usb 4-1: USB disconnect, device number 8 [ 81.235514][ T376] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 81.245560][ T1004] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 81.415491][ T376] usb 5-1: Using ep0 maxpacket: 16 [ 81.421719][ T376] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 81.432794][ T376] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 81.436690][ T1004] usb 3-1: config 0 has an invalid interface number: 117 but max is 0 [ 81.442686][ T376] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 81.450974][ T1004] usb 3-1: config 0 has no interface number 0 [ 81.463654][ T376] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 81.472075][ T1004] usb 3-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice= f.d6 [ 81.479047][ T376] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.498972][ T376] usb 5-1: config 0 descriptor?? [ 81.518386][ T1004] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.526717][ T1004] usb 3-1: Product: syz [ 81.530985][ T1004] usb 3-1: Manufacturer: syz [ 81.535796][ T1004] usb 3-1: SerialNumber: syz [ 81.541453][ T1004] usb 3-1: config 0 descriptor?? [ 81.547491][ T1004] ftdi_sio 3-1:0.117: FTDI USB Serial Device converter detected [ 81.555424][ T1004] ftdi_sio ttyUSB0: unknown device type: 0xfd6 [ 81.890478][ T366] usb 3-1: USB disconnect, device number 5 [ 81.896783][ T366] ftdi_sio 3-1:0.117: device disconnected [ 81.931112][ T376] microsoft 0003:045E:07DA.000A: No inputs registered, leaving [ 81.939402][ T376] microsoft 0003:045E:07DA.000A: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 81.951115][ T376] microsoft 0003:045E:07DA.000A: no inputs found [ 81.957715][ T376] microsoft 0003:045E:07DA.000A: could not initialize ff, continuing anyway [ 82.021985][ T1057] xt_CT: No such helper "pptp" [ 82.136726][ T366] usb 5-1: USB disconnect, device number 7 [ 82.589519][ T1067] loop2: detected capacity change from 0 to 512 [ 82.625628][ T705] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 82.683462][ T1067] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.190: bg 0: block 393: padding at end of block bitmap is not set [ 82.728770][ T1067] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 82.748073][ T1067] EXT4-fs (loop2): 2 truncates cleaned up [ 82.753883][ T1067] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 82.815569][ T705] usb 4-1: Using ep0 maxpacket: 16 [ 82.825306][ T705] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 82.947397][ T705] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.040462][ T705] usb 4-1: Product: syz [ 83.143198][ T705] usb 4-1: Manufacturer: syz [ 83.187480][ T705] usb 4-1: SerialNumber: syz [ 83.408150][ T705] r8152-cfgselector 4-1: config 0 descriptor?? [ 85.281036][ T286] EXT4-fs (loop2): unmounting filesystem. [ 85.336014][ T705] r8152-cfgselector 4-1: Unknown version 0x0000 [ 85.391912][ T705] r8152-cfgselector 4-1: Unknown version 0x0000 [ 85.445069][ T705] r8152-cfgselector 4-1: bad CDC descriptors [ 85.463316][ T705] r8152-cfgselector 4-1: Unknown version 0x0000 [ 85.486096][ T705] r8152-cfgselector 4-1: USB disconnect, device number 9 [ 85.597998][ T1090] 9pnet_fd: Insufficient options for proto=fd [ 88.197403][ T1107] syz.2.203 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 89.185511][ T19] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 89.275544][ T383] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 89.376521][ T19] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.387495][ T19] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 89.397460][ T19] usb 4-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 89.406671][ T19] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.418387][ T19] usb 4-1: config 0 descriptor?? [ 89.455517][ T383] usb 3-1: Using ep0 maxpacket: 16 [ 89.465964][ T383] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 89.474992][ T383] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 89.484858][ T383] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 89.494819][ T383] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 89.504851][ T383] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 89.514731][ T383] usb 3-1: config 1 interface 0 has no altsetting 0 [ 89.521519][ T376] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 89.529051][ T383] usb 3-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 89.538352][ T383] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.555933][ T383] ums-sddr09 3-1:1.0: USB Mass Storage device detected [ 89.565595][ T366] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 89.726470][ T376] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.737405][ T376] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 89.747246][ T376] usb 5-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 89.756438][ T376] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.765192][ T366] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.776251][ T376] usb 5-1: config 0 descriptor?? [ 89.781245][ T366] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 89.792295][ T383] ums-sddr09: probe of 3-1:1.0 failed with error -22 [ 89.800098][ T383] usb 3-1: USB disconnect, device number 6 [ 89.806824][ T366] usb 1-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 89.816381][ T366] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.824892][ T366] usb 1-1: config 0 descriptor?? [ 89.831015][ T19] itetech 0003:258A:6A88.000B: item fetching failed at offset 5/7 [ 89.839111][ T19] itetech: probe of 0003:258A:6A88.000B failed with error -22 [ 90.035165][ T383] usb 4-1: USB disconnect, device number 10 [ 90.195197][ T376] itetech 0003:258A:6A88.000C: item fetching failed at offset 5/7 [ 90.228127][ T376] itetech: probe of 0003:258A:6A88.000C failed with error -22 [ 90.249628][ T366] itetech 0003:258A:6A88.000D: item fetching failed at offset 5/7 [ 90.257711][ T366] itetech: probe of 0003:258A:6A88.000D failed with error -22 [ 90.522075][ T1134] loop1: detected capacity change from 0 to 512 [ 91.550651][ T366] usb 5-1: USB disconnect, device number 8 [ 91.559360][ T383] usb 1-1: USB disconnect, device number 5 [ 91.566268][ T1134] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.210: bg 0: block 393: padding at end of block bitmap is not set [ 91.581037][ T1134] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 91.591380][ T1134] EXT4-fs (loop1): 2 truncates cleaned up [ 91.597256][ T1134] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 92.732756][ T284] EXT4-fs (loop1): unmounting filesystem. [ 94.531015][ T1163] loop0: detected capacity change from 0 to 512 [ 94.564202][ T1165] loop1: detected capacity change from 0 to 1024 [ 97.180172][ T1163] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.218: bg 0: block 393: padding at end of block bitmap is not set [ 97.195348][ T1163] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 97.206520][ T1163] EXT4-fs (loop0): 2 truncates cleaned up [ 97.212330][ T1163] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 97.382653][ T1165] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 98.222944][ T284] EXT4-fs (loop1): unmounting filesystem. [ 98.295334][ T282] EXT4-fs (loop0): unmounting filesystem. [ 98.349948][ T1183] loop1: detected capacity change from 0 to 512 [ 98.551211][ T1186] netlink: 4 bytes leftover after parsing attributes in process `syz.3.223'. [ 98.603169][ T1186] netlink: 12 bytes leftover after parsing attributes in process `syz.3.223'. [ 98.649760][ T958] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 98.657827][ T388] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 98.915518][ T958] usb 1-1: Using ep0 maxpacket: 16 [ 98.922732][ T958] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 98.951997][ T958] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 98.992731][ T958] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 99.024175][ T958] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 99.061425][ T958] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 99.071332][ T958] usb 1-1: config 1 interface 0 has no altsetting 0 [ 99.078201][ T958] usb 1-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 99.087425][ T958] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.121475][ T958] ums-sddr09 1-1:1.0: USB Mass Storage device detected [ 99.133605][ T28] audit: type=1400 audit(1757741090.934:160): avc: denied { create } for pid=1191 comm="syz.2.225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 99.320009][ T1201] 9pnet_fd: Insufficient options for proto=fd [ 100.035059][ T958] ums-sddr09: probe of 1-1:1.0 failed with error -22 [ 100.046089][ T958] usb 1-1: USB disconnect, device number 6 [ 100.272434][ T1167] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 100.317079][ T1215] loop2: detected capacity change from 0 to 2048 [ 100.360455][ T1213] loop1: detected capacity change from 0 to 1024 [ 100.386981][ T1215] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 100.387950][ T1213] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 100.395693][ T28] audit: type=1400 audit(1757741092.194:161): avc: denied { mount } for pid=1214 comm="syz.2.232" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 100.425000][ T1215] ext4 filesystem being mounted at /51/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.435972][ T28] audit: type=1400 audit(1757741092.224:162): avc: denied { read open } for pid=1212 comm="syz.1.231" path="/47/bus/bus" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 100.481287][ T28] audit: type=1400 audit(1757741092.274:163): avc: denied { ioctl } for pid=1212 comm="syz.1.231" path="/dev/net/tun" dev="devtmpfs" ino=156 ioctlcmd=0x54ca scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:bsdpty_device_t:s0" [ 100.521403][ T1167] usb 5-1: Using ep0 maxpacket: 16 [ 100.530158][ T1167] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.556872][ T1167] usb 5-1: New USB device found, idVendor=056a, idProduct=0064, bcdDevice= 0.00 [ 100.574787][ T286] EXT4-fs (loop2): unmounting filesystem. [ 100.681154][ T28] audit: type=1400 audit(1757741092.344:164): avc: denied { append } for pid=1212 comm="syz.1.231" name="tun" dev="devtmpfs" ino=156 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:bsdpty_device_t:s0" [ 100.701994][ T1167] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.718848][ T28] audit: type=1400 audit(1757741092.364:165): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 100.733236][ T1167] usb 5-1: config 0 descriptor?? [ 100.745305][ T1228] netlink: 4 bytes leftover after parsing attributes in process `syz.0.235'. [ 100.755595][ T1228] sch_fq: defrate 4294967295 ignored. [ 100.787860][ T1228] syz.0.235 (1228) used greatest stack depth: 21192 bytes left [ 100.885750][ T284] EXT4-fs (loop1): unmounting filesystem. [ 102.044637][ T1235] loop2: detected capacity change from 0 to 1024 [ 102.850447][ T1238] loop1: detected capacity change from 0 to 512 [ 105.329873][ T1235] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 105.336781][ T1167] usbhid 5-1:0.0: can't add hid device: -71 [ 105.339548][ T1238] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.237: bg 0: block 393: padding at end of block bitmap is not set [ 105.365653][ T1238] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 105.374628][ T1238] EXT4-fs (loop1): 2 truncates cleaned up [ 105.375982][ T1167] usbhid: probe of 5-1:0.0 failed with error -71 [ 105.380418][ T1238] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 105.394921][ T1167] usb 5-1: USB disconnect, device number 9 [ 106.259493][ T1251] loop0: detected capacity change from 0 to 1024 [ 106.576946][ T286] EXT4-fs (loop2): unmounting filesystem. [ 106.585197][ T284] EXT4-fs (loop1): unmounting filesystem. [ 106.934356][ T1251] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 107.175655][ T1167] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 107.452221][ T282] EXT4-fs (loop0): unmounting filesystem. [ 107.505532][ T1167] usb 5-1: Using ep0 maxpacket: 16 [ 107.511791][ T1167] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 107.582624][ T1167] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 107.592757][ T1167] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 107.602601][ T1167] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 107.612519][ T1167] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 107.624623][ T1167] usb 5-1: config 1 interface 0 has no altsetting 0 [ 107.631422][ T1167] usb 5-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 107.640963][ T1167] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.667910][ T1167] ums-sddr09 5-1:1.0: USB Mass Storage device detected [ 107.922073][ T1167] ums-sddr09: probe of 5-1:1.0 failed with error -22 [ 107.947400][ T1167] usb 5-1: USB disconnect, device number 10 [ 107.965513][ T366] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 108.176650][ T366] usb 2-1: config 0 has an invalid interface number: 117 but max is 0 [ 108.184906][ T366] usb 2-1: config 0 has no interface number 0 [ 108.192405][ T366] usb 2-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice= f.d6 [ 108.201513][ T366] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.209644][ T366] usb 2-1: Product: syz [ 108.213859][ T366] usb 2-1: Manufacturer: syz [ 108.218523][ T366] usb 2-1: SerialNumber: syz [ 108.223789][ T366] usb 2-1: config 0 descriptor?? [ 108.229514][ T366] ftdi_sio 2-1:0.117: FTDI USB Serial Device converter detected [ 108.238089][ T366] ftdi_sio ttyUSB0: unknown device type: 0xfd6 [ 108.951376][ T383] usb 2-1: USB disconnect, device number 6 [ 108.957661][ T383] ftdi_sio 2-1:0.117: device disconnected [ 110.764735][ T366] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 110.946519][ T366] usb 5-1: config 0 has an invalid interface number: 117 but max is 0 [ 110.954788][ T366] usb 5-1: config 0 has no interface number 0 [ 110.968860][ T366] usb 5-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice= f.d6 [ 110.977994][ T366] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.986775][ T366] usb 5-1: Product: syz [ 110.991081][ T366] usb 5-1: Manufacturer: syz [ 110.995949][ T366] usb 5-1: SerialNumber: syz [ 111.004877][ T1302] netlink: 4 bytes leftover after parsing attributes in process `syz.1.253'. [ 111.005420][ T366] usb 5-1: config 0 descriptor?? [ 111.020054][ T1302] netlink: 12 bytes leftover after parsing attributes in process `syz.1.253'. [ 111.030854][ T366] ftdi_sio 5-1:0.117: FTDI USB Serial Device converter detected [ 111.040015][ T366] ftdi_sio ttyUSB0: unknown device type: 0xfd6 [ 111.229570][ T1167] usb 5-1: USB disconnect, device number 11 [ 111.235920][ T1167] ftdi_sio 5-1:0.117: device disconnected [ 111.705491][ T705] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 112.924465][ T1325] loop3: detected capacity change from 0 to 512 [ 113.304426][ T1335] loop2: detected capacity change from 0 to 512 [ 116.959116][ T1335] EXT4-fs: failed to create workqueue [ 116.964545][ T1335] EXT4-fs (loop2): mount failed [ 117.017396][ T705] usb 1-1: Using ep0 maxpacket: 16 [ 117.035869][ T705] usb 1-1: device descriptor read/all, error -71 [ 117.050996][ T1344] loop3: detected capacity change from 0 to 16 [ 117.085373][ T1344] erofs: (device loop3): mounted with root inode @ nid 36. [ 117.103277][ T1348] fuse: Bad value for 'fd' [ 117.435529][ T705] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 117.656447][ T705] usb 1-1: not running at top speed; connect to a high speed hub [ 117.668268][ T705] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 117.691597][ T705] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 117.717686][ T705] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 117.789336][ T705] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 117.798523][ T705] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.806664][ T705] usb 1-1: Product: syz [ 117.810848][ T705] usb 1-1: Manufacturer: syz [ 117.815471][ T705] usb 1-1: SerialNumber: syz [ 117.840020][ T1363] netlink: 4 bytes leftover after parsing attributes in process `syz.3.271'. [ 117.853197][ T1363] netlink: 12 bytes leftover after parsing attributes in process `syz.3.271'. [ 118.116357][ T705] usb 1-1: 0:2 : does not exist [ 118.173078][ T705] usb 1-1: USB disconnect, device number 8 [ 118.429679][ T388] udevd[388]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 118.611970][ T1374] loop1: detected capacity change from 0 to 512 [ 119.554116][ T1392] fuse: Bad value for 'fd' [ 119.558979][ T1389] loop4: detected capacity change from 0 to 512 [ 120.114859][ T1403] loop1: detected capacity change from 0 to 512 [ 120.217234][ T1403] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.277: bg 0: block 393: padding at end of block bitmap is not set [ 120.232490][ T1403] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 120.242848][ T1403] EXT4-fs (loop1): 2 truncates cleaned up [ 120.248715][ T1403] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 120.276625][ T1405] xt_CT: No such helper "pptp" [ 121.130867][ T284] EXT4-fs (loop1): unmounting filesystem. [ 121.458115][ T1421] netlink: 4 bytes leftover after parsing attributes in process `syz.3.286'. [ 121.468798][ T1421] netlink: 12 bytes leftover after parsing attributes in process `syz.3.286'. [ 121.470295][ T1419] loop0: detected capacity change from 0 to 16 [ 121.608215][ T1419] erofs: (device loop0): mounted with root inode @ nid 36. [ 121.796329][ T1426] loop3: detected capacity change from 0 to 512 [ 122.953542][ T1438] loop2: detected capacity change from 0 to 1024 [ 124.095800][ T1438] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 124.839432][ T286] EXT4-fs (loop2): unmounting filesystem. [ 125.240860][ T1465] loop1: detected capacity change from 0 to 512 [ 128.426550][ T1478] netlink: 4 bytes leftover after parsing attributes in process `syz.3.299'. [ 128.445116][ T1477] loop4: detected capacity change from 0 to 512 [ 128.576926][ T1465] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.295: bg 0: block 393: padding at end of block bitmap is not set [ 128.582703][ T1481] netlink: 12 bytes leftover after parsing attributes in process `syz.3.299'. [ 128.601187][ T1465] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 128.611360][ T1465] EXT4-fs (loop1): 2 truncates cleaned up [ 128.617233][ T1465] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 128.893694][ T284] EXT4-fs (loop1): unmounting filesystem. [ 129.276895][ T1496] fuse: Bad value for 'fd' [ 129.561687][ T1505] xt_CT: No such helper "pptp" [ 131.378839][ T1527] netlink: 4 bytes leftover after parsing attributes in process `syz.4.312'. [ 131.390680][ T1527] netlink: 12 bytes leftover after parsing attributes in process `syz.4.312'. [ 131.893818][ T1533] loop4: detected capacity change from 0 to 16 [ 131.900674][ T1533] erofs: (device loop4): mounted with root inode @ nid 36. [ 132.008195][ T1534] loop1: detected capacity change from 0 to 512 [ 132.924177][ T1534] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.313: bg 0: block 393: padding at end of block bitmap is not set [ 132.939211][ T1534] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 132.949323][ T1534] EXT4-fs (loop1): 2 truncates cleaned up [ 132.955203][ T1534] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 133.175937][ T28] audit: type=1400 audit(1757741124.974:166): avc: denied { ioctl } for pid=1538 comm="syz.3.315" path="/dev/vhost-vsock" dev="devtmpfs" ino=268 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 133.203101][ T284] EXT4-fs (loop1): unmounting filesystem. [ 133.304900][ T1548] loop3: detected capacity change from 0 to 512 [ 133.407704][ T340] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 133.878278][ T340] usb 3-1: Using ep0 maxpacket: 16 [ 133.889954][ T340] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.902050][ T340] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.912424][ T340] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 133.925705][ T340] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 133.934793][ T340] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.045800][ T340] usb 3-1: config 0 descriptor?? [ 134.375330][ T1567] netlink: 4 bytes leftover after parsing attributes in process `syz.4.324'. [ 134.418062][ T1567] netlink: 12 bytes leftover after parsing attributes in process `syz.4.324'. [ 134.544528][ T340] microsoft 0003:045E:07DA.000E: No inputs registered, leaving [ 134.581548][ T340] microsoft 0003:045E:07DA.000E: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 134.801895][ T340] microsoft 0003:045E:07DA.000E: no inputs found [ 134.808769][ T340] microsoft 0003:045E:07DA.000E: could not initialize ff, continuing anyway [ 134.859857][ T340] usb 3-1: USB disconnect, device number 7 [ 134.940682][ T1578] netlink: 4 bytes leftover after parsing attributes in process `syz.1.325'. [ 134.963829][ T1578] netlink: 12 bytes leftover after parsing attributes in process `syz.1.325'. [ 136.059097][ T1590] loop2: detected capacity change from 0 to 512 [ 137.616999][ T1590] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.329: bg 0: block 393: padding at end of block bitmap is not set [ 137.632256][ T1590] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 137.642921][ T1590] EXT4-fs (loop2): 2 truncates cleaned up [ 137.648741][ T1590] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 137.926436][ T1597] netlink: 4 bytes leftover after parsing attributes in process `syz.3.331'. [ 137.938573][ T1596] loop0: detected capacity change from 0 to 16 [ 137.962903][ T1596] erofs: (device loop0): mounted with root inode @ nid 36. [ 137.987035][ T1597] sch_fq: defrate 4294967295 ignored. [ 137.993756][ T286] EXT4-fs (loop2): unmounting filesystem. [ 138.015529][ T1602] loop1: detected capacity change from 0 to 512 [ 138.056055][ T388] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 138.634964][ T1615] netlink: 4 bytes leftover after parsing attributes in process `syz.4.337'. [ 138.644279][ T1615] netlink: 12 bytes leftover after parsing attributes in process `syz.4.337'. [ 139.579684][ T28] audit: type=1400 audit(1757741131.374:167): avc: denied { unlink } for pid=1633 comm="syz.0.341" name="#d" dev="tmpfs" ino=394 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 140.523413][ T1646] loop3: detected capacity change from 0 to 512 [ 141.770845][ T1653] loop0: detected capacity change from 0 to 16 [ 141.780051][ T1646] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.344: bg 0: block 393: padding at end of block bitmap is not set [ 141.794838][ T1646] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 141.804021][ T1646] EXT4-fs (loop3): 2 truncates cleaned up [ 141.809810][ T1646] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 141.836139][ T1653] erofs: (device loop0): mounted with root inode @ nid 36. [ 141.974140][ T283] EXT4-fs (loop3): unmounting filesystem. [ 142.067017][ T1660] netlink: 4 bytes leftover after parsing attributes in process `syz.4.349'. [ 142.086471][ T1660] netlink: 12 bytes leftover after parsing attributes in process `syz.4.349'. [ 142.131713][ T1664] loop0: detected capacity change from 0 to 512 [ 142.275623][ T1669] netlink: 4 bytes leftover after parsing attributes in process `syz.1.348'. [ 142.292965][ T1669] netlink: 12 bytes leftover after parsing attributes in process `syz.1.348'. [ 143.058441][ T1682] xt_CT: No such helper "pptp" [ 143.283851][ T1686] fuse: Invalid rootmode [ 144.010771][ T1695] loop4: detected capacity change from 0 to 512 [ 145.650302][ T1695] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.357: bg 0: block 393: padding at end of block bitmap is not set [ 145.665470][ T1695] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 145.676075][ T1695] EXT4-fs (loop4): 2 truncates cleaned up [ 145.681859][ T1695] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 145.898329][ T1703] loop0: detected capacity change from 0 to 16 [ 145.989537][ T1703] erofs: (device loop0): mounted with root inode @ nid 36. [ 146.002956][ T285] EXT4-fs (loop4): unmounting filesystem. [ 146.365286][ T1707] netlink: 4 bytes leftover after parsing attributes in process `syz.4.361'. [ 146.495242][ T1707] netlink: 12 bytes leftover after parsing attributes in process `syz.4.361'. [ 147.148501][ T434] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 147.211398][ T1724] netlink: 4 bytes leftover after parsing attributes in process `syz.3.365'. [ 147.221107][ T1724] netlink: 12 bytes leftover after parsing attributes in process `syz.3.365'. [ 147.346608][ T434] usb 5-1: config 0 has an invalid interface number: 117 but max is 0 [ 147.354866][ T434] usb 5-1: config 0 has no interface number 0 [ 147.365126][ T434] usb 5-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice= f.d6 [ 147.374351][ T434] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.382546][ T434] usb 5-1: Product: syz [ 147.386885][ T434] usb 5-1: Manufacturer: syz [ 147.391537][ T434] usb 5-1: SerialNumber: syz [ 147.402687][ T434] usb 5-1: config 0 descriptor?? [ 147.411133][ T434] ftdi_sio 5-1:0.117: FTDI USB Serial Device converter detected [ 147.420851][ T434] ftdi_sio ttyUSB0: unknown device type: 0xfd6 [ 147.613106][ T434] usb 5-1: USB disconnect, device number 12 [ 147.619425][ T434] ftdi_sio 5-1:0.117: device disconnected [ 148.242607][ T1732] fuse: Invalid rootmode [ 148.380044][ T1739] netlink: 4 bytes leftover after parsing attributes in process `syz.0.372'. [ 148.648408][ T1739] netlink: 12 bytes leftover after parsing attributes in process `syz.0.372'. [ 150.466108][ T1768] xt_CT: No such helper "pptp" [ 150.820782][ T1779] loop2: detected capacity change from 0 to 1024 [ 152.067067][ T1779] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 152.085345][ T1790] netlink: 4 bytes leftover after parsing attributes in process `syz.3.383'. [ 152.136438][ T1790] netlink: 12 bytes leftover after parsing attributes in process `syz.3.383'. [ 153.037964][ T286] EXT4-fs (loop2): unmounting filesystem. [ 154.817629][ T1818] xt_CT: No such helper "pptp" [ 155.070450][ T1830] loop3: detected capacity change from 0 to 512 [ 155.139434][ T388] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 155.849344][ T1845] loop1: detected capacity change from 0 to 16 [ 155.856242][ T1845] erofs: (device loop1): mounted with root inode @ nid 36. [ 156.043821][ T1852] netlink: 4 bytes leftover after parsing attributes in process `syz.1.401'. [ 156.053089][ T1852] netlink: 12 bytes leftover after parsing attributes in process `syz.1.401'. [ 156.186658][ T1855] loop3: detected capacity change from 0 to 512 [ 158.833552][ T1855] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.399: bg 0: block 393: padding at end of block bitmap is not set [ 158.848500][ T1855] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 158.857590][ T1855] EXT4-fs (loop3): 2 truncates cleaned up [ 158.863437][ T1855] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 160.194397][ T283] EXT4-fs (loop3): unmounting filesystem. [ 161.122894][ T1891] xt_CT: No such helper "pptp" [ 161.278064][ T1896] loop0: detected capacity change from 0 to 512 [ 161.332104][ T388] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 162.374012][ T1907] loop1: detected capacity change from 0 to 512 [ 162.496662][ T388] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 164.198568][ T1926] netlink: 4 bytes leftover after parsing attributes in process `syz.1.420'. [ 164.207960][ T1926] netlink: 12 bytes leftover after parsing attributes in process `syz.1.420'. [ 164.236578][ T1930] fuse: Bad value for 'rootmode' [ 164.381515][ T6] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 164.573269][ T1938] loop4: detected capacity change from 0 to 512 [ 164.788632][ T1947] xt_CT: No such helper "pptp" [ 164.816211][ T1946] netlink: 4 bytes leftover after parsing attributes in process `syz.1.425'. [ 164.931227][ T1944] netlink: 12 bytes leftover after parsing attributes in process `syz.1.425'. [ 164.936644][ T6] usb 3-1: New USB device found, idVendor=1e7d, idProduct=3264, bcdDevice= 0.00 [ 164.954464][ T6] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.973259][ T6] usb 3-1: config 0 descriptor?? [ 165.590763][ T6] isku 0003:1E7D:3264.000F: unbalanced delimiter at end of report description [ 165.599864][ T6] isku 0003:1E7D:3264.000F: parse failed [ 165.622521][ T6] isku: probe of 0003:1E7D:3264.000F failed with error -22 [ 165.638105][ T6] usb 3-1: USB disconnect, device number 8 [ 166.271864][ T1969] loop0: detected capacity change from 0 to 512 [ 166.287097][ T1971] netlink: 4 bytes leftover after parsing attributes in process `syz.2.433'. [ 166.296404][ T1971] netlink: 12 bytes leftover after parsing attributes in process `syz.2.433'. [ 166.315965][ T388] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 166.990877][ T1983] fuse: Unknown parameter 'use00000000000000000000' [ 167.015505][ T1985] loop3: detected capacity change from 0 to 512 [ 168.089962][ T340] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 168.285460][ T340] usb 5-1: Using ep0 maxpacket: 16 [ 168.291908][ T340] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 168.301944][ T340] usb 5-1: New USB device found, idVendor=056a, idProduct=0064, bcdDevice= 0.00 [ 168.311186][ T340] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.322895][ T340] usb 5-1: config 0 descriptor?? [ 168.607287][ T2012] netlink: 4 bytes leftover after parsing attributes in process `syz.0.441'. [ 168.637869][ T2012] netlink: 12 bytes leftover after parsing attributes in process `syz.0.441'. [ 168.806932][ T2016] netlink: 4 bytes leftover after parsing attributes in process `syz.3.446'. [ 168.818128][ T2016] netlink: 12 bytes leftover after parsing attributes in process `syz.3.446'. [ 168.836276][ T340] wacom 0003:056A:0064.0010: Unknown device_type for 'HID 056a:0064'. Assuming pen. [ 168.849459][ T340] wacom 0003:056A:0064.0010: hidraw0: USB HID v0.00 Device [HID 056a:0064] on usb-dummy_hcd.4-1/input0 [ 168.877470][ T340] input: Wacom PenPartner2 Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:0064.0010/input/input13 [ 169.132621][ T340] usb 5-1: USB disconnect, device number 13 [ 169.283938][ T2023] fuse: Unknown parameter 'use00000000000000000000' [ 169.321478][ T2029] loop1: detected capacity change from 0 to 512 [ 169.406000][ T388] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 171.874443][ T2051] loop0: detected capacity change from 0 to 512 [ 174.142301][ T2056] loop1: detected capacity change from 0 to 1024 [ 174.150010][ T2051] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.453: bg 0: block 393: padding at end of block bitmap is not set [ 174.164507][ T2051] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 174.175516][ T2051] EXT4-fs (loop0): 2 truncates cleaned up [ 174.181260][ T2051] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 174.214468][ T2056] EXT4-fs: Ignoring removed nomblk_io_submit option [ 174.239115][ T2056] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 174.389236][ T282] EXT4-fs (loop0): unmounting filesystem. [ 174.440169][ T28] audit: type=1400 audit(1757741166.234:168): avc: denied { write } for pid=2055 comm="syz.1.457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 174.553484][ T290] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 174.624386][ T2062] netlink: 4 bytes leftover after parsing attributes in process `syz.0.458'. [ 174.634379][ T2062] netlink: 12 bytes leftover after parsing attributes in process `syz.0.458'. [ 174.667039][ T2068] fuse: Unknown parameter 'use00000000000000000000' [ 175.044793][ T284] EXT4-fs (loop1): unmounting filesystem. [ 175.745521][ T290] usb 5-1: device not accepting address 14, error -71 [ 175.755378][ T2086] netlink: 8 bytes leftover after parsing attributes in process `syz.2.465'. [ 175.773495][ T2086] loop2: detected capacity change from 0 to 16 [ 175.790553][ T2086] erofs: (device loop2): mounted with root inode @ nid 36. [ 177.073335][ T2093] loop0: detected capacity change from 0 to 512 [ 177.489392][ T2105] loop4: detected capacity change from 0 to 512 [ 177.693614][ T2105] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.468: bg 0: block 393: padding at end of block bitmap is not set [ 177.708752][ T2105] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 177.718975][ T2105] EXT4-fs (loop4): 2 truncates cleaned up [ 177.724768][ T2105] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 178.000042][ T2112] netlink: 4 bytes leftover after parsing attributes in process `syz.2.471'. [ 178.096281][ T2112] netlink: 12 bytes leftover after parsing attributes in process `syz.2.471'. [ 178.132042][ T2118] fuse: Unknown parameter 'user_i00000000000000000000' [ 178.316301][ T285] EXT4-fs (loop4): unmounting filesystem. [ 178.521193][ T958] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 178.995531][ T958] usb 2-1: Using ep0 maxpacket: 16 [ 179.011743][ T958] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 179.022774][ T958] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 179.044588][ T958] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 179.154276][ T958] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 179.163598][ T958] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.194487][ T958] usb 2-1: config 0 descriptor?? [ 181.738388][ T958] usbhid 2-1:0.0: can't add hid device: -71 [ 181.744668][ T958] usbhid: probe of 2-1:0.0 failed with error -71 [ 181.763097][ T958] usb 2-1: USB disconnect, device number 7 [ 181.811953][ T2161] netlink: 4 bytes leftover after parsing attributes in process `syz.0.485'. [ 181.985169][ T2161] netlink: 12 bytes leftover after parsing attributes in process `syz.0.485'. [ 183.162376][ T2180] loop3: detected capacity change from 0 to 512 [ 187.020878][ T2180] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.486: bg 0: block 393: padding at end of block bitmap is not set [ 187.036175][ T2180] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 187.045733][ T2180] EXT4-fs (loop3): 2 truncates cleaned up [ 187.051491][ T2180] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 187.152104][ T2198] xt_CT: No such helper "pptp" [ 187.696719][ T283] EXT4-fs (loop3): unmounting filesystem. [ 188.618235][ T934] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 188.805228][ T2220] netlink: 4 bytes leftover after parsing attributes in process `syz.0.500'. [ 188.814652][ T2220] netlink: 12 bytes leftover after parsing attributes in process `syz.0.500'. [ 188.975454][ T934] usb 5-1: Using ep0 maxpacket: 16 [ 188.981716][ T934] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 188.992690][ T934] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 189.093496][ T2228] loop2: detected capacity change from 0 to 512 [ 189.765432][ T2228] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.502: bg 0: block 393: padding at end of block bitmap is not set [ 189.780764][ T2228] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 189.791737][ T2228] EXT4-fs (loop2): 2 truncates cleaned up [ 189.797570][ T2228] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 190.038921][ T934] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 190.052015][ T934] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 190.065499][ T934] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.131032][ T286] EXT4-fs (loop2): unmounting filesystem. [ 190.141074][ T934] usb 5-1: config 0 descriptor?? [ 190.524173][ T2241] loop2: detected capacity change from 0 to 512 [ 190.586958][ T2241] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.506: bg 0: block 393: padding at end of block bitmap is not set [ 190.602416][ T2241] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 190.613743][ T2241] EXT4-fs (loop2): 2 truncates cleaned up [ 190.619566][ T2241] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 191.339139][ T934] usbhid 5-1:0.0: can't add hid device: -71 [ 191.345291][ T934] usbhid: probe of 5-1:0.0 failed with error -71 [ 191.357545][ T934] usb 5-1: USB disconnect, device number 16 [ 191.405523][ T290] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 191.473015][ T286] EXT4-fs (loop2): unmounting filesystem. [ 191.775121][ T290] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 191.786231][ T290] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 191.796388][ T290] usb 1-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 191.805469][ T290] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.814168][ T290] usb 1-1: config 0 descriptor?? [ 191.927866][ T290] usbhid 1-1:0.0: can't add hid device: -71 [ 191.933951][ T290] usbhid: probe of 1-1:0.0 failed with error -71 [ 191.941363][ T290] usb 1-1: USB disconnect, device number 9 [ 192.306100][ T2262] netlink: 4 bytes leftover after parsing attributes in process `syz.3.512'. [ 192.325688][ T2262] netlink: 12 bytes leftover after parsing attributes in process `syz.3.512'. [ 196.113363][ T2291] loop0: detected capacity change from 0 to 512 [ 196.126023][ T2292] loop4: detected capacity change from 0 to 512 [ 199.590766][ T2291] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.520: bg 0: block 393: padding at end of block bitmap is not set [ 199.606101][ T2291] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 199.615259][ T2292] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.519: bg 0: block 393: padding at end of block bitmap is not set [ 199.837747][ T2292] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 199.863399][ T2291] EXT4-fs (loop0): 2 truncates cleaned up [ 199.869851][ T2291] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 199.919111][ T2292] EXT4-fs (loop4): 2 truncates cleaned up [ 199.924865][ T2292] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 199.976149][ T282] EXT4-fs (loop0): unmounting filesystem. [ 199.982371][ T285] EXT4-fs (loop4): unmounting filesystem. [ 200.142709][ T2307] netlink: 4 bytes leftover after parsing attributes in process `syz.2.527'. [ 200.152199][ T2307] netlink: 12 bytes leftover after parsing attributes in process `syz.2.527'. [ 200.189841][ T2316] xt_CT: No such helper "pptp" [ 201.289354][ T2333] loop4: detected capacity change from 0 to 128 [ 201.313852][ T2333] FAT-fs (loop4): Unrecognized mount option "0xffffffffffffffff01777777777777777777777=d̞ YS38`" or missing value [ 201.633056][ T2342] loop1: detected capacity change from 0 to 512 [ 202.503984][ T2342] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.535: bg 0: block 393: padding at end of block bitmap is not set [ 202.525782][ T2342] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 202.534811][ T2342] EXT4-fs (loop1): 2 truncates cleaned up [ 202.540704][ T2342] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 202.700447][ T2352] loop3: detected capacity change from 0 to 512 [ 203.249021][ T284] EXT4-fs (loop1): unmounting filesystem. [ 203.330929][ T2352] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.536: bg 0: block 393: padding at end of block bitmap is not set [ 203.346385][ T2352] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 203.356305][ T2352] EXT4-fs (loop3): 2 truncates cleaned up [ 203.362137][ T2352] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 203.677667][ T6] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 203.688079][ T283] EXT4-fs (loop3): unmounting filesystem. [ 203.801637][ T2360] netlink: 4 bytes leftover after parsing attributes in process `syz.1.538'. [ 203.891900][ T2365] netlink: 12 bytes leftover after parsing attributes in process `syz.1.538'. [ 204.503453][ T2371] loop0: detected capacity change from 0 to 1024 [ 204.596056][ T2371] EXT4-fs: Ignoring removed nomblk_io_submit option [ 204.623443][ T2371] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 205.223878][ T6] usb 1-1: device not accepting address 10, error -71 [ 205.510602][ T282] EXT4-fs (loop0): unmounting filesystem. [ 205.950671][ T2396] fuse: Unknown parameter 'user_id00000000000000000000' [ 205.977287][ T2401] netlink: 4 bytes leftover after parsing attributes in process `syz.2.551'. [ 205.986615][ T2401] netlink: 12 bytes leftover after parsing attributes in process `syz.2.551'. [ 206.214876][ T2407] xt_CT: No such helper "pptp" [ 206.489953][ T434] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 207.449302][ T28] audit: type=1400 audit(1757741199.004:169): avc: denied { write } for pid=2411 comm="syz.1.554" name="/" dev="incremental-fs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 207.514229][ T284] ------------[ cut here ]------------ [ 207.519812][ T284] WARNING: CPU: 0 PID: 284 at fs/inode.c:332 drop_nlink+0xc5/0x110 [ 207.527783][ T284] Modules linked in: [ 207.531695][ T284] CPU: 0 PID: 284 Comm: syz-executor Not tainted syzkaller #0 [ 207.539196][ T284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 207.540242][ T28] audit: type=1400 audit(1757741199.004:170): avc: denied { add_name } for pid=2411 comm="syz.1.554" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 207.549294][ T284] RIP: 0010:drop_nlink+0xc5/0x110 [ 207.570536][ T28] audit: type=1400 audit(1757741199.004:171): avc: denied { create } for pid=2411 comm="syz.1.554" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 207.574835][ T284] Code: 1b 48 8d bb b8 04 00 00 be 08 00 00 00 e8 03 ea f0 ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 5b 81 ac ff <0f> 0b eb 86 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 5e ff ff ff 4c [ 207.596279][ T28] audit: type=1400 audit(1757741199.004:172): avc: denied { associate } for pid=2411 comm="syz.1.554" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 207.614435][ T284] RSP: 0018:ffffc9000da7fc38 EFLAGS: 00010293 [ 207.614457][ T284] RAX: ffffffff81c38805 RBX: ffff88811b43dec0 RCX: ffff88810d21bcc0 [ 207.649943][ T284] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 207.657976][ T284] RBP: ffffc9000da7fc60 R08: 0000000000000004 R09: 0000000000000003 [ 207.665449][ T434] usb 3-1: Using ep0 maxpacket: 16 [ 207.665984][ T284] R10: fffff52001b4ff78 R11: 1ffff92001b4ff78 R12: dffffc0000000000 [ 207.673157][ T434] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 207.679075][ T284] R13: 1ffff11023687be1 R14: ffff88811b43df08 R15: 0000000000000000 [ 207.697926][ T284] FS: 0000555562f16500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 207.700311][ T434] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 207.706899][ T284] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 207.706916][ T284] CR2: 0000555562f394e8 CR3: 000000012ffe5000 CR4: 00000000003506b0 [ 207.706935][ T284] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 207.734379][ T434] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 207.739211][ T284] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 207.739230][ T284] Call Trace: [ 207.739236][ T284] [ 207.739245][ T284] shmem_rmdir+0x5b/0x90 [ 207.770298][ T434] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 207.770582][ T284] vfs_rmdir+0x393/0x500 [ 207.783839][ T284] incfs_kill_sb+0x105/0x220 [ 207.788474][ T284] deactivate_locked_super+0xb5/0x120 [ 207.789415][ T434] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.793853][ T284] deactivate_super+0xaf/0xe0 [ 207.793878][ T284] cleanup_mnt+0x45f/0x4e0 [ 207.811144][ T284] __cleanup_mnt+0x19/0x20 [ 207.815630][ T284] task_work_run+0x1db/0x240 [ 207.820238][ T284] ? __cfi_task_work_run+0x10/0x10 [ 207.825384][ T284] ? __x64_sys_umount+0x125/0x160 [ 207.826339][ T434] usb 3-1: config 0 descriptor?? [ 207.830478][ T284] ? __cfi___x64_sys_umount+0x10/0x10 [ 207.840791][ T284] exit_to_user_mode_loop+0x9b/0xb0 [ 207.846035][ T284] exit_to_user_mode_prepare+0x5a/0xa0 [ 207.851506][ T284] syscall_exit_to_user_mode+0x1a/0x30 [ 207.857011][ T284] do_syscall_64+0x58/0xa0 [ 207.861439][ T284] ? clear_bhb_loop+0x30/0x80 [ 207.866152][ T284] ? clear_bhb_loop+0x30/0x80 [ 207.870840][ T284] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 207.876765][ T284] RIP: 0033:0x7f04d738fed7 [ 207.881198][ T284] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 207.900841][ T284] RSP: 002b:00007ffc4293cec8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 207.909296][ T284] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f04d738fed7 [ 207.917293][ T284] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc4293cf80 [ 207.925273][ T284] RBP: 00007ffc4293cf80 R08: 0000000000000000 R09: 0000000000000000 [ 207.933296][ T284] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc4293e010 [ 207.941311][ T284] R13: 00007f04d7411c05 R14: 0000000000032a5c R15: 00007ffc4293e050 [ 207.949326][ T284] [ 207.952349][ T284] ---[ end trace 0000000000000000 ]--- [ 207.975508][ T284] ================================================================== [ 207.983604][ T284] BUG: KASAN: null-ptr-deref in ihold+0x20/0x60 [ 207.989859][ T284] Write of size 4 at addr 0000000000000170 by task syz-executor/284 [ 207.997842][ T284] [ 208.000165][ T284] CPU: 1 PID: 284 Comm: syz-executor Tainted: G W syzkaller #0 [ 208.009108][ T284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 208.019152][ T284] Call Trace: [ 208.022429][ T284] [ 208.025364][ T284] __dump_stack+0x21/0x24 [ 208.029698][ T284] dump_stack_lvl+0xee/0x150 [ 208.034283][ T284] ? __cfi_dump_stack_lvl+0x8/0x8 [ 208.039301][ T284] ? ihold+0x20/0x60 [ 208.043197][ T284] ? ihold+0x20/0x60 [ 208.047099][ T284] print_report+0x3d/0x60 [ 208.051448][ T284] kasan_report+0x122/0x150 [ 208.055954][ T284] ? ihold+0x20/0x60 [ 208.059850][ T284] kasan_check_range+0x280/0x290 [ 208.064816][ T284] __kasan_check_write+0x14/0x20 [ 208.069771][ T284] ihold+0x20/0x60 [ 208.073534][ T284] vfs_rmdir+0x25f/0x500 [ 208.077808][ T284] incfs_kill_sb+0x105/0x220 [ 208.082413][ T284] deactivate_locked_super+0xb5/0x120 [ 208.087795][ T284] deactivate_super+0xaf/0xe0 [ 208.092480][ T284] cleanup_mnt+0x45f/0x4e0 [ 208.096907][ T284] __cleanup_mnt+0x19/0x20 [ 208.101324][ T284] task_work_run+0x1db/0x240 [ 208.105914][ T284] ? __cfi_task_work_run+0x10/0x10 [ 208.111023][ T284] ? __x64_sys_umount+0x125/0x160 [ 208.116046][ T284] ? __cfi___x64_sys_umount+0x10/0x10 [ 208.121422][ T284] exit_to_user_mode_loop+0x9b/0xb0 [ 208.126618][ T284] exit_to_user_mode_prepare+0x5a/0xa0 [ 208.132078][ T284] syscall_exit_to_user_mode+0x1a/0x30 [ 208.137575][ T284] do_syscall_64+0x58/0xa0 [ 208.142004][ T284] ? clear_bhb_loop+0x30/0x80 [ 208.146727][ T284] ? clear_bhb_loop+0x30/0x80 [ 208.151411][ T284] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 208.157311][ T284] RIP: 0033:0x7f04d738fed7 [ 208.161757][ T284] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 208.181370][ T284] RSP: 002b:00007ffc4293cec8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 208.189790][ T284] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f04d738fed7 [ 208.197765][ T284] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc4293cf80 [ 208.205735][ T284] RBP: 00007ffc4293cf80 R08: 0000000000000000 R09: 0000000000000000 [ 208.213702][ T284] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc4293e010 [ 208.221665][ T284] R13: 00007f04d7411c05 R14: 0000000000032a5c R15: 00007ffc4293e050 [ 208.229639][ T284] [ 208.232658][ T284] ================================================================== [ 208.251797][ T284] Disabling lock debugging due to kernel taint [ 208.258114][ T284] BUG: kernel NULL pointer dereference, address: 0000000000000170 [ 208.265923][ T284] #PF: supervisor write access in kernel mode [ 208.271986][ T284] #PF: error_code(0x0002) - not-present page [ 208.278002][ T284] PGD 132785067 P4D 132785067 PUD 0 [ 208.283315][ T284] Oops: 0002 [#1] PREEMPT SMP KASAN [ 208.288514][ T284] CPU: 1 PID: 284 Comm: syz-executor Tainted: G B W syzkaller #0 [ 208.297627][ T284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 208.307725][ T284] RIP: 0010:ihold+0x26/0x60 [ 208.312255][ T284] Code: 33 36 7c df 55 48 89 e5 41 56 53 48 89 fb e8 c1 78 ac ff 48 8d bb 70 01 00 00 be 04 00 00 00 e8 40 e1 f0 ff 41 be 01 00 00 00 44 0f c1 b3 70 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 b1 [ 208.331874][ T284] RSP: 0018:ffffc9000da7fc78 EFLAGS: 00010246 [ 208.337939][ T284] RAX: ffff88810d21bc00 RBX: 0000000000000000 RCX: ffff88810d21bcc0 [ 208.345910][ T284] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 208.353883][ T284] RBP: ffffc9000da7fc88 R08: dffffc0000000000 R09: fffffbfff0f2d6fd [ 208.361841][ T284] R10: fffffbfff0f2d6fd R11: 1ffffffff0f2d6fc R12: ffff88811b43decc [ 208.369826][ T284] R13: dffffc0000000000 R14: 0000000000000001 R15: 0000000000000000 [ 208.377786][ T284] FS: 0000555562f16500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 208.386763][ T284] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 208.393376][ T284] CR2: 0000000000000170 CR3: 000000012ffe5000 CR4: 00000000003506a0 [ 208.401348][ T284] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 208.409312][ T284] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 208.417292][ T284] Call Trace: [ 208.420559][ T284] [ 208.423499][ T284] vfs_rmdir+0x25f/0x500 [ 208.427732][ T284] incfs_kill_sb+0x105/0x220 [ 208.432312][ T284] deactivate_locked_super+0xb5/0x120 [ 208.437698][ T284] deactivate_super+0xaf/0xe0 [ 208.442369][ T284] cleanup_mnt+0x45f/0x4e0 [ 208.446782][ T284] __cleanup_mnt+0x19/0x20 [ 208.451195][ T284] task_work_run+0x1db/0x240 [ 208.455773][ T284] ? __cfi_task_work_run+0x10/0x10 [ 208.460873][ T284] ? __x64_sys_umount+0x125/0x160 [ 208.465884][ T284] ? __cfi___x64_sys_umount+0x10/0x10 [ 208.471241][ T284] exit_to_user_mode_loop+0x9b/0xb0 [ 208.476447][ T284] exit_to_user_mode_prepare+0x5a/0xa0 [ 208.481893][ T284] syscall_exit_to_user_mode+0x1a/0x30 [ 208.487338][ T284] do_syscall_64+0x58/0xa0 [ 208.491735][ T284] ? clear_bhb_loop+0x30/0x80 [ 208.496399][ T284] ? clear_bhb_loop+0x30/0x80 [ 208.501062][ T284] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 208.506939][ T284] RIP: 0033:0x7f04d738fed7 [ 208.511340][ T284] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 208.531020][ T284] RSP: 002b:00007ffc4293cec8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 208.539419][ T284] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f04d738fed7 [ 208.547374][ T284] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc4293cf80 [ 208.555330][ T284] RBP: 00007ffc4293cf80 R08: 0000000000000000 R09: 0000000000000000 [ 208.563285][ T284] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc4293e010 [ 208.571246][ T284] R13: 00007f04d7411c05 R14: 0000000000032a5c R15: 00007ffc4293e050 [ 208.579212][ T284] [ 208.582217][ T284] Modules linked in: [ 208.586113][ T284] CR2: 0000000000000170 [ 208.590265][ T284] ---[ end trace 0000000000000000 ]--- [ 208.595704][ T284] RIP: 0010:ihold+0x26/0x60 [ 208.600199][ T284] Code: 33 36 7c df 55 48 89 e5 41 56 53 48 89 fb e8 c1 78 ac ff 48 8d bb 70 01 00 00 be 04 00 00 00 e8 40 e1 f0 ff 41 be 01 00 00 00 44 0f c1 b3 70 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 b1 [ 208.619789][ T284] RSP: 0018:ffffc9000da7fc78 EFLAGS: 00010246 [ 208.625846][ T284] RAX: ffff88810d21bc00 RBX: 0000000000000000 RCX: ffff88810d21bcc0 [ 208.633805][ T284] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 208.641764][ T284] RBP: ffffc9000da7fc88 R08: dffffc0000000000 R09: fffffbfff0f2d6fd [ 208.649724][ T284] R10: fffffbfff0f2d6fd R11: 1ffffffff0f2d6fc R12: ffff88811b43decc [ 208.657688][ T284] R13: dffffc0000000000 R14: 0000000000000001 R15: 0000000000000000 [ 208.665648][ T284] FS: 0000555562f16500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 208.674560][ T284] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 208.681147][ T284] CR2: 0000000000000170 CR3: 000000012ffe5000 CR4: 00000000003506a0 [ 208.689105][ T284] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 208.697077][ T284] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 208.705031][ T284] Kernel panic - not syncing: Fatal exception [ 208.711405][ T284] Kernel Offset: disabled [ 208.715720][ T284] Rebooting in 86400 seconds..