last executing test programs: 23m36.69472956s ago: executing program 4 (id=2899): syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020100008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r1}, 0x10) r2 = epoll_create(0x8) epoll_wait(r2, &(0x7f0000000000)=[{}], 0x1, 0x70) 23m36.091996929s ago: executing program 4 (id=2900): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000180), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0500000000bbd10d0bc11fc00000000040000000aef028c89c34dcb05408427474e1705e689c593e7a16dd0af4f5be2f038bc9faf7"], 0x80}}, 0x4) 23m35.921389853s ago: executing program 4 (id=2903): r0 = socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001e00)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000480)=0x102, 0x4) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62) sendto$packet(r0, &(0x7f00000000c0)="3f033608260812002c001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c152bfdf9435e3ffe46", 0xe90c, 0xa0c4, &(0x7f0000000540)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) 23m35.894245625s ago: executing program 4 (id=2904): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0) mlock(&(0x7f000049d000/0x4000)=nil, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x16, &(0x7f0000000580)=@raw=[@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @snprintf], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fsopen(0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x5e, &(0x7f0000000240)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6c}}, {@lazytime}, {@errors_remount}, {@errors_continue}]}, 0x3, 0x44a, &(0x7f00000006c0)="$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") syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f0000000240), 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000540)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) 23m33.85679555s ago: executing program 4 (id=2912): socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4000000}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x200000, &(0x7f0000000200), 0x3, 0x570, &(0x7f0000000680)="$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") timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000140), 0x0) getpid() ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'ip6gre0\x00', 0x0}) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/schedstat\x00', 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, &(0x7f0000000440)=@chain) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002e000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000d000000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r3, 0x0, 0xe, 0x0, &(0x7f0000000000)="77844923fbde9d724bbda199f4d6", 0x0, 0x8000, 0xffff0000, 0x0, 0xc0, 0x0, &(0x7f0000000440)="340b76235e542388314c94ffb092fe45f73f8c986973c4976cfb5e6d1d8c82244df1f513a1c1fbfa9a9f0b95aeb353c71ce43ab84de2d842a33e91ce88d884ec2a248e85b886f115b686136aaf601bbff88abe474a8494073ad74fa9adc48bb0577ba007c034067d35226a6049c20b62fef3bad5f9e53c8ea5682c0073eec76929c6d3362325fe1144dcc97ff2c5aa59dde347555cd214a311db3942deef1b9143089b894379762ff8b5e92db6ab7ff6e4fe98137ee709c44a9353840f906e9a"}, 0x50) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$netlink(0x10, 0x3, 0x0) 23m31.315932667s ago: executing program 4 (id=2934): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="0000000000000000b703000000000000850000001b000000b700000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r2, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_clone(0x8b946080, 0x0, 0x0, 0x0, 0x0, 0x0) connect$unix(r4, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r7}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000b80)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000001c0)={0x0, 0x0}, 0x10) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xfdef) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280), 0xc0401, 0x0) 23m31.315754087s ago: executing program 32 (id=2934): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="0000000000000000b703000000000000850000001b000000b700000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r2, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_clone(0x8b946080, 0x0, 0x0, 0x0, 0x0, 0x0) connect$unix(r4, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r7}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000b80)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000001c0)={0x0, 0x0}, 0x10) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xfdef) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280), 0xc0401, 0x0) 23m26.543518714s ago: executing program 3 (id=2983): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/85, 0x0}) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000400)=0x4000000) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000002c0)={0x2, 0x0, [{0x8000000, 0xc3, &(0x7f0000002e40)=""/195}, {0x10000, 0x0, 0x0}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000500)=0x401) 23m26.483867249s ago: executing program 3 (id=2985): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800000000101000028", @ANYRES32], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x7, 0x4, 0x8, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000210000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r2, 0x4b40, &(0x7f0000000040)) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x0, 0x111, 0x4b4, 0x0, 0x700, 0x2d8, 0x278, 0x278, 0x2d8, 0x278, 0x3, 0x0, {[{{@ipv6={@mcast2, @empty, [], [], 'vlan0\x00', 'team_slave_0\x00', {}, {}, 0x88}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1, [], [], 'geneve1\x00', 'erspan0\x00'}, 0x0, 0xe0, 0x148, 0x0, {}, [@common=@unspec=@statistic={{0x38}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388) openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1) 23m24.987563441s ago: executing program 3 (id=3001): r0 = fsopen(&(0x7f0000000080)='bpf\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x18) symlinkat(&(0x7f0000000000)='.\x00', r1, &(0x7f0000000140)='./file0\x00') readlinkat(r1, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f00000002c0)=""/204, 0xcc) 23m24.949926704s ago: executing program 3 (id=3003): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0) mlock(&(0x7f000049d000/0x4000)=nil, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x16, &(0x7f0000000580)=@raw=[@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @snprintf], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fsopen(0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x5e, &(0x7f0000000240)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6c}}, {@lazytime}, {@errors_remount}, {@errors_continue}]}, 0x3, 0x44a, &(0x7f00000006c0)="$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") syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) write$P9_RVERSION(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000540)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) 23m22.966417755s ago: executing program 3 (id=3008): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) 23m22.348093785s ago: executing program 3 (id=3015): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/85, 0x0}) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000400)=0x4000000) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000002c0)={0x1, 0x0, [{0x10000, 0x1000, &(0x7f0000000c80)=""/4096}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000500)=0x401) 23m22.333523736s ago: executing program 33 (id=3015): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/85, 0x0}) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000400)=0x4000000) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000002c0)={0x1, 0x0, [{0x10000, 0x1000, &(0x7f0000000c80)=""/4096}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000500)=0x401) 3.738891178s ago: executing program 1 (id=14816): syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000640)='./bus\x00', 0x0, &(0x7f0000000440)=ANY=[], 0x1, 0x1287, &(0x7f0000001d40)="$eJzs3ctrJEUYAPCvN69J1jzUdXUFsdCLIoybHDx5CbILYkCJZkEFoddMdMjkQWYIRMSNJ0+Cf4aoR2+C+A/k4sWzIIjk4nEPYksyk3WSeSTGZMPq73eZ4qv6uqsqoaCbKnr35S9Wlpfq5aW8EZeyLAbXh2LwbooUl2Igmrbj+Vs//fzUm2+/89rs3NyN+ZRuzr41/VJKaeLp79/9+JtnfmhcvvXtxHcjsTP13u7vM7/sXN25tvvn11Gtp2o9ra41Up5ur6018tu1Slqs1pfLKb1Rq+T1Sqqu1isbh+qXamvr61spX10cH1vfqNTrKV/dSsuVrdTIUmNjK+Uf5NXVVC6X0/hY0NNER6R0NLDw1d2iKCKKYiiGoyiKYjTG4nI8FOMxEZMxFQ/HI/FoXInH4mo8Hk/Etf1W92sIAAAAAAAAAAAAAAAAAAAA8P9wzPn/zPl/AAAAAAAAAAAAAAAAAAAAOH/t5/8PHPf9/yy70C4DAAAAAAAAAAAAAAAAAADAf84x3/8/cv7/Bd//BwAAAAAAAAAAAAAAAAAAgPNQav7Mp1SKWPlsc2FzofnbjM8uRTVqUYnrMRl/xP7p/6Zm+earczeup31T8eLKnVb+nc2FgcP500OTMZV1zZ9u5qfD+SMx1p4/E5Nxpfv9Z7rml+K5Z/fyP23ml2Myfnw/1qIWixFZa/T7+Z9Mp/TK63OjrfzSwdQs9pm2gfP7iwAAAMCZK6d7Op/ft1uNutY3q1rP56nVMuvzfuDI8/lgPDl4UaPmQH3ro+W8VqtsnLIw3Ps6w//kOifoTxYRebRHJsZ+nd9L+juy151/M5yuhYMXQr3bDJzZvU5SGOrfZqhvV/sWYrB9Mh/cwm9ftkVKp52NUxYutf5d8tre+nmyrNguinPqz73XmZ1VI72yRvuuGdnZL0NckM4VGAAAAAAAAAAAgAdB1z2DoxHRsTHww47Iwfbw43by9r775/dhhAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwF/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCrAAAA//8q3boo") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000180)='./bus\x00', 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) ftruncate(r1, 0x2000009) chdir(&(0x7f0000000540)='./file0\x00') renameat2(r0, &(0x7f0000000140)='./file0\x00', r0, &(0x7f0000000200)='./bus\x00', 0x0) mknod$loop(&(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) 3.46124451s ago: executing program 1 (id=14819): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) bpf$MAP_CREATE(0x700000000000000, &(0x7f0000001a00)=@base={0x1d, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x50) 3.3480049s ago: executing program 1 (id=14821): bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) fcntl$setsig(r2, 0xa, 0x12) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'\x00', 0x1}) io_setup(0x1ff, &(0x7f0000001540)=0x0) io_submit(r5, 0x1, &(0x7f00000007c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x401, r4, &(0x7f0000000440)="96", 0x1}]) ppoll(&(0x7f0000000100)=[{r3, 0x30e0}], 0x1, 0x0, 0x0, 0x0) dup2(r2, r3) fcntl$setown(r3, 0x8, r1) tkill(r1, 0x13) 3.112019728s ago: executing program 1 (id=14827): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x6c}}, 0x0) 2.999888387s ago: executing program 1 (id=14829): mknod(&(0x7f0000000000)='./file0\x00', 0x6000, 0x77b) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000400)='ramfs\x00', 0x2000000, 0x0) 2.999757337s ago: executing program 1 (id=14830): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r1}, 0x10) recvmmsg(r0, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x9}], 0x2, 0x40010000, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f00000003c0)=0x1, 0x4) sendmsg$can_raw(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@can={{}, 0x0, 0x0, 0x0, 0x0, "000000006e000eff"}, 0x10}}, 0x20000000) 2.348076241s ago: executing program 0 (id=14862): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000240)=':', 0x1, 0x20000041, &(0x7f00000001c0)={0xa, 0x2, 0x2, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)="f1", 0x1}], 0x1) 2.325057232s ago: executing program 5 (id=14864): prctl$PR_SET_NAME(0xf, &(0x7f0000000700)=',&#^%\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000005640)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r0}, 0x18) r1 = socket$netlink(0x10, 0x3, 0xa) sendmsg(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000fd41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x6d}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) 2.259152548s ago: executing program 5 (id=14865): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40}}, {@oldalloc}, {@errors_remount}, {@minixdf}]}, 0x3, 0x43a, &(0x7f0000000340)="$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") bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={0xffffffffffffffff, &(0x7f0000000340), 0x0}, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}}, &(0x7f00000006c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x17, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x1e00, 0x4, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x5, 0x0, &(0x7f0000000ac0)=[{0xffffffff, 0x2, 0x2000002, 0x1}, {0x4, 0x3, 0x42}, {0x1, 0x3, 0xf, 0x4}, {0x4, 0x4, 0xb, 0x8}, {0x3, 0x4, 0xc, 0x1}], 0x10, 0x8a2}, 0x94) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@timestamping={{0x14, 0x1, 0x25, 0x103}}], 0x18}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105142, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000000000e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000020850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r1, &(0x7f00000001c0)=ANY=[], 0x32600) 2.139423977s ago: executing program 5 (id=14870): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000004c0)='dctcp\x00', 0x6) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000003c0)="84", 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x1, @empty}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001540)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000002c0)='.', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000640)="574620a4b9", 0x5}], 0x1, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x398}}], 0x2, 0x80) 1.888648178s ago: executing program 2 (id=14877): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, 0x0, &(0x7f0000000180)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) close(r5) r6 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1a1) fcntl$setlease(r6, 0x400, 0x1) 1.415963836s ago: executing program 0 (id=14878): r0 = socket(0x2, 0x3, 0xff) sendmmsg$inet(r0, &(0x7f000000b4c0)=[{{&(0x7f00000000c0)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000180)="8fab14410848dd95e7b8523bfbf4a6cbcc911b443e673a8fa77ce58a13432ac99e4be38c9c2661a897fb45a74a588fdabe427ade9b1ed53f450ce6c2", 0x3c}], 0x1}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000280)="c7b20c4080fd7dd104137ebef4009309ee7cb42a", 0x14}, {0x0}], 0x2}}], 0x2, 0x488c4) 1.355065941s ago: executing program 0 (id=14879): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) sched_setaffinity(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000040)=0x9eb6, 0x4) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0xd4c, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0x5eff}, 0x1c) 1.127419789s ago: executing program 5 (id=14880): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40) socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) mkdir(&(0x7f0000000580)='./file0\x00', 0x92) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000000c0)='cgroup2\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000400)='./file0\x00', &(0x7f0000000000), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x22, 0x0) 975.682681ms ago: executing program 5 (id=14881): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getrlimit(0xc, &(0x7f0000000000)) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) accept$unix(r2, 0x0, &(0x7f00000006c0)) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r4}, 0x18) r5 = timerfd_create(0x0, 0x81000) timerfd_settime(r5, 0x2, &(0x7f00000000c0)={{}, {0x0, 0x989680}}, 0x0) add_key$fscrypt_v1(&(0x7f0000000280), 0x0, 0x0, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x440, 0x320, 0xa, 0x148, 0x368, 0x60, 0x400, 0x2a8, 0x2a8, 0x400, 0x2a8, 0x7fffffe, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2a0, 0x310, 0x0, {0x200003ae, 0x7f00}, [@common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4a0) syz_open_dev$tty20(0xc, 0x4, 0x1) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c0000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000023000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 865.89299ms ago: executing program 2 (id=14882): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x1, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x4d9, 0x0, 0x2000000000}}, [@tmpl={0x84, 0x5, [{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x0, 0x40}, {{@in=@remote, 0x0, 0x32}, 0x0, @in6=@private1, 0x0, 0x5}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 802.340595ms ago: executing program 2 (id=14883): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) unshare(0x22020400) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) 448.011394ms ago: executing program 2 (id=14885): bpf$PROG_LOAD(0x5, 0x0, 0x0) symlinkat(0x0, 0xffffffffffffff9c, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffddc, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) syz_emit_ethernet(0xffe, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa2286"], 0x0) 447.748294ms ago: executing program 2 (id=14886): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1b, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1, 0x0, 0x5}, 0x18) r2 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) connect$vsock_stream(r2, &(0x7f0000000400)={0x28, 0x0, 0x2710, @host}, 0x10) 432.825815ms ago: executing program 2 (id=14889): socket$packet(0x11, 0xa, 0x300) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000240)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ppoll(&(0x7f00000001c0)=[{r0, 0x2000}], 0x1, 0x0, 0x0, 0x0) 383.976019ms ago: executing program 6 (id=14890): syz_clone(0x6a020000, 0x0, 0x0, 0x0, 0x0, 0x0) 383.616799ms ago: executing program 6 (id=14891): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) write$selinux_create(0xffffffffffffffff, &(0x7f0000000600)=@access={'system_u:object_r:systemd_passwd_var_run_t:s0', 0x20, 'unconfined_u:system_r:insmod_t:s0-s0:c0.c1023', 0x20, 0x1}, 0x71) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0xc040ff0b, 0x0) unshare(0x2c060000) unshare(0x2c020400) 372.51703ms ago: executing program 6 (id=14892): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) connect$pppl2tp(r0, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x10, 0x0, {0xa, 0x4e20, 0x0, @loopback}}}, 0x32) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34060}], 0x1) 358.607781ms ago: executing program 0 (id=14893): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0x10, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b0000000000000000000000feffffff00000000", @ANYRES32, @ANYBLOB="06000000000000000000"], 0x50) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000540)='sched_switch\x00', r3}, 0x18) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x9}, {0xd}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x691, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0xd0}, 0x0) ioctl$BTRFS_IOC_RM_DEV(r4, 0x5000940b, &(0x7f0000001c00)={{r3}, "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"}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_GET(r6, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000840)={0x68, 0x0, 0x705, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x54, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xa70b}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "d646a6bacba59b0a9edf62cc888e0e1859e704d59f"}}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000) socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x11, &(0x7f0000000040)=ANY=[], 0x0) fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) symlinkat(&(0x7f0000000400)='./file0/../file0\x00', 0xffffffffffffffff, &(0x7f0000000080)='./file0\x00') socket$nl_route(0x10, 0x3, 0x0) 303.680216ms ago: executing program 6 (id=14894): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000b00)="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", 0x801}], 0x1) 282.599797ms ago: executing program 6 (id=14895): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000008000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="190000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e8500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r1}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000000)) 270.022079ms ago: executing program 6 (id=14896): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r6}, 0x10) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00'}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)}, 0x20) listen(0xffffffffffffffff, 0x0) io_setup(0xb2, &(0x7f0000000200)) ppoll(&(0x7f0000000180)=[{}], 0x1, 0x0, 0x0, 0x0) 73.525165ms ago: executing program 0 (id=14897): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x50, &(0x7f0000000000)={&(0x7f00000084c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020025642532000000000900010073797a30000000000800054000000002"], 0x40c4}}, 0x0) 11.995849ms ago: executing program 0 (id=14898): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0x5d6c}, 0x18) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd27, 0x30b529, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {}, {0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x2, 0x2, 0xfffffffffffffffd, 0xa, 0x8}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x0) 0s ago: executing program 5 (id=14899): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x4) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) kernel console output (not intermixed with test programs): [ 1852.476714][ T1984] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 1852.491609][ T7254] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1852.638662][ T7254] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1852.643775][ T1984] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 1852.680147][ T7254] usb 7-1: can't set config #1, error -71 [ 1852.693042][ T7254] usb 7-1: USB disconnect, device number 76 [ 1852.720047][ T867] usb 6-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice=29.82 [ 1852.734469][ T867] usb 6-1: New USB device strings: Mfr=83, Product=5, SerialNumber=10 [ 1852.751159][ T867] usb 6-1: Product: syz [ 1852.772120][ T867] usb 6-1: Manufacturer: syz [ 1852.784092][ T867] usb 6-1: SerialNumber: syz [ 1852.791280][ T867] usb 6-1: config 0 descriptor?? [ 1853.062640][ T867] usb 6-1: USB disconnect, device number 52 [ 1853.247931][ T7254] usb 7-1: new high-speed USB device number 77 using dummy_hcd [ 1853.651220][ T30] audit: type=1326 audit(1853.635:6719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5837 comm="syz.2.13544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0da064cbe9 code=0x7ffc0000 [ 1854.114711][ T30] audit: type=1326 audit(1853.635:6720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5837 comm="syz.2.13544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0da064cbe9 code=0x7ffc0000 [ 1854.281095][ T7254] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1854.380325][ T7254] usb 7-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1854.402056][ T7254] usb 7-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1854.429880][ T30] audit: type=1326 audit(1853.635:6721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5837 comm="syz.2.13544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0da064cbe9 code=0x7ffc0000 [ 1854.434092][ T7254] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1854.610546][ T30] audit: type=1326 audit(1853.635:6722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5837 comm="syz.2.13544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0da064cbe9 code=0x7ffc0000 [ 1854.637468][ T30] audit: type=1326 audit(1853.635:6723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5837 comm="syz.2.13544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0da064cbe9 code=0x7ffc0000 [ 1854.677466][ T30] audit: type=1326 audit(1853.635:6724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5837 comm="syz.2.13544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0da064cbe9 code=0x7ffc0000 [ 1854.700961][ T7254] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1854.714273][ T5858] loop2: detected capacity change from 0 to 512 [ 1854.716094][ T7254] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1854.728984][ T7254] usb 7-1: Product: syz [ 1854.733247][ T7254] usb 7-1: Manufacturer: syz [ 1854.737941][ T30] audit: type=1326 audit(1853.635:6725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5837 comm="syz.2.13544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0da064cbe9 code=0x7ffc0000 [ 1854.762341][ T7254] usb 7-1: SerialNumber: syz [ 1854.769258][ T30] audit: type=1326 audit(1853.635:6726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5837 comm="syz.2.13544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0da064cbe9 code=0x7ffc0000 [ 1854.796550][ T30] audit: type=1326 audit(1853.635:6727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5837 comm="syz.2.13544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=114 compat=0 ip=0x7f0da064cbe9 code=0x7ffc0000 [ 1854.867463][ T5858] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 1854.905675][ T5869] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13557'. [ 1854.932020][ T5871] loop0: detected capacity change from 0 to 1024 [ 1854.940865][ T5869] netlink: 28 bytes leftover after parsing attributes in process `syz.1.13557'. [ 1855.003606][ T5871] EXT4-fs (loop0): Ignoring removed orlov option [ 1855.015466][ T5875] netlink: 'syz.1.13559': attribute type 13 has an invalid length. [ 1855.037368][ T5871] EXT4-fs (loop0): mounted filesystem without journal. Opts: orlov,min_batch_time=0x0000000000000004,,errors=continue. Quota mode: writeback. [ 1855.150418][ T7254] usb 7-1: 0:2 : does not exist [ 1855.277499][ T7254] usb 7-1: USB disconnect, device number 77 [ 1855.397847][T26974] udevd[26974]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 1855.724083][ T5901] netlink: 4 bytes leftover after parsing attributes in process `syz.6.13570'. [ 1855.734432][ T5902] 9pnet: Insufficient options for proto=fd [ 1855.790417][ T5901] netlink: 28 bytes leftover after parsing attributes in process `syz.6.13570'. [ 1855.912477][ T5912] loop5: detected capacity change from 0 to 512 [ 1856.179989][ T5912] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1856.499581][ T5928] loop0: detected capacity change from 0 to 512 [ 1856.582602][ T5935] loop5: detected capacity change from 0 to 2048 [ 1856.592305][ T5928] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1856.613407][ T5928] EXT4-fs (loop0): re-mounted. Opts: . Quota mode: writeback. [ 1856.695595][ T5935] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1856.711714][ T5941] SELinux: security_context_str_to_sid() failed for (dev ?, type ?) errno=-22 [ 1857.481921][ T5953] device syzkaller0 entered promiscuous mode [ 1857.490616][ T916] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 1857.507484][ T5953] device syzkaller0 left promiscuous mode [ 1857.513750][ T916] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 1857.756644][ T5975] netlink: 12 bytes leftover after parsing attributes in process `syz.5.13596'. [ 1858.423785][ T30] kauditd_printk_skb: 46 callbacks suppressed [ 1858.424325][ T30] audit: type=1326 audit(1858.415:6774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5996 comm="syz.1.13602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc829b97be9 code=0x7ffc0000 [ 1858.716453][ T30] audit: type=1326 audit(1858.415:6775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5996 comm="syz.1.13602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc829b97be9 code=0x7ffc0000 [ 1858.762859][ T30] audit: type=1326 audit(1858.415:6776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5996 comm="syz.1.13602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc829b97be9 code=0x7ffc0000 [ 1858.869701][ T6018] 9pnet: Insufficient options for proto=fd [ 1858.877695][ T30] audit: type=1326 audit(1858.415:6777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5996 comm="syz.1.13602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc829b97be9 code=0x7ffc0000 [ 1858.900889][ T30] audit: type=1326 audit(1858.415:6778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5996 comm="syz.1.13602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc829b97be9 code=0x7ffc0000 [ 1859.224575][ T30] audit: type=1326 audit(1858.415:6779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5996 comm="syz.1.13602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc829b97be9 code=0x7ffc0000 [ 1861.151871][ T30] audit: type=1326 audit(1858.415:6780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5996 comm="syz.1.13602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc829b97be9 code=0x7ffc0000 [ 1861.241892][ T30] audit: type=1326 audit(1858.415:6781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5996 comm="syz.1.13602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc829b97be9 code=0x7ffc0000 [ 1861.285292][ T30] audit: type=1326 audit(1858.415:6782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5996 comm="syz.1.13602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc829b97be9 code=0x7ffc0000 [ 1861.319521][ T6044] netlink: 'syz.2.13619': attribute type 13 has an invalid length. [ 1861.361322][ T6050] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13623'. [ 1861.379243][ T30] audit: type=1326 audit(1858.415:6783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5996 comm="syz.1.13602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7fc829b97be9 code=0x7ffc0000 [ 1861.386583][ T6050] netem: change failed [ 1861.420754][ T6053] 9pnet: Insufficient options for proto=fd [ 1861.864124][ T6069] netlink: 104 bytes leftover after parsing attributes in process `syz.1.13631'. [ 1862.043584][ T6076] loop5: detected capacity change from 0 to 8192 [ 1862.119345][ T6076] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 1862.156583][ T6076] FAT-fs (loop5): Filesystem has been set read-only [ 1862.627304][ T6105] tipc: Enabled bearer , priority 0 [ 1862.635601][ T6105] tipc: Disabling bearer [ 1863.431105][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 1863.431122][ T30] audit: type=1326 audit(1863.415:6800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6135 comm="syz.2.13659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0da064cbe9 code=0x7ffc0000 [ 1863.544411][ T30] audit: type=1326 audit(1863.415:6801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6135 comm="syz.2.13659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0da064cbe9 code=0x7ffc0000 [ 1863.574524][ T30] audit: type=1326 audit(1863.415:6802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6135 comm="syz.2.13659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=148 compat=0 ip=0x7f0da064cbe9 code=0x7ffc0000 [ 1863.603521][ T30] audit: type=1326 audit(1863.415:6803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6135 comm="syz.2.13659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0da064cbe9 code=0x7ffc0000 [ 1863.696219][ T30] audit: type=1326 audit(1863.685:6804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6161 comm="syz.2.13671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0da064cbe9 code=0x7ffc0000 [ 1863.737899][ T30] audit: type=1326 audit(1863.715:6805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6161 comm="syz.2.13671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0da064cbe9 code=0x7ffc0000 [ 1863.783018][ T30] audit: type=1326 audit(1863.715:6806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6161 comm="syz.2.13671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0da064cbe9 code=0x7ffc0000 [ 1863.786663][ T6165] netlink: 'syz.6.13672': attribute type 27 has an invalid length. [ 1863.806407][ T30] audit: type=1326 audit(1863.715:6807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6161 comm="syz.2.13671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f0da064cbe9 code=0x7ffc0000 [ 1863.837227][ T30] audit: type=1326 audit(1863.715:6808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6161 comm="syz.2.13671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0da064cbe9 code=0x7ffc0000 [ 1863.890036][ T30] audit: type=1326 audit(1863.715:6809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6161 comm="syz.2.13671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0da064cbe9 code=0x7ffc0000 [ 1863.941841][ T6175] syz.6.13677[6175] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1863.941930][ T6175] syz.6.13677[6175] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1865.251300][ T6260] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13714'. [ 1865.273366][ T6260] netlink: 28 bytes leftover after parsing attributes in process `syz.5.13714'. [ 1865.552256][ T6291] loop5: detected capacity change from 0 to 1024 [ 1865.574364][ T6291] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1865.604858][ T6291] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:3876: comm syz.5.13727: Allocating blocks 465-513 which overlap fs metadata [ 1865.619505][ T6291] EXT4-fs (loop5): pa ffff8881119ea150: logic 256, phys. 369, len 9 [ 1865.627615][ T6291] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:4893: group 0, free 0, pa_free 3 [ 1865.638170][ T6291] EXT4-fs error (device loop5): mb_free_blocks:1865: group 0, inode 18: block 113:freeing already freed block (bit 7); block bitmap corrupt. [ 1865.686678][ T6296] netlink: 4 bytes leftover after parsing attributes in process `syz.6.13729'. [ 1865.696247][ T6296] netlink: 28 bytes leftover after parsing attributes in process `syz.6.13729'. [ 1865.740589][ T6302] syz.6.13731[6302] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1865.740672][ T6302] syz.6.13731[6302] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1865.968141][ T6320] device syzkaller0 entered promiscuous mode [ 1866.653659][ T6325] loop2: detected capacity change from 0 to 1024 [ 1867.155238][ T6327] netlink: 'syz.6.13740': attribute type 13 has an invalid length. [ 1867.285194][ T6333] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13742'. [ 1867.294721][ T6325] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1867.328969][ T6333] netlink: 28 bytes leftover after parsing attributes in process `syz.5.13742'. [ 1867.346905][ T6325] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3876: comm syz.2.13739: Allocating blocks 465-513 which overlap fs metadata [ 1867.381778][ T6325] EXT4-fs (loop2): pa ffff8881119ea9d8: logic 256, phys. 369, len 9 [ 1867.389905][ T6325] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:4893: group 0, free 0, pa_free 3 [ 1867.425094][ T6325] EXT4-fs error (device loop2): mb_free_blocks:1865: group 0, inode 18: block 113:freeing already freed block (bit 7); block bitmap corrupt. [ 1867.521446][T19970] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 1867.538212][ T6359] loop2: detected capacity change from 0 to 1024 [ 1867.607164][ T6359] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1867.748970][T27353] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1867.757168][T27353] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1867.765517][T27353] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1867.777398][T27353] hid-generic 0000:0000:0000.0041: unknown main item tag 0x2 [ 1867.786027][T27353] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1867.794200][T27353] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1867.802036][T27353] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1867.810126][T27353] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1867.817850][T27353] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1867.825608][T27353] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1867.833554][T27353] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1867.841583][T27353] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1867.849191][T27353] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1867.857496][T27353] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1867.865414][T27353] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1867.873200][T27353] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1867.880925][T27353] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1867.888502][T27353] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1867.896202][T27353] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1868.240069][T19970] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1868.251118][T19970] usb 1-1: config 0 has no interface number 0 [ 1868.257611][T19970] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1868.272144][T19970] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1868.283041][T27353] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1868.284092][T19970] usb 1-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 1868.302058][T19970] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1868.334919][T27353] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1868.341713][T19970] usb 1-1: config 0 descriptor?? [ 1868.351686][T27353] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1868.386067][T27353] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1868.397656][T27353] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1868.408379][T27353] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1868.418025][T27353] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1868.431672][T27353] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1868.440047][T27353] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1868.448199][T27353] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1868.455730][T27353] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1868.463230][T27353] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1868.470981][T27353] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1868.478764][T27353] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1868.486304][T27353] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1868.493881][T27353] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1868.501481][T27353] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1868.508906][T27353] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1868.516364][T27353] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1868.523852][T27353] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1868.531363][T27353] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1868.538825][T27353] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1868.546963][T27353] hid-generic 0000:0000:0000.0041: hidraw0: HID v0.00 Device [syz0] on syz1 [ 1868.587075][ T6396] fido_id[6396]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1868.725329][ T6406] 9pnet: Insufficient options for proto=fd [ 1868.768512][ T30] kauditd_printk_skb: 50 callbacks suppressed [ 1868.768529][ T30] audit: type=1326 audit(1868.755:6860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6411 comm="syz.6.13776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93762f0be9 code=0x7ffc0000 [ 1868.815770][ T30] audit: type=1326 audit(1868.795:6861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6411 comm="syz.6.13776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f93762f0be9 code=0x7ffc0000 [ 1868.841747][ T6330] input: syz1 as /devices/virtual/input/input105 [ 1868.850014][ T30] audit: type=1326 audit(1868.795:6862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6411 comm="syz.6.13776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93762f0be9 code=0x7ffc0000 [ 1868.873607][ T30] audit: type=1326 audit(1868.795:6863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6413 comm="syz.6.13776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f93763234a5 code=0x7ffc0000 [ 1868.874353][ T867] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 1868.912055][ T30] audit: type=1326 audit(1868.795:6864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6411 comm="syz.6.13776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=297 compat=0 ip=0x7f93762f0be9 code=0x7ffc0000 [ 1868.935497][ T30] audit: type=1326 audit(1868.795:6865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6411 comm="syz.6.13776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93762f0be9 code=0x7ffc0000 [ 1868.959575][ T30] audit: type=1326 audit(1868.925:6866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6413 comm="syz.6.13776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f93762f0be9 code=0x7ffc0000 [ 1869.480179][T19970] usbhid 1-1:0.1: can't add hid device: -71 [ 1869.494297][T19970] usbhid: probe of 1-1:0.1 failed with error -71 [ 1869.495290][ T867] usb 6-1: device descriptor read/64, error -71 [ 1869.514324][T19970] usb 1-1: USB disconnect, device number 76 [ 1869.899917][ T867] usb 6-1: device descriptor read/64, error -71 [ 1869.975413][ T6438] 9pnet: Insufficient options for proto=fd [ 1870.029897][ T30] audit: type=1400 audit(1869.965:6867): avc: denied { relabelfrom } for pid=6435 comm="syz.0.13784" name="" dev="pipefs" ino=155648 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 1870.131512][ T6451] loop2: detected capacity change from 0 to 512 [ 1870.161847][ T6451] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpjquota=,noinit_itable,abort,bsdgroups,,errors=continue. Quota mode: writeback. [ 1870.178950][ T6457] hub 2-0:1.0: USB hub found [ 1870.183740][ T6457] hub 2-0:1.0: 1 port detected [ 1870.191103][ T867] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 1870.203475][ T30] audit: type=1400 audit(1870.195:6868): avc: denied { ioctl } for pid=6450 comm="syz.2.13790" path="/402/file0/cpu.stat" dev="loop2" ino=18 ioctlcmd=0x583b scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 1870.234458][ T30] audit: type=1400 audit(1870.225:6869): avc: denied { map_create } for pid=6458 comm="syz.0.13793" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1870.785892][ T6468] hub 8-0:1.0: USB hub found [ 1870.792168][ T6468] hub 8-0:1.0: 1 port detected [ 1871.053039][ T867] usb 6-1: device descriptor read/64, error -71 [ 1872.389772][T10212] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 1872.789893][T10212] usb 1-1: Using ep0 maxpacket: 16 [ 1872.930229][T10212] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1872.941817][T10212] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 1873.302238][ T6527] tipc: Started in network mode [ 1873.307162][ T6527] tipc: Node identity ea2ddb0a50ad, cluster identity 4711 [ 1873.314676][ T6527] tipc: Enabled bearer , priority 0 [ 1873.322685][ T6527] device syzkaller0 entered promiscuous mode [ 1873.330618][T10212] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1873.339806][T10212] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1873.339909][ T6526] tipc: Resetting bearer [ 1873.354026][T10212] usb 1-1: Product: syz [ 1873.358424][T10212] usb 1-1: Manufacturer: syz [ 1873.359072][ T6526] tipc: Disabling bearer [ 1873.363386][T10212] usb 1-1: SerialNumber: syz [ 1873.440482][ T6532] loop5: detected capacity change from 0 to 1024 [ 1873.473956][ T6532] EXT4-fs (loop5): Ignoring removed nobh option [ 1873.480948][ T6532] EXT4-fs (loop5): Ignoring removed bh option [ 1873.487133][ T6532] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1873.502482][ T6532] EXT4-fs (loop5): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 1873.580785][ T6539] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13824'. [ 1873.590434][ T6539] netlink: 28 bytes leftover after parsing attributes in process `syz.5.13824'. [ 1873.627504][ T6543] netlink: 'syz.1.13827': attribute type 13 has an invalid length. [ 1873.932050][ T30] kauditd_printk_skb: 63 callbacks suppressed [ 1873.932066][ T30] audit: type=1400 audit(1873.925:6933): avc: denied { create } for pid=6553 comm="syz.6.13831" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1873.958261][ T30] audit: type=1400 audit(1873.925:6934): avc: denied { setopt } for pid=6553 comm="syz.6.13831" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1873.980851][ T30] audit: type=1400 audit(1873.975:6935): avc: denied { write } for pid=6553 comm="syz.6.13831" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1874.031542][ T30] audit: type=1400 audit(1874.025:6936): avc: denied { read } for pid=6553 comm="syz.6.13831" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1874.063817][ T30] audit: type=1400 audit(1874.055:6937): avc: denied { bind } for pid=6556 comm="syz.6.13832" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1874.083105][ T30] audit: type=1400 audit(1874.055:6938): avc: denied { listen } for pid=6556 comm="syz.6.13832" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1874.102596][ T30] audit: type=1400 audit(1874.055:6939): avc: denied { accept } for pid=6556 comm="syz.6.13832" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1874.131105][ T6561] netlink: 4 bytes leftover after parsing attributes in process `syz.6.13834'. [ 1874.144294][ T6561] netlink: 4 bytes leftover after parsing attributes in process `syz.6.13834'. [ 1874.253473][ T30] audit: type=1326 audit(1874.245:6940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6562 comm="syz.6.13835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93762f0be9 code=0x7ffc0000 [ 1874.276856][ T30] audit: type=1326 audit(1874.245:6941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6562 comm="syz.6.13835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93762f0be9 code=0x7ffc0000 [ 1874.300154][ T30] audit: type=1326 audit(1874.255:6942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6562 comm="syz.6.13835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f93762f0be9 code=0x7ffc0000 [ 1874.529467][ T6571] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13839'. [ 1874.539400][ T6571] netlink: 28 bytes leftover after parsing attributes in process `syz.5.13839'. [ 1874.574616][ T6573] netlink: 'syz.1.13840': attribute type 13 has an invalid length. [ 1874.600786][ T7254] usb 7-1: new high-speed USB device number 78 using dummy_hcd [ 1874.858692][ T6585] device wireguard0 entered promiscuous mode [ 1874.980027][ T7254] usb 7-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1874.989473][ T7254] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1874.998462][ T7254] usb 7-1: config 0 descriptor?? [ 1875.101565][T10212] usb 1-1: USB disconnect, device number 77 [ 1875.243620][ T6598] loop0: detected capacity change from 0 to 40427 [ 1875.252046][ T6598] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 1875.259914][ T6598] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 1875.268191][ T6598] F2FS-fs (loop0): Invalid log_blocksize (16777215), supports only 12 [ 1875.276460][ T6598] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 1875.942506][ T6608] hub 8-0:1.0: USB hub found [ 1875.947451][ T6608] hub 8-0:1.0: 1 port detected [ 1876.864197][ T6622] netlink: 96 bytes leftover after parsing attributes in process `syz.6.13836'. [ 1876.874260][ T6622] UDC core: couldn't find an available UDC or it's busy: -16 [ 1876.881993][ T6622] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1876.983823][ T6620] netlink: 'syz.5.13858': attribute type 13 has an invalid length. [ 1877.022043][ T6626] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13861'. [ 1877.040213][ T6626] netlink: 28 bytes leftover after parsing attributes in process `syz.5.13861'. [ 1877.113017][ T6633] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13863'. [ 1877.230182][ T7254] usb 7-1: Cannot set autoneg [ 1877.235151][ T7254] MOSCHIP usb-ethernet driver: probe of 7-1:0.0 failed with error -71 [ 1877.248902][ T7254] usb 7-1: USB disconnect, device number 78 [ 1877.255908][T11118] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 1877.499898][T11118] usb 3-1: Using ep0 maxpacket: 16 [ 1877.620011][T11118] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1877.630273][T11118] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 1877.789977][T11118] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1877.799329][T11118] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1877.808643][T11118] usb 3-1: Product: syz [ 1877.813821][T11118] usb 3-1: Manufacturer: syz [ 1877.818489][T11118] usb 3-1: SerialNumber: syz [ 1878.371182][ T6669] 9pnet: Insufficient options for proto=fd [ 1878.797856][ T6678] loop0: detected capacity change from 0 to 128 [ 1878.882684][ T6678] EXT4-fs (loop0): Ignoring removed nobh option [ 1878.899948][ T6678] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobh,user_xattr,,errors=continue. Quota mode: none. [ 1878.922877][ T6678] EXT4-fs error (device loop0): ext4_validate_inode_bitmap:106: comm syz.0.13882: Corrupt inode bitmap - block_group = 0, inode_bitmap = 19 [ 1879.213485][ T6689] loop0: detected capacity change from 0 to 512 [ 1879.261112][ T6689] EXT4-fs (loop0): dax option not supported [ 1879.566898][ T30] kauditd_printk_skb: 63 callbacks suppressed [ 1879.566949][ T30] audit: type=1400 audit(1879.555:7006): avc: denied { mount } for pid=6690 comm="syz.1.13886" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 1879.796533][ T6698] syz.1.13889[6698] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1879.796847][ T6698] syz.1.13889[6698] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1879.995510][T28867] usb 3-1: USB disconnect, device number 71 [ 1881.300271][ T6714] usb usb1: usbfs: interface 0 claimed by hub while 'syz.5.13894' sets config #0 [ 1881.522124][ T6721] loop5: detected capacity change from 0 to 128 [ 1881.664450][ T30] audit: type=1400 audit(1881.655:7007): avc: denied { mount } for pid=6720 comm="syz.5.13898" name="/" dev="loop5" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 1882.051719][ T6730] syz.0.13901[6730] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1882.051804][ T6730] syz.0.13901[6730] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1882.069777][ T6721] attempt to access beyond end of device [ 1882.069777][ T6721] loop5: rw=2049, want=1041, limit=128 [ 1882.093178][ T30] audit: type=1400 audit(1882.085:7008): avc: denied { unmount } for pid=1039 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 1882.124080][ T6732] tipc: Enabled bearer , priority 0 [ 1882.140312][ T6732] device syzkaller0 entered promiscuous mode [ 1882.140509][ T6721] attempt to access beyond end of device [ 1882.140509][ T6721] loop5: rw=524288, want=369, limit=128 [ 1882.158789][ T6721] attempt to access beyond end of device [ 1882.158789][ T6721] loop5: rw=0, want=153, limit=128 [ 1882.169891][ T6721] attempt to access beyond end of device [ 1882.169891][ T6721] loop5: rw=0, want=153, limit=128 [ 1882.181032][ T6721] attempt to access beyond end of device [ 1882.181032][ T6721] loop5: rw=0, want=153, limit=128 [ 1882.192759][ T6732] tipc: Resetting bearer [ 1882.202815][ T6731] tipc: Resetting bearer [ 1882.209761][ T6731] tipc: Disabling bearer [ 1882.216293][ T6721] attempt to access beyond end of device [ 1882.216293][ T6721] loop5: rw=0, want=153, limit=128 [ 1882.228762][ T6721] attempt to access beyond end of device [ 1882.228762][ T6721] loop5: rw=0, want=153, limit=128 [ 1882.240244][ T6721] attempt to access beyond end of device [ 1882.240244][ T6721] loop5: rw=0, want=153, limit=128 [ 1882.251565][ T6721] attempt to access beyond end of device [ 1882.251565][ T6721] loop5: rw=0, want=153, limit=128 [ 1882.272779][ T6721] attempt to access beyond end of device [ 1882.272779][ T6721] loop5: rw=0, want=153, limit=128 [ 1882.621551][ T6746] netlink: 4 bytes leftover after parsing attributes in process `syz.6.13906'. [ 1882.661172][ T6746] netlink: 4 bytes leftover after parsing attributes in process `syz.6.13906'. [ 1882.691582][ T6748] syz.1.13907[6748] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1882.691665][ T6748] syz.1.13907[6748] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1882.714232][ T30] audit: type=1400 audit(1882.705:7009): avc: denied { unmount } for pid=916 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 1882.758156][ T30] audit: type=1326 audit(1882.745:7010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6749 comm="syz.1.13909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc829b97be9 code=0x7ffc0000 [ 1882.792063][ T30] audit: type=1326 audit(1882.745:7011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6749 comm="syz.1.13909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc829b97be9 code=0x7ffc0000 [ 1882.815504][ T30] audit: type=1326 audit(1882.745:7012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6749 comm="syz.1.13909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc829b97be9 code=0x7ffc0000 [ 1882.839217][ T30] audit: type=1326 audit(1882.745:7013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6749 comm="syz.1.13909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fc829b97be9 code=0x7ffc0000 [ 1882.873534][ T30] audit: type=1326 audit(1882.745:7014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6749 comm="syz.1.13909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc829b97be9 code=0x7ffc0000 [ 1882.910837][ T30] audit: type=1326 audit(1882.745:7015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6749 comm="syz.1.13909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc829b97be9 code=0x7ffc0000 [ 1882.940586][ T6761] 9pnet: Insufficient options for proto=fd [ 1882.991674][ T6767] tipc: Enabled bearer , priority 0 [ 1882.998888][ T6767] device syzkaller0 entered promiscuous mode [ 1883.013490][ T6767] tipc: Resetting bearer [ 1883.020577][ T6766] tipc: Resetting bearer [ 1883.028120][ T6766] tipc: Disabling bearer [ 1883.341871][ T6774] loop5: detected capacity change from 0 to 40427 [ 1883.349539][ T6772] tmpfs: Unsupported parameter 'mpol' [ 1884.294745][ T6774] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 1884.316834][ T6774] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 1884.326285][ T6774] F2FS-fs (loop5): Invalid log_blocksize (16777215), supports only 12 [ 1884.346545][ T6774] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 1884.485349][ T6790] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13924'. [ 1884.806076][ T6793] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13924'. [ 1884.823544][ T30] kauditd_printk_skb: 52 callbacks suppressed [ 1884.823561][ T30] audit: type=1400 audit(1884.815:7068): avc: denied { bind } for pid=6797 comm="syz.6.13926" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1884.850121][ T30] audit: type=1400 audit(1884.835:7069): avc: denied { setopt } for pid=6797 comm="syz.6.13926" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1884.869500][ T30] audit: type=1400 audit(1884.835:7070): avc: denied { write } for pid=6797 comm="syz.6.13926" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1884.972096][ T6804] loop5: detected capacity change from 0 to 256 [ 1885.001375][ T6804] SELinux: security_context_str_to_sid(unconfined_u) failed for (dev ?, type ?) errno=-22 [ 1885.011539][ T6804] exfat: Unknown parameter 'fsmagic' [ 1885.797439][ T30] audit: type=1326 audit(1885.785:7071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6809 comm="syz.0.13930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76f33a2be9 code=0x7ffc0000 [ 1885.980498][ T30] audit: type=1326 audit(1885.785:7072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6809 comm="syz.0.13930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76f33a2be9 code=0x7ffc0000 [ 1886.041960][ T30] audit: type=1326 audit(1885.785:7073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6809 comm="syz.0.13930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f76f33a2be9 code=0x7ffc0000 [ 1886.079689][ T30] audit: type=1326 audit(1885.785:7074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6809 comm="syz.0.13930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76f33a2be9 code=0x7ffc0000 [ 1886.217581][ T30] audit: type=1326 audit(1885.785:7075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6809 comm="syz.0.13930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76f33a2be9 code=0x7ffc0000 [ 1886.316115][ T30] audit: type=1326 audit(1885.785:7076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6809 comm="syz.0.13930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f76f33a2be9 code=0x7ffc0000 [ 1886.410215][T27353] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 1886.447454][ T30] audit: type=1326 audit(1885.785:7077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6809 comm="syz.0.13930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76f33a2be9 code=0x7ffc0000 [ 1887.411942][ T6860] device veth0 entered promiscuous mode [ 1887.421070][ T6860] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13946'. [ 1887.509704][ T6863] loop0: detected capacity change from 0 to 256 [ 1887.541298][ T6863] SELinux: security_context_str_to_sid(unconfined_u) failed for (dev ?, type ?) errno=-22 [ 1887.551412][ T6863] exfat: Unknown parameter 'fsmagic' [ 1887.610223][T27353] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1887.629143][T27353] usb 3-1: config 0 has no interface number 0 [ 1887.731494][T27353] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1887.866824][T27353] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1887.962089][T27353] usb 3-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 1887.998392][T27353] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1888.090661][T27353] usb 3-1: config 0 descriptor?? [ 1888.581836][ T6822] input: syz1 as /devices/virtual/input/input106 [ 1889.179937][T27353] usbhid 3-1:0.1: can't add hid device: -71 [ 1889.185957][T27353] usbhid: probe of 3-1:0.1 failed with error -71 [ 1889.193956][T27353] usb 3-1: USB disconnect, device number 72 [ 1889.209878][T19975] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 1889.257609][ T6896] netlink: 4 bytes leftover after parsing attributes in process `syz.6.13963'. [ 1889.267186][ T6896] netlink: 28 bytes leftover after parsing attributes in process `syz.6.13963'. [ 1889.459890][T19975] usb 6-1: Using ep0 maxpacket: 32 [ 1889.580027][T19975] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1889.597637][T19975] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1889.618360][T19975] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1889.633249][T19975] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1889.663853][T19975] usb 6-1: config 0 descriptor?? [ 1889.726987][ T6920] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13974'. [ 1889.741978][ T6920] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13974'. [ 1889.764303][ T6922] syz.0.13975[6922] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1889.764379][ T6922] syz.0.13975[6922] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1889.965285][ T6934] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13979'. [ 1890.002333][ T6937] 9pnet: p9_errstr2errno: server reported unknown error [ 1890.037799][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 1890.037816][ T30] audit: type=1400 audit(1890.025:7098): avc: denied { read } for pid=6938 comm="syz.1.13983" name="/" dev="configfs" ino=14553 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1890.066243][T27353] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 1890.075487][ T30] audit: type=1400 audit(1890.025:7099): avc: denied { open } for pid=6938 comm="syz.1.13983" path="/" dev="configfs" ino=14553 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1890.105185][ T30] audit: type=1326 audit(1890.085:7100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6940 comm="syz.2.13984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0da064cbe9 code=0x7ffc0000 [ 1890.133211][ T30] audit: type=1326 audit(1890.085:7101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6940 comm="syz.2.13984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=306 compat=0 ip=0x7f0da064cbe9 code=0x7ffc0000 [ 1890.159758][ T30] audit: type=1326 audit(1890.085:7102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6940 comm="syz.2.13984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0da064cbe9 code=0x7ffc0000 [ 1890.231930][ T6951] netlink: 4 bytes leftover after parsing attributes in process `syz.6.13989'. [ 1890.247284][ T6951] netlink: 4 bytes leftover after parsing attributes in process `syz.6.13989'. [ 1890.264422][T19975] savu 0003:1E7D:2D5A.0042: hiddev96,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.5-1/input0 [ 1890.278022][ T6954] loop2: detected capacity change from 0 to 512 [ 1890.834249][ T7254] usb 6-1: USB disconnect, device number 55 [ 1891.104537][ T6954] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1891.257176][ T6960] fido_id[6960]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1891.271561][ T30] audit: type=1400 audit(1891.155:7103): avc: denied { read } for pid=6962 comm="syz.6.13991" name="loop-control" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1891.338211][ T30] audit: type=1400 audit(1891.155:7104): avc: denied { open } for pid=6962 comm="syz.6.13991" path="/dev/loop-control" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1891.376876][ T30] audit: type=1400 audit(1891.165:7105): avc: denied { read } for pid=6962 comm="syz.6.13991" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1891.429092][ T30] audit: type=1400 audit(1891.165:7106): avc: denied { open } for pid=6962 comm="syz.6.13991" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1891.453222][ T30] audit: type=1400 audit(1891.165:7107): avc: denied { mounton } for pid=6962 comm="syz.6.13991" path="/proc/891/cgroup" dev="proc" ino=158133 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 1891.489997][T27353] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1891.502101][T27353] usb 1-1: config 0 has no interface number 0 [ 1891.508405][T27353] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1891.523855][T27353] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1891.534131][T27353] usb 1-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 1891.550228][T27353] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1891.575672][ T6973] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 1891.603888][T27353] usb 1-1: config 0 descriptor?? [ 1891.610855][ T6984] loop2: detected capacity change from 0 to 256 [ 1891.617662][ T6973] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 1891.691815][ T6984] FAT-fs (loop2): Directory bread(block 1285) failed [ 1891.711808][ T6984] FAT-fs (loop2): Directory bread(block 1285) failed [ 1894.359974][T27353] usbhid 1-1:0.1: can't add hid device: -71 [ 1894.367098][T27353] usbhid: probe of 1-1:0.1 failed with error -71 [ 1894.406711][T27353] usb 1-1: USB disconnect, device number 78 [ 1894.412734][ T7014] netlink: 4 bytes leftover after parsing attributes in process `syz.6.14011'. [ 1894.497986][ T7014] netlink: 4 bytes leftover after parsing attributes in process `syz.6.14011'. [ 1894.694917][ T7034] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 1894.757396][ T7044] netlink: 68 bytes leftover after parsing attributes in process `syz.0.14023'. [ 1894.950263][ T7050] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14025'. [ 1894.973997][ T7050] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14025'. [ 1895.062532][ T7053] netlink: 'syz.5.14026': attribute type 13 has an invalid length. [ 1895.125927][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 1895.125945][ T30] audit: type=1326 audit(1895.115:7128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7054 comm="syz.0.14027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76f33a2be9 code=0x7ffc0000 [ 1895.161649][T28867] usb 7-1: new high-speed USB device number 79 using dummy_hcd [ 1895.184396][ T30] audit: type=1326 audit(1895.115:7129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7054 comm="syz.0.14027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f76f33a2be9 code=0x7ffc0000 [ 1895.218601][ T30] audit: type=1326 audit(1895.115:7130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7054 comm="syz.0.14027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76f33a2be9 code=0x7ffc0000 [ 1895.242125][ T30] audit: type=1326 audit(1895.115:7131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7054 comm="syz.0.14027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f76f33a2be9 code=0x7ffc0000 [ 1895.265843][ T30] audit: type=1326 audit(1895.115:7132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7054 comm="syz.0.14027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76f33a2be9 code=0x7ffc0000 [ 1895.319936][ T30] audit: type=1326 audit(1895.115:7133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7054 comm="syz.0.14027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7f76f33a2be9 code=0x7ffc0000 [ 1895.355821][ T30] audit: type=1326 audit(1895.115:7134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7054 comm="syz.0.14027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76f33a2be9 code=0x7ffc0000 [ 1895.407608][ T30] audit: type=1326 audit(1895.115:7135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7054 comm="syz.0.14027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=81 compat=0 ip=0x7f76f33a2be9 code=0x7ffc0000 [ 1895.460742][ T30] audit: type=1326 audit(1895.115:7136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7054 comm="syz.0.14027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76f33a2be9 code=0x7ffc0000 [ 1895.503843][ T30] audit: type=1326 audit(1895.115:7137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7054 comm="syz.0.14027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76f33a2be9 code=0x7ffc0000 [ 1895.560222][T28867] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1895.568487][T28867] usb 7-1: config 0 has no interface number 0 [ 1895.583135][T28867] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1895.601842][T28867] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1895.612080][T28867] usb 7-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 1895.622274][T28867] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1895.631703][T28867] usb 7-1: config 0 descriptor?? [ 1895.724897][ T7080] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14038'. [ 1895.741486][ T7080] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14038'. [ 1895.791443][ T7082] netlink: 'syz.2.14039': attribute type 13 has an invalid length. [ 1895.859990][ T7086] 9pnet: Insufficient options for proto=fd [ 1896.082609][ T7029] input: syz1 as /devices/virtual/input/input107 [ 1896.360822][T28867] usbhid 7-1:0.1: can't add hid device: -71 [ 1896.366900][T28867] usbhid: probe of 7-1:0.1 failed with error -71 [ 1896.374903][T28867] usb 7-1: USB disconnect, device number 79 [ 1896.833255][ T7112] netlink: 'syz.2.14051': attribute type 13 has an invalid length. [ 1896.849722][ T7114] netlink: 4 bytes leftover after parsing attributes in process `syz.6.14052'. [ 1896.885347][ T7114] netlink: 4 bytes leftover after parsing attributes in process `syz.6.14052'. [ 1896.990002][ T7122] netlink: 4 bytes leftover after parsing attributes in process `syz.6.14055'. [ 1897.366377][ T7137] loop5: detected capacity change from 0 to 512 [ 1898.208985][ T7137] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1898.352201][ T7148] 9pnet: Insufficient options for proto=fd [ 1898.453416][ T7254] hid-generic 0003:0004:0FFF.0043: unknown main item tag 0x0 [ 1898.469895][ T7254] hid-generic 0003:0004:0FFF.0043: unknown main item tag 0x0 [ 1898.477389][ T7254] hid-generic 0003:0004:0FFF.0043: unknown main item tag 0x0 [ 1898.491845][ T7254] hid-generic 0003:0004:0FFF.0043: hidraw0: USB HID v0.03 Device [syz0] on syz0 [ 1898.630742][ T7178] 9pnet: Insufficient options for proto=fd [ 1902.000820][ T7171] fido_id[7171]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1902.043051][ T30] kauditd_printk_skb: 81 callbacks suppressed [ 1902.043069][ T30] audit: type=1400 audit(1902.035:7219): avc: denied { append } for pid=7192 comm="syz.6.14079" name="loop4" dev="devtmpfs" ino=1920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1902.097447][ T7196] netlink: 'syz.1.14080': attribute type 4 has an invalid length. [ 1902.133131][ T7199] loop0: detected capacity change from 0 to 512 [ 1902.159556][ T7196] netlink: 'syz.1.14080': attribute type 4 has an invalid length. [ 1902.242029][ T7211] 9pnet: Insufficient options for proto=fd [ 1902.296307][ T7199] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1902.387841][ T30] audit: type=1326 audit(1902.375:7220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7236 comm="syz.6.14101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93762f0be9 code=0x7ffc0000 [ 1902.411670][ T30] audit: type=1326 audit(1902.405:7221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7236 comm="syz.6.14101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93762f0be9 code=0x7ffc0000 [ 1902.945129][ T30] audit: type=1326 audit(1902.495:7222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7236 comm="syz.6.14101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f93762f0be9 code=0x7ffc0000 [ 1903.023262][ T30] audit: type=1326 audit(1902.615:7223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7236 comm="syz.6.14101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93762f0be9 code=0x7ffc0000 [ 1903.070401][ T30] audit: type=1326 audit(1902.925:7224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7236 comm="syz.6.14101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f93762f0be9 code=0x7ffc0000 [ 1903.162960][ T30] audit: type=1326 audit(1902.935:7225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7236 comm="syz.6.14101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93762f0be9 code=0x7ffc0000 [ 1903.187998][ T7257] 9pnet: p9_errstr2errno: server reported unknown error [ 1903.247256][ T30] audit: type=1326 audit(1902.935:7226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7236 comm="syz.6.14101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f93762f0be9 code=0x7ffc0000 [ 1903.290287][ T30] audit: type=1326 audit(1902.935:7227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7236 comm="syz.6.14101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93762f0be9 code=0x7ffc0000 [ 1903.317991][ T30] audit: type=1326 audit(1902.935:7228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7236 comm="syz.6.14101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=27 compat=0 ip=0x7f93762f0be9 code=0x7ffc0000 [ 1903.528443][ T7271] loop2: detected capacity change from 0 to 512 [ 1903.586282][ T7275] loop5: detected capacity change from 0 to 4096 [ 1903.986313][ T7271] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1904.161546][ T7275] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1906.409660][ T7326] __nla_validate_parse: 3 callbacks suppressed [ 1906.409689][ T7326] netlink: 28 bytes leftover after parsing attributes in process `syz.0.14129'. [ 1906.426812][ T7326] netlink: 28 bytes leftover after parsing attributes in process `syz.0.14129'. [ 1906.461147][ T7329] loop0: detected capacity change from 0 to 1024 [ 1907.053730][ T7329] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1907.305742][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 1907.305763][ T30] audit: type=1400 audit(1906.875:7251): avc: denied { setopt } for pid=7334 comm="syz.2.14132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1907.448469][ T30] audit: type=1400 audit(1906.884:7252): avc: denied { write } for pid=7334 comm="syz.2.14132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1907.532056][ T7344] netlink: 348 bytes leftover after parsing attributes in process `syz.2.14136'. [ 1907.552200][ T30] audit: type=1400 audit(1907.137:7253): avc: denied { append } for pid=7337 comm="syz.6.14133" name="001" dev="devtmpfs" ino=178 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1907.592500][ T30] audit: type=1326 audit(1907.249:7254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7343 comm="syz.2.14136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0da064cbe9 code=0x7ffc0000 [ 1907.615945][ T30] audit: type=1326 audit(1907.249:7255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7343 comm="syz.2.14136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0da064cbe9 code=0x7ffc0000 [ 1907.640598][ T30] audit: type=1326 audit(1907.249:7256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7343 comm="syz.2.14136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0da064cbe9 code=0x7ffc0000 [ 1907.666170][ T30] audit: type=1326 audit(1907.249:7257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7343 comm="syz.2.14136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0da064cbe9 code=0x7ffc0000 [ 1907.702812][ T7350] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14130'. [ 1907.743052][ T30] audit: type=1326 audit(1907.249:7258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7343 comm="syz.2.14136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0da064cbe9 code=0x7ffc0000 [ 1907.791703][ T30] audit: type=1326 audit(1907.249:7259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7343 comm="syz.2.14136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0da064cbe9 code=0x7ffc0000 [ 1907.815031][ T30] audit: type=1326 audit(1907.249:7260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7343 comm="syz.2.14136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0da064cbe9 code=0x7ffc0000 [ 1907.866350][ T7329] EXT4-fs error (device loop0): mb_free_blocks:1865: group 0, inode 18: block 113:freeing already freed block (bit 7); block bitmap corrupt. [ 1907.906459][ T7368] loop5: detected capacity change from 0 to 128 [ 1908.489263][T28867] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 1908.745915][T28867] usb 6-1: Using ep0 maxpacket: 16 [ 1908.938395][T28867] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1909.067913][T28867] usb 6-1: can't read configurations, error -61 [ 1909.223095][ T7395] netlink: 'syz.2.14156': attribute type 13 has an invalid length. [ 1909.248304][T28867] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 1909.515611][T28867] usb 6-1: Using ep0 maxpacket: 16 [ 1909.555432][ T7421] hub 8-0:1.0: USB hub found [ 1909.560630][ T7421] hub 8-0:1.0: 1 port detected [ 1910.980246][T28867] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1910.998906][T28867] usb 6-1: can't read configurations, error -61 [ 1911.029584][T28867] usb usb6-port1: attempt power cycle [ 1911.330101][ T867] hid-generic 0008:0006:0007.0044: unknown main item tag 0x0 [ 1911.343335][ T867] hid-generic 0008:0006:0007.0044: unknown main item tag 0x0 [ 1911.360079][ T867] hid-generic 0008:0006:0007.0044: unknown main item tag 0x0 [ 1911.374434][ T867] hid-generic 0008:0006:0007.0044: unknown main item tag 0x0 [ 1911.391771][ T867] hid-generic 0008:0006:0007.0044: unknown main item tag 0x0 [ 1911.406178][ T867] hid-generic 0008:0006:0007.0044: unknown main item tag 0x0 [ 1911.422724][ T867] hid-generic 0008:0006:0007.0044: unknown main item tag 0x0 [ 1911.437937][ T867] hid-generic 0008:0006:0007.0044: unknown main item tag 0x0 [ 1911.453307][ T867] hid-generic 0008:0006:0007.0044: unknown main item tag 0x0 [ 1911.468753][ T867] hid-generic 0008:0006:0007.0044: unknown main item tag 0x0 [ 1911.484243][ T867] hid-generic 0008:0006:0007.0044: unknown main item tag 0x0 [ 1911.513194][ T867] hid-generic 0008:0006:0007.0044: unknown main item tag 0x0 [ 1911.528870][ T867] hid-generic 0008:0006:0007.0044: unknown main item tag 0x0 [ 1911.545859][ T867] hid-generic 0008:0006:0007.0044: unknown main item tag 0x0 [ 1911.562896][ T867] hid-generic 0008:0006:0007.0044: unknown main item tag 0x0 [ 1911.582904][ T867] hid-generic 0008:0006:0007.0044: unknown main item tag 0x0 [ 1911.593613][ T867] hid-generic 0008:0006:0007.0044: unknown main item tag 0x0 [ 1911.603801][ T867] hid-generic 0008:0006:0007.0044: unknown main item tag 0x0 [ 1911.611464][ T867] hid-generic 0008:0006:0007.0044: unknown main item tag 0x0 [ 1911.619005][ T867] hid-generic 0008:0006:0007.0044: unknown main item tag 0x0 [ 1911.626675][ T867] hid-generic 0008:0006:0007.0044: unknown main item tag 0x0 [ 1911.634695][ T867] hid-generic 0008:0006:0007.0044: unknown main item tag 0x0 [ 1911.642212][ T867] hid-generic 0008:0006:0007.0044: unknown main item tag 0x0 [ 1911.650044][ T867] hid-generic 0008:0006:0007.0044: unknown main item tag 0x0 [ 1911.657685][ T867] hid-generic 0008:0006:0007.0044: unknown main item tag 0x0 [ 1911.665353][ T867] hid-generic 0008:0006:0007.0044: unknown main item tag 0x0 [ 1911.672840][ T867] hid-generic 0008:0006:0007.0044: unknown main item tag 0x0 [ 1911.680541][ T867] hid-generic 0008:0006:0007.0044: unknown main item tag 0x0 [ 1911.688153][ T867] hid-generic 0008:0006:0007.0044: unknown main item tag 0x0 [ 1911.695703][ T867] hid-generic 0008:0006:0007.0044: unknown main item tag 0x0 [ 1911.703371][ T867] hid-generic 0008:0006:0007.0044: unknown main item tag 0x0 [ 1911.711033][ T867] hid-generic 0008:0006:0007.0044: unknown main item tag 0x0 [ 1911.718661][ T867] hid-generic 0008:0006:0007.0044: unknown main item tag 0x0 [ 1911.726203][ T867] hid-generic 0008:0006:0007.0044: unknown main item tag 0x0 [ 1911.733850][ T867] hid-generic 0008:0006:0007.0044: unknown main item tag 0x0 [ 1911.741528][ T867] hid-generic 0008:0006:0007.0044: unknown main item tag 0x0 [ 1911.749035][ T867] hid-generic 0008:0006:0007.0044: unknown main item tag 0x0 [ 1911.756750][ T867] hid-generic 0008:0006:0007.0044: unknown main item tag 0x0 [ 1911.764346][ T867] hid-generic 0008:0006:0007.0044: unknown main item tag 0x0 [ 1911.772023][ T867] hid-generic 0008:0006:0007.0044: unknown main item tag 0x0 [ 1911.779524][ T867] hid-generic 0008:0006:0007.0044: unknown main item tag 0x0 [ 1911.787232][ T867] hid-generic 0008:0006:0007.0044: unknown main item tag 0x0 [ 1911.794827][ T867] hid-generic 0008:0006:0007.0044: unknown main item tag 0x0 [ 1911.802372][ T867] hid-generic 0008:0006:0007.0044: unknown main item tag 0x0 [ 1911.810031][ T867] hid-generic 0008:0006:0007.0044: unknown main item tag 0x0 [ 1911.817694][ T867] hid-generic 0008:0006:0007.0044: unknown main item tag 0x0 [ 1911.825291][ T867] hid-generic 0008:0006:0007.0044: unknown main item tag 0x0 [ 1911.832816][ T867] hid-generic 0008:0006:0007.0044: unknown main item tag 0x0 [ 1911.840491][ T867] hid-generic 0008:0006:0007.0044: unknown main item tag 0x0 [ 1911.848301][ T867] hid-generic 0008:0006:0007.0044: unknown main item tag 0x0 [ 1911.855791][ T867] hid-generic 0008:0006:0007.0044: unknown main item tag 0x0 [ 1911.869998][ T867] hid-generic 0008:0006:0007.0044: unknown main item tag 0x0 [ 1911.885449][ T867] hid-generic 0008:0006:0007.0044: unknown main item tag 0x0 [ 1911.902731][ T867] hid-generic 0008:0006:0007.0044: hidraw0: HID v0.0b Device [syz1] on syz1 [ 1911.946497][ T7453] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14177'. [ 1911.977756][ T7455] fido_id[7455]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1912.078560][ T7464] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14181'. [ 1912.852967][ T7482] hub 8-0:1.0: USB hub found [ 1912.858801][ T7482] hub 8-0:1.0: 1 port detected [ 1913.518437][ T7491] loop5: detected capacity change from 0 to 512 [ 1913.791900][ T7491] EXT4-fs (loop5): Ignoring removed bh option [ 1913.970849][ T7491] EXT4-fs (loop5): mounted filesystem without journal. Opts: i_version,nogrpid,bh,,errors=continue. Quota mode: writeback. [ 1914.001264][ T30] kauditd_printk_skb: 74 callbacks suppressed [ 1914.001280][ T30] audit: type=1326 audit(1913.310:7335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7500 comm="syz.2.14194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0da064cbe9 code=0x7ffc0000 [ 1914.031970][ T30] audit: type=1326 audit(1913.348:7336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7500 comm="syz.2.14194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0da064cbe9 code=0x7ffc0000 [ 1914.055893][ T30] audit: type=1326 audit(1913.348:7337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7500 comm="syz.2.14194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f0da064cbe9 code=0x7ffc0000 [ 1914.088140][ T30] audit: type=1326 audit(1913.348:7338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7500 comm="syz.2.14194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0da064cbe9 code=0x7ffc0000 [ 1914.126686][ T30] audit: type=1326 audit(1913.348:7339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7500 comm="syz.2.14194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0da064cbe9 code=0x7ffc0000 [ 1914.186097][ T30] audit: type=1326 audit(1913.348:7340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7500 comm="syz.2.14194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f0da064cbe9 code=0x7ffc0000 [ 1914.217496][ T7510] loop0: detected capacity change from 0 to 512 [ 1914.220780][ T30] audit: type=1326 audit(1913.348:7341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7500 comm="syz.2.14194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0da064cbe9 code=0x7ffc0000 [ 1914.274505][ T7510] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1914.288012][ T30] audit: type=1326 audit(1913.348:7342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7500 comm="syz.2.14194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0da064cbe9 code=0x7ffc0000 [ 1914.292240][ T7512] serio: Serial port ptm0 [ 1914.322414][ T30] audit: type=1326 audit(1913.348:7343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7500 comm="syz.2.14194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7f0da064cbe9 code=0x7ffc0000 [ 1914.326566][ T7510] EXT4-fs (loop0): 1 truncate cleaned up [ 1914.346402][ T30] audit: type=1326 audit(1913.348:7344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7500 comm="syz.2.14194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0da064cbe9 code=0x7ffc0000 [ 1914.433206][ T7510] EXT4-fs (loop0): mounted filesystem without journal. Opts: i_version,nombcache,debug_want_extra_isize=0x0000000000000068,lazytime,block_validity,sysvgroups,,errors=continue. Quota mode: none. [ 1914.572116][T10212] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 1914.882257][T10212] usb 6-1: Using ep0 maxpacket: 16 [ 1914.980438][ T7556] loop0: detected capacity change from 0 to 1024 [ 1915.010590][T10212] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1915.022820][ T7556] EXT4-fs (loop0): Ignoring removed oldalloc option [ 1915.025447][T10212] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 1915.045203][ T7556] EXT4-fs (loop0): Ignoring removed bh option [ 1915.067004][ T7556] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1915.091779][ T7556] EXT4-fs (loop0): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,usrquota,data_err=ignore,mb_optimize_scan=0x0000000000000001,oldalloc,grpquota,noload,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 1915.224562][T10212] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1915.235498][T10212] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1915.244086][T10212] usb 6-1: Product: syz [ 1915.249110][T10212] usb 6-1: Manufacturer: syz [ 1915.253825][T10212] usb 6-1: SerialNumber: syz [ 1915.587814][ T7576] tipc: Started in network mode [ 1915.592865][ T7576] tipc: Node identity 7a51017204a4, cluster identity 4711 [ 1915.600522][ T7576] tipc: Enabled bearer , priority 0 [ 1915.607761][ T7576] device syzkaller0 entered promiscuous mode [ 1915.627471][ T7576] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1915.637659][ T7579] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14224'. [ 1915.653939][ T7576] tipc: Resetting bearer [ 1915.663228][ T7574] tipc: Resetting bearer [ 1915.674764][ T7574] tipc: Disabling bearer [ 1916.015425][T27353] usb 7-1: new high-speed USB device number 80 using dummy_hcd [ 1916.411032][T27353] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1916.422242][T27353] usb 7-1: config 0 has no interface number 0 [ 1916.431037][T27353] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1916.442365][T27353] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1916.452276][T27353] usb 7-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 1916.567969][T27353] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1916.580518][T27353] usb 7-1: config 0 descriptor?? [ 1917.835734][T19975] usb 6-1: USB disconnect, device number 59 [ 1919.522713][ T7657] netlink: 'syz.0.14259': attribute type 13 has an invalid length. [ 1919.853709][ T30] kauditd_printk_skb: 73 callbacks suppressed [ 1919.853745][ T30] audit: type=1326 audit(1918.783:7418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7651 comm="syz.6.14256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93762f0be9 code=0x7ffc0000 [ 1920.030125][ T30] audit: type=1326 audit(1918.829:7419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7651 comm="syz.6.14256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f93762f0be9 code=0x7ffc0000 [ 1920.054565][ T30] audit: type=1326 audit(1918.829:7420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7651 comm="syz.6.14256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93762f0be9 code=0x7ffc0000 [ 1920.077983][T27353] usbhid 7-1:0.1: can't add hid device: -71 [ 1920.083958][T27353] usbhid: probe of 7-1:0.1 failed with error -71 [ 1920.093139][ T30] audit: type=1326 audit(1918.839:7421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7651 comm="syz.6.14256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f93762f0be9 code=0x7ffc0000 [ 1920.140085][ T7668] tipc: Enabled bearer , priority 0 [ 1920.146711][ T30] audit: type=1326 audit(1918.839:7422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7651 comm="syz.6.14256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93762f0be9 code=0x7ffc0000 [ 1920.146746][ T30] audit: type=1400 audit(1918.839:7423): avc: denied { write } for pid=7658 comm="syz.2.14258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1920.146770][ T30] audit: type=1326 audit(1918.839:7424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7651 comm="syz.6.14256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f93762f0be9 code=0x7ffc0000 [ 1920.146793][ T30] audit: type=1326 audit(1918.839:7425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7651 comm="syz.6.14256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f93762f0c23 code=0x7ffc0000 [ 1920.146818][ T30] audit: type=1326 audit(1918.867:7426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7651 comm="syz.6.14256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f93762ef69f code=0x7ffc0000 [ 1920.146843][ T30] audit: type=1326 audit(1918.895:7427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7651 comm="syz.6.14256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f93762f0c77 code=0x7ffc0000 [ 1920.284488][T27353] usb 7-1: USB disconnect, device number 80 [ 1920.302348][ T7672] device syzkaller0 entered promiscuous mode [ 1920.321871][ T7668] tipc: Resetting bearer [ 1920.338128][ T7667] tipc: Resetting bearer [ 1920.345682][ T7667] tipc: Disabling bearer [ 1920.567370][ T7698] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14273'. [ 1920.577341][ T7698] netlink: 28 bytes leftover after parsing attributes in process `syz.2.14273'. [ 1921.593138][ T7712] netlink: 'syz.6.14278': attribute type 13 has an invalid length. [ 1922.013971][ T7719] netlink: 'syz.1.14280': attribute type 13 has an invalid length. [ 1922.038387][ T7719] gretap0: refused to change device tx_queue_len [ 1922.056675][ T7719] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1923.585374][ T7759] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7759 comm=syz.0.14295 [ 1923.916593][ T7762] loop5: detected capacity change from 0 to 512 [ 1923.968907][ T7762] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 1923.978656][ T7762] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1923.991108][ T7762] EXT4-fs error (device loop5): ext4_acquire_dquot:6198: comm syz.5.14296: Failed to acquire dquot type 1 [ 1924.027739][ T7762] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.14296: bg 0: block 40: padding at end of block bitmap is not set [ 1924.054361][ T7762] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 1924.075500][ T7762] EXT4-fs (loop5): 1 truncate cleaned up [ 1924.082856][ T7762] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1924.157543][ T7783] loop0: detected capacity change from 0 to 256 [ 1924.205623][ T7783] SELinux: security_context_str_to_sid(unconfined_u) failed for (dev ?, type ?) errno=-22 [ 1924.215829][ T7783] exfat: Unknown parameter 'fsmagic' [ 1925.262022][ T7802] loop5: detected capacity change from 0 to 512 [ 1925.291486][ T30] kauditd_printk_skb: 54 callbacks suppressed [ 1925.291504][ T30] audit: type=1400 audit(1923.871:7480): avc: denied { read } for pid=7805 comm="syz.0.14313" name="ppp" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1925.350758][ T7802] EXT4-fs (loop5): Quota format mount options ignored when QUOTA feature is enabled [ 1925.383179][ T30] audit: type=1400 audit(1923.918:7481): avc: denied { create } for pid=7807 comm="syz.6.14314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1925.419207][ T7802] EXT4-fs (loop5): mounted filesystem without journal. Opts: noauto_da_alloc,jqfmt=vfsold,noquota,norecovery,bsddf,,errors=continue. Quota mode: writeback. [ 1925.455737][ T30] audit: type=1400 audit(1924.021:7482): avc: denied { ioctl } for pid=7805 comm="syz.0.14313" path="/dev/ppp" dev="devtmpfs" ino=154 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1925.506103][ T30] audit: type=1400 audit(1924.058:7483): avc: denied { create } for pid=7797 comm="syz.5.14307" name=131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D338 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 1925.587676][ T30] audit: type=1400 audit(1924.077:7484): avc: denied { ioctl } for pid=7821 comm="syz.1.14318" path="socket:[160878]" dev="sockfs" ino=160878 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1925.684574][ T30] audit: type=1400 audit(1924.245:7485): avc: denied { remount } for pid=7828 comm="syz.5.14321" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1925.718120][ T7831] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14322'. [ 1925.772642][ T30] audit: type=1326 audit(1924.329:7486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7836 comm="syz.6.14325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93762f0be9 code=0x7ffc0000 [ 1925.827200][ T7839] netlink: 28 bytes leftover after parsing attributes in process `syz.5.14326'. [ 1925.843637][ T30] audit: type=1326 audit(1924.376:7487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7836 comm="syz.6.14325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93762f0be9 code=0x7ffc0000 [ 1925.920062][ T30] audit: type=1326 audit(1924.376:7488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7836 comm="syz.6.14325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f93762f0be9 code=0x7ffc0000 [ 1925.974797][ T7847] loop5: detected capacity change from 0 to 1024 [ 1925.981433][ T30] audit: type=1326 audit(1924.376:7489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7836 comm="syz.6.14325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93762f0be9 code=0x7ffc0000 [ 1926.065170][ T7847] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1926.154817][ T7863] loop0: detected capacity change from 0 to 256 [ 1926.300706][ T7847] EXT4-fs error (device loop5): mb_free_blocks:1865: group 0, inode 18: block 113:freeing already freed block (bit 7); block bitmap corrupt. [ 1926.547558][ T7893] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14350'. [ 1926.557240][ T7893] netlink: 28 bytes leftover after parsing attributes in process `syz.1.14350'. [ 1927.441567][ T7927] netlink: 'syz.5.14363': attribute type 13 has an invalid length. [ 1927.518419][ T7933] loop5: detected capacity change from 0 to 1024 [ 1927.563199][ T7933] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1927.581364][ T7933] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 1927.607436][ T7933] JBD2: no valid journal superblock found [ 1927.625075][ T7937] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14367'. [ 1927.634313][ T7933] EXT4-fs (loop5): error loading journal [ 1927.642119][ T7937] netlink: 28 bytes leftover after parsing attributes in process `syz.1.14367'. [ 1927.706709][ T7947] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14373'. [ 1927.774551][ T7949] hub 8-0:1.0: USB hub found [ 1927.779734][ T7949] hub 8-0:1.0: 1 port detected [ 1929.748564][ T7984] 9pnet: Could not find request transport: rdma [ 1929.772971][ T7990] loop5: detected capacity change from 0 to 2048 [ 1929.801376][ T7992] loop2: detected capacity change from 0 to 1024 [ 1929.836953][ T7990] EXT4-fs (loop5): mounted filesystem without journal. Opts: nodioread_nolock,noload,acl,resuid=0x0000000000000000,,errors=continue. Quota mode: none. [ 1929.878044][ T7990] EXT4-fs (loop5): shut down requested (1) [ 1929.888791][ T7990] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=12 [ 1929.902648][ T7990] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=12 [ 1929.921600][ T7992] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1929.955175][ T8012] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8012 comm=syz.0.14400 [ 1930.051351][ T8016] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14396'. [ 1930.178342][ T8021] loop2: detected capacity change from 0 to 1024 [ 1930.240417][ T8021] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1930.517912][ T8035] loop2: detected capacity change from 0 to 512 [ 1930.548263][ T8035] EXT4-fs (loop2): Ignoring removed oldalloc option [ 1930.555455][ T8035] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1930.595122][ T8035] EXT4-fs error (device loop2): ext4_xattr_inode_iget:400: comm syz.2.14408: Parent and EA inode have the same ino 15 [ 1930.618259][ T8035] EXT4-fs error (device loop2): ext4_xattr_inode_iget:400: comm syz.2.14408: Parent and EA inode have the same ino 15 [ 1930.632425][ T8035] EXT4-fs (loop2): 1 orphan inode deleted [ 1930.644413][ T8035] EXT4-fs (loop2): mounted filesystem without journal. Opts: nojournal_checksum,nolazytime,debug_want_extra_isize=0x000000000000005c,dioread_nolock,usrjquota=,oldalloc,sysvgroups,,errors=continue. Quota mode: none. [ 1930.998038][ T8060] loop2: detected capacity change from 0 to 512 [ 1931.016893][ T30] kauditd_printk_skb: 225 callbacks suppressed [ 1931.016907][ T30] audit: type=1400 audit(2442.231:7715): avc: denied { mounton } for pid=8059 comm="syz.2.14419" path="/522/bus" dev="devtmpfs" ino=1866 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1931.086912][ T8060] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1931.096940][ T8065] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=8065 comm=syz.1.14421 [ 1931.111133][ T8060] EXT4-fs (loop2): failed to initialize system zone (-117) [ 1931.118476][ T8060] EXT4-fs (loop2): mount failed [ 1931.224386][ T30] audit: type=1326 audit(2442.427:7716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8069 comm="syz.1.14423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc829b97be9 code=0x7ffc0000 [ 1931.276188][ T30] audit: type=1326 audit(2442.455:7717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8069 comm="syz.1.14423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc829b97be9 code=0x7ffc0000 [ 1931.310414][ T30] audit: type=1326 audit(2442.455:7718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8069 comm="syz.1.14423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fc829b97be9 code=0x7ffc0000 [ 1931.351096][ T30] audit: type=1326 audit(2442.455:7719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8069 comm="syz.1.14423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc829b97be9 code=0x7ffc0000 [ 1931.420545][ T30] audit: type=1326 audit(2442.455:7720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8071 comm="syz.1.14423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc829bca4a5 code=0x7ffc0000 [ 1931.474478][ T30] audit: type=1400 audit(2442.455:7721): avc: denied { unmount } for pid=1039 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 1931.533305][ T30] audit: type=1326 audit(2442.474:7722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8069 comm="syz.1.14423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc829b97be9 code=0x7ffc0000 [ 1931.557814][ T8075] device wg2 entered promiscuous mode [ 1931.571020][ T867] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 1931.581197][ T30] audit: type=1326 audit(2442.474:7723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8069 comm="syz.1.14423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=312 compat=0 ip=0x7fc829b97be9 code=0x7ffc0000 [ 1931.627762][ T30] audit: type=1326 audit(2442.474:7724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8069 comm="syz.1.14423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc829b97be9 code=0x7ffc0000 [ 1931.966826][ T867] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1931.974885][ T867] usb 3-1: config 0 has no interface number 0 [ 1932.004933][ T867] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1932.029327][ T8105] netlink: 88 bytes leftover after parsing attributes in process `syz.1.14438'. [ 1932.038539][ T867] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1932.052011][ T867] usb 3-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 1932.064816][ T867] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1932.084340][ T867] usb 3-1: config 0 descriptor?? [ 1932.245897][ T8116] loop0: detected capacity change from 0 to 512 [ 1932.285775][ T8116] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1932.754590][ T8073] input: syz1 as /devices/virtual/input/input109 [ 1933.175904][ T867] usbhid 3-1:0.1: can't add hid device: -71 [ 1933.182684][ T867] usbhid: probe of 3-1:0.1 failed with error -71 [ 1933.208131][ T867] usb 3-1: USB disconnect, device number 73 [ 1933.214468][ T8134] loop5: detected capacity change from 0 to 1024 [ 1933.240612][ T8134] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1933.325964][ T8145] sit: non-ECT from 0.0.0.0 with TOS=0x3 [ 1933.414473][ T8134] EXT4-fs error (device loop5): mb_free_blocks:1865: group 0, inode 18: block 113:freeing already freed block (bit 7); block bitmap corrupt. [ 1933.511728][ T8169] syz.1.14466[8169] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1933.511807][ T8169] syz.1.14466[8169] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1933.644528][ T8189] loop0: detected capacity change from 0 to 1024 [ 1933.877620][ T8189] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1934.332846][ T8208] netlink: 28 bytes leftover after parsing attributes in process `syz.1.14480'. [ 1934.342007][ T8208] netem: change failed [ 1934.371251][ T8189] EXT4-fs error (device loop0): mb_free_blocks:1865: group 0, inode 18: block 113:freeing already freed block (bit 7); block bitmap corrupt. [ 1934.394478][ T8213] bridge0: port 2(bridge_slave_1) entered disabled state [ 1934.461323][ T8218] loop2: detected capacity change from 0 to 512 [ 1934.519084][ T8231] tc_dump_action: action bad kind [ 1934.549284][ T8218] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1934.573728][ T8241] loop5: detected capacity change from 0 to 1024 [ 1934.611553][ T8218] EXT4-fs error (device loop2): ext4_do_update_inode:5235: inode #2: comm syz.2.14486: corrupted inode contents [ 1934.634648][ T8241] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 1934.643584][ T8218] EXT4-fs error (device loop2): ext4_dirty_inode:6071: inode #2: comm syz.2.14486: mark_inode_dirty error [ 1934.645766][ T8241] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1934.669052][ T8218] EXT4-fs error (device loop2): ext4_do_update_inode:5235: inode #2: comm syz.2.14486: corrupted inode contents [ 1934.684885][ T8241] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.14494: bg 0: block 10: padding at end of block bitmap is not set [ 1934.701297][ T8241] EXT4-fs error (device loop5): ext4_acquire_dquot:6198: comm syz.5.14494: Failed to acquire dquot type 0 [ 1934.703691][ T8218] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #2: comm syz.2.14486: mark_inode_dirty error [ 1934.726150][ T8241] EXT4-fs error (device loop5): ext4_acquire_dquot:6198: comm syz.5.14494: Failed to acquire dquot type 0 [ 1934.738601][ T8248] EXT4-fs error (device loop2): ext4_do_update_inode:5235: inode #2: comm syz.2.14486: corrupted inode contents [ 1934.747870][ T8241] EXT4-fs error (device loop5): ext4_free_blocks:6223: comm syz.5.14494: Freeing blocks not in datazone - block = 0, count = 4096 [ 1934.764468][ T8248] EXT4-fs error (device loop2): ext4_dirty_inode:6071: inode #2: comm syz.2.14486: mark_inode_dirty error [ 1934.768625][ T8241] EXT4-fs error (device loop5): ext4_acquire_dquot:6198: comm syz.5.14494: Failed to acquire dquot type 0 [ 1934.789984][ T8241] EXT4-fs (loop5): 1 orphan inode deleted [ 1934.795992][ T8248] EXT4-fs error (device loop2): ext4_do_update_inode:5235: inode #2: comm syz.2.14486: corrupted inode contents [ 1934.808513][ T8241] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1934.864622][ T8218] EXT4-fs error (device loop2): ext4_do_update_inode:5235: inode #2: comm syz.2.14486: corrupted inode contents [ 1934.879374][ T8241] EXT4-fs error (device loop5): ext4_readdir:263: inode #2: block 16: comm syz.5.14494: path /486/file1: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 1934.899499][ T8218] EXT4-fs error (device loop2): ext4_setent:3709: inode #2: comm syz.2.14486: mark_inode_dirty error [ 1934.912674][ T8218] EXT4-fs error (device loop2): ext4_do_update_inode:5235: inode #2: comm syz.2.14486: corrupted inode contents [ 1937.436546][ T8288] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14511'. [ 1937.593201][ T30] kauditd_printk_skb: 115 callbacks suppressed [ 1937.593217][ T30] audit: type=1400 audit(2448.385:7831): avc: denied { bind } for pid=8301 comm="syz.2.14516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1937.610822][ T8300] loop5: detected capacity change from 0 to 2048 [ 1937.710598][ T30] audit: type=1326 audit(2448.497:7832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8304 comm="syz.6.14518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93762f0be9 code=0x7ffc0000 [ 1937.735239][ T8300] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1937.744762][ T30] audit: type=1326 audit(2448.497:7833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8304 comm="syz.6.14518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f93762f0be9 code=0x7ffc0000 [ 1937.894555][ T30] audit: type=1326 audit(2448.497:7834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8304 comm="syz.6.14518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93762f0be9 code=0x7ffc0000 [ 1937.996041][ T30] audit: type=1326 audit(2448.497:7835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8304 comm="syz.6.14518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f93762f0be9 code=0x7ffc0000 [ 1938.092581][ T30] audit: type=1326 audit(2448.497:7836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8304 comm="syz.6.14518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93762f0be9 code=0x7ffc0000 [ 1938.204498][ T8325] loop2: detected capacity change from 0 to 512 [ 1938.264973][ T30] audit: type=1326 audit(2448.497:7837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8304 comm="syz.6.14518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f93762f0be9 code=0x7ffc0000 [ 1938.924529][ T8331] loop5: detected capacity change from 0 to 1024 [ 1938.966068][ T30] audit: type=1326 audit(2448.497:7838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8304 comm="syz.6.14518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93762f0be9 code=0x7ffc0000 [ 1938.989478][ T30] audit: type=1326 audit(2448.497:7839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8304 comm="syz.6.14518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f93762f0be9 code=0x7ffc0000 [ 1939.014099][ T30] audit: type=1326 audit(2448.497:7840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8304 comm="syz.6.14518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93762f0be9 code=0x7ffc0000 [ 1939.115763][ T8325] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1939.164015][ T8325] EXT4-fs (loop2): 1 truncate cleaned up [ 1939.170356][ T8331] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1939.182564][ T8325] EXT4-fs (loop2): mounted filesystem without journal. Opts: abort,errors=remount-ro,. Quota mode: none. [ 1939.372205][ T8331] EXT4-fs error (device loop5): mb_free_blocks:1865: group 0, inode 18: block 113:freeing already freed block (bit 7); block bitmap corrupt. [ 1939.661543][ T8366] syz.5.14538[8366] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1939.661837][ T8366] syz.5.14538[8366] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1939.690698][ T8366] netlink: 8 bytes leftover after parsing attributes in process `syz.5.14538'. [ 1941.509048][ T8406] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 1941.773826][ T8414] loop0: detected capacity change from 0 to 256 [ 1942.051849][ T8414] device wg2 entered promiscuous mode [ 1942.950004][ T30] kauditd_printk_skb: 79 callbacks suppressed [ 1942.950022][ T30] audit: type=1326 audit(2453.398:7920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8424 comm="syz.6.14562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93762f0be9 code=0x7ffc0000 [ 1942.990851][ T30] audit: type=1326 audit(2453.426:7921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8424 comm="syz.6.14562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93762f0be9 code=0x7ffc0000 [ 1943.058475][ T30] audit: type=1326 audit(2453.492:7922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8424 comm="syz.6.14562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f93762f0be9 code=0x7ffc0000 [ 1943.124544][ T8434] SELinux: security_context_str_to_sid(user_u) failed for (dev ?, type ?) errno=-22 [ 1943.168686][ T30] audit: type=1326 audit(2453.492:7923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8424 comm="syz.6.14562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93762f0be9 code=0x7ffc0000 [ 1943.186878][ T8434] SELinux: security_context_str_to_sid(user_u) failed for (dev tmpfs, type tmpfs) errno=-22 [ 1943.216079][ T8445] loop5: detected capacity change from 0 to 512 [ 1943.222619][ T30] audit: type=1326 audit(2453.492:7924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8424 comm="syz.6.14562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93762f0be9 code=0x7ffc0000 [ 1943.457067][ T8450] loop2: detected capacity change from 0 to 512 [ 1943.481487][ T8445] EXT4-fs error (device loop5): ext4_ext_check_inode:501: inode #3: comm syz.5.14570: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 1943.557931][ T30] audit: type=1400 audit(2453.529:7925): avc: denied { unmount } for pid=1984 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 1943.578109][ T8445] EXT4-fs error (device loop5): ext4_quota_enable:6409: comm syz.5.14570: Bad quota inode: 3, type: 0 [ 1943.592515][ T30] audit: type=1326 audit(2453.529:7926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8431 comm="syz.2.14563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0da064cbe9 code=0x7ffc0000 [ 1943.620150][ T8445] EXT4-fs warning (device loop5): ext4_enable_quotas:6450: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 1943.636628][ T8450] EXT4-fs (loop2): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000000,mb_optimize_scan=0x0000000000000001,stripe=0x0000000000000004,,errors=continue. Quota mode: writeback. [ 1943.657171][ T8445] EXT4-fs (loop5): mount failed [ 1943.662143][ T30] audit: type=1326 audit(2453.529:7927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8431 comm="syz.2.14563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0da064cbe9 code=0x7ffc0000 [ 1943.731878][ T30] audit: type=1326 audit(2453.529:7928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8431 comm="syz.2.14563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0da064cbe9 code=0x7ffc0000 [ 1943.759169][ T30] audit: type=1326 audit(2453.538:7929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8431 comm="syz.2.14563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0da064cbe9 code=0x7ffc0000 [ 1943.867297][ T8457] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8457 comm=syz.2.14574 [ 1943.896392][ T8461] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14575'. [ 1944.052527][ T8488] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14588'. [ 1944.116493][ T8499] syz.6.14594[8499] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1944.116573][ T8499] syz.6.14594[8499] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1944.245516][ T8517] netlink: 8 bytes leftover after parsing attributes in process `syz.6.14602'. [ 1944.572387][T11118] usb 7-1: new high-speed USB device number 81 using dummy_hcd [ 1944.968054][T11118] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1944.976263][T11118] usb 7-1: config 0 has no interface number 0 [ 1944.982679][T11118] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1944.993952][T11118] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1945.011469][T11118] usb 7-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 1945.020707][T11118] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1945.034687][T11118] usb 7-1: config 0 descriptor?? [ 1945.131909][ T8536] netlink: 'syz.2.14610': attribute type 13 has an invalid length. [ 1945.525364][ T8519] input: syz1 as /devices/virtual/input/input112 [ 1945.844783][T11118] usbhid 7-1:0.1: can't add hid device: -71 [ 1945.850917][T11118] usbhid: probe of 7-1:0.1 failed with error -71 [ 1945.870798][T11118] usb 7-1: USB disconnect, device number 81 [ 1946.564696][ T8581] netlink: 4 bytes leftover after parsing attributes in process `syz.6.14629'. [ 1946.576340][ T8583] loop0: detected capacity change from 0 to 1024 [ 1946.584254][ T8581] netlink: 12 bytes leftover after parsing attributes in process `syz.6.14629'. [ 1946.638157][ T8583] EXT4-fs (loop0): Ignoring removed orlov option [ 1946.647212][ T8583] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 1946.655894][ T8589] loop2: detected capacity change from 0 to 512 [ 1946.670998][ T8583] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,noblock_validity,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 1946.696131][ T8589] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue. Quota mode: writeback. [ 1948.192683][ T8663] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14665'. [ 1948.309670][ T30] kauditd_printk_skb: 300 callbacks suppressed [ 1948.309686][ T30] audit: type=1326 audit(2458.402:8230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8636 comm="syz.2.14653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0da0643ba7 code=0x7ffc0000 [ 1948.338897][ T30] audit: type=1326 audit(2458.402:8231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8636 comm="syz.2.14653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0da05e8dd9 code=0x7ffc0000 [ 1948.361858][ T30] audit: type=1326 audit(2458.402:8232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8636 comm="syz.2.14653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0da064cbe9 code=0x7ffc0000 [ 1948.385229][ T30] audit: type=1326 audit(2458.411:8233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8636 comm="syz.2.14653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0da0643ba7 code=0x7ffc0000 [ 1948.408184][ T30] audit: type=1326 audit(2458.411:8234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8636 comm="syz.2.14653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0da05e8dd9 code=0x7ffc0000 [ 1948.431329][ T30] audit: type=1326 audit(2458.411:8235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8636 comm="syz.2.14653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0da064cbe9 code=0x7ffc0000 [ 1948.454631][ T30] audit: type=1326 audit(2458.421:8236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8636 comm="syz.2.14653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0da0643ba7 code=0x7ffc0000 [ 1948.477749][ T30] audit: type=1326 audit(2458.421:8237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8636 comm="syz.2.14653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0da05e8dd9 code=0x7ffc0000 [ 1948.500832][ T30] audit: type=1326 audit(2458.421:8238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8636 comm="syz.2.14653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0da064cbe9 code=0x7ffc0000 [ 1948.537022][ T30] audit: type=1326 audit(2458.439:8239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8636 comm="syz.2.14653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0da0643ba7 code=0x7ffc0000 [ 1948.616521][ T8673] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1948.707422][ T8679] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14672'. [ 1949.062983][T27353] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 1949.351829][T27353] usb 3-1: device descriptor read/64, error -71 [ 1949.768688][T27353] usb 3-1: device descriptor read/64, error -71 [ 1950.133611][T27353] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 1950.167331][ T8721] 9pnet: Insufficient options for proto=fd [ 1950.249230][ T8735] loop0: detected capacity change from 0 to 512 [ 1950.339119][ T8735] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 1950.368625][ T8735] EXT4-fs error (device loop0): ext4_orphan_get:1427: comm syz.0.14697: bad orphan inode 15 [ 1950.378995][ T8735] ext4_test_bit(bit=14, block=18) = 1 [ 1950.384401][ T8735] is_bad_inode(inode)=0 [ 1950.388572][ T8735] NEXT_ORPHAN(inode)=1023 [ 1950.393399][ T8735] max_ino=32 [ 1950.396621][ T8735] i_nlink=0 [ 1950.399841][ T8735] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1950.431824][T27353] usb 3-1: device descriptor read/64, error -71 [ 1950.923499][T27353] usb 3-1: device descriptor read/64, error -71 [ 1951.052003][T27353] usb usb3-port1: attempt power cycle [ 1951.674929][ T8785] loop5: detected capacity change from 0 to 512 [ 1951.803913][ T8785] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1952.120898][T27353] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 1952.541795][ T8803] loop5: detected capacity change from 0 to 8192 [ 1952.582831][ T8808] syz.6.14725[8808] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1952.582892][ T8808] syz.6.14725[8808] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1952.594712][T26974] loop5: p1 p2 p3 p4 [ 1952.610799][T26974] loop5: p1 size 3523149824 extends beyond EOD, truncated [ 1952.619175][T26974] loop5: p2 start 4293394688 is beyond EOD, truncated [ 1952.626110][T26974] loop5: p3 start 150994944 is beyond EOD, truncated [ 1952.632882][T26974] loop5: p4 size 50331648 extends beyond EOD, truncated [ 1952.642451][ T8803] loop5: p1 p2 p3 p4 [ 1952.646928][ T8803] loop5: p1 size 3523149824 extends beyond EOD, truncated [ 1952.655427][ T8803] loop5: p2 start 4293394688 is beyond EOD, truncated [ 1952.663480][ T8803] loop5: p3 start 150994944 is beyond EOD, truncated [ 1952.670301][ T8803] loop5: p4 size 50331648 extends beyond EOD, truncated [ 1952.741228][T27353] usb 3-1: device not accepting address 76, error -71 [ 1952.767583][T26974] udevd[26974]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 1952.767586][T27095] udevd[27095]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 1952.814271][T27095] udevd[27095]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 1952.822617][T26974] udevd[26974]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 1953.209747][ T8824] loop2: detected capacity change from 0 to 4096 [ 1953.294269][ T8824] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1954.547990][ T867] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 1954.561061][ T30] kauditd_printk_skb: 168 callbacks suppressed [ 1954.561076][ T30] audit: type=1400 audit(2464.257:8408): avc: denied { mounton } for pid=8832 comm="syz.6.14735" path="/491/file0" dev="tmpfs" ino=2600 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 1954.592681][ T8833] tmpfs: Unsupported parameter 'mpol' [ 1954.651345][ T30] audit: type=1400 audit(2464.331:8409): avc: denied { create } for pid=8834 comm="syz.1.14737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1954.664183][ T8837] loop2: detected capacity change from 0 to 512 [ 1954.679421][ T8835] netlink: 'syz.1.14737': attribute type 13 has an invalid length. [ 1954.691014][ T8837] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.14736: inode #1: comm syz.2.14736: iget: illegal inode # [ 1954.706266][ T8837] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.14736: error while reading EA inode 1 err=-117 [ 1954.719075][ T8837] EXT4-fs (loop2): 1 orphan inode deleted [ 1954.725261][ T8837] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1954.743319][ T8835] bridge0: port 1(bridge_slave_0) entered disabled state [ 1954.858095][ T867] usb 6-1: device descriptor read/64, error -71 [ 1954.879490][T10212] usb 7-1: new high-speed USB device number 82 using dummy_hcd [ 1955.042927][ T8859] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14747'. [ 1955.052406][ T8859] netlink: 28 bytes leftover after parsing attributes in process `syz.1.14747'. [ 1955.146794][T19975] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 1955.146817][T10212] usb 7-1: Using ep0 maxpacket: 8 [ 1955.350241][T10212] usb 7-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice=b0.23 [ 1955.359890][T10212] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1955.408511][T10212] usb 7-1: config 0 descriptor?? [ 1955.457947][T10212] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 1955.510436][ T867] usb 6-1: device descriptor read/64, error -71 [ 1955.649260][T19975] usb 3-1: Using ep0 maxpacket: 16 [ 1955.674037][T28867] usb 7-1: USB disconnect, device number 82 [ 1955.777628][T19975] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1955.787908][T19975] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 1955.798934][ T867] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 1955.919597][ T8871] device bridge0 entered promiscuous mode [ 1955.925790][ T8871] bridge0: port 3(macsec0) entered blocking state [ 1955.932560][ T8871] bridge0: port 3(macsec0) entered disabled state [ 1955.940061][ T8871] device bridge0 left promiscuous mode [ 1955.959530][T19975] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1955.968780][T19975] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1955.977071][T19975] usb 3-1: Product: syz [ 1955.981301][T19975] usb 3-1: Manufacturer: syz [ 1955.985913][T19975] usb 3-1: SerialNumber: syz [ 1956.012818][ T30] audit: type=1326 audit(2465.603:8410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8872 comm="syz.0.14752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76f33a2be9 code=0x7ffc0000 [ 1956.048793][ T30] audit: type=1326 audit(2465.603:8411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8872 comm="syz.0.14752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f76f33a2be9 code=0x7ffc0000 [ 1956.071955][ T30] audit: type=1326 audit(2465.603:8412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8872 comm="syz.0.14752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76f33a2be9 code=0x7ffc0000 [ 1956.096929][ T8877] netlink: 'syz.0.14754': attribute type 13 has an invalid length. [ 1956.100447][ T30] audit: type=1326 audit(2465.603:8413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8872 comm="syz.0.14752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f76f33a2be9 code=0x7ffc0000 [ 1956.127961][ T867] usb 6-1: device descriptor read/64, error -71 [ 1956.134352][ T30] audit: type=1326 audit(2465.603:8414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8872 comm="syz.0.14752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76f33a2be9 code=0x7ffc0000 [ 1956.157654][ T30] audit: type=1326 audit(2465.603:8415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8872 comm="syz.0.14752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f76f33a2be9 code=0x7ffc0000 [ 1956.181036][ T30] audit: type=1326 audit(2465.603:8416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8872 comm="syz.0.14752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76f33a2be9 code=0x7ffc0000 [ 1956.215613][ T30] audit: type=1326 audit(2465.603:8417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8872 comm="syz.0.14752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f76f33a2be9 code=0x7ffc0000 [ 1956.831498][ T8903] netlink: 'syz.1.14766': attribute type 13 has an invalid length. [ 1956.904940][ T8903] device veth0_vlan left promiscuous mode [ 1956.912274][ T8903] device veth0_vlan entered promiscuous mode [ 1956.923154][ T8903] device veth1_macvtap left promiscuous mode [ 1956.931699][ T8903] device veth1_macvtap entered promiscuous mode [ 1956.943387][ T590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1956.952724][ T590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1956.966067][ T590] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1956.974833][ T590] bridge0: port 1(bridge_slave_0) entered blocking state [ 1956.981910][ T590] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1956.990666][ T590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1957.000827][ T590] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 1957.009554][ T590] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1957.019188][ T590] bridge0: port 2(bridge_slave_1) entered blocking state [ 1957.026271][ T590] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1957.034044][ T590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1957.043183][ T590] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 1957.052247][ T590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1957.061223][ T590] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 1957.069936][ T590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1957.079086][ T590] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1957.088103][ T590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1957.097051][ T590] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1957.106854][ T590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1957.139006][ T590] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1957.147742][ T590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1957.156181][ T590] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1957.164623][ T590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1957.173159][ T590] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1957.181735][ T590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1957.200549][ T590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1957.224025][ T590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1957.244249][ T590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1957.253572][ T590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1957.263153][ T590] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1957.276968][ T590] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1957.284568][ T590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1957.293519][ T590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1957.301960][ T590] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1957.311242][ T590] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1957.876690][ T8958] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 1958.083358][T11118] usb 3-1: USB disconnect, device number 78 [ 1958.160629][ T8974] 9pnet: Could not find request transport: 0xffffffffffffffff [ 1958.393144][ T8986] loop2: detected capacity change from 0 to 512 [ 1958.516553][ T8986] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1958.558102][ T8989] loop0: detected capacity change from 0 to 512 [ 1958.570891][ T8986] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1958.592159][ T8991] loop5: detected capacity change from 0 to 1024 [ 1958.601519][ T8989] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 1958.621772][ T8989] EXT4-fs error (device loop0): ext4_get_journal_inode:5149: comm syz.0.14800: inode #1661: comm syz.0.14800: iget: illegal inode # [ 1958.639118][ T8986] EXT4-fs error (device loop2): ext4_orphan_get:1427: comm syz.2.14798: bad orphan inode 131083 [ 1958.650096][ T8989] EXT4-fs (loop0): no journal found [ 1958.656088][ T8989] EXT4-fs (loop0): can't get journal size [ 1958.665868][ T8989] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 1958.673367][ T8991] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1958.675595][ T8986] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,noload,,errors=continue. Quota mode: none. [ 1958.691690][ T8989] [EXT4 FS bs=1024, gc=1, bpg=4096, ipg=32, mo=8016c118, mo2=0000] [ 1958.793480][ T8989] EXT4-fs (loop0): Errors on filesystem, clearing orphan list. [ 1958.806068][ T8991] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:3876: comm syz.5.14801: Allocating blocks 385-513 which overlap fs metadata [ 1958.821687][ T8989] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,grpjquota=,debug,noload,jqfmt=vfsv1,noblock_validity,grpquota,max_dir_size_kb=0x0000000000000002,usrjquota=,,errors=continue. Quota mode: writeback. [ 1958.847203][ T8998] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 1958.854971][ T8998] SELinux: failed to load policy [ 1958.874210][ T8991] EXT4-fs (loop5): pa ffff8881358393f0: logic 16, phys. 129, len 24 [ 1958.882362][ T8991] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:4893: group 0, free 0, pa_free 8 [ 1958.973631][ T9004] netlink: 4 bytes leftover after parsing attributes in process `syz.5.14804'. [ 1959.590485][ T9034] loop0: detected capacity change from 0 to 1024 [ 1959.650870][ T9034] EXT4-fs error (device loop0): ext4_map_blocks:740: inode #3: block 1: comm syz.0.14818: lblock 1 mapped to illegal pblock 1 (length 1) [ 1959.697191][ T9034] EXT4-fs error (device loop0): ext4_acquire_dquot:6198: comm syz.0.14818: Failed to acquire dquot type 0 [ 1959.733963][ T9034] EXT4-fs error (device loop0): ext4_free_blocks:6223: comm syz.0.14818: Freeing blocks not in datazone - block = 0, count = 4096 [ 1959.774953][ T9034] EXT4-fs error (device loop0): ext4_read_inode_bitmap:140: comm syz.0.14818: Invalid inode bitmap blk 0 in block_group 0 [ 1959.788109][ T590] EXT4-fs error (device loop0): ext4_map_blocks:630: inode #3: block 1: comm kworker/u4:22: lblock 1 mapped to illegal pblock 1 (length 1) [ 1959.808722][ T9034] EXT4-fs error (device loop0) in ext4_free_inode:362: Corrupt filesystem [ 1959.814172][ T590] EXT4-fs error (device loop0): ext4_release_dquot:6234: comm kworker/u4:22: Failed to release dquot type 0 [ 1959.835104][ T9034] EXT4-fs (loop0): 1 orphan inode deleted [ 1959.844225][ T9034] EXT4-fs (loop0): mounted filesystem without journal. Opts: €; ,errors=continue. Quota mode: writeback. [ 1959.959774][ T30] kauditd_printk_skb: 156 callbacks suppressed [ 1959.959790][ T30] audit: type=1326 audit(2469.307:8571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9045 comm="syz.2.14823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0da064cbe9 code=0x7ffc0000 [ 1959.990328][ T30] audit: type=1326 audit(2469.307:8572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9045 comm="syz.2.14823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0da064cbe9 code=0x7ffc0000 [ 1960.016121][ T30] audit: type=1326 audit(2469.307:8573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9045 comm="syz.2.14823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0da064cbe9 code=0x7ffc0000 [ 1960.041772][ T30] audit: type=1326 audit(2469.307:8574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9045 comm="syz.2.14823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0da064cbe9 code=0x7ffc0000 [ 1960.072976][ T9050] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14825'. [ 1960.088421][ T30] audit: type=1326 audit(2469.307:8575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9045 comm="syz.2.14823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0da064cbe9 code=0x7ffc0000 [ 1960.117996][ T30] audit: type=1326 audit(2469.307:8576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9045 comm="syz.2.14823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f0da064cbe9 code=0x7ffc0000 [ 1960.142259][ T30] audit: type=1326 audit(2469.307:8577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9045 comm="syz.2.14823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0da064cbe9 code=0x7ffc0000 [ 1960.203081][ T30] audit: type=1400 audit(2469.522:8578): avc: denied { create } for pid=9057 comm="syz.1.14829" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1960.233147][ T30] audit: type=1400 audit(2469.522:8579): avc: denied { mounton } for pid=9057 comm="syz.1.14829" path="/598/file0" dev="tmpfs" ino=3157 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1960.305270][ T30] audit: type=1400 audit(2469.522:8580): avc: denied { mount } for pid=9057 comm="syz.1.14829" name="/" dev="ramfs" ino=164470 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 1960.377384][ T9069] device syzkaller0 entered promiscuous mode [ 1960.489512][ T9083] loop2: detected capacity change from 0 to 128 [ 1960.520282][ T9091] syz.6.14844[9091] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1960.520367][ T9091] syz.6.14844[9091] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1960.552129][ T9095] netlink: 'syz.0.14846': attribute type 13 has an invalid length. [ 1960.768375][ T9121] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14858'. [ 1960.955132][ T9139] loop5: detected capacity change from 0 to 512 [ 1960.980224][ T9139] EXT4-fs (loop5): Ignoring removed oldalloc option [ 1960.994240][ T9139] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1961.032876][ T9139] EXT4-fs (loop5): 1 truncate cleaned up [ 1961.043188][ T9139] EXT4-fs (loop5): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000fff,inode_readahead_blks=0x0000000000000040,oldalloc,errors=remount-ro,minixdf,. Quota mode: none. [ 1961.180970][ T9151] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14871'. [ 1961.455413][ T9159] bridge0: port 1(bridge_slave_0) entered blocking state [ 1961.462544][ T9159] bridge0: port 1(bridge_slave_0) entered disabled state [ 1961.470366][ T9159] device bridge_slave_0 entered promiscuous mode [ 1961.485246][ T9159] bridge0: port 2(bridge_slave_1) entered blocking state [ 1961.492675][ T9159] bridge0: port 2(bridge_slave_1) entered disabled state [ 1961.502384][ T9159] device bridge_slave_1 entered promiscuous mode [ 1962.273948][ T7485] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1962.282003][ T7485] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1962.297254][ T7485] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1962.306032][ T7485] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1962.326991][ T7485] bridge0: port 1(bridge_slave_0) entered blocking state [ 1962.334396][ T7485] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1962.352589][ T7485] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1962.361411][ T7485] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1962.371966][ T7485] bridge0: port 2(bridge_slave_1) entered blocking state [ 1962.379074][ T7485] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1962.386913][ T7485] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1962.626770][ T9190] serio: Serial port ptm0 [ 1962.757605][ T7485] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1962.768375][ T7485] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1962.785426][ T7485] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1962.810516][ T7485] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1962.838572][ T7485] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1962.847720][ T7485] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1962.860322][ T9159] device veth0_vlan entered promiscuous mode [ 1962.878154][ T590] device bridge_slave_1 left promiscuous mode [ 1962.887458][ T590] bridge0: port 2(bridge_slave_1) entered disabled state [ 1962.900844][ T590] device bridge_slave_0 left promiscuous mode [ 1962.900922][ T590] bridge0: port 1(bridge_slave_0) entered disabled state [ 1962.901876][ T590] device veth1_macvtap left promiscuous mode [ 1962.901911][ T590] device veth0_vlan left promiscuous mode [ 1963.080215][ T9216] hub 8-0:1.0: USB hub found [ 1963.084966][ T9216] hub 8-0:1.0: 1 port detected [ 1963.092826][ T7485] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1963.100939][ T7485] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1963.109201][ T7485] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1963.116814][ T7485] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1963.126444][ T9213] netlink: 'syz.0.14893': attribute type 13 has an invalid length. [ 1963.146085][ T9159] device veth1_macvtap entered promiscuous mode [ 1963.159824][ T7485] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1963.171497][ T7485] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1963.180583][ T7485] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1963.193150][ T7485] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1963.201756][ T7485] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1963.229344][ T9221] ================================================================== [ 1963.237486][ T9221] BUG: KASAN: slab-out-of-bounds in tc_setup_flow_action+0x870/0x3240 [ 1963.245670][ T9221] Read of size 8 at addr ffff88811c30a7c0 by task syz.0.14898/9221 [ 1963.253570][ T9221] [ 1963.255910][ T9221] CPU: 1 PID: 9221 Comm: syz.0.14898 Not tainted 5.15.189-syzkaller-android13-5.15.189_r00 #0 [ 1963.266156][ T9221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1963.276318][ T9221] Call Trace: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1963.279631][ T9221] [ 1963.282671][ T9221] __dump_stack+0x21/0x30 [ 1963.287021][ T9221] dump_stack_lvl+0xee/0x150 [ 1963.291636][ T9221] ? show_regs_print_info+0x20/0x20 [ 1963.296850][ T9221] ? load_image+0x3a0/0x3a0 [ 1963.301385][ T9221] print_address_description+0x7f/0x2c0 [ 1963.306957][ T9221] ? tc_setup_flow_action+0x870/0x3240 [ 1963.312439][ T9221] kasan_report+0xf1/0x140 [ 1963.316878][ T9221] ? tc_setup_flow_action+0x870/0x3240 [ 1963.322376][ T9221] __asan_report_load8_noabort+0x14/0x20 [ 1963.328049][ T9221] tc_setup_flow_action+0x870/0x3240 [ 1963.333370][ T9221] mall_replace_hw_filter+0x293/0x820 [ 1963.338776][ T9221] ? pcpu_block_update_hint_alloc+0x8c1/0xc50 [ 1963.344883][ T9221] ? mall_set_parms+0x520/0x520 [ 1963.349752][ T9221] ? tcf_exts_destroy+0xb0/0xb0 [ 1963.354625][ T9221] ? mall_set_parms+0x1e8/0x520 [ 1963.359490][ T9221] mall_change+0x526/0x740 [ 1963.363914][ T9221] ? __kasan_check_write+0x14/0x20 [ 1963.369040][ T9221] ? mall_get+0xa0/0xa0 [ 1963.373246][ T9221] ? tcf_chain_tp_insert_unique+0xac1/0xc10 [ 1963.379166][ T9221] tc_new_tfilter+0x12a2/0x1870 [ 1963.384049][ T9221] ? tcf_gate_entry_destructor+0x20/0x20 [ 1963.389705][ T9221] ? security_capable+0x87/0xb0 [ 1963.394573][ T9221] ? ns_capable+0x8c/0xf0 [ 1963.398918][ T9221] ? netlink_net_capable+0x125/0x160 [ 1963.404228][ T9221] ? tcf_gate_entry_destructor+0x20/0x20 [ 1963.409884][ T9221] rtnetlink_rcv_msg+0x81b/0xb90 [ 1963.414847][ T9221] ? rtnetlink_bind+0x80/0x80 [ 1963.419536][ T9221] ? memcpy+0x56/0x70 [ 1963.423524][ T9221] ? avc_has_perm_noaudit+0x2f4/0x460 [ 1963.428898][ T9221] ? arch_stack_walk+0xee/0x140 [ 1963.433765][ T9221] ? avc_denied+0x1b0/0x1b0 [ 1963.438268][ T9221] ? stack_trace_save+0x98/0xe0 [ 1963.443204][ T9221] ? avc_has_perm+0x158/0x240 [ 1963.447897][ T9221] ? avc_has_perm_noaudit+0x460/0x460 [ 1963.453265][ T9221] ? x64_sys_call+0x4b/0x9a0 [ 1963.458032][ T9221] ? selinux_nlmsg_lookup+0x416/0x4c0 [ 1963.463410][ T9221] netlink_rcv_skb+0x1e0/0x430 [ 1963.468171][ T9221] ? rtnetlink_bind+0x80/0x80 [ 1963.472846][ T9221] ? netlink_ack+0xb60/0xb60 [ 1963.477465][ T9221] ? __netlink_lookup+0x387/0x3b0 [ 1963.482502][ T9221] rtnetlink_rcv+0x1c/0x20 [ 1963.486946][ T9221] netlink_unicast+0x876/0xa40 [ 1963.491729][ T9221] netlink_sendmsg+0x86a/0xb70 [ 1963.496503][ T9221] ? netlink_getsockopt+0x530/0x530 [ 1963.501716][ T9221] ? security_socket_sendmsg+0x82/0xa0 [ 1963.507188][ T9221] ? netlink_getsockopt+0x530/0x530 [ 1963.512390][ T9221] ____sys_sendmsg+0x5a2/0x8c0 [ 1963.517167][ T9221] ? __sys_sendmsg_sock+0x40/0x40 [ 1963.522196][ T9221] ? import_iovec+0x7c/0xb0 [ 1963.526706][ T9221] ___sys_sendmsg+0x1f0/0x260 [ 1963.531385][ T9221] ? __sys_sendmsg+0x250/0x250 [ 1963.536158][ T9221] ? sock_show_fdinfo+0xa0/0xa0 [ 1963.541043][ T9221] ? __fdget+0x1a1/0x230 [ 1963.545292][ T9221] __x64_sys_sendmsg+0x1e2/0x2a0 [ 1963.550238][ T9221] ? ___sys_sendmsg+0x260/0x260 [ 1963.555091][ T9221] ? __kasan_check_write+0x14/0x20 [ 1963.560203][ T9221] ? switch_fpu_return+0x15d/0x2c0 [ 1963.565320][ T9221] x64_sys_call+0x4b/0x9a0 [ 1963.569736][ T9221] do_syscall_64+0x4c/0xa0 [ 1963.574156][ T9221] ? clear_bhb_loop+0x50/0xa0 [ 1963.578842][ T9221] ? clear_bhb_loop+0x50/0xa0 [ 1963.583531][ T9221] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1963.589436][ T9221] RIP: 0033:0x7f76f33a2be9 [ 1963.593862][ T9221] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1963.613476][ T9221] RSP: 002b:00007f76f1e0b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1963.621903][ T9221] RAX: ffffffffffffffda RBX: 00007f76f35c9fa0 RCX: 00007f76f33a2be9 [ 1963.629883][ T9221] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000005 [ 1963.637859][ T9221] RBP: 00007f76f3425e19 R08: 0000000000000000 R09: 0000000000000000 [ 1963.645852][ T9221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1963.653821][ T9221] R13: 00007f76f35ca038 R14: 00007f76f35c9fa0 R15: 00007fff9c5ead58 [ 1963.661804][ T9221] [ 1963.664823][ T9221] [ 1963.667145][ T9221] Allocated by task 9221: [ 1963.671467][ T9221] __kasan_kmalloc+0xda/0x110 [ 1963.676166][ T9221] __kmalloc+0x13d/0x2c0 [ 1963.680407][ T9221] tcf_idr_create+0x5f/0x790 [ 1963.685000][ T9221] tcf_idr_create_from_flags+0x61/0x70 [ 1963.690458][ T9221] tcf_gact_init+0x346/0x580 [ 1963.695051][ T9221] tcf_action_init_1+0x3f7/0x6a0 [ 1963.699990][ T9221] tcf_action_init+0x1e9/0x710 [ 1963.704749][ T9221] tcf_exts_validate+0x217/0x520 [ 1963.709686][ T9221] mall_set_parms+0x48/0x520 [ 1963.714277][ T9221] mall_change+0x45a/0x740 [ 1963.718695][ T9221] tc_new_tfilter+0x12a2/0x1870 [ 1963.723541][ T9221] rtnetlink_rcv_msg+0x81b/0xb90 [ 1963.728479][ T9221] netlink_rcv_skb+0x1e0/0x430 [ 1963.733245][ T9221] rtnetlink_rcv+0x1c/0x20 [ 1963.737678][ T9221] netlink_unicast+0x876/0xa40 [ 1963.742449][ T9221] netlink_sendmsg+0x86a/0xb70 [ 1963.747215][ T9221] ____sys_sendmsg+0x5a2/0x8c0 [ 1963.751978][ T9221] ___sys_sendmsg+0x1f0/0x260 [ 1963.756654][ T9221] __x64_sys_sendmsg+0x1e2/0x2a0 [ 1963.761595][ T9221] x64_sys_call+0x4b/0x9a0 [ 1963.766016][ T9221] do_syscall_64+0x4c/0xa0 [ 1963.770434][ T9221] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1963.776326][ T9221] [ 1963.778647][ T9221] Last potentially related work creation: [ 1963.784356][ T9221] kasan_save_stack+0x3a/0x60 [ 1963.789034][ T9221] __kasan_record_aux_stack+0xd2/0x100 [ 1963.794504][ T9221] kasan_record_aux_stack_noalloc+0xb/0x10 [ 1963.800311][ T9221] call_rcu+0x105/0xfe0 [ 1963.804484][ T9221] neigh_parms_release+0x1e0/0x220 [ 1963.809597][ T9221] addrconf_ifdown+0x15e3/0x1880 [ 1963.814534][ T9221] addrconf_notify+0x3bd/0xde0 [ 1963.819295][ T9221] raw_notifier_call_chain+0x90/0x100 [ 1963.824665][ T9221] unregister_netdevice_many+0xfb8/0x1990 [ 1963.830389][ T9221] unregister_netdevice_queue+0x31c/0x360 [ 1963.836111][ T9221] __tun_detach+0xca6/0x1450 [ 1963.840706][ T9221] tun_chr_close+0x92/0x140 [ 1963.845206][ T9221] __fput+0x20b/0x8b0 [ 1963.849183][ T9221] ____fput+0x15/0x20 [ 1963.853160][ T9221] task_work_run+0x127/0x190 [ 1963.857747][ T9221] exit_to_user_mode_loop+0xd0/0xe0 [ 1963.862944][ T9221] exit_to_user_mode_prepare+0x5a/0xa0 [ 1963.868404][ T9221] syscall_exit_to_user_mode+0x1a/0x30 [ 1963.873877][ T9221] do_syscall_64+0x58/0xa0 [ 1963.878295][ T9221] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1963.884187][ T9221] [ 1963.886509][ T9221] Second to last potentially related work creation: [ 1963.893082][ T9221] kasan_save_stack+0x3a/0x60 [ 1963.897756][ T9221] __kasan_record_aux_stack+0xd2/0x100 [ 1963.903210][ T9221] kasan_record_aux_stack_noalloc+0xb/0x10 [ 1963.909012][ T9221] kvfree_call_rcu+0xae/0x7e0 [ 1963.913689][ T9221] ip_ma_put+0xf7/0x140 [ 1963.917843][ T9221] __ip_mc_dec_group+0x44e/0x520 [ 1963.922780][ T9221] ip_mc_down+0x1b0/0x240 [ 1963.927109][ T9221] inetdev_event+0x2c7/0x10a0 [ 1963.931795][ T9221] raw_notifier_call_chain+0x90/0x100 [ 1963.937168][ T9221] dev_close_many+0x32d/0x4d0 [ 1963.941842][ T9221] unregister_netdevice_many+0x44c/0x1990 [ 1963.947565][ T9221] default_device_exit_batch+0x330/0x390 [ 1963.953196][ T9221] cleanup_net+0x602/0xad0 [ 1963.957613][ T9221] process_one_work+0x6be/0xba0 [ 1963.962464][ T9221] worker_thread+0xa59/0x1200 [ 1963.967145][ T9221] kthread+0x411/0x500 [ 1963.971215][ T9221] ret_from_fork+0x1f/0x30 [ 1963.975626][ T9221] [ 1963.977948][ T9221] The buggy address belongs to the object at ffff88811c30a700 [ 1963.977948][ T9221] which belongs to the cache kmalloc-192 of size 192 [ 1963.992000][ T9221] The buggy address is located 0 bytes to the right of [ 1963.992000][ T9221] 192-byte region [ffff88811c30a700, ffff88811c30a7c0) [ 1964.005645][ T9221] The buggy address belongs to the page: [ 1964.011279][ T9221] page:ffffea000470c280 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11c30a [ 1964.021563][ T9221] flags: 0x4000000000000200(slab|zone=1) [ 1964.027229][ T9221] raw: 4000000000000200 ffffea000458ae80 0000000c00000002 ffff888100042c00 [ 1964.035822][ T9221] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 1964.044495][ T9221] page dumped because: kasan: bad access detected [ 1964.050915][ T9221] page_owner tracks the page as allocated [ 1964.056832][ T9221] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 196, ts 7997019315, free_ts 0 [ 1964.071875][ T9221] post_alloc_hook+0x192/0x1b0 [ 1964.076660][ T9221] prep_new_page+0x1c/0x110 [ 1964.081170][ T9221] get_page_from_freelist+0x2cc5/0x2d50 [ 1964.086717][ T9221] __alloc_pages+0x18f/0x440 [ 1964.091314][ T9221] new_slab+0xa1/0x4d0 [ 1964.095420][ T9221] ___slab_alloc+0x381/0x810 [ 1964.100030][ T9221] __slab_alloc+0x49/0x90 [ 1964.104363][ T9221] __kmalloc+0x16a/0x2c0 [ 1964.108608][ T9221] bpf_convert_filter+0xf0/0x5110 [ 1964.113636][ T9221] bpf_prepare_filter+0xe7f/0x11c0 [ 1964.118748][ T9221] __get_filter+0x2ee/0x410 [ 1964.123252][ T9221] sk_attach_filter+0x23/0x140 [ 1964.128018][ T9221] sock_setsockopt+0x1400/0x2270 [ 1964.133038][ T9221] __sys_setsockopt+0x268/0x460 [ 1964.137979][ T9221] __x64_sys_setsockopt+0xbf/0xd0 [ 1964.143003][ T9221] x64_sys_call+0x982/0x9a0 [ 1964.147505][ T9221] page_owner free stack trace missing [ 1964.152867][ T9221] [ 1964.155185][ T9221] Memory state around the buggy address: [ 1964.160807][ T9221] ffff88811c30a680: 00 00 00 fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1964.168861][ T9221] ffff88811c30a700: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1964.176927][ T9221] >ffff88811c30a780: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 1964.185155][ T9221] ^ [ 1964.191301][ T9221] ffff88811c30a800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1964.199383][ T9221] ffff88811c30a880: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 1964.207441][ T9221] ================================================================== [ 1964.215497][ T9221] Disabling lock debugging due to kernel taint [ 1964.276584][ T7485] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1964.291838][ T7485] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1964.598388][ T590] tipc: Left network mode [ 1964.602928][ T590] tipc: Left network mode [ 1965.282391][ T590] device bridge_slave_1 left promiscuous mode [ 1965.288996][ T590] bridge0: port 2(bridge_slave_1) entered disabled state [ 1965.296688][ T590] device bridge_slave_0 left promiscuous mode [ 1965.302834][ T590] bridge0: port 1(bridge_slave_0) entered disabled state [ 1965.311802][ T590] device bridge_slave_1 left promiscuous mode [ 1965.318102][ T590] bridge0: port 2(bridge_slave_1) entered disabled state [ 1965.325683][ T590] device bridge_slave_0 left promiscuous mode [ 1965.331845][ T590] bridge0: port 1(bridge_slave_0) entered disabled state [ 1965.340517][ T590] device bridge_slave_1 left promiscuous mode [ 1965.346650][ T590] bridge0: port 2(bridge_slave_1) entered disabled state [ 1965.354169][ T590] device bridge_slave_0 left promiscuous mode [ 1965.360413][ T590] bridge0: port 1(bridge_slave_0) entered disabled state [ 1965.369106][ T590] device veth1_macvtap left promiscuous mode [ 1965.375117][ T590] device veth0_vlan left promiscuous mode [ 1965.381192][ T590] device veth1_macvtap left promiscuous mode [ 1965.387189][ T590] device veth0_vlan left promiscuous mode [ 1965.393265][ T590] device veth1_macvtap left promiscuous mode [ 1965.399292][ T590] device veth0_vlan left promiscuous mode