last executing test programs: 21m11.048884295s ago: executing program 1 (id=18): mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) sigaltstack(0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) read(r1, &(0x7f0000000400)=""/135, 0x87) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) read(r4, &(0x7f0000032440)=""/102364, 0x18fdc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, 0x0) syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000000000/0x400000)=nil) 21m10.202413003s ago: executing program 1 (id=21): socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x75b08000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000000), 0x651, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x324) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x6, 0x8}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xc, 0x14, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x15}}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0xe, 0xfeff, &(0x7f0000000100)="e0857f9f582f0300000000000000", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f00000003c0)=ANY=[], &(0x7f0000000000)=""/163, 0x58, 0xa3, 0x1}, 0x28) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) 21m8.693568445s ago: executing program 1 (id=26): r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0xfffffffffffffdee, &(0x7f0000000000)=0x8000000000005) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/12, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000"], 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 21m6.478388795s ago: executing program 1 (id=31): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000029"], 0xb8}}, 0x4004) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000008c0)=@updpolicy={0xc0, 0x19, 0x1, 0x0, 0x3, {{@in=@private, @in6=@remote, 0x0, 0xfffd, 0x0, 0x0, 0xa}, {0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x8000000000}, 0x2000000, 0x0, 0x0, 0x1, 0x4, 0x1}, [@XFRMA_IF_ID={0x8, 0x1f, 0x4}]}, 0xc0}}, 0x4040000) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x7}}, 0xb8}}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffd}}}]}, 0x38}}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x64, 0x50a, &(0x7f0000000200)="$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") r7 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) r8 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$binfmt_register(r8, &(0x7f00000000c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x9, 0x3a, '+\'', 0x3a, '', 0x3a, './file2', 0x3a, [0x4f, 0x4f, 0x46]}, 0x2c) fsconfig$FSCONFIG_CMD_RECONFIGURE(r7, 0x7, 0x0, 0x0, 0x0) 21m5.511907482s ago: executing program 1 (id=34): open(0x0, 0x0, 0x1) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000004c0)='sched_switch\x00', r0}, 0x18) listen(0xffffffffffffffff, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x25, &(0x7f0000000000)={0x1}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000380)={0x0, 0x1, 0x0, 0x1}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mkdir(0x0, 0x0) 21m5.337251487s ago: executing program 1 (id=36): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0xc044) bind$netlink(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) waitid(0x1, r3, 0x0, 0x61000006, &(0x7f0000000340)) 21m5.29852042s ago: executing program 32 (id=36): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0xc044) bind$netlink(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) waitid(0x1, r3, 0x0, 0x61000006, &(0x7f0000000340)) 38.785947125s ago: executing program 3 (id=3149): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f00000005c0)={&(0x7f00000003c0)={0x2, 0x0, @multicast2}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000180)="96bc1480bb35", 0x6}], 0x1, &(0x7f0000000240)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @broadcast}}}], 0x20}, 0x24008004) syz_usb_connect$uac1(0x0, 0x93, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x81, 0x3, 0x1, 0x6, 0xb0, 0x9, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x5, 0x7}, [@output_terminal={0x9, 0x24, 0x3, 0x4, 0x302, 0x3, 0x6, 0xd6}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x1, 0x1, 0x2, 0x9, "2ab6"}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x0, 0x40, 0x5, {0x7, 0x25, 0x1, 0x0, 0x31, 0xb}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x8, 0x0, 0x1}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x3, 0x12, 0xcc, 0x7}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x2, 0x2, 0x69, {0x7, 0x25, 0x1, 0x0, 0x0, 0x3}}}}}}}]}}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0}) 38.195408253s ago: executing program 3 (id=3155): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x18) setitimer(0x0, 0x0, 0x0) 38.131578139s ago: executing program 3 (id=3157): r0 = socket(0x10, 0x3, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000000040)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000980)='./file0\x00', 0x30) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={[{@subsystem='cpuset'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000200)='cpuset.sched_load_balance\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000240), 0x12) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10) write(r0, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c) recvmmsg(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x8040, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000000000092000040"]) r6 = syz_open_procfs(0x0, &(0x7f0000019440)='net/ip_tables_targets\x00') pread64(r6, &(0x7f0000000080)=""/102350, 0xc345, 0x54) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x88, 0x0, 0x800, 0x70bd25, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}]}, 0x88}, 0x1, 0x0, 0x0, 0x4008889}, 0x24000880) r7 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2081413, 0x0, 0x1, 0x0, &(0x7f0000000080)) rename(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./bus/file0\x00') bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)={@cgroup=r7, r7, 0x2b, 0x0, 0x0, @void, @value=0x0}, 0x20) 38.124459979s ago: executing program 3 (id=3158): syz_mount_image$f2fs(&(0x7f00000001c0), &(0x7f0000000000)='./file0\x00', 0x2008412, &(0x7f0000000b40)=ANY=[], 0x1, 0x5566, &(0x7f000000b9c0)="$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") r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) statx(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x6000, 0x0) 37.854580551s ago: executing program 3 (id=3164): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="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", @ANYRESHEX], 0x25, 0x5586, &(0x7f00000079c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x275a, 0x0) mmap(&(0x7f000048a000/0x1000)=nil, 0x1000, 0x2, 0x12, r0, 0x0) ftruncate(r0, 0x84) 37.792887546s ago: executing program 3 (id=3168): r0 = socket(0x10, 0x3, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000000040)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000980)='./file0\x00', 0x30) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={[{@subsystem='cpuset'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000200)='cpuset.sched_load_balance\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000240), 0x12) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10) write(r0, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c) recvmmsg(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x8040, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r6, 0xc008ae88, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000000000092000040"]) r7 = syz_open_procfs(0x0, &(0x7f0000019440)='net/ip_tables_targets\x00') pread64(r7, &(0x7f0000000080)=""/102350, 0xc345, 0x54) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x8c, 0x0, 0x800, 0x70bd25, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r7}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4008889}, 0x24000880) r8 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2081413, 0x0, 0x1, 0x0, &(0x7f0000000080)) rename(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./bus/file0\x00') bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)={@cgroup=r8, r8, 0x2b, 0x0, 0x0, @void, @value=0x0}, 0x20) 37.781739837s ago: executing program 33 (id=3168): r0 = socket(0x10, 0x3, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000000040)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000980)='./file0\x00', 0x30) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={[{@subsystem='cpuset'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000200)='cpuset.sched_load_balance\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000240), 0x12) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10) write(r0, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c) recvmmsg(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x8040, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r6, 0xc008ae88, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000000000092000040"]) r7 = syz_open_procfs(0x0, &(0x7f0000019440)='net/ip_tables_targets\x00') pread64(r7, &(0x7f0000000080)=""/102350, 0xc345, 0x54) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x8c, 0x0, 0x800, 0x70bd25, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r7}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4008889}, 0x24000880) r8 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2081413, 0x0, 0x1, 0x0, &(0x7f0000000080)) rename(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./bus/file0\x00') bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)={@cgroup=r8, r8, 0x2b, 0x0, 0x0, @void, @value=0x0}, 0x20) 7.334207237s ago: executing program 5 (id=3438): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x13, &(0x7f0000000b40)=ANY=[@ANYBLOB="180000000100000000000000070000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xe, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000200)='mm_page_alloc\x00', r2}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0100000001000001000008000100000001"], 0x50) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1000000004000000080000000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000ad7e195a000000000000"], 0x48) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000740)={[{@test_dummy_encryption}, {@i_version}, {@noblock_validity}, {@commit={'commit', 0x3d, 0x5}}, {@inlinecrypt}, {@max_batch_time}, {@abort}, {@auto_da_alloc}, {@lazytime}, {@noauto_da_alloc}, {@block_validity}]}, 0xd, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") prlimit64(0x0, 0xe, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg(r3, &(0x7f0000001b00)=[{{&(0x7f00000003c0)=@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x40}}, 0x80, &(0x7f0000006bc0)=[{&(0x7f0000001880)="b61cf70061", 0x5}], 0x1}}], 0x1, 0x20040814) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYRES32], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70200001400f400b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b702000000000000850000008400"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) fdatasync(r6) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newlink={0x4c, 0x10, 0x403, 0x70b528, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0xa1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x4c}, 0x1, 0xba01, 0x0, 0x4004}, 0x810) sendmmsg$inet(r5, &(0x7f0000000a40)=[{{&(0x7f00000000c0)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000340)="c803219bea55b4083513cbded92b01d4036f8f7786c6346c8027a3e339939e451c74794d284789ddd037a638532bf8d3d44db35350898144414ec2a5bf3e47bc2db9e8ef93b64e31", 0x48}, {&(0x7f0000001200)="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", 0x1000}], 0x2, &(0x7f00000003c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x200}}, @ip_retopts={{0x2c, 0x0, 0x7, {[@rr={0x7, 0xb, 0xea, [@broadcast, @private=0xa010100]}, @timestamp={0x44, 0x8, 0xba, 0x0, 0xe, [0xec]}, @ra={0x94, 0x4, 0x1}, @generic={0xc3, 0x5, "4eed3d"}]}}}], 0x48}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000001c0)="db3fbf7e4b61b07b9e4d03acba2f085477a1e6cf6ef3bde389e773058bcb4bf2b9d75f0de190f9eb", 0x28}, {&(0x7f0000000440)="7e0fe15f6ad0dffff993028a8db6d4a408a1cf02c6756ccd243061a5de9be5c5de6378e2cf89b2bab8e42a9c150882612abcb10859875cb5780daf43ac8e76bf11a5d519bcedc0278d564be240b9254cd4780d55dc8034e88543a36b620edf6ed3", 0x61}, {&(0x7f0000000800)="b35d7300053e183bc4962e19c939e10c25c7691419ee960f74e7f2203eefbfa041c018766413502e54be056ff99507515659524f4ef23242f0bd8c3132ffeca91b188672cdfa55dc4aa80193721ce152619ac8f7a87dc9e0d41e6e53a1713515c9dd7fee84f7b8695c1b629987b29f8a385bc1481d21c323407bff9c937fe437fff7b579235c13f1989ca96d4001637a715c502e5da28ffeb8f7c2b763290995c66619643182afd100f3b7abb4c513f0b2a04159", 0xb4}, {&(0x7f0000000600)="cfb358f82399da09ddd44366b6ba0798dc8a3ae7f54232f86a4b0c795ed1333215ec3b084fcd2bcc35a52d99553b3748571d749475285d78115373608bea334be6e6b4fba8488e9941bafce177da39424f7c3862af0b9351870f09e42fc0856817a2093729", 0x65}], 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="1400000000000000000000000200000009000000000000001400000000000000000000000700000000000000000000001400000000000000000600000700000000000000000000001100d2294fbd00000000000001000000ed000000000000002c00000000000000000000000700000094040100008317920000000000000000ac1414aaac14142ce0000002000000001c000000000000000000000008000000", @ANYRES32=r8, @ANYBLOB="64010100ac1414aa0000000014000000000000000000000001000000ff03000000000000110000000000000000000000010000008000000000000000"], 0xe0}}], 0x2, 0x20000000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ftruncate(r6, 0x81ff) 6.487344096s ago: executing program 5 (id=3445): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUCODE(r1, 0xc018480d, &(0x7f00000000c0)={0x1, 0x200, 0xe, 0x800, 0x6, 0x3}) 3.95664125s ago: executing program 5 (id=3464): mount$tmpfs(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB='size=M']) mount(&(0x7f0000000200)=@sr0, &(0x7f00000002c0)='./file1/file0\x00', &(0x7f0000000300)='affs\x00', 0x100018, &(0x7f0000000340)='[\x18+:\x00') r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080)={0x80, 0x20, 0x2}, 0x18) openat(r0, &(0x7f00000001c0)='./bus\x00', 0x10040, 0x40) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0x1, 0x120d, &(0x7f0000001280)="$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") mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 2.709667581s ago: executing program 5 (id=3465): sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x20}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x154, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_RATE={0x6, 0x5, {0x8, 0x81}}, @filter_kind_options=@f_bpf={{0x8}, {0x118, 0x2, [@TCA_BPF_POLICE={0x38, 0x2, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x549}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x2}, @TCA_POLICE_RATE64={0xc, 0x8, 0x9a2}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}]}, @TCA_BPF_ACT={0xd4, 0x1, [@m_simple={0xd0, 0x1e, 0x0, 0x0, {{0xb}, {0xa4, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x7, 0x7, 0x8, 0x1, 0xeb}}, @TCA_DEF_DATA={0x3d, 0x3, '\x00\x94\xe4\xe2X\xce\xbar\x069\xf3\xff\x8d\x94\x1ao\xa1,\xa4\xc1\xcc\x1e\x9aS>\a\xd2R\x85\v\x80\xea\x1e\xc8W\xea\x99\xacos\x80\x1d\x8b\xd9`Ewb\xa5&iu@\xfd\x8c\xde\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x68f6, 0x6, 0x2, 0x8, 0x9}}, @TCA_DEF_PARMS={0x18, 0x2, {0xd62, 0x0, 0x20000000, 0x8000, 0x6607f5ed}}, @TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x4a66, 0x4, 0x3, 0x9}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}]}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x154}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 2.666698775s ago: executing program 5 (id=3467): mount$tmpfs(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB='size=M']) mount(&(0x7f0000000200)=@sr0, &(0x7f00000002c0)='./file1/file0\x00', &(0x7f0000000300)='affs\x00', 0x100018, &(0x7f0000000340)='[\x18+:\x00') r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080)={0x80, 0x20, 0x2}, 0x18) openat(r0, &(0x7f00000001c0)='./bus\x00', 0x10040, 0x40) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0x1, 0x120d, &(0x7f0000001280)="$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") mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 2.613169139s ago: executing program 4 (id=3470): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="3800000054000100040000000000000807000000", @ANYRES32=r2], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x40080) 2.151530466s ago: executing program 4 (id=3475): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f0000000040)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f00000020c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_LSEEK(r0, &(0x7f0000000000)={0x18, 0x0, r1, {0x800000007}}, 0x18) fchownat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, 0x0, 0x100) 2.057479994s ago: executing program 2 (id=3478): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r0) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r0) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000340)={0x1c, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0xe4bc3d37e6ff9bb9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) 2.046194605s ago: executing program 2 (id=3479): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000010080)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r1}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) 1.993165229s ago: executing program 2 (id=3480): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x13, &(0x7f0000000b40)=ANY=[@ANYBLOB="180000000100000000000000070000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xe, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000200)='mm_page_alloc\x00', r2}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0100000001000001000008000100000001"], 0x50) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1000000004000000080000000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000ad7e195a000000000000"], 0x48) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000740)={[{@test_dummy_encryption}, {@i_version}, {@noblock_validity}, {@commit={'commit', 0x3d, 0x5}}, {@inlinecrypt}, {@max_batch_time}, {@abort}, {@auto_da_alloc}, {@lazytime}, {@noauto_da_alloc}, {@block_validity}]}, 0xd, 0x5d8, &(0x7f0000000c00)="$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") prlimit64(0x0, 0xe, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg(r3, &(0x7f0000001b00)=[{{&(0x7f00000003c0)=@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x40}}, 0x80, &(0x7f0000006bc0)=[{&(0x7f0000001880)="b61cf70061", 0x5}], 0x1}}], 0x1, 0x20040814) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYRES32], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b70200001400f400b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) fdatasync(r5) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newlink={0x4c, 0x10, 0x403, 0x70b528, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0xa1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x4c}, 0x1, 0xba01, 0x0, 0x4004}, 0x810) sendmmsg$inet(r4, &(0x7f0000000a40)=[{{&(0x7f00000000c0)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000340)="c803219bea55b4083513cbded92b01d4036f8f7786c6346c8027a3e339939e451c74794d284789ddd037a638532bf8d3d44db35350898144414ec2a5bf3e47bc2db9e8ef93b64e31", 0x48}, {&(0x7f0000001200)="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", 0x1000}], 0x2, &(0x7f00000003c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x200}}, @ip_retopts={{0x2c, 0x0, 0x7, {[@rr={0x7, 0xb, 0xea, [@broadcast, @private=0xa010100]}, @timestamp={0x44, 0x8, 0xba, 0x0, 0xe, [0xec]}, @ra={0x94, 0x4, 0x1}, @generic={0xc3, 0x5, "4eed3d"}]}}}], 0x48}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000001c0)="db3fbf7e4b61b07b9e4d03acba2f085477a1e6cf6ef3bde389e773058bcb4bf2b9d75f0de190f9eb", 0x28}, {&(0x7f0000000440)="7e0fe15f6ad0dffff993028a8db6d4a408a1cf02c6756ccd243061a5de9be5c5de6378e2cf89b2bab8e42a9c150882612abcb10859875cb5780daf43ac8e76bf11a5d519bcedc0278d564be240b9254cd4780d55dc8034e88543a36b620edf6ed3", 0x61}, {&(0x7f0000000800)="b35d7300053e183bc4962e19c939e10c25c7691419ee960f74e7f2203eefbfa041c018766413502e54be056ff99507515659524f4ef23242f0bd8c3132ffeca91b188672cdfa55dc4aa80193721ce152619ac8f7a87dc9e0d41e6e53a1713515c9dd7fee84f7b8695c1b629987b29f8a385bc1481d21c323407bff9c937fe437fff7b579235c13f1989ca96d4001637a715c502e5da28ffeb8f7c2b763290995c66619643182afd100f3b7abb4c513f0b2a04159", 0xb4}, {&(0x7f0000000600)="cfb358f82399da09ddd44366b6ba0798dc8a3ae7f54232f86a4b0c795ed1333215ec3b084fcd2bcc35a52d99553b3748571d749475285d78115373608bea334be6e6b4fba8488e9941bafce177da39424f7c3862af0b9351870f09e42fc0856817a2093729", 0x65}], 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="1400000000000000000000000200000009000000000000001400000000000000000000000700000000000000000000001400000000000000000600000700000000000000000000001100d2294fbd00000000000001000000ed000000000000002c00000000000000000000000700000094040100008317920000000000000000ac1414aaac14142ce0000002000000001c000000000000000000000008000000", @ANYRES32=r7, @ANYBLOB="64010100ac1414aa0000000014000000000000000000000001000000ff03000000000000110000000000000000000000010000008000000000000000"], 0xe0}}], 0x2, 0x20000000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ftruncate(r5, 0x81ff) 1.702907542s ago: executing program 5 (id=3481): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000006c0)={0x2c, &(0x7f00000003c0)=ANY=[@ANYBLOB="203106000000308b7511"], 0x0, 0x0, 0x0, 0x0}) 1.442726124s ago: executing program 0 (id=3485): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0xd, @loopback, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x2}, 0x1c) sendmmsg$inet6(r0, &(0x7f00000041c0)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)="39664e64142c74346721bc2b543138cdf2de51f9eba3bd42c41dda61418d045f80e9f2a71530bd9bb43315caacc9c95f0513d7c36eaa3efb268584360aaef1c84007bce9f02f77e7d4b71776a6c3db92352211c9272224eab6bc9dd3b80dd8aa5dc140b3a9aa0eb3c7c69112d82debebb7", 0x71}, {&(0x7f00000000c0)="05448ac949800a47a701d8f43e36", 0xe}, {&(0x7f0000000100)="9ac748e0fa7091e5919668227ac5819870c94b119a2958eaf70020b5e1b43c241d2db6dd526bbc96d467749829e9b55227cf2f12a1b3c261b42854c247280e93e4deae654a441340eca2fc9e12a3e9c8aea507d3f92c6e379d2287428fc18a7f32268a5dd741af420cace1e4a510acb37bf0bfa378367d813b4624f25d83efee5f9df489f4d61b933168f9844806f7f7446509dbf49b6241f78ae1539398f20207902ed5896b", 0xa6}, {&(0x7f00000001c0)="412925a0d73b62ae5e7daeac449e24ca5cff16552825cd569bfd12d97d263aa095918919ecd33fa486b76f2f10eeb67787d34d77f1b84a8b51b916029c8845a3f124b8a5c029dee97d2bd5cf92e7f4", 0x4f}], 0x4}}, {{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000440)="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", 0x82f}], 0x1, &(0x7f00000014c0)}}, {{0x0, 0x0, 0x0}}], 0x3, 0x30) 1.421428905s ago: executing program 0 (id=3486): sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x14, 0x0, 0x2, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x40) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1500"], 0x15) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000080)={0x17, 0x0, 0x0}) 1.410931806s ago: executing program 0 (id=3487): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x194) getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8) 1.353332551s ago: executing program 0 (id=3488): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r0, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x42, &(0x7f0000000040), 0x3b) 1.353174281s ago: executing program 0 (id=3489): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0xdd, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000300), &(0x7f0000000340)='%pS \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) 1.352815401s ago: executing program 0 (id=3490): setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x3, 0x3}, 0x10) r0 = socket$tipc(0x1e, 0x5, 0x0) open(0x0, 0x81ff, 0x36) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000800)={'syz1\x00', {0x0, 0x0, 0x0, 0x101}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x296, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffc, 0x4, 0x0, 0x0, 0x78c58bcb, 0x10000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x10002], [0x4, 0xfc, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x200, 0x0, 0x4, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe4a, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x100, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x242b], [0x0, 0x1, 0x1, 0x0, 0x6, 0x0, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x100, 0x0, 0x0, 0x0, 0xbd, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x9, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0xfffffffe, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, 0x45c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000180)={'bond_slave_0\x00', &(0x7f0000000040)=@ethtool_rxfh={0x46, 0x1ff, 0xe, 0x43f2, 0x7f, "7a0350", 0x40003}}) bind$tipc(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) unshare(0x62040200) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902"], 0x0) 1.307464695s ago: executing program 4 (id=3492): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000300000207b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$key(0xf, 0x3, 0x2) recvmmsg(r0, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) setsockopt$sock_int(r0, 0x1, 0x4b, &(0x7f0000000040)=0xfd87, 0x4) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0216000002"], 0x10}}, 0x0) 1.041400336s ago: executing program 2 (id=3494): r0 = socket(0x2, 0x2, 0x1) bind$unix(r0, &(0x7f0000000000)=@abs, 0x6e) r1 = socket(0x2, 0x2, 0x1) bind$unix(r1, &(0x7f0000000000)=@abs, 0x6e) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00') preadv(r2, &(0x7f00000001c0)=[{&(0x7f0000000300)=""/170, 0xaa}], 0x1, 0x9f, 0x106) 973.905051ms ago: executing program 4 (id=3496): r0 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) close(r1) 972.052321ms ago: executing program 2 (id=3497): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x49, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{0xffff1000, 0x5000, 0x3, 0xad, 0x3, 0xd2, 0x81, 0x7, 0x0, 0x2b, 0x9}, {0x4000, 0xdddd0000, 0x3, 0x0, 0x40, 0x9, 0x80, 0x1, 0x5, 0x6, 0x3}, {0x80a0000, 0x1000, 0x0, 0x5, 0x1, 0x2, 0xfd, 0x9, 0x0, 0xa9, 0xb, 0x81}, {0xdddd1000, 0x100000, 0xa, 0xe7, 0x3, 0xf, 0x1, 0x4, 0x8, 0x7, 0xe, 0xf1}, {0x4, 0x2000, 0xd, 0xf7, 0x5, 0x86, 0xa, 0x7f, 0x2, 0x0, 0xf7, 0x43}, {0xeeee0000, 0xdddd1000, 0x3, 0x85, 0x7, 0xc, 0x4, 0x7, 0x80, 0xc, 0x1}, {0x100000, 0x11d004, 0xc, 0x7, 0x0, 0x5, 0x1, 0x3, 0x5, 0x80, 0x3, 0x6}, {0x100000, 0x1, 0x9, 0x9, 0x5, 0x7, 0x22, 0x37, 0x82, 0x8, 0xf0, 0x4}, {0x10000, 0x8}, {0xdddd0000, 0x7}, 0x80000037, 0x0, 0xeeee0000, 0x2005, 0xf, 0x0, 0xeeee8000, [0x5, 0x5, 0x15e, 0x200000000000002]}) 864.63854ms ago: executing program 4 (id=3498): pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r1, 0x0, 0x26) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002880)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x26, 0x0) 821.327984ms ago: executing program 2 (id=3499): bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0800000004000000040000000400000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRESOCT, @ANYBLOB="00000000000000000000000011000000000000000014993ea9d1ada3af1430a0000000000000009cac36fc2518c480088eb2a0f65f621385dbb461e9228ad38146aae6152f1cf802ec72c6e015f7452a8a291ccf5ecb0df60e"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) r3 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) recvmmsg(r4, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001dc0)={&(0x7f0000000380)='mce_record\x00', r6, 0x0, 0xfffffffffffffffc}, 0x18) syz_mount_image$ext4(&(0x7f0000000800)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000340), 0x4, 0x241, &(0x7f00000009c0)="$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") setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0xe501, 0x3, 0x2a8, 0x138, 0x6affffff, 0x3403000b, 0x0, 0x7, 0x210, 0x230, 0x230, 0x210, 0x223, 0x3, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, 'veth1_macvtap\x00', 'veth1_to_team\x00'}, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x7f510100, 0x4, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@time={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x38}}, 0x4001) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000001cc0)='net/rt_cache\x00') preadv(r7, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/85, 0x55}], 0x1, 0xfffffffb, 0xa) 137.017249ms ago: executing program 6 (id=3500): r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/cgroup\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xd, 0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7, 0x20}, {0x4}}]}, 0x30}}, 0x0) ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) 114.189871ms ago: executing program 6 (id=3501): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffed7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 57.398286ms ago: executing program 6 (id=3502): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000040)={0xa4, 0x0, 0x1}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)=@x86={0xa6, 0x4, 0x81, 0x0, 0x6d, 0x2e, 0x1, 0x5, 0x7, 0x1, 0x9, 0x7, 0x0, 0x8, 0x11, 0x7f, 0x0, 0xb0, 0x8, '\x00', 0x7, 0x1}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x8040ae9f, &(0x7f0000000100)) 50.537786ms ago: executing program 6 (id=3503): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000400)='sched_switch\x00', r0}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x48000009, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4c, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0xe}, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8}, @TCA_FQ_FLOW_PLIMIT={0x8, 0x8}, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8}, @TCA_FQ_QUANTUM={0x5, 0xf}]}}]}, 0x78}}, 0x0) 35.141397ms ago: executing program 6 (id=3504): mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) renameat2(r0, &(0x7f0000000140)='./file0\x00', r0, &(0x7f0000000200)='./bus/file0\x00', 0x0) 267.13µs ago: executing program 4 (id=3505): mount$tmpfs(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB='size=M']) mount(&(0x7f0000000200)=@sr0, &(0x7f00000002c0)='./file1/file0\x00', &(0x7f0000000300)='affs\x00', 0x100018, &(0x7f0000000340)='[\x18+:\x00') r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080)={0x80, 0x20, 0x2}, 0x18) openat(r0, &(0x7f00000001c0)='./bus\x00', 0x10040, 0x40) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0x1, 0x120d, &(0x7f0000001280)="$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") mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 0s ago: executing program 6 (id=3506): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x980, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x4) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) kernel console output (not intermixed with test programs): y! [ 1173.534364][T11369] syz.5.2522[11369] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1173.565743][T11369] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1179.379808][ T28] audit: type=1400 audit(2000002328.655:1917): avc: denied { lock } for pid=11402 comm="syz.2.2530" path="/dev/kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1179.601337][T11412] syz.2.2532[11412] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1179.601407][T11412] syz.2.2532[11412] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1179.617517][T11412] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1180.965561][ T28] audit: type=1400 audit(2000002330.246:1918): avc: denied { ioctl } for pid=11426 comm="syz.2.2536" path="pid:[4026532388]" dev="nsfs" ino=4026532388 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1181.189901][T11432] syz.2.2537[11432] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1181.190101][T11432] syz.2.2537[11432] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1181.216680][T11432] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1182.063186][T11455] usb usb8: usbfs: process 11455 (syz.4.2547) did not claim interface 0 before use [ 1182.349388][T11467] syz.0.2548[11467] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1182.350723][T11467] syz.0.2548[11467] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1182.427962][T11467] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1185.644684][ T28] audit: type=1400 audit(2000002334.918:1919): avc: denied { accept } for pid=11470 comm="syz.4.2552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1185.973008][T11497] syz.4.2558[11497] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1185.974205][T11497] syz.4.2558[11497] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1186.054664][T11497] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1186.502334][T11500] syz.0.2565[11500] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1186.503495][T11500] syz.0.2565[11500] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1187.678625][T11500] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1188.860681][T11512] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11512 comm=syz.4.2569 [ 1189.091433][T11522] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2571'. [ 1189.147737][ T8062] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 1189.328652][ T8062] usb 3-1: config 0 has no interfaces? [ 1189.334774][ T8062] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1189.344533][ T8062] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1189.352567][ T8062] usb 3-1: Manufacturer: syz [ 1189.358224][ T8062] usb 3-1: config 0 descriptor?? [ 1190.204654][T11545] syz.4.2577[11545] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1190.205553][T11545] syz.4.2577[11545] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1190.248996][T11545] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1190.284575][T11544] overlayfs: failed to clone upperpath [ 1192.176408][ T28] audit: type=1326 audit(2000002340.841:1920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11549 comm="syz.3.2580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa62cf8ebe9 code=0x7ffc0000 [ 1192.201553][ T28] audit: type=1326 audit(2000002340.841:1921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11549 comm="syz.3.2580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa62cf8ebe9 code=0x7ffc0000 [ 1192.430467][ T28] audit: type=1326 audit(2000002340.861:1922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11549 comm="syz.3.2580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7fa62cf8ebe9 code=0x7ffc0000 [ 1192.967073][ T28] audit: type=1326 audit(2000002340.871:1923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11549 comm="syz.3.2580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa62cf8ebe9 code=0x7ffc0000 [ 1193.090901][T11295] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1193.098874][ T8062] usb 3-1: USB disconnect, device number 23 [ 1193.118289][T11563] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 1193.163646][ T28] audit: type=1326 audit(2000002340.871:1924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11549 comm="syz.3.2580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa62cf8ebe9 code=0x7ffc0000 [ 1193.209552][T11565] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2586'. [ 1193.300526][ T28] audit: type=1326 audit(2000002340.881:1925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11549 comm="syz.3.2580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa62cf8ebe9 code=0x7ffc0000 [ 1193.325815][ T28] audit: type=1326 audit(2000002340.881:1926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11549 comm="syz.3.2580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa62cf8ebe9 code=0x7ffc0000 [ 1193.349369][ T28] audit: type=1326 audit(2000002340.881:1927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11549 comm="syz.3.2580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa62cf8ebe9 code=0x7ffc0000 [ 1193.372917][ T28] audit: type=1326 audit(2000002340.911:1928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11549 comm="syz.3.2580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa62cf8ebe9 code=0x7ffc0000 [ 1193.397068][ T28] audit: type=1326 audit(2000002340.921:1929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11549 comm="syz.3.2580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa62cf8ebe9 code=0x7ffc0000 [ 1193.861967][T11584] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2590'. [ 1194.391165][T11605] syz.3.2598[11605] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1194.391243][T11605] syz.3.2598[11605] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1194.404927][T11605] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1194.970731][T11616] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 1195.301518][T11625] usb usb8: usbfs: process 11625 (syz.5.2604) did not claim interface 0 before use [ 1195.405649][T11631] usb usb8: usbfs: process 11631 (syz.5.2607) did not claim interface 0 before use [ 1195.459923][T11639] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11639 comm=syz.0.2610 [ 1195.548468][T11643] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2605'. [ 1195.646153][T11647] overlayfs: overlapping lowerdir path [ 1196.176709][T11655] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2624'. [ 1197.273389][T11666] syz.5.2616[11666] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1197.273462][T11666] syz.5.2616[11666] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1197.379834][T11666] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1197.412352][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 1197.412442][ T28] audit: type=1326 audit(2000002345.984:1949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11661 comm="syz.2.2614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff66238ebe9 code=0x7ffc0000 [ 1197.607085][ T28] audit: type=1326 audit(2000002345.984:1950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11661 comm="syz.2.2614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff66238ebe9 code=0x7ffc0000 [ 1197.769841][ T28] audit: type=1326 audit(2000002346.004:1951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11661 comm="syz.2.2614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7ff66238ebe9 code=0x7ffc0000 [ 1198.165660][ T28] audit: type=1326 audit(2000002346.004:1952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11661 comm="syz.2.2614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff66238ebe9 code=0x7ffc0000 [ 1198.189273][ T28] audit: type=1326 audit(2000002346.004:1953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11661 comm="syz.2.2614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff66238ebe9 code=0x7ffc0000 [ 1198.213358][ T28] audit: type=1326 audit(2000002346.014:1954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11661 comm="syz.2.2614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff66238ebe9 code=0x7ffc0000 [ 1198.237107][ T28] audit: type=1326 audit(2000002346.014:1955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11661 comm="syz.2.2614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff66238ebe9 code=0x7ffc0000 [ 1198.239978][T11674] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2615'. [ 1198.260657][ T28] audit: type=1326 audit(2000002346.024:1956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11661 comm="syz.2.2614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff66238ebe9 code=0x7ffc0000 [ 1198.260687][ T28] audit: type=1326 audit(2000002346.034:1957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11661 comm="syz.2.2614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff66238ebe9 code=0x7ffc0000 [ 1198.342387][ T28] audit: type=1326 audit(2000002346.034:1958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11661 comm="syz.2.2614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff66238ebe9 code=0x7ffc0000 [ 1198.434213][T11690] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11690 comm=syz.5.2623 [ 1198.927147][T11698] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 1199.244080][T11707] overlayfs: overlapping lowerdir path [ 1199.685056][T11710] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2626'. [ 1202.170387][T11725] syz.4.2633[11725] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1202.170638][T11725] syz.4.2633[11725] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1202.198054][T11725] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1202.526887][T11727] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2632'. [ 1203.319402][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 1203.319417][ T28] audit: type=1400 audit(2000002352.607:1964): avc: denied { setopt } for pid=11730 comm="syz.4.2638" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1203.410062][T11745] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11745 comm=syz.4.2640 [ 1204.325849][T11749] syz.3.2637[11749] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1204.326025][T11749] syz.3.2637[11749] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1204.341968][T11749] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1204.363972][ T28] audit: type=1326 audit(2000002353.288:1965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11735 comm="syz.0.2634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c3ff8ebe9 code=0x7ffc0000 [ 1204.388362][ T28] audit: type=1326 audit(2000002353.288:1966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11735 comm="syz.0.2634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c3ff8ebe9 code=0x7ffc0000 [ 1204.420947][ T28] audit: type=1326 audit(2000002353.318:1967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11735 comm="syz.0.2634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7f7c3ff8ebe9 code=0x7ffc0000 [ 1204.548289][ T28] audit: type=1326 audit(2000002353.318:1968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11735 comm="syz.0.2634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c3ff8ebe9 code=0x7ffc0000 [ 1204.578380][ T28] audit: type=1326 audit(2000002353.328:1969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11735 comm="syz.0.2634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c3ff8ebe9 code=0x7ffc0000 [ 1204.732930][T11752] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2639'. [ 1204.744449][ T28] audit: type=1326 audit(2000002353.348:1970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11735 comm="syz.0.2634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7c3ff8ebe9 code=0x7ffc0000 [ 1204.778168][ T28] audit: type=1326 audit(2000002353.348:1971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11735 comm="syz.0.2634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c3ff8ebe9 code=0x7ffc0000 [ 1204.961438][T11757] overlayfs: overlapping lowerdir path [ 1205.047009][T11758] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2636'. [ 1205.089017][ T28] audit: type=1326 audit(2000002353.358:1972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11735 comm="syz.0.2634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c3ff8ebe9 code=0x7ffc0000 [ 1205.168978][ T28] audit: type=1326 audit(2000002353.378:1973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11735 comm="syz.0.2634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7c3ff8ebe9 code=0x7ffc0000 [ 1205.169573][T11768] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 1205.203063][T11762] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2641'. [ 1205.960327][T11782] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2644'. [ 1206.926983][T11791] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2649'. [ 1207.002865][T11802] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11802 comm=syz.4.2653 [ 1207.023204][T11803] Invalid ELF header magic: != ELF [ 1207.369755][T11791] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 1207.390817][T11791] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 1207.529871][T11809] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2655'. [ 1207.657538][T11817] overlayfs: overlapping lowerdir path [ 1207.737747][T11818] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2657'. [ 1207.894791][T11819] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2658'. [ 1208.336687][T11845] overlayfs: overlapping lowerdir path [ 1208.402156][T11846] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2666'. [ 1208.488242][T11851] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2668'. [ 1208.551670][T11851] Invalid ELF header magic: != ELF [ 1208.721255][T11856] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2670'. [ 1208.817918][ T6528] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 1208.997816][ T6528] usb 5-1: Using ep0 maxpacket: 32 [ 1209.004699][ T6528] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 1209.023308][ T6528] usb 5-1: config 0 has no interface number 0 [ 1209.029927][ T6528] usb 5-1: config 0 interface 184 has no altsetting 0 [ 1209.038871][ T6528] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1209.057508][ T6528] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1209.071522][ T6528] usb 5-1: Product: syz [ 1209.078758][ T6528] usb 5-1: Manufacturer: syz [ 1209.086775][ T6528] usb 5-1: SerialNumber: syz [ 1209.098015][ T6528] usb 5-1: config 0 descriptor?? [ 1209.109924][ T6528] smsc75xx v1.0.0 [ 1209.115566][ T6528] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1209.125798][ T6528] smsc75xx: probe of 5-1:0.184 failed with error -22 [ 1209.207034][T11864] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2675'. [ 1209.216373][T11864] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2675'. [ 1209.287698][T11295] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1209.317536][ T336] usb 5-1: USB disconnect, device number 13 [ 1209.487591][T11295] usb 6-1: Using ep0 maxpacket: 32 [ 1209.515098][T11295] usb 6-1: config 8 has an invalid interface number: 248 but max is 0 [ 1209.523356][T11295] usb 6-1: config 8 has an invalid descriptor of length 144, skipping remainder of the config [ 1209.534865][T11295] usb 6-1: config 8 has no interface number 0 [ 1209.541219][T11295] usb 6-1: config 8 interface 248 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1209.619942][T11876] overlayfs: failed to clone lowerpath [ 1209.839029][T11295] usb 6-1: New USB device found, idVendor=0421, idProduct=04c9, bcdDevice=3c.d6 [ 1209.848393][T11295] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1209.856598][T11295] usb 6-1: Product: syz [ 1209.860964][T11295] usb 6-1: Manufacturer: syz [ 1209.865664][T11295] usb 6-1: SerialNumber: syz [ 1210.037237][T11890] overlayfs: overlapping lowerdir path [ 1210.079093][T11295] rndis_host 6-1:8.248: skipping garbage [ 1210.084766][T11295] rndis_host 6-1:8.248: skipping garbage [ 1210.090656][T11295] usb 6-1: bad CDC descriptors [ 1210.095561][T11295] cdc_acm 6-1:8.248: skipping garbage [ 1210.100965][T11295] cdc_acm 6-1:8.248: skipping garbage [ 1210.107291][T11295] usb 6-1: USB disconnect, device number 13 [ 1210.147239][ T6528] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 1210.190846][T11892] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2685'. [ 1210.552761][ T6528] usb 3-1: New USB device found, idVendor=14ea, idProduct=ab11, bcdDevice=cf.a5 [ 1210.830484][ T6528] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1210.843552][ T6528] usb 3-1: config 0 descriptor?? [ 1211.092705][T11906] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2690'. [ 1211.225281][T11918] Invalid ELF header magic: != ELF [ 1211.266715][T11295] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 1211.437572][ T6528] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1211.447513][ T6528] asix 3-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 1211.457754][ T6528] asix: probe of 3-1:0.0 failed with error -71 [ 1211.458014][T11295] usb 5-1: config 0 has no interfaces? [ 1211.465138][ T6528] usb 3-1: USB disconnect, device number 24 [ 1211.471886][T11295] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1211.484343][T11295] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1211.492368][T11295] usb 5-1: Manufacturer: syz [ 1211.497492][T11295] usb 5-1: config 0 descriptor?? [ 1211.906651][T11930] syz.0.2696[11930] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1211.906724][T11930] syz.0.2696[11930] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1211.934664][T11930] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1212.706018][T11933] overlayfs: failed to clone lowerpath [ 1212.796001][ T393] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1212.899154][T11295] usb 5-1: USB disconnect, device number 14 [ 1213.095832][ T393] usb 6-1: Using ep0 maxpacket: 32 [ 1213.103393][T11950] syz.4.2702[11950] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1213.103695][T11950] syz.4.2702[11950] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1213.130936][T11950] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1213.183032][ T393] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 1213.194650][ T393] usb 6-1: config 0 has no interface number 0 [ 1213.207649][ T393] usb 6-1: config 0 interface 184 has no altsetting 0 [ 1213.229019][ T393] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1213.244849][ T393] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1213.260814][ T393] usb 6-1: Product: syz [ 1213.269382][ T393] usb 6-1: Manufacturer: syz [ 1213.284256][ T393] usb 6-1: SerialNumber: syz [ 1213.317335][ T393] usb 6-1: config 0 descriptor?? [ 1213.325177][ T393] smsc75xx v1.0.0 [ 1213.331983][ T393] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1213.354336][ T393] smsc75xx: probe of 6-1:0.184 failed with error -22 [ 1213.668481][ T393] usb 6-1: USB disconnect, device number 14 [ 1213.871569][T11951] __nla_validate_parse: 1 callbacks suppressed [ 1213.871586][T11951] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2706'. [ 1214.095193][T11972] syz.4.2712[11972] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1214.095338][T11972] syz.4.2712[11972] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1214.108755][T11972] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1214.146446][ T336] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 1215.104976][T11973] overlayfs: failed to clone lowerpath [ 1215.678552][T11978] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11978 comm=syz.4.2716 [ 1215.885750][ T336] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1215.896328][ T336] usb 3-1: config 1 has an invalid descriptor of length 104, skipping remainder of the config [ 1215.908691][ T336] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1215.998219][ T336] usb 3-1: config 1 has no interface number 1 [ 1216.019062][ T336] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1218.105702][T11989] overlayfs: failed to resolve './file1/file0': -2 [ 1218.116101][ T336] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 110, changing to 4 [ 1218.127570][ T336] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 39833, setting to 1023 [ 1218.142144][ T336] usb 3-1: string descriptor 0 read error: -71 [ 1218.149133][ T336] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1218.158412][ T336] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1218.178687][ T336] usb 3-1: can't set config #1, error -71 [ 1218.189741][ T336] usb 3-1: USB disconnect, device number 25 [ 1218.986009][T12009] syz.0.2721[12009] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1218.986246][T12009] syz.0.2721[12009] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1219.002349][T12009] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1219.139834][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 1219.139934][ T28] audit: type=1326 audit(2000002367.795:1984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11997 comm="syz.3.2723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa62cf8ebe9 code=0x7ffc0000 [ 1219.268834][ T28] audit: type=1326 audit(2000002367.805:1985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11997 comm="syz.3.2723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa62cf8ebe9 code=0x7ffc0000 [ 1219.303284][ T28] audit: type=1326 audit(2000002367.825:1986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11997 comm="syz.3.2723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7fa62cf8ebe9 code=0x7ffc0000 [ 1219.333737][ T28] audit: type=1326 audit(2000002367.825:1987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11997 comm="syz.3.2723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa62cf8ebe9 code=0x7ffc0000 [ 1219.367830][ T28] audit: type=1326 audit(2000002367.825:1988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11997 comm="syz.3.2723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa62cf8ebe9 code=0x7ffc0000 [ 1219.406754][ T28] audit: type=1326 audit(2000002367.845:1989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11997 comm="syz.3.2723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa62cf8ebe9 code=0x7ffc0000 [ 1219.503671][ T28] audit: type=1326 audit(2000002367.845:1990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11997 comm="syz.3.2723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa62cf8ebe9 code=0x7ffc0000 [ 1219.537586][ T28] audit: type=1326 audit(2000002367.845:1991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11997 comm="syz.3.2723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa62cf8ebe9 code=0x7ffc0000 [ 1219.573502][ T28] audit: type=1326 audit(2000002367.865:1992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11997 comm="syz.3.2723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa62cf8ebe9 code=0x7ffc0000 [ 1219.613895][ T28] audit: type=1326 audit(2000002367.875:1993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11997 comm="syz.3.2723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa62cf8ebe9 code=0x7ffc0000 [ 1219.671242][T12022] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2724'. [ 1219.682200][T12033] random: crng reseeded on system resumption [ 1219.860305][T12026] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2730'. [ 1219.951600][T12042] syz.4.2736[12042] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1219.951674][T12042] syz.4.2736[12042] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1220.050341][T12045] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12045 comm=syz.4.2737 [ 1220.362166][T12060] syz.4.2742[12060] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1220.362439][T12060] syz.4.2742[12060] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1220.390222][T12060] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1220.561051][ T6528] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1221.108783][ T6528] usb 6-1: Using ep0 maxpacket: 16 [ 1221.115375][ T6528] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1221.126450][ T6528] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1221.136546][ T6528] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1221.150079][ T6528] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1221.159318][ T6528] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1221.171831][ T6528] usb 6-1: config 0 descriptor?? [ 1221.423677][T12079] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12079 comm=syz.4.2751 [ 1221.587376][ T6528] microsoft 0003:045E:07DA.0002: ignoring exceeding usage max [ 1221.596388][ T6528] microsoft 0003:045E:07DA.0002: unsupported Resolution Multiplier 0 [ 1221.605267][ T6528] microsoft 0003:045E:07DA.0002: implement() called with n (152) > 32! (kworker/1:0) [ 1221.621555][ T336] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 1221.707948][T12088] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2752'. [ 1221.788976][ T6528] microsoft 0003:045E:07DA.0002: No inputs registered, leaving [ 1221.800020][ T6528] microsoft 0003:045E:07DA.0002: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 1221.801432][ T336] usb 3-1: Using ep0 maxpacket: 32 [ 1221.811786][ T6528] microsoft 0003:045E:07DA.0002: no inputs found [ 1221.827861][ T336] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1221.828126][ T6528] microsoft 0003:045E:07DA.0002: could not initialize ff, continuing anyway [ 1221.852268][ T6528] usb 6-1: USB disconnect, device number 15 [ 1221.858333][ T336] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1221.872173][ T336] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1221.881407][ T336] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1221.892751][ T336] usb 3-1: Product: syz [ 1221.909171][T12092] fido_id[12092]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1221.923721][ T336] usb 3-1: Manufacturer: syz [ 1221.930280][ T336] hub 3-1:4.0: USB hub found [ 1222.131079][ T336] hub 3-1:4.0: 7 ports detected [ 1222.136163][ T336] hub 3-1:4.0: insufficient power available to use all downstream ports [ 1222.333113][ T336] hub 3-1:4.0: hub_hub_status failed (err = -71) [ 1222.339480][ T336] hub 3-1:4.0: config failed, can't get hub status (err -71) [ 1222.373631][ T336] usb 3-1: USB disconnect, device number 26 [ 1222.691008][T11295] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1222.751211][T12108] syz.4.2759[12108] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1222.751523][T12108] syz.4.2759[12108] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1222.779562][T12108] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1223.921258][T12117] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12117 comm=syz.0.2762 [ 1223.995074][T11295] usb 6-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1224.013922][T11295] usb 6-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1224.034107][T11295] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1224.054293][T11295] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1224.070324][T11295] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1224.081821][T11295] usb 6-1: config 0 descriptor?? [ 1224.330165][ T6528] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 1224.488427][T11295] hid (null): report_id 2139688843 is invalid [ 1224.511124][ T6528] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1224.522155][ T6528] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1224.531907][ T6528] usb 3-1: New USB device found, idVendor=056a, idProduct=0029, bcdDevice= 0.00 [ 1224.540953][ T6528] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1224.549568][ T6528] usb 3-1: config 0 descriptor?? [ 1224.690419][T11295] usb 6-1: string descriptor 0 read error: -71 [ 1224.696872][T11295] uclogic 0003:256C:006D.0003: failed retrieving string descriptor #200: -71 [ 1224.705691][T11295] uclogic 0003:256C:006D.0003: failed retrieving pen parameters: -71 [ 1224.713770][T11295] uclogic 0003:256C:006D.0003: failed probing pen v2 parameters: -71 [ 1224.721873][T11295] uclogic 0003:256C:006D.0003: failed probing parameters: -71 [ 1224.729330][T11295] uclogic: probe of 0003:256C:006D.0003 failed with error -71 [ 1224.739527][T11295] usb 6-1: USB disconnect, device number 16 [ 1224.957312][ T6528] wacom 0003:056A:0029.0004: Unknown device_type for 'HID 056a:0029'. Assuming pen. [ 1224.967203][ T6528] wacom 0003:056A:0029.0004: hidraw0: USB HID v0.00 Device [HID 056a:0029] on usb-dummy_hcd.2-1/input0 [ 1224.978756][ T6528] input: Wacom Intuos5 S Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:0029.0004/input/input22 [ 1225.163334][ T6528] usb 3-1: USB disconnect, device number 27 [ 1225.231795][ T28] kauditd_printk_skb: 22 callbacks suppressed [ 1225.231809][ T28] audit: type=1326 audit(2000002374.538:2016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12140 comm="syz.5.2772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f527f78ebe9 code=0x7ffc0000 [ 1225.276839][ T28] audit: type=1326 audit(2000002374.538:2017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12140 comm="syz.5.2772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f527f78ebe9 code=0x7ffc0000 [ 1225.304610][T12145] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12145 comm=syz.0.2774 [ 1225.317189][ T28] audit: type=1326 audit(2000002374.538:2018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12140 comm="syz.5.2772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f527f78ebe9 code=0x7ffc0000 [ 1225.342223][ T28] audit: type=1326 audit(2000002374.538:2019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12140 comm="syz.5.2772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f527f78ebe9 code=0x7ffc0000 [ 1225.366885][ T28] audit: type=1326 audit(2000002374.538:2020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12140 comm="syz.5.2772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f527f78ebe9 code=0x7ffc0000 [ 1225.391090][ T28] audit: type=1326 audit(2000002374.538:2021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12140 comm="syz.5.2772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=86 compat=0 ip=0x7f527f78ebe9 code=0x7ffc0000 [ 1225.419651][ T28] audit: type=1326 audit(2000002374.538:2022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12140 comm="syz.5.2772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f527f78ebe9 code=0x7ffc0000 [ 1225.447842][ T28] audit: type=1326 audit(2000002374.538:2023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12140 comm="syz.5.2772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f527f78ebe9 code=0x7ffc0000 [ 1225.477404][ T28] audit: type=1400 audit(2000002374.618:2024): avc: denied { getopt } for pid=12142 comm="syz.5.2773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1225.483456][T12151] random: crng reseeded on system resumption [ 1225.845693][ T6528] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 1226.082586][T12168] syz.2.2783[12168] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1226.083385][T12168] syz.2.2783[12168] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1226.124449][T12168] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1226.206342][ T336] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1226.471668][ T6528] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 1226.491507][ T6528] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1226.511028][ T6528] usb 5-1: config 220 has an invalid descriptor of length 13, skipping remainder of the config [ 1226.539239][ T6528] usb 5-1: config 220 has no interface number 2 [ 1226.556789][ T6528] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1226.651124][T12170] overlayfs: failed to clone lowerpath [ 1226.659227][ T6528] usb 5-1: config 220 interface 0 has no altsetting 0 [ 1226.666003][ T6528] usb 5-1: config 220 interface 76 has no altsetting 0 [ 1226.689119][ T6528] usb 5-1: config 220 interface 1 has no altsetting 0 [ 1226.700849][ T6528] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1226.714145][ T6528] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1226.727290][ T6528] usb 5-1: Product: syz [ 1226.734358][ T6528] usb 5-1: Manufacturer: syz [ 1226.741054][ T6528] usb 5-1: SerialNumber: syz [ 1226.957816][ T6528] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 1226.968898][ T6528] usb 5-1: No valid video chain found. [ 1226.974399][ T6528] usb 5-1: selecting invalid altsetting 0 [ 1226.990409][ T6528] usb 5-1: USB disconnect, device number 15 [ 1227.005666][T12178] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12178 comm=syz.3.2788 [ 1227.149810][ T336] usb 6-1: config 0 has no interfaces? [ 1227.155981][ T336] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1227.165068][ T336] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1227.173065][ T336] usb 6-1: Manufacturer: syz [ 1227.178527][ T336] usb 6-1: config 0 descriptor?? [ 1227.268725][T11612] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 1227.448602][T11612] usb 3-1: Using ep0 maxpacket: 8 [ 1227.454724][T11612] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1227.465734][T11612] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1227.474382][T12194] tipc: Enabling of bearer rejected, failed to enable media [ 1227.475707][T11612] usb 3-1: New USB device found, idVendor=046d, idProduct=c343, bcdDevice= 0.00 [ 1227.493170][T11612] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1227.501943][T11612] usb 3-1: config 0 descriptor?? [ 1227.696492][T12200] syz.3.2798[12200] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1227.696719][T12200] syz.3.2798[12200] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1227.719312][T12200] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1227.759309][ T6528] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 1227.921355][T12204] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12204 comm=syz.0.2800 [ 1227.949803][ T6528] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 1227.961350][ T6528] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1227.972234][ T6528] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1227.985930][ T6528] usb 5-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00 [ 1227.995790][ T6528] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1228.021076][ T6528] usb 5-1: config 0 descriptor?? [ 1228.318249][T11612] logitech-hidpp-device 0003:046D:C343.0005: unbalanced delimiter at end of report description [ 1228.353384][T11612] logitech-hidpp-device 0003:046D:C343.0005: hidpp_probe:parse failed [ 1228.365753][T11612] logitech-hidpp-device: probe of 0003:046D:C343.0005 failed with error -22 [ 1228.445696][T11612] usb 3-1: USB disconnect, device number 28 [ 1228.488095][ T6528] uclogic 0003:5543:0004.0006: No inputs registered, leaving [ 1228.496046][ T6528] uclogic 0003:5543:0004.0006: hidraw0: USB HID v0.00 Device [HID 5543:0004] on usb-dummy_hcd.4-1/input0 [ 1228.566539][ T6528] usb 6-1: USB disconnect, device number 17 [ 1228.610513][T12227] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12227 comm=syz.5.2811 [ 1228.644014][ T28] audit: type=1400 audit(2000002377.950:2025): avc: denied { mount } for pid=12229 comm="syz.0.2812" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 1228.673798][ T336] usb 5-1: USB disconnect, device number 16 [ 1228.706588][T12239] xt_bpf: check failed: parse error [ 1228.846155][T12244] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2809'. [ 1228.972973][T12256] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2819'. [ 1229.227717][ T6528] usb 6-1: new full-speed USB device number 18 using dummy_hcd [ 1229.448525][ T6528] usb 6-1: too many endpoints for config 0 interface 0 altsetting 4: 129, using maximum allowed: 30 [ 1229.459541][ T6528] usb 6-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1229.467593][ T336] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 1229.470560][ T6528] usb 6-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 1229.491115][ T6528] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1229.497734][ T6528] usb 6-1: New USB device found, idVendor=05ac, idProduct=0222, bcdDevice= 0.00 [ 1229.506785][ T6528] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1229.515645][ T6528] usb 6-1: config 0 descriptor?? [ 1229.520854][T12249] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1229.614739][T12265] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2824'. [ 1229.657528][ T336] usb 5-1: Using ep0 maxpacket: 32 [ 1229.663737][ T336] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1229.677666][ T336] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1229.698794][ T336] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1229.707913][ T336] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1229.716251][ T336] usb 5-1: Product: syz [ 1229.724755][ T336] usb 5-1: Manufacturer: syz [ 1229.734951][ T336] hub 5-1:4.0: USB hub found [ 1229.742967][T12267] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2825'. [ 1229.836979][T12279] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12279 comm=syz.0.2831 [ 1229.935675][ T336] hub 5-1:4.0: 7 ports detected [ 1229.935722][ T6528] apple 0003:05AC:0222.0007: hidraw0: USB HID v1.00 Device [HID 05ac:0222] on usb-dummy_hcd.5-1/input0 [ 1229.940986][ T336] hub 5-1:4.0: insufficient power available to use all downstream ports [ 1230.140144][T11612] usb 6-1: USB disconnect, device number 18 [ 1230.146540][ T336] hub 5-1:4.0: hub_hub_status failed (err = -71) [ 1230.153112][ T336] hub 5-1:4.0: config failed, can't get hub status (err -71) [ 1230.188432][ T336] usb 5-1: USB disconnect, device number 17 [ 1230.210591][T12288] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2836'. [ 1230.383836][T12294] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12294 comm=syz.0.2838 [ 1230.582677][T12300] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2837'. [ 1231.006029][T12310] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12310 comm=syz.0.2844 [ 1231.136777][ T336] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1231.326706][ T336] usb 6-1: Using ep0 maxpacket: 16 [ 1231.333006][ T336] usb 6-1: config 0 has an invalid interface number: 104 but max is 1 [ 1231.341439][ T336] usb 6-1: config 0 has an invalid interface number: 104 but max is 1 [ 1231.349795][ T336] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1231.358827][ T336] usb 6-1: config 0 has no interface number 0 [ 1231.364912][ T336] usb 6-1: config 0 interface 104 altsetting 0 endpoint 0x8 has invalid maxpacket 19978, setting to 64 [ 1231.376175][ T336] usb 6-1: config 0 interface 104 has no altsetting 1 [ 1231.396689][ T6528] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 1231.396730][ T336] usb 6-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice= 0.00 [ 1231.404482][T12323] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2849'. [ 1231.416587][ T336] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1231.430545][ T336] usb 6-1: Product: syz [ 1231.434708][ T336] usb 6-1: Manufacturer: syz [ 1231.439469][ T336] usb 6-1: SerialNumber: syz [ 1231.447206][ T336] usb 6-1: config 0 descriptor?? [ 1231.631004][ T6528] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1231.643378][ T6528] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1231.653513][ T6528] usb 3-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 1231.653968][ T336] asix 6-1:0.104 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1231.662590][ T6528] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1231.669266][ T6528] usb 3-1: config 0 descriptor?? [ 1231.688234][ T336] asix: probe of 6-1:0.104 failed with error -71 [ 1231.688440][T12325] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12325 comm=syz.4.2850 [ 1231.699903][ T336] usb 6-1: USB disconnect, device number 19 [ 1231.910014][T12330] syz.4.2851[12330] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1231.910345][T12330] syz.4.2851[12330] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1231.974751][T12330] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1232.358490][ T6528] hid-led 0003:1D34:000A.0008: item fetching failed at offset 0/3 [ 1232.374232][ T6528] hid-led: probe of 0003:1D34:000A.0008 failed with error -22 [ 1232.667865][ T6528] usb 3-1: USB disconnect, device number 29 [ 1232.774704][T12340] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12340 comm=syz.4.2856 [ 1232.959858][T12355] syz.0.2857[12355] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1232.960118][T12355] syz.0.2857[12355] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1232.986014][T12355] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1233.619799][T12360] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2862'. [ 1233.945455][ T336] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1234.034490][T12365] overlayfs: failed to clone lowerpath [ 1234.135475][ T6528] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 1234.155350][ T336] usb 6-1: Using ep0 maxpacket: 8 [ 1234.162048][ T336] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 1234.636582][T12375] overlayfs: failed to clone upperpath [ 1234.711767][ T336] usb 6-1: config 179 has no interface number 0 [ 1234.718221][ T336] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1234.734085][ T336] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1234.752905][ T336] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1234.771081][ T336] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1234.790492][ T336] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1234.812057][ T336] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1234.827256][ T336] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1234.844891][T12334] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1234.999840][T12376] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2866'. [ 1235.187411][ T6528] usb 3-1: config 0 has an invalid interface number: 28 but max is 0 [ 1235.197349][ T6528] usb 3-1: config 0 has no interface number 0 [ 1235.203433][ T6528] usb 3-1: config 0 interface 28 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1235.224761][ T6528] usb 3-1: config 0 interface 28 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1235.234609][ T6528] usb 3-1: New USB device found, idVendor=046d, idProduct=c534, bcdDevice= 0.00 [ 1235.243930][ T6528] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1235.260605][ T336] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input25 [ 1235.265967][ T6528] usb 3-1: config 0 descriptor?? [ 1235.308092][T12381] overlayfs: failed to clone lowerpath [ 1235.323037][ T336] usb 6-1: USB disconnect, device number 20 [ 1235.329029][ C0] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1235.329062][ C0] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1235.346491][ T336] xpad 6-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 1235.691473][ T6528] logitech-djreceiver 0003:046D:C534.0009: unknown main item tag 0x0 [ 1235.699608][ T6528] logitech-djreceiver 0003:046D:C534.0009: unknown main item tag 0x0 [ 1235.707716][ T6528] logitech-djreceiver 0003:046D:C534.0009: unknown main item tag 0x0 [ 1235.715807][ T6528] logitech-djreceiver 0003:046D:C534.0009: unknown main item tag 0x0 [ 1235.724330][ T6528] logitech-djreceiver 0003:046D:C534.0009: hidraw0: USB HID v0.00 Device [HID 046d:c534] on usb-dummy_hcd.2-1/input28 [ 1235.920833][ T336] usb 3-1: USB disconnect, device number 30 [ 1235.992562][ T28] audit: type=1400 audit(2000002385.294:2026): avc: denied { mounton } for pid=12406 comm="syz.5.2881" path="/syzcgroup/cpu/syz5/cpuset.cpus" dev="cgroup" ino=321 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 1235.994621][T12400] overlayfs: failed to clone lowerpath [ 1236.135960][ T6528] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 1236.143870][ T6528] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1236.169756][T12420] fido_id[12420]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1236.385362][T12432] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2889'. [ 1236.496857][T12435] tun0: tun_chr_ioctl cmd 1074025676 [ 1236.502179][T12435] tun0: owner set to 0 [ 1236.524075][ T336] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1236.569221][ T28] audit: type=1400 audit(2000002385.874:2027): avc: denied { append } for pid=12438 comm="syz.2.2894" name="ptp0" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1236.601922][ T28] audit: type=1400 audit(2000002385.904:2028): avc: denied { open } for pid=12438 comm="syz.2.2894" path="/dev/ptp0" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1236.725041][ T336] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1236.735991][ T336] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1236.745741][ T336] usb 6-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 1236.754785][ T336] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1236.767456][ T336] usb 6-1: config 0 descriptor?? [ 1236.923890][T11612] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 1237.181159][ T336] hkems 0003:2006:0118.000B: unknown main item tag 0xe [ 1237.188296][ T336] hkems 0003:2006:0118.000B: item fetching failed at offset 4/7 [ 1237.196027][T11612] usb 3-1: Using ep0 maxpacket: 16 [ 1237.202743][T11612] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1237.213944][ T336] hkems 0003:2006:0118.000B: parse failed [ 1237.219732][ T336] hkems: probe of 0003:2006:0118.000B failed with error -22 [ 1237.227136][T11612] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1237.243437][T11612] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1237.252656][T11612] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1237.264036][T11612] usb 3-1: config 0 descriptor?? [ 1237.418398][ T6528] usb 6-1: USB disconnect, device number 21 [ 1237.652319][ T28] audit: type=1400 audit(2000002386.954:2029): avc: denied { relabelfrom } for pid=12475 comm="syz.4.2909" name="" dev="pipefs" ino=53211 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 1237.652364][T12476] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 1237.711639][ T28] audit: type=1400 audit(2000002387.014:2030): avc: denied { relabelto } for pid=12475 comm="syz.4.2909" name="" dev="pipefs" ino=53211 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 1237.742380][T11612] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 1237.753554][T11612] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 1237.760804][T11612] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 1237.779703][T11612] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 1237.795907][T11612] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 1237.803215][T11612] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 1237.811947][T11612] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 1237.819398][T11612] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 1237.829473][T11612] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 1237.847857][T11612] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 1237.865414][T11612] HID 045e:07da: Invalid code 65791 type 1 [ 1237.880376][T11612] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.000C/input/input26 [ 1237.893813][T11612] microsoft 0003:045E:07DA.000C: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 1238.044256][ T28] audit: type=1400 audit(2000002387.355:2031): avc: denied { append } for pid=12492 comm="syz.5.2917" name="001" dev="devtmpfs" ino=179 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1238.215491][T12513] 9pnet_fd: Insufficient options for proto=fd [ 1238.247277][T11612] usb 3-1: USB disconnect, device number 31 [ 1238.493330][T12515] overlayfs: failed to resolve './file1/file0': -2 [ 1238.943028][ T336] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1239.145210][ T336] usb 6-1: New USB device found, idVendor=0b95, idProduct=772b, bcdDevice=a2.4c [ 1239.154542][ T336] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1239.162551][ T336] usb 6-1: Product: syz [ 1239.167037][ T336] usb 6-1: Manufacturer: syz [ 1239.171642][ T336] usb 6-1: SerialNumber: syz [ 1239.179639][ T336] usb 6-1: config 0 descriptor?? [ 1239.244211][T12522] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2927'. [ 1239.284958][T12522] Invalid ELF header magic: != ELF [ 1240.027337][T12538] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2928'. [ 1240.502108][T11295] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 1240.560689][ T336] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1240.571015][ T336] asix: probe of 6-1:0.0 failed with error -71 [ 1240.578428][ T336] usb 6-1: USB disconnect, device number 22 [ 1240.702006][T11295] usb 5-1: Using ep0 maxpacket: 16 [ 1240.708300][T11295] usb 5-1: config 0 has an invalid interface number: 251 but max is 0 [ 1240.721934][T11295] usb 5-1: config 0 has no interface number 0 [ 1240.728434][T11295] usb 5-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 1240.738681][T11295] usb 5-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1240.753300][T11295] usb 5-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 1240.766526][T11295] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1240.774757][T11295] usb 5-1: Product: syz [ 1240.778919][T11295] usb 5-1: Manufacturer: syz [ 1240.783825][T11295] usb 5-1: SerialNumber: syz [ 1240.789243][T11295] usb 5-1: config 0 descriptor?? [ 1240.794610][T12531] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1240.801944][T12531] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1241.011984][T12531] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1241.021800][T12531] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1241.071824][ T6528] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 1241.232290][ T28] audit: type=1400 audit(2000002390.546:2032): avc: denied { mount } for pid=12567 comm="syz.5.2943" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 1241.257973][ T28] audit: type=1400 audit(2000002390.546:2033): avc: denied { unmount } for pid=486 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 1241.261978][T12569] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2941'. [ 1241.332257][ T6528] usb 3-1: config 0 has no interfaces? [ 1241.338550][ T6528] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1241.347730][ T6528] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1241.355771][ T6528] usb 3-1: Manufacturer: syz [ 1241.361241][ T6528] usb 3-1: config 0 descriptor?? [ 1241.389194][T12572] syz.5.2944[12572] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1241.389246][T12572] syz.5.2944[12572] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1241.403835][T12572] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1241.431310][T11295] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1241.441970][T11295] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71 [ 1241.453972][T11295] asix: probe of 5-1:0.251 failed with error -71 [ 1241.461207][T11295] usb 5-1: USB disconnect, device number 18 [ 1241.951021][ T28] audit: type=1400 audit(2000002391.257:2034): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 1242.050711][ T28] audit: type=1400 audit(2000002391.357:2035): avc: denied { write } for pid=12584 comm="syz.4.2950" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1242.186525][T12593] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2949'. [ 1242.261796][T12600] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2952'. [ 1242.322575][T12600] Invalid ELF header magic: != ELF [ 1242.500081][T12607] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12607 comm=syz.3.2958 [ 1242.842050][T12616] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2961'. [ 1243.191087][T12622] syz.0.2963[12622] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1243.191164][T12622] syz.0.2963[12622] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1243.204710][T12622] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1243.414815][T12629] syz.4.2964[12629] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1243.415194][T12629] syz.4.2964[12629] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1243.479015][T12629] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1244.502867][T12630] overlayfs: failed to resolve './file1/file0': -2 [ 1244.685473][ T6528] usb 3-1: USB disconnect, device number 32 [ 1245.909414][T12661] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2973'. [ 1246.108157][T12670] syz.0.2980[12670] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1246.109193][T12670] syz.0.2980[12670] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1246.183801][T12670] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1246.226935][T12671] syz.2.2979[12671] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1246.228059][T12671] syz.2.2979[12671] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1246.342400][T12671] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1247.119053][T12669] overlayfs: failed to resolve './file1/file0': -2 [ 1247.546793][T12687] overlayfs: failed to clone lowerpath [ 1247.656837][T12690] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2981'. [ 1247.749994][T12693] syz.0.2986[12693] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1247.750340][T12693] syz.0.2986[12693] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1247.778136][T12693] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1248.730652][ T28] audit: type=1400 audit(2000002398.050:2036): avc: denied { ioctl } for pid=12703 comm="syz.5.2991" path="/dev/ptp0" dev="devtmpfs" ino=264 ioctlcmd=0x3d07 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1248.934040][T12713] syz.5.2993[12713] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1248.934312][T12713] syz.5.2993[12713] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1248.959196][T12713] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1249.400536][T12721] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2996'. [ 1249.838135][ T28] audit: type=1400 audit(2000002399.161:2037): avc: denied { validate_trans } for pid=12730 comm="syz.2.3001" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 1250.160421][T12754] syz.3.3010[12754] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1250.160747][T12754] syz.3.3010[12754] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1250.217795][T12754] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1250.461345][ T28] audit: type=1400 audit(2000002399.781:2038): avc: denied { bind } for pid=12755 comm="syz.4.3012" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1250.618968][T12757] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3011'. [ 1251.686534][T11295] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 1251.702791][T12792] overlayfs: failed to clone lowerpath [ 1251.875498][T11295] usb 3-1: config 0 has an invalid interface number: 46 but max is 0 [ 1251.885286][T11295] usb 3-1: config 0 has no interface number 0 [ 1251.893850][T11295] usb 3-1: config 0 interface 46 has no altsetting 0 [ 1251.907664][T12819] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3028'. [ 1251.917268][T11295] usb 3-1: New USB device found, idVendor=0781, idProduct=0100, bcdDevice= 1.00 [ 1251.933776][T11295] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1251.947351][T11295] usb 3-1: config 0 descriptor?? [ 1252.005632][T12823] syz.4.3033[12823] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1252.005977][T12823] syz.4.3033[12823] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1252.062672][T12823] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1252.208769][T12824] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3040'. [ 1252.285242][T12824] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3040'. [ 1252.765954][ T39] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 1252.780014][T12830] 9pnet_fd: Insufficient options for proto=fd [ 1252.967039][ T39] usb 6-1: config 0 has no interfaces? [ 1252.973384][ T39] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1252.985367][ T39] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1252.996430][ T39] usb 6-1: Manufacturer: syz [ 1253.006762][ T39] usb 6-1: config 0 descriptor?? [ 1253.497585][T11295] usb 3-1: can't set config #0, error -71 [ 1253.505244][T11295] usb 3-1: USB disconnect, device number 33 [ 1253.721640][T12854] syz.4.3044[12854] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1253.721934][T12854] syz.4.3044[12854] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1253.779259][T12854] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1254.440876][T12858] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3045'. [ 1254.470684][T12869] syz.0.3057[12869] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1254.470763][T12869] syz.0.3057[12869] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1254.735050][T11295] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 1254.831103][T12924] syz.0.3084[12924] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1254.831326][T12924] syz.0.3084[12924] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1254.840005][ T39] usb 6-1: USB disconnect, device number 23 [ 1254.957504][T11295] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1254.971715][T11295] usb 5-1: New USB device found, idVendor=17ef, idProduct=60a3, bcdDevice= 0.00 [ 1254.998856][T11295] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1255.014522][T11295] usb 5-1: config 0 descriptor?? [ 1255.350400][T12940] overlayfs: failed to clone lowerpath [ 1255.446744][T12942] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12942 comm=syz.5.3092 [ 1255.506280][T11295] lenovo 0003:17EF:60A3.000D: item fetching failed at offset 2/5 [ 1255.514226][T11295] lenovo 0003:17EF:60A3.000D: hid_parse failed [ 1255.520750][T11295] lenovo: probe of 0003:17EF:60A3.000D failed with error -22 [ 1255.587697][T12951] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3093'. [ 1255.916597][T12957] overlayfs: failed to resolve './file1/file0': -2 [ 1256.037336][T11295] usb 5-1: USB disconnect, device number 19 [ 1256.094492][ T336] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 1256.374240][ T336] usb 6-1: Using ep0 maxpacket: 16 [ 1256.381628][ T336] usb 6-1: config 0 has an invalid interface number: 251 but max is 0 [ 1256.672038][ T336] usb 6-1: config 0 has no interface number 0 [ 1256.678399][ T336] usb 6-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 1256.688449][ T336] usb 6-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1256.703026][ T336] usb 6-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 1256.713967][ T336] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1256.721963][ T336] usb 6-1: Product: syz [ 1256.727291][ T336] usb 6-1: Manufacturer: syz [ 1256.731940][ T336] usb 6-1: SerialNumber: syz [ 1256.741597][ T336] usb 6-1: config 0 descriptor?? [ 1256.747168][T12956] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1256.764259][T12956] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1256.771446][T12976] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1256.981755][T12956] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1256.989111][T12956] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1257.027018][T12989] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3109'. [ 1257.273727][T11295] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 1257.711348][T13002] overlayfs: failed to clone upperpath [ 1257.728521][ T336] asix 6-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1257.753720][ T336] asix 6-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71 [ 1257.767486][ T336] asix: probe of 6-1:0.251 failed with error -71 [ 1257.803133][ T336] usb 6-1: USB disconnect, device number 24 [ 1257.864948][T11295] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 1257.875097][T11295] usb 3-1: config 0 has no interface number 0 [ 1257.887030][T11295] usb 3-1: config 0 interface 85 altsetting 151 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1257.907941][T11295] usb 3-1: config 0 interface 85 altsetting 151 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1257.926619][T11295] usb 3-1: config 0 interface 85 has no altsetting 0 [ 1257.938925][T11295] usb 3-1: New USB device found, idVendor=1d34, idProduct=0004, bcdDevice= 0.00 [ 1257.956011][T11295] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1257.989068][T11295] usb 3-1: config 0 descriptor?? [ 1258.300994][T13014] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13014 comm=syz.3.3120 [ 1258.328206][ T28] audit: type=1400 audit(2000002407.645:2039): avc: denied { write } for pid=13017 comm="syz.4.3123" name="ppp" dev="devtmpfs" ino=157 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1258.358114][T13022] incfs: Options parsing error. -22 [ 1258.363516][T13022] incfs: mount failed -22 [ 1258.402212][T11295] hid-led 0003:1D34:0004.000E: unknown main item tag 0x0 [ 1258.409576][T11295] hid-led 0003:1D34:0004.000E: unknown main item tag 0x0 [ 1258.416734][T11295] hid-led 0003:1D34:0004.000E: unknown main item tag 0x0 [ 1258.424044][T11295] hid-led 0003:1D34:0004.000E: unknown main item tag 0x0 [ 1258.431108][T11295] hid-led 0003:1D34:0004.000E: unknown main item tag 0x0 [ 1258.438172][T11295] hid-led 0003:1D34:0004.000E: unknown main item tag 0x0 [ 1258.445313][T11295] hid-led 0003:1D34:0004.000E: unknown main item tag 0x0 [ 1258.482065][T13038] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13038 comm=syz.3.3132 [ 1258.777093][T13042] overlayfs: failed to resolve './file1/file0': -2 [ 1258.997840][T11295] hid-led 0003:1D34:0004.000E: hidraw0: USB HID v0.00 Device [HID 1d34:0004] on usb-dummy_hcd.2-1/input85 [ 1259.019906][T11295] hid-led 0003:1D34:0004.000E: Dream Cheeky Webmail Notifier initialized [ 1259.386258][ T39] usb 3-1: USB disconnect, device number 34 [ 1259.531916][T13054] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3133'. [ 1259.920191][T13074] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13074 comm=syz.2.3145 [ 1260.490065][T13086] overlayfs: failed to clone upperpath [ 1260.702099][T11295] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 1260.959378][T11295] usb 5-1: config 0 has no interfaces? [ 1260.965607][T11295] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1260.981834][T11295] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1260.989970][T11295] usb 5-1: Manufacturer: syz [ 1261.002140][T11295] usb 5-1: config 0 descriptor?? [ 1261.236389][ T28] audit: type=1326 audit(2000002410.556:2040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13098 comm="syz.5.3154" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f527f78ebe9 code=0x0 [ 1261.266429][T13104] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13104 comm=syz.3.3157 [ 1261.311027][T13108] syz.2.3156[13108] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1261.311104][T13108] syz.2.3156[13108] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1261.440607][T13095] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3152'. [ 1261.677407][ T28] audit: type=1400 audit(2000002410.996:2041): avc: denied { mounton } for pid=13129 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 1261.995808][T13131] overlayfs: failed to resolve './file1': -2 [ 1262.007845][ T7234] tipc: Disabling bearer [ 1262.019149][ T7234] tipc: Left network mode [ 1262.246297][T13129] bridge0: port 1(bridge_slave_0) entered blocking state [ 1262.254557][T13129] bridge0: port 1(bridge_slave_0) entered disabled state [ 1262.274329][ T28] audit: type=1400 audit(2000002411.597:2042): avc: denied { ioctl } for pid=13135 comm="syz.5.3171" path="/dev/ppp" dev="devtmpfs" ino=157 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1262.317086][T13129] device bridge_slave_0 entered promiscuous mode [ 1262.375723][T13129] bridge0: port 2(bridge_slave_1) entered blocking state [ 1262.383122][T13129] bridge0: port 2(bridge_slave_1) entered disabled state [ 1262.393619][T13129] device bridge_slave_1 entered promiscuous mode [ 1262.612659][T13129] bridge0: port 2(bridge_slave_1) entered blocking state [ 1262.619736][T13129] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1262.627035][T13129] bridge0: port 1(bridge_slave_0) entered blocking state [ 1262.634072][T13129] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1262.680448][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1262.689980][ T3618] bridge0: port 1(bridge_slave_0) entered disabled state [ 1262.698472][ T3618] bridge0: port 2(bridge_slave_1) entered disabled state [ 1262.710069][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1262.722263][ T3618] bridge0: port 1(bridge_slave_0) entered blocking state [ 1262.729309][ T3618] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1262.747039][T13158] usb usb1: usbfs: process 13158 (syz.5.3176) did not claim interface 0 before use [ 1262.757784][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1262.770602][ T3618] bridge0: port 2(bridge_slave_1) entered blocking state [ 1262.777695][ T3618] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1262.790052][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1262.799418][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1263.200960][T13164] overlayfs: failed to clone upperpath [ 1263.324494][ T7234] device veth1_macvtap left promiscuous mode [ 1263.678361][T13129] device veth0_vlan entered promiscuous mode [ 1263.685551][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1263.694335][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1263.703193][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1263.711020][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1263.735078][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1263.750764][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1263.759725][T13129] device veth1_macvtap entered promiscuous mode [ 1263.770444][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1263.778280][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1263.787029][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1263.811124][ T28] audit: type=1400 audit(2000002413.138:2043): avc: denied { mounton } for pid=13129 comm="syz-executor" path="/root/syzkaller.984mbM/syz-tmp" dev="sda1" ino=2049 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 1263.836848][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1263.850934][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1263.873957][ T28] audit: type=1400 audit(2000002413.168:2044): avc: denied { mount } for pid=13129 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1263.902187][ T6528] usb 5-1: USB disconnect, device number 20 [ 1263.917840][ T28] audit: type=1400 audit(2000002413.168:2045): avc: denied { mounton } for pid=13129 comm="syz-executor" path="/root/syzkaller.984mbM/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 1263.953787][ T28] audit: type=1400 audit(2000002413.168:2046): avc: denied { mounton } for pid=13129 comm="syz-executor" path="/root/syzkaller.984mbM/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=57476 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 1263.984323][ T28] audit: type=1400 audit(2000002413.168:2047): avc: denied { mounton } for pid=13129 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=570 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 1264.011706][T13179] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3178'. [ 1264.020737][ T28] audit: type=1400 audit(2000002413.168:2048): avc: denied { mounton } for pid=13129 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 1264.056011][ T28] audit: type=1400 audit(2000002413.258:2049): avc: denied { write } for pid=13168 comm="syz.6.3169" name="/" dev="configfs" ino=14582 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1264.093453][ T28] audit: type=1400 audit(2000002413.268:2050): avc: denied { unmount } for pid=13129 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 1264.115212][T13184] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 1264.139734][ T28] audit: type=1400 audit(2000002413.438:2051): avc: denied { load_policy } for pid=13183 comm="syz.6.3185" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 1264.149602][T13184] SELinux: failed to load policy [ 1264.390198][T11295] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 1264.654012][T13202] loop6: detected capacity change from 0 to 512 [ 1264.674932][T13202] EXT4-fs: Ignoring removed orlov option [ 1264.785483][T13202] EXT4-fs (loop6): 1 orphan inode deleted [ 1264.794223][T13202] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1264.826784][T13202] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1264.874939][T13202] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3192'. [ 1264.930851][ T6528] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 1264.939240][ T524] Quota error (device loop6): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1265.006063][ T524] EXT4-fs error (device loop6): ext4_release_dquot:6837: comm kworker/u4:7: Failed to release dquot type 1 [ 1265.028275][T13202] Invalid ELF header magic: != ELF [ 1265.110843][T11295] usb 3-1: config 0 has no interfaces? [ 1265.117223][T11295] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1265.131745][T11295] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1265.149766][T11295] usb 3-1: Manufacturer: syz [ 1265.160330][T11295] usb 3-1: config 0 descriptor?? [ 1265.190721][ T6528] usb 5-1: config 0 has no interfaces? [ 1265.200215][ T6528] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1265.219422][ T6528] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1265.239592][ T6528] usb 5-1: Manufacturer: syz [ 1265.334970][ T6528] usb 5-1: config 0 descriptor?? [ 1265.773961][T13240] overlayfs: failed to clone upperpath [ 1266.058215][T13129] EXT4-fs (loop6): unmounting filesystem. [ 1266.361703][T13244] loop6: detected capacity change from 0 to 1024 [ 1266.380184][T13248] binder: 13247:13248 ioctl 400c620e 2000000001c0 returned -22 [ 1266.400782][T13244] EXT4-fs: Ignoring removed i_version option [ 1266.409420][T13244] EXT4-fs (loop6): Test dummy encryption mode enabled [ 1266.441830][ T39] usb 3-1: USB disconnect, device number 35 [ 1266.495243][T13244] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1266.508590][T13256] syz.5.3211[13256] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1266.508666][T13256] syz.5.3211[13256] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1266.774005][T13265] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3208'. [ 1267.019087][ T336] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 1268.654059][T11612] usb 5-1: USB disconnect, device number 21 [ 1268.679140][ T336] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1268.689944][ T336] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1268.704865][ T336] usb 6-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf [ 1268.714162][ T336] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1268.723586][ T336] usb 6-1: Product: syz [ 1268.727750][ T336] usb 6-1: Manufacturer: syz [ 1268.732562][ T336] usb 6-1: SerialNumber: syz [ 1268.739570][ T336] usb 6-1: config 0 descriptor?? [ 1268.745531][ T336] usb 6-1: Found UVC 0.00 device syz (18ec:3288) [ 1268.751994][ T336] usb 6-1: No valid video chain found. [ 1268.813273][T13129] EXT4-fs (loop6): unmounting filesystem. [ 1268.844172][T13270] loop6: detected capacity change from 0 to 1024 [ 1268.857264][T13270] EXT4-fs: Ignoring removed i_version option [ 1268.864099][T13270] EXT4-fs (loop6): Test dummy encryption mode enabled [ 1268.872706][T13270] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1268.946880][T11612] usb 6-1: USB disconnect, device number 25 [ 1269.151214][T13284] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3218'. [ 1269.271252][T13289] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3219'. [ 1269.437640][T11612] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 1269.618523][T11612] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1269.629766][T11612] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1269.639555][T11612] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1269.652437][T11612] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1269.661723][T11612] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1269.671178][T11612] usb 5-1: config 0 descriptor?? [ 1269.773433][T13129] EXT4-fs (loop6): unmounting filesystem. [ 1269.820003][ T28] audit: type=1400 audit(2000002419.151:2052): avc: denied { read } for pid=13314 comm="syz.2.3234" name="ptp0" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1270.017310][ T336] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 1270.079619][T11612] plantronics 0003:047F:FFFF.000F: unbalanced delimiter at end of report description [ 1270.090042][T11612] plantronics 0003:047F:FFFF.000F: parse failed [ 1270.096302][T11612] plantronics: probe of 0003:047F:FFFF.000F failed with error -22 [ 1270.106996][ T28] audit: type=1400 audit(2000002419.431:2053): avc: denied { setattr } for pid=13334 comm="syz.6.3242" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 1270.198293][ T336] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1270.209240][ T336] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1270.218991][ T336] usb 6-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 1270.228141][ T336] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1270.236902][ T336] usb 6-1: config 0 descriptor?? [ 1270.286369][T11612] usb 5-1: USB disconnect, device number 22 [ 1270.644785][ T336] hid-steam 0003:28DE:1142.0010: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.5-1/input0 [ 1270.656803][ T336] hid-steam 0003:28DE:1142.0011: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.5-1/input0 [ 1270.746977][ T336] hid-steam 0003:28DE:1142.0010: Steam wireless receiver connected [ 1270.854741][ T6528] usb 6-1: USB disconnect, device number 26 [ 1270.872377][ T6528] hid-steam 0003:28DE:1142.0010: Steam wireless receiver disconnected [ 1271.153551][ T28] audit: type=1400 audit(2000002420.481:2054): avc: denied { unmount } for pid=13129 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1271.780132][T13384] overlayfs: failed to resolve './file1/file0': -2 [ 1271.856470][ T336] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1271.981281][T13387] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3261'. [ 1272.014704][T13387] Invalid ELF header magic: != ELF [ 1272.136296][ T336] usb 7-1: Using ep0 maxpacket: 16 [ 1272.146763][ T336] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1272.161518][ T336] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1272.187876][ T336] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1272.194516][ T336] usb 7-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1272.205221][ T336] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1272.251432][ T336] usb 7-1: config 0 descriptor?? [ 1272.561822][T13410] syz.0.3271[13410] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1272.562043][T13410] syz.0.3271[13410] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1272.599694][T13410] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1273.229309][T11612] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 1273.245313][ T336] usb 7-1: USB disconnect, device number 2 [ 1273.305704][T11295] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 1273.315691][T11606] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 1273.383672][T13426] loop6: detected capacity change from 0 to 1024 [ 1273.391784][T13426] EXT4-fs: Ignoring removed oldalloc option [ 1273.403767][T13426] EXT4-fs: Ignoring removed bh option [ 1273.409648][T13426] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1273.425822][T11612] usb 6-1: Using ep0 maxpacket: 32 [ 1273.433164][T11612] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 1273.441756][T13426] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1273.451128][T11612] usb 6-1: config 0 has no interface number 0 [ 1273.464909][T11612] usb 6-1: config 0 interface 184 has no altsetting 0 [ 1273.475906][T11612] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1273.478497][T13426] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:3841: comm syz.6.3279: Allocating blocks 449-513 which overlap fs metadata [ 1273.485047][T11612] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1273.503862][T13425] EXT4-fs (loop6): pa ffff888115ef0bd0: logic 48, phys. 177, len 21 [ 1273.507008][T11295] usb 3-1: Using ep0 maxpacket: 16 [ 1273.514958][T13425] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:4881: group 0, free 0, pa_free 4 [ 1273.520813][T11612] usb 6-1: Product: syz [ 1273.534479][T11612] usb 6-1: Manufacturer: syz [ 1273.539580][T11606] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1273.550986][T11612] usb 6-1: SerialNumber: syz [ 1273.551792][T13129] EXT4-fs (loop6): unmounting filesystem. [ 1273.556370][T11606] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1273.571571][T11295] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1273.583137][T11612] usb 6-1: config 0 descriptor?? [ 1273.588112][T11295] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1273.598024][T11606] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1273.611179][T11295] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 1273.611593][T11612] smsc75xx v1.0.0 [ 1273.624612][T11295] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1273.634019][T11295] usb 3-1: config 0 descriptor?? [ 1273.639177][T11606] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1273.648455][T11606] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1273.658450][T11606] usb 5-1: config 0 descriptor?? [ 1273.744095][T13433] loop6: detected capacity change from 0 to 40427 [ 1273.751099][T13433] F2FS-fs (loop6): Insane cp_payload (553648128 >= 504) [ 1273.758084][T13433] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 1273.766333][T13433] F2FS-fs (loop6): heap/no_heap options were deprecated [ 1273.774128][T13433] F2FS-fs (loop6): invalid crc value [ 1273.780830][T13433] F2FS-fs (loop6): Found nat_bits in checkpoint [ 1273.807760][T13433] F2FS-fs (loop6): Start checkpoint disabled! [ 1273.814846][T13433] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 1273.822059][T13433] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 1273.836416][ T28] audit: type=1400 audit(2000002423.163:2055): avc: denied { rename } for pid=13432 comm="syz.6.3280" name="control" dev="loop6" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 1273.867778][ T7234] kworker/u4:18: attempt to access beyond end of device [ 1273.867778][ T7234] loop6: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 1273.927455][T13438] loop6: detected capacity change from 0 to 256 [ 1273.935109][T13438] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1273.947640][T13438] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010364, chksum : 0x44009a1b, utbl_chksum : 0xe619d30d) [ 1273.962462][ T28] audit: type=1400 audit(2000002423.283:2056): avc: denied { write } for pid=13437 comm="syz.6.3281" name="/" dev="loop6" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1273.984624][ T28] audit: type=1400 audit(2000002423.293:2057): avc: denied { remove_name } for pid=13437 comm="syz.6.3281" name="file1" dev="loop6" ino=1048737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1274.008007][ T28] audit: type=1400 audit(2000002423.293:2058): avc: denied { unlink } for pid=13437 comm="syz.6.3281" name="file1" dev="loop6" ino=1048737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1274.038259][ T28] audit: type=1400 audit(2000002423.363:2059): avc: denied { write } for pid=13439 comm="syz.6.3282" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 1274.062589][T11295] konepure 0003:1E7D:2DB4.0013: unknown main item tag 0x0 [ 1274.070720][T11606] plantronics 0003:047F:FFFF.0014: collection stack underflow [ 1274.078301][T11295] konepure 0003:1E7D:2DB4.0013: unknown main item tag 0x0 [ 1274.085454][T11606] plantronics 0003:047F:FFFF.0014: item 0 0 0 12 parsing failed [ 1274.093163][T11295] konepure 0003:1E7D:2DB4.0013: unknown main item tag 0x2 [ 1274.100443][T11606] plantronics 0003:047F:FFFF.0014: parse failed [ 1274.106734][T11295] konepure 0003:1E7D:2DB4.0013: item fetching failed at offset 3/4 [ 1274.114731][T11295] konepure 0003:1E7D:2DB4.0013: parse failed [ 1274.120789][T11606] plantronics: probe of 0003:047F:FFFF.0014 failed with error -22 [ 1274.130055][T11295] konepure: probe of 0003:1E7D:2DB4.0013 failed with error -22 [ 1274.273981][ T393] usb 5-1: USB disconnect, device number 23 [ 1274.280066][T11295] usb 3-1: USB disconnect, device number 36 [ 1274.435697][T11612] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 1274.446633][T11612] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1274.455957][T11612] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1274.466748][T11612] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 1274.476444][T11612] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 1274.486721][T11612] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1274.496307][T11612] smsc75xx: probe of 6-1:0.184 failed with error -71 [ 1274.505228][T11612] usb 6-1: USB disconnect, device number 27 [ 1274.704086][T13452] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3288'. [ 1274.888608][T13472] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3293'. [ 1274.913790][T13472] Invalid ELF header magic: != ELF [ 1275.676133][T13481] loop6: detected capacity change from 0 to 131072 [ 1275.720834][T13481] F2FS-fs (loop6): Wrong CP boundary, start(512) end(1536) blocks(0) [ 1275.729603][T13481] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 1275.754696][T13481] F2FS-fs (loop6): invalid crc value [ 1275.836208][T13481] F2FS-fs (loop6): Found nat_bits in checkpoint [ 1275.877151][T13481] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 1275.884243][T13481] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 1275.901107][ T28] audit: type=1400 audit(2000002425.224:2060): avc: denied { rename } for pid=13478 comm="syz.6.3301" name="file0" dev="loop6" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1276.144268][ T393] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 1276.341198][ T393] usb 5-1: config 0 has no interfaces? [ 1276.357791][ T393] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1276.386627][ T393] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1276.414940][ T393] usb 5-1: Manufacturer: syz [ 1276.486943][ T393] usb 5-1: config 0 descriptor?? [ 1276.595177][T13502] syz.2.3306[13502] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1276.595471][T13502] syz.2.3306[13502] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1276.612371][T13502] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1277.081718][T13509] loop6: detected capacity change from 0 to 512 [ 1277.210722][T13509] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1277.246104][T13509] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1277.463371][T11612] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1277.762776][T13528] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3315'. [ 1277.788486][T13528] Invalid ELF header magic: != ELF [ 1278.246617][T11612] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1278.466585][T13529] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3314'. [ 1278.584655][ T6528] usb 5-1: USB disconnect, device number 24 [ 1279.711810][T13129] EXT4-fs (loop6): unmounting filesystem. [ 1279.748016][ T28] audit: type=1400 audit(2000002429.076:2061): avc: denied { setcurrent } for pid=13544 comm="syz.6.3319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1279.854518][ T28] audit: type=1400 audit(2000002429.186:2062): avc: denied { mounton } for pid=13557 comm="syz.5.3326" path="/622/file0" dev="tmpfs" ino=3514 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 1280.082538][T13565] syz.6.3323[13565] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1280.082609][T13565] syz.6.3323[13565] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1280.192350][T13565] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1280.748283][T13577] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3329'. [ 1280.775150][T13577] Invalid ELF header magic: != ELF [ 1281.051254][T13591] loop6: detected capacity change from 0 to 16 [ 1281.064930][T13591] erofs: (device loop6): mounted with root inode @ nid 36. [ 1281.079745][ T28] audit: type=1400 audit(2000002430.406:2063): avc: denied { read } for pid=13590 comm="syz.6.3338" name="file1" dev="loop6" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 1281.113571][T13595] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3339'. [ 1281.241739][ T6528] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 1282.450211][T13608] syz.6.3343[13608] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1282.451393][T13608] syz.6.3343[13608] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1282.498877][T13608] loop6: detected capacity change from 0 to 128 [ 1283.989847][ T6528] usb 5-1: config 0 has no interfaces? [ 1283.997250][ T6528] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1284.007251][ T6528] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1284.144764][ T6528] usb 5-1: Manufacturer: syz [ 1284.196918][T13608] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1284.206376][T13608] ext4 filesystem being mounted at /37/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1284.224091][T13608] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1284.278475][ T6528] usb 5-1: config 0 descriptor?? [ 1284.324874][ T6528] usb 5-1: can't set config #0, error -71 [ 1284.420451][ T6528] usb 5-1: USB disconnect, device number 25 [ 1284.484878][T13614] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3346'. [ 1284.509167][T13129] EXT4-fs (loop6): unmounting filesystem. [ 1284.652281][T13625] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3345'. [ 1284.670133][T13619] loop6: detected capacity change from 0 to 40427 [ 1284.677061][T13625] Invalid ELF header magic: != ELF [ 1284.686434][T13619] F2FS-fs (loop6): fault_injection options not supported [ 1284.694230][T13619] F2FS-fs (loop6): invalid crc value [ 1284.705471][T13619] F2FS-fs (loop6): Found nat_bits in checkpoint [ 1284.738839][T13619] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 1284.772087][ T28] audit: type=1400 audit(2000002434.108:2064): avc: denied { create } for pid=13618 comm="syz.6.3347" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 1284.814254][ T6528] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 1284.823043][T13129] syz-executor: attempt to access beyond end of device [ 1284.823043][T13129] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1285.009996][ T6528] usb 5-1: Using ep0 maxpacket: 32 [ 1285.017113][ T6528] usb 5-1: config 0 has no interfaces? [ 1285.048535][T13642] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3351'. [ 1285.063672][ T6528] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1285.107023][ T6528] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1285.178213][ T6528] usb 5-1: Product: syz [ 1285.183031][ T6528] usb 5-1: Manufacturer: syz [ 1285.188719][ T6528] usb 5-1: SerialNumber: syz [ 1285.223512][ T6528] usb 5-1: config 0 descriptor?? [ 1285.373799][T13652] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1285.387148][ T7234] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 1285.395706][ T7234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1285.405019][ T7234] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 1285.415394][ T7234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1285.424108][ T7234] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1285.437494][ T7234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1285.446361][ T7234] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1285.454987][ T7234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1285.500625][ T39] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 1285.563251][T13662] loop6: detected capacity change from 0 to 1024 [ 1285.579903][T13662] EXT4-fs: Ignoring removed i_version option [ 1285.586999][T13662] EXT4-fs (loop6): Test dummy encryption mode enabled [ 1285.602114][T13662] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1285.644129][T13612] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1285.654559][T13612] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1285.669646][T11606] usb 5-1: USB disconnect, device number 26 [ 1285.700869][ T39] usb 6-1: config 0 has no interfaces? [ 1285.707586][T13669] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3363'. [ 1285.785812][ T39] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1285.826292][ T39] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1285.844203][ T39] usb 6-1: Manufacturer: syz [ 1285.853420][ T39] usb 6-1: config 0 descriptor?? [ 1285.917183][T13674] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3360'. [ 1286.347459][T13685] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3368'. [ 1286.367615][T13685] Invalid ELF header magic: != ELF [ 1286.470362][ T28] audit: type=1326 audit(2000002435.809:2065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13686 comm="syz.2.3369" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff66238ebe9 code=0x0 [ 1286.496332][T13129] EXT4-fs (loop6): unmounting filesystem. [ 1286.510855][T13689] netlink: 'syz.6.3370': attribute type 11 has an invalid length. [ 1286.518730][T13689] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3370'. [ 1286.528065][T11606] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 1286.626860][T13691] loop6: detected capacity change from 0 to 40427 [ 1286.635840][T13691] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 1286.643791][T13691] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 1286.652892][T13691] F2FS-fs (loop6): invalid crc value [ 1286.659465][T13691] F2FS-fs (loop6): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669) [ 1286.672017][T13691] F2FS-fs (loop6): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 1286.691151][T13691] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 1286.698235][T13691] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 1286.719038][T11606] usb 5-1: Using ep0 maxpacket: 16 [ 1286.725085][T13691] syz.6.3371: attempt to access beyond end of device [ 1286.725085][T13691] loop6: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 1286.741229][T11606] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1286.750037][T11606] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1286.761553][T11606] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1286.774030][T11606] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1286.783331][T11606] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1286.791385][T11606] usb 5-1: Product: syz [ 1286.795636][T11606] usb 5-1: Manufacturer: syz [ 1286.800282][T11606] usb 5-1: SerialNumber: syz [ 1286.844591][T13698] loop6: detected capacity change from 0 to 1024 [ 1286.851728][T13698] EXT4-fs: Ignoring removed i_version option [ 1286.858776][T13698] EXT4-fs (loop6): Test dummy encryption mode enabled [ 1286.868318][T13698] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1286.939585][T13700] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3372'. [ 1287.207439][T11606] usb 5-1: 0:2 : does not exist [ 1287.274888][T13705] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3373'. [ 1287.720307][T13129] EXT4-fs (loop6): unmounting filesystem. [ 1287.738469][ T6528] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 1287.755573][T13711] loop6: detected capacity change from 0 to 8192 [ 1287.763667][ T28] audit: type=1400 audit(2000002437.100:2066): avc: denied { mount } for pid=13710 comm="syz.6.3376" name="/" dev="loop6" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 1287.810937][T11606] usb 5-1: USB disconnect, device number 27 [ 1287.892327][ T39] usb 6-1: USB disconnect, device number 28 [ 1287.939399][ T6528] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1287.942454][T13711] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000ff00) [ 1287.958425][T13711] FAT-fs (loop6): Filesystem has been set read-only [ 1287.958452][ T6528] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1287.978318][ T6528] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1287.991474][ T6528] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1288.001198][ T6528] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1288.018627][ T6528] usb 3-1: config 0 descriptor?? [ 1288.467737][T13722] loop6: detected capacity change from 0 to 40427 [ 1288.482073][T13722] F2FS-fs (loop6): invalid crc value [ 1288.499190][T13722] F2FS-fs (loop6): Found nat_bits in checkpoint [ 1288.533192][T13722] F2FS-fs (loop6): Start checkpoint disabled! [ 1288.548532][T13722] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 1288.558318][T13709] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1288.572772][T13709] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1288.582849][ T6528] usbhid 3-1:0.0: can't add hid device: -71 [ 1288.589672][ T6528] usbhid: probe of 3-1:0.0 failed with error -71 [ 1288.598346][ T6528] usb 3-1: USB disconnect, device number 37 [ 1288.640700][ T524] kworker/u4:7: attempt to access beyond end of device [ 1288.640700][ T524] loop6: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 1288.688610][T13737] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3384'. [ 1288.906942][T13740] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13740 comm=syz.6.3385 [ 1289.179457][T13747] loop6: detected capacity change from 0 to 40427 [ 1289.195814][T13747] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 1289.205160][T13747] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 1289.221357][T13747] F2FS-fs (loop6): Found nat_bits in checkpoint [ 1289.264518][T13747] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 1289.271680][T13747] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 1289.338777][T13763] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3389'. [ 1289.348962][T13129] syz-executor: attempt to access beyond end of device [ 1289.348962][T13129] loop6: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 1289.457213][T13765] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1289.497417][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1289.541582][T13769] loop6: detected capacity change from 0 to 128 [ 1289.646916][T13774] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13774 comm=syz.4.3398 [ 1289.998268][T13778] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3399'. [ 1290.008462][T13778] tipc: Enabling of bearer rejected, failed to enable media [ 1290.219343][T13800] input: syz1 as /devices/virtual/input/input27 [ 1290.231571][T13801] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13801 comm=syz.0.3410 [ 1290.367196][T11606] usb 5-1: new full-speed USB device number 28 using dummy_hcd [ 1290.441538][T13822] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3416'. [ 1290.452118][T13823] loop6: detected capacity change from 0 to 256 [ 1290.537074][T11612] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 1290.548222][T11606] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1290.560602][T11606] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1290.569798][T11606] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1290.581452][T11606] usb 5-1: config 0 descriptor?? [ 1290.586654][T13787] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1290.600666][T13830] loop6: detected capacity change from 0 to 1024 [ 1290.615341][T13830] EXT4-fs: Ignoring removed i_version option [ 1290.621913][T13830] EXT4-fs (loop6): Test dummy encryption mode enabled [ 1290.634377][T13830] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1290.689725][T13830] bridge0: port 3(vlan2) entered blocking state [ 1290.696040][T13830] bridge0: port 3(vlan2) entered disabled state [ 1290.716484][T13833] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13833 comm=syz.2.3422 [ 1290.727974][T11612] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1290.742232][T11612] usb 6-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 1290.751346][T11612] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1290.761090][T11612] usb 6-1: config 0 descriptor?? [ 1291.001145][T11606] hid-generic 0003:04F3:0755.0015: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.4-1/input0 [ 1291.278154][ T39] usb 5-1: USB disconnect, device number 28 [ 1291.413923][T13129] EXT4-fs (loop6): unmounting filesystem. [ 1291.426071][T11612] sony 0003:054C:024B.0016: hiddev96,hidraw0: USB HID v0.00 Device [HID 054c:024b] on usb-dummy_hcd.5-1/input0 [ 1291.437898][T11612] sony 0003:054C:024B.0016: failed to claim input [ 1291.447184][T11612] usb 6-1: USB disconnect, device number 29 [ 1291.484663][T13863] fido_id[13863]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1291.525785][T13859] overlayfs: failed to clone upperpath [ 1292.240712][T13888] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3440'. [ 1292.266082][T13888] Invalid ELF header magic: != ELF [ 1292.373444][T13892] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3442'. [ 1292.586063][T11295] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1292.767008][T11295] usb 7-1: config 220 has an invalid interface number: 76 but max is 2 [ 1292.775335][T11295] usb 7-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1292.784226][T11295] usb 7-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1292.794532][T11295] usb 7-1: config 220 has no interface number 2 [ 1292.800826][T11295] usb 7-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1292.814003][T11295] usb 7-1: config 220 interface 0 has no altsetting 0 [ 1292.820789][T11295] usb 7-1: config 220 interface 76 has no altsetting 0 [ 1292.827676][T11295] usb 7-1: config 220 interface 1 has no altsetting 0 [ 1292.835733][T11295] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1292.844813][T11295] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1292.852840][T11295] usb 7-1: Product: syz [ 1292.857023][T11295] usb 7-1: Manufacturer: syz [ 1292.861627][T11295] usb 7-1: SerialNumber: syz [ 1292.925849][ T39] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 1293.071615][T11295] usb 7-1: selecting invalid altsetting 0 [ 1293.077783][T11295] usb 7-1: Found UVC 7.01 device syz (8086:0b07) [ 1293.084306][T11295] usb 7-1: No valid video chain found. [ 1293.135758][ T39] usb 5-1: Using ep0 maxpacket: 16 [ 1293.142772][ T39] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1293.156379][T13908] overlayfs: missing 'lowerdir' [ 1293.163573][ T39] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1293.175157][ T39] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1293.189280][ T39] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1293.199020][ T39] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1293.285481][T11295] usb 7-1: USB disconnect, device number 3 [ 1293.308434][ T39] usb 5-1: config 0 descriptor?? [ 1293.345713][T11612] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 1293.389657][T13911] overlayfs: failed to clone upperpath [ 1293.535589][T11612] usb 6-1: Using ep0 maxpacket: 32 [ 1293.546288][T11612] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1293.565686][T11612] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1293.575445][T11612] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1293.584633][T11612] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1293.593243][T11612] usb 6-1: config 0 descriptor?? [ 1293.724914][ T39] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 1293.732265][ T39] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 1293.739712][ T39] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 1293.747179][ T39] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 1293.754459][ T39] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 1293.761950][ T39] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 1293.769721][ T39] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 1293.777798][ T39] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 1293.785265][ T39] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 1293.793533][ T39] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 1293.823821][T13915] loop6: detected capacity change from 0 to 128 [ 1294.134275][ T39] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0017/input/input28 [ 1294.165976][T13915] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1294.175486][T13915] ext4 filesystem being mounted at /58/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1294.196804][T13915] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1294.320591][ T39] microsoft 0003:045E:07DA.0017: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 1294.426190][ T39] usb 5-1: USB disconnect, device number 29 [ 1294.591599][T13920] fido_id[13920]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 1294.646970][T13129] EXT4-fs (loop6): unmounting filesystem. [ 1294.654089][T11612] savu 0003:1E7D:2D5A.0018: hiddev96,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.5-1/input0 [ 1294.842812][T13936] loop6: detected capacity change from 0 to 1024 [ 1294.853407][T13936] EXT4-fs: Ignoring removed i_version option [ 1294.866751][T11612] usb 6-1: USB disconnect, device number 30 [ 1294.876169][T13936] EXT4-fs (loop6): Test dummy encryption mode enabled [ 1294.912114][T13936] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1295.060397][T13946] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3458'. [ 1295.144941][ T28] audit: type=1400 audit(2000002444.483:2067): avc: denied { create } for pid=13949 comm="syz.2.3460" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1295.202076][ T28] audit: type=1400 audit(2000002444.483:2068): avc: denied { write } for pid=13949 comm="syz.2.3460" name="file0" dev="tmpfs" ino=3546 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1295.231522][T13952] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3457'. [ 1295.280848][ T28] audit: type=1400 audit(2000002444.593:2069): avc: denied { unlink } for pid=287 comm="syz-executor" name="file0" dev="tmpfs" ino=3546 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1296.830151][T13129] EXT4-fs (loop6): unmounting filesystem. [ 1296.893076][T13980] overlayfs: failed to resolve './file1/file0': -2 [ 1297.070580][T13991] loop6: detected capacity change from 0 to 1024 [ 1297.091265][T13991] EXT4-fs: Ignoring removed i_version option [ 1297.133600][T13987] overlayfs: failed to clone lowerpath [ 1297.141438][T13991] EXT4-fs (loop6): Test dummy encryption mode enabled [ 1297.155307][T13978] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3470'. [ 1297.167907][T13991] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1297.433221][T14008] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3474'. [ 1297.973467][T11612] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 1298.074817][T13129] EXT4-fs (loop6): unmounting filesystem. [ 1298.101189][T14033] input: syz1 as /devices/virtual/input/input29 [ 1298.107901][T14033] input: failed to attach handler leds to device input29, error: -6 [ 1298.111736][ T28] audit: type=1400 audit(2000002447.455:2070): avc: denied { read } for pid=14034 comm="syz.4.3492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1298.336124][ T28] audit: type=1400 audit(2000002447.675:2071): avc: denied { setopt } for pid=14034 comm="syz.4.3492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1298.351632][T11612] usb 6-1: Using ep0 maxpacket: 32 [ 1298.368188][T11612] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1298.379238][T11612] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1298.390507][T11612] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1298.399739][T11612] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1298.408767][T11612] usb 6-1: config 0 descriptor?? [ 1298.413331][T14045] loop6: detected capacity change from 0 to 1024 [ 1298.414876][T11612] hub 6-1:0.0: USB hub found [ 1298.420426][T14045] EXT4-fs: Ignoring removed i_version option [ 1298.437082][T14045] EXT4-fs (loop6): Test dummy encryption mode enabled [ 1298.452505][T14045] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1298.523769][T14055] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3495'. [ 1298.615049][T11612] hub 6-1:0.0: 1 port detected [ 1298.704555][T14063] syz.2.3499[14063] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1298.704667][T14063] syz.2.3499[14063] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1298.718494][T14063] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1299.220686][T11612] hub 6-1:0.0: activate --> -90 [ 1299.274347][T13129] EXT4-fs (loop6): unmounting filesystem. [ 1299.363133][T14072] sch_fq: defrate 0 ignored. [ 1299.378699][ T28] audit: type=1400 audit(2000002448.715:2072): avc: denied { add_name } for pid=14073 comm="syz.6.3504" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1299.409060][T13129] ------------[ cut here ]------------ [ 1299.414653][T13129] WARNING: CPU: 0 PID: 13129 at fs/inode.c:332 drop_nlink+0xc5/0x110 [ 1299.422883][T13129] Modules linked in: [ 1299.426882][T13129] CPU: 0 PID: 13129 Comm: syz-executor Not tainted syzkaller #0 [ 1299.434614][T13129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1299.444742][T13129] RIP: 0010:drop_nlink+0xc5/0x110 [ 1299.449817][T13129] Code: 1b 48 8d bb b8 04 00 00 be 08 00 00 00 e8 03 ea f0 ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 8b 85 ac ff <0f> 0b eb 86 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 5e ff ff ff 4c [ 1299.469507][T13129] RSP: 0018:ffffc90001217c38 EFLAGS: 00010293 [ 1299.470732][ T28] audit: type=1400 audit(2000002448.715:2073): avc: denied { associate } for pid=14073 comm="syz.6.3504" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1299.475618][T13129] RAX: ffffffff81c383e5 RBX: ffff888132ba9730 RCX: ffff888110755100 [ 1299.475634][T13129] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1299.499900][ T28] audit: type=1400 audit(2000002448.715:2074): avc: denied { rename } for pid=14073 comm="syz.6.3504" name="file0" dev="incremental-fs" ino=412 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1299.505554][T13129] RBP: ffffc90001217c60 R08: 0000000000000004 R09: 0000000000000003 [ 1299.513897][ T28] audit: type=1400 audit(2000002448.715:2075): avc: denied { reparent } for pid=14073 comm="syz.6.3504" name="file0" dev="incremental-fs" ino=412 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1299.536754][T13129] R10: fffff52000242f78 R11: 1ffff92000242f78 R12: dffffc0000000000 [ 1299.536772][T13129] R13: 1ffff110265752ef R14: ffff888132ba9778 R15: 0000000000000000 [ 1299.584084][T13129] FS: 00005555703c4500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 1299.593038][T13129] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1299.599665][T13129] CR2: 00005555703e74e8 CR3: 000000012bf76000 CR4: 00000000003506b0 [ 1299.607682][T13129] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1299.615684][T13129] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1299.623687][T13129] Call Trace: [ 1299.626970][T13129] [ 1299.629902][T13129] shmem_rmdir+0x5b/0x90 [ 1299.634177][T13129] vfs_rmdir+0x393/0x500 [ 1299.638430][T13129] incfs_kill_sb+0x105/0x220 [ 1299.643092][T13129] deactivate_locked_super+0xb5/0x120 [ 1299.648481][T13129] deactivate_super+0xaf/0xe0 [ 1299.653236][T13129] cleanup_mnt+0x45f/0x4e0 [ 1299.657665][T13129] __cleanup_mnt+0x19/0x20 [ 1299.662104][T13129] task_work_run+0x1db/0x240 [ 1299.666852][T13129] ? __cfi_task_work_run+0x10/0x10 [ 1299.671981][T13129] ? __x64_sys_umount+0x125/0x160 [ 1299.677063][T13129] ? __cfi___x64_sys_umount+0x10/0x10 [ 1299.682483][T13129] exit_to_user_mode_loop+0x9b/0xb0 [ 1299.687689][T13129] exit_to_user_mode_prepare+0x5a/0xa0 [ 1299.693211][T13129] syscall_exit_to_user_mode+0x1a/0x30 [ 1299.698686][T13129] do_syscall_64+0x58/0xa0 [ 1299.703152][T13129] ? clear_bhb_loop+0x30/0x80 [ 1299.707841][T13129] ? clear_bhb_loop+0x30/0x80 [ 1299.712640][T13129] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1299.718566][T13129] RIP: 0033:0x7fc8fa98ff17 [ 1299.723065][T13129] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 1299.742731][T13129] RSP: 002b:00007ffdea639898 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1299.751165][T13129] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fc8fa98ff17 [ 1299.759196][T13129] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdea639950 [ 1299.767205][T13129] RBP: 00007ffdea639950 R08: 0000000000000000 R09: 0000000000000000 [ 1299.775206][T13129] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffdea63a9e0 [ 1299.783211][T13129] R13: 00007fc8faa11c05 R14: 000000000013d4ca R15: 00007ffdea63aa20 [ 1299.791195][T13129] [ 1299.794269][T13129] ---[ end trace 0000000000000000 ]--- [ 1299.842017][T14076] overlayfs: failed to resolve './file1': -2 [ 1299.850274][ T393] usb 6-1: USB disconnect, device number 31 [ 1299.858727][T13129] ================================================================== [ 1299.866798][T13129] BUG: KASAN: null-ptr-deref in ihold+0x20/0x60 [ 1299.873039][T13129] Write of size 4 at addr 0000000000000170 by task syz-executor/13129 [ 1299.881188][T13129] [ 1299.883501][T13129] CPU: 1 PID: 13129 Comm: syz-executor Tainted: G W syzkaller #0 [ 1299.892598][T13129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1299.902645][T13129] Call Trace: [ 1299.905915][T13129] [ 1299.908836][T13129] __dump_stack+0x21/0x24 [ 1299.913167][T13129] dump_stack_lvl+0xee/0x150 [ 1299.917762][T13129] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1299.922795][T13129] ? ihold+0x20/0x60 [ 1299.926692][T13129] ? ihold+0x20/0x60 [ 1299.930584][T13129] print_report+0x3d/0x60 [ 1299.934912][T13129] kasan_report+0x122/0x150 [ 1299.939415][T13129] ? ihold+0x20/0x60 [ 1299.943304][T13129] kasan_check_range+0x280/0x290 [ 1299.948239][T13129] __kasan_check_write+0x14/0x20 [ 1299.953178][T13129] ihold+0x20/0x60 [ 1299.956893][T13129] vfs_rmdir+0x25f/0x500 [ 1299.961131][T13129] incfs_kill_sb+0x105/0x220 [ 1299.965722][T13129] deactivate_locked_super+0xb5/0x120 [ 1299.971088][T13129] deactivate_super+0xaf/0xe0 [ 1299.975764][T13129] cleanup_mnt+0x45f/0x4e0 [ 1299.980186][T13129] __cleanup_mnt+0x19/0x20 [ 1299.984614][T13129] task_work_run+0x1db/0x240 [ 1299.989214][T13129] ? __cfi_task_work_run+0x10/0x10 [ 1299.994328][T13129] ? __x64_sys_umount+0x125/0x160 [ 1299.999353][T13129] ? __cfi___x64_sys_umount+0x10/0x10 [ 1300.004727][T13129] exit_to_user_mode_loop+0x9b/0xb0 [ 1300.009925][T13129] exit_to_user_mode_prepare+0x5a/0xa0 [ 1300.015386][T13129] syscall_exit_to_user_mode+0x1a/0x30 [ 1300.020845][T13129] do_syscall_64+0x58/0xa0 [ 1300.025258][T13129] ? clear_bhb_loop+0x30/0x80 [ 1300.029931][T13129] ? clear_bhb_loop+0x30/0x80 [ 1300.034602][T13129] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1300.040494][T13129] RIP: 0033:0x7fc8fa98ff17 [ 1300.044902][T13129] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 1300.064501][T13129] RSP: 002b:00007ffdea639898 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1300.072912][T13129] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fc8fa98ff17 [ 1300.080873][T13129] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdea639950 [ 1300.088835][T13129] RBP: 00007ffdea639950 R08: 0000000000000000 R09: 0000000000000000 [ 1300.096800][T13129] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffdea63a9e0 [ 1300.104767][T13129] R13: 00007fc8faa11c05 R14: 000000000013d4ca R15: 00007ffdea63aa20 [ 1300.112782][T13129] [ 1300.115793][T13129] ================================================================== [ 1300.126453][T13129] Disabling lock debugging due to kernel taint [ 1300.132781][T13129] BUG: kernel NULL pointer dereference, address: 0000000000000170 [ 1300.140583][T13129] #PF: supervisor write access in kernel mode [ 1300.146624][T13129] #PF: error_code(0x0002) - not-present page [ 1300.152582][T13129] PGD 1103e3067 P4D 1103e3067 PUD 0 [ 1300.157851][T13129] Oops: 0002 [#1] PREEMPT SMP KASAN [ 1300.163033][T13129] CPU: 0 PID: 13129 Comm: syz-executor Tainted: G B W syzkaller #0 [ 1300.172118][T13129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1300.182152][T13129] RIP: 0010:ihold+0x26/0x60 [ 1300.186636][T13129] Code: 33 36 7c df 55 48 89 e5 41 56 53 48 89 fb e8 f1 7c ac ff 48 8d bb 70 01 00 00 be 04 00 00 00 e8 40 e1 f0 ff 41 be 01 00 00 00 44 0f c1 b3 70 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 e1 [ 1300.206218][T13129] RSP: 0018:ffffc90001217c78 EFLAGS: 00010246 [ 1300.212273][T13129] RAX: ffff888110755100 RBX: 0000000000000000 RCX: ffff888110755100 [ 1300.220224][T13129] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1300.228173][T13129] RBP: ffffc90001217c88 R08: dffffc0000000000 R09: fffffbfff0f2d4fd [ 1300.236126][T13129] R10: fffffbfff0f2d4fd R11: 1ffffffff0f2d4fc R12: ffff888132ba973c [ 1300.244076][T13129] R13: dffffc0000000000 R14: 0000000000000001 R15: 0000000000000000 [ 1300.252034][T13129] FS: 00005555703c4500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 1300.260954][T13129] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1300.267512][T13129] CR2: 0000000000000170 CR3: 000000012bf76000 CR4: 00000000003506b0 [ 1300.275462][T13129] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1300.283425][T13129] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1300.291371][T13129] Call Trace: [ 1300.294631][T13129] [ 1300.297540][T13129] vfs_rmdir+0x25f/0x500 [ 1300.301759][T13129] incfs_kill_sb+0x105/0x220 [ 1300.306322][T13129] deactivate_locked_super+0xb5/0x120 [ 1300.311669][T13129] deactivate_super+0xaf/0xe0 [ 1300.316318][T13129] cleanup_mnt+0x45f/0x4e0 [ 1300.320714][T13129] __cleanup_mnt+0x19/0x20 [ 1300.325195][T13129] task_work_run+0x1db/0x240 [ 1300.329765][T13129] ? __cfi_task_work_run+0x10/0x10 [ 1300.334850][T13129] ? __x64_sys_umount+0x125/0x160 [ 1300.339855][T13129] ? __cfi___x64_sys_umount+0x10/0x10 [ 1300.345200][T13129] exit_to_user_mode_loop+0x9b/0xb0 [ 1300.350387][T13129] exit_to_user_mode_prepare+0x5a/0xa0 [ 1300.355816][T13129] syscall_exit_to_user_mode+0x1a/0x30 [ 1300.361266][T13129] do_syscall_64+0x58/0xa0 [ 1300.365650][T13129] ? clear_bhb_loop+0x30/0x80 [ 1300.370299][T13129] ? clear_bhb_loop+0x30/0x80 [ 1300.375064][T13129] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1300.380951][T13129] RIP: 0033:0x7fc8fa98ff17 [ 1300.385340][T13129] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 1300.404919][T13129] RSP: 002b:00007ffdea639898 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1300.413305][T13129] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fc8fa98ff17 [ 1300.421252][T13129] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdea639950 [ 1300.429196][T13129] RBP: 00007ffdea639950 R08: 0000000000000000 R09: 0000000000000000 [ 1300.437141][T13129] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffdea63a9e0 [ 1300.445089][T13129] R13: 00007fc8faa11c05 R14: 000000000013d4ca R15: 00007ffdea63aa20 [ 1300.453040][T13129] [ 1300.456036][T13129] Modules linked in: [ 1300.459915][T13129] CR2: 0000000000000170 [ 1300.464038][T13129] ---[ end trace 0000000000000000 ]--- [ 1300.469466][T13129] RIP: 0010:ihold+0x26/0x60 [ 1300.473942][T13129] Code: 33 36 7c df 55 48 89 e5 41 56 53 48 89 fb e8 f1 7c ac ff 48 8d bb 70 01 00 00 be 04 00 00 00 e8 40 e1 f0 ff 41 be 01 00 00 00 44 0f c1 b3 70 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 e1 [ 1300.493519][T13129] RSP: 0018:ffffc90001217c78 EFLAGS: 00010246 [ 1300.499559][T13129] RAX: ffff888110755100 RBX: 0000000000000000 RCX: ffff888110755100 [ 1300.507504][T13129] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1300.515448][T13129] RBP: ffffc90001217c88 R08: dffffc0000000000 R09: fffffbfff0f2d4fd [ 1300.523395][T13129] R10: fffffbfff0f2d4fd R11: 1ffffffff0f2d4fc R12: ffff888132ba973c [ 1300.531347][T13129] R13: dffffc0000000000 R14: 0000000000000001 R15: 0000000000000000 [ 1300.539288][T13129] FS: 00005555703c4500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 1300.548191][T13129] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1300.554747][T13129] CR2: 0000000000000170 CR3: 000000012bf76000 CR4: 00000000003506b0 [ 1300.562693][T13129] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1300.570636][T13129] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1300.578581][T13129] Kernel panic - not syncing: Fatal exception [ 1300.584827][T13129] Kernel Offset: disabled [ 1300.589132][T13129] Rebooting in 86400 seconds..